last executing test programs: 19.602575282s ago: executing program 4 (id=1595): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x1, 0x1, 0x1}, 0x20) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e"}}}}, 0x3b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r7, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r8, 0x8934, &(0x7f0000000100)={'vlan0\x00', @ifru_flags=0x200}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x5, 0x3, 0x2, 0x1, 0xc6e5, 0x8, 0x1}, 0x1c) 18.561506625s ago: executing program 4 (id=1603): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001800)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800460000340000000000069078ac1414bbac1414aa44040d634e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0351000000000000000000010000000dc5237721"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.372695456s ago: executing program 4 (id=1604): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x7a1c82, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@alu={0x4, 0x0, 0x5, 0x7, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xec, 0xca, 0xa02a, 0x400, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xe}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000040)}, 0x20) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9], 0x3c}}, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) (async, rerun: 32) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073110a000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0xfffffffd) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) 16.930497105s ago: executing program 4 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x220, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x47, 0x3}, {0x9, 0x6}, {0x0, 0x3}, {0xff, 0x1}, {0x0, 0x3}, {0x9, 0x2}, {0x5, 0x1}, {0x3, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0xbd, 0x4}, {0xf, 0x4}, {0x2, 0x7}, {0x7f, 0x1}, {0x3, 0x3}, {0x2, 0x4}, {0x7}, {0x6, 0x6}, {0x2}], "735c0a33e9273904"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008010}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000200)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1412, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl(r4, 0x5, &(0x7f0000000340)="09eaf96b8ddacf262c8f2d6468ad") ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000380)={0x7, 0x100}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x67}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x855}, 0x20004044) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000005c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x1a0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x57, 0x6, "0854f43d68973735717fbe3e126403a61dc2b97729ac4577c44b1ca05103ac67b716cb1198fc04ff00f301b90ae04562e82c2e838f9bd4bef1fc8f00b15c25c7e0112eac3f30da8f02bbdc5302ee53c8227e3d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "ccdc7d8d277bb9b845cb34cc0c633ea89c5c2359267f8c81c863215d527917043dfb552de7a152d3732b81022c19cd051fbf07ba480b321231ab8ebcbff29d92da40b44728c529bdf787f193662b2946832690f776756b9de2c48f2478f329d0c9ee1606f309fd0e191c583217e2e98ec57321e626e6313540d15565b3e8c426887a2a47f6d1ad50313ce0c1dbcf7fb741a823cf0c373635c9825bbcee35a5111418343ee823e96f34c5ac788728a510d7ca2608d15688e359d19276ba2611f05494eba11007fedb0dbaff35f20d4e6db7bf6d0d8c6f6ff17a846b191596289e4cc1d8ad6c0660c665a2e657eb04aa47953b0870edc8662224"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x1) connect$rds(r4, &(0x7f0000000980)={0x2, 0x4e20, @broadcast}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x48000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000b80)={'filter\x00', 0x0, 0x3, 0x62, [0x9, 0x8, 0x7, 0xffffffffffffffe6, 0x4, 0x10], 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=""/98}, &(0x7f0000000c00)=0x78) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x2, 0x0, @private}, &(0x7f0000000d80)=0x10) getsockopt$inet_buf(r8, 0x0, 0x3f, &(0x7f0000000dc0)=""/78, &(0x7f0000000e40)=0x4e) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4088c}, 0x804c000) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001040), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, r11, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x800) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 16.301356233s ago: executing program 4 (id=1614): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x18, 0xcc040}, 0x64004084) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) unshare(0x20000400) bind$unix(r4, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x82316000) 15.575287446s ago: executing program 4 (id=1619): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {}, {}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = gettid() r8 = socket$inet(0x2, 0x2, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000280)="c1188e99b95d02ff4284860188a8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r10, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000300)=0x6) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x38}, 0x42090) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 11.386648529s ago: executing program 2 (id=1640): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="bf00"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x6, 0x2, 0xd, 0x7}, 0x0, &(0x7f0000000440)={0xc, 0x7, 0x7ffffffd, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 11.055872399s ago: executing program 2 (id=1642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0xfffffffe, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xac}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r7 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000000)={{{@in=@private=0xa010100, @in=@loopback, 0x4e20, 0x401, 0x4e22, 0x0, 0xa, 0x0, 0x1a0, 0x88}, {0x4, 0x7, 0x100, 0x7, 0x8, 0xfa1, 0x4, 0x6}, {0xffff, 0x2, 0x9, 0x6}, 0x400, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d3, 0x33}, 0x2, @in=@loopback, 0x3500, 0x3, 0x3, 0xff, 0x2, 0x64, 0x91}}, 0xe8) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x5, 0x80000001, 0x7fffffff, 0x29fb, 0x6, 0x5, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007fffe00d606feff0ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000140)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@RTM_NEWNSID={0x24, 0x58, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) 7.94326591s ago: executing program 0 (id=1652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x80000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) recvfrom$inet6(r1, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) epoll_create(0x8000a67) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x15, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000005200bf952cbd7000fbdbdf25f5ff0000"], 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '@/\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf730041e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0xe, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 4.736211643s ago: executing program 3 (id=1658): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r5, 0x88, 0x68, 0x0, 0xfffffffffffffc9a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2a000200010078", 0x7) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) socket(0x10, 0x3, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r12, 0x0, 0x0, 0x8041) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010) socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 4.124267245s ago: executing program 0 (id=1660): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r2, &(0x7f0000000200)=[{0x0}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010001000000000a00", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg(r5, &(0x7f0000006100)=[{{&(0x7f0000000880)=@un=@abs, 0x80, 0x0}, 0x4}], 0x1, 0x12040, 0x0) (async) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async) bind$tipc(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dc70b75fa4b0b69054d33a073e54eca77c118802b955617d0716c3e88f7bb6934e69ee9abefff665db717a6ddca708ca0edade1f2b376ff6964b4b3ef2947109af82c8c51a99c46b44149fb250ddb7f7e86f5380d4f8d9d9", @ANYBLOB="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"], 0x50d8}}, 0xc000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) recvmmsg(r7, &(0x7f0000000b00)=[{{&(0x7f00000007c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/108, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000980)=""/64, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x26}], 0x7, &(0x7f0000000540)=""/191, 0xbf}}, {{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/250, 0xfa}], 0x1, &(0x7f0000000a00)=""/224, 0xe0}}], 0x2, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) socketpair(0x15, 0x8000e, 0x6, &(0x7f0000000480)) 3.346475386s ago: executing program 1 (id=1662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xb5, &(0x7f0000000c40)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000780)={0x6, &(0x7f00000006c0)=[{0x2, 0x39, &(0x7f0000000280)="da0cc11a6e27d7199e8913a1a7f707ca8e4320d8b34b4f835f1b30508345e5d2f8ea3cf9b4fd5bcb3702c27a39b1d0933b0e024865249a6f5a", 0x1, 0x1}, {0x4, 0xf2, &(0x7f0000000340)="4d8cf5d565951077771b990b8e90e056b5e5d35e77c677087959fb3c4918118cad77ac61dfa01e719f3c31558bc66bbfdcea1f093e363ca224243b9323f21e714ef2cadacb49d649c01f1ff06478b62d4993d45b6196b031dac3ffc347a861520e36f71026e3b76c41afba2e699d56f8bc616ee61a0081247a5ab6bce6031e68a2bacb5055e91be98372aa9c61a52db860eb3b745c79df9517788a754a480c1c0c9c0b077109665a89c0e7c3b6407cfec0a06e9dde50c32809d94b676ed7faeadfd35886c767453a80a3c4a76df5a13755aff9f9f822c8140a7827b13b1191e86f5836666e6c43dcb609526360a749bd8d5e"}, {0x25, 0x32, &(0x7f0000000440)="9e8a46b6ca73ef455e82b89bd5c47635fa08a6c88212b6d8f23e7b4c2d2d630a70a4cf25339f66ef224a04950e7d72fcdde8", 0x1, 0x1}, {0x9, 0xeb, &(0x7f0000000480)="2e8616ee9d4fa119e46523b6e05e641a16fb0f2b2336c1458afb7b204d059e24c783fec22153cdf06a193d61b2db6520389582601f69d6f6e96a18cda9481797f09064c11291c582ee2afe4abb0719b428adeaf8035b649dc5653497857ae02bc46d1a5c7cb08b3ea932e44480aabc9a36090236c916bf50bbc2338d35ab65a4ca4078fc6ccd5b6eeabebb21a66387c3f3adcf602216d895bf8708ac7ca75d96f1a1dd141b52c1ecd4cfeda9e451a0eaa99c9853bce3c3ff26dc9a2acb24e5d10c4a99cf8b2aa754e34a243bfac0183e5fa4b4dda28c8dcf71235f92dd8e04791be15a13d19516f4238fff", 0x1}, {0x6, 0xc4, &(0x7f0000000580)="3d46df11ae0adf31b9fa276ec537919c3f7d141d8a7a9e00953d6d242381d51e587143d634c9b027738746bd414fd66a513006206415eb3e8c771c1c9017097ba5ebd95e3d45c05606219c51bf62bd552af5b7c85256ce2d3289e64e25e9740c9c4c3c86e2e5fefff7aa18234cc8157c937d2a5ad641c2759ef51f7b73d2e70a85f37b78bae27dee7544e5844528ed12bbefeea3917fa44b65f256228a417208275edc71b3ddac0e9753d3cdb33a3bed406997b81cba10d137f48da5c70b34e1ecf946ef", 0x1, 0x1}, {0x0, 0x16, &(0x7f0000000680)="2bde34040e5246dfa6a4de34816634fbc5135bb542d6", 0x1, 0x1}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x10001, 0x1, 0x6, 0x8, 0x5, 0x2, 0x1ff, {0x0, @in={{0x2, 0x4e23, @local}}, 0x3, 0x4, 0xf7c, 0x3}}, &(0x7f00000000c0)=0xb0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0xc, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2758, 0x2020000001a4, 0x800000020009], 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b9e8a235dd53c269995e4058c18b8f9a748ee86716ab481dde41ccfd988670a4e98c37caba0a0f9e10d2a1ae1da68d7c3909de083c97e9dc4c038bf48ed6bdeec246c37cfe098f377ff4e95aebc7a2e9306df6438063b820f090d77841ca5786b7053e366f526dc8b96079aaf376a789f6f84c5e378e3e1272a2db3a418e3703e19256ca4028a8f1bf646c139d3f4623c7331100630de8c049acbde7004457cd4e700da679616398d7604014b5afcf483cec0d75da06d799f78f710b74de51c21f35d5cc08a340f66fa43371df0e0f6da34594cef8a59df4167"]}, 0x152) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) syz_emit_ethernet(0xd0, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xbe, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @multicast2, @multicast1}, {0x2001, 0x880b, 0xaa, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a"}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r4, 0x1) setsockopt(r4, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) unshare(0x24060400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f0000000380)=0x8, 0xfe65) write$tun(r6, &(0x7f0000002440)=ANY=[], 0x1001) getsockopt$inet_IP_XFRM_POLICY(r5, 0x3a, 0x11, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa0000fffd00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x158}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) shutdown(r5, 0x56660e91fa37aa0c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.345162242s ago: executing program 3 (id=1663): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@sack={0x5, 0xa, [0x394, 0x6]}]}}}}}}}, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xffffff01}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="050000000200"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a4e2f"], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2400c014) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2040, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xd}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc2, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0xfffffffb, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x7fff, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x4, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x9, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0xc, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x800001, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x1007ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1004, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x412, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x6, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x43c}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r14, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) connect$vsock_stream(r14, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r14, 0x28, 0x2, &(0x7f0000000000)=0x100000001, 0x8) 3.236197029s ago: executing program 2 (id=1664): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0xa6, 0xb, 0x6, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7800, 0x80, 0xffff, 0xde4}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x2c020400) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x8, 0x1, 0x4000, 0x1, 0x401, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xa}, 0x50) close(r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r1, 0x33e, 0x6, 0xc000000000000000}) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000001740)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000000000000000000e7ffffff04"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008d00000000000000c50e000018110000bb782ee49179b39e2dadd94dbc22bb414c268f37e7d14473305f5b96f7170c0f5930412f43c5b4715ee657d9dbfe0dc022fced369926af96777103fada47cbc0", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100ffffffff9500000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1002, &(0x7f0000000440)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) 2.923366629s ago: executing program 0 (id=1665): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0100001000010000000000ffdbdf25fe8800000000000000000000000000010000000000000000000000000000000000000003000000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff0000000000000000330000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000ffffffffffffffff000000000000000000000000000000000000000000000000fcffffffffffffff0e00000000f1ff040100000027bd7000000000000200040040000000000000001c001700000000000000000000000008000000000000000004000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x15c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x4, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x8081}, 0x0) 2.73072004s ago: executing program 0 (id=1666): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000300)='\x00'/10, 0xa}], 0x1) (async) recvmsg(r0, &(0x7f0000003100)={0x0, 0x0, 0x0}, 0x100) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[], 0x0, 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}], 0x10, 0x1ff}, 0x94) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000280080001000000000008000200"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600803500000c00030008001700040000005b26a041d3add889b4db3c66bead7f0d804d0373bd5584351eb8ebf57bbfcbb8962589f5bece8b36751a95421fcba4fa1048548f62e84f1eb96acea8a8f0a7d50749461338826713e40851380b17b692ec770762cf22ee8e53b72455c3ad32729f56ce0e8c4dc049ba03e52592b59737393007abf8ac3c9b9f702c6c81019ffea4b34a8a67"], 0x58}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000005900)='wg2\x00', 0x4) (async) bind$inet6(r5, &(0x7f0000005a80)={0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00', 0xffffff01}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000140)=@nfc={0x27, r7, 0x1, 0x2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="d301dc1f26eb3a6b12281c30519b7cb51a30316aa01fcb4a63f0310f24d5772fe76ca9c50ea6214c13aab81e4591b31591daa236569b61e0002b33bd9a4d26f3a8b8023b2ef3eeca1a61c9e7e921c760438a177ec8f4867354bdacf7", 0x5c}, {&(0x7f0000000480)="8eede900f79036f8b2f00df67ad3fb5e6740fe09db45676d1e94ba03e3628a3546ce73f413a44b53423f0ecc1295bfea9ef2a0fe2e6fd70171410456f5ad91d4a7ecef0e17580ce684e9739f03dbf86614f2785ecb566a", 0x57}, {&(0x7f0000000500)="3a0ce2d92491ec209902d151a5ee9f92f6b94c772baf8e0c538d20613134ce83951bd53d4b965366c640fcfa2517e1890c4e40e586febb152d1a3f49201f6f2c3ce98125720ba2d728e9ed9f6de3032789fd9538f74755963610e6b32a9cd980fb78a953e1db3c04b4839a81d74a39e97b7ac88204ebe1d3d15fcbdd10af7aa69b48e3ae24ab362db78771c2a3c9bedb2866ca0fc893050a77cb5831e3a31401246c9b936e4692fe7edee89a479d379dd87a72fac3d9eba9019b5643cd81ce207db8ddbd37c0b82c694251a806b3e97aba5b44b71063bffba9b05bd252cb60c38c1240d0ea431fbcab8b", 0xea}], 0x3, &(0x7f0000000640)=[{0x60, 0x0, 0x5ac4, "3623b0e09532c82e66c44885cd5d470774471247f434801f1b5c8ba5d128eb3adc685c818b09fd1c1c9a193de1c378e3e30e64a76dd9642a618a0be00e69ab668eafbc4f1aba14f93892c3995a865987"}, {0xd8, 0x1, 0x81, "33b62b05b97088f32d84bf908d0d1aca69c812a015f014ff13fe539122ef842cc569f953b21aa670219492d56f5dc72d146abcfbe2ba4599dbeb6fe74c3fe3887be05b3b8ec7c1b18d5e689cdde4256606e797f1446c4fb53c1d54be360f2460c330e97f0866910027cfe79f4872f3c05752c7a9fc651a9579d99bfe6e714d5292cea099ec0ae7b315ad77f591dd030c78fde5df4fc11ce6c18c74fb62974a87a9d42954e830a2f876b45da0480b0a0af41dfe15862fd6a1ee8bac9c2ac52b8983d7388c"}, {0x60, 0x84, 0x6, "a25919c63c8f8630ab9b8f581c92db07380cdddff2e8bbe480a5abc4cf12bb3632f7d01c8104727434a6c3babef0f29fa6b511b952b0f23338a95820c360987b2ebc5d35887daba7101ae9e6d137bc3c"}, {0xa8, 0x103, 0x2, "952fd390dcb943ebf20665f478cafb307d6fd4785b6e18dc5b2fa9061c012972d6c46d945958e2bbb164cefba972cbe93b8af4a0942539bb9d17ce4a1ce146d0b0b5c7a79f124c281546cb6b57529f7a7ba29869a33354c692b71ea4baacdfc030c2bc4a231aa87a091a40633cb5c9c2dc7b7787be24e20e83435616c2f2d51e0b2e27086aa82a490688bcc39b85673fd0f026586422f6b4"}, {0xb8, 0x84, 0x0, "696ad3ea7d57f3c628e19322cadf615d3bcff20d109d03c9210fe152906e28a198ec7d1e26f5b769d39c175e9e880c3910838ed9414ffe556db8282355cad98be824b43a25741258c0c6f8047b2cded940debc2320ffe5487065e608289b24e703eed1d6797eeb97dacc8236f12c72fa59351be89951559e6cf4a4351916eb91680c0a1f077363b5b66a52db1f3e535d3857d5f51c1572dc6a886b3165f86dfa1b81aeaff0a284"}], 0x2f8}, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='scalable', 0x8) 2.390483881s ago: executing program 2 (id=1667): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="61129900000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000170600000ee60000bf0500000000000063620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc72be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035bc6a35a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa3e8ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c07935"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) unshare(0x20400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r0) socket$inet6(0xa, 0x4, 0x9) 2.25023359s ago: executing program 3 (id=1668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911172000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r1 = getgid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002180), 0x4) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = getgid() r6 = getpid() r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) r10 = getgid() r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000000), 0xc, &(0x7f0000001d80)=[{&(0x7f0000000c80)={0x10d8, 0x12, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @typed={0x8, 0x6c, 0x0, 0x0, @pid}, @generic="dcf5d178ae57589728fc8cdb8c1a448793be26bfb6d1013fdeac0135b7117f3faa65e01ede7d72df576b", @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@empty}, @generic="a9114eda3687c5b90711a950fb32e9c109d73e56ece928f6b3b7bc33c8f4673e6cb269c2d71711a149046ba4f5db375c0f30defa2585710b51e95c0a6febcdc233b1c23ffce1a33648c6fdc46d7828595a75c08e921af4f0c41da4563751f543e57def9d1f9511198f", @typed={0x8, 0x146, 0x0, 0x0, @u32=0x1ff}, @typed={0x1a, 0x2b, 0x0, 0x0, @binary="341b9bd3b804454257a304d78ce403daeff2758365cd"}]}, 0x10d8}], 0x1, &(0x7f00000021c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r0, r0, r3, r0, r0, r0, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r9, r10}}}, @rights={{0x18, 0x1, 0x1, [r11, r0]}}], 0x138, 0x1}, 