last executing test programs: 3m48.135509493s ago: executing program 0 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x14, 0x0, 0x8, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0}, 0x40) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex=r4, r0, 0x17, 0x2034, 0x0, @void, @void, @value=r5, @void, r1}, 0x20) 3m47.809274367s ago: executing program 0 (id=394): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = epoll_create1(0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r4, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x14}) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, r6, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) (async) sendto$l2tp6(r1, 0x0, 0x0, 0x54, &(0x7f0000000180)={0xa, 0x0, 0x10000, @mcast2, 0xfffffffa, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (async) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02c87fa9d0eeffbbad000000000000000b2e8b7bd84a9f1e122f066542a1e6a48146f91d6c78d743495f3779987cdc190cc1db9f421c5ab4b16786a48c92163ddd3e1855110fafcd4342ac75bd4f9ac56afff4b8cd0ce4c0f10e7217bbf2ade3efd5587b6d87972598c91306587c8af86dd897a6fc6798081f4dac79f4e854c2"], 0x10}}, 0x0) recvmmsg(r8, &(0x7f0000009200)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x20, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3m47.426962879s ago: executing program 0 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x2, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$tun(r4, &(0x7f0000000540)=ANY=[], 0x8b) read$alg(r3, &(0x7f00000003c0)=""/85, 0x55) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a0000009c0000000000000024000000000000009500200d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xb8d9, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xf0, 0x2, 0x66, @local, @mcast2, 0x8000, 0x1, 0x0, 0x3}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000880)={{r7, &(0x7f0000000100)='\x00', 0x4dc000, &(0x7f0000000180)={@_ha_fsid={[0x1ff, 0x6]}, {0x8c03, 0x6, 0x9, 0x9}}, 0x2, &(0x7f0000000200)={@_ha_fsid}, 0xfffffffffffffffd}, {[0x400, 0x1, 0x7f, 0x8]}, 0x4, 0x75, &(0x7f0000000800)=""/117}) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r8, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x1, r5, 0x7, r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x15, &(0x7f0000000a40)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5da3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @exit], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000006a0f0000000000000200000018110000c0cee8ec02113d821b169ee315551c5eef60f5f06c564f7556673001dcd3d6634a6f66780458b95fdad09fc915c7ba2897caf3d2902fff25c035e77cf81d93e585b90dac6d7a9729ad48eba3c68e8e9d2d536821adddf8ce5f4f80c5a36ffd6d64a2c350ebd9914828931d8b4b8dc02fd3", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000085000000110000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) 3m47.059317854s ago: executing program 0 (id=402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x11, @empty, 0xce20, 0x1, 'fo\x00', 0x2a, 0x401, 0x65}, 0x2c) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0004000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000, 0x2, 0x0, 0x0, 0x96, 0xfff8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x802, 0x14}, @ipv4=@tipc={{0x6, 0x4, 0x1, 0x34, 0x38, 0x65, 0x0, 0x1, 0x6, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x2}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x8, 0x0, 0x0, 0x3, 0x4, 0x3, 0x29, 0x1, 0x2, 0x4e24, 0x4e23}, 0x4, 0x4}}}}}, 0x46) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3m46.143906331s ago: executing program 0 (id=408): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10, r2, 0xc3e8a000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 3m46.002758287s ago: executing program 0 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500e607000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) 3m30.928797406s ago: executing program 32 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500e607000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) 2m47.757774035s ago: executing program 1 (id=911): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0xa, @multicast, 'ip6tnl0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000800)="ee4e11f121", 0x5}], 0x1}}], 0x1, 0x20001000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000340)={'nicvf0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmmsg$inet6(r5, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="64bb6a97aaf0b87f190a4cba6feb816dfef1c47030d7e707ac33636c2579a098b5", 0x21}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4802d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000f00)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8) write$cgroup_devices(r10, &(0x7f0000000e00)={'a', ' *:* ', 'rm\x00'}, 0x9) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x40}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmmsg$unix(r5, &(0x7f0000000d00)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000680)=""/11, 0xb}], 0x5}}, {{&(0x7f00000009c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000a40)=""/100, 0x64}, {&(0x7f0000000ac0)=""/202, 0xca}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x3, 0x10000, &(0x7f0000000940)={r11, r12+10000000}) 2m46.735602611s ago: executing program 1 (id=920): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) socket(0x1e, 0x4, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x0, 0x802, 0x8, 0x100000, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x4000000, 0x0, 0x6a9, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) recvmmsg(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) close(r3) sendmmsg$inet(r2, &(0x7f00000000c0), 0x1, 0x44804) r4 = socket(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0xa, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x8, 0x808, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x4, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x40007, 0x7, 0x101, 0x2d5421e8, 0x80, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xd, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x7, 0x9a6, 0x200e4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x200007ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0xfffffffffffffe5a, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_TARGET={0x0, 0x1, 0xfffffffc}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_TARGET={0x8, 0x1, 0x64}]}}]}, 0x6c}}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1411, 0x1, 0xfffffffd}, 0x10}}, 0x20000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000200001e3ff7e66831c943e03000000000000000180aee00931a8ebe7e6f0cb262b86da56b39299060ff65c240d0e83dd778aea831858b812bda9c63e99efab83ee190ce8b35723646b1fcc1ddc430214e811d9246375397ce91b089aa86e769b636240ef03a70f76"], 0x28}}, 0x0) 2m45.080370814s ago: executing program 1 (id=924): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c000004"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000003c090000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac12143b000000000000000000000000001000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ac1e000100000000000000000000000000000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000100010000000000ac14142a000000000000000000000000000000003300"], 0x23c}}, 0x14000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000005c0)={0x1, 0x6d, "84b6eae6815b701b622b5a856864a6b5e268cf87d2844b1bbc5b2c3601b1b4c3290c449c52295305752edb6c51d0445e98161ab70090f004728a91cae4c71763c8bcb3abb34a5e1266ecba640975e8e945188ff3096bf6aa5cd653bc958ab35f0fcaa888815c667fccc084b96f"}) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m44.296937197s ago: executing program 1 (id=933): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async) read$nci(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20008891}, 0x0) (async) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001bc0)=""/4075, 0xfeb}, {&(0x7f0000000700)=""/225, 0xe1}, {&(0x7f0000000800)=""/259, 0x103}, {&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000540)=""/152, 0x98}], 0x7}, 0x40022020) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) 2m43.936086602s ago: executing program 1 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000000000000000060900000000000008be60690b001e0040000000"], 0x2c}}, 0x0) 2m43.657024683s ago: executing program 1 (id=941): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="10040000000000003c3b880efc060010bae784ce47bd"], 0x10}, 0x1, 0x0, 0x0, 0xb1200e3a4bcc9f26}, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r1, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x80}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x18}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x74}}, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x20000800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000009ffffff00000000000000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m28.64282014s ago: executing program 33 (id=941): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="10040000000000003c3b880efc060010bae784ce47bd"], 0x10}, 0x1, 0x0, 0x0, 0xb1200e3a4bcc9f26}, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r1, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x80}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x18}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x74}}, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x20000800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000009ffffff00000000000000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.835314737s ago: executing program 4 (id=2477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc417", 0xb}], 0x1}}], 0x1, 0x2090) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a40)="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", 0xa6a}], 0x1}}], 0x1, 0x4000000) 2.969488584s ago: executing program 3 (id=2486): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) 2.924097351s ago: executing program 4 (id=2487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000009c0)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.752091239s ago: executing program 3 (id=2488): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0x292}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003580)='j', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003600)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003740)='Z', 0x1}], 0x1}}], 0x4, 0x84) 2.751828971s ago: executing program 4 (id=2489): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4094}, 0x8805) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x3, 0x3a, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x3, 0x6a}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x9, 0x0, 0x1ff, {[@timestamp={0x8, 0xa, 0x102, 0x20}]}}, {"f954"}}}}}}, 0x0) 2.66185825s ago: executing program 4 (id=2491): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd8984221841a230100fc0d0525fc60", 0x16}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aff2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf3a000000", 0x82}, {&(0x7f00000002c0)="561aaeb51525a807ef0451ea4b2c0f5c87fe9283f4e92eac0d496c78ab36e4fc5d89e3899cc26d047b32c42102b28419eda506eb7345a09d5255882303905cbe0b2f761e82e415368a46eb9f7bf6990473f35aae8f57978a01bfcd778e30e31a806cf46a995d7adceaa8403fcfa3bd1e85cc7c1e7b452b413a80613ce3e9560f1f648a3b511cd2cdb96ef4509383a0893679e95d462032d6cb2ff9a4eac06bb319e01d6dd5d6966d638b1b5ba7ae06dc1f3d318f5a1c1682a54e13249b5d9506c9", 0xc1}, {&(0x7f0000000400)="e14b8732fccaa9f8c92cd42682801255e56bc0904ea868ed9945c38819d2bdf7ac0855b4ef2886b6ef2741134d951573102fe4ecf4b5f0a2008c88ade384e040848198afb3d11ac6e368f2615913cec038182a9bae8ec71666948f5809ead6baf9e64c8fa78d0b04b416e2364960793aedbfbad21414", 0x76}], 0x6}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="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", 0x124}], 0x1}}], 0x2, 0x6010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.174354136s ago: executing program 5 (id=2502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) 2.079333973s ago: executing program 6 (id=2503): r0 = socket$inet6(0xa, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 2.079175979s ago: executing program 5 (id=2504): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1407, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 2.066907031s ago: executing program 6 (id=2505): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x4, @empty, 0x2}, 0x1c) close(0x3) 2.000624774s ago: executing program 5 (id=2506): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11b43, 0x2001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000c6000100080000009500"/32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c"], 0x270}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.935226545s ago: executing program 6 (id=2507): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000100800"], 0xfc}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0x12, 0x2000}, 0x20) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = socket(0x11, 0x3, 0xd) accept4$unix(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r10, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x31, '\x00', r8, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r13, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r14}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r14, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000840), &(0x7f0000000880)=0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x964, 0xbb, &(0x7f0000000280)=""/187, 0x40f00, 0x1, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xc, 0x7, 0x2b}, 0x10, 0xe79, r3, 0x6, &(0x7f0000000340)=[r3, r11], &(0x7f0000000380)=[{0x3, 0x5, 0x6, 0x9}, {0x3, 0x2, 0xf, 0x1}, {0x0, 0x4, 0xa, 0x2}, {0x4, 0x2, 0xb, 0x6}, {0x4, 0x2, 0x0, 0x5}, {0x5, 0x1, 0x10, 0x2}], 0x10, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x1, 0x46}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc4) socket$nl_xfrm(0x10, 0x3, 0x6) 1.845436623s ago: executing program 3 (id=2508): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000611814000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.775162556s ago: executing program 6 (id=2509): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f0000000000)=0x4) (async) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f0000000000)=0x4) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) socket(0x28, 0x5, 0x0) (async) r6 = socket(0x28, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0xfffffde1) (async) bind$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0xfffffde1) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) getsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, 0x0, &(0x7f0000000200)) (async) getsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, 0x0, &(0x7f0000000200)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r8, 0x4000, r6}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r4, &(0x7f0000000000)="fb07da0601003c66df835773073c829b2da4c449", 0x14, 0x6040015, 0x0, 0x0) setsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000180)=0x7, 0x4) bind$bt_hci(r3, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) 1.641987592s ago: executing program 4 (id=2511): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)="bb", 0x1}], 0x1}}], 0x1, 0x4) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa000000000a"], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) connect$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x48c05}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="2800b8b5e4ef968a7e26366772657461700000001400028005001600010000400800030005bd5d72ae94868ecaccf4c1f0ffbf5d18f2ff61df19eb046cc6f8092e98b1c98c5b473e04", @ANYRES32=r12, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.532084614s ago: executing program 3 (id=2512): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x84) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async, rerun: 64) r7 = socket(0x2, 0x80805, 0x0) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000600)={r6, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={r6, 0x9, 0x1, [0x2]}, 0xa) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x4, 0x0, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r9, 0x0, &(0x7f0000000600)=""/4096}, 0x20) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0d010000", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x2}, 0x4048010) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.253840536s ago: executing program 3 (id=2514): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040080) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 1.206305043s ago: executing program 2 (id=2515): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x8) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0x3}, 0x8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfd9fc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x3928aa90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x40) 1.066877704s ago: executing program 4 (id=2516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r2, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x900, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x420) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x108c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x2, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x105c, 0x2, [@TCA_BASIC_POLICE={0x1058, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x8, 0x401, 0x9, {0x5, 0x1, 0x2, 0x3, 0x5}, {0x5, 0x0, 0x6, 0xfffb, 0x8, 0x92b2}, 0xe, 0x7, 0xffff5757}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x5, 0xd, 0xffffffff, 0x4, 0x10000, 0x7ff, 0xffffff81, 0x80000001, 0x9, 0xd, 0x80000001, 0x6, 0x4, 0x2, 0x1000, 0x6, 0x9, 0x1, 0x7, 0x7, 0x2, 0x6, 0x5, 0x9e0, 0xffffffff, 0x1, 0x4, 0xffff8272, 0x4, 0x7fffffff, 0xffffffff, 0x10000, 0x1, 0x6, 0x9, 0xe, 0x1, 0xff, 0x401, 0xe, 0x9, 0x2, 0xb58, 0x5, 0x74f, 0x4, 0x2, 0x3ff, 0x800, 0x2, 0x2, 0x9, 0x7, 0x800, 0x3, 0x1, 0x3, 0x3ed, 0x1ff, 0x6, 0x0, 0x4, 0x5, 0x6, 0x8000, 0xfbae, 0x10, 0x1, 0x0, 0xffffffff, 0xe, 0x3, 0x0, 0xee, 0x3, 0x56a, 0x1000, 0x1, 0x40, 0xfff, 0xf854, 0x7, 0xfff, 0xf57, 0x9, 0xe5, 0x0, 0x8000, 0x9, 0x4, 0x0, 0x7, 0xffffffff, 0x0, 0x1, 0x0, 0x8, 0x7cf, 0x0, 0x2, 0x1, 0x11a, 0x8, 0x1, 0x800, 0xae, 0x7, 0x90, 0x4, 0xb, 0xfff, 0xce04, 0x8, 0x1, 0xc4, 0x101, 0x9, 0x100, 0x7fffffff, 0x0, 0xfffffff8, 0x7fff, 0x1, 0x7fff, 0x10, 0xf303, 0x1, 0xbbb, 0x62, 0x14, 0x9, 0xe, 0x4a, 0xfff, 0x1, 0x7f, 0x401, 0xac, 0x0, 0x0, 0x3ff, 0xadd1, 0x2, 0x8, 0x7, 0x0, 0x5, 0xab, 0x3, 0x4, 0x1, 0x1, 0xf, 0xd08, 0x8, 0x19, 0xfffffff7, 0x7, 0x7, 0x80, 0x4, 0x1, 0x5, 0x3f4c, 0x6c, 0x2, 0x3, 0x5, 0x10000, 0x8db, 0x7, 0x7, 0x4, 0x8001, 0x70, 0x1, 0x6, 0x38, 0x7, 0xff, 0x7fffffff, 0xa, 0x3, 0x9, 0x7fff, 0xffffffff, 0x2, 0x88, 0x4, 0x4, 0x3, 0x1, 0xb94, 0x3, 0x3, 0x1, 0x2f9a, 0x10a0f9f6, 0x1ff, 0xffffff29, 0x8, 0xc, 0x61a, 0x2, 0xffffffff, 0x8, 0x8, 0x0, 0x7, 0xb, 0x2, 0x5, 0xfffff510, 0x1, 0x0, 0x415, 0x8, 0x2, 0x9, 0x800, 0x3, 0x80, 0x8, 0x8, 0x1ff, 0xd1, 0x401, 0x2d, 0x5, 0x2, 0xc, 0x80000000, 0x8000, 0x400, 0x2, 0x0, 0x1000, 0x7, 0x1, 0x5, 0x8, 0x0, 0x4, 0x8, 0x10000000, 0x5, 0x5, 0x5, 0x1, 0x1, 0xe6, 0x0, 0x4, 0x5, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x7, 