last executing test programs: 9m41.593962452s ago: executing program 2 (id=6796): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100009308"], 0x0, 0x32, 0x0, 0xa, 0x2}, 0x28) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) socket$kcm(0x10, 0x2, 0x10) clock_gettime(0x5, &(0x7f0000000280)={0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="74020000100002000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x274}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80003, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0x0, 0x8, 0x10e2bd3eae29ab8e}, @TCA_NETEM_RATE={0x0, 0x6, {0x7f, 0x3, 0x7b8a, 0xffffff80}}, @TCA_NETEM_JITTER64={0x0, 0xb, 0x100000001}, @TCA_NETEM_SLOT={0x0, 0xc, {0x1, 0xfffffffffffffff4, 0x3, 0xfffffffb, 0x6, 0x9}}, @TCA_NETEM_JITTER64]}}}, @TCA_INGRESS_BLOCK={0xfffffffffffffef1, 0xd, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xffff0001}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xe}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x80000001}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xffffff9b, 0x0, 0x32}, 0x9c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x1, 0x4000001, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f00000003c0)={0x7, 0x9d9a, 0x200000002, 0xc70, 0x5, 0x80000001, 0x90, 0x8}, &(0x7f0000000400)={0x0, 0x1, 0x44, 0xfffffffffffffff8, 0x7, 0x8, 0x1dd1, 0x1}, &(0x7f0000000440)={0x3, 0x8, 0xffff, 0x40, 0x2, 0xfffffffffffffbff, 0x8, 0x5}, &(0x7f0000000480)={r1, r2+10000000}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) write$cgroup_pressure(r10, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) socket$inet6_sctp(0xa, 0x5, 0x84) 9m40.557925585s ago: executing program 2 (id=6806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) unshare(0x2a020400) syz_emit_ethernet(0x22, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500001414bbffffffff0000000000000000000032cfb4e3544f9471c9a7cfe7843d7f622853ce9a521bf583e6a48e157aaed0150da645a309bbe6a295854a11c3e94dbd911bd8393a42b718d8a85f99f64920f6ce2e174b40fdb90d219008eb1c3105c4858c94f1d7f2651cf0320749f6b7abe3da79daf525c2317b6db89d3df13dcc6334a6f380b712247c80a438445c00"/171], 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4844}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20002031}, 0x20084014) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x44880) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f00000002c0)=0x1) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000504000000020000000000001202000000020000000000000e030000000000000000002e"], 0x0, 0x54}, 0x28) socket(0x14, 0x2, 0x4) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_rs}}}}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getnexthop={0x20, 0x6a, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=0x0, @ANYRES64], 0x3c}}, 0x0) 9m40.30967101s ago: executing program 2 (id=6810): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x4, 0x1, 0xfffd, 0xd, 0x11, 0x4, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) shutdown(0xffffffffffffffff, 0x1) r1 = socket(0x400000010, 0x3, 0x0) write(r1, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) 9m39.850719947s ago: executing program 2 (id=6813): r0 = socket(0x2c, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)='h?', 0x2}], 0x3) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16e186d858374aa786dae40160b2c6c346c31d5d290663eeb53e2630f714512ed2b70a442d2ce878821100f10e30006d7da60fb2b600474e75cd8a34f7936a8a3314f85128de951fb50ace702b80a5f112676d0c86f8d5bee3cc818abe1edcc4919d47aaccf23a32d3666998923c8df3dc6879944ec1c6c93314fc462c952184", 0x80}, {&(0x7f0000001e00)="b1e4841764", 0x5}, {&(0x7f0000001f00)="c1611fa987", 0x5}], 0x3}}], 0x1, 0x24008094) socket(0x2c, 0x5, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r2, 0x0, 0x0) (async) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) (async) socket(0x28, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)='h?', 0x2}], 0x3) (async) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16e186d858374aa786dae40160b2c6c346c31d5d290663eeb53e2630f714512ed2b70a442d2ce878821100f10e30006d7da60fb2b600474e75cd8a34f7936a8a3314f85128de951fb50ace702b80a5f112676d0c86f8d5bee3cc818abe1edcc4919d47aaccf23a32d3666998923c8df3dc6879944ec1c6c93314fc462c952184", 0x80}, {&(0x7f0000001e00)="b1e4841764", 0x5}, {&(0x7f0000001f00)="c1611fa987", 0x5}], 0x3}}], 0x1, 0x24008094) (async) 9m39.664652356s ago: executing program 2 (id=6818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r1, &(0x7f0000000180)='syzkaller\x00', 0x412000, &(0x7f00000001c0)={@align=0x4, {0x2, 0x4, 0x7, 0x2}}, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x401}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1000, r5, 0x4}, 0x38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000600)={'gretap0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x80, 0x4ddc610e34c4bc3d, 0x7e77, 0xeb, {{0x46, 0x4, 0x1, 0x1, 0x118, 0x68, 0x0, 0xc, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xd3, 0x1, 0x2, [{@multicast2, 0xfffffffc}, {@empty, 0x2}, {@local, 0x10001}, {@empty, 0x40}]}, @rr={0x7, 0x7, 0xad, [@rand_addr=0x64010100]}, @cipso={0x86, 0x4c, 0x3, [{0x5, 0x11, "ce3f2b1dcad70e26de40a41830bfda"}, {0x2, 0xc, "767aa618d3e0832849d0"}, {0x1, 0x3, "91"}, {0x0, 0xd, "4e8d5d4d69dfcf8abdb962"}, {0x5, 0x4, "befa"}, {0x0, 0x6, "df69edb4"}, {0x0, 0xf, "88b2e3c89c4837f7858576a81a"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x42, 0x3, 0x3, [{@loopback, 0xffffffff}]}, @timestamp_addr={0x44, 0x44, 0xad, 0x1, 0x4, [{@rand_addr=0x64010101, 0x7}, {@broadcast, 0x3}, {@multicast2, 0x78}, {@loopback, 0x10001}, {@private=0xa010100, 0x5}, {@multicast1, 0x9}, {@loopback, 0x8}, {@private=0xa010102, 0x2}]}, @timestamp={0x44, 0x20, 0xd1, 0x0, 0xc, [0x7f, 0x5, 0x0, 0x80000001, 0xddbd, 0xa, 0x9]}, @noop, @cipso={0x86, 0x18, 0x2, [{0x2, 0x12, "899eebb8ca46ebfdc4a58110d4c67767"}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xb0, '\x00', r6, r4, 0x2, 0x2, 0x4}, 0x50) 9m37.585475163s ago: executing program 2 (id=6834): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x6, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14}}, 0x29c}}, 0x4048010) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x2, &(0x7f00000017c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r5, 0x8) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x6, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14}}, 0x29c}}, 0x4048010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) (async) close(r3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x2, &(0x7f00000017c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70}, 0x94) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r5, 0x8) (async) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) 9m22.478353186s ago: executing program 32 (id=6834): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x6, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14}}, 0x29c}}, 0x4048010) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x2, &(0x7f00000017c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r5, 0x8) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x6, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14}}, 0x29c}}, 0x4048010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) (async) close(r3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x2, &(0x7f00000017c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70}, 0x94) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r5, 0x8) (async) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) 2.617209854s ago: executing program 5 (id=10849): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf0e4, 0x7}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b9}]}, 0x60}, 0x1, 0x0, 0x0, 0xe0}, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20, 0x40000000}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x41005010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x80) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0xd, &(0x7f0000000140)="02eaff0000000000", 0x8) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x44}}, 0x4044810) 2.538896507s ago: executing program 0 (id=10850): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/97, 0x61}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf", 0xf}, {&(0x7f0000000200)="a3d605a93b0400000000000000", 0xd}, {&(0x7f0000000240)="b4cbfd3d54e98bf7ea84b53e65f7abf5c63edb9fc72d", 0x16}], 0x5) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) 2.517102452s ago: executing program 5 (id=10852): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000190001002cbd7000fbcbdf240a202000f002ff010030000008001e0006000400040002"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 2.353622866s ago: executing program 5 (id=10854): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d907", 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x7, 0x2, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7800, 0x0, 0x1, 0x4}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x2d, 0x0, @void}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0x52}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000000)="83f1055c", 0x0, 0x4}, 0x75) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x32) r7 = socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) 2.322326514s ago: executing program 5 (id=10857): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000740)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x12}, @mpls={[], @generic="9586b606c56185d68c9f87ca46ef41004911"}}, 0x20) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x400000000000012, 0x20810) 2.258381271s ago: executing program 0 (id=10858): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x0, 0xed}, 0x3}}]}, {0x4}, {0xc}, {0xfffffffffffffdc7}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x0, 0xed}, 0x3}}]}, {0x4}, {0xc}, {0xfffffffffffffdc7}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES64=r4], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES64=r4], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c000000000008000b00000000000600010007"], 0x3c}}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c000000000008000b00000000000600010007"], 0x3c}}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x6, 0x800, 0x8, 0x10000, 0xae83}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r14}, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r14}, &(0x7f0000000300)=0x8) 2.126589186s ago: executing program 5 (id=10861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r8, 0x0, 0xf3a, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x50, 0x1405, 0x400, 0x70bd29, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x50}}, 0x40004) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r9, @ANYRES32=0x0, @ANYRES32=r0], 0x48}}, 0x0) 2.071581225s ago: executing program 3 (id=10862): unshare(0x26020480) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)=ANY=[@ANYBLOB="edd8c72f1a250bbc0cf52e", @ANYRESOCT=r1]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0xfffffdfd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000200)={0x9, &(0x7f0000000140)=[{0x2, 0x80, 0x1, 0x7}, {0x9dd, 0x6, 0x0, 0x3}, {0x0, 0x92, 0xf8, 0x9}, {0xffff, 0xfa, 0xe, 0x1}, {0xecc6, 0xc, 0x2, 0x32}, {0x9, 0x40, 0x69, 0x6}, {0x5, 0xe6, 0x81, 0x5}, {0x9, 0xfe, 0x4, 0x7}, {0x100, 0x2, 0x10, 0x1}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x21860, 0x4) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/ipc\x00') sendmsg$nl_generic(r3, &(0x7f0000001cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000940)={0x1310, 0x22, 0x100, 0x70bd2b, 0x25dfdbff, {0x4}, [@nested={0x1251, 0xf, 0x0, 0x1, [@generic="a095e887582454c1d24533091970f55d34a3c257938a8af0cad7f4840c174c973d42e0fb7f1a64869c469d60565b35bf270c61890bc53265f169b500632bf2ae15eb10a3f918e4cdccfed2e80d6bd59ac5c55a16c84da1bfccd0b55f218983cf7dea87d28357224fde6bac16da9c592904eb8af471b2419db1d759d919f2b2ec2020761fa084b1f0768b942bf38afc5725cc36c22c594fc18f383b95affeea169bd15d870cd4bca32a758445d7f467ca4d73cba28d40f5ec788a7679b8bdd164581ddb504cd50a5311b83ca51a48d2be91b9e81e71ffb1ae952e9c", @generic="225cd0391c12f219273e79e82a2f0ef6dcaeb419cfb986492f0ee322120227223664402b2acbb542e87bfa69dec91e6eced9905c2e31bd23382b7a7fd770219a3ec99850e5cd098696a2fafe6703bbc9cc315c732cdda82edef418c11464c24d7ebc8d2b7bd6dc6c8b28d4be1c6b5fd54576134fa394f5d150209264968cb2d29fa93e4a5d9b5d68eb5ca6c1e6470fd6f8f1138949dda67837793e32b1", @typed={0x4, 0xee}, @generic="de7b0feeb141925ae3c6cd3f07bb3209bedbaa595281c018ebf84eb182e0e26cb110b80adf9cb1c909058e499611eef858e711d146e9bbd99756352d5ac8793dd350db96bdab187c62d76e7c6b0e39a0aaf388f2b70f52c6bb82f4f255ffcec6f47c5d08146cb2125c8ed65b7aac040712d60af64945f0eaf90812e8fcbbea411c4d2ef27136da21baac1d9c2a8d04a6eee0529bcc19b98c654b6643576d161d14d8666e96ec66e32787d34f76e87c5ce70e35ff0f46d852303a0a56c24822c097746541a221910078c2c9eef7", @generic, @nested={0x4, 0x3}, @generic="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"]}, @typed={0xa5, 0x49, 0x0, 0x0, @binary="6749df6f088479c2adc0f263e2ecfe1df05e5d89378ab898cee2576b8ffa16db2a8a8c2812bac617e4c678101ca695559c914dce60445076c61da11a4cb6ad6d12706e7dc0730b604082b13111fd69d861c1280cee3be67b299cbcc113661444a257de28df27abc029ea47776591bae7b349fbce64d4d88b82d8ad9cf35133e97a73bc6fd2222a14657e56bfa8cc586b71e92dbc259081e6e685b2baa778cc7fe0"}]}, 0x1310}, 0x1, 0x0, 0x0, 0x20048000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) unshare(0x26020480) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)=ANY=[@ANYBLOB="edd8c72f1a250bbc0cf52e", @ANYRESOCT=r1]) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0xfffffdfd) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000200)={0x9, &(0x7f0000000140)=[{0x2, 0x80, 0x1, 0x7}, {0x9dd, 0x6, 0x0, 0x3}, {0x0, 0x92, 0xf8, 0x9}, {0xffff, 0xfa, 0xe, 0x1}, {0xecc6, 0xc, 0x2, 0x32}, {0x9, 0x40, 0x69, 0x6}, {0x5, 0xe6, 0x81, 0x5}, {0x9, 0xfe, 0x4, 0x7}, {0x100, 0x2, 0x10, 0x1}]}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x21860, 0x4) (async) gettid() (async) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/ipc\x00') (async) sendmsg$nl_generic(r3, &(0x7f0000001cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000940)={0x1310, 0x22, 0x100, 0x70bd2b, 0x25dfdbff, {0x4}, [@nested={0x1251, 0xf, 0x0, 0x1, [@generic="a095e887582454c1d24533091970f55d34a3c257938a8af0cad7f4840c174c973d42e0fb7f1a64869c469d60565b35bf270c61890bc53265f169b500632bf2ae15eb10a3f918e4cdccfed2e80d6bd59ac5c55a16c84da1bfccd0b55f218983cf7dea87d28357224fde6bac16da9c592904eb8af471b2419db1d759d919f2b2ec2020761fa084b1f0768b942bf38afc5725cc36c22c594fc18f383b95affeea169bd15d870cd4bca32a758445d7f467ca4d73cba28d40f5ec788a7679b8bdd164581ddb504cd50a5311b83ca51a48d2be91b9e81e71ffb1ae952e9c", @generic="225cd0391c12f219273e79e82a2f0ef6dcaeb419cfb986492f0ee322120227223664402b2acbb542e87bfa69dec91e6eced9905c2e31bd23382b7a7fd770219a3ec99850e5cd098696a2fafe6703bbc9cc315c732cdda82edef418c11464c24d7ebc8d2b7bd6dc6c8b28d4be1c6b5fd54576134fa394f5d150209264968cb2d29fa93e4a5d9b5d68eb5ca6c1e6470fd6f8f1138949dda67837793e32b1", @typed={0x4, 0xee}, @generic="de7b0feeb141925ae3c6cd3f07bb3209bedbaa595281c018ebf84eb182e0e26cb110b80adf9cb1c909058e499611eef858e711d146e9bbd99756352d5ac8793dd350db96bdab187c62d76e7c6b0e39a0aaf388f2b70f52c6bb82f4f255ffcec6f47c5d08146cb2125c8ed65b7aac040712d60af64945f0eaf90812e8fcbbea411c4d2ef27136da21baac1d9c2a8d04a6eee0529bcc19b98c654b6643576d161d14d8666e96ec66e32787d34f76e87c5ce70e35ff0f46d852303a0a56c24822c097746541a221910078c2c9eef7", @generic, @nested={0x4, 0x3}, @generic="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"]}, @typed={0xa5, 0x49, 0x0, 0x0, @binary="6749df6f088479c2adc0f263e2ecfe1df05e5d89378ab898cee2576b8ffa16db2a8a8c2812bac617e4c678101ca695559c914dce60445076c61da11a4cb6ad6d12706e7dc0730b604082b13111fd69d861c1280cee3be67b299cbcc113661444a257de28df27abc029ea47776591bae7b349fbce64d4d88b82d8ad9cf35133e97a73bc6fd2222a14657e56bfa8cc586b71e92dbc259081e6e685b2baa778cc7fe0"}]}, 0x1310}, 0x1, 0x0, 0x0, 0x20048000}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) 1.885667981s ago: executing program 5 (id=10864): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES16=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, r3}, 0xc) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r6, &(0x7f0000000000)='\"', 0x1) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendto$l2tp6(r6, &(0x7f0000000200)="2bea2921f868d51d56c513e53cc5a8fa12b312377ee7c68281d69fc3edfbd4fff2c26cb6e79884c4401e7966464aca1d3009922f856008f141580fa784e0842be35c4f27a667de072ef36bce3e900852900184ff1fa4dc1461274950b68839bf597d4ceed82a5f97b75d1c8d908a0544672aa55342a6c84d6a6176bb7bf8290af4156fb511263577d2db1c2176d11c6ecfe176ee41ac7ac3957f5af5540f82804c940d488c4b5ab94a27814731622e6237ef88147ab223daebc28dd4b2e76a", 0xbf, 0x81, &(0x7f00000002c0)={0xa, 0x0, 0xfffffff7, @mcast2, 0x100, 0x2}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x2, 0xa, 0x32, 0x3, 0x15, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@mcast1, 0x27, 0x4, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x2c}, @sadb_x_sec_ctx={0x8, 0x18, 0x59, 0x9, 0x38, "f63fb69e257fa3c47d72415b732653e8d32d88855c561c5b3c0707d18c1a02575fb3cd65efb5301a687f5186f4873020d342fe1fccd26f41"}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x11, 0x4, 0x10}]}, 0xa8}}, 0xe0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x688, 0xd0, 0x210, 0x0, 0xd0, 0x210, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xc83e, 0x7}}}, {{@ipv6={@mcast2, @mcast2, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x4, 0x0, 0x2, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x13, 0x3c, 0x2497}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0xc00, 0xd], 0x7, 0x2, 0x3, [@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x29}, @dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @private1, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0xb8}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private1], 0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff], 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x32, 0xb, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x9}, &(0x7f00000000c0)=0x8) 1.879820777s ago: executing program 0 (id=10865): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0xdd, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000e80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x128, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x128}}, 0x4048804) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2510000000080007000400000008000700080000000800080009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8490) 1.860724572s ago: executing program 1 (id=10866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000040601020000000200fdffffffffff020500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x38}, 0x42090) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f00000003c0)={0x2a, 0xffffffff, 0x8000}, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlinkprop={0x44, 0x6c, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5273c, 0x402}, [@IFLA_MAP={0x24, 0xe, {0x6, 0x3, 0x7f, 0x3, 0xb, 0x61}}]}, 0x44}}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000800)={&(0x7f00000000c0)=0x2, 0xec26, &(0x7f0000000640)=[{}, {}], &(0x7f00000007c0)}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x21, 0x7fffffff, 0xfffffffc}, {@remote, 0x4e20, 0x10000, 0x9, 0x2}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.785960102s ago: executing program 3 (id=10867): r0 = socket$qrtr(0x2a, 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="691a840869b4f05379922630936ba6d27a624d08e85fc4b7caf2b51a99a09cc8bbd04f5027bde7234a8e10aa6226f7b0aa91edacffdf2b16fd65e3", 0x3b}, {&(0x7f00000000c0)="c480a5f7abee17a3c9bbce41acb6b14e3a843969127f7434fe25c4c53c2d001be977e30116ac079ab8194df85fb8842d07877953c5638a2690011730ed14ce6d4e5ac27479390a7706c69f02097a5bc83a03d92f99ba", 0xffd4}, {&(0x7f0000000380)="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", 0x11b}], 0x3) r1 = socket(0x1d, 0x2, 0x6) accept4$bt_l2cap(r1, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000bf00000095"], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x30b2}}, 0x20}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="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", 0x35f}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r4, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/232, 0xe8}], 0x3}, 0x3}], 0x1, 0x2100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'macsec0\x00'}]}]}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 1.679680551s ago: executing program 3 (id=10868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000fedbdf2516000000180001807478dc10dc73b33e1400020067726535a9f511d9ca3a54367461703000"], 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r2, 0xfff) accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x20, 0x11, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0xcc, &(0x7f0000000b00)=""/204, 0x40f00, 0x6, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x0, 0x8, 0xe}, 0x10, 0xffffffffffffffff, r3, 0x3, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x8}, {0x1, 0x2, 0xc, 0x2}], 0x10, 0x9}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002e000900270000edd6505b61bc9733a93fd1e78a292b9e05c30bd3a885db10c9e8dfb85c2fe81e62ed246eb5634562d594a6d1de48055696223fa432d284744f8d4b05926d926695595feaab9440e7007bb3bade37c8c53e92294c08b534e4c5ca3230dfc77149e64dbe34aa662b3fdab4258fa74e081717020f96be775a23aed2e061e03140e069ec74a546ff7f00000000000068a2946c8d874468d70d2810b09c805a690d954b99581c9eac53bba081ed7553a9e3f134d10f35689750d050c03d"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 