0x44084) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r13, 0x50dc85624ea6cf59, 0xfffffffe, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r12) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYRES16=r14], 0x34}}, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, 0x0, 0x24044080) sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg(r15, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001d00), 0x0, &(0x7f0000001dc0)=""/76, 0x4c}, 0x123) sendmsg$NFT_BATCH(r15, 0x0, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x9, [@multicast2, @loopback, @empty, @loopback]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x8) 2.179523252s ago: executing program 1 (id=1669): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) 1.92237298s ago: executing program 1 (id=1670): r0 = socket$kcm(0x10, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000640)="d29d494a4f9d06e4f610bcdd2e476659546899596b0fc2ff08928165c5ce01b981de1cab305212f10143bf3652171fa52b82235c6a471274b4d4739e0ee05b1218a2e27d67e043137b77f3826858b263f5a02a26500503380317eb519b79753382820de68ff95a4b69f588122101bf99bd1937520f145ece52469f954092c30e310bf2adc91d1eb4df3e5b497b0000000000000001c6673b186682006c0fac0280c0f444f5d9", 0xa6}, {&(0x7f0000000400)="3359adf7337949d8e53fdbbeb5bfee23bf5c6035bb6276666bea98b3a27770c2eb02e076462c36073edf145154214c6446f9c153ec9e56cacb7cb7e8985a4f4d5f01482c7a37e56ce914845301abdb82767eff1ae322cb2330a964994f619b1052fe1c9560d182f9937bb627ce65a81961b4b090e8488f45864c15246a8251ac612f38abd0ad8dd87cc023cbba0ac5dbd2098086d882abbdf876115d4c4113f73d737c59fa388fbae5c9e4aee4f29424000df95fb6cd524cd3eb041596bd85fceb64e4659fc7736e6fab02ad6958b846b971bc05d9ef6a9d7697fba81124437477749c", 0xe3}, {&(0x7f0000000500)="ba0bdeda798bcc020c2219379c24f3e76b242dc401c0cc98cad3ed3b4a9a02f86868a9b9f61f90bcd8a4ed4e15e71d2f657e248a761986b854e91e8f84e2994b75332af8b793754377193dc62f2d63cb294fb1cc0ea5123f9dd03f49a7f251e1a02e2b07c36bb0db7ca3d84442379916a14055a10815e07ecf0f3e3ad3d5984d4665a1e06648299813729153f7a53cc1dd0c975703e2d8", 0x97}], 0x5, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000640)="d29d494a4f9d06e4f610bcdd2e476659546899596b0fc2ff08928165c5ce01b981de1cab305212f10143bf3652171fa52b82235c6a471274b4d4739e0ee05b1218a2e27d67e043137b77f3826858b263f5a02a26500503380317eb519b79753382820de68ff95a4b69f588122101bf99bd1937520f145ece52469f954092c30e310bf2adc91d1eb4df3e5b497b0000000000000001c6673b186682006c0fac0280c0f444f5d9", 0xa6}, {&(0x7f0000000400)="3359adf7337949d8e53fdbbeb5bfee23bf5c6035bb6276666bea98b3a27770c2eb02e076462c36073edf145154214c6446f9c153ec9e56cacb7cb7e8985a4f4d5f01482c7a37e56ce914845301abdb82767eff1ae322cb2330a964994f619b1052fe1c9560d182f9937bb627ce65a81961b4b090e8488f45864c15246a8251ac612f38abd0ad8dd87cc023cbba0ac5dbd2098086d882abbdf876115d4c4113f73d737c59fa388fbae5c9e4aee4f29424000df95fb6cd524cd3eb041596bd85fceb64e4659fc7736e6fab02ad6958b846b971bc05d9ef6a9d7697fba81124437477749c", 0xe3}, {&(0x7f0000000500)="ba0bdeda798bcc020c2219379c24f3e76b242dc401c0cc98cad3ed3b4a9a02f86868a9b9f61f90bcd8a4ed4e15e71d2f657e248a761986b854e91e8f84e2994b75332af8b793754377193dc62f2d63cb294fb1cc0ea5123f9dd03f49a7f251e1a02e2b07c36bb0db7ca3d84442379916a14055a10815e07ecf0f3e3ad3d5984d4665a1e06648299813729153f7a53cc1dd0c975703e2d8", 0x97}], 0x5, 0x0, 0x0, 0x7400}, 0x0) (async) 1.811698975s ago: executing program 3 (id=1671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x104, 0x24, 0x20, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xd4, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x5, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x64, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x3}, {0xc, 0x4, 0x400}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x400}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xffffffffffffffff}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x10, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xfffffffffffffffd}]}]}}}]}, 0x104}}, 0x20000000) getsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r2, &(0x7f0000001a80)="c3", 0x0}, 0x20) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180700000057ed000000000000000000850000007d00000018050000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e000000000000000000200002801c0003800c00018008000100000000000c0001800800010000000000"], 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES16=r9], 0x90}}, 0x20000050) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="c800000000020106000000000000000002ffffffff00018014000180080001000102030408000200050607081c00028005000100060000540113e03107873e0006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c4000010019ffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572000000"], 0xc8}}, 0x0) 1.750666469s ago: executing program 2 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000091401"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8066) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf251a0000ffffcb0905495120bc32125ce1c80863ff88120de128ffffffff008004000080040000800500920008000000fc00210062620000"], 0x34}, 0x1, 0x0, 0x0, 0x30789a6edaf859ba}, 0x2804c011) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x5c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x32}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0x10, 0x7}, {0x0, 0xffee}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003c40)=@gettfilter={0x54, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff2, 0x1f}, {0x6, 0x2}, {0x10, 0xf}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x2003fc}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x0) 1.702206895s ago: executing program 1 (id=1673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0xb8, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x45, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x45, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r6, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800068, &(0x7f0000000740)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x288, 0x8, 0x0, 0x0}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000004c0)={r11}, &(0x7f00000005c0)=0x8) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x138, 0xb, 0x148, 0x0, 0x148, 0x210, 0x230, 0x242, 0x210, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xd8, 0x138, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0xee00, 0x3, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x4, 0x1, 0x0, 0x4], 0x9, 0x4}, {0x0, [0x1, 0x2, 0x0, 0x0, 0x4, 0x2], 0x1, 0x5}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd2a, 0x70bd2a, 0x70bd28, 0x6, [0x6]}}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x160}}, 0x0) 1.615230316s ago: executing program 0 (id=1674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fefffaff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffefa, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000000)=r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 982.666273ms ago: executing program 3 (id=1675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000101ffec00000000030000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547e841fd74eabc89b6f5b32", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bind$802154_dgram(r1, &(0x7f00000000c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) 692.458087ms ago: executing program 2 (id=1676): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xe0d9, r8}, &(0x7f0000000100)=0x10) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_TO={0x4, 0x2, 0x1b}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x342, 0x10000000, 0x9, 0x9ab5, 0xe9c8, {0x86, 0x2, 0x401, 0x0, 0x1}, {0xe, 0x2, 0x51, 0x0, 0x5, 0x7fffffff}, 0x9, 0x6, 0x6}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2078b6faca688a43010000000800146c616e3000a67a0000"], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x40014) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x11, 0x11}, 0x20) ioctl$TUNSETSNDBUF(r12, 0x400454d4, &(0x7f0000000040)=0x10000) close(r12) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 670.740366ms ago: executing program 3 (id=1677): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f00000019c0)={0x12bc, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_PAYLOAD={0x1004, 0xa, "ad3cf5a4b960dfdc2377ae0889771c8dd0f84e1af6e83d299a6ea8b9714dd45ac05c36b970ed8f7675ecd20aa18dc7fce626985cb82cde0203c72c8a6325ae0fe793f39641e9c481ed0cb1d33c0302b63577825d152262a14fe880ffb759f55217d8c5c3fa6d4a4227e3e810721d0bdb54222a84d298814398fb942d3ddd0ec09625910ce8ffd143d5398c520321f2652167be9fe6f8092856bb39a8c06373bd1a4ccb178b88cc6ceeab935774ae1a49f2cac394259657a868dd37657b21a74550595257cd29e5971dc036cfbd7407dc3f3ee1047f9999a2fc89ae4aae6f5b376fb41eb4d300409b0d707167c36a6ad22b649a86e8d080982db384d38244148b14402e74363162a2584b54dd9803f98a5bf796841d9e5c11a76b782d7f0bed229b54951c03a427b7aeaaca3bc0fe2d8c5b2acd536040c8d6118dbaabbcb11f233bd468ac713fe1fe832b0137ecdf7a7f7ceeed075d51c536a6ca97b5789b0158197b7fd132f86fc60868847636a7324ae0b5c3076ab0aba19ff07e659518da0982d40e3b482b2c5c88481ef10a7c48374ac2be34cc464f315bf0374b122fed140a3f52e48c534050154e678439f08583e4a7ccf5c4084bff71dc9c6eceeb7323d8d5238b1cd70b84bcf5c5becb4106a83b4136afaffa767dbcaed83a10a22cce22b085d89af822698a7bf79b747b58ab8ab6a629243fd4882a108eed0c7935c6058855b9a01da7858f3d61b59e4cb1403ac4d70bab9ec528de5fce45abec0a465fe622633ae2db0a859813a5ff4270b75cb07162012235a8a5e69ec5dc8cf51f8f38e2c0bd86687f18244b251e9d484300d24c67eaaa5b8167b344b9adc30828bc7193a6683c2ee9ae55d2202c9529d251679576ba6f220935b022f6c40b01f2a7176f33f4fa26208d72fa20f25c15c02f1b31c767272d2f23b4d28117b98c30cb3e58ff1e90c73c3d0dc3734f14e6238c8d9c6707eef58f38964e1fdd2e439d5caa6bc7630e4b73e259ec0e8bd9c6c8460259f6239d1aa37f5123039bda019dcecd4e1fae803e4cb64900dc5c02084e36e0506cd0a4217825c323b7fee73972f856cd31b1f1abc234be67029c26c32890c91c7a50f8c60f62c6a2dcd6459101998d1ca5359035e2e8142f8cbab2c8498441eaa2fcd484d89333e3c1155a79df6c7b64456342bd4319174e622f465e21832abfcb913d1e95329cf8cd6a33295c832e4682994d4db3ccbc91dcbda64e632052f6b044c54ed5542782512b19b7c527e784991ae127d0b400ebe3f5f2985c1c746acf74bcd038ae481db7d11180519598c7a3074925b05b25ebbe619138081fb845b650e3c76e07d5c23c0f506dff9e0b5ece6077b5fdf8bd0c84c60f7924531fb1d5780eafea6360bf822765e3499c543ea22150faa3eb9d422d80e4114c5f8c011a66feb29a3cee94130b4917128d88c5dcc010f437c78c485da8836a1d1ac44c9239fdf01d9fd02c36ed0f4a9cfdb35439525b7c820528856e1edceecd43d03ccba0ab0ef291c14f3f2fe781ebfa0a19859b1f3e0e548ace573d6d05049612a5888437cae853a7045adb650c64a9d9e35fe838c3add3935196191b7464205b39f1205f752c139a023cc9c8ecad4a43b530931fcfd36e68cc82949cd11475984985bb508acdb652c5c76feb112795ff352855dd3be95df96e3c5519558023e1ffb24e62ca8d649fdf998169baf57ab25eaef27fcc76c4daf5eed13823bf663481193d8281eaae1bb4d190c702203bc253a5cf9e2f3d5c5e80b1de3c261264ce1ba6c94f801e57be1f59e60c15dc8ab88c20ab2e3af0a70061e428f26da39f29f0cccab5a02dcd16ab258beb21c7c8868cb0a18470d2768cdfb710b4d7909f57aa78d76cfffcd3282b21481f79bc9a91f0ea4cdef8c53b919dab413735b8cc4a76ea2abd9863d27842cd3e76e0fe5b6443577a30f9ffa6bbaaa0819f8d9d2dc5543358af472574767028dcab1d0ef13c016f8256425e404227bcef921171ee34e5b20517f863075129e2dd0e7b3d90daddacc77993a3e404b5f50ece0c945154cac66674736d8555c7d86f7f75d9af6a6499ff9c159749f67c9c3fcfcdda477063a3734054219d472c200889fd4aa6eacd9cfa655235ea9afea9c328241f95a592c762a0d6dd857a1652c35f8ebbab2b7122f0ee00db44437c81eb1f143494d06edd03729c42c56a3c703596f10baefef750437fb398eada9a7235040f75e6795b04be516fd333350e061df3fd74e5ddf9cbc9d10feb9a1656ac055a6bd9499cac56e8ff7835b3d0a5a9f55949c241912736fb1ff45ff01ad5ea51a994fbc3a7f77d546a4d98d0d2f198b0cc3b8b5082fea68fd4314c4dfae48e04ca7961de2d08a11b9048d31f908256a3717d0c7c08ba81d144264ceed6a8674fe3131250356361e49261e74be95f905a1b33b56d35b4b3ff29224601d7ebe1f4e3e49534e95b84f874c829314c3345642c7d171dfda0f6c34214c3896ac9c1bcda9e73e2ef7088ec84320988b0626e95d44fb91ecacee7a59d8934d7f3b66b6b18e0b19dabddbf84bb7c657b23dcfdeba5148ee6f37e615cd0e8611cba580ea95855583f301735d2c46a61b39fab2b3a37244a37391f2ba3ee8fcc32b4e7ec43430661420084c21b49f067a9ba6f3cb81a36f692d5bc578423ef203515b4cd9b62fce9eb315ef1ec9b4cc2759c3f60d672705c814f579802c43cc425b08a014c885cdae2fbfbd5138ed10575791b2dae7e8713f3ce18558013568465bd3cc48dd82a4957f3f2e53e6aa7f8c430a3e7dd2fe16e76948ddd91de9207a2f58ae030e8b8607bc1680c62474f97bd72ffc78d12f1d6d23558dedb3bd3096c580823d8769e6c4c03b0a60dbba51c14b34ca7cf38182e4dc09c38017f28170d3da5713da169a10de891345c180b0f899ecb25ebe1f18f1c0144dd5b9a52c65bf8c01bcdb9805cfe4a96f1a2b1f186a849db6197a7a3fb430dcc129b25fa55fcb1496f535e56b9f0ca0182cb7acc14464806ab4cd1feb18db42375b11c2534aa253b5b5ccd4fcbc600b2c0ca2165b48a7285e9648c6eabe7e382a2719f33379c100e7464e5e756d6dd5416ea729770f933b6a7f54afd42b8dbc7c4a7237a6b1bcb2521881a58d1b09f250154f84909540a66311dd79b6bdb7e2aee0433ca9712991bf490722aa4166d11e147df7763da948d3bac6b7309e27a68f8e093939c91a20104920673d004dbd7736f240ef399efafac9455831a74078482ea340794f2bd1a9b8ae34a6864b02280cb636673006dceff8c7057d7d6c19c915d7e5f0de77580c009cf77267878853d5124c484128e3e25484ad19d5a9f405934b6747af0720a973b351a86ebb395b997cd2e83055e20de44a3177584beb2a61f55aea408fdb472c32c839b5c6b74a8302d81a15787232701715c36bf45620e90b382826fe3802f42b9e5aedbff195566dc01e7d7483c48ac89301f90f608f705793fc924e120faeafbab40433d9de20e978a23258b08de3cbf11eaa66df7aa2543197e1e09d802941ac0869d3970168951f53f3452f9f16701cfacf46d0614a584a39c136496dac309465604de507b87b2990916acd0af831a1a679f1d305787c5a873b0d6b33c85be9fda0e67ecc3ec922ccbc496a4f8cb6b51c1fcf18db45e5d6a09688b4dfee845d1d2993fcdfed8ac151c80e73d0dd2fba6495cd1566178252d30dd1ab1169be6b71da10a464e14d9d3882d3c19d9d05364684688ec9738bfe43cc1aacf5d7fad45255d16f30ebf2b643742d4229f53b5bc9f9ca148d04383f3dc9918a3f0e081cd5b80553604bf82392bcb4a4418d7e5b428bba811b47a6131fd9820b88fa7024321ea9178d471d18e86122b8c6ccbe9ac39f466b24efe33cc354961e664ab8b8ad8eb592dc1cb8bf8a3f0a4f33c8f03c5a86a1fdbe1b6bd89925042c75ed74f58a5894884f1873df49dcfc90b8b24c14bff31cca2f79e011db4d43bce58cadbebca07c41f8450d0cffc7e1708d11420297b583856f1f6b62a3f65e08a356af610682f0ed3d593d5c1449df6c6fa6a5b4eb34c0137ae926c49a7bf81ebd01345ccaa243444c6858718c71f8cc6466c1f012b25268c30821c6dc54648d8a3bd1bbbc9186808b7fa9f32e5a98faa5ccdd7851be6faa8508d1e394cadc3942c6fcadc351722df9af40707056bd73deb3bb11f27fac0af6abb34fc299dd5e2804ef26ba0dc5061a881a9e4365bb9fefc33be78c8e09c3898291f759783c69d50994e8509a4680fe37c80d423bc6c88e8d607c14a1d4d68be744e0e688671d335f674b1a0a7837542beb7a460db8c8b73e8086ee89b923f896bc607197eefc3f686d0018e3ccfaeb08f2924433fdc190a17dbc69237fe6f44c8694fed05561a9cebd4a7c6b5c84edf42ecf65e925fd1f2363aa204d5362379593672d4a934d08a03b1b153929c7dbf602b755f538f316fea2dad6bc7558bcc8c2dfbc89dd3c94b050cf90f9312e979c3afe8325cea41a30f0fdcb8bba61c671565a99b71f68e92a19ea91e5bb4f880fda33bb933ead06627151438066e8358bf2138e4201cedd9d1f2cfc132410fc4448ebc2a65b6afb2d3b25ab228c8e89a6766e5a5e02b167eaa78e4d6dfd3aaf7c38e57b86ba566f00655ee22aaec3853666f5c6e3c605d6869a36342a054512840ad7ad9b2cb89aa1bab9c6c49b937f0a4efb43d80941c32762c29587a1366b05af94c1a440b5b8fe03309f6f5ef1eade45b5f6ea42541c595a2b3b1eb64c03bd0c10c3f91f893a99fb17d11e691aa059ccb7f47a159bea8418edf2c4c5a27aab74ed3419eb5bff44b4fb0e31f34941cc07edf499b21e7fb4bd5f7b430e6dadb9c5b2a79e0a5a5dd6c2e875247e903e02fedef4d12e720ac9a1f770cc68e7baf3dd7a9479137f1f8edef52f62093638bec474afa3b1fbae4acf4c0386c4b3409dfd7e85871e66359f8d21ef5e7bf7292e0b25402723e5a6dcd8f7b731a3180e2399a4c8e358b87e4552f94cbd087243816fdda047bffd2d5bbe28b054589872d5a6d75c845794b981a89cb5d034fbf0c5c3cd717af944bd79d874b78bdaa62b999882510f67e9050f1eff50af5b2ab8fd0d090cfe0e15bf5de653cae5f04d29a2db97f1cda2c0e17cd57ecd0fe54223489de2993b1652e891d515225955cd368bc412b5bd42ccda6b0af777abe8be39370be68523062ab46c54cddedb2cee52446e5c11f26b42cfed711682fb29f2ba245eb4830d0fa4291b213f53c1b96c946cd264b81ace4d956e63d234d42e907d5e6afab537b62c1f5a99f43e4939e52c4b762a69e896c8ea411595f878ef817c036da9f862c3a326866f2e1b207d0383541c9e5b0edb4e2697caa48371937989647e336bd85c31d2882fe4eef7fc80822db51b70eee4c66faebcf1b9173c9e1464e935295e433531c8be94afe9f1214039b19673dce5f471f8af7397341a544ca207f2e063c0cfc3bc8d5c5d4de9fa96f1e2788fc7546d2614bcc88e79b9857380a8a27bb7c379577bb309a8c25507c63e204b8dc5f3a104a35babd9bdecd4c7758717eaceff05f44d3da08f18e243c3e8cbdd8ac5d8cf18b79ce43d3dcd07cc97fa5536645687ac2a18bc2549473dbfb64522bda2964a3e2422f25dccdc69b66124c6decdb6b8d1ae5c56970a76a94be24b9f049083b570d445a82631928ba124297ac41c07168d97a090d906e68d4b41b6054802cd1179e96ed44299c0bb068223016f7970e607c89f3b60ec595e6d66df12ac8f577bc0b18d5f56e"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x800}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0xe8979847e7536b37}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0x60, 0xa, "a1955c02d7c06df92b04fc471c8d44d6d1cd7022c5b2a67f526d35c7d0af01878e9ddce45cd89fb91c6871aa12add180337a464087e6007e82742a80405033c8e4fea33ab40c0e1d8cb98eb981cff1b67da2d7ae6baa83ffc22e9253"}, @NFQA_CT={0x9c, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfa1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}, @NFQA_CT={0x90, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x39}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x57}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x80}]}}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x71}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100000}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x8, 0x17, [0x5]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x54}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x64}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x48}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x204}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x939}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x42891) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a00fffe0900010073797a3100000000400004803c000180090001007866726d000000002c000280080001400000001608000440000000040800024000000004080001400000000305000300000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x8001, 0x322a}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x10001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047459, &(0x7f0000001200)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x26, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xc6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x31}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x81, 0x80, 0x80, 0x1, 0x40, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup(r11, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) 558.658165ms ago: executing program 1 (id=1678): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltclass={0x0, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0xd}, {0x6, 0x7}, {0xf, 0x1}}, [@tclass_kind_options=@c_fq_codel, @TCA_RATE={0x0, 0x5, {0x10}}, @tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_RSC={0x0, 0x1, {0x9, 0x5, 0x1ff}}, @TCA_HFSC_USC={0x0, 0x3, {0xfffff36d, 0x80000001, 0xfffffffb}}, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x1, 0x7d66}}, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0xe028, 0x7f}}]}}, @tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_FSC={0x0, 0x2, {0x7, 0xdb, 0x1000}}, @TCA_HFSC_FSC={0x0, 0x2, {0xf51, 0xb, 0x10}}, @TCA_HFSC_FSC={0x0, 0x2, {0xfffffffd, 0x0, 0x3ff}}, @TCA_HFSC_USC={0x0, 0x3, {0x85, 0xc9, 0x7}}, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x2, 0x1}}, @TCA_HFSC_USC={0x0, 0x3, {0x2925551d, 0x844, 0x8000}}, @TCA_HFSC_FSC={0x0, 0x2, {0x101, 0xa, 0x7fffffff}}, @TCA_HFSC_USC={0x0, 0x3, {0x4, 0x80000000, 0xee}}, @TCA_HFSC_FSC={0x0, 0x2, {0x0, 0xd6, 0x4}}]}}, @TCA_RATE={0x0, 0x5, {0xa9, 0x5c}}, @TCA_RATE={0x0, 0x5, {0x3, 0x81}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0xffe0}, {0x0, 0xffff}, {0xffe0}}}, 0x24}}, 0x10) 501.641198ms ago: executing program 32 (id=1619): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {}, {}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = gettid() r8 = socket$inet(0x2, 0x2, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000280)="c1188e99b95d02ff4284860188a8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r10, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000300)=0x6) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x38}, 0x42090) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 246.219205ms ago: executing program 0 (id=1680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x8, 0x8, 0x4, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x67, 0x0, 0x71, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x3a, 0x3, 0x2, [{@rand_addr=0x64010100, 0x1}, {@multicast1, 0x3ff}, {@rand_addr=0x64010102, 0x2}, {@multicast1}, {@multicast1, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x7fc7, 0x9, 0x6, {{0x8, 0x4, 0x2, 0xb, 0x20, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@end, @ssrr={0x89, 0xb, 0x99, [@local, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x274, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "ade6627b35013496e4a050b783aea1f37cb423391070315b19ff1f6b4d2beff33718df9ff1020def82d0a17836488296de8594b82770843154e5d77a7edb67e571d7d3768bd48e5e71a8444424ba7f94f4d30e7ae832be049a9929f3fe91cde2ec0ab4e355c649621037cd29f4fff6db8bca954c575830ae588b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x564}, @ETHTOOL_A_BITSET_MASK={0x8c, 