0x1, 0x10001, 0x3, 0x80000000, 0x2, 0x7, 0x6cdd, 0x6d, 0x5, 0x7aedf0d9, 0x1ff, 0x10001, 0x7, 0x6, 0x5, 0xd97, 0x3, 0x6, 0x8, 0x6, 0x400, 0x5e70, 0x8, 0x0, 0x0, 0x4, 0x800, 0x7, 0x0, 0xffffc8b6, 0x8, 0x0, 0x7, 0xfff, 0x10001, 0x9, 0x40, 0x8, 0x1, 0x8, 0x7fff, 0x5, 0xbba, 0x3, 0x80, 0xa, 0x1, 0x6, 0x18, 0x6, 0x8, 0x4, 0x7, 0x0, 0x2, 0x4, 0x2, 0x80, 0x0, 0x7, 0x2, 0x4, 0x4, 0x8, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9, 0x7, 0x2, 0x0, 0x6, 0x8fe8, 0x5, 0x6, 0x5, 0x3, 0x5, 0xfffffe00, 0xe, 0x2, 0x5, 0x8, 0x80b, 0x3, 0xed, 0x7, 0x5, 0x4, 0x2, 0xffffffff, 0x800, 0x8, 0x7, 0x2f9cffde, 0x40, 0x1, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0xd, 0x10001, 0x2251, 0x2000, 0x2, 0xd2, 0x5, 0x1, 0x5, 0x0, 0x5, 0x0, 0x0, 0x3, 0x7, 0x9, 0x9, 0x100, 0x1, 0x2, 0xfffffffc, 0xffff, 0x7, 0x5, 0x0, 0x8, 0x9, 0xfffffff2, 0x0, 0x6, 0x6, 0x3, 0xa47e, 0x1, 0x10, 0x5, 0x0, 0x7, 0x6, 0x5, 0xf, 0x8000, 0xfffffff9, 0x9, 0x2, 0xa, 0x42f63acf, 0x6, 0x5, 0x8, 0xfffff800, 0x1, 0x240, 0x80, 0x9, 0x4800000, 0xffffffff, 0xfff, 0x1891, 0x5, 0x1c0000, 0x1, 0x4, 0x3, 0x9, 0x7, 0x4, 0x6, 0x1, 0x10001, 0xa000, 0x2, 0x7f12, 0x4, 0x4, 0xfff, 0x3, 0x1000, 0x3, 0x5, 0x6, 0x7f, 0x1ff, 0x80000000, 0xc8b, 0x8, 0x3, 0x7, 0x0, 0x9, 0x8, 0x0, 0x4000000, 0x1, 0x21ac, 0xffffffff, 0x7, 0x7, 0x2, 0xcd, 0x3, 0x5, 0x9, 0x6a, 0x10000, 0x1, 0xff, 0x2, 0x6, 0x4, 0x8893, 0x4, 0x1, 0x2, 0x19160d53, 0x9, 0x9, 0x8, 0x8000, 0x7, 0x1, 0xf, 0x6, 0x7, 0x470, 0x100, 0x1, 0x400, 0x6, 0x7, 0x2, 0x7f, 0x5, 0xfffffffd, 0x6, 0x10001, 0x9, 0x7, 0xc7f, 0xfffeffff, 0x7fff, 0x9, 0x2, 0x0, 0x8476, 0x2, 0x9, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x6, 0x0, 0x48000, 0x0, 0xc1, 0x8, 0x1, 0xa3, 0x480, 0x8, 0x6, 0x800, 0x6, 0x5c9, 0x6, 0x4cf, 0x3ff, 0x1, 0x1, 0x1, 0x81, 0x5, 0xf5, 0xb3, 0x8000, 0x80, 0x1, 0x2, 0x0, 0x6, 0x80000000, 0x1, 0x9, 0x4c6, 0x6, 0x3, 0x8, 0x9, 0x3, 0x3, 0x81, 0x79, 0x3, 0x7, 0x6, 0x50000000, 0x3, 0x3, 0x5, 0x8, 0xb008, 0x0, 0x6, 0x4, 0xffffffff, 0x0, 0x4, 0x3, 0x3ff, 0x8, 0x2, 0xae97, 0x8, 0x9, 0x70d, 0xffff, 0xff7, 0x9, 0x8, 0x5, 0x81, 0x8b, 0x9, 0x1ff, 0xbd, 0x9, 0x9, 0x9f, 0x7, 0x2, 0xd, 0x4, 0x8000, 0x0, 0x8, 0x3a, 0x1000, 0x0, 0x2, 0x3ff, 0xf, 0xfffffffd, 0x0, 0xbe, 0x4, 0x4, 0x3, 0x2, 0x9d3, 0x8, 0x1, 0x0, 0x1, 0x5, 0x1000, 0xfff, 0x3, 0xfffffe01, 0x80000000, 0x6, 0x8, 0x800, 0x2, 0x1c000000, 0x1ff, 0x91, 0x2, 0x4, 0x9, 0xc7, 0xd0, 0xffffff8d, 0xe, 0x2e, 0x5, 0x40, 0x7, 0x2, 0x326b585d, 0x4, 0x2, 0x0, 0x81, 0x0, 0x8, 0x10000, 0x2d6c, 0x8, 0x4, 0x4d, 0x7f, 0x261, 0x5, 0x9, 0x83d, 0xfffffffe, 0x4, 0x29, 0xa0, 0xfffffff7, 0x3, 0x3, 0x3, 0x5, 0x8, 0x0, 0x7, 0xf167, 0xe, 0x101, 0x3, 0x6, 0x9, 0x3, 0x2bf0, 0x3, 0x800, 0x6, 0x80000001, 0xb, 0x9, 0x4, 0x1, 0x5, 0x9, 0x6, 0x7, 0x2, 0x7, 0x6, 0x3, 0x3ff, 0x7fff, 0xd05, 0x100, 0x8, 0x9, 0xff, 0xd, 0x6, 0x8, 0x5, 0x3, 0x83d3, 0x9, 0xa7c, 0x6, 0x80000000, 0x5, 0x1, 0x62, 0x2, 0x9, 0x401, 0xcc2, 0xfff, 0x2, 0x7, 0xffffb833, 0x5, 0x7, 0x3, 0x6, 0x8, 0xfcb, 0x1ff, 0x235, 0x3, 0x7be93335, 0x5, 0x3, 0x2, 0x6, 0x4, 0x1, 0x1, 0x0, 0xc, 0x9, 0x4, 0x0, 0x4, 0x401, 0x0, 0x2, 0xfff, 0x7, 0x2, 0x10000, 0x51df, 0x5, 0x3, 0x1, 0x20, 0xff, 0x0, 0x6, 0x5, 0x5, 0x6, 0x752, 0x7fffffff, 0x7, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6b, 0xd6, 0x39f7, 0xf, 0x0, 0x6, 0x1, 0xcc, 0x8ef, 0x3, 0x9, 0x2, 0x7f, 0x8, 0x4, 0x1, 0x5, 0x0, 0x6, 0xffffffff, 0x7, 0x800, 0x8, 0x1ff, 0x9700, 0x7, 0xfffffffb, 0xd5, 0x9, 0x7, 0x3, 0x2, 0x3, 0x9, 0x4, 0x800, 0x1ff, 0x844, 0x3c00000, 0x8, 0x8, 0x10, 0x6, 0x80000000, 0x9, 0x80, 0x8, 0x2d5e, 0x4, 0xb9b1, 0x7fff, 0x80000001, 0x7, 0x7, 0x6, 0x7, 0x7, 0x8, 0x9ddf, 0x1, 0xffffffff, 0x56f, 0x6, 0x2, 0x2, 0x79616830, 0x3, 0x1, 0x1, 0xf4, 0x0, 0x7, 0x10001, 0x2, 0x81, 0x8000, 0x5, 0x2, 0x401, 0x35d, 0x70daeaa6, 0x6, 0x5, 0x5, 0x800, 0xffffffff, 0x1, 0x0, 0x3ff, 0x9, 0x1, 0x7, 0x7, 0x7, 0x8, 0x9, 0x9, 0x5, 0x6, 0x1, 0x0, 0x6, 0x2, 0x503, 0x2473, 0x3, 0x3, 0xfffff971, 0x7, 0x8, 0x200, 0x2, 0x2, 0x0, 0xc, 0x6, 0x1, 0x4bb, 0x401, 0x1, 0x2, 0x5, 0x8, 0xf015, 0x2, 0xefa, 0x2, 0x7fff, 0x100, 0x2, 0x5, 0x3, 0x3, 0x6, 0x8, 0x10000, 0x4, 0x1, 0x7, 0x4565, 0xffffffc0, 0xa0, 0x4, 0x10000, 0x4, 0xf86b, 0x5, 0x264300cf, 0x9, 0x9, 0x4, 0x4, 0xeb8, 0x1, 0x2, 0x9d2, 0x2, 0xcc13, 0x7, 0x0, 0x79, 0xa09, 0x0, 0x2, 0x6, 0x40, 0x6, 0xe, 0x9e0, 0x0, 0x90, 0x57f0, 0xc, 0x5, 0x1000, 0xc, 0x1, 0x3, 0x7, 0xffffffff, 0x6, 0x4, 0x7, 0x1, 0x8, 0x8, 0x7, 0xfffffff9, 0x6, 0x8, 0x401, 0x5, 0x200, 0x0, 0x9, 0x1, 0x5, 0x400, 0x7fffffff, 0x358, 0x7fffffff, 0xfffffffc, 0xc7, 0x4, 0x1, 0x8, 0x200, 0x8, 0x7d16, 0x200, 0x8, 0x3, 0x8000, 0x0, 0x80, 0x3, 0xa731, 0x8, 0x0, 0x7ff, 0xd70b, 0x3, 0x0, 0x1000, 0x8, 0x5, 0x6, 0x6, 0x8, 0xb6, 0x0, 0x5, 0x0, 0x100000b1, 0x10000000, 0x8, 0x6, 0x4, 0x8, 0x1, 0x2, 0x6, 0x1ff, 0xc, 0x8, 0x3db179af, 0xe, 0x3, 0x8, 0x0, 0x10000, 0x0, 0x8, 0x4, 0x1, 0x7]}]}]}}]}, 0x108c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="012026d8a4ae90143ea601"], 0x1c}}, 0x4) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r1) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20004081) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e5ff0000140000000400000085000000540000000400000000000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r11 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r14, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="d9fd425815bb114cc35d0c8e", @ANYRES16=r2, @ANYBLOB="00012cbd7000ffdbdf25280000000c002d000201aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc, [{0x2, 0x1b74, 0x5, 0x6}, {0x2, 0x7, 0xaad, 0x4}, {0x8, 0xa8f1, 0x8, 0x4}, {0x1, 0x9, 0x3, 0x1}, {0x3, 0xfff, 0x6, 0xfffffffc}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r15 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r15, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000480)={r15, r10}) 1.010366149s ago: executing program 2 (id=2517): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="f9c8ec15adecaaaaaaaaaa08004510001c00660000050290780a010102ac1414aa11019079fe380f00da9bc79e5d181466e9fe944308d4067fc2e426fe919956d1aeaf0d11fd0dbfe60169c719bad78bbaa6ab3429994c787a05491156946ff88ca2147bdb178a69f84f0c77e921943beef3aeb91f5f9fdb03fca070b8ebe4d04db863879ba3193041eb517d7b0b0b76d0a0ed57699f4a1fc4f88812d1d4643b97975b8115b8779cdc41b2b2e1f536700f5ee431b1546a95fcbcb42ca00c0084ce7b33c92bc4f766524c276cc7fd441c6fa3ee15908dba045fab21db0ad6ba0fb08c8332ec4748f8191989f2ec6d726f39d17c0e1d7e7e54a3e5da7909bb347e94e69045dc76cb7eae2887ee0557dfee5905928bb6fcf6958f2b20f19a8aac9cfcffb4c5c6fcbcb49333d2a7521133d21a25f1e78d7d5852b6ee988efff516bbc69795518512e4ec38b1911f6334726668c8c04b93d948b3a6028a1d"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0xe9, 0x4}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 897.677471ms ago: executing program 5 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2a000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) close(r0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe09}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0xb8fa, 0x0, 0x6}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x621c}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x2}, {}, {0x0, 0xd}, {0x0, 0x0, 0x80000}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe09}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0xb8fa, 0x0, 0x6}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x621c}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x2}, {}, {0x0, 0xd}, {0x0, 0x0, 0x80000}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r14, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 700.071779ms ago: executing program 2 (id=2519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @alu={0x6, 0x0, 0x1, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 693.551405ms ago: executing program 6 (id=2520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x80000000, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fff214000780080011400000000005001500d3000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 533.100909ms ago: executing program 2 (id=2521): socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000001340)="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", 0xcc1}], 0x5, 0x0) (async) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000001340)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf4007a676dee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd980323b9b623def8aac6f6c09793ed9ca978860442b7466c3d4aa215593243d9c7ad39c8d680470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0", 0xcc1}], 0x5, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000480)) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="8000e8bc13000000", 0x8}], 0x1, &(0x7f0000000600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}, 0xc000) (async) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="8000e8bc13000000", 0x8}], 0x1, &(0x7f0000000600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}, 0xc000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a4", 0x16}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x44000) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x1, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x20000002, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x6, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x8, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0x870, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000440)={0xdc, 0x8, [0x7, 0x7fffffff, 0xfffffffffffffffb, 0x6], &(0x7f0000000380)=[0x0]}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 431.139801ms ago: executing program 5 (id=2522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r7, 0x25, 0x2}, 0x14) 430.086877ms ago: executing program 3 (id=2523): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x5, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r8, 0x0, 0x5000000}, 0x38) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r11, 0x3) sendmsg$inet6(r10, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x9, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf8a544}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) 341.952068ms ago: executing program 6 (id=2524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="2f0000001000000004"], 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}}], {0x14}}, 0xa4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 258.286071ms ago: executing program 2 (id=2525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400f0ff04000000000000000200001302eaffff01000000000000000000000200000000000000000000000000002e00"], &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) close(0x4) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6ff169010011fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101009078ee373935ef0f8da10b47000507b0025a9001"], 0x128) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a284a87286000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 209.784608ms ago: executing program 5 (id=2526): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002800000008000000fcffffff00000000"], 0x18}}], 0x1, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000280), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x33, 0x107, 0x0, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@remote}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r8, @ANYRES64=r8, @ANYBLOB="c11451f8365f5af420b0dfcfee5ac9e82252a5fd0b36aeb5a42fba2c44c089c1", @ANYRES32=0x0, @ANYRES16=r9], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003a00017000e0dbdf250300000000357dd3d4fec5c3f339001f000000000000000000f30537ab576fd3719b8ad7b69ce53b8c953c63f3fed116ac86325ddd651b0496832b1382a4b93c826f6ec525dcc2046d9b7b74e146fa647edb445bcdba8d27e1eb5ddda0b6bb44e547c022376813880a5176b2187c59deddbcb590e884e1d0bcc3c4731bcd0bec69451067b18310daf35028bc4de8d159e81ac9c1a7060de8f2ff61a34377d69a65f094b7c17ec550a20d6272b614b79b9c2c0a352b8fd68c40e77a9fd5f819eff2169769fb02ab705f2834e53ef979be997a09e68aea17e1a66e9d344448d3d270"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r12 = socket(0x1, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 0s ago: executing program 2 (id=2527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000000c0)=0xbd2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffffef, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x2}, 0x4040) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x2a, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe10ed0108f582106}, 0x4010) sendmsg$nl_route_sched(r4, 0x0, 0x40040) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x80}, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x7, 0x6}, @window={0x3, 0x0, 0x401}, @sack_perm], 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000400)="2226f89efa7ceef2cca667f3732b3632c77586d99db4f7eb750af0c782", 0x1d, 0x400a08b, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@gettaction={0xec, 0x32, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffd8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000084}, 0x4008080) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000004800100029bd7000ffdbdfd09377fb0300a3faefcdfdad050a003f00", @ANYRES32=r8, @ANYBLOB="00000000080002000700000014000100fc0100000000000000000000000000000800020001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x44090) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): u must specify a L4 protocol and not use inversions on it [ 175.341849][ T8807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.700'. [ 175.489827][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 175.529386][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 175.908388][ T8826] bond2: option packets_per_slave: invalid value (1048582) [ 175.916935][ T8826] bond2: option packets_per_slave: allowed values 0 - 65535 [ 175.936455][ T8826] bond2 (unregistering): Released all slaves [ 176.066025][ T8827] wlan1 speed is unknown, defaulting to 1000 [ 176.081892][ T5845] IPVS: starting estimator thread 0... [ 176.191610][ T8835] IPVS: using max 27 ests per chain, 64800 per kthread [ 176.196321][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 176.305908][ T8841] geneve2: entered promiscuous mode [ 176.335329][ T8836] wlan1 speed is unknown, defaulting to 1000 [ 177.150915][ T8863] netlink: 'syz.2.711': attribute type 12 has an invalid length. [ 177.242242][ T8859] wlan1 speed is unknown, defaulting to 1000 [ 177.940795][ T8897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.024116][ T8889] bond2: (slave veth3): Enslaving as an active interface with a down link [ 178.085859][ T8903] bond2: (slave veth5): Enslaving as an active interface with a down link [ 178.108343][ T8892] bond2: entered allmulticast mode [ 178.319506][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.328303][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 178.337297][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 178.346937][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 178.387024][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.616839][ T7150] bond0: (slave bond_slave_0): interface is now down [ 178.630386][ T8931] bond0: option arp_validate: invalid value (55553) [ 178.641528][ T7150] bond0: (slave bond_slave_1): interface is now down [ 178.655840][ T8931] netlink: 'syz.1.729': attribute type 10 has an invalid length. [ 178.676474][ T7150] bond0: now running without any active interface! [ 178.684570][ T8931] __nla_validate_parse: 80 callbacks suppressed [ 178.684592][ T8931] netlink: 228 bytes leftover after parsing attributes in process `syz.1.729'. [ 178.734990][ T8935] wlan1 speed is unknown, defaulting to 1000 [ 178.878118][ T8950] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.903198][ T8952] netlink: 'syz.2.730': attribute type 7 has an invalid length. [ 178.916852][ T8952] netlink: 'syz.2.730': attribute type 8 has an invalid length. [ 178.936764][ T8952] netlink: 'syz.2.730': attribute type 9 has an invalid length. [ 178.950150][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 178.961021][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 179.001583][ T8946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.730'. [ 179.173229][ T8934] netlink: 'syz.4.728': attribute type 11 has an invalid length. [ 179.198590][ T8934] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.728'. [ 179.515878][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.733'. [ 179.609370][ T8974] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.904745][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 179.926256][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 180.007347][ T8997] vlan0: entered promiscuous mode [ 180.020148][ T8997] geneve1: entered promiscuous mode [ 180.041255][ T8997] vlan0: entered allmulticast mode [ 180.049073][ T8998] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.742'. [ 180.055731][ T8997] geneve1: entered allmulticast mode [ 180.158043][ T9005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.744'. [ 180.216665][ T9005] netlink: 'syz.5.744': attribute type 23 has an invalid length. [ 180.547389][ T9022] netlink: 'syz.5.748': attribute type 29 has an invalid length. [ 181.158368][ T9063] geneve2: entered promiscuous mode [ 181.220505][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.286784][ T9052] vxcan3: entered promiscuous mode [ 181.305448][ T9052] vxcan3: entered allmulticast mode [ 181.320162][ T9052] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 181.437477][ T9058] wlan1 speed is unknown, defaulting to 1000 [ 181.438321][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.489749][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.059292][ T9076] veth7: entered promiscuous mode [ 184.065393][ T9056] wlan1 speed is unknown, defaulting to 1000 [ 184.065419][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.225556][ T9074] wlan1 speed is unknown, defaulting to 1000 [ 185.253957][ T9130] wlan1 speed is unknown, defaulting to 1000 [ 185.535128][ T9143] __nla_validate_parse: 3 callbacks suppressed [ 185.535152][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 185.678837][ T9142] team0: Device veth3 is up. Set it down before adding it as a team port [ 185.840836][ T9146] netlink: 'syz.1.766': attribute type 11 has an invalid length. [ 185.904195][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 185.914964][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 186.243797][ T9174] netlink: 40 bytes leftover after parsing attributes in process `syz.5.773'. [ 186.275377][ T9178] Bluetooth: MGMT ver 1.23 [ 186.295510][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.773'. [ 186.639210][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.777'. [ 186.699601][ T9197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.780'. [ 186.742756][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.780'. [ 187.497046][ T9226] batadv_slave_0: entered promiscuous mode [ 187.626656][ T9225] batadv_slave_0: left promiscuous mode [ 187.671094][ T9224] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.919299][ T9243] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 187.939097][ T9246] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 187.968919][ T9243] NCSI netlink: No device for ifindex 1023 [ 187.975222][ T9246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.111679][ T9253] syzkaller0: entered promiscuous mode [ 188.140051][ T9253] syzkaller0: entered allmulticast mode [ 188.614701][ T9276] vlan2: entered allmulticast mode [ 188.620368][ T9276] bridge0: port 3(vlan2) entered blocking state [ 188.682128][ T9281] netlink: 332 bytes leftover after parsing attributes in process `syz.4.803'. [ 188.787897][ T9276] bridge0: port 3(vlan2) entered disabled state [ 188.854269][ T9276] vlan2: entered promiscuous mode [ 188.882974][ T9281] netlink: 'syz.4.803': attribute type 9 has an invalid length. [ 188.977133][ T9281] netlink: 108 bytes leftover after parsing attributes in process `syz.4.803'. [ 189.538325][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.546434][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.632509][ T9307] bridge0: entered allmulticast mode [ 189.684767][ T9310] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.694915][ T9307] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 190.608164][ T9357] tipc: Started in network mode [ 190.679244][ T9357] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 190.735307][ T9357] tipc: Enabling of bearer rejected, failed to enable media [ 191.000695][ T9372] 8021q: VLANs not supported on ip_vti0 [ 191.512308][ T9391] __nla_validate_parse: 2 callbacks suppressed [ 191.512329][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 191.579597][ T9391] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 191.760265][ T9395] pimreg: tun_chr_ioctl cmd 35108 [ 191.955355][ T9391] wlan1 speed is unknown, defaulting to 1000 [ 192.104055][ T9403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 192.290634][ T9389] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 192.479454][ T9430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.839'. [ 192.509726][ T9430] netlink: 43 bytes leftover after parsing attributes in process `syz.4.839'. [ 192.536828][ T9430] netlink: 'syz.4.839': attribute type 5 has an invalid length. [ 192.584137][ T9430] netlink: 43 bytes leftover after parsing attributes in process `syz.4.839'. [ 192.704108][ T9423] 9iLL: renamed from lo [ 192.866033][ T9446] netlink: 'syz.4.842': attribute type 61 has an invalid length. [ 192.886698][ T9443] bond1 (unregistering): Released all slaves [ 192.905118][ T9452] netlink: 'syz.4.842': attribute type 61 has an invalid length. [ 192.969095][ T9436] syzkaller0: entered promiscuous mode [ 192.986275][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 192.996524][ T9436] syzkaller0: entered allmulticast mode [ 193.622394][ T9482] sock: sock_timestamping_bind_phc: sock not bind to device [ 193.655077][ T9483] sock: sock_timestamping_bind_phc: sock not bind to device [ 194.007471][ T9496] netlink: 'syz.4.854': attribute type 7 has an invalid length. [ 194.484531][ T9517] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 194.578616][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.585827][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.785930][ T9538] wg1: entered promiscuous mode [ 194.798052][ T9534] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 194.808395][ T9538] wg1: entered allmulticast mode [ 194.828017][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.864'. [ 194.939734][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 194.954524][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 194.980134][ T9546] bond1: (slave geneve2): making interface the new active one [ 195.058169][ T9546] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 195.088144][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.126449][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.167142][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.198539][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.338961][ T9565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.387247][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 195.400590][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 195.701944][ T9575] wlan1 speed is unknown, defaulting to 1000 [ 196.040917][ T9599] netlink: 'syz.3.879': attribute type 83 has an invalid length. [ 196.050990][ T9598] xt_NFQUEUE: number of total queues is 0 [ 196.093127][ T9598] xt_NFQUEUE: number of total queues is 0 [ 196.670624][ T9624] __nla_validate_parse: 1 callbacks suppressed [ 196.670644][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'. [ 196.747073][ T9628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.810262][ T9632] tipc: Started in network mode [ 196.830721][ T9632] tipc: Node identity ac14140f, cluster identity 4711 [ 196.846728][ T9632] tipc: New replicast peer: 255.255.255.255 [ 196.858635][ T9632] tipc: Enabled bearer , priority 10 [ 196.885455][ T9630] bridge1: entered promiscuous mode [ 196.891258][ T9630] bridge1: entered allmulticast mode [ 196.899726][ T9633] tipc: Enabling of bearer rejected, already enabled [ 196.918753][ T9632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.926373][ T9632] IPv6: NLM_F_CREATE should be set when creating new route [ 196.934600][ T9632] IPv6: NLM_F_CREATE should be set when creating new route [ 197.307051][ T9655] unsupported nlmsg_type 40 [ 197.723176][ T9671] netlink: 'syz.3.899': attribute type 2 has an invalid length. [ 197.731056][ T9671] netlink: 164 bytes leftover after parsing attributes in process `syz.3.899'. [ 197.764633][ T9671] netlink: 56 bytes leftover after parsing attributes in process `syz.3.899'. [ 197.890655][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.903960][ T9682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.918690][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.942222][ T9678] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.955789][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.904'. [ 197.973849][ T5987] tipc: Node number set to 2886997007 [ 197.975581][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.904'. [ 198.254866][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 198.268099][ T9696] bond1: invalid ARP target 0.0.0.0 specified for addition [ 198.276697][ T9696] bond1: option arp_ip_target: invalid value (0) [ 198.299719][ T9696] bond1 (unregistering): Released all slaves [ 198.314837][ T9702] openvswitch: netlink: Flow key attr not present in new flow. [ 198.334353][ T9712] x_tables: duplicate underflow at hook 3 [ 198.569369][ T9719] netlink: 'syz.3.912': attribute type 11 has an invalid length. [ 198.864243][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.914'. [ 198.908416][ T9730] syzkaller0: entered promiscuous mode [ 198.924315][ T9730] syzkaller0: entered allmulticast mode [ 199.110465][ T9738] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.257582][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 200.857333][ T9746] ip6gre4: entered promiscuous mode [ 200.862980][ T9746] ip6gre4: entered allmulticast mode [ 200.898411][ T9751] tipc: Started in network mode [ 200.911656][ T9751] tipc: Node identity 9a9742a7294d, cluster identity 4711 [ 200.920921][ T9751] tipc: Enabled bearer , priority 0 [ 200.928589][ T9756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.920'. [ 200.971713][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 201.096968][ T9727] tipc: Disabling bearer [ 201.120550][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'. [ 201.180972][ T9769] wlan1 speed is unknown, defaulting to 1000 [ 201.572343][ T9788] netlink: 'syz.5.929': attribute type 11 has an invalid length. [ 201.810139][ T9787] geneve3: entered promiscuous mode [ 201.872309][ T9798] __nla_validate_parse: 1 callbacks suppressed [ 201.872329][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 201.945167][ T9798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.932'. [ 202.180188][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.935'. [ 202.305789][ T9818] gretap0: entered promiscuous mode [ 202.315182][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'. [ 202.316021][ T9818] vlan3: entered promiscuous mode [ 202.439967][ T9818] syzkaller0: entered promiscuous mode [ 202.463405][ T9818] syzkaller0: entered allmulticast mode [ 202.608675][ T30] audit: type=1800 audit(1772401204.503:2): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.942" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1065 res=0 errno=0 [ 202.913156][ T9848] netlink: 'syz.5.950': attribute type 11 has an invalid length. [ 203.024434][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 203.101035][ T9860] netlink: 44 bytes leftover after parsing attributes in process `syz.5.952'. [ 203.128105][ T9860] netlink: 44 bytes leftover after parsing attributes in process `syz.5.952'. [ 203.204829][ T9865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.955'. [ 203.612058][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'. [ 203.750679][ T9893] bond1: option ad_user_port_key: invalid value (65535) [ 203.761572][ T9893] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 203.780438][ T9893] bond1 (unregistering): Released all slaves [ 204.392912][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.430855][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 204.483138][ T9920] syzkaller0: entered promiscuous mode [ 204.489343][ T9920] syzkaller0: entered allmulticast mode [ 205.236531][ T9962] pim6reg1: entered promiscuous mode [ 205.242226][ T9962] pim6reg1: entered allmulticast mode [ 205.445826][ T9966] bond4: option primary_reselect: invalid value (4) [ 205.465917][ T9966] bond4 (unregistering): Released all slaves [ 205.818593][ T9974] bond4: entered promiscuous mode [ 205.845558][ T9974] bond4: entered allmulticast mode [ 205.866217][ T9974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.961056][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.021593][ T7152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.039739][ T7152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.059807][ T9979] netlink: 'syz.5.989': attribute type 3 has an invalid length. [ 206.272234][ T9986] wlan1 speed is unknown, defaulting to 1000 [ 206.293888][ T9990] syz_tun: entered allmulticast mode [ 206.300318][ T9989] No such timeout policy "syz1" [ 206.325282][ T9990] pimreg: left allmulticast mode [ 206.411009][ T9988] syz_tun: left allmulticast mode [ 206.666423][T10008] bridge0: port 1(syz_tun) entered blocking state [ 206.691859][T10008] bridge0: port 1(syz_tun) entered disabled state [ 206.702850][T10008] syz_tun: entered allmulticast mode [ 206.720584][T10008] syz_tun: entered promiscuous mode [ 206.737700][T10008] bridge0: port 1(syz_tun) entered blocking state [ 206.744589][T10008] bridge0: port 1(syz_tun) entered forwarding state [ 206.927828][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 206.935334][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 206.942618][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 206.947966][T10017] FAULT_INJECTION: forcing a failure. [ 206.947966][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.001654][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.3.1002 Not tainted syzkaller #0 PREEMPT(full) [ 207.001683][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.001694][T10017] Call Trace: [ 207.001701][T10017] [ 207.001710][T10017] dump_stack_lvl+0xe8/0x150 [ 207.001744][T10017] should_fail_ex+0x412/0x560 [ 207.001783][T10017] _copy_from_user+0x2d/0xb0 [ 207.001811][T10017] ___sys_sendmsg+0x1c6/0x360 [ 207.001846][T10017] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.001912][T10017] ? __fget_files+0x2a/0x420 [ 207.001938][T10017] ? __fget_files+0x3a0/0x420 [ 207.001974][T10017] __x64_sys_sendmsg+0x1bd/0x2a0 [ 207.002004][T10017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.002039][T10017] ? __pfx_ksys_write+0x10/0x10 [ 207.002067][T10017] do_syscall_64+0x14d/0xf80 [ 207.002092][T10017] ? trace_irq_disable+0x3b/0x150 [ 207.002118][T10017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.002137][T10017] ? clear_bhb_loop+0x40/0x90 [ 207.002161][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.002179][T10017] RIP: 0033:0x7fdb7479c799 [ 207.002199][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.002214][T10017] RSP: 002b:00007fdb756ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.002236][T10017] RAX: ffffffffffffffda RBX: 00007fdb74a15fa0 RCX: 00007fdb7479c799 [ 207.002249][T10017] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 207.002260][T10017] RBP: 00007fdb756ab090 R08: 0000000000000000 R09: 0000000000000000 [ 207.002272][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.002283][T10017] R13: 00007fdb74a16038 R14: 00007fdb74a15fa0 R15: 00007ffdd4d106c8 [ 207.002312][T10017] [ 207.264245][T10019] batman_adv: batadv0: Adding interface: ipvlan2 [ 207.323823][T10019] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.359901][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.372473][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.383990][T10019] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 207.628065][T10046] sch_fq: defrate 4294967293 ignored. [ 207.643765][T10047] sch_fq: defrate 4294967293 ignored. [ 207.658997][T10044] : renamed from vlan1 (while UP) [ 207.795307][T10047] wlan1 speed is unknown, defaulting to 1000 [ 207.857733][T10055] pimreg: entered allmulticast mode [ 208.021901][T10063] netlink: 'syz.4.1012': attribute type 4 has an invalid length. [ 208.463066][T10081] wlan1 speed is unknown, defaulting to 1000 [ 208.574786][T10084] IPVS: set_ctl: invalid protocol: 189 127.0.0.1:20000 [ 208.582971][T10084] openvswitch: netlink: Multiple metadata blocks provided [ 208.667330][T10092] __nla_validate_parse: 6 callbacks suppressed [ 208.667350][T10092] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1019'. [ 208.717549][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 208.973876][T10098] netlink: 'syz.5.1022': attribute type 27 has an invalid length. [ 208.982187][T10098] netlink: 'syz.5.1022': attribute type 1 has an invalid length. [ 209.147467][T10106] ip6t_srh: unknown srh invflags BA61 [ 209.247934][T10109] FAULT_INJECTION: forcing a failure. [ 209.247934][T10109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.285389][T10109] CPU: 0 UID: 0 PID: 10109 Comm: syz.3.1026 Not tainted syzkaller #0 PREEMPT(full) [ 209.285419][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.285430][T10109] Call Trace: [ 209.285438][T10109] [ 209.285456][T10109] dump_stack_lvl+0xe8/0x150 [ 209.285489][T10109] should_fail_ex+0x412/0x560 [ 209.285518][T10109] _copy_from_iter+0x1d3/0x1670 [ 209.285547][T10109] ? rcu_is_watching+0x15/0xb0 [ 209.285581][T10109] ? __pfx__copy_from_iter+0x10/0x10 [ 209.285614][T10109] ? __alloc_skb+0x4e5/0x7d0 [ 209.285639][T10109] ? skb_put+0x11b/0x210 [ 209.285669][T10109] pfkey_sendmsg+0x265/0x1120 [ 209.285703][T10109] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 209.285727][T10109] ? aa_sk_perm+0x6d5/0x900 [ 209.285756][T10109] ? __pfx_aa_sk_perm+0x10/0x10 [ 209.285774][T10109] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 209.285803][T10109] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.285828][T10109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.285856][T10109] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 209.285874][T10109] ____sys_sendmsg+0xa68/0xad0 [ 209.285912][T10109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.285950][T10109] ? import_iovec+0x73/0xa0 [ 209.285981][T10109] ___sys_sendmsg+0x2a5/0x360 [ 209.286015][T10109] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.286077][T10109] ? __fget_files+0x2a/0x420 [ 209.286103][T10109] ? __fget_files+0x3a0/0x420 [ 209.286137][T10109] __x64_sys_sendmsg+0x1bd/0x2a0 [ 209.286166][T10109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.286204][T10109] ? __pfx_ksys_write+0x10/0x10 [ 209.286233][T10109] do_syscall_64+0x14d/0xf80 [ 209.286259][T10109] ? trace_irq_disable+0x3b/0x150 [ 209.286286][T10109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.286306][T10109] ? clear_bhb_loop+0x40/0x90 [ 209.286331][T10109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.286348][T10109] RIP: 0033:0x7fdb7479c799 [ 209.286367][T10109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.286382][T10109] RSP: 002b:00007fdb756ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.286405][T10109] RAX: ffffffffffffffda RBX: 00007fdb74a15fa0 RCX: 00007fdb7479c799 [ 209.286419][T10109] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 209.286430][T10109] RBP: 00007fdb756ab090 R08: 0000000000000000 R09: 0000000000000000 [ 209.286442][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.286462][T10109] R13: 00007fdb74a16038 R14: 00007fdb74a15fa0 R15: 00007ffdd4d106c8 [ 209.286492][T10109] [ 209.684026][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 209.843342][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 209.853176][T10121] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 209.859606][T10125] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 210.677408][T10163] syzkaller0: entered promiscuous mode [ 210.694591][T10163] syzkaller0: entered allmulticast mode [ 211.080047][T10180] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1047'. [ 212.736047][T10177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1044'. [ 212.818609][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 212.879853][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 213.171930][T10196] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1052'. [ 213.196787][T10196] netlink: 'syz.2.1052': attribute type 83 has an invalid length. [ 213.206864][T10199] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 213.255210][T10196] ip6erspan0: entered allmulticast mode [ 213.418006][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1055'. [ 213.514921][T10206] syzkaller0: entered promiscuous mode [ 213.527470][T10206] syzkaller0: entered allmulticast mode [ 213.665590][T10210] openvswitch: netlink: Duplicate or invalid key (type 0). [ 213.674754][T10210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.741993][T10212] netlink: 'syz.2.1059': attribute type 7 has an invalid length. [ 213.749787][T10212] netlink: 'syz.2.1059': attribute type 8 has an invalid length. [ 213.970935][T10222] __nla_validate_parse: 1 callbacks suppressed [ 213.970958][T10222] netlink: 202768 bytes leftover after parsing attributes in process `syz.5.1063'. [ 214.879971][T10274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1079'. [ 215.100625][T10283] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1082'. [ 215.157099][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 215.397619][T10299] tipc: Enabled bearer , priority 0 [ 215.413672][T10304] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1088'. [ 215.425911][T10304] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1088'. [ 215.454209][T10299] tipc: Disabling bearer [ 215.462107][T10304] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1088'. [ 215.490963][T10304] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1088'. [ 215.521101][T10304] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1088'. [ 215.552549][T10304] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1088'. [ 