1.559069239s ago: executing program 1 (id=10869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20000021) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x21, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) (async) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r9, &(0x7f0000000600)=ANY=[@ANYBLOB="a359cc91b70c6ab9664bc9b884af835922c6f5b434ea4548f023d5150209287cb497ab099ecefb1a16b3d866a3b6e6a475d2d7e3beefae05a05e8a8b3ed352200e80fe2566dec8f41d84a8abbc4d0a03796cab36a10e2bd40f3f09d7ead146d5a3d5670d99744d17a800023f9e2417effdcacc54783b7cb511eb04a055aa2e795827e4b15229345ba01a2d7becc4df85745d195e53c6758537d496cacb373e9e86a9a2c32004a8610563b8e027c817801936b3f33efb1bb3e6d7dcf9601b3d0ecebba7e8380dea96e66bc9988ef6d71274bc127ca7", @ANYRESDEC=r6, @ANYRESHEX=r5, @ANYRES64=r4, @ANYRES32=r7, @ANYRES8=r1, @ANYRESHEX=r8, @ANYRES64=r9], 0xfdef) (async) close(r9) (async) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x804) 1.46327115s ago: executing program 4 (id=10870): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x1, 0x0, 0x0, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x1}}], 0x70, 0x20000000}, 0x0) 1.462192617s ago: executing program 0 (id=10871): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4040, 0x0) sendto$packet(r1, &(0x7f0000000240)="3b826a86871d9a3d70e7c44b615ec95585a8238e3651c99acb57b8", 0x1b, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0x10, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740aa75", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) 1.421686187s ago: executing program 1 (id=10872): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="5d7217dfef0e1a491fdecde3fc8f6a7635c793b7869d72454d2465bcc75843b060c399e8ab96110e4c8463ed8b60cad9d9129d68ad3174e7b8b4ef961b46bd8032d749c5e3c96bd20b", 0x49}, {&(0x7f00000000c0)="51656305f50561e61f1241b8c329719d8602dd91d5f099a4a38d80137bd41a05a5d78bea114c2f8453fcb77a19c9446c74760a445f592c86d511115cd9be750f39c101ffd15ce422c4df0e9d2cfdf366c2c477749cab9bc4ddae2f56dcd713cef9375330f5b5b80266a818fedb62a47eaf27dc5b207cf9b0bbe09697d821", 0x7e}, {&(0x7f0000000140)="90c26f30d186bda71b5fe5807e1b803d7da914bb08b1a33c257b4e8cd1012bf4c2c8a3f24e36308d39dda4bf4392ffe6d54ca711afd21efad74e67c7e49f8571c31472133e44cda983fd0c345831d0f16a6834052fe4e71636053b83decda773bae0fc10d5e75b071d4994a298ed977ef7024a513ed9f456cb05ba0118c07ad66b11036e8af01877da8476a777bf4e0dc9eab966ef6f24d2e6ad85b13c76f15d2ce3bc748390b905ebf9f8421629ed935961c5cca0ca2daf2eabe58934d9f32bc5eb49d414a2924467fa8bc2d6a96d057d6af2e89b951665bae8c88606d66f016bf50567d26752a7b724b695d9", 0xed}], 0x3, &(0x7f0000000280)=[{0x10, 0x119, 0x8}, {0xe8, 0x84, 0x6, "c3067d9e6f461a2f0ae77758a4996009590cf0ed847220fccaadbdadeaa22de15824a72c620295e0a918be88d2ce62a029ed450ebee5474079153edfa85a7a5c55f3b4a7e326bcfa5baa0931dccf883bbdab06986a3dbcffb6903d347f59b8a713517dfa11784b9805fdf58ea5c4f6632f9f879ab47726326c66fe13c41d29cc50e2b48222f72587dda7c5390bb56e768569e0279123a354745abcde78402081f9a7f6c2442bfaa917f93e49a1dd437f0d6b3b4f16fa457da603b44e5d333bd86a08785f2315639a79caf439e8461d211dda855b"}, {0x108, 0x110, 0x18, "4a82b529a673acf2f8a35c72defccbf500760ae027ca9f8bb0dff43ec0ea2891e8251d92c0954a2747617e186fe145d40049db8eb0cc1fd9a41a20395aa36bbdee7bd0cffb219e1def317082245e3ed87d1c02555cb9df6df37812f5dc03c318592b54ed26bdc1a9e4f8c565bb037af75606ae953d7bfedec7889899f34c0059c27a5322f84fbd3b1b36cebbdd9415c159b68da37660041d9a31f1b75749b7459a5f2cc078593669c56c4cd45f6c2ed89f6edd8cd08abf09266219884e7ec9adbb531364249d57fb85444b2646ad455066e1bd2dc780aed876be6cf82a9dee186768725999ab9cde6a3d81ab50a88479b15e5f4465dd177b"}], 0x200}, 0x40) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f00000004c0)={0x7, 0xf15, 0x400, 0xffff, 0x101, 0x5, 0x8000, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000540)={r1}) r3 = accept4$tipc(r2, &(0x7f0000000580)=@name, &(0x7f00000005c0)=0x10, 0x80800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@migrate={0x9c, 0x21, 0x400, 0x70bd26, 0x25dfdbfd, {{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x1, 0x4e23, 0x0, 0x2, 0x20, 0x40, 0x2f, 0x0, 0xffffffffffffffff}, 0x6e6bb8}, [@extra_flags={0x8, 0x18, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @proto={0x5, 0x19, 0xff}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8e}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2d, 0x982}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@loopback}}]}, 0x9c}}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000007c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000800)) sendmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000840)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="eb83199eff97b2986efd35b2a48aff81f50368ac0717329fcd43900bd787d96155eafb314f24e6783be09d1143d5378163f933353bb9585b09179ce3f38ae8553fa885793326484e97c749d1440c88cc94a867697da9446907f8a9d11e8a7ae8533cb06b4ca34cc9874258317b00ace4e4ce5f1cb8445a7e565f95c1ad0f2f86522faa30b2e6c723a45b74679b7ee5af7c800729a475913db0b2f852144439f2b10cfb958b573ca97c2bdf661e8d2556", 0xb0}, {&(0x7f0000000980)="7f009b232911884a2f0bc4b48bf91975aa4dfb4e9f5d4056b282e72d1aa23f8cfe08f03b143c78065510803218dcd6791c9c8beb56bf603ecaec09855cce645e0d0819ac42a3ac0a52ac46dea304b3244c1f8949da27ac4991a58004408b0b90cf539d0a0039f4b4fe0ebb5f4bbe9b22e7ad42a376a386f8ea826a151ceb9179f1b36244851c886ca56448b6c33928a1d8299aec34d332dcad23c34ea1d053f73d378dd35b5bb883aeb33241f6eb19681d1e0406a6b43dd0e7cff22f98c4abe7ba308b8489fbdb97b2982e698379fd1ae705912913dc60d502a7ad", 0xdb}, {&(0x7f0000000a80)="5e6f57660ba18ca95d46559b7becd0553c1ab7a8a8c1866c8a7b7d1e675afaa43e91164abbeb320153e565bf", 0x2c}], 0x3, &(0x7f0000000b00)=[{0x20, 0x10f, 0x1, "dca3d1ee9f83310c312980b948605c7e"}, {0x88, 0x115, 0xd, "4181deb6eddcb17660b454683b6e40bcb9986c79c378dcdf6768df52dfb5e50be387478251ed480b787769d689612ec6bceb42c1c7c84b668a972faba94488bc89da821453d5d0e33258ac5fddb931a3b71800c661cc1e7e5854997a53a53c3148cda61fcd432e6c773ec29dde41207a6b"}, {0x108, 0x11, 0x8001, "f6d5e9264158906b2739b2b437fa54c5703450a3d3ea4549a86fa9548583bfdc37de1703c06999eddb87cfafcc7cac3355a05eed322a7844c88d900332c7b1d7a27eae5a3853f32f8a6223478179bda69861ed12c87f165c9a089950ae3655a9ddb996847374598561666bc55f725780d62d66436b4e3ed18ab20075f1b2db3ce41048dcedbcd0e5dcf3502168d5f28bc20bd4aff233d6090120ea6811c150fdc6c67c6635c44bdfe2060236eae8bad1e0500834f50f92b25cb1fc967190de80d65c7d651a2b987449b079812cd6bcaab235c3d0c5528969635502fc0e2e267c79441cf977793e904dd5a3da26b8f8875cbf"}, {0x108, 0x103, 0x80000000, "e7eafecb695592a957a8f72338adff45b6b94594dfea60360d8f7ae399fd72d31c3c73b2d8c7475ae32fcb1284c53f16fcb19099229c1f48d53e51243e93e8f51e855cef8d93c0650725678bdb32d485bfef0e30510ab5f1d6a1e2bda319339ae2dac49c6894c6064ffd2c8c3731145a1e0fda683e1f804e0c0c1d8fcfef3e5c8d3e856857791fcb23417938a41fa14f2133a2efb1d4864b02268057e02076a4f0aa336acc5a1b7cae5427697be50d5053664782b2af6889aab19fc280a72e4e07a3dda465f7de05ec35834b517fc77dc208018fa5dec2986c0ddfbb9bcd6c8ef452ed247645af7c40661bdab6b751766a"}, {0x80, 0x0, 0x7, "2c3d0cba7898ad6c67a370bb6fcc9fbb8502837a527b4818c488559754701ff45dadd0ddabeefa42011db96d7489e25f5d15f1aad2b0d56d1669f1c80dbbaf4e4a6ad85fba69a2edc2e2f0433f15196dbe9b7c5585d35fa5d75a8aa0d6b7aa5ad5ff1557be77b6c4f857936246"}], 0x338}}, {{&(0x7f0000000e40)=@isdn={0x22, 0x1, 0x6, 0x7f, 0xf9}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ec0)="f26cfe881a3be893ec3f9c6ceb90e2dfe45589a49810ebce093bd7e75327c3b1514aea28797a8c88a39f629a344b880b217c95d932d9495cc0b92a1c62fa3020de072523c20e0b180a87e01986ceded144e8d0451dd777e784c04332a2b9a619496c939a937e49012fdc03a35e19b65dc1d36878868541870543c879a174305b399c3379b1d01fbd6f6327f4754a79fe759c98804e212951b71b731459d252a5962aa28030c8bacf6ddfdaa79a55a12f06d1e30cf7deed38625a2420d14e291a8a10e06a079e0984f12590915741c661d536ce6bf4b18fa379cf176e3d6fd22b0f2ced34f87faece9382ff5a0e", 0xed}, {&(0x7f0000000fc0)="a4e2b7c96fd5d6e27492e3ae30c3d404e8dd8896613b1b0af19b1fd3b184c7ef108e8c475e598d0cd28027918a70edd26c7716eeabbd7777aa3b0f5da64236f4025bffdbfe1b5d492cbd", 0x4a}, {&(0x7f0000001040)="0f102573b5439c292f06d594f2cd843a72d4995efe88742fce2c9be7fac63da6c4544629be079c695f51af8ca3629353d65c96ca1ef3de9cb9fea1e15053a893094d212a1cefe527daadab03ea5018cc07bcb30de805bd24636fe13e169176fc19281e636d7b9e6c83a574a237e3f0d661d3e24a74ed3aec3ea7756b", 0x7c}], 0x3, &(0x7f0000001100)=[{0x70, 0x0, 0xf1, "f9c7ef1aab9b8b650a60183f76d0a7be0b36c2fde0092a04ae2e0446f23d37946c15a6fd496aea868896b364c341a518740c7c6360aa4909babe685d4f2b52523534f7663db55e0531eb6ed9a5955210896675cafad93d537189d101d2"}, {0x78, 0x101, 0x8, "ea16c42cf718eca555184c76bf93cdd55d072f4b95be4538fdf6f1ba07d15a5dce1e2665af334feb229cdbb551a7a1bb8f60c6055d86a2b0186218da8466b1cd89a4389cb2629fac552d5beb638ab5bb1787ade0b4466d592942a24143ea87f31b156e9dc0"}], 0xe8}}, {{&(0x7f0000001200)=@nl, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)="9bba330bc7cc2f7b7a691e301745daea6c0633b29876e36b2935e66986aa7d7a1d4fde0e80b936", 0x27}], 0x1, &(0x7f0000001300)}}, {{&(0x7f0000001340)=@sco={0x1f, @none}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000013c0)="07e58ee4ff0ab7934c0fbbc143fd4cb928a1c67c7b99e9f25553a30324ca9cc6405f60e524301911a23c3c2b1fc156e4f4095fe8e1eb560bfa00ea39c0904c6a470a3f8b988e1b870e048820bbfb4f43ac345c957b8c055c511b03b447bf9f6cc77dec1b401bc0bd131d371625f01a2b106c5424accf7619a24592a7ab11025f2d1b0fdf6b849eb6011e32d30703ed46958b072c8e77d5245826837e705591a4e5fc3e2534990216f022ba5b11afb2a10e5d24ccd897fbc031f7f20b8a08e0904588b673", 0xc4}], 0x1, &(0x7f0000001500)=[{0xf0, 0xb2, 0x1, "9921142b0ecf1cf7c793f7cd977abd5c0614453b42bcab39b7d72126a51772b4d072752188f4ece19239e7ea5bd06054cc6fcf2b020add8b10a8ba922b60ef6e7cc16691463b33c405d5885c140ae803101e7693ae91d132b1d5531d36c0a6e643afdf0c11acb6a403077ab239b612740ee839fb7220eb6b3f9257796c0f8756ca31b98eb2dda45bea01c23d642aa799a6cec98ab45cd029e060a00f2f2063abff501009612db1805043d7d2c1541407501d42e0a98398a5156ea15971af61ac980d4f72275d015dc28acd836faf7bdb387e8808c89f466476704397"}, {0x58, 0x102, 0x10, "7fa82e76316e9e36b52aa63857304842eea1fb1b07d36dd085ae9be420e55853f711a5e8dbe1286181d2bdc68ead7c7125227e5a574c35d4e3b4f4fa81af16d57c5a"}, {0xc0, 0x84, 0x401, "b35c17009e15f10ee35d7b67290237c9d60d078b11d9c342a5c959e9c89a44deb1172f2e0a6ec69ab4657e2d6d54a22f4a08728727c2fbe143f8314848efd0189245890312324686c6ce3552e586b59ac1b1e8bb2c416cc1632b59eefc5555f23d04400f32db4f0667e3c5c590206fa9662f11c24bf71b2a204de5c0e05c73a838f10be9d2f259d0589d270c19912455b7f43b90faa7b6c3ca6560e0cdefdeeedaee7903a68e4082cd"}, {0x50, 0x10d, 0x8000, "b9b1cd0e2736aa33587ff441d722ea2ccc2c338dd109bc2d947fecbc506f7d18d14060faf14ef6042c8905e196782caaa7fecc03e3bd928270679c0ba03efdb9"}], 0x258}}], 0x4, 0x8800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x5c, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20048890) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x5c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x15}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x5c}}, 0x15da7f11c33c4735) bind$netlink(r8, &(0x7f0000001b40)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000001b80), &(0x7f0000001bc0)=0x30) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001c00)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000021c0)={r6, 0xe0, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001f00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000001fc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002000), &(0x7f0000002040), 0x8, 0x46, 0x8, 0x8, &(0x7f0000002080)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002240)=@bpf_lsm={0x1d, 0x20, &(0x7f0000001c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x4b, 0x9, 0x1, 0x2, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfafa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001d40)='syzkaller\x00', 0x6, 0xd5, &(0x7f0000001d80)=""/213, 0x40e00, 0x11, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000001e80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001ec0)={0x3, 0x1, 0x101, 0x8}, 0x10, r11, 0x0, 0x2, 0x0, &(0x7f0000002200)=[{0x0, 0x4, 0xe, 0x6}, {0x0, 0x1, 0xa, 0x8}], 0x10, 0x4}, 0x94) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000002300)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_BDESCS(r12, 0xc0186e87, &(0x7f00000023c0)={&(0x7f0000002380)=[{0x8, 0x9, 0x3, 0x3, 0x6}], 0x1, 0x28, 0x6, 0x3ff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000002400)={'wlan0\x00', @remote}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000002440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3c, r10}) socket$phonet_pipe(0x23, 0x5, 0x2) 1.370704316s ago: executing program 4 (id=10873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0xcc}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000009280)={0x28, 0x12, 0x503dabdc2aa92767, 0x70bd08, 0x25dfdbff, "", [@typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x10, 0x11a, 0x0, 0x1, [@nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40849c4}, 0x8014) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x224, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) 1.294728127s ago: executing program 1 (id=10874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.232501749s ago: executing program 4 (id=10875): r0 = accept(0xffffffffffffffff, &(0x7f0000000480)=@nfc_llcp, &(0x7f0000000500)=0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r1, 0xc4fa0491f45dbcb, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe48}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8e}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x814) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000006c0)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r3, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x2b, 0x0, &(0x7f0000000000)=""/178, 0xa4}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'dvmrp0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040000010000fedbdf2508000000181c068014000400fe88000000000000000000000000000132dd5527ee88d01c9486312748e54d175e745c178fa55c4d7bb1e89e5441d0f60256273c0613da1f11305b369fa6ce14091a0f68cf735263dc85627407a84c"], 0xffffff6e}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r8, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000900)={@multicast2, @broadcast, 0x0}, &(0x7f0000000940)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa4, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x8044) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000780)={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, 0x31, 0x40, 0x401, 0x200, 0x2, 0x800000, r4}) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000800), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 1.220386921s ago: executing program 1 (id=10876): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x88b}}], 0x18}}], 0x1, 0x20) sendmmsg(r0, &(0x7f0000001500), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.102352507s ago: executing program 0 (id=10877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) mmap(&(0x7f00005be000/0x3000)=nil, 0x3000, 0x7000000, 0x20010, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_cmd={0x2b, 0xff, 0x622, 0x3, 0x8, 0x2, 0x4, 0xc4, 0x0, 0x7, 0x77ffffff, 0x7bffffff, 0xbb8d, 0x8, 0x6, 0x6, [0xe, 0xfb]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0xaa0f4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r3, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xec}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000cc0)={r6, 0x20, &(0x7f0000000c80)={&(0x7f0000000ac0)=""/253, 0xfd, 0x0, &(0x7f0000000bc0)=""/140, 0x8c}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000e00)={r2, &(0x7f0000000d00)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x400000, &(0x7f0000000d40)={@align=0x6, {0x4, 0x6, 0x1b1}}, 0x7fff, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1a, 0x29, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call, @call={0x85, 0x0, 0x0, 0x92}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x4, 0xe3, &(0x7f0000000900)=""/227, 0x40e00, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x7, 0x5, 0xffffffff}, 0x10, r9, r10, 0x7, &(0x7f0000000e40)=[r6, r5], &(0x7f0000000e80)=[{0x5, 0x5, 0x1, 0x9}, {0x4, 0x5, 0x7, 0x5}, {0x3, 0x1, 0xf}, {0x4, 0x1, 0x7, 0x5}, {0x4, 0x4, 0x6, 0x9}, {0x3, 0x4, 0xd, 0x1}, {0x0, 0x3, 0x1, 0x5}], 0x10, 0xe03a}, 0x94) 117.302518ms ago: executing program 4 (id=10878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000e00), 0x12) bind$x25(r5, &(0x7f0000000080), 0x12) close(r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getgid() sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="30000000a2c2e0133286d3267aa315627fe46b433605b65e07088aca04923f183288687e6b2d32d158d5a03f12ecb2b04d411780a648d3b3d5ac18590b63e34fc854eb4f800789daae0ad98c9236b3fd9e395fbb9a21c032c5bb7324c7360cdd90650425bad416dce848e879784caffa44da714f5397a57b21d0ba3ad8cc6ccd4063b084e31cbfe46062399b49bc02eb13651f98d7b8b1765799932b8c6c0863af9ad173ea8eb6535cf516f340c414a67037eee10c2c", @ANYRES16=r4, @ANYBLOB="010080fffbff000000000100000008000200030000000c00048005000300020000000800010003000000"], 0x30}}, 0x4080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$x25(r6, &(0x7f0000000ac0), 0x12) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="cbe170e50d0a010100000000000000000a0000010988ad0073797a31000000000900010073797a310000000081c1779cb91787dcce2e380b28648fd6c41e529eff8b27a53d048808790bce4bc24a8100000000010000006c1a31f3bf5e0e9034aba801cf6fa0763e063dc6"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 116.263734ms ago: executing program 1 (id=10879): socket$kcm(0x23, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) socket(0x2, 0x80805, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}, {0x0}], 0x2, &(0x7f0000000d00)=""/190, 0xbe}, 0x30120) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000008c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x20}, [{0x1f, 0x1, "fc6823061bcc"}]}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r8 = socket(0x27, 0xa, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x100, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 11.249965ms ago: executing program 4 (id=10880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}], 0x1}, 0x10182) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100001a00016000feffffff00010000ac1e0101000000000000000000000000fc0100000000000000000000000a0001000107174e2300050a0000203a0000", @ANYBLOB="38678e962a59a6f250b1bd45a7b6822ad7d69d725f1d46e0d957a4cff79fbe6be50fea4d95c33761d64e420a084d87fa3a9d9474815e6e48b3c88b88b7c0f5f7722af03e763110301417acfde03e05d7e130ae334c555f12aa18c0fcf9ba4c4c62ca295ae7e4f657c51f304bf80e2d9531e32ba28461adca4fb62c58346383a569d9ccba0be5a1b255c7750e04a33a39da9671812f0032c5b1812a57e9a753776e", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e0000000535000002"], 0x138}}, 0x844) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xfffffff0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x20008084) 7.877753ms ago: executing program 4 (id=10881): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/27, 0x1b}, 0x2}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000340)=""/242, 0xf2}], 0x2, &(0x7f0000000480)=""/34, 0x22}, 0x4}, {{&(0x7f00000004c0), 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/231, 0xe7}], 0x2, &(0x7f0000000780)=""/204, 0xcc}, 0x9}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/227, 0xe3}], 0x1, &(0x7f00000009c0)=""/171, 0xab}, 0x5}, {{&(0x7f0000000a80)=@llc, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/130, 0x82}, {&(0x7f0000000bc0)=""/223, 0xdf}, {&(0x7f0000000cc0)=""/250, 0xfa}, {&(0x7f0000000dc0)=""/7, 0x7}], 0x4, &(0x7f0000000e40)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001e40)=""/216, 0xd8}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/223, 0xdf}, {&(0x7f0000003040)=""/15, 0xf}], 0x4, &(0x7f00000030c0)=""/34, 0x22}, 0x3}, {{&(0x7f0000003100)=@qipcrtr, 0x80, &(0x7f0000003580)=[{&(0x7f0000003180)=""/64, 0x40}, {&(0x7f00000031c0)=""/178, 0xb2}, {&(0x7f0000003280)=""/33, 0x21}, {&(0x7f00000032c0)=""/14, 0xe}, {&(0x7f0000003300)=""/40, 0x28}, {&(0x7f0000003340)=""/247, 0xf7}, {&(0x7f0000003440)=""/191, 0xbf}, {&(0x7f0000003500)=""/105, 0x69}], 0x8}, 0x1}], 0x7, 0x40000142, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.828721ms ago: executing program 3 (id=10882): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff513006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) close(r0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x6b, 0x4}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/48}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f00000002c0)}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="34943590bf585b240e8b787687a5d10000001000", @ANYRES32=0x0, @ANYBLOB="385a030011a00400140012800b0001006970766c616e000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20060044) 5.854565ms ago: executing program 3 (id=10883): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x2810}, 0x4000814) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) 4.675132ms ago: executing program 3 (id=10884): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000004c65b1f67ce893f6fba000a263540000000300260014000600736974300000000000000000000000001400070000000000000000000000ffff7f000001"], 0x3c}, 0x8, 0x3000000000002}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote, '\x00'}}}}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(r10, &(0x7f0000000300)={0x1d, r7, 