0x5, "4ec515d7e3093383df995c7e3d6eb69d8b39f129ae7c1c85f2be31eabcb835a0774c185ee908659d6144cfa9f6c3fb37085ad6f943b32805e9c08cd59c0194ab35280878773b2dac7b5fe35540e5fa242d3e69c1d56f181c1531e7bd118b764e0201cb798174da42e8e5aa5c80cfae8753c6413cc8a8b43d6ff57142b0f72dafbba6ba357e58551c"}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "f98db35732626582efbd87bf2cd4d8beeec8498dbdf7bee750db1b5df28cabe8bb36671f5e85fd4352ba7860aac0328f2f038c190e1af4a7bdf39c969989a0e5beb02dd1c3cbc59fcecf315498b9a32a611aaddd1db2d74b66a1919ca5390c2c51ee690587bd2ccd80fbb803274ee78a9f99caf5b04e728e95d34d3475aa16b0e5cdbb379a44e801ada4e9df8a356676035cff65d58a331a98dcabf038dfd01f336ba1ace2fcfe39c0e94b03374b5d19fd0ba739b6f0f9631f7531d9b3c4ee7ca185ad43178a"}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x274}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, "", [@generic='-']}, 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x20, 0x40, 0x3, {0x7a, 0x0, 0x0, 0x0, 0x4100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) socket(0x2, 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=1681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a75, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) kernel console output (not intermixed with test programs): [ 123.720072][ T6812] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 123.768910][ T6812] xt_l2tp: missing protocol rule (udp|l2tpip) [ 124.502865][ T6846] macsec0: entered promiscuous mode [ 124.573768][ T6846] veth1_macvtap: left promiscuous mode [ 124.634132][ T6846] macsec0 (unregistering): left promiscuous mode [ 125.082792][ T6866] Bluetooth: ISO socket layer initialized [ 125.113985][ T6807] infiniband syz2: set active [ 125.114009][ T6807] infiniband syz2: added team_slave_0 [ 125.342227][ T6807] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 125.342271][ T6807] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 125.342314][ T6807] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 125.588353][ T6886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.672780][ T6807] RDS/IB: syz2: added [ 125.673293][ T6807] smc: adding ib device syz2 with port count 1 [ 125.673418][ T6807] smc: ib device syz2 port 1 has no pnetid [ 126.230476][ T6906] __nla_validate_parse: 3 callbacks suppressed [ 126.230498][ T6906] netlink: 80 bytes leftover after parsing attributes in process `syz.0.246'. [ 126.230518][ T6906] netlink: 80 bytes leftover after parsing attributes in process `syz.0.246'. [ 126.709412][ T6916] netlink: 48 bytes leftover after parsing attributes in process `syz.0.248'. [ 127.258650][ T6913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.611705][ T6920] veth0_to_bridge: entered promiscuous mode [ 127.613662][ T6920] macvtap1: entered allmulticast mode [ 127.613685][ T6920] veth0_to_bridge: entered allmulticast mode [ 127.656053][ T6920] veth0_to_bridge: left allmulticast mode [ 127.656093][ T6920] veth0_to_bridge: left promiscuous mode [ 127.939245][ T6940] syzkaller0: entered promiscuous mode [ 127.939453][ T6940] syzkaller0: entered allmulticast mode [ 128.997306][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.257'. [ 130.344864][ T6930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.963892][ T6998] team0: No ports can be present during mode change [ 131.110578][ T7002] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 131.270219][ T7002] bond2 (unregistering): Released all slaves [ 131.454968][ T7009] netlink: zone id is out of range [ 131.455072][ T7009] netlink: zone id is out of range [ 131.455082][ T7009] netlink: zone id is out of range [ 131.455090][ T7009] netlink: zone id is out of range [ 131.457743][ T7009] netlink: zone id is out of range [ 131.457757][ T7009] netlink: zone id is out of range [ 131.457766][ T7009] netlink: zone id is out of range [ 131.457775][ T7009] netlink: zone id is out of range [ 131.457818][ T7009] netlink: zone id is out of range [ 131.559274][ T7009] netlink: zone id is out of range [ 131.598688][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 131.598864][ T7012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.264'. [ 131.600842][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'. [ 131.850553][ T7018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.265'. [ 132.129818][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.188449][ T7024] ip6erspan0: entered allmulticast mode [ 132.289822][ T7024] dummy0: entered promiscuous mode [ 132.377492][ T7027] tipc: Started in network mode [ 132.377527][ T7027] tipc: Node identity feffffff000000000000ffffffffffff, cluster identity 4711 [ 132.377582][ T7027] tipc: Enabling of bearer rejected, failed to enable media [ 132.476901][ T7021] dummy0: left promiscuous mode [ 132.700841][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 132.701130][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 132.701562][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 132.701937][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 132.752883][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 132.753351][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 132.908481][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.188049][ T7056] syzkaller0: entered promiscuous mode [ 133.188260][ T7056] syzkaller0: entered allmulticast mode [ 133.319829][ T7060] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 133.336609][ T7060] bond5 (unregistering): Released all slaves [ 135.555969][ T7112] netlink: 'syz.4.286': attribute type 28 has an invalid length. [ 135.693459][ T7108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.811955][ T7116] xt_hashlimit: max too large, truncated to 1048576 [ 135.813950][ T7116] No such timeout policy "syz1" [ 136.668292][ T7137] __nla_validate_parse: 15 callbacks suppressed [ 136.668316][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 137.017021][ T7137] netlink: 'syz.0.293': attribute type 5 has an invalid length. [ 137.017171][ T7137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.308664][ T7194] tipc: Enabling of bearer rejected, failed to enable media [ 138.669679][ T7200] net_ratelimit: 4 callbacks suppressed [ 138.669705][ T7200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.196245][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 139.429107][ T7212] netlink: 'syz.2.309': attribute type 4 has an invalid length. [ 139.466562][ T7212] netlink: 'syz.2.309': attribute type 4 has an invalid length. [ 139.663959][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 140.150914][ T7232] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.173752][ T7232] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.520717][ T7237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.319'. [ 140.578895][ T7225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.588124][ T7237] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 140.588196][ T7237] netlink: 212 bytes leftover after parsing attributes in process `syz.3.319'. [ 140.588268][ T7237] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 140.920330][ T7251] syzkaller1: entered promiscuous mode [ 140.920357][ T7251] syzkaller1: entered allmulticast mode [ 141.171143][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 141.210584][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 142.542198][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 144.708370][ T7303] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 144.863795][ T7314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.333'. [ 145.132678][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.336'. [ 145.164145][ T7319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.834514][ T7339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.925004][ T7339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.977694][ T7339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.900605][ T7370] ip_tables: iptables: counters copy to user failed while replacing table [ 147.036998][ T7376] netlink: 136 bytes leftover after parsing attributes in process `syz.1.347'. [ 147.133582][ T7382] netlink: 136 bytes leftover after parsing attributes in process `syz.1.347'. [ 148.568269][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.568998][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.569625][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.613317][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.653934][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.670794][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.672137][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.700417][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 148.718435][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 148.719898][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 149.227387][ T7412] netlink: 'syz.4.355': attribute type 1 has an invalid length. [ 149.435665][ T7421] sctp: [Deprecated]: syz.0.358 (pid 7421) Use of int in max_burst socket option deprecated. [ 149.435665][ T7421] Use struct sctp_assoc_value instead [ 151.494380][ T433] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.117202][ T7493] xt_hashlimit: size too large, truncated to 1048576 [ 152.305744][ T7502] syzkaller0: entered promiscuous mode [ 152.305770][ T7502] syzkaller0: entered allmulticast mode [ 153.858747][ T7528] kthread_run failed with err -4 [ 154.236248][ T7562] __nla_validate_parse: 61 callbacks suppressed [ 154.236267][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.236736][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.237210][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.237761][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.238269][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.238783][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.239207][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.241520][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.242087][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 154.242602][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.385'. [ 155.217052][ T7597] bond2 (unregistering): Released all slaves [ 156.148154][ T7637] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 156.671220][ T7628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.049028][ T7628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.165423][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.168516][ T5631] block nbd2: Receive control failed (result -32) [ 157.309054][ T7628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.632850][ T7628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.171890][ T7677] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 158.373792][ T7689] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 158.395895][ T7677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.452526][ T7679] bond2: (slave veth7): Enslaving as an active interface with a down link [ 158.476764][ T7680] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.477068][ T7680] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 158.527992][ T435] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.868519][ T7683] bond2: (slave veth9): Enslaving as an active interface with a down link [ 158.993984][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 159.010193][ T7686] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 159.124468][ T433] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.124845][ T433] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.334525][ T1297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.485149][ T7714] netlink: 'syz.2.414': attribute type 9 has an invalid length. [ 159.487573][ T7720] xt_hl: Unknown Hop Limit match mode: 4 [ 159.889859][ T7727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.176313][ T7744] __nla_validate_parse: 27 callbacks suppressed [ 160.176334][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 160.362263][ T7749] bond3 (unregistering): Released all slaves [ 160.662072][ T7749] bond3 (unregistering): Released all slaves [ 160.814316][ T7762] can: request_module (can-proto-0) failed. [ 160.879649][ T7749] bond3 (unregistering): Released all slaves [ 160.936211][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 161.214979][ T7776] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 161.392708][ T7779] 8021q: VLANs not supported on ip6_vti0 [ 161.407529][ T7780] 8021q: VLANs not supported on ip6_vti0 [ 161.837198][ T7796] netlink: Setting conntrack mark requires 'commit' flag. [ 161.837234][ T7796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.882215][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.918173][ T49] IPVS: starting estimator thread 0... [ 162.008124][ T7799] IPVS: using max 27 ests per chain, 64800 per kthread [ 162.319042][ T7806] tipc: Started in network mode [ 162.319077][ T7806] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 162.486555][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 163.041149][ T7806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.061937][ T7812] xt_policy: output policy not valid in PREROUTING and INPUT [ 163.148661][ T7806] bond2 (unregistering): Released all slaves [ 163.912903][ T5631] Bluetooth: hci4: link tx timeout [ 163.913019][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.550822][ T7840] netlink: 'syz.1.446': attribute type 12 has an invalid length. [ 164.550849][ T7840] netlink: 248 bytes leftover after parsing attributes in process `syz.1.446'. [ 164.552839][ T7841] netlink: 'syz.1.446': attribute type 12 has an invalid length. [ 164.552860][ T7841] netlink: 248 bytes leftover after parsing attributes in process `syz.1.446'. [ 164.965669][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 165.011304][ T7849] sctp: [Deprecated]: syz.2.450 (pid 7849) Use of int in max_burst socket option. [ 165.011304][ T7849] Use struct sctp_assoc_value instead [ 165.042640][ T7851] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 165.124703][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 165.126784][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 165.263769][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551ea000: rx timeout, send abort [ 165.665046][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 165.685730][ T1297] IPVS: starting estimator thread 0... [ 165.785171][ T7868] IPVS: using max 26 ests per chain, 62400 per kthread [ 165.945145][ T4936] Bluetooth: hci4: command 0x0406 tx timeout [ 166.025066][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.454'. [ 166.177650][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 166.267117][ T7887] netlink: 'syz.0.457': attribute type 16 has an invalid length. [ 166.267143][ T7887] netlink: 'syz.0.457': attribute type 17 has an invalid length. [ 166.718933][ T7887] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 167.638938][ T435] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.639243][ T435] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.665084][ T944] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.714443][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.954260][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 167.962719][ T7926] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 168.019044][ T7928] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 168.019083][ T7928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.051642][ T7932] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 168.063542][ T7930] netlink: 'syz.4.468': attribute type 2 has an invalid length. [ 168.395648][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.470601][ T7932] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 168.501741][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.512797][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.850557][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.025363][ T31] audit: type=1804 audit(1790351398.522:3): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.472" name="/newroot/92/cgroup.controllers" dev="tmpfs" ino=490 res=1 errno=0 [ 169.029875][ T31] audit: type=1800 audit(1790351398.522:4): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.472" name="cgroup.controllers" dev="tmpfs" ino=490 res=0 errno=0 [ 169.069298][ T7940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.470'. [ 169.371918][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 169.614437][ T7968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.476'. [ 169.832414][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 169.898341][ T5631] Bluetooth: hci4: unexpected event 0x0f length: 5 > 4 [ 169.898375][ T5631] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 169.980089][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.479'. [ 170.426126][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 171.439326][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.440004][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.624499][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.656594][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.670303][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.931298][ T7990] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 172.062320][ T7990] macvtap1: left allmulticast mode [ 172.105902][ T435] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.105961][ T435] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.106002][ T435] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.106042][ T435] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.542204][ T8021] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 172.672724][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 172.692380][ T8021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.770548][ T8020] syzkaller1: entered promiscuous mode [ 172.770575][ T8020] syzkaller1: entered allmulticast mode [ 173.480785][ T8060] netlink: 220 bytes leftover after parsing attributes in process `syz.0.493'. [ 173.480810][ T8060] tc_dump_action: action bad kind [ 173.483742][ T8059] netlink: 220 bytes leftover after parsing attributes in process `syz.0.493'. [ 173.483765][ T8059] tc_dump_action: action bad kind [ 174.447628][ T8078] wg0: entered promiscuous mode [ 174.447656][ T8078] wg0: entered allmulticast mode [ 174.470868][ T8057] syz.3.492 (8057) used greatest stack depth: 18088 bytes left [ 174.808627][ T8083] netlink: 'syz.4.497': attribute type 5 has an invalid length. [ 174.906069][ T8098] xt_nfacct: accounting object `syz0' does not exist [ 175.013071][ T8098] netlink: 'syz.2.502': attribute type 34 has an invalid length. [ 175.013096][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 175.049602][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 175.088457][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 175.138280][ T8098] bond2: option lacp_strict: invalid value (16) [ 175.141858][ T8098] bond2 (unregistering): Released all slaves [ 175.785577][ T8129] block nbd0: reconnected socket [ 175.785599][ T8129] nbd: socks must be embedded in a SOCK_ITEM attr [ 175.917748][ T5631] block nbd0: Receive control failed (result -32) [ 176.783101][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 176.861274][ T8154] Bluetooth: hci0: unsupported parameter 5135 [ 176.861300][ T8154] Bluetooth: hci0: unsupported parameter 8192 [ 176.861315][ T8154] Bluetooth: hci0: unsupported parameter 5135 [ 176.861328][ T8154] Bluetooth: hci0: unsupported parameter 8192 [ 176.885363][ T8151] netlink: 'syz.2.513': attribute type 4 has an invalid length. [ 176.885387][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'. [ 177.043031][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.086103][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 177.276214][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 177.361641][ T8160] bond4 (unregistering): Released all slaves [ 178.031155][ T8175] syzkaller0: entered promiscuous mode [ 178.031180][ T8175] syzkaller0: entered allmulticast mode [ 179.429119][ T8215] __nla_validate_parse: 1 callbacks suppressed [ 179.429141][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 179.657426][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 179.855427][ T8214] syz_tun: entered allmulticast mode [ 180.140959][ T8239] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 180.225994][ T8239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.249930][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 180.264523][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 180.340334][ T8213] syz_tun: left allmulticast mode [ 180.473484][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.533'. [ 180.741101][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.536'. [ 180.947296][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.536'. [ 181.271927][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 182.118895][ T8287] tipc: Trying to set illegal importance in message [ 184.625640][ T8297] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 184.625757][ T8297] syzkaller0: linktype set to 8 [ 184.733488][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 184.790998][ T8303] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 184.792185][ T8303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.548'. [ 