215.684654][T10316] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 215.775165][T10322] FAULT_INJECTION: forcing a failure. [ 215.775165][T10322] name failslab, interval 1, probability 0, space 0, times 0 [ 215.789689][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.2.1096 Not tainted syzkaller #0 PREEMPT(full) [ 215.789717][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.789729][T10322] Call Trace: [ 215.789738][T10322] [ 215.789747][T10322] dump_stack_lvl+0xe8/0x150 [ 215.789781][T10322] should_fail_ex+0x412/0x560 [ 215.789810][T10322] should_failslab+0xa8/0x100 [ 215.789833][T10322] ? skb_clone+0x212/0x3a0 [ 215.789862][T10322] kmem_cache_alloc_noprof+0x87/0x650 [ 215.789901][T10322] skb_clone+0x212/0x3a0 [ 215.789926][T10322] ? pfkey_broadcast_one+0x7d/0x360 [ 215.789961][T10322] pfkey_broadcast_one+0x9b/0x360 [ 215.789989][T10322] ? pfkey_broadcast+0x39c/0x3e0 [ 215.790021][T10322] pfkey_broadcast+0x3a9/0x3e0 [ 215.790050][T10322] ? pfkey_broadcast+0x48/0x3e0 [ 215.790082][T10322] pfkey_sendmsg+0xe75/0x1120 [ 215.790130][T10322] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 215.790175][T10322] ? aa_sock_msg_perm+0xf1/0x1b0 [ 215.790219][T10322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.790243][T10322] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 215.790261][T10322] ____sys_sendmsg+0xa68/0xad0 [ 215.790299][T10322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.790337][T10322] ? import_iovec+0x73/0xa0 [ 215.790368][T10322] ___sys_sendmsg+0x2a5/0x360 [ 215.790403][T10322] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.790477][T10322] ? __fget_files+0x2a/0x420 [ 215.790504][T10322] ? __fget_files+0x3a0/0x420 [ 215.790542][T10322] __x64_sys_sendmsg+0x1bd/0x2a0 [ 215.790573][T10322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.790613][T10322] ? __pfx_ksys_write+0x10/0x10 [ 215.790646][T10322] do_syscall_64+0x14d/0xf80 [ 215.790672][T10322] ? trace_irq_disable+0x3b/0x150 [ 215.790698][T10322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.790719][T10322] ? clear_bhb_loop+0x40/0x90 [ 215.790743][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.790763][T10322] RIP: 0033:0x7f7aecf9c799 [ 215.790783][T10322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.790799][T10322] RSP: 002b:00007f7aedf07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.790821][T10322] RAX: ffffffffffffffda RBX: 00007f7aed215fa0 RCX: 00007f7aecf9c799 [ 215.790835][T10322] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 215.790848][T10322] RBP: 00007f7aedf07090 R08: 0000000000000000 R09: 0000000000000000 [ 215.790860][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.790872][T10322] R13: 00007f7aed216038 R14: 00007f7aed215fa0 R15: 00007ffc64a6e408 [ 215.790905][T10322] [ 217.576705][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.585734][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.595230][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.604915][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.617666][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.655233][T10362] wlan1 speed is unknown, defaulting to 1000 [ 217.770014][T10362] chnl_net:caif_netlink_parms(): no params data found [ 217.846386][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.854016][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.861290][T10362] bridge_slave_0: entered allmulticast mode [ 217.869695][T10362] bridge_slave_0: entered promiscuous mode [ 217.878541][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.885952][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.893609][T10362] bridge_slave_1: entered allmulticast mode [ 217.901016][T10362] bridge_slave_1: entered promiscuous mode [ 217.929540][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.942078][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.973286][T10362] team0: Port device team_slave_0 added [ 217.981338][T10362] team0: Port device team_slave_1 added [ 218.006394][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.013931][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.040230][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.053179][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.060153][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.087412][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.129398][T10362] hsr_slave_0: entered promiscuous mode [ 218.135901][T10362] hsr_slave_1: entered promiscuous mode [ 218.142496][T10362] debugfs: 'hsr0' already exists in 'hsr' [ 218.148408][T10362] Cannot create hsr debugfs directory [ 219.115972][T10335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.153029][T10362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.206359][T10362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.242934][T10362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.285487][T10362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.354260][T10383] netlink: 'syz.4.1107': attribute type 9 has an invalid length. [ 219.430503][T10387] FAULT_INJECTION: forcing a failure. [ 219.430503][T10387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.445492][T10387] CPU: 1 UID: 0 PID: 10387 Comm: syz.5.1108 Not tainted syzkaller #0 PREEMPT(full) [ 219.445519][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.445531][T10387] Call Trace: [ 219.445539][T10387] [ 219.445547][T10387] dump_stack_lvl+0xe8/0x150 [ 219.445581][T10387] should_fail_ex+0x412/0x560 [ 219.445631][T10387] _copy_to_user+0x31/0xb0 [ 219.445662][T10387] simple_read_from_buffer+0xe1/0x170 [ 219.445694][T10387] proc_fail_nth_read+0x1bb/0x230 [ 219.445724][T10387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.445755][T10387] ? rw_verify_area+0x2a6/0x4d0 [ 219.445773][T10387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.445800][T10387] vfs_read+0x20c/0xa70 [ 219.445818][T10387] ? fdget_pos+0x246/0x320 [ 219.445850][T10387] ? __pfx___mutex_lock+0x10/0x10 [ 219.445880][T10387] ? __pfx_vfs_read+0x10/0x10 [ 219.445901][T10387] ? __fget_files+0x2a/0x420 [ 219.445933][T10387] ? __fget_files+0x3a0/0x420 [ 219.445958][T10387] ? __fget_files+0x2a/0x420 [ 219.445994][T10387] ksys_read+0x150/0x270 [ 219.446014][T10387] ? __pfx_ksys_read+0x10/0x10 [ 219.446045][T10387] do_syscall_64+0x14d/0xf80 [ 219.446070][T10387] ? trace_irq_disable+0x3b/0x150 [ 219.446096][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.446117][T10387] ? clear_bhb_loop+0x40/0x90 [ 219.446141][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.446160][T10387] RIP: 0033:0x7efd7895cfce [ 219.446179][T10387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.446195][T10387] RSP: 002b:00007efd7989efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.446217][T10387] RAX: ffffffffffffffda RBX: 00007efd7989f6c0 RCX: 00007efd7895cfce [ 219.446231][T10387] RDX: 000000000000000f RSI: 00007efd7989f0a0 RDI: 0000000000000004 [ 219.446243][T10387] RBP: 00007efd7989f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.446254][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.446265][T10387] R13: 00007efd78c16038 R14: 00007efd78c15fa0 R15: 00007ffdce3e16a8 [ 219.446297][T10387] [ 219.692352][ T5844] Bluetooth: hci6: command tx timeout [ 219.816495][T10362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.842634][T10362] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.868303][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.875643][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.936615][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.944138][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.054064][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.086950][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.129478][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.168550][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.220415][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.250496][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.299226][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.319924][T10411] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 220.328874][T10402] netlink: 'syz.2.1111': attribute type 58 has an invalid length. [ 220.403165][T10414] bond5: entered promiscuous mode [ 220.408667][T10414] bond5: entered allmulticast mode [ 220.422336][T10414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.519811][T10362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.554362][T10411] bridge5: entered promiscuous mode [ 220.559893][T10411] bridge5: entered allmulticast mode [ 220.580110][T10411] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 220.621599][ T7152] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.676623][T10414] bridge6: entered promiscuous mode [ 220.691130][T10414] bridge6: entered allmulticast mode [ 220.708264][T10414] bond5: (slave bridge6): Enslaving as a backup interface with a down link [ 220.756860][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.861160][T10435] __nla_validate_parse: 63 callbacks suppressed [ 220.861181][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 220.906826][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1118'. [ 221.195490][T10449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.325133][T10362] veth0_vlan: entered promiscuous mode [ 221.420700][T10362] veth1_vlan: entered promiscuous mode [ 221.512279][T10362] veth0_macvtap: entered promiscuous mode [ 221.551597][T10362] veth1_macvtap: entered promiscuous mode [ 221.605163][T10362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.639707][T10362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.789325][ T5844] Bluetooth: hci6: command tx timeout [ 221.890816][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.911198][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.966405][T10466] wlan1 speed is unknown, defaulting to 1000 [ 222.056790][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.058553][T10473] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 222.105218][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 222.143882][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.191140][T10473] bridge0: port 1(syz_tun) entered disabled state [ 222.256268][T10473] syz_tun (unregistering): left allmulticast mode [ 222.263564][T10473] syz_tun (unregistering): left promiscuous mode [ 222.280430][T10473] bridge0: port 1(syz_tun) entered disabled state [ 222.530588][T10474] wlan1 speed is unknown, defaulting to 1000 [ 222.544164][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 222.596298][T10484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.772821][T10484] bond2: (slave veth9): Enslaving as an active interface with a down link [ 222.801585][ T531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.851730][ T531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.262363][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.283777][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.479677][T10516] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1133'. [ 223.854677][ T5844] Bluetooth: hci6: command tx timeout [ 224.007873][T10529] wlan1 speed is unknown, defaulting to 1000 [ 224.183284][T10534] pimreg: tun_chr_ioctl cmd 1074025677 [ 224.189091][T10534] pimreg: linktype set to 823 [ 224.454948][T10542] bond1: entered promiscuous mode [ 224.531903][T10542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.651343][T10563] bond1: (slave bridge3): making interface the new active one [ 224.669060][T10563] bridge3: entered promiscuous mode [ 224.684552][T10563] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 224.867984][T10570] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.1141'. [ 224.881778][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'. [ 224.901516][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'. [ 224.915259][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 225.057975][T10573] validate_nla: 59 callbacks suppressed [ 225.057998][T10573] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 225.935804][ T5844] Bluetooth: hci6: command tx timeout [ 226.876313][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1147'. [ 229.948783][T10620] kthread_run failed with err -4 [ 229.959951][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1152'. [ 229.989359][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1152'. [ 230.128339][T10630] syz.4.1156 (10630) used obsolete PPPIOCDETACH ioctl [ 230.849352][T10665] batadv_slave_1: entered promiscuous mode [ 230.895740][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1165'. [ 230.907986][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 230.933946][T10669] netlink: 'syz.6.1165': attribute type 18 has an invalid length. [ 231.282553][T10661] batadv_slave_1: left promiscuous mode [ 231.535156][T10696] syzkaller0: entered promiscuous mode [ 231.547567][T10696] syzkaller0: entered allmulticast mode [ 232.001873][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 232.030353][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1180'. [ 232.051773][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 232.250552][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1184'. [ 232.386826][T10739] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 232.525292][T10741] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1184'. [ 232.633762][ T5987] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.801710][ T5898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.024783][ T531] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.238198][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1192'. [ 233.343936][T10770] bridge_slave_1: left allmulticast mode [ 233.372815][T10770] bridge_slave_1: left promiscuous mode [ 233.378915][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.403922][T10770] bridge_slave_0: left allmulticast mode [ 233.415066][T10770] bridge_slave_0: left promiscuous mode [ 233.447410][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.547113][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1195'. [ 233.597329][T10772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.677599][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 233.808454][T10793] bond6: entered promiscuous mode [ 233.815027][T10793] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.101374][ T188] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.122999][ T188] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.322225][T10820] netlink: 'syz.4.1203': attribute type 12 has an invalid length. [ 234.350824][T10820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1203'. [ 234.559733][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 234.572476][ T5891] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.729506][T10829] wlan1 speed is unknown, defaulting to 1000 [ 235.094613][T10852] IPVS: persistence engine module ip_vs_pe_ not found [ 235.607775][T10866] tipc: Enabled bearer , priority 0 [ 235.626263][T10866] syzkaller0: entered promiscuous mode [ 235.651716][T10866] syzkaller0: entered allmulticast mode [ 235.865708][T10864] sctp: [Deprecated]: syz.5.1214 (pid 10864) Use of int in max_burst socket option. [ 235.865708][T10864] Use struct sctp_assoc_value instead [ 235.928220][T10869] tipc: Resetting bearer [ 235.929691][T10876] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 235.960086][T10869] tipc: Disabling bearer [ 236.120755][T10886] netlink: 'syz.2.1227': attribute type 33 has an invalid length. [ 236.154681][T10886] `: renamed from veth0_macvtap (while UP) [ 236.177391][T10886] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 236.350558][T10896] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.387654][T10896] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.626973][T10896] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.649631][T10917] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 236.675002][T10896] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.848775][T10910] netem: change failed [ 236.873217][T10901] nbd0: detected capacity change from 0 to 127 [ 236.990832][T10896] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.012230][T10896] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.168055][ T5844] block nbd0: Receive control failed (result -104) [ 237.390165][T10896] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.431538][T10896] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.759496][T10957] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.791017][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.802865][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.984345][ T7152] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.996742][ T7152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.015843][ T7152] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.027090][ T7152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.081009][ T7152] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.130392][ T7152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.156846][T10976] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 238.411736][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.456567][T10997] bridge_slave_1: entered promiscuous mode [ 238.592666][T11005] __nla_validate_parse: 10 callbacks suppressed [ 238.592687][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 238.616379][T11009] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 238.626848][T11009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.710699][T11013] SET target dimension over the limit! [ 238.739094][T11015] netlink: 'syz.2.1257': attribute type 21 has an invalid length. [ 238.984873][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 239.000713][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 239.061110][T11032] netlink: 'syz.3.1265': attribute type 11 has an invalid length. [ 239.242173][T11036] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1266'. [ 239.281120][T11040] sctp: [Deprecated]: syz.5.1268 (pid 11040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.281120][T11040] Use struct sctp_sack_info instead [ 239.314339][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1267'. [ 239.356206][T11038] xfrm1: entered allmulticast mode [ 239.490480][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1270'. [ 239.584872][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1272'. [ 239.594058][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1272'. [ 239.621196][T11052] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1272'. [ 240.345909][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 240.582563][T11070] vlan2: entered promiscuous mode [ 240.587745][T11070] geneve1: entered promiscuous mode [ 240.622621][T11070] vlan2: entered allmulticast mode [ 240.640508][T11070] geneve1: entered allmulticast mode [ 240.763383][T11086] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 241.092283][T11104] netlink: 'syz.2.1285': attribute type 11 has an invalid length. [ 241.155960][T11108] netlink: 'syz.2.1285': attribute type 6 has an invalid length. [ 241.381854][ T5844] Bluetooth: hci6: command tx timeout [ 242.025244][T11159] netlink: 'syz.2.1297': attribute