last executing test programs: 4m50.299442329s ago: executing program 2 (id=2348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00c74253a55a00", 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x40, 0x2, 0x7, 0x2}, {0x6, 0xfd, 0x0, 0x3}]}) write$ppp(r1, &(0x7f0000000140)='B`', 0x2) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000000)=0x600) 4m49.9160575s ago: executing program 2 (id=2351): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x4002, 0x200, '\x00\x00@', 0x0, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x835b, @rand_addr=' \x01\x00', 0xfffffff4}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e1f, @rand_addr=0x64010102}}, 0xffffc39b, 0xa, 0x7, 0x0, 0xd0, 0x400e35, 0x80}, &(0x7f00000002c0)=0x9c) 4m49.49820556s ago: executing program 2 (id=2353): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001bc0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141f030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0473cad67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce086a9043fd4e456316bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951fda308d9aeab4ddb708fa974df1b495be983a67", 0xd8}], 0x1}, 0x4800) r1 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r1, 0x0, 0x0, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2f0, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79e3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb01e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff35d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb096}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000000}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1174}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x416}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x24048801}, 0xcc1) 4m49.164470485s ago: executing program 2 (id=2357): recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/142, 0x8e, 0x0, &(0x7f00000000c0)=@can, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x500, &(0x7f0000000180)}) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x500, &(0x7f0000000180)}) mmap(0x0, 0x0, 0xb, 0x10, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, 0x0) 4m48.952815284s ago: executing program 2 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="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", 0xfc}], 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, '\x00', "56df2295bfda5c4f9fecff61beaa8bb4", "a28265eb", "7f1f1c2ab4421d27"}, 0x28) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f00000003c0)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000480)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000540)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000009c0)="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", 0xdf3}], 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000006c000000030a01020000000000000000020000060900010073797a300000000049000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7affb8305a4334eb3f69fb2f185d0371736af66032ae4eed98dbb95537f4f"], 0xb4}}, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xf, 0x4, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x40, 0x8, 0x28f2, 0x6}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c5000000ce"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m48.640278873s ago: executing program 2 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.events\x00', 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x2a, 0x0, 0x1}, 0x28) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='rdma.current\x00', 0x26e1, 0x0) (rerun: 32) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800020072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f00000003c0)={'wlan1\x00', @random="000500000020"}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x100}, 0x50) (async, rerun: 32) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x2000, 0x2, {{0xc, 0x4, 0x2, 0x4, 0x30, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x14, 0x34, 0x1, 0x9, [{@multicast1, 0xef}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @noop]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0xa, 0x40400, r4, 0x100, '\x00', r6, r5, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) 4m33.516528617s ago: executing program 32 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.events\x00', 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x2a, 0x0, 0x1}, 0x28) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='rdma.current\x00', 0x26e1, 0x0) (rerun: 32) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800020072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f00000003c0)={'wlan1\x00', @random="000500000020"}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x100}, 0x50) (async, rerun: 32) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x2000, 0x2, {{0xc, 0x4, 0x2, 0x4, 