185.088622][ T8315] netpci0: tun_chr_ioctl cmd 1074025681 [ 185.175029][ T8327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.806336][ T8345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.554'. [ 185.806364][ T8345] netlink: 43 bytes leftover after parsing attributes in process `syz.3.554'. [ 185.806381][ T8345] netlink: 'syz.3.554': attribute type 6 has an invalid length. [ 185.806395][ T8345] netlink: 'syz.3.554': attribute type 5 has an invalid length. [ 185.806409][ T8345] netlink: 43 bytes leftover after parsing attributes in process `syz.3.554'. [ 186.868442][ T8375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.562'. [ 187.419329][ T8389] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 187.420655][ T8388] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 187.533180][ T8389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.533951][ T8400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.568'. [ 187.593332][ T8397] ip_tables: iptables: counters copy to user failed while replacing table [ 187.668359][ T8395] gre1: entered promiscuous mode [ 187.670989][ T8395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.671397][ T8395] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 187.673214][ T8395] bond2: (slave gre1): Error -95 calling set_mac_address [ 187.806251][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.807345][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.808299][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.811944][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.812948][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.814767][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.822181][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.825040][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 187.942264][ T8388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.956520][ T8388] bond2: (slave bond3): Enslaving as an active interface with a down link [ 188.017692][ T8389] bond2 (unregistering): (slave bond3): Releasing active interface [ 188.037084][ T8389] bond2 (unregistering): Released all slaves [ 188.177958][ T8415] netlink: 148 bytes leftover after parsing attributes in process `syz.3.572'. [ 188.477231][ T8433] netlink: 148 bytes leftover after parsing attributes in process `syz.3.575'. [ 188.761877][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 189.076012][ T8446] veth1_macvtap: left promiscuous mode [ 189.299821][ T8451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.299841][ T8451] IPv6: NLM_F_CREATE should be set when creating new route [ 189.299884][ T8451] IPv6: NLM_F_CREATE should be set when creating new route [ 189.299909][ T8451] IPv6: NLM_F_CREATE should be set when creating new route [ 189.829503][ T8479] __nla_validate_parse: 2 callbacks suppressed [ 189.829524][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.584'. [ 189.883616][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 189.974313][ T8485] syzkaller1: entered promiscuous mode [ 189.974341][ T8485] syzkaller1: entered allmulticast mode [ 190.413903][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'. [ 190.523476][ T8503] pimreg: tun_chr_ioctl cmd 1074025681 [ 190.636270][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'. [ 190.637331][ T8514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'. [ 191.372437][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 191.373878][ T8542] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 191.389563][ T8539] macvlan0: entered allmulticast mode [ 191.397965][ T8543] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 191.501990][ T8543] netlink: 988 bytes leftover after parsing attributes in process `syz.4.599'. [ 191.721334][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 192.011306][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 192.171464][ T8564] netlink: 9 bytes leftover after parsing attributes in process `syz.4.603'. [ 192.229609][ T8564] gretap0: entered promiscuous mode [ 192.282016][ T8564] 0ªî{X¹¦: renamed from gretap0 [ 192.295404][ T8564] 0ªî{X¹¦: left promiscuous mode [ 192.295436][ T8564] 0ªî{X¹¦: entered allmulticast mode [ 192.298351][ T8564] net_ratelimit: 26 callbacks suppressed [ 192.298370][ T8564] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 192.907531][ T8586] geneve3: entered promiscuous mode [ 194.188180][ T8642] netlink: 'syz.3.623': attribute type 11 has an invalid length. [ 194.189591][ T8643] netlink: 'syz.3.623': attribute type 11 has an invalid length. [ 194.349362][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.535937][ T8645] syzkaller0: entered promiscuous mode [ 194.535962][ T8645] syzkaller0: entered allmulticast mode [ 194.573308][ T8645] tipc: Started in network mode [ 194.573444][ T8645] tipc: Node identity 1a98b444ba73, cluster identity 4711 [ 194.573915][ T8645] tipc: Enabled bearer , priority 0 [ 194.626906][ T8644] tipc: Resetting bearer [ 194.752770][ T8656] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 194.816576][ T8644] tipc: Disabling bearer [ 194.914450][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 195.079050][ T8667] __nla_validate_parse: 9 callbacks suppressed [ 195.079071][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 195.381477][ T8679] IPv6: addrconf: prefix option has invalid lifetime [ 195.402605][ T8679] siw: device registration error -23 [ 195.409844][ T8683] IPv6: addrconf: prefix option has invalid lifetime [ 195.444612][ T8686] netlink: 72 bytes leftover after parsing attributes in process `syz.0.634'. [ 195.542241][ T8678] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 195.542280][ T8678] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 195.542322][ T8678] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 195.590842][ T8688] block nbd3: server does not support multiple connections per device. [ 195.592068][ T8688] block nbd3: shutting down sockets [ 195.623520][ T8678] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 195.680380][ T8678] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.881001][ T8690] netlink: 'syz.3.637': attribute type 15 has an invalid length. [ 195.982717][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 196.002001][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 196.128886][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.640'. [ 196.426211][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 196.456734][ T8703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'. [ 196.904420][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 196.979719][ T8729] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 197.177743][ T8729] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.495781][ T8758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 197.676626][ T8763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.651'. [ 197.776318][ T8766] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 198.279119][ T8791] netlink: 277 bytes leftover after parsing attributes in process `syz.0.658'. [ 198.917931][ T8807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.661'. [ 199.667170][ T433] IPVS: starting estimator thread 0... [ 199.720283][ T8828] netlink: 'syz.4.666': attribute type 1 has an invalid length. [ 199.754463][ T8834] IPVS: using max 23 ests per chain, 55200 per kthread [ 200.015070][ T8828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.087152][ T8841] __nla_validate_parse: 2 callbacks suppressed [ 200.087176][ T8841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.668'. [ 200.303418][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 200.618916][ T8857] netlink: 'syz.4.671': attribute type 83 has an invalid length. [ 201.229472][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 201.437720][ T8881] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 201.452935][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 201.453918][ T8881] x_tables: duplicate underflow at hook 1 [ 201.472542][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 201.553848][ T8881] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 201.554719][ T8881] netlink: 64 bytes leftover after parsing attributes in process `syz.1.678'. [ 201.617277][ T1040] tipc: Subscription rejected, illegal request [ 201.646384][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.679'. [ 201.741881][ T8889] bond0: ARP target 0.0.0.2 is already present [ 201.741912][ T8889] bond0: option arp_ip_target: invalid value (33554432) [ 201.742330][ T8905] netlink: 9 bytes leftover after parsing attributes in process `syz.2.681'. [ 201.776366][ T8905] gretap0: entered promiscuous mode [ 201.807457][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 201.807655][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 202.388481][ T8923] netlink: 'syz.3.687': attribute type 83 has an invalid length. [ 205.710807][ T8968] __nla_validate_parse: 32 callbacks suppressed [ 205.710829][ T8968] netlink: 96 bytes leftover after parsing attributes in process `syz.2.698'. [ 205.739155][ T8965] netlink: 324 bytes leftover after parsing attributes in process `syz.2.698'. [ 205.790192][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 205.809461][ T8968] vlan2: entered allmulticast mode [ 205.819815][ T8964] netlink: 3 bytes leftover after parsing attributes in process `syz.1.701'. [ 206.086334][ T8984] netlink: 'syz.4.702': attribute type 16 has an invalid length. [ 206.418101][ T8990] tipc: Enabling of bearer rejected, failed to enable media [ 206.671264][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 206.671468][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 206.671505][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 206.675539][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 207.519167][ T9013] tipc: Enabling of bearer rejected, failed to enable media [ 207.592434][ T9014] tipc: Enabling of bearer rejected, failed to enable media [ 207.782842][ T9031] team_slave_1: Caught tx_queue_len zero misconfig [ 207.815627][ T9036] netlink: 144 bytes leftover after parsing attributes in process `syz.4.711'. [ 208.005785][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.712'. [ 208.005920][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.712'. [ 208.006037][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.712'. [ 208.006162][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.712'. [ 208.006275][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.712'. [ 208.347800][ T9059] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 208.369454][ T9055] ovs-s!: entered promiscuous mode [ 208.741869][ T9067] openvswitch: netlink: Missing key (keys=40, expected=100) [ 208.898341][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.898369][ T1297] syzkaller0: tun_net_xmit 76 [ 208.898659][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.898674][ T1297] syzkaller0: tun_net_xmit 48 [ 208.929103][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.929129][ T9] syzkaller0: tun_net_xmit 76 [ 209.008336][ T9069] syzkaller0: create flow: hash 257476837 index 0 [ 209.067039][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.067065][ T6565] syzkaller0: tun_net_xmit 76 [ 209.382979][ T9098] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 209.387282][ T9098] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 209.414567][ T9066] syzkaller0 (unregistered): delete flow: hash 257476837 index 0 [ 209.917639][ T9107] netlink: 'syz.4.729': attribute type 1 has an invalid length. [ 209.917685][ T9107] netlink: 'syz.4.729': attribute type 1 has an invalid length. [ 210.208549][ T9117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.209395][ T9117] bridge0: port 3(bond2) entered blocking state [ 210.212923][ T9117] bridge0: port 3(bond2) entered disabled state [ 210.236406][ T9117] bond2: entered allmulticast mode [ 210.257664][ T9117] bond2: entered promiscuous mode [ 210.260633][ T9117] bridge0: port 3(bond2) entered blocking state [ 210.260763][ T9117] bridge0: port 3(bond2) entered forwarding state [ 210.681440][ T9123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.713916][ T9126] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 210.731089][ T1297] bridge0: port 3(bond2) entered disabled state [ 210.788099][ T9] Dead loop on virtual device lo (net 39), fix it urgently! [ 210.847335][ T9142] ip_tables: iptables: counters copy to user failed while replacing table [ 210.847707][ T9142] ip_tables: iptables: counters copy to user failed while replacing table [ 210.848052][ T9142] ip_tables: iptables: counters copy to user failed while replacing table [ 210.848377][ T9142] ip_tables: iptables: counters copy to user failed while replacing table [ 211.411173][ T9153] syzkaller0: entered promiscuous mode [ 211.411201][ T9153] syzkaller0: entered allmulticast mode [ 211.694562][ T9166] __nla_validate_parse: 9 callbacks suppressed [ 211.694584][ T9166] netlink: 48 bytes leftover after parsing attributes in process `syz.4.740'. [ 211.986994][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 212.373203][ T9183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.742'. [ 214.482635][ T9169] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 214.611310][ T433] net_ratelimit: 31 callbacks suppressed [ 214.611334][ T433] Dead loop on virtual device lo (net 39), fix it urgently! [ 214.612066][ T433] Dead loop on virtual device lo (net 39), fix it urgently! [ 214.733858][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 214.781809][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.782016][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.387167][ T9] Dead loop on virtual device lo (net 39), fix it urgently! [ 216.343960][ T9217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 216.494562][ T9222] netlink: 48 bytes leftover after parsing attributes in process `syz.0.753'. [ 216.541124][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 216.593167][ T9223] netlink: 'syz.4.751': attribute type 4 has an invalid length. [ 216.609368][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 217.242695][ T9242] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 218.076690][ T9269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.760'. [ 218.186881][ T9269] netlink: 'syz.1.760': attribute type 2 has an invalid length. [ 218.186905][ T9269] netlink: 232 bytes leftover after parsing attributes in process `syz.1.760'. [ 218.362396][ T9283] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 218.379388][ T9283] team0: No ports can be present during mode change [ 218.380638][ T9283] tunl0: Caught tx_queue_len zero misconfig [ 218.757775][ T9297] netlink: 55 bytes leftover after parsing attributes in process `syz.3.764'. [ 218.824575][ T9298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.765'. [ 218.825411][ C0] Dead loop on virtual device lo (net 39), fix it urgently! [ 219.283641][ T9313] lo: entered promiscuous mode [ 219.460866][ T9313] tunl0: entered promiscuous mode [ 219.514779][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 219.514820][ T9304] netlink: 'syz.2.767': attribute type 7 has an invalid length. [ 219.514835][ T9304] netlink: 'syz.2.767': attribute type 8 has an invalid length. [ 219.514848][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 219.650023][ T9313] gre0: entered promiscuous mode [ 219.812328][ T9313] gretap0: entered promiscuous mode [ 220.027804][ T9313] erspan0: entered promiscuous mode [ 220.049559][ T9341] netlink: 'syz.4.774': attribute type 10 has an invalid length. [ 220.167547][ T9313] ip_vti0: entered promiscuous mode [ 220.170451][ T9313] ip6_vti0: entered promiscuous mode [ 220.188863][ T9313] sit0: entered promiscuous mode [ 220.265593][ T9313] ip6tnl0: entered promiscuous mode [ 220.328358][ T9313] ip6gre0: entered promiscuous mode [ 220.366951][ T9313] syz_tun: entered promiscuous mode [ 220.406386][ T9313] ip6gretap0: entered promiscuous mode [ 220.438170][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.438820][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.439737][ T9313] bridge0: entered promiscuous mode [ 220.499105][ T9313] vcan0: entered promiscuous mode [ 220.530461][ T9313] bond0: entered promiscuous mode [ 220.530487][ T9313] bond_slave_0: entered promiscuous mode [ 220.530908][ T9313] bond_slave_1: entered promiscuous mode [ 220.532392][ T9313] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 220.577946][ T9313] dummy0: entered promiscuous mode [ 220.640595][ T9313] nlmon0: entered promiscuous mode [ 220.669283][ T9313] batadv0: entered promiscuous mode [ 220.703717][ T9313] vxcan0: entered promiscuous mode [ 220.749024][ T9313] vxcan1: entered promiscuous mode [ 220.768054][ T9313] veth0: entered promiscuous mode [ 220.793065][ T9313] veth1: entered promiscuous mode [ 220.837831][ T9313] wg0: entered promiscuous mode [ 220.878899][ T9313] wg1: entered promiscuous mode [ 220.903369][ T9313] wg2: entered promiscuous mode [ 220.937197][ T9313] veth0_to_bridge: entered promiscuous mode [ 221.002454][ T9313] veth1_to_bridge: entered promiscuous mode [ 221.063176][ T9313] veth0_to_bond: entered promiscuous mode [ 221.117533][ T9313] veth1_to_bond: entered promiscuous mode [ 221.168965][ T9313] veth0_to_team: entered promiscuous mode [ 221.192074][ T9313] team_slave_0: entered promiscuous mode [ 221.229579][ T9313] veth1_to_team: entered promiscuous mode [ 221.263264][ T9313] team_slave_1: entered promiscuous mode [ 221.299649][ T9313] veth0_to_batadv: entered promiscuous mode [ 221.327169][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.327234][ T9313] batadv_slave_0: entered promiscuous mode [ 221.380223][ T9313] veth1_to_batadv: entered promiscuous mode [ 221.409268][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.409332][ T9313] batadv_slave_1: entered promiscuous mode [ 221.433168][ T9313] xfrm0: entered promiscuous mode [ 221.494556][ T9313] veth1_to_hsr: entered promiscuous mode [ 221.560000][ T9313] hsr0: entered promiscuous mode [ 221.590071][ T9313] veth1_virt_wifi: entered promiscuous mode [ 221.627270][ T9313] veth0_virt_wifi: entered promiscuous mode [ 221.673434][ T9313] virt_wifi0: entered promiscuous mode [ 221.765192][ T9313] vlan0: entered promiscuous mode [ 221.799855][ T9313] vlan1: entered promiscuous mode [ 221.838862][ T9313] macvlan0: entered promiscuous mode [ 221.878329][ T9313] macvlan1: entered promiscuous mode [ 221.923084][ T9313] ipvlan0: entered promiscuous mode [ 221.959606][ T9313] ipvlan1: entered promiscuous mode [ 222.058227][ T9313] macvtap0: entered promiscuous mode [ 222.096166][ T9313] macsec0: entered promiscuous mode [ 222.141887][ T9313] geneve0: entered promiscuous mode [ 222.180571][ T9313] geneve1: entered promiscuous mode [ 222.223914][ T9313] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 222.305450][ T9313] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 222.333446][ T9313] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 222.386151][ T9313] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 222.418394][ T9313] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 222.432503][ T9313] bond1: entered promiscuous mode [ 222.457569][ T9313] vlan2: entered promiscuous mode [ 222.475973][ T9313] bridge1: entered promiscuous mode [ 222.527824][ T9313] mac80211_hwsim hwsim16 wlan2: entered promiscuous mode [ 222.547602][ T9313] vcan1: entered promiscuous mode [ 222.550669][ T9313] gretap1: entered promiscuous mode [ 222.573034][ T9313] syztnl2: entered promiscuous mode [ 222.596004][ T9313] ip6tnl1: entered promiscuous mode [ 222.622342][ T9313] veth2: entered promiscuous mode [ 222.622814][ T9313] veth3: entered promiscuous mode [ 222.650037][ T9313] bridge2: entered promiscuous mode [ 222.652376][ T9313] bridge3: entered promiscuous mode [ 222.728014][ T9304] dummy0: entered promiscuous mode [ 222.740619][ T9304] team0: entered promiscuous mode [ 222.740645][ T9304] team_slave_0: entered promiscuous mode [ 222.740859][ T9304] team_slave_1: entered promiscuous mode [ 222.742535][ T9304] bond1: entered promiscuous mode [ 222.769437][ T9304] erspan0: entered promiscuous mode [ 222.839905][ T9341] syz_tun: entered promiscuous mode [ 222.886573][ T9341] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 223.121713][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 223.300046][ T9349] vlan3: entered allmulticast mode [ 223.300117][ T9349] bridge4: entered allmulticast mode [ 223.303324][ T9351] bridge_slave_0: left allmulticast mode [ 223.303572][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.334808][ T9358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.779'. [ 223.404360][ T9351] bridge_slave_1: left allmulticast mode [ 223.404616][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.469581][ T9351] bond0: (slave bond_slave_0): Releasing backup interface [ 223.510871][ T9351] bond0: (slave bond_slave_1): Releasing backup interface [ 223.543407][ T9351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.568264][ T9351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.581746][ T9351] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 