type 20 has an invalid length. [ 242.033862][T11159] netlink: 'syz.2.1297': attribute type 21 has an invalid length. [ 242.407903][T11174] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 243.121881][T11202] bond7: entered promiscuous mode [ 243.170387][T11215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.393272][T11230] openvswitch: netlink: EtherType 50a is less than min 600 [ 243.532402][T11234] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 243.624915][T11234] macsec1: entered promiscuous mode [ 243.763301][T11244] __nla_validate_parse: 17 callbacks suppressed [ 243.763324][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 244.041097][T11256] syzkaller0: entered promiscuous mode [ 244.053705][T11256] syzkaller0: entered allmulticast mode [ 244.118112][T11261] netlink: 'syz.6.1325': attribute type 1 has an invalid length. [ 244.131556][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 244.293798][T11261] bond1: entered promiscuous mode [ 244.306844][T11261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.476003][T11265] bond1: (slave veth3): making interface the new active one [ 244.501841][T11265] veth3: entered promiscuous mode [ 244.514951][T11287] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1332'. [ 244.544970][T11265] bond1: (slave veth3): Enslaving as an active interface with an up link [ 244.666054][T11280] syzkaller0: entered promiscuous mode [ 244.673402][T11280] syzkaller0: entered allmulticast mode [ 247.051623][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.473353][T11371] xt_hashlimit: size too large, truncated to 1048576 [ 247.563426][T11375] netlink: 'syz.6.1346': attribute type 2 has an invalid length. [ 247.807941][T11367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1347'. [ 247.922663][T11375] 9: entered promiscuous mode [ 248.363429][T11404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.404935][T11407] x_tables: duplicate underflow at hook 2 [ 248.424981][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 248.451895][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1355'. [ 248.548841][T11412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1357'. [ 248.664944][T11417] netlink: 'syz.6.1358': attribute type 2 has an invalid length. [ 249.414800][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 249.443343][T11447] netlink: zone id is out of range [ 249.462592][T11443] netlink: zone id is out of range [ 249.491932][T11443] netlink: zone id is out of range [ 249.502933][T11447] netlink: zone id is out of range [ 249.508196][T11447] netlink: zone id is out of range [ 249.534093][T11443] netlink: zone id is out of range [ 249.582045][T11447] netlink: zone id is out of range [ 249.587412][T11447] netlink: zone id is out of range [ 249.604782][T11443] netlink: zone id is out of range [ 249.637311][T11447] netlink: zone id is out of range [ 249.790845][T11473] netlink: 'syz.4.1373': attribute type 1 has an invalid length. [ 249.858909][T11473] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.999153][T11478] bond8: (slave geneve3): making interface the new active one [ 250.008727][T11478] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 250.018973][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.072133][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.085965][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.103576][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.320445][T11497] syzkaller0: entered promiscuous mode [ 250.345122][T11497] syzkaller0: entered allmulticast mode [ 250.428652][T11497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1380'. [ 250.795459][T11514] netlink: 'syz.2.1385': attribute type 64 has an invalid length. [ 251.039764][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1389'. [ 251.227620][T11526] wlan1 speed is unknown, defaulting to 1000 [ 251.473513][T11538] tipc: Enabled bearer , priority 0 [ 251.503392][T11545] syzkaller0: entered promiscuous mode [ 251.534201][T11545] syzkaller0: entered allmulticast mode [ 251.562650][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 251.744322][T11552] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1393'. [ 251.844727][T11555] tipc: Resetting bearer [ 251.857672][T11537] tipc: Resetting bearer [ 251.882474][T11537] tipc: Disabling bearer [ 251.939094][T11563] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 251.947259][T11563] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1397'. [ 252.227226][T11572] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1399'. [ 252.265757][T11579] pimreg65566: entered allmulticast mode [ 253.086518][T11625] netlink: 'syz.6.1410': attribute type 16 has an invalid length. [ 253.104745][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 253.124921][T11625] netlink: 'syz.6.1410': attribute type 17 has an invalid length. [ 253.246679][T11628] 8021q: VLANs not supported on ip_vti0 [ 253.259884][T11616] wlan1 speed is unknown, defaulting to 1000 [ 253.430984][T11635] netlink: 'syz.5.1413': attribute type 5 has an invalid length. [ 253.805131][T11655] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1416'. [ 256.036986][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.089543][T11644] wlan1 speed is unknown, defaulting to 1000 [ 256.327428][T11674] x_tables: duplicate underflow at hook 1 [ 256.547590][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1424'. [ 256.647720][T11678] syzkaller0: entered promiscuous mode [ 256.653523][T11678] syzkaller0: entered allmulticast mode [ 258.410603][T11686] pim6reg: entered allmulticast mode [ 258.420097][T11686] pim6reg: left allmulticast mode [ 258.904436][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 259.019034][T11710] wlan1 speed is unknown, defaulting to 1000 [ 259.149918][T11725] netlink: 'syz.6.1431': attribute type 2 has an invalid length. [ 259.208987][T11720] syzkaller1: entered promiscuous mode [ 259.242078][T11720] syzkaller1: entered allmulticast mode [ 259.392522][T11725] !9: entered promiscuous mode [ 259.720449][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1436'. [ 259.737242][T11742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.914199][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 260.120615][T11761] tc_dump_action: action bad kind [ 260.844138][T11784] wlan1 speed is unknown, defaulting to 1000 [ 260.874797][T11790] syzkaller1: entered promiscuous mode [ 260.880410][T11790] syzkaller1: entered allmulticast mode [ 263.053594][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.514951][T11847] batadv_slave_0: entered promiscuous mode [ 263.570211][T11852] syzkaller1: entered promiscuous mode [ 263.576247][T11852] syzkaller1: entered allmulticast mode [ 263.600231][T11847] batadv_slave_0: left promiscuous mode [ 263.621193][T11862] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.646368][T11863] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 263.647545][T11862] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.656044][T11863] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1465'. [ 263.787331][T11861] bond2: entered allmulticast mode [ 263.899031][T11862] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.910242][T11862] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.949160][T11874] bridge4: entered promiscuous mode [ 263.954828][T11874] bridge4: entered allmulticast mode [ 263.964341][T11874] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 264.051336][T11862] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.061655][T11862] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.078038][T11882] bridge0: port 1(syz_tun) entered blocking state [ 264.085435][T11882] bridge0: port 1(syz_tun) entered disabled state [ 264.099664][T11882] syz_tun: entered allmulticast mode [ 264.109058][T11882] syz_tun: entered promiscuous mode [ 264.235739][T11862] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.260929][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1471'. [ 264.281717][T11862] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.304210][T11885] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1470'. [ 264.319648][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1470'. [ 264.459111][ T3558] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.467773][ T3558] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.513555][ T7152] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.526460][ T7152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.562490][T11899] wlan1 speed is unknown, defaulting to 1000 [ 264.588782][ T7152] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.596235][T11901] siw: device registration error -23 [ 264.597615][ T7152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.644431][ T7152] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.654701][ T7152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.962190][T11918] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 265.015382][T11916] team_slave_0: entered allmulticast mode [ 265.195627][T11918] bond3: entered promiscuous mode [ 265.240254][T11918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.290344][T11921] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 265.315825][T11921] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 265.327040][T11921] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 266.041028][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1491'. [ 266.251837][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 266.668093][T11991] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 266.768142][T11995] netlink: 'syz.3.1502': attribute type 3 has an invalid length. [ 266.778935][T11992] wlan1 speed is unknown, defaulting to 1000 [ 266.795844][T11995] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 266.810902][T11995] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1502'. [ 266.904223][ T11] block nbd0: Possible stuck request ffff888025ef8000: control (read@0,1024B). Runtime 30 seconds [ 266.920018][ T11] block nbd0: Possible stuck request ffff888025ef8200: control (read@1024,1024B). Runtime 30 seconds [ 266.931821][ T11] block nbd0: Possible stuck request ffff888025ef8400: control (read@2048,1024B). Runtime 30 seconds [ 266.942935][ T11] block nbd0: Possible stuck request ffff888025ef8600: control (read@3072,1024B). Runtime 30 seconds [ 267.644772][T12036] vlan3: entered promiscuous mode [ 267.663105][T12036] vlan3: entered allmulticast mode [ 267.678593][T12036] gretap0: entered allmulticast mode [ 267.685678][T12046] tipc: Trying to set illegal importance in message [ 267.806335][T12047] wlan1 speed is unknown, defaulting to 1000 [ 268.126733][T12074] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1515'. [ 268.162508][T12072] net_ratelimit: 99 callbacks suppressed [ 268.162528][T12072] openvswitch: netlink: Message has -2 unknown bytes. [ 268.188088][T12067] syzkaller0: entered promiscuous mode [ 268.199673][T12067] syzkaller0: entered allmulticast mode [ 268.203986][T12072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.352111][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1521'. [ 268.437967][T12082] netlink: 'syz.6.1521': attribute type 1 has an invalid length. [ 268.446694][T12082] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1521'. [ 268.485450][T12082] netlink: 'syz.6.1521': attribute type 1 has an invalid length. [ 268.503309][T12082] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1521'. [ 268.690086][T12080] sctp: [Deprecated]: syz.3.1520 (pid 12080) Use of int in max_burst socket option. [ 268.690086][T12080] Use struct sctp_assoc_value instead [ 269.067498][T12108] syzkaller0: entered promiscuous mode [ 269.084817][T12107] openvswitch: netlink: IP tunnel dst address not specified [ 269.108675][T12108] syzkaller0: entered allmulticast mode [ 269.666624][T12103] __nla_validate_parse: 1 callbacks suppressed [ 269.666649][T12103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1529'. [ 270.002565][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1534'. [ 270.510301][T12149] : renamed from veth0_to_bond [ 270.544675][T12154] netlink: 15672 bytes leftover after parsing attributes in process `syz.6.1542'. [ 270.560654][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1542'. [ 270.621274][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1542'. [ 270.701238][T12164] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 270.948300][T12172] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 271.009142][T12169] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 271.039978][T12169] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 271.180312][T12180] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1550'. [ 271.223897][T12182] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1551'. [ 271.684323][T12196] wlan1 speed is unknown, defaulting to 1000 [ 272.165099][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1555'. [ 272.230605][T12207] openvswitch: netlink: Invalid VLAN frame [ 272.516223][T12225] FAULT_INJECTION: forcing a failure. [ 272.516223][T12225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.543662][T12225] CPU: 0 UID: 0 PID: 12225 Comm: syz.5.1559 Not tainted syzkaller #0 PREEMPT(full) [ 272.543693][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.543706][T12225] Call Trace: [ 272.543714][T12225] [ 272.543722][T12225] dump_stack_lvl+0xe8/0x150 [ 272.543755][T12225] should_fail_ex+0x412/0x560 [ 272.543783][T12225] _copy_from_user+0x2d/0xb0 [ 272.543810][T12225] ___sys_sendmsg+0x1c6/0x360 [ 272.543845][T12225] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.543878][T12225] ? kstrtouint+0x6e/0xe0 [ 272.543925][T12225] ? __fget_files+0x2a/0x420 [ 272.543951][T12225] ? __fget_files+0x3a0/0x420 [ 272.543998][T12225] __sys_sendmmsg+0x27c/0x4e0 [ 272.544031][T12225] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.544056][T12225] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 272.544111][T12225] ? ksys_write+0x242/0x270 [ 272.544133][T12225] ? __pfx_ksys_write+0x10/0x10 [ 272.544159][T12225] __x64_sys_sendmmsg+0xa0/0xc0 [ 272.544188][T12225] do_syscall_64+0x14d/0xf80 [ 272.544214][T12225] ? trace_irq_disable+0x3b/0x150 [ 272.544240][T12225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.544259][T12225] ? clear_bhb_loop+0x40/0x90 [ 272.544281][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.544299][T12225] RIP: 0033:0x7efd7899c799 [ 272.544318][T12225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.544334][T12225] RSP: 002b:00007efd7989f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.544356][T12225] RAX: ffffffffffffffda RBX: 00007efd78c15fa0 RCX: 00007efd7899c799 [ 272.544369][T12225] RDX: 0000000000000062 RSI: 0000200000002940 RDI: 0000000000000005 [ 272.544380][T12225] RBP: 00007efd7989f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.544391][T12225] R10: 0000000000000b00 R11: 0000000000000246 R12: 0000000000000001 [ 272.544401][T12225] R13: 00007efd78c16038 R14: 00007efd78c15fa0 R15: 00007ffdce3e16a8 [ 272.544430][T12225] [ 272.773083][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1562'. [ 272.783899][T12230] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 273.452106][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 274.305719][T12261] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 274.332386][T12261] bond1 (unregistering): Released all slaves [ 274.462196][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 274.659665][T12270] wlan1 speed is unknown, defaulting to 1000 [ 274.723559][T12276] __nla_validate_parse: 1 callbacks suppressed [ 274.723579][T12276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1571'. [ 274.737203][T12086] Set syz1 is full, maxelem 65536 reached [ 274.766443][T12276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1571'. [ 275.258905][T12303] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1582'. [ 275.354358][T12299] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 275.443255][T12306] bond1 (unregistering): Released all slaves [ 275.500827][T12312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 275.682065][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1583'. [ 275.886209][T12312] : renamed from veth0_to_bond (while UP) [ 276.383372][T12349] x_tables: duplicate underflow at hook 1 [ 277.203858][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'. [ 277.565564][T12424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.572969][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 277.580252][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 277.587569][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 277.589598][T12421] wlan1 speed is unknown, defaulting to 1000 [ 277.761607][T12437] netlink: 'syz.4.1612': attribute type 25 has an invalid length. [ 277.835849][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 277.969136][T12448] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1614'. [ 278.066000][T12437] netlink: 'syz.4.1612': attribute type 25 has an invalid length. [ 278.074537][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 278.285768][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1618'. [ 278.545192][T12472] tipc: Enabled bearer , priority 0 [ 278.568443][T12472] syzkaller0: entered promiscuous mode [ 278.606583][T12472] syzkaller0: entered allmulticast mode [ 278.732760][T12472] tipc: Resetting bearer [ 278.812741][T12470] tipc: Resetting bearer [ 278.872576][T12470] tipc: Disabling bearer [ 279.598940][T12513] sctp: [Deprecated]: syz.6.1632 (pid 12513) Use of int in max_burst socket option. [ 279.598940][T12513] Use struct sctp_assoc_value instead [ 279.649449][T12517] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.790847][T12524] __nla_validate_parse: 1 callbacks suppressed [ 279.790871][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1636'. [ 279.812051][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'. [ 279.888081][T12525] netlink: 'syz.2.1635': attribute type 39 has an invalid length. [ 279.982599][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 280.085366][T12539] bridge0: port 3(syz_tun) entered blocking state [ 280.085798][T12536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1640'. [ 280.098330][T12539] bridge0: port 3(syz_tun) entered disabled state [ 280.123270][T12539] syz_tun: entered allmulticast mode [ 280.134526][T12539] syz_tun: entered promiscuous mode [ 280.140363][T12539] bridge0: port 3(syz_tun) entered blocking state [ 280.147343][T12539] bridge0: port 3(syz_tun) entered forwarding state [ 280.441247][T12557] bridge4: entered allmulticast mode [ 280.608517][T12565] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1647'. [ 280.621550][T12565] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1647'. [ 280.648521][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 280.665903][T12565] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 280.681826][T12566] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 280.725334][T12565] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 280.727260][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1647'. [ 