0x1, {0x1, 0x0, 0x3}, 0x1}, 0x18) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r12, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00), 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x38, 0x1, 0x1, [r5, r1, r10, r0, r0, 0xffffffffffffffff, r8, r0, r5, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r8, r1, r3, r6]}}, @rights={{0x2c, 0x1, 0x1, [r3, r9, r10, r3, r4, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x4008000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, r14, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x8}}]}, 0x54}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 0s ago: executing program 0 (id=10885): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000700)=ANY=[], 0x38, 0x800}], 0x1, 0x4008080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) socket$inet6(0xa, 0x3, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x85b}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r4, 0x7ff, 0x5, [0xff, 0xc2, 0x7, 0xa3e, 0x3]}, &(0x7f0000000440)=0x12) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r8, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0x94, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x59, 0x2, 'pimreg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40884}, 0x800) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000", @ANYRESOCT=r2, @ANYBLOB="000129bd7000ffdbdf2501000000060006004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040811}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r10}, 0x10) kernel console output (not intermixed with test programs): tered forwarding state [ 1347.960127][T12426] xt_hashlimit: size too large, truncated to 1048576 [ 1348.198385][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 1348.263286][T12439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1348.275173][T12439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1348.456126][T12439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1348.481322][T12439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1348.641499][T12439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1348.667539][T12439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1348.714335][T12458] netlink: 'syz.3.9429': attribute type 4 has an invalid length. [ 1348.732263][T12239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1348.745438][T12458] netlink: 'syz.3.9429': attribute type 1 has an invalid length. [ 1348.767931][T12458] netlink: 'syz.3.9429': attribute type 2 has an invalid length. [ 1348.781150][T12439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1348.792498][T12439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1348.881420][T12239] veth0_vlan: entered promiscuous mode [ 1348.930317][T12239] veth1_vlan: entered promiscuous mode [ 1349.050391][T12239] veth0_macvtap: entered promiscuous mode [ 1349.099082][T12239] veth1_macvtap: entered promiscuous mode [ 1349.156859][ T5633] Bluetooth: hci3: command tx timeout [ 1349.265803][T11163] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.288140][T11163] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1349.305811][T11163] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.317610][T11163] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1349.368389][ T8709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.400711][ T8709] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1349.461316][ T8709] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.474699][ T8709] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1349.494412][T12239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1349.546798][T12239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.598811][ T8706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.621829][ T8706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.632667][ T8706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.660307][T12487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9437'. [ 1349.666300][ T8706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.770685][T12492] netlink: 'syz.4.9439': attribute type 11 has an invalid length. [ 1349.778835][T12492] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.9439'. [ 1349.909148][ T8706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.931604][ T8706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.952786][T12494] can: request_module (can-proto-0) failed. [ 1350.034406][T12499] netlink: 'syz.5.9441': attribute type 39 has an invalid length. [ 1350.069361][T11166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.090435][T11166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.125551][T12509] netlink: 'syz.0.9443': attribute type 89 has an invalid length. [ 1350.263591][T12513] syzkaller1: entered promiscuous mode [ 1350.270189][T12513] syzkaller1: entered allmulticast mode [ 1350.293863][T12513] syzkaller1: left promiscuous mode [ 1350.305423][T12513] syzkaller1: left allmulticast mode [ 1350.764087][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9447'. [ 1350.802666][T12523] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1350.813738][T12523] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 1350.845165][T12525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9447'. [ 1350.918979][T12532] netlink: 'syz.5.9449': attribute type 1 has an invalid length. [ 1350.960219][T12532] netlink: 'syz.5.9449': attribute type 1 has an invalid length. [ 1350.967698][T12537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9451'. [ 1351.038888][T12540] netlink: 'syz.3.9450': attribute type 10 has an invalid length. [ 1351.236801][ T5633] Bluetooth: hci3: command tx timeout [ 1351.993827][T12553] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9455'. [ 1352.132062][T12564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1352.306161][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1352.339029][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1352.366810][T12574] netlink: 'syz.3.9462': attribute type 4 has an invalid length. [ 1352.407399][T12582] bond1: (slave syz_tun): Removing an active aggregator [ 1352.443912][T12582] bond1: (slave syz_tun): Releasing backup interface [ 1352.481293][T12582] bridge_slave_0: left allmulticast mode [ 1352.492897][T12582] bridge_slave_0: left promiscuous mode [ 1352.511528][T12582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.538840][T12582] bridge_slave_1: left allmulticast mode [ 1352.550209][T12582] bridge_slave_1: left promiscuous mode [ 1352.562140][T12582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.575753][T12582] bond0: (slave bond_slave_0): Releasing backup interface [ 1352.592164][T12582] bond0: (slave bond_slave_1): Releasing backup interface [ 1352.602371][T12582] team0: Port device team_slave_0 removed [ 1352.609684][T12582] team0: Port device team_slave_1 removed [ 1352.615721][T12582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.623756][T12582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.632055][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9466'. [ 1352.632365][T12582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1352.784558][T12595] batman_adv: batadv0: Adding interface: dummy0 [ 1352.791324][T12595] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.817233][T12595] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1352.846149][T12609] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1352.961037][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1352.965701][T12617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1352.989779][T12605] lo speed is unknown, defaulting to 1000 [ 1353.582713][T12633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9473'. [ 1353.611767][T12606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1354.171312][T12659] netlink: 'syz.5.9479': attribute type 9 has an invalid length. [ 1354.196246][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9482'. [ 1354.214596][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9482'. [ 1354.701050][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1355.157744][T12707] lo speed is unknown, defaulting to 1000 [ 1355.554671][T12726] netlink: 'syz.3.9501': attribute type 83 has an invalid length. [ 1355.658882][T12733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1355.887911][T12744] bond5: entered allmulticast mode [ 1355.903002][T12744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1356.357176][ T5640] Bluetooth: hci3: command 0x0405 tx timeout [ 1356.368523][T12767] xt_hashlimit: size too large, truncated to 1048576 [ 1357.425022][T12782] team0 (unregistering): Port device team_slave_0 removed [ 1357.467726][T12782] team0 (unregistering): Port device team_slave_1 removed [ 1357.497553][T12788] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1357.505990][T12788] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1357.714172][T12798] __nla_validate_parse: 10 callbacks suppressed [ 1357.714189][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9517'. [ 1357.755126][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9517'. [ 1358.005155][T12817] netlink: 'syz.3.9523': attribute type 20 has an invalid length. [ 1358.036669][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9523'. [ 1358.074848][T11163] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.085851][T12817] netlink: 'syz.3.9523': attribute type 20 has an invalid length. [ 1358.106616][T11163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.121318][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9523'. [ 1358.131876][T11163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.142666][T11163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.293418][T12833] netlink: 'syz.1.9528': attribute type 1 has an invalid length. [ 1358.418980][T12840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9531'. [ 1358.457905][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9530'. [ 1358.786879][T12861] tc_dump_action: action bad kind [ 1358.805613][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9536'. [ 1359.306774][T12889] hmac(sha224: entered promiscuous mode [ 1359.352177][T12889] syzkaller0: entered promiscuous mode [ 1359.366437][T12889] syzkaller0: entered allmulticast mode [ 1359.462886][ T5737] IPVS: starting estimator thread 0... [ 1359.589810][T12908] IPVS: using max 33 ests per chain, 79200 per kthread [ 1359.672286][T12911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1359.696639][T12912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9546'. [ 1359.743483][T12914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1359.782262][T12919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9548'. [ 1359.865045][T12913] bond1 (unregistering): Released all slaves [ 1359.938209][T12926] netlink: 'syz.3.9550': attribute type 1 has an invalid length. [ 1359.945974][T12926] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9550'. [ 1360.192942][T12940] IPv6: addrconf: prefix option has invalid lifetime [ 1360.217228][T12941] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1360.463089][T12956] netlink: 'syz.3.9558': attribute type 1 has an invalid length. [ 1360.609110][T12959] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1360.666226][T12959] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1360.781590][T12956] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1361.001510][T12971] ip6gre1: entered promiscuous mode [ 1361.015892][T12971] ip6gre1: entered allmulticast mode [ 1361.051448][T12971] netlink: 'syz.3.9561': attribute type 6 has an invalid length. [ 1361.129814][T12975] netlink: 'syz.1.9562': attribute type 12 has an invalid length. [ 1361.910973][T13006] xt_l2tp: unknown flags: 51 [ 1362.023853][T13011] netlink: 'syz.1.9574': attribute type 4 has an invalid length. [ 1362.199818][T13033] netlink: 'syz.3.9576': attribute type 6 has an invalid length. [ 1362.538444][T11163] syzkaller0: tun_net_xmit 76 [ 1362.554786][T11163] syzkaller0: tun_net_xmit 48 [ 1362.562390][T13043] syzkaller0: create flow: hash 2251948767 index 1 [ 1362.570279][T11255] syzkaller0: tun_net_xmit 76 [ 1362.583999][T11255] IPVS: starting estimator thread 0... [ 1362.677212][T13057] IPVS: using max 37 ests per chain, 88800 per kthread [ 1362.743957][T13064] netlink: 'syz.5.9587': attribute type 1 has an invalid length. [ 1362.763878][T13042] syzkaller0: delete flow: hash 2251948767 index 1 [ 1363.365061][T13076] __nla_validate_parse: 11 callbacks suppressed [ 1363.365081][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9591'. [ 1365.511073][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9598'. [ 1365.535191][T13105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9599'. [ 1365.647839][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1365.792321][T13126] netlink: 'syz.1.9604': attribute type 4 has an invalid length. [ 1365.806617][T13126] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9604'. [ 1365.899816][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9605'. [ 1365.901566][T13134] netlink: 'syz.3.9606': attribute type 2 has an invalid length. [ 1365.987626][T13130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9604'. [ 1366.232745][T13148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9609'. [ 1366.409109][T13160] veth0_virt_wifi: entered allmulticast mode [ 1366.434748][T13165] netlink: 'syz.1.9615': attribute type 7 has an invalid length. [ 1366.596579][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1366.604469][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1366.612282][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1366.674735][T13184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9619'. [ 1366.963199][T13186] bond6 (unregistering): Released all slaves [ 1367.242678][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1367.442383][T13226] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1367.469979][T13226] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1368.245226][T13258] openvswitch: netlink: IP tunnel dst address not specified [ 1368.451094][T13269] __nla_validate_parse: 36 callbacks suppressed [ 1368.451112][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9642'. [ 1368.469645][T13262] bond6: Invalid ad_actor_system MAC address. [ 1368.488659][T13262] bond6: option ad_actor_system: invalid value (7) [ 1368.503470][T13270] netlink: 'syz.1.9642': attribute type 1 has an invalid length. [ 1368.521810][T13262] bond6 (unregistering): Released all slaves [ 1368.768351][T13276] netlink: 'syz.4.9644': attribute type 1 has an invalid length. [ 1368.890766][T13278] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9645'. [ 1368.971548][T13283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1368.978814][T13283] IPv6: NLM_F_CREATE should be set when creating new route [ 1368.986028][T13283] IPv6: NLM_F_CREATE should be set when creating new route [ 1368.993249][T13283] IPv6: NLM_F_CREATE should be set when creating new route [ 1369.000467][T13281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1369.112200][T13292] x_tables: duplicate underflow at hook 2 [ 1369.230043][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9654'. [ 1369.265195][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9654'. [ 1369.265383][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9654'. [ 1369.426741][T13312] netlink: 112 bytes leftover after parsing attributes in process `syz.5.9657'. [ 1369.489848][T13317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.553468][T13315] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.578008][T13315] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1369.692412][T13330] netlink: 'syz.0.9661': attribute type 17 has an invalid length. [ 1369.711098][T13315] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.761295][T13315] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1369.883507][T13330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.895399][T13330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.912563][T13330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.987969][T13330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1369.999405][T13330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1370.017365][T13330] veth1_vlan: left promiscuous mode [ 1370.024193][T13330] veth0_vlan: left promiscuous mode [ 1370.030760][T13330] veth0_vlan: entered promiscuous mode [ 1370.038871][T13330] veth1_vlan: entered promiscuous mode [ 1370.051193][T13330] veth1_macvtap: left promiscuous mode [ 1370.058501][T13330] veth0_macvtap: left promiscuous mode [ 1370.066089][T13330] veth0_macvtap: entered promiscuous mode [ 1370.074117][T13330] veth1_macvtap: entered promiscuous mode [ 1370.088332][T13330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1370.097869][T13330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1370.108055][T13330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1370.118764][T13330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1370.137695][T13330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1370.152242][T13330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1370.205164][ T8716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.222591][ T8716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.254143][T13315] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.280737][T13338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1370.280908][T13315] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1370.321652][ T8716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.345420][ T8716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.383098][T13315] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.408282][T13315] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1370.426268][T13342] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1370.530908][ T8709] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1370.559893][ T8709] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1370.569710][ T8709] bond2: (slave veth3): making interface the new active one [ 1370.578063][ T8709] veth3: entered allmulticast mode [ 1370.602986][ T8709] bond2: active interface up! [ 1370.658104][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9667'. [ 1370.958060][ T8716] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.976779][ T8716] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1371.058870][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9671'. [ 1371.069883][ T8708] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.093615][ T8708] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1371.215020][T23520] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.233680][T23520] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1371.308531][ T8716] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.326185][ T8716] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1371.629711][T13407] xt_TCPMSS: Only works on TCP SYN packets [ 1371.651077][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9679'. [ 1371.721307][T13407] Bluetooth: MGMT ver 1.23 [ 1371.852628][T13407] lo speed is unknown, defaulting to 1000 [ 1372.152400][T13450] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1372.447192][T13437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.454602][T13437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.692528][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1372.727924][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.006986][T13437] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1373.085077][T23520] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.144216][T23520] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.179438][T23520] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.200885][T23520] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.603608][T13485] netlink: 'syz.3.9699': attribute type 7 has an invalid length. [ 1373.617745][T13487] netlink: 'syz.5.9700': attribute type 21 has an invalid length. [ 1373.631085][T13485] __nla_validate_parse: 5 callbacks suppressed [ 1373.631102][T13485] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1373.637351][T13487] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9700'. [ 1373.671469][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9700'. [ 1373.684312][T13487] netlink: 'syz.5.9700': attribute type 4 has an invalid length. [ 1373.704138][T13487] netlink: 'syz.5.9700': attribute type 5 has an invalid length. [ 1373.736209][T13487] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9700'. [ 1373.775744][T13491] m1Ie5nè‹Ò: entered promiscuous mode [ 1373.809065][T13492] veth1_macvtap: left promiscuous mode [ 1374.083577][T13504] netlink: 'syz.5.9705': attribute type 2 has an invalid length. [ 1374.393884][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9709'. [ 1374.784858][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9714'. [ 1374.812512][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9714'. [ 1375.049445][T13556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1375.175535][T13556] ip6erspan0: entered promiscuous mode [ 1375.222985][T13562] netlink: 'syz.1.9719': attribute type 9 has an invalid length. [ 1375.245186][T13559] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1375.251114][T13562] netlink: 'syz.1.9719': attribute type 6 has an invalid length. [ 