223.616853][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.616999][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.617039][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.617077][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.017091][ T9400] netlink: 267 bytes leftover after parsing attributes in process `syz.3.782'. [ 224.115853][ T9408] netlink: 256 bytes leftover after parsing attributes in process `syz.1.783'. [ 224.627884][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 224.657382][ T9426] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 224.921072][ T9434] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 224.981859][ T9426] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.048752][ T9423] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 225.107449][ T9436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.791'. [ 225.160618][ T9432] macvlan2: entered promiscuous mode [ 225.160644][ T9432] macvlan2: entered allmulticast mode [ 225.188560][ T9432] bond6: entered promiscuous mode [ 225.192772][ T9432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.213116][ T9432] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 225.239396][ T9432] bond6: left promiscuous mode [ 225.747417][ T9446] netlink: 68 bytes leftover after parsing attributes in process `syz.3.793'. [ 226.061158][ T9465] netlink: 80 bytes leftover after parsing attributes in process `syz.3.798'. [ 226.212294][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 226.332763][ T59] IPVS: starting estimator thread 0... [ 226.415425][ T9474] IPVS: using max 24 ests per chain, 57600 per kthread [ 226.517840][ T9476] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20001 [ 226.519904][ T9476] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 226.666948][ T9478] netlink: 68 bytes leftover after parsing attributes in process `syz.4.801'. [ 226.985234][ C0] Dead loop on virtual device lo (net 39), fix it urgently! [ 227.085633][ T9486] syzkaller0: entered promiscuous mode [ 227.085659][ T9486] syzkaller0: entered allmulticast mode [ 227.282714][ T9495] syzkaller1: entered promiscuous mode [ 227.282741][ T9495] syzkaller1: entered allmulticast mode [ 227.297986][ T9495] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.321614][ T9495] tc_dump_action: action bad kind [ 227.970740][ T9442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.992008][ T9518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.059938][ T9515] openvswitch: netlink: Duplicate or invalid key (type 0). [ 228.063367][ T9515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.140202][ T9515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.185268][ T9521] geneve2: entered promiscuous mode [ 228.193806][ T9515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.285974][ T9526] __nla_validate_parse: 5 callbacks suppressed [ 228.285995][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 228.286172][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 228.327439][ T9526] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 228.328546][ T9524] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 228.467078][ T9526] netlink: 64 bytes leftover after parsing attributes in process `syz.0.816'. [ 228.549805][ T9534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.815'. [ 228.828935][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 229.027550][ T9552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.821'. [ 229.202493][ T9552] vxcan2: entered allmulticast mode [ 229.435868][ T9554] batman_adv: batadv0: Adding interface: macvtap1 [ 229.435889][ T9554] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.435918][ T9554] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 229.822147][ T9570] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 230.030884][ T9574] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.829'. [ 230.125031][ T9578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.831'. [ 230.179582][ T9577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.183464][ T9577] bond5: (slave macvlan2): making interface the new active one [ 230.201970][ T9577] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 230.213149][ T9394] bond_slave_0: entered promiscuous mode [ 230.214553][ T9394] bond_slave_1: entered promiscuous mode [ 230.249254][ T9584] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 230.315293][ T9584] bond7: entered promiscuous mode [ 230.315851][ T9584] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.459945][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.833'. [ 230.478471][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 230.479496][ T9584] bond7: entered allmulticast mode [ 230.543133][ T9584] bond7: (slave bridge1): making interface the new active one [ 230.543161][ T9584] bridge1: entered promiscuous mode [ 230.543367][ T9584] bridge1: entered allmulticast mode [ 230.573694][ T9584] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 230.781869][ T9602] xt_hashlimit: size too large, truncated to 1048576 [ 230.895450][ T9605] xt_hashlimit: size too large, truncated to 1048576 [ 232.634783][ T9658] FAULT_INJECTION: forcing a failure. [ 232.634783][ T9658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.634820][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.3.852 Not tainted syzkaller #0 PREEMPT(full) [ 232.634847][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.634861][ T9658] Call Trace: [ 232.634870][ T9658] [ 232.634880][ T9658] dump_stack_lvl+0xe8/0x150 [ 232.634930][ T9658] should_fail_ex+0x410/0x560 [ 232.634964][ T9658] _copy_from_user+0x2d/0xb0 [ 232.634995][ T9658] ___sys_sendmsg+0x1c6/0x360 [ 232.635027][ T9658] ? __lock_acquire+0x747/0x2de0 [ 232.635057][ T9658] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.635130][ T9658] ? __fget_files+0x2a/0x420 [ 232.635162][ T9658] ? __fget_files+0x3a2/0x420 [ 232.635203][ T9658] __x64_sys_sendmsg+0x1b1/0x290 [ 232.635239][ T9658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.635302][ T9658] do_syscall_64+0x166/0x520 [ 232.635332][ T9658] ? trace_irq_disable+0x3b/0x140 [ 232.635356][ T9658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.635379][ T9658] ? clear_bhb_loop+0x70/0xc0 [ 232.635412][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.635435][ T9658] RIP: 0033:0x7f495899e159 [ 232.635455][ T9658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.635473][ T9658] RSP: 002b:00007f49598c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.635497][ T9658] RAX: ffffffffffffffda RBX: 00007f4958c25fa0 RCX: 00007f495899e159 [ 232.635513][ T9658] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 232.635527][ T9658] RBP: 00007f49598c9090 R08: 0000000000000000 R09: 0000000000000000 [ 232.635541][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.635554][ T9658] R13: 00007f4958c26038 R14: 00007f4958c25fa0 R15: 00007ffe2277ba88 [ 232.635589][ T9658] [ 233.431611][ T9678] x_tables: duplicate underflow at hook 3 [ 233.465892][ T9678] __nla_validate_parse: 4 callbacks suppressed [ 233.465915][ T9678] netlink: 196 bytes leftover after parsing attributes in process `syz.2.857'. [ 233.597237][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 234.148207][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 234.634386][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.865'. [ 234.775145][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.866'. [ 235.031461][ T9721] netlink: 128 bytes leftover after parsing attributes in process `syz.1.868'. [ 235.732692][ T9706] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 236.892360][ T9721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.280812][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 237.462341][ T9762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 237.638489][ T9767] ipvlan2: entered promiscuous mode [ 237.693734][ T9767] team0: Device ipvlan2 failed to register rx_handler [ 237.889081][ T9773] sctp: [Deprecated]: syz.4.881 (pid 9773) Use of int in maxseg socket option. [ 237.889081][ T9773] Use struct sctp_assoc_value instead [ 237.953210][ T9768] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 238.051879][ T9780] netlink: 124 bytes leftover after parsing attributes in process `syz.0.884'. [ 238.363878][ T9784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.885'. [ 238.378889][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'. [ 238.398727][ T9788] sctp: [Deprecated]: syz.1.886 (pid 9788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.398727][ T9788] Use struct sctp_sack_info instead [ 238.422099][ T9789] sctp: [Deprecated]: syz.1.886 (pid 9789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.422099][ T9789] Use struct sctp_sack_info instead [ 239.783444][ T9813] netlink: 44 bytes leftover after parsing attributes in process `syz.0.890'. [ 240.887925][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 240.902177][ T9847] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 241.045256][ T9847] bond4: entered promiscuous mode [ 241.059336][ T9847] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.068664][ T9828] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 241.073377][ T9825] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 241.104492][ T9852] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 241.135635][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.896'. [ 241.135899][ T9847] bond4: entered allmulticast mode [ 241.297440][ T9847] bond4: (slave bridge5): making interface the new active one [ 241.297469][ T9847] bridge5: entered promiscuous mode [ 241.297678][ T9847] bridge5: entered allmulticast mode [ 241.300548][ T9847] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 242.191915][ T9888] openvswitch: netlink: Message has 8 unknown bytes. [ 242.191955][ T9888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.219174][ T9889] openvswitch: netlink: Message has 8 unknown bytes. [ 242.219210][ T9889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.355454][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 242.964861][ T9903] ip6gre0: left promiscuous mode [ 242.965261][ T9903] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 242.996396][ C0] Dead loop on virtual device lo (net 39), fix it urgently! [ 243.903613][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 243.980334][ T9928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.909'. [ 244.177661][ T9931] netlink: 'syz.2.910': attribute type 12 has an invalid length. [ 244.239403][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 244.281992][ T9935] netlink: NAT attribute has 8 unknown bytes [ 244.282031][ T9935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.401755][ T9933] team0: Port device team_slave_0 removed [ 244.424702][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 244.586468][ T9938] syzkaller1: entered promiscuous mode [ 244.586495][ T9938] syzkaller1: entered allmulticast mode [ 244.593704][ T31] audit: type=1800 audit(1790351474.082:5): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.910" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=933 res=0 errno=0 [ 245.156245][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 245.216127][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 245.536511][ T9972] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 245.728808][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 245.753500][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 245.933135][ T9980] bond4: (slave veth0_to_bond): making interface the new active one [ 245.952938][ T9980] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 245.988195][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 246.058919][ T9995] debugfs: 'hsr1' already exists in 'hsr' [ 246.058950][ T9995] Cannot create hsr debugfs directory [ 246.059021][ T9995] hsr1: entered promiscuous mode [ 246.537298][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'. [ 246.640380][T10009] IPv6: Can't replace route, no match found [ 246.754483][T10016] macsec1: entered promiscuous mode [ 246.754520][T10016] bridge0: entered promiscuous mode [ 247.333478][T10012] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 247.631209][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 247.809987][T10055] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 247.882082][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 247.915319][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 247.934709][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.935'. [ 247.938589][T10055] bond7: entered promiscuous mode [ 247.941670][T10055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.297717][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.298410][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.577905][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.587754][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.889378][T10060] bond7: entered allmulticast mode [ 248.948723][T10082] netlink: 'syz.3.938': attribute type 22 has an invalid length. [ 249.012050][T10071] bond7: (slave bridge5): making interface the new active one [ 249.012079][T10071] bridge5: entered promiscuous mode [ 249.012268][T10071] bridge5: entered allmulticast mode [ 249.037851][T10071] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 249.047242][ T9631] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.094486][ T9637] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.094546][ T9637] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.094587][ T9637] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.095377][T10076] ip6tnl0: Caught tx_queue_len zero misconfig [ 251.094491][T10155] __nla_validate_parse: 6 callbacks suppressed [ 251.094513][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.094671][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.094823][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.094969][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.095112][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.096738][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.096892][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.097037][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.108950][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.109358][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 251.197926][T10171] netlink: 'syz.4.956': attribute type 19 has an invalid length. [ 251.197986][T10171] netlink: 'syz.4.956': attribute type 20 has an invalid length. [ 251.204811][T10172] netlink: 'syz.4.956': attribute type 19 has an invalid length. [ 251.204832][T10172] netlink: 'syz.4.956': attribute type 20 has an invalid length. [ 251.229542][T10171] block nbd0: reconnected socket [ 251.229769][T10171] block nbd0: reconnected socket [ 251.236737][T10171] netlink: 'syz.4.956': attribute type 9 has an invalid length. [ 251.649336][ T5636] block nbd0: Receive control failed (result -32) [ 251.677402][ T5624] block nbd0: Receive control failed (result -32) [ 252.544074][T10233] lo: entered allmulticast mode [ 253.086143][T10232] lo: left allmulticast mode [ 253.122764][T10243] xt_hashlimit: size too large, truncated to 1048576 [ 253.410287][T10260] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 255.174755][T10288] syzkaller0: entered promiscuous mode [ 255.174785][T10288] syzkaller0: entered allmulticast mode [ 255.226410][T10305] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 255.340322][T10305] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 255.388153][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.390092][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.414787][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.474244][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.477109][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.483811][T10297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.483836][T10297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.529560][T10297] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 258.089682][T10301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.092043][T10284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.092067][T10284] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 258.143469][T10284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.143496][T10284] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 258.171972][T10284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.172003][T10284] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 258.195853][T10284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.195880][T10284] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 258.237653][T10284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.237679][T10284] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 258.283805][T10304] gretap2: entered allmulticast mode [ 258.457932][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.458048][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.473708][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.473974][ T9633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.738050][T10321] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 259.069044][T10351] netlink: 'syz.3.986': attribute type 2 has an invalid length. [ 259.995528][T10394] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 259.996202][T10394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 260.510224][T10411] __nla_validate_parse: 62 callbacks suppressed [ 260.510252][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 260.661397][T10412] gre0: entered promiscuous mode [ 260.661423][T10412] gre0: entered allmulticast mode [ 261.352492][T10435] netlink: 'syz.4.1003': attribute type 30 has an invalid length. [ 261.414229][T10433] netlink: 'syz.0.1002': attribute type 23 has an invalid length. [ 261.580254][T10435] netlink: 'syz.4.1003': attribute type 30 has an invalid length. [ 262.511601][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 262.550953][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 262.956095][T10493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1008'. [ 263.110149][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 263.977670][T10524] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 264.383316][T10532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1015'. [ 264.520716][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 265.451453][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1022'. [ 265.751495][ T31] audit: type=1107 audit(1790351495.242:6): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 265.751495][ T31] ÍPJÒ#ÅŒ½auBÁÀNÎTç�†õ,kwmØ¢*DÆÆˆÌý~´äö±„Ð3$–…\~ÀåÙâe×e×ôB'©Nû�^—7†±óp‚WÈŠ9;L÷UŸÌw®²õäþ y„ÕV9ð@S›Ùbßè,ùÓ£ ˜Uíöï½Eñ½Ô*�‡' [ 265.877425][T10574] IPVS: Error connecting to the multicast addr [ 266.406121][T10593] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 266.487420][T10593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 266.501570][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 266.501606][T10591] netlink: 'syz.3.1026': attribute type 10 has an invalid length. [ 266.501624][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 266.546058][T10597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1027'. [ 266.600457][T10591] geneve3: entered promiscuous mode [ 266.600485][T10591] geneve3: entered allmulticast mode [ 267.242346][T10625] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1035'. [ 267.323495][T10628] ip_tables: iptables: counters copy to user failed while replacing table [ 267.348425][T10629] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 267.401880][T10629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.412785][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 267.435073][T10629] macvlan3: entered promiscuous mode [ 267.435098][T10629] macvlan3: entered allmulticast mode [ 267.436677][T10629] bond5: entered promiscuous mode [ 267.437783][T10629] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 268.139129][T10629] bond5: left promiscuous mode [ 268.431512][T10645] batman_adv: batadv0: Adding interface: dummy0 [ 268.431533][T10645] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.431562][T10645] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 269.371171][T10695] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1050'. [ 269.642844][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 269.700482][T10712] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1055'. [ 269.974656][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 270.057657][T10712] bond0: (slave bond_slave_0): Releasing backup interface [ 270.712783][T10741] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 270.712863][T10741] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 271.136189][T10749] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 271.191203][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1064'. [ 271.647694][T10749] bond7: entered promiscuous mode [ 271.648267][T10749] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.649246][T10756] bond7: entered allmulticast mode [ 271.781782][T10776] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 271.834870][T10779] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 