280.796621][T12565] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1647'. [ 280.824095][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1649'. [ 280.864137][T12574] tipc: Enabling not permitted [ 280.870258][T12574] tipc: Enabling of bearer rejected, failed to enable media [ 281.120240][T12586] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 281.399018][T12595] syzkaller0: entered promiscuous mode [ 281.405063][T12595] syzkaller0: entered allmulticast mode [ 282.135172][T12639] sch_fq: defrate 4294967293 ignored. [ 282.398219][T12658] sctp: [Deprecated]: syz.6.1676 (pid 12658) Use of int in max_burst socket option. [ 282.398219][T12658] Use struct sctp_assoc_value instead [ 282.501811][T12656] wlan1 speed is unknown, defaulting to 1000 [ 282.950276][T12673] syzkaller0: entered promiscuous mode [ 282.958958][T12673] syzkaller0: entered allmulticast mode [ 283.371696][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 283.434792][T12689] x_tables: duplicate underflow at hook 3 [ 283.814934][T12706] tipc: Enabled bearer , priority 10 [ 283.979565][T12708] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 284.868542][T12740] wlan1 speed is unknown, defaulting to 1000 [ 284.942632][ T5898] tipc: Node number set to 3017425575 [ 284.948795][T12755] tunl0: entered allmulticast mode [ 285.611815][T12776] tipc: New replicast peer: 255.255.255.255 [ 285.618954][T12776] tipc: Enabled bearer , priority 10 [ 285.862973][T12782] __nla_validate_parse: 11 callbacks suppressed [ 285.862994][T12782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1716'. [ 285.895264][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1717'. [ 285.963437][T12794] team_slave_0: entered promiscuous mode [ 285.969655][T12794] team_slave_1: entered promiscuous mode [ 286.064345][T12797] netlink: 'syz.6.1720': attribute type 1 has an invalid length. [ 286.076993][T12797] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1720'. [ 286.127208][T12797] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1720'. [ 286.156745][T12797] netlink: 'syz.6.1720': attribute type 1 has an invalid length. [ 286.194145][T12806] syzkaller0: entered promiscuous mode [ 286.204163][T12806] syzkaller0: entered allmulticast mode [ 286.214804][T12806] syzkaller0: mtu less than device minimum [ 286.222682][T12797] netlink: 634 bytes leftover after parsing attributes in process `syz.6.1720'. [ 286.406378][T12808] team0: Device gtp0 is of different type [ 286.467676][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 286.574812][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1724'. [ 286.595452][T12828] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1729'. [ 286.621320][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1724'. [ 286.700570][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1724'. [ 286.744401][ T5912] tipc: Node number set to 1040411569 [ 286.766715][T12820] wlan1 speed is unknown, defaulting to 1000 [ 286.981803][T12840] xt_hashlimit: size too large, truncated to 1048576 [ 287.343867][T12844] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 287.357891][T12844] syzkaller1: linktype set to 270 [ 287.404409][T12864] syzkaller1: tun_chr_ioctl cmd 3223385353 [ 287.951001][T12879] xt_hashlimit: size too large, truncated to 1048576 [ 288.160925][T12883] geneve2: entered promiscuous mode [ 288.167067][T12883] geneve2: entered allmulticast mode [ 288.203397][T12886] netlink: 'syz.2.1739': attribute type 12 has an invalid length. [ 288.510727][T12897] openvswitch: netlink: Multiple metadata blocks provided [ 290.120671][T12857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.134210][T12890] netlink: 'syz.2.1741': attribute type 2 has an invalid length. [ 290.336021][T12906] netlink: 'syz.3.1745': attribute type 4 has an invalid length. [ 290.358149][T12905] bond1: option updelay: invalid value (18446744072924056005) [ 290.366224][T12905] bond1: option updelay: allowed values 0 - 2147483647 [ 290.375842][T12905] bond1 (unregistering): Released all slaves [ 290.540223][T12915] wlan1 speed is unknown, defaulting to 1000 [ 290.836797][T12929] gretap0: entered promiscuous mode [ 291.241046][T12937] __nla_validate_parse: 2 callbacks suppressed [ 291.241067][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 291.309843][T12950] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 291.630250][T12959] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 291.638882][T12959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1757'. [ 292.235221][T12990] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 292.405161][T13001] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.421867][T13001] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.451772][T13001] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 292.475898][T13006] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 292.581027][T13006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.715739][T13006] bond9: (slave ip6gretap1): making interface the new active one [ 292.736673][T13006] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 292.764871][T13001] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.778138][T13001] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.792299][T13001] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 292.910577][T13017] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.925083][T13017] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 292.954807][T13001] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.966146][T13001] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.979568][T13001] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 293.048393][T13017] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.060625][T13017] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 293.088242][T13001] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.098422][T13001] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.110015][T13001] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 293.233235][T13017] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.338046][T13017] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 293.678047][T13017] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.723861][T13017] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 293.771940][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.975751][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.990816][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 294.002556][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.032062][T13055] tipc: New replicast peer: 255.255.255.255 [ 294.038821][T13055] tipc: Enabled bearer , priority 10 [ 294.079948][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.098625][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 294.134057][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.180221][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.196411][T13061] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1775'. [ 294.212171][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 294.226210][ T59] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.250236][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.262802][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 294.271953][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.311040][ T59] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.331221][ T59] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.378524][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.401697][ T59] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.450989][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.493771][ T12] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.525263][T13071] vlan1: entered promiscuous mode [ 294.530540][T13071] bridge0: entered promiscuous mode [ 294.610175][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1777'. [ 294.790940][ T3452] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.800370][ T3452] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.930924][T13087] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 294.967977][T13087] 8021q: adding VLAN 0 to HW filter on device bond10 [ 295.056536][T13092] vlan1: entered promiscuous mode [ 295.151517][ T5891] tipc: Node number set to 340298031 [ 295.916464][T13130] netlink: 'syz.6.1792': attribute type 1 has an invalid length. [ 296.010127][T13130] bond2: entered promiscuous mode [ 296.038620][T13130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.089745][T13138] bond2: (slave bridge2): making interface the new active one [ 296.122771][T13138] bridge2: entered promiscuous mode [ 296.158034][T13138] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 296.212772][T13141] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 296.225617][T13108] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 296.255640][T13141] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 296.358794][T13146] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 296.372096][T13146] syzkaller1: linktype set to 260 [ 296.594098][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1795'. [ 296.768874][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 296.975278][ T11] block nbd0: Possible stuck request ffff888025ef8000: control (read@0,1024B). Runtime 60 seconds [ 296.986740][ T11] block nbd0: Possible stuck request ffff888025ef8200: control (read@1024,1024B). Runtime 60 seconds [ 296.998064][ T11] block nbd0: Possible stuck request ffff888025ef8400: control (read@2048,1024B). Runtime 60 seconds [ 297.021539][ T11] block nbd0: Possible stuck request ffff888025ef8600: control (read@3072,1024B). Runtime 60 seconds [ 297.338288][T13195] syzkaller0: entered promiscuous mode [ 297.358356][T13195] syzkaller0: entered allmulticast mode [ 297.452407][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 297.808027][T13208] syzkaller1: entered promiscuous mode [ 297.814229][T13208] syzkaller1: entered allmulticast mode [ 299.649182][T13170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.862791][T13215] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1806'. [ 299.875274][T13215] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 299.898767][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 299.947809][T13211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.001786][T13227] netlink: 'syz.4.1809': attribute type 142 has an invalid length. [ 300.141763][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1811'. [ 300.185267][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1811'. [ 300.240702][T13234] syzkaller0: entered promiscuous mode [ 300.261942][T13234] syzkaller0: entered allmulticast mode [ 300.305293][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1811'. [ 300.336329][T13244] netlink: 'syz.2.1814': attribute type 5 has an invalid length. [ 300.344281][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'. [ 300.355600][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1811'. [ 300.787350][T13272] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1821'. [ 300.971045][T13276] vlan1: entered promiscuous mode [ 301.005845][T13289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.208927][T13293] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 301.346297][T13305] veth0_to_bridge: entered promiscuous mode [ 301.360169][T13305] macvtap1: entered promiscuous mode [ 301.371343][T13305] macvtap1: entered allmulticast mode [ 301.380833][T13305] veth0_to_bridge: entered allmulticast mode [ 301.394705][T13305] veth0_to_bridge: left allmulticast mode [ 301.401215][T13305] veth0_to_bridge: left promiscuous mode [ 301.666266][T13323] __nla_validate_parse: 5 callbacks suppressed [ 301.666288][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1833'. [ 302.250899][T13351] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 302.324290][T13351] bond3 (unregistering): Released all slaves [ 302.755913][T13372] wlan1 speed is unknown, defaulting to 1000 [ 302.816427][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 302.871978][T13376] wlan1 speed is unknown, defaulting to 1000 [ 302.884923][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 303.010606][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1844'. [ 303.022581][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1844'. [ 303.217889][T13386] bond3: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 303.294201][T13386] bond3: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 303.334675][T13393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.926162][T13412] veth1_macvtap: renamed from veth0_vlan [ 303.938203][T13398] wlan1 speed is unknown, defaulting to 1000 [ 304.849851][T13441] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1858'. [ 304.901744][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 305.113931][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1863'. [ 305.564737][T13469] wlan1 speed is unknown, defaulting to 1000 [ 305.848958][T13498] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 306.045239][ T5490] veth1_macvtap: left promiscuous mode [ 306.144859][ T5490] veth1_macvtap: entered promiscuous mode [ 306.285707][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1875'. [ 306.309536][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1875'. [ 306.535857][T13516] wlan1 speed is unknown, defaulting to 1000 [ 306.621055][T13517] wlan1 speed is unknown, defaulting to 1000 [ 306.768213][T13534] netlink: 744 bytes leftover after parsing attributes in process `syz.3.1877'. [ 306.797543][T13532] netlink: 744 bytes leftover after parsing attributes in process `syz.3.1877'. [ 306.826778][T13537] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1877'. [ 307.023741][T13544] IPv6: sit4: Disabled Multicast RS [ 307.426233][T13559] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 307.434363][T13559] SET target dimension over the limit! [ 307.714483][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1887'. [ 307.761499][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1887'. [ 307.847943][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1889'. [ 307.866630][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1889'. [ 307.909108][T13575] netlink: 58 bytes leftover after parsing attributes in process `syz.6.1889'. [ 308.056976][T13579] openvswitch: netlink: Key type 270 is out of range max 32 [ 308.107495][T13579] bridge0: port 3(syz_tun) entered disabled state [ 308.153596][T13579] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 308.159749][T13586] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 308.453501][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 308.510022][T13609] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1898'. [ 309.606292][T13669] ip6tnl0: entered promiscuous mode [ 309.641743][T13669] ip6tnl0: entered allmulticast mode [ 310.077771][T13696] bond11: option lacp_active: invalid value (8) [ 310.108010][T13696] bond11 (unregistering): Released all slaves [ 311.057054][T13746] wlan1 speed is unknown, defaulting to 1000 [ 311.427164][T13761] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 311.766970][ T30] audit: type=1800 audit(1772401313.663:3): pid=13755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1929" name="memory.events" dev="tmpfs" ino=918 res=0 errno=0 [ 311.905245][T13760] wlan1 speed is unknown, defaulting to 1000 [ 312.124082][T13787] veth0_to_team: entered promiscuous mode [ 312.130059][T13787] veth0_to_team: entered allmulticast mode [ 312.602297][T13804] netlink: 'syz.2.1940': attribute type 5 has an invalid length. [ 312.636823][T13812] bridge_slave_0: entered promiscuous mode [ 312.676114][T13809] wlan1 speed is unknown, defaulting to 1000 [ 312.800932][T13820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.855190][T13826] syzkaller0: entered promiscuous mode [ 312.863258][T13826] syzkaller0: entered allmulticast mode [ 312.877648][T13826] tipc: Started in network mode [ 312.882815][T13826] tipc: Node identity 5a18b88c44b8, cluster identity 4711 [ 312.891267][T13826] tipc: Enabled bearer , priority 0 [ 312.918656][T13825] tipc: Resetting bearer [ 313.015510][T13825] tipc: Disabling bearer [ 313.059122][T13832] __nla_validate_parse: 38 callbacks suppressed [ 313.059144][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1948'. [ 313.315775][T13847] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 313.355699][T13840] wlan1 speed is unknown, defaulting to 1000 [ 313.841697][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1955'. [ 313.850791][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1955'. [ 313.914435][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1955'. [ 313.991646][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.000216][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1955'. [ 314.023829][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.038399][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.117954][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.127838][T13875] netlink: 'syz.2.1959': attribute type 10 has an invalid length. [ 314.147093][T13875] bond0: (slave dummy0): Releasing backup interface [ 314.148619][T13879] netlink: 'syz.3.1961': attribute type 4 has an invalid length. [ 314.171185][T13875] netlink: 'syz.2.1959': attribute type 10 has an invalid length. [ 314.253658][T13875] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 314.486293][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 314.510501][T13892] IPVS: Unknown mcast interface: vcan0 [ 314.585645][T13891] netlink: 'syz.4.1963': attribute type 11 has an invalid length. [ 314.786124][T13899] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 314.824244][T13899] team0 (unregistering): Port device team_slave_0 removed [ 314.885228][T13899] team0 (unregistering): Failed to send options change via netlink (err -105) [ 314.911337][T13899] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 314.954181][T13899] team0 (unregistering): Port device team_slave_1 removed [ 315.719168][T13940] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 315.807621][T13940] bond11: entered promiscuous mode [ 315.832120][T13940] 8021q: adding VLAN 0 to HW filter on device bond11 [ 315.893686][T13942] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 315.917763][T13942] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 315.928729][T13942] bond11: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 315.955063][T13945] netlink: 'syz.6.1976': attribute type 7 has an invalid length. [ 315.963289][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1976'. [ 315.973836][T13945] netlink: 'syz.6.1976': attribute type 7 has an invalid length. [ 315.981831][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1976'. [ 316.269372][T13954] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1979'. [ 316.316216][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 316.364565][T13953] netlink: 'syz.6.1979': attribute type 11 has an invalid length. [ 316.382871][T13953] netlink: 'syz.6.1979': attribute type 23 has an invalid length. [ 317.472209][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.732318][T14013] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 