1375.261710][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9720'. [ 1375.274952][T13562] netlink: 'syz.1.9719': attribute type 7 has an invalid length. [ 1375.295053][T13562] netlink: 'syz.1.9719': attribute type 8 has an invalid length. [ 1375.631653][T13578] netlink: 149 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1375.754327][T13585] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1375.802269][T13585] sctp: [Deprecated]: syz.1.9723 (pid 13585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1375.802269][T13585] Use struct sctp_sack_info instead [ 1375.838595][T13585] sctp: [Deprecated]: syz.1.9723 (pid 13585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1375.838595][T13585] Use struct sctp_sack_info instead [ 1377.031574][T13643] netlink: 'syz.5.9739': attribute type 1 has an invalid length. [ 1377.055703][T13643] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1377.074352][T13643] bond8: (slave gretap1): making interface the new active one [ 1377.084738][T13643] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1377.154761][T13646] lo speed is unknown, defaulting to 1000 [ 1377.599012][T13651] pim6reg1: entered promiscuous mode [ 1377.604534][T13651] pim6reg1: entered allmulticast mode [ 1378.976911][T13597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1379.344850][T13677] validate_nla: 1 callbacks suppressed [ 1379.344871][T13677] netlink: 'syz.0.9747': attribute type 1 has an invalid length. [ 1379.499811][T13682] netlink: 'syz.3.9749': attribute type 1 has an invalid length. [ 1379.537404][T13682] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9749'. [ 1379.664762][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9757'. [ 1379.770414][T13694] syzkaller0: entered promiscuous mode [ 1379.811592][T13694] syzkaller0: entered allmulticast mode [ 1379.858860][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9761'. [ 1379.877554][T13715] nbd: couldn't find a device at index 65546 [ 1380.017734][T13724] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9763'. [ 1380.110838][T13731] netlink: 'syz.5.9763': attribute type 8 has an invalid length. [ 1380.122344][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9763'. [ 1380.555081][T13759] netlink: 'syz.1.9770': attribute type 1 has an invalid length. [ 1380.792104][T13770] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9772'. [ 1380.872799][T13778] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9776'. [ 1381.387314][T13788] xt_hashlimit: size too large, truncated to 1048576 [ 1381.830285][T13818] nft_compat: unsupported protocol 0 [ 1382.009067][T13825] tipc: Started in network mode [ 1382.018484][T13825] tipc: Node identity , cluster identity 4711 [ 1382.031059][T13825] tipc: Failed to set node id, please configure manually [ 1382.057009][T13825] tipc: Enabling of bearer rejected, failed to enable media [ 1382.263134][T13835] netlink: 'syz.0.9789': attribute type 10 has an invalid length. [ 1382.274194][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9787'. [ 1382.360904][T13839] netlink: 'syz.4.9790': attribute type 13 has an invalid length. [ 1382.569681][T13831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.577367][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.749405][T13843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9791'. [ 1383.098004][T13831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.138019][T13831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.816192][T13835] ipvlan0: entered allmulticast mode [ 1383.823784][T13835] veth0_vlan: entered allmulticast mode [ 1383.857007][T13835] team0: Device ipvlan0 failed to register rx_handler [ 1383.948968][ T8709] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1383.969791][ T8709] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.991030][ T8709] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.009388][ T8709] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.031034][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9792'. [ 1384.062764][ T8709] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.080812][ T8709] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.098235][ T8709] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.108752][ T8709] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.126124][T13862] macsec1: entered promiscuous mode [ 1384.134357][T13862] veth1_to_bond: entered promiscuous mode [ 1384.142431][T13862] macsec1: entered allmulticast mode [ 1384.166202][T13862] veth1_to_bond: entered allmulticast mode [ 1384.183824][T13862] veth1_to_bond: left allmulticast mode [ 1384.209396][T13862] veth1_to_bond: left promiscuous mode [ 1384.398679][T13878] netlink: 'syz.1.9800': attribute type 13 has an invalid length. [ 1384.605230][T13894] __nla_validate_parse: 1 callbacks suppressed [ 1384.605248][T13894] netlink: 380 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1384.673936][T13893] lo speed is unknown, defaulting to 1000 [ 1385.197971][T13919] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1385.445314][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9817'. [ 1385.592860][T13943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1385.836720][T11255] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1385.924070][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9823'. [ 1385.973942][T13965] vlan2: entered promiscuous mode [ 1385.993594][T13965] batadv0: entered promiscuous mode [ 1386.007407][T13969] netlink: 112 bytes leftover after parsing attributes in process `syz.5.9824'. [ 1386.119146][T13975] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9826'. [ 1386.149761][T13969] ip6tnl0: Caught tx_queue_len zero misconfig [ 1386.398018][T11163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1386.642725][T13998] mac80211_hwsim hwsim83 syzkaller0: entered promiscuous mode [ 1386.663312][T13998] mac80211_hwsim hwsim83 syzkaller0: entered allmulticast mode [ 1386.702462][T13998] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1386.757016][ T1238] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.618653][ T8709] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.648952][ T8709] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.770273][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9842'. [ 1387.779859][ T1238] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.826198][T14031] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1387.895926][T14038] bond2 (unregistering): Released all slaves [ 1387.917737][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9844'. [ 1388.411063][T14062] netlink: 41 bytes leftover after parsing attributes in process `syz.4.9850'. [ 1388.420839][T14062] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9850'. [ 1388.788894][T14074] netlink: 'syz.1.9855': attribute type 3 has an invalid length. [ 1388.828518][T14074] nbd: couldn't find device at index 1 [ 1388.936913][T14074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.974155][T14074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.091450][T14074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.119879][T14074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.154557][T14074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1389.187390][T14074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1389.206187][T14074] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1389.217587][T14074] veth1_vlan: left promiscuous mode [ 1389.226022][T14074] veth0_vlan: left promiscuous mode [ 1389.232844][T14074] veth0_vlan: entered promiscuous mode [ 1389.244033][T14074] veth1_vlan: entered promiscuous mode [ 1389.259467][T14074] veth1_macvtap: left promiscuous mode [ 1389.287478][T14074] veth0_macvtap: left promiscuous mode [ 1389.294908][T14074] veth0_macvtap: entered promiscuous mode [ 1389.309339][T14074] veth1_macvtap: entered promiscuous mode [ 1389.323424][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1389.332608][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1389.341133][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1389.349654][T14074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1389.361764][T14086] x_tables: duplicate underflow at hook 2 [ 1389.368636][T14074] rose0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1389.433706][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.440931][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.475181][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.482385][ T8709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.591317][ T8704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.614351][ T8704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.678089][ T8704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.710451][ T8704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.778380][T14097] netlink: 'syz.3.9861': attribute type 16 has an invalid length. [ 1389.842821][T14097] netlink: 'syz.3.9861': attribute type 3 has an invalid length. [ 1389.871732][T14097] netlink: 'syz.3.9861': attribute type 2 has an invalid length. [ 1389.880993][T14097] netlink: 'syz.3.9861': attribute type 1 has an invalid length. [ 1389.891965][T14097] __nla_validate_parse: 3 callbacks suppressed [ 1389.891978][T14097] netlink: 64022 bytes leftover after parsing attributes in process `syz.3.9861'. [ 1389.983933][T14107] netlink: 'syz.4.9864': attribute type 1 has an invalid length. [ 1390.015488][T14107] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9864'. [ 1390.244408][T14111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1390.952702][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9873'. [ 1391.023260][T14153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9873'. [ 1391.265907][T14153] ip6gre2: entered promiscuous mode [ 1391.318578][T14153] ip6gre2: entered allmulticast mode [ 1391.380898][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.557351][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1391.709837][T14161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.786028][T14178] lo speed is unknown, defaulting to 1000 [ 1394.188324][T14216] batadv_slave_1: entered promiscuous mode [ 1394.240480][T14215] batadv_slave_1: left promiscuous mode [ 1395.074527][T14234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.370195][T14241] nft_compat: unsupported protocol 0 [ 1397.814827][T14306] openvswitch: netlink: IP tunnel TTL not specified. [ 1397.995253][T14312] netlink: 'syz.3.9903': attribute type 9 has an invalid length. [ 1398.044992][T14312] netlink: 'syz.3.9903': attribute type 6 has an invalid length. [ 1398.217456][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9900'. [ 1398.686752][T14325] netlink: 'syz.0.9907': attribute type 10 has an invalid length. [ 1398.737892][T14325] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9907'. [ 1398.781321][T14325] veth1_virt_wifi: entered promiscuous mode [ 1398.798745][T14325] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 1398.827264][T14325] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 1398.848928][T14325] veth1_virt_wifi: entered allmulticast mode [ 1398.885923][T14325] veth1_virt_wifi: left allmulticast mode [ 1399.223213][T14339] xt_hashlimit: size too large, truncated to 1048576 [ 1399.236910][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1399.576853][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9916'. [ 1399.756073][T14356] ip6gre1: entered promiscuous mode [ 1399.772325][T14356] ip6gre1: entered allmulticast mode [ 1399.787256][T14362] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1400.308975][ T8705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1400.323452][ T8705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1400.338198][ T1238] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1400.378448][T14371] netlink: 'syz.1.9922': attribute type 12 has an invalid length. [ 1400.446117][T14372] syzkaller1: entered promiscuous mode [ 1400.464208][T14372] syzkaller1: entered allmulticast mode [ 1400.487177][ T1238] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1400.711247][ T30] audit: type=1107 audit(1777926438.884:35): pid=14384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa ' [ 1400.764008][T14391] nbd: must specify at least one socket [ 1400.777046][ T1238] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1400.984349][T14393] syzkaller1: entered promiscuous mode [ 1401.016167][T14393] syzkaller1: entered allmulticast mode [ 1401.128982][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9929'. [ 1401.919676][T14409] netlink: 'syz.0.9931': attribute type 3 has an invalid length. [ 1401.973445][T14409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1402.193788][T14413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1402.204826][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9933'. [ 1403.204188][T14436] syz.5.9939 (14436) used obsolete PPPIOCDETACH ioctl [ 1403.281387][T14435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9938'. [ 1403.967183][T14432] netlink: 'syz.0.9937': attribute type 3 has an invalid length. [ 1404.031537][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1404.042203][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1404.173025][T14450] vlan2: entered promiscuous mode [ 1404.193278][T14450] erspan0: entered promiscuous mode [ 1404.386520][T14453] bond2: entered allmulticast mode [ 1404.393116][T14453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1404.772416][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9949'. [ 1404.865405][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9953'. [ 1404.944930][T14476] netdevsim0: renamed from batadv_slave_1 [ 1405.010745][T14480] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9953'. [ 1405.093279][T14482] xt_nfacct: accounting object `syz0' does not exist [ 1405.375591][ T8891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1405.392373][ T8891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1405.404060][ T8891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1405.428970][ T8891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1405.444374][ T8891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1405.621297][T14476] netdevsim0: entered promiscuous mode [ 1405.631323][T14476] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1405.810275][T14481] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1406.231540][ T1830] bond7: (slave syz_tun): Removing an active aggregator [ 1406.267333][T14512] netlink: 'syz.1.9958': attribute type 1 has an invalid length. [ 1406.269688][ T8712] bond7: Warning: Found an uninitialized port [ 1406.290137][ T1830] bond7: (slave syz_tun): Releasing backup interface [ 1406.319100][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9960'. [ 1406.522244][T14514] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1406.543338][T14514] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1406.755685][ T8709] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.797767][ T8709] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51801 - 0 [ 1406.827056][ T8709] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1406.981897][T14528] lo: Caught tx_queue_len zero misconfig [ 1407.030625][T14528] atomic_op ffff888079cb2998 conn xmit_atomic 0000000000000000 [ 1407.100646][ T8709] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.153895][ T8709] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51801 - 0 [ 1407.178645][ T8709] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1407.382001][ T8709] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.429251][ T8709] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51801 - 0 [ 1407.440665][ T8709] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1407.523788][T14554] netlink: 'syz.1.9967': attribute type 1 has an invalid length. [ 1407.559611][ T5640] Bluetooth: hci0: command tx timeout [ 1407.712541][ T8709] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.724404][ T8709] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51801 - 0 [ 1407.736545][ T8709] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1407.778831][T14490] lo speed is unknown, defaulting to 1000 [ 1407.958346][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9970'. [ 1408.004217][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9970'. [ 1408.550122][T14578] nbd: must specify a size in bytes for the device [ 1408.625256][T14578] nbd: couldn't find device at index 1 [ 1409.053975][ T8709] dvmrp0: left allmulticast mode [ 1409.116659][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9977'. [ 1409.637724][ T5640] Bluetooth: hci0: command tx timeout [ 1409.936018][T11255] IPVS: starting estimator thread 0... [ 1409.944083][T14611] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1410.048778][T14617] IPVS: using max 27 ests per chain, 64800 per kthread [ 1410.250443][ T8709] bond2 (unregistering): (slave erspan1): Releasing active interface [ 1410.344979][ T8709] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1410.884972][ T8709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.900508][ T8709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.918231][ T8709] bond0 (unregistering): Released all slaves [ 1410.943376][ T8709] bond1 (unregistering): Released all slaves [ 1410.984489][ T8709] bond2 (unregistering): Released all slaves [ 1411.038890][ T8709] bond3 (unregistering): Released all slaves [ 1411.080730][ T8709] bond4 (unregistering): Released all slaves [ 1411.117864][ T8709] bond5 (unregistering): Released all slaves [ 1411.154789][ T8709] bond6 (unregistering): Released all slaves [ 1411.193133][ T8709] bond7 (unregistering): Released all slaves [ 1411.238618][ T8709] bond8 (unregistering): Released all slaves [ 1411.280170][T14590] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1411.372937][T14599] bond4: entered promiscuous mode [ 1411.393283][T14599] bond4: entered allmulticast mode [ 1411.501943][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1411.552607][ T8709] 5nè‹Ò: left promiscuous mode [ 1411.717854][ T5640] Bluetooth: hci0: command tx timeout [ 1411.743071][T14628] netlink: 'syz.4.9982': attribute type 4 has an invalid length. [ 1411.782226][T14628] netlink: 'syz.4.9982': attribute type 1 has an invalid length. [ 1411.784859][T14613] lo speed is unknown, defaulting to 1000 [ 1411.817422][T14628] netlink: 'syz.4.9982': attribute type 2 has an invalid length. [ 1411.934109][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9983'. [ 1412.036633][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1412.474080][T14639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9984'. [ 1413.066970][T14647] xt_ecn: cannot match TCP bits for non-tcp packets [ 1413.116119][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9985'. [ 1413.195129][T14649] netlink: 'syz.1.9985': attribute type 39 has an invalid length. [ 1413.659232][T14586] lo speed is unknown, defaulting to 1000 [ 1413.798693][ T5640] Bluetooth: hci0: command tx timeout [ 1414.596654][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1414.660428][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1414.680210][T14490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.706731][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.717605][T14490] bridge_slave_0: entered allmulticast mode [ 1414.740511][T14490] bridge_slave_0: entered promiscuous mode [ 1414.761848][T14490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.777673][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.796834][T14490] bridge_slave_1: entered allmulticast mode [ 1414.818564][T14490] bridge_slave_1: entered promiscuous mode [ 1415.078233][T14490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.168632][T14490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.839320][T14678] geneve4: entered promiscuous mode [ 1416.027900][T14693] netlink: 'syz.1.9991': attribute type 10 has an invalid length. [ 1416.872689][T14490] team0: Port device team_slave_0 added [ 1417.142641][ T8709] hsr_slave_0: left promiscuous mode [ 1417.179936][ T8709] hsr_slave_1: left promiscuous mode [ 1417.207793][T14707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9994'. [ 1417.218318][ T8709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.226874][ T8709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.240549][T14707] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9994'. [ 1417.251565][T14707] netlink: 'syz.1.9994': attribute type 5 has an invalid length. [ 1417.263228][T14707] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9994'. [ 1417.306907][ T8709] veth0_macvtap: left promiscuous mode [ 1417.641567][ T8709] team_slave_1 (unregistering): left promiscuous mode [ 1417.649836][ T8709] team0 (unregistering): Port device team_slave_1 removed [ 1417.674228][ T8709] team_slave_0 (unregistering): left promiscuous mode [ 1417.683117][ T8709] team0 (unregistering): Port device team_slave_0 removed [ 1417.845096][T14490] team0: Port device team_slave_1 added [ 1418.030674][T14490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.056961][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.136850][T14490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.172412][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1418.220188][T14490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.239164][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.274836][T14490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.479974][T14727] bond5: option arp_all_targets: invalid value (129) [ 1418.493212][T14727] bond5 (unregistering): Released all slaves [ 1418.542306][T14490] hsr_slave_0: entered promiscuous mode [ 1418.562277][T14490] hsr_slave_1: entered promiscuous mode [ 1418.577164][T14490] debugfs: 'hsr0' already exists in 'hsr' [ 1418.583537][T14490] Cannot create hsr debugfs directory [ 1418.642746][T14734] tipc: Started in network mode [ 1418.658343][T14734] tipc: Node identity , cluster identity 4711 [ 1418.679275][T14734] tipc: Failed to set node id, please configure manually [ 1418.687531][T14734] tipc: Enabling of bearer rejected, failed to enable media [ 1418.702788][ T8709] IPVS: stop unused estimator thread 0... [ 1418.806709][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9999'. [ 1418.826311][T14734] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9999'. [ 1418.882719][T14734] tipc: Invalid UDP bearer configuration [ 1418.882864][T14734] tipc: Enabling of bearer rejected, failed to enable media [ 1418.931438][T14744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10002'. [ 1418.931757][T14741] netlink: 'syz.1.10000': attribute type 21 has an invalid length. [ 1418.956302][T14741] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10000'. [ 1418.998998][T14741] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10000'. [ 1419.032006][T14746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1419.341871][T14760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1419.971951][T14797] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1420.007328][T14797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1420.075858][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1420.191783][T14808] netlink: 'syz.4.10016': attribute type 10 has an invalid length. [ 1420.273880][T14813] netlink: 'syz.4.10016': attribute type 10 has an invalid length. [ 1420.331345][T14808] team0: Port device dummy0 added [ 1420.439327][T14813] team0: Port device dummy0 removed [ 1420.458350][T14813] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1420.718694][T14826] nbd: must specify a size in bytes for the device [ 1420.747976][T14826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10020'. [ 1421.109209][T14837] syzkaller1: entered promiscuous mode [ 1421.116777][T14837] syzkaller1: entered allmulticast mode [ 1421.129722][T14841] netlink: 'syz.4.10025': attribute type 49 has an invalid length. [ 1421.302009][T14841] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1421.322443][T14841] ip6gretap0: entered promiscuous mode [ 1421.329922][T14841] ip6gretap0: entered allmulticast mode [ 1421.504431][T14490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1421.535064][T14490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1421.624646][T14490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1421.648079][T14490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.668428][T14490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1421.705765][T14490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1421.792582][T14863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1421.802304][T14490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1421.828863][T14490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1422.106281][T14887] ip6gre1: entered promiscuous mode [ 1422.184550][T14877] lo speed is unknown, defaulting to 1000 [ 1422.363245][T14490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.453342][T14490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.514991][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.523012][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.594245][T23520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.602200][T23520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.832203][T14904] __nla_validate_parse: 2 callbacks suppressed [ 1422.832262][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10035'. [ 1423.312835][T14924] tipc: Enabling of bearer rejected, failed to enable media [ 1423.601190][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10031'. [ 1423.613439][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10038'. [ 1423.663663][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10038'. [ 1424.254687][T14903] lo speed is unknown, defaulting to 1000 [ 1424.709637][T14490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.702299][T14490] veth0_vlan: entered promiscuous mode [ 1425.746282][T14490] veth1_vlan: entered promiscuous mode [ 1426.766703][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1427.109669][T14490] veth0_macvtap: entered promiscuous mode [ 1427.184217][T14490] veth1_macvtap: entered promiscuous mode [ 1427.273261][T14490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1427.354948][T14490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1427.406531][ T8891] Bluetooth: hci0: command 0x0405 tx timeout [ 1427.562213][T15025] pim6reg: entered allmulticast mode [ 1427.608087][ T8705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.652949][ T8705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.697606][ T8705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.775236][ T8718] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.811040][T15032] netlink: 'syz.4.10050': attribute type 1 has an invalid length. [ 1427.841083][T15032] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10050'. [ 1428.203660][ T8705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.250219][ T8705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.431534][ T8711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.468758][ T8711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.009196][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10055'. [ 1429.009962][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10058'. [ 1429.091498][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10058'. [ 1429.294045][T15076] netlink: 'syz.3.10060': attribute type 1 has an invalid length. [ 1429.672442][T15079] bond2: (slave bridge2): making interface the new active one [ 1429.718371][T15079] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1429.818275][T15080] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1429.974841][T15076] macvlan4: entered promiscuous mode [ 1430.017139][T15076] macvlan4: entered allmulticast mode [ 1430.046677][T15076] bond2: entered promiscuous mode [ 1430.072290][T15076] bridge2: entered promiscuous mode [ 1430.099450][T15076] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1430.116615][ T8891] Bluetooth: hci5: command 0x0405 tx timeout [ 1430.140057][T15076] bond2: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1430.145347][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10064'. [ 1430.163240][T15076] bond2: left promiscuous mode [ 1430.171306][T15076] bridge2: left promiscuous mode [ 1430.203994][T15095] netlink: 'syz.1.10066': attribute type 4 has an invalid length. [ 1430.216798][T15095] netlink: 'syz.1.10066': attribute type 1 has an invalid length. [ 1430.224748][T15095] netlink: 'syz.1.10066': attribute type 2 has an invalid length. [ 1430.304955][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10065'. [ 1430.572286][T15075] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10059'. [ 1430.718683][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10068'. [ 1430.751953][T15108] netlink: 'syz.3.10068': attribute type 11 has an invalid length. [ 1430.822176][T15111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.865971][T15112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.912571][T15113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.874480][T15138] netlink: 'syz.4.10073': attribute type 1 has an invalid length. [ 1431.922068][T15136] netlink: 'syz.4.10073': attribute type 1 has an invalid length. [ 1432.453546][T15156] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10078'. [ 1432.500392][T15158] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10078'. [ 1432.831812][T15163] xt_cluster: node mask cannot exceed total number of nodes [ 1432.849124][T11252] IPVS: starting estimator thread 0... [ 1432.943360][T15172] __nla_validate_parse: 1 callbacks suppressed [ 1432.943395][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10081'. [ 1432.961384][T15165] IPVS: using max 29 ests per chain, 69600 per kthread [ 1433.591644][T15205] netlink: 'syz.0.10087': attribute type 4 has an invalid length. [ 1433.644815][T15205] netlink: 'syz.0.10087': attribute type 1 has an invalid length. [ 1433.680038][T15205] netlink: 'syz.0.10087': attribute type 2 has an invalid length. [ 1434.732554][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10095'. [ 1434.788591][T15240] bridge_slave_0: left allmulticast mode [ 1434.796552][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10095'. [ 1434.805342][T15240] bridge_slave_0: left promiscuous mode [ 1434.832901][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.912029][T15240] bridge_slave_1: left allmulticast mode [ 1434.938969][T15240] bridge_slave_1: left promiscuous mode [ 1434.968670][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.034184][T15240] bond0: (slave bond_slave_0): Releasing backup interface [ 1435.117857][T15240] bond0: (slave bond_slave_1): Releasing backup interface [ 1435.161838][T15240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.190925][T15240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.216806][T15240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.243891][T15240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.269769][T15240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1435.540316][T15266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10099'. [ 1435.854717][T15275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10101'. [ 1435.871988][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10103'. [ 1435.903669][T15274] netlink: 'syz.1.10102': attribute type 10 has an invalid length. [ 1435.929237][T15277] vlan0: entered allmulticast mode [ 1435.944602][T15277] macvtap0: entered allmulticast mode [ 1435.964095][T15277] veth0_macvtap: entered allmulticast mode [ 1436.235012][T15291] dvmrp0: entered allmulticast mode [ 1436.245720][T15289] netlink: 'syz.4.10105': attribute type 41 has an invalid length. [ 1436.410145][T15300] lo speed is unknown, defaulting to 1000 [ 1436.484436][T15308] netlink: 'syz.4.10110': attribute type 4 has an invalid length. [ 1436.536058][T15308] netlink: 'syz.4.10110': attribute type 1 has an invalid length. [ 1436.614390][T15318] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10113'. [ 1436.616831][T15308] netlink: 'syz.4.10110': attribute type 2 has an invalid length. [ 1436.770972][T15329] netlink: 'syz.5.10113': attribute type 3 has an invalid length. [ 1436.801261][T15329] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10113'. [ 1437.104033][T15339] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1437.903844][T15363] tipc: Enabling of bearer rejected, failed to enable media [ 1437.930087][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10122'. [ 1438.964763][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10128'. [ 1438.976985][T15399] netlink: 'syz.0.10129': attribute type 1 has an invalid length. [ 1438.985931][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1439.086596][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1439.925895][T15439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.984366][T15439] bridge_slave_0 (unregistering): left allmulticast mode [ 1440.028116][T15439] bridge_slave_0 (unregistering): left promiscuous mode [ 1440.047116][T15439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.391295][T15451] netlink: 228 bytes leftover after parsing attributes in process `syz.5.10137'. [ 1440.428564][T15452] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1440.556720][T15456] netlink: 'syz.1.10141': attribute type 4 has an invalid length. [ 1440.576806][T15456] netlink: 'syz.1.10141': attribute type 1 has an invalid length. [ 1440.596712][T15456] netlink: 'syz.1.10141': attribute type 2 has an invalid length. [ 1440.866317][T15464] netlink: 'syz.4.10143': attribute type 1 has an invalid length. [ 1440.895055][T15473] netlink: 'syz.0.10145': attribute type 1 has an invalid length. [ 1441.070069][T15464] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1441.255821][T15476] bond6: (slave bridge2): making interface the new active one [ 1441.264395][T15476] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 1441.470704][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1441.873795][T15504] netlink: 'syz.0.10151': attribute type 1 has an invalid length. [ 1442.073552][T15504] bond7: entered promiscuous mode [ 1442.086278][T15504] bond7: entered allmulticast mode [ 1442.094371][T15504] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1442.105063][T15505] ip6tnl0: Caught tx_queue_len zero misconfig [ 1442.132566][T15506] erspan2: entered allmulticast mode [ 1442.143276][T15506] bond7: (slave erspan2): making interface the new active one [ 1442.152087][T15506] erspan2: entered promiscuous mode [ 1442.159719][T15506] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 1442.184118][T15521] xt_l2tp: invalid flags combination: 0 [ 1442.367292][T15527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1442.387838][T15529] openvswitch: netlink: Multiple metadata blocks provided [ 1442.476303][T15533] netlink: 'syz.4.10162': attribute type 4 has an invalid length. [ 1442.499727][T15533] netlink: 'syz.4.10162': attribute type 1 has an invalid length. [ 1442.517442][T15533] netlink: 'syz.4.10162': attribute type 2 has an invalid length. [ 1442.518104][T15539] nbd: must specify a device to reconfigure [ 1442.843224][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10164'. [ 1443.041139][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10165'. [ 1443.121201][ T5640] block nbd5: Receive control failed (result -1) [ 1443.133440][T15560] syzkaller0: entered promiscuous mode [ 1443.142329][T15560] syzkaller0: entered allmulticast mode [ 1443.200972][T15561] x_tables: duplicate underflow at hook 1 [ 1443.334471][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10166'. [ 1444.037371][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1444.120219][T15557] veth0_to_team: entered promiscuous mode [ 1444.371250][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10172'. [ 1444.531631][T15601] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10174'. [ 1445.009907][T15621] validate_nla: 2 callbacks suppressed [ 1445.009926][T15621] netlink: 'syz.5.10179': attribute type 4 has an invalid length. [ 1445.036269][T15621] netlink: 'syz.5.10179': attribute type 1 has an invalid length. [ 1445.067061][T15621] netlink: 'syz.5.10179': attribute type 2 has an invalid length. [ 1445.101841][T15623] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1445.120520][T15623] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1445.139128][T15623] veth0_virt_wifi: entered allmulticast mode [ 1445.179532][T15623] veth0_virt_wifi: entered promiscuous mode [ 1447.372391][T15681] netlink: 'syz.5.10195': attribute type 1 has an invalid length. [ 1447.393760][T15681] netlink: 244 bytes leftover after parsing attributes in process `syz.5.10195'. [ 1447.417541][T15681] NCSI netlink: No device for ifindex 0 [ 1447.452971][T15681] netlink: 'syz.5.10195': attribute type 1 has an invalid length. [ 1447.527148][T15681] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1447.650905][T15691] netlink: 'syz.0.10197': attribute type 4 has an invalid length. [ 1447.663595][T15691] netlink: 'syz.0.10197': attribute type 1 has an invalid length. [ 1447.677352][T15691] netlink: 'syz.0.10197': attribute type 2 has an invalid length. [ 1447.771819][T15698] xt_cgroup: invalid path, errno=-2 [ 1447.789994][T15699] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10198'. [ 1447.956110][T15699] netlink: 408 bytes leftover after parsing attributes in process `syz.4.10198'. [ 1448.095364][T15699] netlink: 'syz.4.10198': attribute type 2 has an invalid length. [ 1448.103872][T15708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10200'. [ 1448.878976][T15734] tipc: Started in network mode [ 1448.896170][T15734] tipc: Node identity ac14140f, cluster identity 4711 [ 1448.924840][T15734] tipc: New replicast peer: 255.255.255.255 [ 1448.959849][T15734] tipc: Enabled bearer , priority 10 [ 1448.994076][T15737] hsr0: entered promiscuous mode [ 1449.480359][T15767] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10215'. [ 1449.973777][T15765] lo speed is unknown, defaulting to 1000 [ 1450.143039][T11249] tipc: Node number set to 2886997007 [ 1450.219850][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10220'. [ 1450.383678][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10222'. [ 1450.495500][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10222'. [ 1450.605695][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 1450.764776][T15808] lo speed is unknown, defaulting to 1000 [ 1450.796119][T15809] siw: device registration error -23 [ 1450.816102][T15808] lo speed is unknown, defaulting to 1000 [ 1450.844309][T15808] lo speed is unknown, defaulting to 1000 [ 1450.879574][T15808] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1450.899853][T15808] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1450.919710][T15808] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1450.954970][T15816] netlink: 'syz.3.10224': attribute type 1 has an invalid length. [ 1450.995090][T15808] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1451.211443][T15823] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1451.261587][T15823] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1451.325441][T15808] lo speed is unknown, defaulting to 1000 [ 1451.392137][T15816] macvlan4: entered promiscuous mode [ 1451.427387][T15816] macvlan4: entered allmulticast mode [ 1451.442858][T15816] bond3: entered promiscuous mode [ 1451.462547][T15816] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1451.488084][T15816] bond3: left promiscuous mode [ 1451.539740][T15808] lo speed is unknown, defaulting to 1000 [ 1451.832711][T15855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10230'. [ 1452.071780][T15861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.109577][T15861] SET target dimension over the limit! [ 1452.509887][T15842] veth0_macvtap: left allmulticast mode [ 1452.704617][T15808] lo speed is unknown, defaulting to 1000 [ 1452.717004][T15808] lo speed is unknown, defaulting to 1000 [ 1452.726902][T15808] lo speed is unknown, defaulting to 1000 [ 1452.743877][T23520] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.754707][T15808] lo speed is unknown, defaulting to 1000 [ 1452.758496][T23520] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.775778][T23520] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.788065][T15808] lo speed is unknown, defaulting to 1000 [ 1452.788088][T23520] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.808605][T15808] lo speed is unknown, defaulting to 1000 [ 1452.818493][T15808] lo speed is unknown, defaulting to 1000 [ 1452.826073][T15808] lo speed is unknown, defaulting to 1000 [ 1452.834052][T15808] lo speed is unknown, defaulting to 1000 [ 1452.963442][T15873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1453.082196][T15878] IPVS: Unknown mcast interface: . [ 1453.303370][T15892] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10236'. [ 1453.553750][T15897] lo speed is unknown, defaulting to 1000 [ 1453.562766][T15904] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20002 [ 1453.784549][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10244'. [ 1453.825619][T15916] xt_TCPMSS: Only works on TCP SYN packets [ 1453.950784][T15916] bridge_slave_1: left allmulticast mode [ 1453.962446][T15916] bridge_slave_1: left promiscuous mode [ 1453.982416][T15916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.125638][T15897] lo speed is unknown, defaulting to 1000 [ 1454.138288][T15928] syzkaller0: entered promiscuous mode [ 1454.144114][T15928] syzkaller0: entered allmulticast mode [ 1454.155090][T15928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10246'. [ 1454.377070][T15932] netlink: 'syz.5.10248': attribute type 1 has an invalid length. [ 1454.408551][T15932] netlink: 240 bytes leftover after parsing attributes in process `syz.5.10248'. [ 1454.424488][T15936] netlink: 'syz.1.10249': attribute type 4 has an invalid length. [ 1454.433740][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10250'. [ 1454.460426][T15936] netlink: 'syz.1.10249': attribute type 1 has an invalid length. [ 1454.475030][T15936] netlink: 'syz.1.10249': attribute type 2 has an invalid length. [ 1454.496050][T15940] veth6: entered allmulticast mode [ 1454.547343][T15946] netlink: 'syz.5.10248': attribute type 58 has an invalid length. [ 1454.559187][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10248'. [ 1455.646946][T15997] netlink: 'syz.4.10265': attribute type 11 has an invalid length. [ 1455.795546][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10267'. [ 1455.991515][T16019] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1456.093972][T16025] netlink: 'syz.4.10274': attribute type 1 has an invalid length. [ 1456.127346][T16031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10276'. [ 