271.885272][T10776] team0: Port device dummy0 added [ 272.038354][T10779] team0: Port device dummy0 removed [ 272.698567][T10799] xt_HMARK: proto mask must be zero with L3 mode [ 272.729068][T10801] __nla_validate_parse: 2 callbacks suppressed [ 272.729090][T10801] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1075'. [ 272.846709][T10797] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1074'. [ 272.924789][T10797] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 272.980448][T10795] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 272.980473][T10795] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1073'. [ 272.980490][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 273.476059][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1080'. [ 274.346988][ C0] Dead loop on virtual device lo (net 39), fix it urgently! [ 274.470871][T10846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1086'. [ 274.485480][T10842] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1084'. [ 274.974940][T10869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.977467][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 274.978639][T10869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.273295][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1093'. [ 275.327150][T10872] netlink: 'syz.1.1090': attribute type 5 has an invalid length. [ 275.374114][T10870] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1092'. [ 275.505921][T10884] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 277.285474][T10940] ip_tables: iptables: counters copy to user failed while replacing table [ 277.812959][T10949] __nla_validate_parse: 5 callbacks suppressed [ 277.812985][T10949] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1110'. [ 277.859774][T10949] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1110'. [ 278.206720][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 278.285019][T10956] ip_tables: iptables: counters copy to user failed while replacing table [ 278.329565][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1113'. [ 278.329593][T10956] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 278.329609][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 278.737004][T10971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1117'. [ 280.008651][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 280.801109][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 280.947477][T11054] bond7: entered allmulticast mode [ 281.147364][T11061] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.172529][T11061] bond8: entered allmulticast mode [ 281.173005][T11061] bond7: (slave bond8): Enslaving as an active interface with an up link [ 281.399778][T11076] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 281.399921][T11076] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 281.400100][T11076] veth0_virt_wifi: entered allmulticast mode [ 281.428610][T11076] veth0_virt_wifi: entered promiscuous mode [ 281.429274][T11076] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 281.429382][T11076] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 282.116424][T11096] trusted_key: syz.2.1147 sent an empty control message without MSG_MORE. [ 282.149185][T11098] ip_tables: iptables: counters copy to user failed while replacing table [ 282.155293][T11099] ip_tables: iptables: counters copy to user failed while replacing table [ 282.207405][T11092] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 282.207642][T11092] xt_SECMARK: invalid mode: 9 [ 282.726748][T11115] dummy0: entered allmulticast mode [ 282.728940][T11113] dummy0: left allmulticast mode [ 283.080138][T11119] ip_tables: iptables: counters copy to user failed while replacing table [ 283.108933][T11119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.110195][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1153'. [ 283.110697][T11119] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.548736][T11121] nbd: must specify an index to disconnect [ 283.934727][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 283.934751][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1156'. [ 284.140248][T11123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.180099][T11123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.400615][T11123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.429124][T11123] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 285.280590][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.361661][T11153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1160'. [ 285.485669][T11167] netlink: 'syz.3.1164': attribute type 2 has an invalid length. [ 285.485696][T11167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1164'. [ 285.573994][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 285.574041][T11171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1164'. [ 285.766505][T11167] : entered promiscuous mode [ 286.711638][T11184] Bluetooth: MGMT ver 1.23 [ 286.775854][T11190] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1165'. [ 286.776179][T11190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1165'. [ 286.847650][T11193] xt_hashlimit: size too large, truncated to 1048576 [ 286.943761][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 287.926203][T11230] netlink: 'syz.4.1175': attribute type 30 has an invalid length. [ 288.101053][T11245] netlink: 'syz.1.1179': attribute type 4 has an invalid length. [ 288.217779][T11240] netlink: 'syz.1.1179': attribute type 4 has an invalid length. [ 288.399296][T11248] syzkaller0: entered promiscuous mode [ 288.399322][T11248] syzkaller0: entered allmulticast mode [ 288.499934][T11257] __nla_validate_parse: 4 callbacks suppressed [ 288.499956][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 288.599834][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 288.856565][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 289.900019][T11289] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 290.113942][T11311] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 290.113983][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.136808][T11308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1196'. [ 290.136832][T11308] openvswitch: netlink: Flow key attr not present in new flow. [ 290.320071][T11322] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 290.379259][T11323] debugfs: '.�PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 290.765976][T11332] syzkaller1: entered promiscuous mode [ 290.766003][T11332] syzkaller1: entered allmulticast mode [ 291.034936][T11337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.585414][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 291.614849][T11348] netlink: 'syz.1.1208': attribute type 2 has an invalid length. [ 291.701711][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'. [ 291.701828][T11352] openvswitch: netlink: Message has 4 unknown bytes. [ 291.809176][T11353] netlink: 'syz.4.1209': attribute type 4 has an invalid length. [ 291.809200][T11353] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1209'. [ 292.228054][T11377] xt_TCPMSS: Only works on TCP SYN packets [ 292.290961][T11376] netlink: 'syz.2.1215': attribute type 2 has an invalid length. [ 292.290990][T11376] netlink: 'syz.2.1215': attribute type 2 has an invalid length. [ 292.626397][T11380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.969664][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 294.435881][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 294.455041][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1231'. [ 294.696088][T11437] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 294.696115][T11437] netlink: 'syz.1.1234': attribute type 2 has an invalid length. [ 294.775508][T11439] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 294.775534][T11439] netlink: 'syz.1.1234': attribute type 2 has an invalid length. [ 295.021811][T11409] smc: net device lo applied user defined pnetid SYZ2 [ 295.022173][T11416] smc: net device lo erased user defined pnetid SYZ2 [ 295.555459][T11468] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1238'. [ 295.597142][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 295.634062][T11468] hsr_slave_0 (unregistering): left promiscuous mode [ 296.152433][T11477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.983487][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1244'. [ 297.160410][T11486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.373613][T11501] netlink: 'syz.4.1247': attribute type 6 has an invalid length. [ 297.373638][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 297.410062][T11503] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1248'. [ 297.547384][T11506] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1248'. [ 297.547411][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 297.547426][T11506] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1248'. [ 297.670635][T11486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.889015][T11486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.016555][T11523] tipc: Enabling of bearer rejected, failed to enable media [ 298.198141][T11486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.242665][T11518] bridge_slave_0: left allmulticast mode [ 298.243060][T11518] bridge_slave_0: left promiscuous mode [ 298.244059][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.304747][T11516] bridge_slave_1: left allmulticast mode [ 298.305191][T11516] bridge_slave_1: left promiscuous mode [ 298.306178][T11516] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.375827][T11533] FAULT_INJECTION: forcing a failure. [ 298.375827][T11533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.375890][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.2.1257 Not tainted syzkaller #0 PREEMPT(full) [ 298.375921][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.375953][T11533] Call Trace: [ 298.375964][T11533] [ 298.375973][T11533] dump_stack_lvl+0xe8/0x150 [ 298.376012][T11533] should_fail_ex+0x410/0x560 [ 298.376046][T11533] _copy_from_user+0x2d/0xb0 [ 298.376078][T11533] __sys_sendto+0x2a9/0x5a0 [ 298.376107][T11533] ? ksys_write+0x1e6/0x270 [ 298.376146][T11533] ? __pfx___sys_sendto+0x10/0x10 [ 298.376172][T11533] ? __mutex_unlock_slowpath+0x731/0x900 [ 298.376235][T11533] ? __pfx_ksys_write+0x10/0x10 [ 298.376276][T11533] __x64_sys_sendto+0xde/0x100 [ 298.376309][T11533] do_syscall_64+0x166/0x520 [ 298.376338][T11533] ? trace_irq_disable+0x3b/0x140 [ 298.376361][T11533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.376384][T11533] ? clear_bhb_loop+0x70/0xc0 [ 298.376413][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.376435][T11533] RIP: 0033:0x7f59fc55e98e [ 298.376456][T11533] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.376476][T11533] RSP: 002b:00007f59fd4b9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 298.376502][T11533] RAX: ffffffffffffffda RBX: 00007f59fd4bb6c0 RCX: 00007f59fc55e98e [ 298.376519][T11533] RDX: 0000000000000020 RSI: 00007f59fd4ba000 RDI: 0000000000000003 [ 298.376533][T11533] RBP: 0000000000000000 R08: 00007f59fd4b9f04 R09: 000000000000000c [ 298.376547][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 298.376561][T11533] R13: 00007f59fd4b9f58 R14: 00007f59fd4ba000 R15: 0000000000000000 [ 298.376597][T11533] [ 298.785511][T11540] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 299.040892][T11435] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.198297][T11435] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.361275][T11548] geneve3: entered promiscuous mode [ 299.375744][ T433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.375898][ T433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.375965][ T433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.376007][ T433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.524510][ T3336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.738062][ T3336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.440393][T11571] __nla_validate_parse: 2 callbacks suppressed [ 300.440417][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1267'. [ 301.619383][T11595] pim6reg: entered allmulticast mode [ 301.623879][T11595] pim6reg: left allmulticast mode [ 301.727050][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 302.155219][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1278'. [ 302.155268][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1278'. [ 302.698563][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 303.053363][T11630] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 303.053388][T11630] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 303.053402][T11630] netlink: 'syz.2.1285': attribute type 3 has an invalid length. [ 303.053416][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 303.947799][T11645] xt_CT: No such helper "snmp_trap" [ 304.626383][T11682] lo: Caught tx_queue_len zero misconfig [ 304.626661][T11682] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 304.757759][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 304.758254][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 304.815605][T11682] bond9: Removing last arp target with arp_interval on [ 305.080228][T11693] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 305.342758][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 305.342786][T11703] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1301'. [ 305.905201][T11713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1302'. [ 305.905278][T11713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1302'. [ 306.046712][T11713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1302'. [ 306.046783][T11713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1302'. [ 306.841528][T11733] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 306.899100][T11736] netlink: 'syz.3.1307': attribute type 2 has an invalid length. [ 306.939200][T11741] FAULT_INJECTION: forcing a failure. [ 306.939200][T11741] name failslab, interval 1, probability 0, space 0, times 0 [ 306.939241][T11741] CPU: 1 UID: 0 PID: 11741 Comm: syz.1.1309 Not tainted syzkaller #0 PREEMPT(full) [ 306.939268][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.939283][T11741] Call Trace: [ 306.939293][T11741] [ 306.939303][T11741] dump_stack_lvl+0xe8/0x150 [ 306.939351][T11741] should_fail_ex+0x410/0x560 [ 306.939387][T11741] should_failslab+0xa8/0x100 [ 306.939420][T11741] __kmalloc_noprof+0xfe/0x720 [ 306.939447][T11741] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 306.939480][T11741] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 306.939523][T11741] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 306.939566][T11741] genl_family_rcv_msg_doit+0xda/0x340 [ 306.939608][T11741] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 306.939646][T11741] ? __pfx_genl_get_cmd+0x10/0x10 [ 306.939673][T11741] ? stack_trace_save+0xa9/0x100 [ 306.939700][T11741] ? __lock_acquire+0x747/0x2de0 [ 306.939738][T11741] genl_rcv_msg+0x614/0x7a0 [ 306.939778][T11741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.939809][T11741] ? __pfx_ctrl_getfamily+0x10/0x10 [ 306.939858][T11741] netlink_rcv_skb+0x226/0x4a0 [ 306.939898][T11741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.939932][T11741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.939991][T11741] ? down_read+0x2be/0x330 [ 306.940033][T11741] genl_rcv+0x28/0x40 [ 306.940062][T11741] netlink_unicast+0x7bd/0x940 [ 306.940112][T11741] netlink_sendmsg+0x813/0xb40 [ 306.940149][T11741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.940185][T11741] ? apparmor_socket_sendmsg+0x98/0x360 [ 306.940218][T11741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.940241][T11741] sock_sendmsg_nosec+0x13a/0x180 [ 306.940272][T11741] __sys_sendto+0x408/0x5a0 [ 306.940302][T11741] ? ksys_write+0x1e6/0x270 [ 306.940353][T11741] ? __pfx___sys_sendto+0x10/0x10 [ 306.940381][T11741] ? __mutex_unlock_slowpath+0x731/0x900 [ 306.940454][T11741] ? __pfx_ksys_write+0x10/0x10 [ 306.940519][T11741] __x64_sys_sendto+0xde/0x100 [ 306.940557][T11741] do_syscall_64+0x166/0x520 [ 306.940590][T11741] ? trace_irq_disable+0x3b/0x140 [ 306.940616][T11741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.940642][T11741] ? clear_bhb_loop+0x70/0xc0 [ 306.940674][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.940700][T11741] RIP: 0033:0x7f2f0bb5e98e [ 306.940725][T11741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.940747][T11741] RSP: 002b:00007f2f09df4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 306.940775][T11741] RAX: ffffffffffffffda RBX: 00007f2f09df66c0 RCX: 00007f2f0bb5e98e [ 306.940795][T11741] RDX: 0000000000000020 RSI: 00007f2f09df5000 RDI: 0000000000000003 [ 306.940811][T11741] RBP: 0000000000000000 R08: 00007f2f09df4f04 R09: 000000000000000c [ 306.940828][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 306.940843][T11741] R13: 00007f2f09df4f58 R14: 00007f2f09df5000 R15: 0000000000000000 [ 306.940889][T11741] [ 307.864804][T11750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1312'. [ 307.898907][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 307.991650][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 308.039527][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 308.143152][T11758] ip6erspan0: entered allmulticast mode [ 308.308452][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1311'. [ 308.440577][T11764] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 308.440603][T11764] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1311'. [ 308.479390][T11755] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 309.473660][T11800] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 309.846233][T11813] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 309.971395][T11813] 8021q: adding VLAN 0 to HW filter on device bond10 [ 310.313803][T11809] batman_adv: batadv0: Removing interface: dummy0 [ 310.338400][T11809] bond10: (slave dummy0): Enslaving as a backup interface with an up link [ 310.434316][ T433] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 310.564596][T11436] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 310.892112][T11836] set match dimension is over the limit! [ 310.933817][T11843] set match dimension is over the limit! [ 310.970679][T11846] __nla_validate_parse: 2 callbacks suppressed [ 310.970701][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 311.032327][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1332'. [ 311.034709][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 311.061334][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 311.081049][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 311.332675][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 311.352772][T11849] syzkaller0: entered promiscuous mode [ 311.352797][T11849] syzkaller0: entered allmulticast mode [ 311.929591][T11879] netlink: 'syz.4.1341': attribute type 21 has an invalid length. [ 311.929617][T11879] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1341'. [ 311.929694][T11879] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1341'. [ 312.818286][T11900] macsec0: entered promiscuous mode [ 313.544412][T11923] tipc: Started in network mode [ 313.544448][T11923] tipc: Node identity ac14142f, cluster identity 4711 [ 313.545376][T11923] tipc: New replicast peer: 127.0.0.1 [ 313.553366][T11923] tipc: Enabled bearer , priority 10 [ 314.642354][T11988] vlan4: entered allmulticast mode [ 314.642381][T11988] bond0: entered allmulticast mode [ 314.642402][T11988] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 314.667640][ T9371] tipc: Node number set to 2886997039 [ 315.205275][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 315.367888][T12004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1364'. [ 315.443802][T12006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.454811][T12006] netlink: 'syz.4.1365': attribute type 83 has an invalid length. [ 315.580297][T12009] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 315.993924][T12020] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 316.210991][T12023] netlink: Unknown conntrack attr (0) [ 316.212929][T12023] __nla_validate_parse: 1 callbacks suppressed [ 316.212949][T12023] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1369'. [ 316.935584][T12020] bond11: entered promiscuous mode [ 316.946232][T12020] 8021q: adding VLAN 0 to HW filter on device bond11 [ 317.916718][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 318.090671][T12094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1384'. [ 318.134227][T12094] netlink: 'syz.3.1384': attribute type 10 has an invalid length. [ 318.164235][T12094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.178548][T12094] team0: Port device netdevsim1 added [ 318.182760][T12095] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 318.197004][T12094] netlink: 'syz.3.1384': attribute type 10 has an invalid length. [ 318.220085][T12094] team0: Port device netdevsim1 removed [ 318.238465][T12094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.240881][T12094] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 