317.896800][T14021] wlan1 speed is unknown, defaulting to 1000 [ 318.361218][T14039] __nla_validate_parse: 9 callbacks suppressed [ 318.361242][T14039] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2000'. [ 318.772072][T14057] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 318.859512][T14057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.886293][T14057] team0: Port device bond0 added [ 319.047050][T14068] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2007'. [ 319.184577][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2007'. [ 319.200951][T14072] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.224235][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2007'. [ 319.233161][T14072] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 319.233240][T14072] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.264085][T14077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2008'. [ 319.266756][T14075] ip6gre1: entered promiscuous mode [ 319.291209][T14075] ip6gre1: entered allmulticast mode [ 319.366400][ T3452] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.401142][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.410041][ T3452] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.470651][T14072] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.484126][T14072] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 319.523088][T14072] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.543510][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 319.620565][T14090] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.2012'. [ 319.645379][T14085] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 319.671107][T14085] bond3 (unregistering): Released all slaves [ 319.801711][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.843254][T14096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2013'. [ 319.883254][T14072] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.903567][T14072] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 319.919009][T14072] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.039771][T14072] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.072220][T14072] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.088423][T14072] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.214250][T14103] bridge0: entered allmulticast mode [ 320.331800][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.362284][ T3452] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.374216][ T3452] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.392030][ T3452] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.436461][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.455799][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.490217][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.567216][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.580673][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.613852][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.632740][T14119] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2016'. [ 320.684851][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2016'. [ 320.737974][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.767168][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.807871][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.454774][T14213] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2041'. [ 322.468694][T14202] wlan1 speed is unknown, defaulting to 1000 [ 322.559165][T14216] wlan1 speed is unknown, defaulting to 1000 [ 323.347123][T14246] sctp: [Deprecated]: syz.5.2047 (pid 14246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.347123][T14246] Use struct sctp_sack_info instead [ 323.451635][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.593341][T14255] wlan1 speed is unknown, defaulting to 1000 [ 323.653167][T14253] wlan1 speed is unknown, defaulting to 1000 [ 323.666036][T14261] __nla_validate_parse: 4 callbacks suppressed [ 323.667342][T14261] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2051'. [ 323.785467][T14265] tc_dump_action: action bad kind [ 324.104531][T14278] x_tables: duplicate underflow at hook 1 [ 325.406074][T14222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.767830][T14306] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2059'. [ 325.794763][T14309] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2061'. [ 326.012156][T14315] hsr0: entered promiscuous mode [ 326.025158][T14315] macsec0: entered promiscuous mode [ 326.039683][T14315] macsec0: entered allmulticast mode [ 326.047441][T14315] hsr0: entered allmulticast mode [ 326.053031][T14315] hsr_slave_0: entered allmulticast mode [ 326.059468][T14315] hsr_slave_1: entered allmulticast mode [ 326.264321][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'. [ 327.051749][ T11] block nbd0: Possible stuck request ffff888025ef8000: control (read@0,1024B). Runtime 90 seconds [ 327.062895][ T11] block nbd0: Possible stuck request ffff888025ef8200: control (read@1024,1024B). Runtime 90 seconds [ 327.074534][ T11] block nbd0: Possible stuck request ffff888025ef8400: control (read@2048,1024B). Runtime 90 seconds [ 327.086398][ T11] block nbd0: Possible stuck request ffff888025ef8600: control (read@3072,1024B). Runtime 90 seconds [ 327.194760][T14372] syz_tun: left allmulticast mode [ 327.300762][T14385] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 327.633200][T14399] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2083'. [ 327.655703][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2081'. [ 327.669019][T14402] vlan0: left promiscuous mode [ 327.680697][T14402] geneve1: left promiscuous mode [ 327.688050][T14402] vlan0: left allmulticast mode [ 327.705231][T14402] geneve1: left allmulticast mode [ 327.737766][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2084'. [ 328.036707][T14401] ieee802154 phy1 wpan1: encryption failed: -126 [ 328.090577][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 328.508898][T14440] syzkaller0: entered promiscuous mode [ 328.516659][T14440] syzkaller0: entered allmulticast mode [ 328.766271][T14458] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 328.779930][T14458] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 328.855183][T14458] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 329.416203][T14497] netlink: 'syz.2.2103': attribute type 11 has an invalid length. [ 329.497984][T14498] netlink: 'syz.2.2103': attribute type 11 has an invalid length. [ 329.736678][T14512] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2108'. [ 329.782417][T14512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2108'. [ 329.849740][T14520] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 329.939453][T14520] bond4: entered promiscuous mode [ 329.972074][T14520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.982460][T14512] SET target dimension over the limit! [ 330.302565][T14541] netlink: 'syz.6.2114': attribute type 39 has an invalid length. [ 330.463669][T14541] syz_tun (unregistering): left allmulticast mode [ 330.473893][T14541] syz_tun (unregistering): left promiscuous mode [ 330.516358][T14541] bridge0: port 1(syz_tun) entered disabled state [ 330.587916][T14558] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 331.289068][T14595] atomic_op ffff888069cc6198 conn xmit_atomic 0000000000000000 [ 331.329499][T14590] bond5: option ad_user_port_key: invalid value (65535) [ 331.342886][T14590] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 331.368084][T14590] bond5 (unregistering): Released all slaves [ 331.524116][T14604] netlink: 'syz.2.2128': attribute type 6 has an invalid length. [ 331.531753][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.562218][T14607] netlink: 'syz.4.2129': attribute type 10 has an invalid length. [ 331.617459][T14609] netlink: 'syz.5.2130': attribute type 2 has an invalid length. [ 331.661171][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2130'. [ 331.824456][T14621] raw_sendmsg: syz.2.2131 forgot to set AF_INET. Fix it! [ 331.919625][T14626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.170471][T14631] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 332.197011][T14631] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 333.072868][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 333.118068][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 333.139934][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'. [ 333.164678][T14682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.216648][T14685] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 333.272695][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2149'. [ 333.379651][T14701] netlink: 'syz.5.2150': attribute type 10 has an invalid length. [ 333.562788][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 333.703546][T14722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.676199][T14768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 334.839139][T14777] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 334.851098][T14777] nbd: couldn't find device at index -427251215 [ 335.139372][T14795] netlink: 'syz.4.2168': attribute type 2 has an invalid length. [ 335.190562][T14795] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 335.220191][T14790] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 335.263445][T14790] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 335.306282][T14790] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 335.478128][T14808] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.511525][T14808] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.522886][T14808] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 335.654195][ T531] nci: nci_rx_work: unknown MT 0x4 [ 335.688137][ T531] nci: nci_rx_work: unknown MT 0x6 [ 335.701045][T14808] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.743794][ T531] nci: nci_rx_work: unknown MT 0x7 [ 335.777018][T14808] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.819172][T14808] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.041092][T14832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2175'. [ 336.067415][T14826] pimreg: entered allmulticast mode [ 336.142414][T14836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2175'. [ 336.170971][T14822] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 336.172894][T14808] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.279076][T14808] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 336.325647][T14808] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.420444][T14849] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 336.777122][T14860] netlink: 'syz.6.2184': attribute type 66 has an invalid length. [ 336.992748][T14842] wlan1 speed is unknown, defaulting to 1000 [ 337.074954][T14808] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.085754][T14808] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 337.097692][T14808] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 337.262745][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.280952][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.290627][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 337.339206][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.348859][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.389114][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 337.430825][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.452859][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.463583][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 337.506842][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.525216][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.535565][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.376670][T14815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.570276][T14898] netlink: 'syz.3.2188': attribute type 2 has an invalid length. [ 338.608310][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 338.646681][T14904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.897611][T14917] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.039327][T14917] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.173212][T14917] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.430045][T14917] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.636500][T14946] wlan1 speed is unknown, defaulting to 1000 [ 339.817890][ T188] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.872797][ T531] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.898332][T14958] delete_channel: no stack [ 339.945782][ T7152] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.210343][ T7152] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.270627][T14916] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.310564][T14976] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2210'. [ 340.340208][T14976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2210'. [ 340.404238][T14916] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.475863][T14916] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.601093][T14916] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.840017][T15006] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2217'. [ 340.913449][T15009] dummy0: entered promiscuous mode [ 340.919459][T15009] vlan4: entered promiscuous mode [ 341.075281][T15018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 341.085156][T15018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2221'. [ 341.361094][T15035] netlink: 'syz.3.2227': attribute type 4 has an invalid length. [ 341.368447][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2226'. [ 341.409387][T15033] bond1: entered promiscuous mode [ 341.429832][T15033] netlink: 'syz.5.2226': attribute type 3 has an invalid length. [ 341.446848][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 341.473053][T15033] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2226'. [ 341.503417][T15042] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 341.573113][T15042] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 341.683330][T15053] tipc: Enabled bearer , priority 0 [ 341.710623][T15053] syzkaller0: entered promiscuous mode [ 341.722403][T15053] syzkaller0: entered allmulticast mode [ 341.744094][T15057] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 341.762619][T15057] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2233'. [ 341.769395][T15061] sctp: [Deprecated]: syz.5.2232 (pid 15061) Use of int in max_burst socket option. [ 341.769395][T15061] Use struct sctp_assoc_value instead [ 341.798959][T15053] tipc: Resetting bearer [ 341.822477][T15052] tipc: Resetting bearer [ 341.860796][T15052] tipc: Disabling bearer [ 342.217850][T15072] netlink: 'syz.4.2239': attribute type 3 has an invalid length. [ 342.243168][T15072] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 342.251073][T15072] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2239'. [ 342.268046][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 342.521261][T15082] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2242'. [ 342.572333][T15082] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2242'. [ 342.773121][T15099] wlan1 speed is unknown, defaulting to 1000 [ 342.927957][T15102] netlink: 'syz.4.2247': attribute type 32 has an invalid length. [ 342.940769][T15106] xt_addrtype: ipv6 does not support BROADCAST matching [ 343.113856][ T7152] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.133218][ T188] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.157268][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.174556][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.275047][T15117] syzkaller0: entered promiscuous mode [ 343.280575][T15117] syzkaller0: entered allmulticast mode [ 343.398176][T15120] sctp: [Deprecated]: syz.6.2252 (pid 15120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.398176][T15120] Use struct sctp_sack_info instead [ 343.667890][T15102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.690069][T15102] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 343.788974][T15102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.802122][T15102] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 343.866791][T15140] netlink: 'syz.2.2259': attribute type 30 has an invalid length. [ 343.867698][T15102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.934611][T15102] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 343.984567][T15102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.014390][T15102] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 344.032869][T15140] netlink: 'syz.2.2259': attribute type 30 has an invalid length. [ 344.050990][T15102] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 344.074171][T15102] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 344.120430][T15150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.293648][T15158] netlink: 'syz.6.2263': attribute type 39 has an invalid length. [ 344.596772][T15175] netlink: 'syz.5.2267': attribute type 32 has an invalid length. [ 344.654414][ T5831] Bluetooth: hci6: command 0x0405 tx timeout [ 344.663194][T15102] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 344.686312][T15102] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 344.870309][T15192] netlink: 'syz.3.2270': attribute type 1 has an invalid length. [ 345.303475][T15203] IPVS: Scheduler module ip_vs_sip not found [ 345.322338][T15208] IPVS: Scheduler module ip_vs_sip not found [ 345.610464][T15216] wlan1 speed is unknown, defaulting to 1000 [ 345.630628][T15219] ip6gre1: entered promiscuous mode [ 345.636602][T15219] ip6gre1: entered allmulticast mode [ 345.639593][T15220] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 345.710932][T15220] 8021q: adding VLAN 0 to HW filter on device bond12 [ 345.808504][T15221] bond12: (slave veth9): Enslaving as an active interface with a down link [ 345.835001][T15220] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 345.842633][T15220] bond12: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 346.261670][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.583471][T15254] wlan1 speed is unknown, defaulting to 1000 [ 346.749995][T15262] __nla_validate_parse: 15 callbacks suppressed [ 346.750017][T15262] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2287'. [ 346.806823][T15262] 0X: renamed from caif0 [ 346.820670][T15262] 0X: entered allmulticast mode [ 346.827044][T15262] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 347.114278][T15271] netlink: 'syz.2.2291': attribute type 5 has an invalid length. [ 347.437945][T15288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.449006][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2294'. [ 347.461617][T15284] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2294'. [ 347.470970][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2294'. [ 347.511561][T15284] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2294'. [ 347.522927][T15285] syzkaller1: entered promiscuous mode [ 347.528529][T15285] syzkaller1: entered allmulticast mode [ 