0x30, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x14, 0x34, 0x1, 0x9, [{@multicast1, 0xef}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @noop]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0xa, 0x40400, r4, 0x100, '\x00', r6, r5, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) 5.387258859s ago: executing program 1 (id=4294): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0xf2ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000072000000bf09000000000000550901000000000095000000000000001d4af5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xf5, 0x100, 0x12, @empty, @private1, 0x20, 0x1, 0x8, 0xfff}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000640)=[{0x15, 0x0, 0x12, 0x24}, {0x1, 0x2, 0x29, 0xfffffff6}]}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000680)={0x3, 'veth0_to_bridge\x00', {0x197}, 0x7}) 5.177472468s ago: executing program 0 (id=4297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xd102}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7180}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000240)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.670746217s ago: executing program 1 (id=4300): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) poll(&(0x7f0000000040), 0x0, 0xe9) close(r0) 2.669819751s ago: executing program 3 (id=4301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 32) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8000038, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'ip6_vti0\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x3}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"c04c"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x1000, 0x1000, 0x9, 'snmp_trap\x00', 'syz0\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f000000000000000000000000000000000014002000fec8"], 0x5c}}, 0x0) 2.613858549s ago: executing program 0 (id=4303): socket$inet6(0xa, 0x3, 0xff) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000dc0)="1c00000066001f3853584707f9f0ffffff000000bb000000f3f80000a4", 0x1d) r1 = socket(0xa, 0x3, 0xff) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000d80)=0x2, 0x4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000005140), 0x4) sendmsg$inet(r4, &(0x7f0000005180)={0x0, 0x0, 0x0}, 0x4800) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000580)={0xa, 0x6, 0x3, @mcast1}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x2a}], 0x1}, 0x30008b08) 2.556754985s ago: executing program 4 (id=4304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000009c0)={0x28, 0x0, 0x2710, @local}, 0x10) close(r4) listen(r5, 0x6) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000a00)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000a40)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='W', 0x1}], 0x1}}], 0x1, 0x4008084) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x1800, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x3b}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 2.484230603s ago: executing program 0 (id=4305): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000001600)=@bridge_setlink={0x0, 0x13, 0x300, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x400, 0x2040}, [@IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "94c904ae866936588b23d0d6b7426f34"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'bitwise\x00'}]}, @IFLA_EXT_MASK={0x0, 0x1d, 0x8}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FLAGS={0x0, 0x3, 0x4}, @IFLA_XDP_FD, @IFLA_XDP_FD, @IFLA_XDP_FLAGS, @IFLA_XDP_FD, @IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FD]}]}, 0x34}}, 0x4000050) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000001"], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x1, 0xf1}, &(0x7f0000000280)=0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000005a00010029bd7000000000001c000000040001"], 0x18}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8001, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000880)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f00000008c0)="560000002a00000000000000000101000100"/49, 0x30) write(r10, &(0x7f0000000900)="560001002a00000000000000000101000100"/49, 0x30) write(r10, &(0x7f0000000ac0)="560002002a00000000000000000101000100"/49, 0x30) write(r10, &(0x7f0000000b00)="560003002a00000000000000000101000100"/49, 0x30) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000540)={'dummy0\x00'}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0xff00, &(0x7f00000005c0)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000009eb8cd4410f0972dbf121732210e5f0000000000000000000071"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0xc, &(0x7f0000000a00)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.458949238s ago: executing program 4 (id=4306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd2c, 