318.283961][T12099] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1386'. [ 318.300213][T12100] netlink: Unknown NAT attribute (type=13413, max=9) [ 318.300240][T12100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.315854][T12098] syzkaller1: entered promiscuous mode [ 318.316356][T12098] syzkaller1: entered allmulticast mode [ 318.628896][T12104] netlink: 'syz.1.1387': attribute type 1 has an invalid length. [ 318.628923][T12104] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1387'. [ 319.584950][T12140] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1393'. [ 319.714073][T12140] sctp: [Deprecated]: syz.4.1393 (pid 12140) Use of int in maxseg socket option. [ 319.714073][T12140] Use struct sctp_assoc_value instead [ 319.846571][T12151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1396'. [ 320.602634][T12172] netlink: 'syz.2.1401': attribute type 8 has an invalid length. [ 320.602660][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 321.483055][T12183] netlink: 'syz.4.1404': attribute type 1 has an invalid length. [ 321.492366][T12188] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 321.507305][T12188] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1407'. [ 321.650110][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 321.778600][T12191] bond10: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 321.807273][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1408'. [ 321.842332][T12198] vxcan2: entered allmulticast mode [ 321.893091][T12207] netlink: 'syz.3.1406': attribute type 1 has an invalid length. [ 322.015648][T12183] veth3: entered promiscuous mode [ 322.182519][T12207] 8021q: adding VLAN 0 to HW filter on device bond8 [ 322.368797][T12213] bond8: (slave syz_tun): Enslaving as a backup interface with an up link [ 322.490591][T12223] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1413'. [ 323.561616][T12253] syzkaller1: entered promiscuous mode [ 323.561827][T12253] syzkaller1: entered allmulticast mode [ 323.616143][T12257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1423'. [ 323.861306][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 324.235710][T12270] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1427'. [ 326.066680][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1429'. [ 326.066707][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 326.066727][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1429'. [ 326.727776][T12306] tipc: Failed to remove unknown binding: 66,1,1/0:210358360/210358362 [ 326.910959][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 327.025432][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 327.269722][T12318] netlink: 'syz.3.1440': attribute type 5 has an invalid length. [ 327.279500][T12318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 327.279588][T12318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1440'. [ 327.970128][T12328] bridge_slave_0: left allmulticast mode [ 327.970387][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.023034][T12333] veth0_virt_wifi: left allmulticast mode [ 328.023064][T12333] veth0_virt_wifi: left promiscuous mode [ 328.023315][T12333] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 328.085799][T12333] bridge_slave_1: left allmulticast mode [ 328.085855][T12333] bridge_slave_1: left promiscuous mode [ 328.116101][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.286507][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1448'. [ 329.514505][T12355] syzkaller1: entered promiscuous mode [ 329.514717][T12355] syzkaller1: entered allmulticast mode [ 329.899664][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1451'. [ 329.908302][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 329.908366][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1450'. [ 330.327477][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 330.754480][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 331.222606][T12400] ipvlan2: entered promiscuous mode [ 331.283945][T12400] team0: Device ipvlan2 failed to register rx_handler [ 332.322552][T12422] __nla_validate_parse: 2 callbacks suppressed [ 332.322577][T12422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1467'. [ 332.322594][T12422] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1467'. [ 332.322650][T12422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1467'. [ 333.060519][T12429] batman_adv: batadv0: Adding interface: macvlan2 [ 333.060541][T12429] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.060576][T12429] batman_adv: batadv0: Interface activated: macvlan2 [ 334.087895][T12451] syz_tun: entered allmulticast mode [ 334.251235][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 334.251263][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1475'. [ 334.285312][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1477'. [ 334.285355][T12459] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 334.290036][T12459] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1477'. [ 334.399506][T12454] syzkaller0: entered promiscuous mode [ 334.399532][T12454] syzkaller0: entered allmulticast mode [ 334.694978][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1478'. [ 334.695919][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 335.360975][T12476] syzkaller0: entered promiscuous mode [ 335.361002][T12476] syzkaller0: entered allmulticast mode [ 335.445094][T12498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1482'. [ 335.549573][ T31] audit: type=1804 audit(1790351565.042:7): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1485" name="/newroot/296/cgroup.controllers" dev="tmpfs" ino=1529 res=1 errno=0 [ 335.550238][ T31] audit: type=1800 audit(1790351565.042:8): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 335.662332][ T31] audit: type=1800 audit(1790351565.152:9): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 335.712731][ T31] audit: type=1800 audit(1790351565.202:10): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 335.731342][ T31] audit: type=1800 audit(1790351565.212:11): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 335.830108][ T31] audit: type=1800 audit(1790351565.322:12): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 335.831462][ T31] audit: type=1800 audit(1790351565.322:13): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 335.939752][ T31] audit: type=1800 audit(1790351565.432:14): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 336.168500][ T31] audit: type=1800 audit(1790351565.662:15): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 336.168569][ T31] audit: type=1800 audit(1790351565.662:16): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1485" name="cgroup.controllers" dev="tmpfs" ino=1529 res=0 errno=0 [ 336.259486][T12525] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 336.281667][T12525] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 336.868640][T12536] netlink: 'syz.2.1492': attribute type 3 has an invalid length. [ 338.698931][T12498] __nla_validate_parse: 4 callbacks suppressed [ 338.698954][T12498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1482'. [ 338.698975][T12498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1482'. [ 338.882699][T12515] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 338.981370][T12533] macsec2: entered promiscuous mode [ 338.991149][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 339.424023][T12559] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 339.424050][T12559] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1499'. [ 339.501707][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 339.709627][T12571] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.706984][T12604] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 340.811683][T12604] 8021q: adding VLAN 0 to HW filter on device bond9 [ 340.893009][T12606] bond9: (slave veth15): Enslaving as an active interface with a down link [ 341.049963][T12600] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 341.073035][T12600] bond9: (slave batadv1): making interface the new active one [ 341.098598][T12600] batadv1: entered promiscuous mode [ 341.100396][T12600] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 341.134375][T12600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.965075][T12643] lo: entered allmulticast mode [ 341.969878][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 341.999540][T12647] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 342.021748][T12648] netlink: zone id is out of range [ 342.021766][T12648] netlink: zone id is out of range [ 342.021775][T12648] netlink: zone id is out of range [ 342.021785][T12648] netlink: zone id is out of range [ 342.021794][T12648] netlink: zone id is out of range [ 342.021802][T12648] netlink: zone id is out of range [ 342.022114][T12648] netlink: zone id is out of range [ 342.217320][T12641] gretap0: left promiscuous mode [ 342.325003][T12655] netlink: 'syz.1.1522': attribute type 2 has an invalid length. [ 342.326398][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 342.379614][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 342.529505][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 342.572441][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 342.911879][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.913638][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.259102][T12641] wg0: left promiscuous mode [ 343.259131][T12641] wg0: left allmulticast mode [ 343.590233][T12641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.648587][T12641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.829055][T12641] vlan2: left allmulticast mode [ 344.039138][T12655] : entered promiscuous mode [ 344.100749][T12665] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 344.240088][T12673] __nla_validate_parse: 62 callbacks suppressed [ 344.240118][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'. [ 344.381697][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 344.381717][ T31] audit: type=1107 audit(1790351573.872:18): pid=12674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 344.875701][T12705] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1531'. [ 344.977178][T12680] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1528'. [ 344.977218][T12680] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1528'. [ 345.932560][T12716] veth0: entered promiscuous mode [ 345.970327][T12716] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 346.145887][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1534'. [ 346.333438][T12716] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.537403][T12720] bond10: (slave veth17): Enslaving as an active interface with a down link [ 346.689544][T12714] veth0: left promiscuous mode [ 347.034204][T12745] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1540'. [ 347.133016][T12745] syzkaller1: entered promiscuous mode [ 347.133045][T12745] syzkaller1: entered allmulticast mode [ 347.256297][T12745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1540'. [ 347.310065][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 347.601184][T12764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1546'. [ 347.760066][T12761] bond12: invalid NS target :: specified for addition [ 347.760101][T12761] bond12: option ns_ip6_target: invalid value (18446744073709551615) [ 347.789872][T12761] bond12 (unregistering): Released all slaves [ 347.841335][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 348.080373][T12772] ipvlan2: entered promiscuous mode [ 348.089981][T12772] bridge0: port 1(ipvlan2) entered blocking state [ 348.091007][T12772] bridge0: port 1(ipvlan2) entered disabled state [ 348.091208][T12772] ipvlan2: entered allmulticast mode [ 348.091230][T12772] bridge0: entered allmulticast mode [ 348.123337][T12772] ipvlan2: left allmulticast mode [ 348.123359][T12772] bridge0: left allmulticast mode [ 348.378351][T12780] ip6gre1: entered promiscuous mode [ 348.378379][T12780] ip6gre1: entered allmulticast mode [ 348.732030][T12790] net_ratelimit: 500 callbacks suppressed [ 348.732055][T12790] netlink: Unknown conntrack attr (0) [ 348.747128][T12790] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 348.747149][T12790] netlink: 'syz.4.1551': attribute type 4 has an invalid length. [ 348.752255][T12790] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 348.752276][T12790] netlink: 'syz.4.1551': attribute type 4 has an invalid length. [ 349.135148][T11435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.135394][T11435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.165645][ T9371] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.446060][ T9371] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.545235][T12820] __nla_validate_parse: 5 callbacks suppressed [ 349.545258][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1561'. [ 349.856226][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 349.874032][ T9371] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.299538][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 350.536372][T12859] bridge_slave_1: Caught tx_queue_len zero misconfig [ 351.364043][T12880] IPVS: Scheduler module ip_vs_sip not found [ 351.366038][T12884] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 351.366126][T12884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.246540][T12915] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1579'. [ 352.325090][T11435] batadv1: left promiscuous mode [ 352.609792][T12919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1580'. [ 353.008423][T12932] sctp: [Deprecated]: syz.1.1585 (pid 12932) Use of int in maxseg socket option. [ 353.008423][T12932] Use struct sctp_assoc_value instead [ 353.065864][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.486777][T12949] netlink: 'syz.2.1591': attribute type 1 has an invalid length. [ 353.840341][T12952] bond7: (slave bridge3): Enslaving as a backup interface with an up link [ 354.068156][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 354.376743][T12971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1597'. [ 354.511462][T12968] syzkaller1: entered promiscuous mode [ 354.511490][T12968] syzkaller1: entered allmulticast mode [ 354.710619][T12973] syzkaller1: entered promiscuous mode [ 354.710650][T12973] syzkaller1: entered allmulticast mode [ 355.104754][T12989] lo: left promiscuous mode [ 355.107097][T12989] tunl0: left promiscuous mode [ 355.109271][T12989] gre0: left promiscuous mode [ 355.113229][T12989] erspan0: left promiscuous mode [ 355.127280][T12989] ip_vti0: left promiscuous mode [ 355.132075][T12989] ip6_vti0: left promiscuous mode [ 355.147283][T12989] sit0: left promiscuous mode [ 355.149312][T12989] ip6tnl0: left promiscuous mode [ 355.156457][T12989] syz_tun: left promiscuous mode [ 355.159863][T12989] ip6gretap0: left promiscuous mode [ 355.210716][T12989] bridge0: left promiscuous mode [ 355.213884][T12989] vcan0: left promiscuous mode [ 355.229892][T12989] bond0: left promiscuous mode [ 355.233595][T12989] dummy0: left promiscuous mode [ 355.250575][T12989] nlmon0: left promiscuous mode [ 355.253888][T12989] batadv0: left promiscuous mode [ 355.268969][T12989] vxcan0: left promiscuous mode [ 355.280808][T12989] vxcan1: left promiscuous mode [ 355.282288][T12989] veth0: left promiscuous mode [ 355.283761][T12989] veth1: left promiscuous mode [ 355.288775][T12989] wg0: left promiscuous mode [ 355.300133][T12989] wg1: left promiscuous mode [ 355.321432][T12989] wg2: left promiscuous mode [ 355.323927][T12989] veth0_to_bridge: left promiscuous mode [ 355.336047][T12989] bridge_slave_0: left promiscuous mode [ 355.336521][T12989] veth1_to_bridge: left promiscuous mode [ 355.337021][T12989] bridge_slave_1: left promiscuous mode [ 355.337478][T12989] veth0_to_bond: left promiscuous mode [ 355.337955][T12989] bond_slave_0: left promiscuous mode [ 355.338397][T12989] veth0_to_team: left promiscuous mode [ 355.338871][T12989] team_slave_0: left promiscuous mode [ 355.339746][T12989] team_slave_1: left promiscuous mode [ 355.340228][T12989] veth0_to_batadv: left promiscuous mode [ 355.340683][T12989] batadv_slave_0: left promiscuous mode [ 355.341144][T12989] veth1_to_batadv: left promiscuous mode [ 355.341585][T12989] batadv_slave_1: left promiscuous mode [ 355.342067][T12989] xfrm0: left promiscuous mode [ 355.342509][T12989] veth1_to_hsr: left promiscuous mode [ 355.343549][T12989] hsr0: left promiscuous mode [ 355.350020][T12989] veth1_virt_wifi: left promiscuous mode [ 355.350498][T12989] veth0_virt_wifi: left promiscuous mode [ 355.449589][T12989] virt_wifi0: left promiscuous mode [ 355.449621][T12989] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 355.532044][T12999] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.047849][T12997] pim6reg: entered allmulticast mode [ 356.052876][T12998] pim6reg: left allmulticast mode [ 357.501196][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 357.701380][T13067] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1615'. [ 358.281254][T13074] netlink: 'syz.1.1617': attribute type 2 has an invalid length. [ 358.343995][T13087] No such timeout policy "syz1" [ 358.431927][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 358.529345][T13090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 358.870238][T13087] veth5: entered allmulticast mode [ 358.914444][T13089] batman_adv: batadv0: Adding interface: veth0 [ 358.914466][T13089] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.914502][T13089] batman_adv: batadv0: Interface activated: veth0 [ 358.917980][T13090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.983644][T13090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.045980][T13090] batman_adv: batadv0: Interface deactivated: veth0 [ 359.046168][T13090] batman_adv: batadv0: Removing interface: veth0 [ 359.220517][ T31] audit: type=1804 audit(1790351588.712:19): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1623" name="/newroot/324/cgroup.controllers" dev="tmpfs" ino=1675 res=1 errno=0 [ 359.221057][ T31] audit: type=1800 audit(1790351588.712:20): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1623" name="cgroup.controllers" dev="tmpfs" ino=1675 res=0 errno=0 [ 359.372354][T13099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1622'. [ 359.882589][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'. [ 360.268678][ T5624] block nbd3: Receive control failed (result -22) [ 360.271675][T13113] nbd3: detected capacity change from 0 to 32 [ 360.306572][ T1179] block nbd3: Dead connection, failed to find a fallback [ 360.306602][ T1179] block nbd3: shutting down sockets [ 360.306756][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.306908][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.311059][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.311093][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.311496][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.312367][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.312521][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.312550][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.313318][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.313348][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.313621][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.313649][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.316979][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.317013][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.464788][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.464856][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.465737][ T6304] ldm_validate_partition_table(): Disk read failed. [ 360.465981][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.466012][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.467765][ T1179] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.467797][ T1179] Buffer I/O error on dev nbd3, logical block 0, async page read [ 360.468185][ T6304] Dev nbd3: unable to read RDB block 0 [ 360.470490][ T6304] nbd3: unable to read partition table [ 360.623500][ T6304] ldm_validate_partition_table(): Disk read failed. [ 360.634203][ T6304] Dev nbd3: unable to read RDB block 0 [ 360.634879][ T6304] nbd3: unable to read partition table [ 361.164451][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1633'. [ 361.164482][T13129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.170836][T13129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.384364][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.450565][T13136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1635'. [ 362.858088][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1643'. [ 362.904660][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 363.945996][T13184] bridge0: port 4(vlan2) entered blocking state [ 363.946186][T13184] bridge0: port 4(vlan2) entered disabled state [ 363.946326][T13184] vlan2: entered allmulticast mode [ 363.946344][T13184] team_slave_1: entered allmulticast mode [ 363.948492][T13184] vlan2: entered promiscuous mode [ 363.948510][T13184] team_slave_1: entered promiscuous mode [ 367.918123][T13231] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1656'. [ 368.358855][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1657'. [ 369.269400][T13238] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 369.598083][T13238] 8021q: adding VLAN 0 to HW filter on device bond11 [ 369.782211][T13241] macvlan2: entered promiscuous mode [ 369.782238][T13241] macvlan2: entered allmulticast mode [ 369.782580][T13241] bond11: entered allmulticast mode [ 369.782623][T13241] bond11: entered promiscuous mode [ 369.899741][T13241] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 369.918412][T13241] team0: Port device macvlan2 added [ 369.943391][T13249] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) ! [ 370.022255][T13244] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 370.624442][T13265] syzkaller0: entered promiscuous mode [ 370.624472][T13265] syzkaller0: entered allmulticast mode [ 370.662247][T13265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1663'. [ 370.875944][T13270] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1665'. [ 371.163223][T13276] openvswitch: netlink: Duplicate or invalid key (type 0). [ 371.673453][T13285] netlink: NAT attribute has 8 unknown bytes [ 371.673492][T13285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.032727][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 372.272409][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 372.311342][T13298] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1671'. [ 372.466338][T13296] tipc: Enabled bearer , priority 10 [ 373.356090][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1678'. [ 373.418948][T13317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1676'. [ 373.662119][ T9390] tipc: Node number set to 2699801668 [ 373.906633][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 373.906662][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 373.909417][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.920456][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.931323][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.933922][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.951928][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.024550][T13321] netlink: ** replaying previous printk message ** [ 374.024550][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 374.024932][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.029034][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.029386][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.032408][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.035583][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.048948][ T5624] [ 374.099155][ T5624] ====================================================== [ 374.106201][ T5624] WARNING: possible circular locking dependency detected [ 374.113264][ T5624] syzkaller #0 Not tainted [ 374.117700][ T5624] ------------------------------------------------------ [ 374.124737][ T5624] kworker/u9:2/5624 is trying to acquire lock: [ 374.130911][ T5624] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 374.141498][ T5624] [ 374.141498][ T5624] but task is already holding lock: [ 374.148883][ T5624] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 374.158334][ T5624] [ 374.158334][ T5624] which lock already depends on the new lock. [ 374.158334][ T5624] [ 374.168783][ T5624] [ 374.168783][ T5624] the existing dependency chain (in reverse order) is: [ 374.177845][ T5624] [ 374.177845][ T5624] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 374.185976][ T5624] down_write+0x96/0x200 [ 374.190910][ T5624] kernfs_add_one+0x41/0x6f0 [ 374.196045][ T5624] kernfs_create_dir_ns+0x1a1/0x230 [ 374.201803][ T5624] internal_create_group+0x440/0x1180 [ 374.207725][ T5624] cpuhp_invoke_callback+0x434/0x810 [ 374.213637][ T5624] cpuhp_issue_call+0x3f0/0x750 [ 374.219065][ T5624] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 374.225693][ T5624] __cpuhp_setup_state+0x3f/0x60 [ 374.231187][ T5624] do_one_initcall+0x250/0x870 [ 374.236728][ T5624] do_initcall_level+0x10a/0x1a0 [ 374.242291][ T5624] do_initcalls+0x59/0xa0 [ 374.247174][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 374.252921][ T5624] kernel_init+0x22/0x1d0 [ 374.257794][ T5624] ret_from_fork+0x514/0xb70 [ 374.262965][ T5624] ret_from_fork_asm+0x1a/0x30 [ 374.268291][ T5624] [ 374.268291][ T5624] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 374.276150][ T5624] [ 374.276150][ T5624] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 374.283915][ T5624] cpus_read_lock+0x42/0x160 [ 374.289056][ T5624] static_key_slow_inc+0x12/0x30 [ 374.294671][ T5624] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 374.301045][ T5624] nbd_genl_foreach_sock+0x265/0x450 [ 374.306881][ T5624] nbd_genl_reconfigure+0xbbb/0x1040 [ 374.312721][ T5624] genl_family_rcv_msg_doit+0x233/0x340 [ 374.318917][ T5624] genl_rcv_msg+0x614/0x7a0 [ 374.323972][ T5624] netlink_rcv_skb+0x226/0x4a0 [ 374.329347][ T5624] genl_rcv+0x28/0x40 [ 374.333893][ T5624] netlink_unicast+0x7bd/0x940 [ 374.339217][ T5624] netlink_sendmsg+0x813/0xb40 [ 374.344532][ T5624] sock_sendmsg_nosec+0x13a/0x180 [ 374.350192][ T5624] ____sys_sendmsg+0x54e/0x850 [ 374.355593][ T5624] ___sys_sendmsg+0x2a5/0x360 [ 374.360842][ T5624] __x64_sys_sendmsg+0x1b1/0x290 [ 374.366344][ T5624] do_syscall_64+0x166/0x520 [ 374.371601][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.378102][ T5624] [ 374.378102][ T5624] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 374.385809][ T5624] __mutex_lock+0x19d/0x1550 [ 374.390959][ T5624] nbd_queue_rq+0x373/0xff0 [ 374.396007][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 374.402387][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 374.409354][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 374.415894][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 374.421475][ T5624] process_scheduled_works+0xc3d/0x1630 [ 374.427584][ T5624] worker_thread+0xa47/0xfb0 [ 374.432739][ T5624] kthread+0x38b/0x480 [ 374.437353][ T5624] ret_from_fork+0x514/0xb70 [ 374.442490][ T5624] ret_from_fork_asm+0x1a/0x30 [ 374.447816][ T5624] [ 374.447816][ T5624] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 374.455065][ T5624] __mutex_lock+0x19d/0x1550 [ 374.460214][ T5624] nbd_queue_rq+0xc1/0xff0 [ 374.465188][ T5624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 374.471285][ T5624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 374.478179][ T5624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 374.484733][ T5624] blk_mq_run_work_fn+0x16c/0x300 [ 374.490327][ T5624] process_scheduled_works+0xc3d/0x1630 [ 374.496432][ T5624] worker_thread+0xa47/0xfb0 [ 374.501589][ T5624] kthread+0x38b/0x480 [ 374.506202][ T5624] ret_from_fork+0x514/0xb70 [ 374.511349][ T5624] ret_from_fork_asm+0x1a/0x30 [ 374.516682][ T5624] [ 374.516682][ T5624] -> #4 (set->srcu){.+.+}-{0:0}: [ 374.523937][ T5624] __synchronize_srcu+0xc9/0x2f0 [ 374.529479][ T5624] elevator_switch+0x1e8/0x7b0 [ 374.534879][ T5624] elevator_change+0x2fa/0x480 [ 374.540206][ T5624] elevator_set_default+0x375/0x440 [ 374.545962][ T5624] blk_register_queue+0x3f3/0x4e0 [ 374.551644][ T5624] __add_disk+0x6b8/0xdb0 [ 374.556606][ T5624] add_disk_fwnode+0x100/0x3a0 [ 374.561935][ T5624] nbd_dev_add+0x733/0xb60 [ 374.566907][ T5624] nbd_init+0x168/0x1f0 [ 374.571729][ T5624] do_one_initcall+0x250/0x870 [ 374.577056][ T5624] do_initcall_level+0x10a/0x1a0 [ 374.582547][ T5624] do_initcalls+0x59/0xa0 [ 374.587430][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 374.593185][ T5624] kernel_init+0x22/0x1d0 [ 374.598064][ T5624] ret_from_fork+0x514/0xb70 [ 374.603227][ T5624] ret_from_fork_asm+0x1a/0x30 [ 374.608565][ T5624] [ 374.608565][ T5624] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 374.616436][ T5624] __mutex_lock+0x19d/0x1550 [ 374.621591][ T5624] elevator_change+0x1af/0x480 [ 374.626913][ T5624] elevator_set_none+0xb5/0x140 [ 374.632338][ T5624] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 374.638720][ T5624] nbd_start_device+0x189/0xb30 [ 374.644130][ T5624] nbd_genl_connect+0x167d/0x1cd0 [ 374.649709][ T5624] genl_family_rcv_msg_doit+0x233/0x340 [ 374.655817][ T5624] genl_rcv_msg+0x614/0x7a0 [ 374.660879][ T5624] netlink_rcv_skb+0x226/0x4a0 [ 374.666206][ T5624] genl_rcv+0x28/0x40 [ 374.670742][ T5624] netlink_unicast+0x7bd/0x940 [ 374.676060][ T5624] netlink_sendmsg+0x813/0xb40 [ 374.681379][ T5624] sock_sendmsg_nosec+0x13a/0x180 [ 374.686951][ T5624] ____sys_sendmsg+0x54e/0x850 [ 374.692271][ T5624] ___sys_sendmsg+0x2a5/0x360 [ 374.697529][ T5624] __x64_sys_sendmsg+0x1b1/0x290 [ 374.703026][ T5624] do_syscall_64+0x166/0x520 [ 374.708179][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.714627][ T5624] [ 374.714627][ T5624] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 374.723370][ T5624] blk_alloc_queue+0x544/0x690 [ 374.728704][ T5624] __blk_mq_alloc_disk+0x194/0x390 [ 374.734397][ T5624] nbd_dev_add+0x494/0xb60 [ 374.739366][ T5624] nbd_init+0x168/0x1f0 [ 374.744094][ T5624] do_one_initcall+0x250/0x870 [ 374.749416][ T5624] do_initcall_level+0x10a/0x1a0 [ 374.754923][ T5624] do_initcalls+0x59/0xa0 [ 374.759808][ T5624] kernel_init_freeable+0x29d/0x3e0 [ 374.765555][ T5624] kernel_init+0x22/0x1d0 [ 374.770433][ T5624] ret_from_fork+0x514/0xb70 [ 374.775570][ T5624] ret_from_fork_asm+0x1a/0x30 [ 374.780891][ T5624] [ 374.780891][ T5624] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 374.788271][ T5624] fs_reclaim_acquire+0x71/0x100 [ 374.793789][ T5624] kmem_cache_alloc_noprof+0x5f/0x600 [ 374.799721][ T5624] __kernfs_iattrs+0xdd/0x380 [ 374.804949][ T5624] kernfs_iop_setattr+0xe6/0x3f0 [ 374.810441][ T5624] notify_change+0xbba/0xea0 [ 374.815613][ T5624] do_truncate+0x1c2/0x250 [ 374.820607][ T5624] path_openat+0x15b5/0x1d60 [ 374.825740][ T5624] do_file_open+0x23e/0x4a0 [ 374.830789][ T5624] do_sys_openat2+0x115/0x200 [ 374.836056][ T5624] __x64_sys_openat+0x138/0x170 [ 374.841466][ T5624] do_syscall_64+0x166/0x520 [ 374.846613][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.853063][ T5624] [ 374.853063][ T5624] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 374.861629][ T5624] __lock_acquire+0x164c/0x2de0 [ 374.867083][ T5624] lock_acquire+0x115/0x350 [ 374.872144][ T5624] down_write+0x96/0x200 [ 374.876953][ T5624] kernfs_link_sibling+0x4c7/0x5a0 [ 374.882618][ T5624] kernfs_add_one+0x2db/0x6f0 [ 374.887851][ T5624] kernfs_create_dir_ns+0x1a1/0x230 [ 374.893723][ T5624] sysfs_create_dir_ns+0x12f/0x2a0 [ 374.899396][ T5624] kobject_add_internal+0x622/0xcd0 [ 374.905252][ T5624] kobject_add+0x163/0x240 [ 374.910293][ T5624] device_add+0x3fa/0xb80 [ 374.915315][ T5624] hci_conn_add_sysfs+0xd5/0x210 [ 374.920878][ T5624] hci_conn_complete_evt+0x8a8/0x1350 [ 374.926845][ T5624] hci_event_packet+0x6cd/0xf10 [ 374.932245][ T5624] hci_rx_work+0x3ee/0x1020 [ 374.937346][ T5624] process_scheduled_works+0xc3d/0x1630 [ 374.943451][ T5624] worker_thread+0xa47/0xfb0 [ 374.948598][ T5624] kthread+0x38b/0x480 [ 374.953219][ T5624] ret_from_fork+0x514/0xb70 [ 374.958360][ T5624] ret_from_fork_asm+0x1a/0x30 [ 374.963683][ T5624] [ 374.963683][ T5624] other info that might help us debug this: [ 374.963683][ T5624] [ 374.973927][ T5624] Chain exists of: [ 374.973927][ T5624] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 374.973927][ T5624] [ 374.988418][ T5624] Possible unsafe locking scenario: [ 374.988418][ T5624] [ 374.995981][ T5624] CPU0 CPU1 [ 375.001370][ T5624] ---- ---- [ 375.006762][ T5624] lock(&root->kernfs_rwsem); [ 375.011566][ T5624] lock(cpuhp_state_mutex); [ 375.018712][ T5624] lock(&root->kernfs_rwsem); [ 375.026027][ T5624] lock(&root->kernfs_iattr_rwsem); [ 375.031351][ T5624] [ 375.031351][ T5624] *** DEADLOCK *** [ 375.031351][ T5624] [ 375.039517][ T5624] locks held by kworker/u9:2/5624: 4, last CPU#0: [ 375.045982][ T5624] #0: ffff888022b7c940 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 375.057145][ T5624] #1: ffffc90003fafc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 375.069203][ T5624] #2: ffff88804fbcc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 375.079096][ T5624] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 375.088979][ T5624] [ 375.088979][ T5624] stack backtrace: [ 375.094907][ T5624] CPU: 0 UID: 0 PID: 5624 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 375.104402][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.114483][ T5624] Workqueue: hci5 hci_rx_work [ 375.119217][ T5624] Call Trace: [ 375.122529][ T5624] [ 375.125483][ T5624] dump_stack_lvl+0xe8/0x150 [ 375.130118][ T5624] print_circular_bug+0x2e2/0x300 [ 375.135177][ T5624] check_noncircular+0x12f/0x150 [ 375.140146][ T5624] __lock_acquire+0x164c/0x2de0 [ 375.145026][ T5624] ? __lock_acquire+0x747/0x2de0 [ 375.150002][ T5624] lock_acquire+0x115/0x350 [ 375.154532][ T5624] ? kernfs_link_sibling+0x4c7/0x5a0 [ 375.159856][ T5624] down_write+0x96/0x200 [ 375.164143][ T5624] ? kernfs_link_sibling+0x4c7/0x5a0 [ 375.169461][ T5624] ? __pfx_down_write+0x10/0x10 [ 375.174344][ T5624] ? kernfs_root+0x1c/0x230 [ 375.178875][ T5624] ? kernfs_root+0x1c/0x230 [ 375.183433][ T5624] ? kernfs_root+0x1c/0x230 [ 375.187963][ T5624] ? kernfs_root+0x1ea/0x230 [ 375.192578][ T5624] kernfs_link_sibling+0x4c7/0x5a0 [ 375.197722][ T5624] kernfs_add_one+0x2db/0x6f0 [ 375.202430][ T5624] kernfs_create_dir_ns+0x1a1/0x230 [ 375.207663][ T5624] sysfs_create_dir_ns+0x12f/0x2a0 [ 375.212818][ T5624] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 375.218489][ T5624] ? do_raw_spin_unlock+0xf5/0x200 [ 375.223642][ T5624] kobject_add_internal+0x622/0xcd0 [ 375.228871][ T5624] kobject_add+0x163/0x240 [ 375.233341][ T5624] ? __pfx_kobject_add+0x10/0x10 [ 375.238388][ T5624] ? get_device_parent+0x366/0x3a0 [ 375.243547][ T5624] device_add+0x3fa/0xb80 [ 375.248019][ T5624] hci_conn_add_sysfs+0xd5/0x210 [ 375.253012][ T5624] hci_conn_complete_evt+0x8a8/0x1350 [ 375.258432][ T5624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 375.264487][ T5624] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 375.270365][ T5624] ? skb_pull_data+0xf0/0x200 [ 375.275232][ T5624] hci_event_packet+0x6cd/0xf10 [ 375.280130][ T5624] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 375.285965][ T5624] ? __pfx_hci_event_packet+0x10/0x10 [ 375.291372][ T5624] ? audit_filter_rules+0x45f0/0x5d10 [ 375.296816][ T5624] ? hci_send_to_monitor+0xe2/0x590 [ 375.302209][ T5624] hci_rx_work+0x3ee/0x1020 [ 375.306749][ T5624] ? process_scheduled_works+0x97a/0x1630 [ 375.312511][ T5624] process_scheduled_works+0xc3d/0x1630 [ 375.318108][ T5624] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.324133][ T5624] ? assign_work+0x3cf/0x5d0 [ 375.328773][ T5624] worker_thread+0xa47/0xfb0 [ 375.333429][ T5624] kthread+0x38b/0x480 [ 375.337536][ T5624] ? __pfx_worker_thread+0x10/0x10 [ 375.342693][ T5624] ? __pfx_kthread+0x10/0x10 [ 375.347322][ T5624] ret_from_fork+0x514/0xb70 [ 375.351956][ T5624] ? __pfx_ret_from_fork+0x10/0x10 [ 375.357097][ T5624] ? __switch_to+0xc89/0x1420 [ 375.361856][ T5624] ? __pfx_kthread+0x10/0x10 [ 375.366495][ T5624] ret_from_fork_asm+0x1a/0x30 [ 375.371320][ T5624] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 375.824808][T13335] bond12: entered allmulticast mode [ 375.828534][T13335] 8021q: adding VLAN 0 to HW filter on device bond12 [ 376.106230][ T5636] Bluetooth: hci5: command tx timeout [ 376.401943][ T5619] syz_tun (unregistering): left allmulticast mode [ 376.547360][T13081] bond0: (slave syz_tun): Releasing backup interface [ 376.717431][T13318] bond8: (slave syz_tun): Removing an active aggregator [ 376.717960][T13318] bond8: (slave syz_tun): Releasing backup interface [ 376.903677][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 376.916355][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 377.131152][ T13] bond2: left allmulticast mode [ 377.131337][ T13] bridge0: port 3(bond2) entered disabled state [ 377.365539][ T13] gretap0 (unregistering): left promiscuous mode [ 377.771101][ T13] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 377.771131][ T13] bridge5 (unregistering): left promiscuous mode [ 377.771150][ T13] bridge5 (unregistering): left allmulticast mode [ 377.802172][ T13] bond0 (unregistering): Released all slaves [ 377.813671][ T13] bond1 (unregistering): Released all slaves [ 377.826298][ T13] bond2 (unregistering): Released all slaves [ 377.832246][ T13] bond3 (unregistering): Released all slaves [ 377.859108][ T13] bond4 (unregistering): Released all slaves [ 377.871460][ T13] bond5 (unregistering): Released all slaves [ 377.888078][ T13] bond6 (unregistering): Released all slaves [ 377.910267][ T13] bond7 (unregistering): (slave bond8): Releasing backup interface [ 377.910711][ T13] bond8 (unregistering): left allmulticast mode [ 377.910897][ T13] bond7 (unregistering): Released all slaves [ 377.937854][ T13] bond8 (unregistering): Released all slaves [ 377.947146][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 378.091714][ T13] tipc: Disabling bearer [ 378.092072][ T13] tipc: Left network mode [ 378.404383][ T13] batman_adv: batadv0: Removing interface: macvtap1 [ 378.473219][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 378.820823][ T13] veth1_to_team: left promiscuous mode [ 378.843134][ T13] hsr_slave_1: left promiscuous mode [ 379.224351][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 379.506482][ T13] IPVS: stop unused estimator thread 0... [ 379.572285][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.606313][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.648542][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.700198][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.850655][ T13] vlan2: left allmulticast mode [ 379.850681][ T13] team_slave_1: left allmulticast mode [ 379.850702][ T13] vlan2: left promiscuous mode [ 379.850716][ T13] team_slave_1: left promiscuous mode [ 379.851046][ T13] bridge0: port 4(vlan2) entered disabled state [ 379.852648][ T13] bond0: left allmulticast mode [ 379.852669][ T13] bond_slave_0: left allmulticast mode [ 379.852686][ T13] bond_slave_1: left allmulticast mode [ 379.852704][ T13] bond0: left promiscuous mode [ 379.852717][ T13] bond_slave_0: left promiscuous mode [ 379.852882][ T13] bond_slave_1: left promiscuous mode [ 379.853173][ T13] bridge0: port 3(bond0) entered disabled state [ 379.870378][ T13] bridge_slave_1: left allmulticast mode [ 379.870462][ T13] bridge_slave_1: left promiscuous mode [ 379.870980][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.892548][ T13] bridge_slave_0: left allmulticast mode [ 379.892618][ T13] bridge_slave_0: left promiscuous mode [ 379.893105][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.170782][ T13] batman_adv: batadv0: Interface deactivated: macvlan2 [ 380.173035][ T13] batman_adv: batadv0: Removing interface: macvlan2 [ 380.216561][ T13] bond7 (unregistering): (slave bridge1): Releasing backup interface [ 380.216592][ T13] bridge1 (unregistering): left promiscuous mode [ 380.216611][ T13] bridge1 (unregistering): left allmulticast mode [ 380.263146][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.273352][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.287047][ T13] bond0 (unregistering): Released all slaves [ 380.290715][ T13] bond1 (unregistering): Released all slaves [ 380.302270][ T13] bond2 (unregistering): Released all slaves [ 380.315522][ T13] bond3 (unregistering): Released all slaves [ 380.321951][ T13] bond4 (unregistering): Released all slaves [ 380.340931][ T13] bond5 (unregistering): Released all slaves [ 380.352350][ T13] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 380.353836][ T13] bond6 (unregistering): Released all slaves [ 380.382556][ T13] bond7 (unregistering): Released all slaves [ 380.393288][ T13] bond8 (unregistering): Released all slaves [ 380.406905][ T13] bond9 (unregistering): Released all slaves [ 380.413751][ T13] bond10 (unregistering): (slave dummy0): Removing an active aggregator [ 380.431192][ T13] bond10 (unregistering): (slave dummy0): Releasing backup interface [ 380.432724][ T13] bond10 (unregistering): Released all slaves [ 380.455054][ T13] bond11 (unregistering): Released all slaves [ 380.461335][ T13] bond12 (unregistering): Released all slaves [ 380.478635][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 380.579374][ T13] ´: left promiscuous mode [ 380.647468][ T13] ovs-s!: left promiscuous mode [ 380.677960][ T13] : left promiscuous mode [ 380.707198][ T13] tipc: Left network mode [ 381.114845][ T13] hsr_slave_0: left promiscuous mode [ 381.115467][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.424082][ T13] team0 (unregistering): Port device team_slave_1 removed [ 381.433685][ T13] team0 (unregistering): Port device team_slave_0 removed [ 381.541884][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 381.782433][ T13] IPVS: stop unused estimator thread 0... [ 382.130194][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 382.562728][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 383.041296][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8