347.558761][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2294'. [ 347.584053][T15285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'. [ 347.593779][T15285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'. [ 348.015938][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 348.117644][T15311] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2299'. [ 348.198446][T15315] netlink: 'syz.5.2301': attribute type 15 has an invalid length. [ 349.023312][T15360] syzkaller0: entered promiscuous mode [ 349.029189][T15360] syzkaller0: entered allmulticast mode [ 351.077065][T15371] syzkaller0: entered promiscuous mode [ 351.084564][T15371] syzkaller0: entered allmulticast mode [ 351.394807][T15411] netlink: 'syz.5.2320': attribute type 1 has an invalid length. [ 351.416727][T15405] vti0: entered promiscuous mode [ 351.436730][T15405] vti0: entered allmulticast mode [ 351.668292][T15423] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.777887][T15429] netlink: 'syz.4.2324': attribute type 4 has an invalid length. [ 351.903008][T15435] rdma_rxe: rxe_newlink: failed to add wg1 [ 351.925868][T15436] wlan1 speed is unknown, defaulting to 1000 [ 352.312565][T15459] __nla_validate_parse: 7 callbacks suppressed [ 352.312597][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 352.350844][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'. [ 352.510547][T15466] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2334'. [ 352.562720][T15468] netlink: 'syz.3.2336': attribute type 2 has an invalid length. [ 352.631703][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.639819][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.837128][T15477] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 352.945839][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 352.959876][T15484] A link change request failed with some changes committed already. Interface 9iLL may have been left with an inconsistent configuration, please check. [ 353.049700][T15492] netlink: 'syz.5.2342': attribute type 5 has an invalid length. [ 353.058960][T15494] netlink: 'syz.3.2341': attribute type 33 has an invalid length. [ 353.068618][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2342'. [ 353.104382][T15494] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2341'. [ 353.291657][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.584245][T15506] netlink: 'syz.2.2345': attribute type 10 has an invalid length. [ 353.629343][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 353.786428][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2351'. [ 354.812215][T15561] netlink: 'syz.4.2361': attribute type 2 has an invalid length. [ 354.833626][T15562] netlink: 'syz.4.2361': attribute type 2 has an invalid length. [ 354.863458][T15561] hmac(sha224: entered promiscuous mode [ 355.069080][T15570] bridge8: entered promiscuous mode [ 355.418277][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2370'. [ 355.610006][T15592] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 355.690599][T15570] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 355.809683][T15604] tipc: Enabled bearer , priority 0 [ 355.818601][T15604] syzkaller0: mtu less than device minimum [ 356.014568][T15608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2375'. [ 356.098383][T15610] netlink: 'syz.5.2376': attribute type 1 has an invalid length. [ 356.130909][T15608] syzkaller1: entered promiscuous mode [ 356.160147][T15608] syzkaller1: entered allmulticast mode [ 356.232734][T15620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.150985][ T11] block nbd0: Possible stuck request ffff888025ef8000: control (read@0,1024B). Runtime 120 seconds [ 357.163791][ T11] block nbd0: Possible stuck request ffff888025ef8200: control (read@1024,1024B). Runtime 120 seconds [ 357.176259][ T11] block nbd0: Possible stuck request ffff888025ef8400: control (read@2048,1024B). Runtime 120 seconds [ 357.187791][ T11] block nbd0: Possible stuck request ffff888025ef8600: control (read@3072,1024B). Runtime 120 seconds [ 357.452609][T15665] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 357.896400][T15680] netlink: 'syz.2.2399': attribute type 1 has an invalid length. [ 358.329055][T15698] __nla_validate_parse: 3 callbacks suppressed [ 358.329078][T15698] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2403'. [ 358.679639][T15709] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.942300][T15721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2412'. [ 358.962950][T15721] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2412'. [ 359.292530][T15737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2418'. [ 359.543789][T15754] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 359.682284][T15754] bond13: entered promiscuous mode [ 359.688107][T15754] 8021q: adding VLAN 0 to HW filter on device bond13 [ 359.813153][T15769] tipc: Enabling of bearer rejected, failed to enable media [ 359.869548][T15773] netlink: 'syz.5.2428': attribute type 8 has an invalid length. [ 360.522413][T15816] syzkaller1: entered promiscuous mode [ 360.544442][T15816] syzkaller1: entered allmulticast mode [ 361.101785][T15845] mac80211_hwsim hwsim15 syzkaller0: Caught tx_queue_len zero misconfig [ 361.178975][T15849] syzkaller0: entered promiscuous mode [ 361.185475][T15849] syzkaller0: entered allmulticast mode [ 361.299270][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 361.575345][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 361.813628][T15880] tipc: Enabling of bearer rejected, failed to enable media [ 361.994120][T15886] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 362.004015][T15886] dvmrp1: persist disabled [ 362.247529][T15896] syzkaller0: entered promiscuous mode [ 362.255718][T15896] syzkaller0: entered allmulticast mode [ 363.148199][T15922] wlan1 speed is unknown, defaulting to 1000 [ 363.234279][T15925] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 364.084187][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 364.209556][T15974] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2507'. [ 364.224242][T15974] tipc: New replicast peer: 255.255.255.255 [ 364.231274][T15974] tipc: Enabled bearer , priority 10 [ 364.375209][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2506'. [ 364.449389][T15977] netlink: 'syz.5.2506': attribute type 7 has an invalid length. [ 364.514223][T15975] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2506'. [ 364.551478][T15977] netlink: 'syz.5.2506': attribute type 8 has an invalid length. [ 364.584886][T15982] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2506'. [ 364.594631][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2506'. [ 364.609221][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 365.199333][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 365.212984][T16010] wlan1 speed is unknown, defaulting to 1000 [ 365.231528][ T5987] tipc: Node number set to 513849484 [ 365.241037][T16016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2514'. [ 365.532542][T16019] block nbd1: server does not support multiple connections per device. [ 365.542947][T16019] block nbd1: shutting down sockets [ 365.677798][T16031] ieee802154 phy1 wpan1: encryption failed: -22 [ 365.875955][T16040] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2524'. [ 366.082165][T16043] syzkaller0: entered promiscuous mode [ 366.087950][T16043] syzkaller0: entered allmulticast mode [ 366.094475][ T31] INFO: task syz.1.941:9831 blocked for more than 143 seconds. [ 366.103849][T16050] netlink: 'syz.5.2526': attribute type 1 has an invalid length. [ 366.108679][ T31] Not tainted syzkaller #0 [ 366.117517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 366.128046][ T31] task:syz.1.941 state:D stack:26112 pid:9831 tgid:9829 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 366.141192][ T31] Call Trace: [ 366.144929][ T31] [ 366.148008][ T31] __schedule+0x1585/0x5340 [ 366.153430][ T31] ? __pfx___schedule+0x10/0x10 [ 366.162027][ T31] ? schedule+0x90/0x360 [ 366.166556][ T31] schedule+0x164/0x360 [ 366.174516][ T31] schedule_preempt_disabled+0x13/0x30 [ 366.180541][ T31] __mutex_lock+0x7fe/0x1300 [ 366.197799][ T31] ? __mutex_lock+0x5ac/0x1300 [ 366.203302][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 366.209535][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 366.229754][ T31] ? stack_trace_save+0xa9/0x100 [ 366.235711][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 366.241240][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 366.248671][ T31] ? kasan_save_track+0x4f/0x80 [ 366.253658][ T31] ? kasan_save_track+0x3e/0x80 [ 366.258875][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 366.263825][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 366.268538][ T31] ? netlink_dump+0x1ef/0xe80 [ 366.273715][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 366.279107][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 366.285766][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 366.290487][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 366.295525][ T31] ? genl_rcv+0x28/0x40 [ 366.300100][ T31] ? netlink_unicast+0x80f/0x9b0 [ 366.305526][ T31] ? netlink_sendmsg+0x813/0xb40 [ 366.310651][ T31] ? ____sys_sendmsg+0xa68/0xad0 [ 366.315767][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 366.320845][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 366.326362][ T31] ? do_syscall_64+0x14d/0xf80 [ 366.331136][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.337986][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 366.344857][ T31] ? rcu_is_watching+0x15/0xb0 [ 366.349740][ T31] ? trace_kmalloc+0x2a/0x110 [ 366.354504][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 366.361762][ T31] genl_dumpit+0x10b/0x1b0 [ 366.366332][ T31] netlink_dump+0x722/0xe80 [ 366.370860][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 366.375972][ T31] ? genl_start+0x499/0x6c0 [ 366.380535][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 366.386168][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 366.392340][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 366.398694][ T31] ? genl_get_cmd+0x4a8/0x930 [ 366.403905][ T31] ? __pfx_genl_start+0x10/0x10 [ 366.408902][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 366.414293][ T31] ? __pfx_genl_done+0x10/0x10 [ 366.419083][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 366.423945][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.429071][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 366.435750][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 366.440829][ T31] netlink_rcv_skb+0x232/0x4b0 [ 366.445762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.450951][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.456714][ T31] ? down_read+0x272/0x2e0 [ 366.461177][ T31] ? genl_rcv+0xd/0x40 [ 366.465414][ T31] genl_rcv+0x28/0x40 [ 366.469600][ T31] netlink_unicast+0x80f/0x9b0 [ 366.474482][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 366.479806][ T31] ? netlink_sendmsg+0x650/0xb40 [ 366.485316][ T31] ? skb_put+0x11b/0x210 [ 366.489677][ T31] netlink_sendmsg+0x813/0xb40 [ 366.494998][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.500455][ T31] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 366.506961][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 366.512428][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.517762][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.523261][ T31] ____sys_sendmsg+0xa68/0xad0 [ 366.528247][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.533643][ T31] ? import_iovec+0x73/0xa0 [ 366.538356][ T31] ___sys_sendmsg+0x2a5/0x360 [ 366.543613][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.548930][ T31] ? futex_wake+0x4ac/0x580 [ 366.553591][ T31] ? __fget_files+0x2a/0x420 [ 366.558486][ T31] ? __fget_files+0x3a0/0x420 [ 366.563468][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 366.568447][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.574598][ T31] ? rcu_is_watching+0x15/0xb0 [ 366.579424][ T31] do_syscall_64+0x14d/0xf80 [ 366.584137][ T31] ? trace_irq_disable+0x3b/0x150 [ 366.589402][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.595705][ T31] ? clear_bhb_loop+0x40/0x90 [ 366.600522][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.607515][ T31] RIP: 0033:0x7fbf2db9c799 [ 366.612283][ T31] RSP: 002b:00007fbf2e9db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.620815][ T31] RAX: ffffffffffffffda RBX: 00007fbf2de15fa0 RCX: 00007fbf2db9c799 [ 366.629047][ T31] RDX: 0000000020000800 RSI: 0000200000000180 RDI: 0000000000000006 [ 366.637580][ T31] RBP: 00007fbf2dc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 366.645734][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.654056][ T31] R13: 00007fbf2de16038 R14: 00007fbf2de15fa0 R15: 00007ffe11f491c8 [ 366.662474][ T31] [ 366.668056][ T31] [ 366.668056][ T31] Showing all locks held in the system: [ 366.677320][ T31] 1 lock held by khungtaskd/31: [ 366.682631][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 366.695046][ T31] 4 locks held by kworker/u8:2/36: [ 366.700457][ T31] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 366.712182][ T31] #1: ffffc90000ac7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 366.723605][ T31] #2: ffffffff8fbbe170 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 366.733923][ T31] #3: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 366.744312][ T31] 3 locks held by kworker/u8:6/531: [ 366.749793][ T31] #0: ffff888030738148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 366.762102][ T31] #1: ffffc90003037c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 366.775221][ T31] #2: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 366.785334][ T31] 2 locks held by getty/5585: [ 366.790035][ T31] #0: ffff888030f200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 366.800539][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 366.810876][ T31] 2 locks held by syz.0.411/7706: [ 366.816097][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 366.824750][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 366.835792][ T31] 1 lock held by udevd/8449: [ 366.840405][ T31] #0: ffff888025e60358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 366.849923][ T31] 3 locks held by syz.1.941/9831: [ 366.855358][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 366.865167][ T31] #1: ffff8880554466f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 366.875740][ T31] #2: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 366.886746][ T31] 1 lock held by syz.3.2523/16035: [ 366.895089][ T31] #0: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 366.904296][ T31] 2 locks held by syz.6.2524/16038: [ 366.909519][ T31] #0: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: tcx_link_release+0xaa/0x520 [ 366.919396][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 366.930928][ T31] 1 lock held by syz.5.2526/16048: [ 366.936120][ T31] #0: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 366.945917][ T31] 1 lock held by syz.2.2527/16055: [ 366.951118][ T31] #0: ffffffff8fbcc988 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 366.960772][ T31] [ 366.966033][ T31] ============================================= [ 366.966033][ T31] [ 366.976838][ T31] NMI backtrace for cpu 1 [ 366.976859][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 366.976881][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.976893][ T31] Call Trace: [ 366.976902][ T31] [ 366.976911][ T31] dump_stack_lvl+0xe8/0x150 [ 366.976946][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 366.976969][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 366.976998][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 366.977024][ T31] sys_info+0x135/0x170 [ 366.977042][ T31] watchdog+0xfd9/0x1030 [ 366.977078][ T31] ? watchdog+0x21a/0x1030 [ 366.977116][ T31] kthread+0x388/0x470 [ 366.977137][ T31] ? __pfx_watchdog+0x10/0x10 [ 366.977164][ T31] ? __pfx_kthread+0x10/0x10 [ 366.977194][ T31] ret_from_fork+0x51e/0xb90 [ 366.977224][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 366.977249][ T31] ? __switch_to+0xc7d/0x1450 [ 366.977276][ T31] ? __pfx_kthread+0x10/0x10 [ 366.977298][ T31] ret_from_fork_asm+0x1a/0x30 [ 366.977344][ T31] [ 366.977352][ T31] Sending NMI from CPU 1 to CPUs 0: [ 367.091983][ C0] NMI backtrace for cpu 0 [ 367.092003][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 367.092020][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.092031][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 367.092058][ C0] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 367.092072][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 367.092088][ C0] RAX: 000000000011644b RBX: ffffffff819a80dd RCX: 0000000080000001 [ 367.092100][ C0] RDX: 0000000000000001 RSI: ffffffff8def1b15 RDI: ffffffff8c27aa00 [ 367.092111][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 367.092122][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901181b0 [ 367.092133][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 367.092144][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 367.092158][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.092168][ C0] CR2: 00007efd78be82f8 CR3: 000000007c05c000 CR4: 00000000003526f0 [ 367.092185][ C0] Call Trace: [ 367.092192][ C0] [ 367.092198][ C0] default_idle+0x9/0x20 [ 367.092213][ C0] default_idle_call+0x72/0xb0 [ 367.092228][ C0] do_idle+0x1bd/0x500 [ 367.092248][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 367.092272][ C0] ? __pfx_do_idle+0x10/0x10 [ 367.092297][ C0] cpu_startup_entry+0x43/0x60 [ 367.092317][ C0] rest_init+0x2de/0x300 [ 367.092334][ C0] start_kernel+0x385/0x3d0 [ 367.092357][ C0] x86_64_start_reservations+0x24/0x30 [ 367.092374][ C0] x86_64_start_kernel+0x143/0x1c0 [ 367.092390][ C0] common_startup_64+0x13e/0x147 [ 367.092415][ C0] [ 367.278186][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 367.285168][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 367.294431][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.305035][ T31] Call Trace: [ 367.308425][ T31] [ 367.311365][ T31] vpanic+0x56c/0xa60 [ 367.315547][ T31] ? __pfx___schedule+0x10/0x10 [ 367.320406][ T31] ? __pfx_vpanic+0x10/0x10 [ 367.324916][ T31] ? __pfx_console_unlock+0x10/0x10 [ 367.330132][ T31] panic+0xc5/0xd0 [ 367.333875][ T31] ? __pfx_panic+0x10/0x10 [ 367.338736][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 367.344119][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 367.350366][ T31] watchdog+0x1023/0x1030 [ 367.354896][ T31] ? watchdog+0x21a/0x1030 [ 367.359336][ T31] kthread+0x388/0x470 [ 367.363413][ T31] ? __pfx_watchdog+0x10/0x10 [ 367.368186][ T31] ? __pfx_kthread+0x10/0x10 [ 367.372881][ T31] ret_from_fork+0x51e/0xb90 [ 367.377572][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 367.382705][ T31] ? __switch_to+0xc7d/0x1450 [ 367.387393][ T31] ? __pfx_kthread+0x10/0x10 [ 367.391990][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.396864][ T31] [ 367.400781][ T31] Kernel Offset: disabled [ 367.405101][ T31] Rebooting in 86400 seconds..