1456.138197][T16031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10276'. [ 1456.196618][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1456.806047][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10284'. [ 1456.826932][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10284'. [ 1457.162126][T16034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.199746][T16034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.615689][T16064] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1457.630717][T16064] bond5 (unregistering): Released all slaves [ 1457.696835][ T8700] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.707725][ T8700] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.719073][ T8705] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.750805][ T8705] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.838144][T16093] netlink: 'syz.4.10290': attribute type 34 has an invalid length. [ 1458.230897][T16109] block nbd6: server does not support multiple connections per device. [ 1458.262422][T16109] block nbd6: shutting down sockets [ 1458.485018][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10300'. [ 1458.504925][T16128] batadv0: entered promiscuous mode [ 1458.513212][T16128] macsec2: entered promiscuous mode [ 1458.520856][T16128] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1458.618337][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10304'. [ 1458.791997][T16146] Bluetooth: MGMT ver 1.23 [ 1458.797414][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10308'. [ 1458.810195][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10308'. [ 1459.144703][T16172] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 1459.552404][T16193] syzkaller1: entered promiscuous mode [ 1459.581579][T16193] __nla_validate_parse: 2 callbacks suppressed [ 1459.581595][T16193] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10319'. [ 1459.980133][T16219] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10325'. [ 1459.988384][T16223] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10327'. [ 1460.005896][T16219] netlink: 19 bytes leftover after parsing attributes in process `syz.5.10325'. [ 1460.012129][T16226] netlink: 'syz.1.10328': attribute type 3 has an invalid length. [ 1460.025108][T16227] netlink: 'syz.1.10328': attribute type 3 has an invalid length. [ 1460.036652][T16219] netlink: 19 bytes leftover after parsing attributes in process `syz.5.10325'. [ 1460.041749][T16229] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10327'. [ 1460.105488][T16230] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10326'. [ 1460.165898][T16236] netlink: 'syz.0.10329': attribute type 10 has an invalid length. [ 1460.184300][T16236] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10329'. [ 1460.233186][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10323'. [ 1460.331563][T16249] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10331'. [ 1460.602893][T16262] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1460.649368][T16262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1460.708125][T16263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1460.836193][T16277] geneve2: entered promiscuous mode [ 1460.851140][ T8700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.869076][ T8700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.901677][ T8700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.932249][ T8700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.536076][T16313] bond5 (unregistering): Released all slaves [ 1461.656006][T16279] syzkaller0: entered promiscuous mode [ 1461.681169][T16279] syzkaller0: entered allmulticast mode [ 1462.405935][T16374] lo: Caught tx_queue_len zero misconfig [ 1462.720619][T16390] lo speed is unknown, defaulting to 1000 [ 1463.147982][T16390] lo speed is unknown, defaulting to 1000 [ 1464.049747][T16451] veth9: entered promiscuous mode [ 1464.177531][T16455] lo speed is unknown, defaulting to 1000 [ 1464.338160][T16474] netlink: 'syz.0.10387': attribute type 4 has an invalid length. [ 1464.357522][T16474] netlink: 'syz.0.10387': attribute type 1 has an invalid length. [ 1464.365955][T16475] netlink: 'syz.1.10386': attribute type 1 has an invalid length. [ 1464.369799][T16476] geneve2: entered promiscuous mode [ 1464.380255][T16474] netlink: 'syz.0.10387': attribute type 2 has an invalid length. [ 1464.389452][ T8705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.408395][ T8705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.438209][ T8705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.481582][ T8705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.801505][T16455] lo speed is unknown, defaulting to 1000 [ 1465.196095][T16519] IPv6: NLM_F_CREATE should be specified when creating new route [ 1465.335389][T16526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1466.321685][T16568] sctp: [Deprecated]: syz.4.10409 (pid 16568) Use of int in max_burst socket option. [ 1466.321685][T16568] Use struct sctp_assoc_value instead [ 1466.351193][T16568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1466.732616][T16587] netlink: 'syz.4.10411': attribute type 10 has an invalid length. [ 1466.757455][T16585] __nla_validate_parse: 21 callbacks suppressed [ 1466.757470][T16585] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10412'. [ 1466.789773][T16587] bond0: (slave dummy0): Releasing backup interface [ 1466.823037][T16587] team0: Port device dummy0 added [ 1466.834184][T16595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1467.071440][T16610] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10419'. [ 1467.113948][T16613] mac80211_hwsim hwsim103 wlan0: entered promiscuous mode [ 1467.127860][T16618] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10421'. [ 1467.148255][T16619] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10421'. [ 1467.152494][T16613] mac80211_hwsim hwsim103 wlan0: entered allmulticast mode [ 1467.194848][T16620] netlink: 'syz.4.10420': attribute type 2 has an invalid length. [ 1467.263608][T16629] netlink: 'syz.5.10422': attribute type 1 has an invalid length. [ 1467.312172][T16613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1467.361528][T16629] bond1: entered promiscuous mode [ 1467.381641][T16629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1467.543279][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10427'. [ 1467.562238][T16629] bond1: (slave bridge1): making interface the new active one [ 1467.584336][T16629] bridge1: entered promiscuous mode [ 1467.612601][T16629] bridge1: left promiscuous mode [ 1467.974446][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10429'. [ 1468.017048][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10429'. [ 1468.083207][T16667] xfrm0: entered allmulticast mode [ 1468.108935][T16667] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1468.195446][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10428'. [ 1468.290678][T16668] netlink: 'syz.5.10428': attribute type 5 has an invalid length. [ 1468.649034][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1468.965159][T16695] gtp0: entered promiscuous mode [ 1468.978154][T16695] gtp0: entered allmulticast mode [ 1469.046967][T16698] syzkaller0: entered promiscuous mode [ 1469.059355][T16698] syzkaller0: entered allmulticast mode [ 1469.084481][T16697] tipc: Started in network mode [ 1469.100530][T16697] tipc: Node identity ba14cfdb9179, cluster identity 4711 [ 1469.116613][T16697] tipc: Enabled bearer , priority 0 [ 1469.171999][T16697] tipc: Resetting bearer [ 1469.246262][T16697] tipc: Disabling bearer [ 1469.324414][T16718] netlink: 364 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1469.460328][T16713] lo speed is unknown, defaulting to 1000 [ 1472.663801][T16713] lo speed is unknown, defaulting to 1000 [ 1473.019760][T16772] __nla_validate_parse: 4 callbacks suppressed [ 1473.019778][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10451'. [ 1473.101610][T16783] netlink: 'syz.1.10454': attribute type 1 has an invalid length. [ 1473.113156][T16777] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10453'. [ 1473.171113][T16772] veth3: entered allmulticast mode [ 1473.185936][T16788] netlink: 'syz.4.10456': attribute type 4 has an invalid length. [ 1473.203502][T16772] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1473.217980][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10457'. [ 1473.234854][T16783] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1473.245044][T16777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.255996][T16777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.265777][T16777] bond0 (unregistering): Released all slaves [ 1473.284518][T16787] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1473.329361][T16787] bond2 (unregistering): Released all slaves [ 1473.441120][T16797] netlink: 'syz.3.10458': attribute type 9 has an invalid length. [ 1473.450813][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10458'. [ 1473.503789][T16785] veth11: entered promiscuous mode [ 1473.551163][T16785] bond5: (slave veth11): Enslaving as an active interface with an up link [ 1473.562701][T16792] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1473.575592][T16797] macvlan4: entered promiscuous mode [ 1473.591205][T16797] macvlan4: entered allmulticast mode [ 1473.597988][T16797] erspan0: entered allmulticast mode [ 1473.837460][T16823] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1473.850657][T16822] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1473.862376][T16825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10465'. [ 1473.900632][T16822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10464'. [ 1473.925411][T16822] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10464'. [ 1474.107393][T16851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10470'. [ 1474.191380][T16850] SET target dimension over the limit! [ 1474.289578][T16855] lo speed is unknown, defaulting to 1000 [ 1474.354484][T16862] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10476'. [ 1474.365053][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10477'. [ 1474.478518][T16862] netlink: 'syz.3.10476': attribute type 1 has an invalid length. [ 1474.596805][T16878] netlink: 'syz.3.10476': attribute type 1 has an invalid length. [ 1474.737048][T16878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.881467][T16890] bridge_slave_0 (unregistering): left allmulticast mode [ 1474.896676][T16890] bridge_slave_0 (unregistering): left promiscuous mode [ 1474.908557][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.958562][T16855] lo speed is unknown, defaulting to 1000 [ 1475.316805][T16918] netlink: 'syz.1.10488': attribute type 16 has an invalid length. [ 1475.365804][T16918] netlink: 'syz.1.10488': attribute type 17 has an invalid length. [ 1475.459141][T16916] hsr0: left promiscuous mode [ 1475.567077][T16927] netlink: 'syz.5.10491': attribute type 8 has an invalid length. [ 1475.591692][T10532] lo speed is unknown, defaulting to 1000 [ 1475.609260][T10532] lo speed is unknown, defaulting to 1000 [ 1475.645172][T10532] lo speed is unknown, defaulting to 1000 [ 1475.731961][T16931] netlink: 'syz.1.10493': attribute type 1 has an invalid length. [ 1476.147491][T16962] No such timeout policy "syz1" [ 1476.149910][T16964] netlink: 'syz.4.10503': attribute type 1 has an invalid length. [ 1476.226953][T16964] syzkaller0: entered promiscuous mode [ 1476.257337][T16964] syzkaller0: entered allmulticast mode [ 1476.619123][T16977] bond6: option fail_over_mac: invalid value (127) [ 1476.638339][T16977] bond6 (unregistering): Released all slaves [ 1476.755273][ T30] audit: type=1800 audit(1777926514.934:36): pid=16973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10506" name="memory.events" dev="tmpfs" ino=1784 res=0 errno=0 [ 1476.916049][T16994] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1476.980835][T17001] nbd: must specify at least one socket [ 1477.593295][T17026] bond6: entered promiscuous mode [ 1477.617281][T17026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1477.634757][T17026] bridge0: port 1(bond6) entered blocking state [ 1477.642298][T17026] bridge0: port 1(bond6) entered disabled state [ 1477.657902][T17026] bond6: entered allmulticast mode [ 1477.678625][T17026] bridge0: port 1(bond6) entered blocking state [ 1477.685025][T17026] bridge0: port 1(bond6) entered forwarding state [ 1477.734758][ T8709] bridge0: port 1(bond6) entered disabled state [ 1478.432551][T17078] __nla_validate_parse: 83 callbacks suppressed [ 1478.432569][T17078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10531'. [ 1478.461254][T17082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10531'. [ 1478.588869][ T9428] lo speed is unknown, defaulting to 1000 [ 1478.596212][T17063] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1478.598874][ T9428] syz2: Port: 1 Link DOWN [ 1478.616169][T17063] CPU: 0 UID: 0 PID: 17063 Comm: syz.5.10527 Not tainted syzkaller #0 PREEMPT(full) [ 1478.616197][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1478.616210][T17063] Call Trace: [ 1478.616220][T17063] [ 1478.616229][T17063] dump_stack_lvl+0xe8/0x150 [ 1478.616260][T17063] sysfs_warn_dup+0x8e/0xa0 [ 1478.616288][T17063] sysfs_do_create_link_sd+0xc0/0x110 [ 1478.616317][T17063] device_add_class_symlinks+0x1cf/0x240 [ 1478.616350][T17063] device_add+0x475/0xbb0 [ 1478.616377][T17063] wiphy_register+0x21e8/0x32e0 [ 1478.616423][T17063] ? __pfx_wiphy_register+0x10/0x10 [ 1478.616449][T17063] ? __pfx_netdev_run_todo+0x10/0x10 [ 1478.616480][T17063] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1478.616519][T17063] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1478.616551][T17063] ieee80211_register_hw+0x3d82/0x4a70 [ 1478.616597][T17063] ? ieee80211_register_hw+0x1981/0x4a70 [ 1478.616652][T17063] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1478.616684][T17063] ? __asan_memset+0x22/0x50 [ 1478.616710][T17063] ? __hrtimer_setup+0x1b7/0x260 [ 1478.616735][T17063] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1478.616771][T17063] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1478.616827][T17063] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1478.616849][T17063] ? kstrndup+0xbf/0x160 [ 1478.616879][T17063] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1478.616928][T17063] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1478.616961][T17063] ? rcu_is_watching+0x15/0xb0 [ 1478.616986][T17063] ? trace_kmalloc+0x2a/0xf0 [ 1478.617021][T17063] ? __nla_parse+0x40/0x60 [ 1478.617055][T17063] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1478.617087][T17063] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1478.617129][T17063] genl_family_rcv_msg_doit+0x22a/0x330 [ 1478.617169][T17063] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1478.617217][T17063] ? bpf_lsm_capable+0x9/0x20 [ 1478.617237][T17063] ? security_capable+0x7e/0x2c0 [ 1478.617269][T17063] genl_rcv_msg+0x61c/0x7a0 [ 1478.617308][T17063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1478.617339][T17063] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1478.617380][T17063] netlink_rcv_skb+0x232/0x4b0 [ 1478.617407][T17063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1478.617441][T17063] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1478.617486][T17063] ? down_read+0x270/0x2e0 [ 1478.617511][T17063] ? genl_rcv+0xd/0x40 [ 1478.617544][T17063] genl_rcv+0x28/0x40 [ 1478.617573][T17063] netlink_unicast+0x75c/0x8e0 [ 1478.617610][T17063] netlink_sendmsg+0x813/0xb40 [ 1478.617647][T17063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1478.617678][T17063] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1478.617708][T17063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1478.617740][T17063] ____sys_sendmsg+0x972/0x9f0 [ 1478.617773][T17063] ? __might_fault+0xaf/0x130 [ 1478.617808][T17063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1478.617847][T17063] ? import_iovec+0x73/0xa0 [ 1478.617882][T17063] ___sys_sendmsg+0x2a5/0x360 [ 1478.617907][T17063] ? __lock_acquire+0x6b5/0x2cf0 [ 1478.617936][T17063] ? __pfx____sys_sendmsg+0x10/0x10 [ 1478.617971][T17063] ? futex_wait+0x2a2/0x390 [ 1478.618033][T17063] ? __fget_files+0x2a/0x420 [ 1478.618057][T17063] ? __fget_files+0x3a0/0x420 [ 1478.618091][T17063] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1478.618120][T17063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1478.618158][T17063] ? rcu_is_watching+0x15/0xb0 [ 1478.618192][T17063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.618214][T17063] do_syscall_64+0x15f/0xf80 [ 1478.618238][T17063] ? trace_irq_disable+0x3b/0x140 [ 1478.618268][T17063] ? clear_bhb_loop+0x40/0x90 [ 1478.618295][T17063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.618314][T17063] RIP: 0033:0x7f8e5cf9cdd9 [ 1478.618335][T17063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.618353][T17063] RSP: 002b:00007f8e5de70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1478.618375][T17063] RAX: ffffffffffffffda RBX: 00007f8e5d215fa0 RCX: 00007f8e5cf9cdd9 [ 1478.618390][T17063] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 1478.618403][T17063] RBP: 00007f8e5d032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1478.618415][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.618427][T17063] R13: 00007f8e5d216038 R14: 00007f8e5d215fa0 R15: 00007ffc1d6301e8 [ 1478.618463][T17063] [ 1479.067229][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1479.198065][ T8709] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.230773][ T8709] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.349774][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10537'. [ 1479.363425][T17099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1479.380834][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10536'. [ 1479.391504][T17102] validate_nla: 1 callbacks suppressed [ 1479.391518][T17102] netlink: 'syz.3.10535': attribute type 21 has an invalid length. [ 1479.496108][T17105] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10537'. [ 1479.566688][ T8891] Bluetooth: hci0: command 0x0405 tx timeout [ 1479.572787][ T5640] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1481.733790][ T8709] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.743603][T17098] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1481.748512][T17101] ipvlan0: entered promiscuous mode [ 1481.762873][T17101] ipvlan0: left promiscuous mode [ 1481.771746][T17102] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1481.941924][ T8709] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.034546][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10543'. [ 1482.129395][T17140] syzkaller0: entered promiscuous mode [ 1482.134963][T17140] syzkaller0: entered allmulticast mode [ 1482.174669][T17140] lo speed is unknown, defaulting to 1000 [ 1482.295623][T17140] lo speed is unknown, defaulting to 1000 [ 1484.831410][T17114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1485.035148][T17156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10552'. [ 1485.180645][T17168] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10554'. [ 1485.361594][T17177] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10555'. [ 1485.388310][T17177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10555'. [ 1485.402230][T17182] netlink: 8944 bytes leftover after parsing attributes in process `syz.5.10557'. [ 1485.419449][T17182] openvswitch: netlink: Flow key attr not present in new flow. [ 1485.534561][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10558'. [ 1485.658397][T17191] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10558'. [ 1487.316766][ T5640] Bluetooth: hci0: command 0x0405 tx timeout [ 1488.230034][T17205] lo speed is unknown, defaulting to 1000 [ 1488.511644][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10569'. [ 1488.627725][T17228] xt_hashlimit: size too large, truncated to 1048576 [ 1488.665315][T17205] lo speed is unknown, defaulting to 1000 [ 1488.858374][T17239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10573'. [ 1488.873872][ T30] audit: type=1107 audit(1777926527.054:37): pid=17234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1488.875757][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10572'. [ 1488.924563][T17244] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1489.217236][ T8700] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1489.239423][ T8700] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1489.329298][ T8700] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1489.360383][ T8700] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1490.025764][T17286] pim6reg: entered allmulticast mode [ 1490.346865][T17311] __nla_validate_parse: 7 callbacks suppressed [ 1490.346884][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10594'. [ 1490.648832][T17330] xt_hashlimit: size too large, truncated to 1048576 [ 1493.309572][T17312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1493.318837][T17328] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10599'. [ 1493.329496][T17328] netlink: 'syz.1.10599': attribute type 2 has an invalid length. [ 1493.337444][T17328] netlink: 'syz.1.10599': attribute type 1 has an invalid length. [ 1493.506968][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10605'. [ 1493.717942][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1493.744566][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1493.753356][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1494.341393][T10532] dummy0 speed is unknown, defaulting to 1000 [ 1494.356467][T17365] infiniband syz0: set down [ 1494.373744][T17365] infiniband syz0: added dummy0 [ 1494.439328][T17365] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1494.501736][T17365] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1494.546969][T17396] netlink: 'syz.5.10617': attribute type 28 has an invalid length. [ 1494.576011][T17396] netlink: 'syz.5.10617': attribute type 3 has an invalid length. [ 1494.586513][T17396] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10617'. [ 1494.596068][T17365] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1494.755493][T17365] RDS/IB: syz0: added [ 1494.770631][T17365] smc: adding ib device syz0 with port count 1 [ 1494.789408][T17365] smc: ib device syz0 port 1 has no pnetid [ 1494.799101][T10532] dummy0 speed is unknown, defaulting to 1000 [ 1494.809132][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1494.829485][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10615'. [ 1495.042193][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1495.257847][T17400] bond8: Removing last ns target with arp_interval on [ 1495.338051][T17403] netlink: 92 bytes leftover after parsing attributes in process `syz.5.10621'. [ 1495.367312][T17409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.376690][T17409] batman_adv: batadv0: Interface activated: dummy0 [ 1495.389334][T17409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.487553][T17409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.513728][T17409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.550251][T17409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1495.572354][T17409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1495.584991][T17409] veth0_virt_wifi: left allmulticast mode [ 1495.591790][T17409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1495.614089][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.621265][ T8700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.633508][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.640688][ T8700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.683576][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1495.742187][T17419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1495.792035][T17425] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1495.801766][T17425] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1495.813552][T17425] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1495.937189][T17430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1495.990591][T17432] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1496.200786][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1496.248455][T17445] xt_hashlimit: size too large, truncated to 1048576 [ 1496.533096][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1496.870036][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1497.083349][T17477] tipc: Started in network mode [ 1497.116459][T17477] tipc: Node identity ac14140f, cluster identity 4711 [ 1497.133094][T17477] tipc: New replicast peer: 255.255.255.255 [ 1497.143173][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10645'. [ 1497.153714][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10645'. [ 1497.163307][T17477] tipc: Enabled bearer , priority 10 [ 1497.173635][T17483] netlink: 580 bytes leftover after parsing attributes in process `syz.4.10645'. [ 1497.353628][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1497.432966][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10648'. [ 1497.523953][T17499] xt_cluster: node mask cannot exceed total number of nodes [ 1497.555858][T17501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1497.733022][T17518] netlink: 'syz.5.10655': attribute type 1 has an invalid length. [ 1497.742588][T17504] bond9: entered allmulticast mode [ 1497.763974][T17504] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1497.781049][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1497.959565][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10657'. [ 1498.221311][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1498.287032][ T5736] tipc: Node number set to 2886997007 [ 1498.510404][T17553] syz.3.10666: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1498.536989][T17553] CPU: 1 UID: 0 PID: 17553 Comm: syz.3.10666 Not tainted syzkaller #0 PREEMPT(full) [ 1498.537010][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1498.537020][T17553] Call Trace: [ 1498.537027][T17553] [ 1498.537035][T17553] dump_stack_lvl+0xe8/0x150 [ 1498.537062][T17553] warn_alloc+0x249/0x340 [ 1498.537090][T17553] ? stack_trace_save+0xa9/0x100 [ 1498.537120][T17553] ? __pfx_warn_alloc+0x10/0x10 [ 1498.537152][T17553] ? kasan_save_track+0x4f/0x80 [ 1498.537175][T17553] ? kasan_save_track+0x3e/0x80 [ 1498.537196][T17553] ? __kasan_kmalloc+0x93/0xb0 [ 1498.537218][T17553] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1498.537241][T17553] ? xskq_create+0x56/0x170 [ 1498.537260][T17553] ? xsk_setsockopt+0x54c/0x990 [ 1498.537284][T17553] ? do_sock_setsockopt+0x17c/0x1b0 [ 1498.537304][T17553] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1498.537324][T17553] ? do_syscall_64+0x15f/0xf80 [ 1498.537349][T17553] __vmalloc_node_range_noprof+0x132/0x1750 [ 1498.537407][T17553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1498.537438][T17553] ? __kasan_kmalloc+0x93/0xb0 [ 1498.537463][T17553] vmalloc_user_noprof+0xad/0xe0 [ 1498.537497][T17553] ? xskq_create+0xbf/0x170 [ 1498.537515][T17553] xskq_create+0xbf/0x170 [ 1498.537533][T17553] xsk_init_queue+0x8a/0xe0 [ 1498.537553][T17553] xsk_setsockopt+0x54c/0x990 [ 1498.537580][T17553] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1498.537606][T17553] ? __pfx_aa_sk_perm+0x10/0x10 [ 1498.537630][T17553] ? aa_sock_opt_perm+0xff/0x1a0 [ 1498.537654][T17553] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1498.537677][T17553] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1498.537702][T17553] do_sock_setsockopt+0x17c/0x1b0 [ 1498.537726][T17553] __x64_sys_setsockopt+0x13d/0x1b0 [ 1498.537748][T17553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.537767][T17553] do_syscall_64+0x15f/0xf80 [ 1498.537787][T17553] ? trace_irq_disable+0x3b/0x140 [ 1498.537816][T17553] ? clear_bhb_loop+0x40/0x90 [ 1498.537837][T17553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.537855][T17553] RIP: 0033:0x7f1a1e79cdd9 [ 1498.537872][T17553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.537885][T17553] RSP: 002b:00007f1a1f5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1498.537902][T17553] RAX: ffffffffffffffda RBX: 00007f1a1ea15fa0 RCX: 00007f1a1e79cdd9 [ 1498.537913][T17553] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1498.537921][T17553] RBP: 00007f1a1e832d69 R08: 0000000000000004 R09: 0000000000000000 [ 1498.537930][T17553] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1498.537939][T17553] R13: 00007f1a1ea16038 R14: 00007f1a1ea15fa0 R15: 00007ffd1ee53c08 [ 1498.537962][T17553] [ 1498.537981][T17553] Mem-Info: [ 1498.695364][T17365] dummy0 speed is unknown, defaulting to 1000 [ 1498.733485][T17553] active_anon:4709 inactive_anon:1514 isolated_anon:0 [ 1498.733485][T17553] active_file:4996 inactive_file:1229 isolated_file:0 [ 1498.733485][T17553] unevictable:768 dirty:120 writeback:0 [ 1498.733485][T17553] slab_reclaimable:9638 slab_unreclaimable:281335 [ 1498.733485][T17553] mapped:28198 shmem:1336 pagetables:1542 [ 1498.733485][T17553] sec_pagetables:0 bounce:0 [ 1498.733485][T17553] kernel_misc_reclaimable:0 [ 1498.733485][T17553] free:1081405 free_pcp:24815 free_cma:0 [ 1498.955381][T17553] Node 0 active_anon:18604kB inactive_anon:6056kB active_file:18892kB inactive_file:4724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:18496kB dirty:492kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18280kB pagetables:6136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1499.026906][T17553] Node 1 active_anon:0kB inactive_anon:0kB active_file:1092kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94292kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1499.079860][T17553] Node 0 DMA free:11224kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:8kB free_cma:0kB [ 1499.112340][T17553] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1499.163098][T17553] Node 0 DMA32 free:1435136kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18504kB inactive_anon:6056kB active_file:18892kB inactive_file:4724kB unevictable:1536kB writepending:492kB zspages:292kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:34728kB local_pcp:13940kB free_cma:0kB [ 1499.211298][T17553] lowmem_reserve[]: 0 0 0 0 0 [ 1499.233798][T17553] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1499.334679][T17564] lo speed is unknown, defaulting to 1000 [ 1499.343717][T17553] lowmem_reserve[]: 0 0 0 0 0 [ 1499.354702][T17553] Node 1 Normal free:2900268kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:1092kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:1440kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64696kB local_pcp:32424kB free_cma:0kB [ 1499.432789][T17553] lowmem_reserve[]: 0 0 0 0 0 [ 1499.448612][T17553] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11224kB [ 1499.469508][T17553] Node 0 DMA32: 7149*4kB (UME) 8768*8kB (UME) 6748*16kB (UME) 692*32kB (UME) 613*64kB (UME) 1101*128kB (UME) 997*256kB (UME) 736*512kB (UME) 392*1024kB (UME) 7*2048kB (UM) 0*4096kB = 1456820kB [ 1499.528389][T17553] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1499.564498][T17553] Node 1 Normal: 95*4kB (UM) 90*8kB (UM) 65*16kB (UM) 57*32kB (UM) 82*64kB (UM) 47*128kB (UM) 67*256kB (UM) 49*512kB (UM) 36*1024kB (UM) 22*2048kB (U) 678*4096kB (U) = 2916476kB [ 1499.590923][T17553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.608745][T17571] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.628230][T17553] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1499.631400][T17571] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.659150][T17571] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1499.672089][T17553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1499.686953][T17553] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1499.697545][T17553] 7540 total pagecache pages [ 1499.702267][T17553] 32 pages in swap cache [ 1499.707332][T17553] Free swap = 122700kB [ 1499.711569][T17553] Total swap = 124996kB [ 1499.715830][T17553] 2097051 pages RAM [ 1499.720242][T17553] 0 pages HighMem/MovableOnly [ 1499.725179][T17553] 427099 pages reserved [ 1499.730985][T17553] 0 pages cma reserved [ 1499.857432][T17571] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1499.889792][T17571] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.922850][T17571] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1499.998817][T17564] lo speed is unknown, defaulting to 1000 [ 1500.009822][T17564] dummy0 speed is unknown, defaulting to 1000 [ 1500.023151][T17571] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.036591][T17571] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.053584][T17571] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1500.111365][T17592] team0: entered promiscuous mode [ 1500.126540][T17592] team_slave_0: entered promiscuous mode [ 1500.142336][T17592] team_slave_1: entered promiscuous mode [ 1500.179360][T17571] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.190776][T17571] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.201397][T17571] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1500.372637][ T8709] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1500.405177][ T8709] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.421240][T17600] nbd: couldn't find a device at index 1 [ 1500.433553][ T8709] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1500.459465][T17602] netlink: 288 bytes leftover after parsing attributes in process `syz.3.10678'. [ 1500.504414][ T8709] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1500.523979][ T8709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.543259][ T8709] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1500.594201][T17605] netlink: 'syz.1.10679': attribute type 4 has an invalid length. [ 1500.626178][ T8709] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1500.642254][T17605] netlink: 'syz.1.10679': attribute type 6 has an invalid length. [ 1500.644275][ T8709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.660642][T17605] netlink: 'syz.1.10679': attribute type 1 has an invalid length. [ 1500.682307][ T8709] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1500.719886][ T8700] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1500.736660][ T8700] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.747921][ T8700] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1501.020491][T17621] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10682'. [ 1501.200329][T17624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10683'. [ 1501.363522][T17626] tipc: Started in network mode [ 1501.386528][T17626] tipc: Node identity 0aab9fba370c, cluster identity 4711 [ 1501.414142][T17626] tipc: Enabled bearer , priority 0 [ 1501.427337][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10685'. [ 1501.448390][T17630] syzkaller0: entered promiscuous mode [ 1501.466449][T17630] syzkaller0: entered allmulticast mode [ 1501.536804][T17626] tipc: Resetting bearer [ 1501.597581][T17625] tipc: Resetting bearer [ 1501.673011][T17625] tipc: Disabling bearer [ 1501.853369][T17638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10691'. [ 1501.979383][T17651] netlink: 'syz.5.10693': attribute type 10 has an invalid length. [ 1502.060927][T17651] team0: Port device dummy0 added [ 1502.129482][T17660] netlink: 'syz.1.10694': attribute type 13 has an invalid length. [ 1502.143758][T17660] netlink: 'syz.1.10694': attribute type 17 has an invalid length. [ 1502.164164][T17397] udevd[17397]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1502.204162][T17660] gretap0: refused to change device tx_queue_len [ 1502.207942][T17654] udevd[17654]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1502.221079][T17660] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1502.264906][T17665] __nla_validate_parse: 2 callbacks suppressed [ 1502.264919][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10696'. [ 1502.265713][ T9428] lo speed is unknown, defaulting to 1000 [ 1502.319645][ T9428] syz2: Port: 1 Link ACTIVE [ 1502.448504][T17682] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10701'. [ 1502.449266][T17677] lo speed is unknown, defaulting to 1000 [ 1502.501256][T17686] netlink: 'syz.1.10702': attribute type 1 has an invalid length. [ 1502.511117][T17686] netlink: 'syz.1.10702': attribute type 2 has an invalid length. [ 1502.622020][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10703'. [ 1502.632229][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10703'. [ 1502.719233][T17695] xt_addrtype: ipv6 does not support BROADCAST matching [ 1502.846026][T17677] lo speed is unknown, defaulting to 1000 [ 1502.854670][T17677] dummy0 speed is unknown, defaulting to 1000 [ 1503.786134][T17728] sock: sock_timestamping_bind_phc: sock not bind to device [ 1503.879460][T17727] bridge3: entered promiscuous mode [ 1503.886930][T17723] block nbd6: server does not support multiple connections per device. [ 1503.907951][T17723] block nbd6: shutting down sockets [ 1503.932028][T17732] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10714'. [ 1503.937980][T17724] bridge0: port 2(vlan1) entered blocking state [ 1503.950119][T17724] bridge0: port 2(vlan1) entered disabled state [ 1503.981926][T17724] vlan1: entered allmulticast mode [ 1503.996976][T17724] geneve0: entered allmulticast mode [ 1504.019524][T17724] vlan1: entered promiscuous mode [ 1504.031747][T17724] geneve0: entered promiscuous mode [ 1504.093738][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10716'. [ 1504.121468][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10716'. [ 1504.133495][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10716'. [ 1504.158033][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10716'. [ 1504.167094][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10716'. [ 1504.275004][T17738] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1504.311266][T17738] bond8 (unregistering): Released all slaves [ 1504.515005][T17739] veth1_to_team: entered promiscuous mode [ 1504.546041][T17739] gretap0: entered promiscuous mode [ 1504.583753][T17739] hsr1: entered promiscuous mode [ 1504.789218][T17766] openvswitch: netlink: VLAN attribute unexpected. [ 1504.836562][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1504.846526][T17766] xt_hashlimit: size too large, truncated to 1048576 [ 1504.865480][T17767] lo speed is unknown, defaulting to 1000 [ 1504.966551][ T8606] IPVS: starting estimator thread 0... [ 1505.056596][T17778] IPVS: using max 29 ests per chain, 69600 per kthread [ 1505.149482][T17767] lo speed is unknown, defaulting to 1000 [ 1505.156225][T17767] dummy0 speed is unknown, defaulting to 1000 [ 1505.584238][T17789] x_tables: duplicate underflow at hook 4 [ 1506.771465][T17846] ip6tnl0: Caught tx_queue_len zero misconfig [ 1507.172150][T17871] xt_connbytes: Forcing CT accounting to be enabled [ 1507.406172][T17884] __nla_validate_parse: 3 callbacks suppressed [ 1507.406191][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10753'. [ 1507.650441][T17894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1507.668578][T17898] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1507.942356][T17916] lo speed is unknown, defaulting to 1000 [ 1507.967107][T17921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10761'. [ 1508.068833][T17927] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1508.260355][T17934] bridge0: port 3(vlan2) entered blocking state [ 1508.281094][T17934] bridge0: port 3(vlan2) entered disabled state [ 1508.306166][T17934] vlan2: entered allmulticast mode [ 1508.321749][T17934] geneve0: entered allmulticast mode [ 1508.340176][T17934] vlan2: entered promiscuous mode [ 1508.351422][T17934] geneve0: entered promiscuous mode [ 1508.380496][T17941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10767'. [ 1508.459972][T17944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10767'. [ 1508.525621][T17948] tipc: Enabled bearer , priority 0 [ 1508.543038][T17948] netlink: 'syz.3.10769': attribute type 4 has an invalid length. [ 1508.579726][T17948] netlink: 'syz.3.10769': attribute type 4 has an invalid length. [ 1508.610914][T17948] syzkaller0: entered promiscuous mode [ 1508.628764][T17948] syzkaller0: entered allmulticast mode [ 1508.812755][T17916] lo speed is unknown, defaulting to 1000 [ 1508.824941][T17953] tipc: Resetting bearer [ 1508.862672][T17916] dummy0 speed is unknown, defaulting to 1000 [ 1508.869198][T17947] tipc: Resetting bearer [ 1508.938219][T17947] tipc: Disabling bearer [ 1508.984713][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10771'. [ 1509.140388][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10774'. [ 1509.262670][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10774'. [ 1509.284442][T17968] veth11: entered promiscuous mode [ 1509.370494][T17974] netlink: 'syz.4.10777': attribute type 1 has an invalid length. [ 1509.398821][T17974] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1509.771476][T17991] netlink: 'syz.0.10780': attribute type 30 has an invalid length. [ 1509.791263][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10780'. [ 1509.815747][T17991] netlink: 'syz.0.10780': attribute type 30 has an invalid length. [ 1509.836204][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10780'. [ 1509.914194][T17992] netlink: 'syz.0.10780': attribute type 30 has an invalid length. [ 1509.948964][T17992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10780'. [ 1510.145141][ T30] audit: type=1800 audit(1777926548.334:38): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10783" name="memory.events" dev="tmpfs" ino=2056 res=0 errno=0 [ 1510.147951][T18003] sctp: [Deprecated]: syz.0.10783 (pid 18003) Use of int in max_burst socket option. [ 1510.147951][T18003] Use struct sctp_assoc_value instead [ 1510.259842][T17998] bridge3: port 1(veth5) entered blocking state [ 1510.272638][T17998] bridge3: port 1(veth5) entered disabled state [ 1510.284814][T17998] veth5: entered allmulticast mode [ 1510.303036][T17998] veth5: entered promiscuous mode [ 1510.317399][T17998] bridge3: port 1(veth5) entered blocking state [ 1510.323794][T17998] bridge3: port 1(veth5) entered forwarding state [ 1510.413111][T18001] bridge3: port 2(veth7) entered blocking state [ 1510.420025][T18001] bridge3: port 2(veth7) entered disabled state [ 1510.426668][T18001] veth7: entered allmulticast mode [ 1510.437862][T18001] veth7: entered promiscuous mode [ 1510.443785][T18001] bridge3: port 2(veth7) entered blocking state [ 1510.450169][T18001] bridge3: port 2(veth7) entered forwarding state [ 1510.468930][T18007] vlan2: entered allmulticast mode [ 1510.474064][T18007] veth0_to_bond: entered allmulticast mode [ 1510.497093][T18003] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1510.585269][T18010] lo speed is unknown, defaulting to 1000 [ 1510.690693][T18026] netlink: 'syz.0.10787': attribute type 1 has an invalid length. [ 1510.794242][T18026] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1510.806004][T18033] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 1510.896574][T18026] bond10: (slave bridge4): making interface the new active one [ 1510.916226][T18026] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 1510.960571][ T8711] bridge3: port 1(veth5) entered disabled state [ 1510.990254][ T8711] bridge3: port 2(veth7) entered disabled state [ 1511.112745][T18010] lo speed is unknown, defaulting to 1000 [ 1511.247200][T18010] dummy0 speed is unknown, defaulting to 1000 [ 1511.320739][T18055] xt_limit: Overflow, try lower: 28676/2147483648 [ 1511.389105][T18058] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1511.603249][T18072] pim6reg1: entered promiscuous mode [ 1511.609501][T18072] pim6reg1: entered allmulticast mode [ 1511.784463][T18075] lo speed is unknown, defaulting to 1000 [ 1512.283684][T18075] lo speed is unknown, defaulting to 1000 [ 1512.312895][T18075] dummy0 speed is unknown, defaulting to 1000 [ 1512.443320][T18100] hsr_slave_0: left promiscuous mode [ 1512.490609][T18100] hsr_slave_1: left promiscuous mode [ 1512.653467][T18123] __nla_validate_parse: 10 callbacks suppressed [ 1512.653481][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10809'. [ 1512.720351][T18129] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1512.847374][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10812'. [ 1512.952181][T18137] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1513.019927][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1513.044431][T18144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1513.264864][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10814'. [ 1513.354386][T18152] bond8: entered allmulticast mode [ 1513.363373][T18152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1514.146002][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10816'. [ 1515.222919][T18172] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.10819'. [ 1516.564319][T18168] hmac(sha224): entered promiscuous mode [ 1516.880612][T18189] netlink: 216 bytes leftover after parsing attributes in process `syz.0.10824'. [ 1516.925380][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10824'. [ 1517.227067][T18209] FAULT_INJECTION: forcing a failure. [ 1517.227067][T18209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1517.252060][T18209] CPU: 1 UID: 0 PID: 18209 Comm: syz.3.10831 Not tainted syzkaller #0 PREEMPT(full) [ 1517.252084][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1517.252095][T18209] Call Trace: [ 1517.252103][T18209] [ 1517.252111][T18209] dump_stack_lvl+0xe8/0x150 [ 1517.252137][T18209] should_fail_ex+0x412/0x560 [ 1517.252164][T18209] _copy_from_user+0x2d/0xb0 [ 1517.252190][T18209] copy_from_sockptr+0x5e/0x90 [ 1517.252214][T18209] do_ip_setsockopt+0x1b85/0x2ea0 [ 1517.252242][T18209] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1517.252262][T18209] ? aa_sk_perm+0x6d5/0x900 [ 1517.252286][T18209] ? __fget_files+0x2a/0x420 [ 1517.252312][T18209] ? __pfx_aa_sk_perm+0x10/0x10 [ 1517.252336][T18209] ? __fget_files+0x2a/0x420 [ 1517.252355][T18209] ? aa_sock_opt_perm+0xff/0x1a0 [ 1517.252382][T18209] ip_setsockopt+0x66/0x110 [ 1517.252398][T18209] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1517.252421][T18209] do_sock_setsockopt+0x17c/0x1b0 [ 1517.252448][T18209] __x64_sys_setsockopt+0x13d/0x1b0 [ 1517.252474][T18209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.252493][T18209] do_syscall_64+0x15f/0xf80 [ 1517.252514][T18209] ? trace_irq_disable+0x3b/0x140 [ 1517.252540][T18209] ? clear_bhb_loop+0x40/0x90 [ 1517.252577][T18209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.252595][T18209] RIP: 0033:0x7f1a1e79cdd9 [ 1517.252612][T18209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.252628][T18209] RSP: 002b:00007f1a1f5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1517.252647][T18209] RAX: ffffffffffffffda RBX: 00007f1a1ea15fa0 RCX: 00007f1a1e79cdd9 [ 1517.252661][T18209] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 1517.252671][T18209] RBP: 00007f1a1f5da090 R08: 000000000000000c R09: 0000000000000000 [ 1517.252682][T18209] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1517.252693][T18209] R13: 00007f1a1ea16038 R14: 00007f1a1ea15fa0 R15: 00007ffd1ee53c08 [ 1517.252723][T18209] [ 1517.489236][T18204] sctp: [Deprecated]: syz.5.10829 (pid 18204) Use of int in max_burst socket option. [ 1517.489236][T18204] Use struct sctp_assoc_value instead [ 1517.623289][T18206] netlink: 'syz.1.10830': attribute type 19 has an invalid length. [ 1517.654788][T18206] netlink: 'syz.1.10830': attribute type 20 has an invalid length. [ 1517.778414][T18228] __nla_validate_parse: 6 callbacks suppressed [ 1517.778433][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1517.839770][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10838'. [ 1517.862961][T18229] veth1: entered promiscuous mode [ 1517.884542][T18229] veth1: entered allmulticast mode [ 1517.981617][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1517.991220][T18226] netlink: 348 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1518.001078][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1518.011972][T18226] netlink: 348 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1518.026981][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1518.045772][T18237] sctp: [Deprecated]: syz.3.10841 (pid 18237) Use of int in max_burst socket option. [ 1518.045772][T18237] Use struct sctp_assoc_value instead [ 1518.133105][T18226] ipvlan2: entered promiscuous mode [ 1518.186472][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1518.246545][T18241] syzkaller0: entered promiscuous mode [ 1518.280825][T18241] syzkaller0: entered allmulticast mode [ 1518.569335][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1518.719480][T18287] netlink: 'syz.4.10851': attribute type 4 has an invalid length. [ 1518.766782][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10852'. [ 1519.093298][T18313] Unsupported ieee802154 address type: 0 [ 1519.158249][T18317] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1519.167104][T18317] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1519.498689][T18341] x_tables: duplicate underflow at hook 1 [ 1519.552154][T18324] sctp: [Deprecated]: syz.4.10863 (pid 18324) Use of int in max_burst socket option. [ 1519.552154][T18324] Use struct sctp_assoc_value instead [ 1520.051043][T18370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1521.161306][T18396] [ 1521.163678][T18396] ====================================================== [ 1521.170695][T18396] WARNING: possible circular locking dependency detected [ 1521.177716][T18396] syzkaller #0 Not tainted [ 1521.182127][T18396] ------------------------------------------------------ [ 1521.189163][T18396] syz.3.10884/18396 is trying to acquire lock: [ 1521.195308][T18396] ffff888027412ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1521.204728][T18396] [ 1521.204728][T18396] but task is already holding lock: [ 1521.212087][T18396] ffff8880274125a0 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1521.222306][T18396] [ 1521.222306][T18396] which lock already depends on the new lock. [ 1521.222306][T18396] [ 1521.232699][T18396] [ 1521.232699][T18396] the existing dependency chain (in reverse order) is: [ 1521.241697][T18396] [ 1521.241697][T18396] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1521.250300][T18396] blk_alloc_queue+0x546/0x680 [ 1521.255580][T18396] __blk_mq_alloc_disk+0x197/0x390 [ 1521.261206][T18396] nbd_dev_add+0x499/0xb50 [ 1521.266140][T18396] nbd_init+0x168/0x1f0 [ 1521.270823][T18396] do_one_initcall+0x250/0x870 [ 1521.276096][T18396] do_initcall_level+0x104/0x190 [ 1521.281548][T18396] do_initcalls+0x59/0xa0 [ 1521.286392][T18396] kernel_init_freeable+0x2a6/0x3e0 [ 1521.292109][T18396] kernel_init+0x1d/0x1d0 [ 1521.296954][T18396] ret_from_fork+0x514/0xb70 [ 1521.302051][T18396] ret_from_fork_asm+0x1a/0x30 [ 1521.307324][T18396] [ 1521.307324][T18396] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1521.314527][T18396] fs_reclaim_acquire+0x71/0x100 [ 1521.319977][T18396] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1521.326301][T18396] __alloc_skb+0x1d0/0x7d0 [ 1521.331228][T18396] tcp_stream_alloc_skb+0x3f/0x580 [ 1521.336856][T18396] tcp_connect+0x1570/0x5400 [ 1521.341961][T18396] tcp_v6_connect+0x128d/0x1b10 [ 1521.347324][T18396] mptcp_connect+0x56b/0x830 [ 1521.352424][T18396] __inet_stream_connect+0x25a/0xdd0 [ 1521.358220][T18396] inet_stream_connect+0x66/0xa0 [ 1521.363671][T18396] __sys_connect+0x312/0x450 [ 1521.368771][T18396] __x64_sys_connect+0x7a/0x90 [ 1521.374043][T18396] do_syscall_64+0x15f/0xf80 [ 1521.379143][T18396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.385544][T18396] [ 1521.385544][T18396] -> #4 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1521.393437][T18396] lock_sock_nested+0x41/0x100 [ 1521.398708][T18396] inet_shutdown+0x6a/0x390 [ 1521.403724][T18396] nbd_mark_nsock_dead+0x2e9/0x560 [ 1521.409340][T18396] recv_work+0x1c2e/0x1d40 [ 1521.414265][T18396] process_scheduled_works+0xb5d/0x1860 [ 1521.420317][T18396] worker_thread+0xa53/0xfc0 [ 1521.425416][T18396] kthread+0x388/0x470 [ 1521.430000][T18396] ret_from_fork+0x514/0xb70 [ 1521.435105][T18396] ret_from_fork_asm+0x1a/0x30 [ 1521.440387][T18396] [ 1521.440387][T18396] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1521.448031][T18396] __mutex_lock+0x1a3/0x1550 [ 1521.453146][T18396] nbd_queue_rq+0x37b/0x1100 [ 1521.458243][T18396] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1521.464302][T18396] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1521.471143][T18396] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1521.477635][T18396] blk_mq_run_hw_queue+0x348/0x4f0 [ 1521.483257][T18396] blk_mq_dispatch_list+0xd16/0xe10 [ 1521.488967][T18396] blk_mq_flush_plug_list+0x48d/0x570 [ 1521.494850][T18396] __blk_flush_plug+0x3ed/0x4d0 [ 1521.500214][T18396] __submit_bio+0x28d/0x580 [ 1521.505229][T18396] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1521.511373][T18396] block_read_full_folio+0x599/0x830 [ 1521.517163][T18396] filemap_read_folio+0x137/0x3b0 [ 1521.522698][T18396] do_read_cache_folio+0x358/0x590 [ 1521.528320][T18396] read_part_sector+0xb6/0x2b0 [ 1521.533593][T18396] adfspart_check_ICS+0xb1/0x960 [ 1521.539044][T18396] bdev_disk_changed+0x817/0x1770 [ 1521.544578][T18396] blkdev_get_whole+0x380/0x510 [ 1521.549942][T18396] bdev_open+0x31e/0xd30 [ 1521.554708][T18396] blkdev_open+0x470/0x610 [ 1521.559645][T18396] do_dentry_open+0x785/0x14e0 [ 1521.564920][T18396] vfs_open+0x3b/0x340 [ 1521.569495][T18396] path_openat+0x2e08/0x3860 [ 1521.574596][T18396] do_file_open+0x23e/0x4a0 [ 1521.579608][T18396] do_sys_openat2+0x113/0x200 [ 1521.584791][T18396] __x64_sys_openat+0x138/0x170 [ 1521.590147][T18396] do_syscall_64+0x15f/0xf80 [ 1521.595245][T18396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.601651][T18396] [ 1521.601651][T18396] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1521.608852][T18396] __mutex_lock+0x1a3/0x1550 [ 1521.613954][T18396] nbd_queue_rq+0xc6/0x1100 [ 1521.618962][T18396] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1521.625019][T18396] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1521.631861][T18396] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1521.638353][T18396] blk_mq_run_hw_queue+0x348/0x4f0 [ 1521.643973][T18396] blk_mq_dispatch_list+0xd16/0xe10 [ 1521.649685][T18396] blk_mq_flush_plug_list+0x48d/0x570 [ 1521.655569][T18396] __blk_flush_plug+0x3ed/0x4d0 [ 1521.660929][T18396] __submit_bio+0x28d/0x580 [ 1521.665942][T18396] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1521.672084][T18396] block_read_full_folio+0x599/0x830 [ 1521.677882][T18396] filemap_read_folio+0x137/0x3b0 [ 1521.683422][T18396] do_read_cache_folio+0x358/0x590 [ 1521.689047][T18396] read_part_sector+0xb6/0x2b0 [ 1521.694320][T18396] adfspart_check_ICS+0xb1/0x960 [ 1521.699770][T18396] bdev_disk_changed+0x817/0x1770 [ 1521.705306][T18396] blkdev_get_whole+0x380/0x510 [ 1521.710669][T18396] bdev_open+0x31e/0xd30 [ 1521.715423][T18396] blkdev_open+0x470/0x610 [ 1521.720344][T18396] do_dentry_open+0x785/0x14e0 [ 1521.725622][T18396] vfs_open+0x3b/0x340 [ 1521.730198][T18396] path_openat+0x2e08/0x3860 [ 1521.735298][T18396] do_file_open+0x23e/0x4a0 [ 1521.740312][T18396] do_sys_openat2+0x113/0x200 [ 1521.745499][T18396] __x64_sys_openat+0x138/0x170 [ 1521.750857][T18396] do_syscall_64+0x15f/0xf80 [ 1521.755957][T18396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.762357][T18396] [ 1521.762357][T18396] -> #1 (set->srcu){.+.+}-{0:0}: [ 1521.769468][T18396] __synchronize_srcu+0xca/0x300 [ 1521.774911][T18396] elevator_switch+0x1e8/0x7a0 [ 1521.780183][T18396] elevator_change+0x2cc/0x450 [ 1521.785458][T18396] elevator_set_default+0x36c/0x430 [ 1521.791165][T18396] blk_register_queue+0x3e9/0x4e0 [ 1521.796705][T18396] __add_disk+0x677/0xd50 [ 1521.801550][T18396] add_disk_fwnode+0xfb/0x480 [ 1521.806730][T18396] nbd_dev_add+0x72c/0xb50 [ 1521.811651][T18396] nbd_init+0x168/0x1f0 [ 1521.816316][T18396] do_one_initcall+0x250/0x870 [ 1521.821593][T18396] do_initcall_level+0x104/0x190 [ 1521.827043][T18396] do_initcalls+0x59/0xa0 [ 1521.831886][T18396] kernel_init_freeable+0x2a6/0x3e0 [ 1521.837590][T18396] kernel_init+0x1d/0x1d0 [ 1521.842431][T18396] ret_from_fork+0x514/0xb70 [ 1521.847525][T18396] ret_from_fork_asm+0x1a/0x30 [ 1521.852795][T18396] [ 1521.852795][T18396] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1521.860599][T18396] __lock_acquire+0x15a5/0x2cf0 [ 1521.865955][T18396] lock_acquire+0x106/0x350 [ 1521.870965][T18396] __mutex_lock+0x1a3/0x1550 [ 1521.876062][T18396] elevator_change+0x1b3/0x450 [ 1521.881342][T18396] elevator_set_none+0xb5/0x140 [ 1521.886705][T18396] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1521.893015][T18396] nbd_start_device+0x17f/0xb10 [ 1521.898370][T18396] nbd_genl_connect+0x165b/0x1cf0 [ 1521.903896][T18396] genl_family_rcv_msg_doit+0x22a/0x330 [ 1521.909964][T18396] genl_rcv_msg+0x61c/0x7a0 [ 1521.914979][T18396] netlink_rcv_skb+0x232/0x4b0 [ 1521.920248][T18396] genl_rcv+0x28/0x40 [ 1521.924741][T18396] netlink_unicast+0x75c/0x8e0 [ 1521.930008][T18396] netlink_sendmsg+0x813/0xb40 [ 1521.935279][T18396] ____sys_sendmsg+0x972/0x9f0 [ 1521.940557][T18396] ___sys_sendmsg+0x2a5/0x360 [ 1521.945744][T18396] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1521.951188][T18396] do_syscall_64+0x15f/0xf80 [ 1521.956287][T18396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.962685][T18396] [ 1521.962685][T18396] other info that might help us debug this: [ 1521.962685][T18396] [ 1521.972892][T18396] Chain exists of: [ 1521.972892][T18396] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 1521.972892][T18396] [ 1521.986618][T18396] Possible unsafe locking scenario: [ 1521.986618][T18396] [ 1521.994048][T18396] CPU0 CPU1 [ 1521.999395][T18396] ---- ---- [ 1522.004739][T18396] lock(&q->q_usage_counter(io)#55); [ 1522.010102][T18396] lock(fs_reclaim); [ 1522.016589][T18396] lock(&q->q_usage_counter(io)#55); [ 1522.024468][T18396] lock(&q->elevator_lock); [ 1522.029045][T18396] [ 1522.029045][T18396] *** DEADLOCK *** [ 1522.029045][T18396] [ 1522.037172][T18396] 6 locks held by syz.3.10884/18396: [ 1522.042436][T18396] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1522.050616][T18396] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1522.059571][T18396] #2: ffff8880274d81c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 1522.070952][T18396] #3: ffff8880274d80d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 1522.081901][T18396] #4: ffff8880274125a0 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1522.092512][T18396] #5: ffff8880274125d8 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1522.103385][T18396] [ 1522.103385][T18396] stack backtrace: [ 1522.109257][T18396] CPU: 0 UID: 0 PID: 18396 Comm: syz.3.10884 Not tainted syzkaller #0 PREEMPT(full) [ 1522.109289][T18396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1522.109306][T18396] Call Trace: [ 1522.109315][T18396] [ 1522.109322][T18396] dump_stack_lvl+0xe8/0x150 [ 1522.109341][T18396] print_circular_bug+0x2e1/0x300 [ 1522.109364][T18396] check_noncircular+0x12e/0x150 [ 1522.109387][T18396] __lock_acquire+0x15a5/0x2cf0 [ 1522.109413][T18396] ? elevator_change+0x1b3/0x450 [ 1522.109434][T18396] lock_acquire+0x106/0x350 [ 1522.109450][T18396] ? elevator_change+0x1b3/0x450 [ 1522.109477][T18396] __mutex_lock+0x1a3/0x1550 [ 1522.109496][T18396] ? elevator_change+0x1b3/0x450 [ 1522.109518][T18396] ? rcu_is_watching+0x15/0xb0 [ 1522.109539][T18396] ? work_grab_pending+0x3d1/0x990 [ 1522.109559][T18396] ? elevator_change+0x1b3/0x450 [ 1522.109581][T18396] ? __pfx___mutex_lock+0x10/0x10 [ 1522.109599][T18396] ? enable_work+0x17f/0x230 [ 1522.109618][T18396] ? lockdep_hardirqs_on+0x7a/0x110 [ 1522.109639][T18396] ? __cancel_work_sync+0xf7/0x110 [ 1522.109659][T18396] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1522.109685][T18396] elevator_change+0x1b3/0x450 [ 1522.109709][T18396] elevator_set_none+0xb5/0x140 [ 1522.109731][T18396] ? __pfx_elevator_set_none+0x10/0x10 [ 1522.109755][T18396] ? xa_load+0x1db/0x210 [ 1522.109776][T18396] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1522.109798][T18396] ? kernfs_add_one+0x477/0x5c0 [ 1522.109820][T18396] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1522.109840][T18396] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1522.109861][T18396] nbd_start_device+0x17f/0xb10 [ 1522.109879][T18396] ? device_create_file+0xf4/0x1b0 [ 1522.109897][T18396] nbd_genl_connect+0x165b/0x1cf0 [ 1522.109912][T18396] ? __pfx___nla_validate_parse+0x10/0x10 [ 1522.109939][T18396] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1522.109956][T18396] ? rcu_is_watching+0x15/0xb0 [ 1522.109975][T18396] ? trace_kmalloc+0x2a/0xf0 [ 1522.109998][T18396] ? __nla_parse+0x40/0x60 [ 1522.110021][T18396] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1522.110047][T18396] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1522.110080][T18396] genl_family_rcv_msg_doit+0x22a/0x330 [ 1522.110107][T18396] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1522.110136][T18396] ? __lock_acquire+0x6b5/0x2cf0 [ 1522.110155][T18396] genl_rcv_msg+0x61c/0x7a0 [ 1522.110181][T18396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1522.110204][T18396] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1522.110224][T18396] netlink_rcv_skb+0x232/0x4b0 [ 1522.110243][T18396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1522.110267][T18396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1522.110292][T18396] ? down_read+0x270/0x2e0 [ 1522.110312][T18396] ? genl_rcv+0xd/0x40 [ 1522.110334][T18396] genl_rcv+0x28/0x40 [ 1522.110356][T18396] netlink_unicast+0x75c/0x8e0 [ 1522.110376][T18396] netlink_sendmsg+0x813/0xb40 [ 1522.110400][T18396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1522.110420][T18396] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1522.110441][T18396] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1522.110464][T18396] ____sys_sendmsg+0x972/0x9f0 [ 1522.110484][T18396] ? __might_fault+0xaf/0x130 [ 1522.110506][T18396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1522.110530][T18396] ? import_iovec+0x73/0xa0 [ 1522.110553][T18396] ___sys_sendmsg+0x2a5/0x360 [ 1522.110572][T18396] ? __lock_acquire+0x6b5/0x2cf0 [ 1522.110590][T18396] ? __pfx____sys_sendmsg+0x10/0x10 [ 1522.110613][T18396] ? futex_wait+0x2a2/0x390 [ 1522.110645][T18396] ? __fget_files+0x2a/0x420 [ 1522.110663][T18396] ? __fget_files+0x3a0/0x420 [ 1522.110684][T18396] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1522.110706][T18396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1522.110729][T18396] ? rcu_is_watching+0x15/0xb0 [ 1522.110751][T18396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.110768][T18396] do_syscall_64+0x15f/0xf80 [ 1522.110786][T18396] ? trace_irq_disable+0x3b/0x140 [ 1522.110809][T18396] ? clear_bhb_loop+0x40/0x90 [ 1522.110828][T18396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.110844][T18396] RIP: 0033:0x7f1a1e79cdd9 [ 1522.110858][T18396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.110873][T18396] RSP: 002b:00007f1a1f5da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1522.110891][T18396] RAX: ffffffffffffffda RBX: 00007f1a1ea15fa0 RCX: 00007f1a1e79cdd9 [ 1522.110903][T18396] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000d [ 1522.110913][T18396] RBP: 00007f1a1e832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1522.110924][T18396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.110934][T18396] R13: 00007f1a1ea16038 R14: 00007f1a1ea15fa0 R15: 00007ffd1ee53c08 [ 1522.110953][T18396] [ 1522.595309][T18377] Bluetooth: hci3: command 0x0405 tx timeout [ 1522.641228][ T5640] block nbd6: Receive control failed (result -32) [ 1522.642672][T18377] block nbd6: Receive control failed (result -32) [ 1525.317144][ T5633] block nbd0: Receive control failed (result -110)