0x9, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x54}}, 0x44) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)="978053", 0x3, 0x404c047, &(0x7f0000000080)={0xa, 0x4e23, 0x400000, @loopback}, 0x1c) shutdown(r4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x106}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000840)='GPL\x00', 0x3, 0xfec, &(0x7f0000000880)=""/4076, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2.35630188s ago: executing program 3 (id=4307): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000001000100181208000000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/129, 0x81}, {&(0x7f0000002340)=""/4100, 0x1004}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x13}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="a0aae141b3235770dc45f9db33562630848fcdb3edd0018b4bf5731f2d50761d66b6ca92a68761a030e26fb4774ba57aa9cb56c8fdd1dd3220b4dddf965b66ec8a8774d393f187ce907c1c53f21686d60a9d02265eb6b3683c557c99970a9e6c5bfa6682a879d0c49e6e5976e4bda63e482909eb10e730d6d9aecee734c5efaed89e088f5d7e6ff2450cd444ddc2c6eb0af46348eeb20201d5b9a87b038ce0b6ceb3d3", 0xa3) socket$kcm(0x10, 0x2, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000001000100181208000000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/129, 0x81}, {&(0x7f0000002340)=""/4100, 0x1004}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x13}], 0x1, 0x0, 0x0) (async) socket(0x1e, 0x5, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x80000000}, 0xfeda) (async) listen(r1, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="a0aae141b3235770dc45f9db33562630848fcdb3edd0018b4bf5731f2d50761d66b6ca92a68761a030e26fb4774ba57aa9cb56c8fdd1dd3220b4dddf965b66ec8a8774d393f187ce907c1c53f21686d60a9d02265eb6b3683c557c99970a9e6c5bfa6682a879d0c49e6e5976e4bda63e482909eb10e730d6d9aecee734c5efaed89e088f5d7e6ff2450cd444ddc2c6eb0af46348eeb20201d5b9a87b038ce0b6ceb3d3", 0xa3) (async) 2.254570841s ago: executing program 1 (id=4309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=';', 0x1}], 0x1}}], 0x1, 0x2400c810) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f00000002c0), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r3, &(0x7f0000000300)=""/238, 0xee, 0x10102, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x472, &(0x7f0000000880)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[{0x8, 0x0, 0x1}, {0x5}, {0xfff80}, {0x7}, {0x6}], @ipv6=@dccp_packet={0xe, 0x6, "7202cd", 0x428, 0x21, 0x0, @remote, @private2, {[@hopopts={0x3b, 0x2f, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x7, 0x75, "86b426b148f4d0473d3d5573d478d4e8fa9218346469650ac4a5fc12edea30a953753d411734b9990fcf557f3c5f53983584239a63cd4de3053cea4a14a5a516690ddca8ceaff0e1c5b40493ce61a5677e37daf1c10eafe1b9b24cdaf923ba2c215e28595b63c33a208c518986eea1177805cb8216"}, @pad1, @jumbo={0xc2, 0x4, 0x80000000}, @generic={0x8, 0xf6, "09a6971db790c97e67cb83389e71d36984a2a75476e9d9b02e56a527eaf4b391fbbb5956dc5e37a9bf47beed55b8780b1f6b29fe4835dabe2f04d67386fd6336ea2c368c6634fde4137cc9f9957a2a2931e426137e47a34663e965005eddeefb55a3886ce76a6b59b1f06d0c644c90d2aa59667b253e106fc4e1f0f68b61744c1208667ca035cea6516152e999a49c06917de256e84b34fe8292eabc725cfc60bd89e1f99418aa1e0691d644e832842602a12f6fef63024efea2798d9286086595ab8c44583680d876d85fb8e7ee32d60533c4ab7ef96d5415277823ec077016423dca417f2402e58e9be7b6ea1f504115ba2c033278"}]}, @srh={0x29, 0x6, 0x4, 0x3, 0xf, 0x20, 0x0, [@empty, @local, @private1]}, @fragment={0x0, 0x0, 0x4, 0x1, 0x0, 0x18, 0x68}, @fragment={0x3c, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x66}, @routing={0x1d, 0xc, 0x0, 0x1, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x3b, 0x25, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x40, 0x5, [0x1, 0x83b, 0x5]}}, @generic={0x9, 0xda, "31a14616636acbfe7a0c7e2c0e33f0a77454ab7c016c97e6b822dccd4783d2545e5ba1226f11d0cce192e23ea574b95eb1ab2d6cfdace27a314dfc8d866a2fe3021d4370191e5372423d0fb990585170d52007e2c7536c0f338ee11025f702530adb258982836ed737a0f851876d8fbabdfeb429894d4bc6103564946a7d6b5bdf3d857ba7b141c3876c3d2cf103e95d6693d1f601cdda250949e5d3330623263027b8961a9b91a561fc23971c20dca21f5a344e8ce19e99c610e274ca97219562094815d54acd11c90da40faeaf9db16bf41040615eae69b551"}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0xd}, @padn={0x1, 0x1, [0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xddc}, @jumbo={0xc2, 0x4, 0xfffffffa}]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x1, "63727f", 0x7f, "6cd7f0"}, "8fe9319413a5feb7c11c48ad213f91c382d8ca07e80670b911a90d337a89cb93a0e6272a0636747fff9a58655251f4d427cb2cec54b22d5e020077e0fd8b15c46526f9577b2855ab0b9478e586bdd6d91986e30d76f550698bf882c0cd243ce9941d7b59af4261130130faa11f95d8afe46118f873ffa0a45d127526d0c0b4a4319bbe5357653bea54bbc8937f99682e60f6c20890f7510bf93785ad4cbd944d9eb71177877d552a"}}}}}}}, &(0x7f0000000d00)={0x0, 0x3, [0x3fb, 0xe9, 0x14, 0x63d]}) sendmsg$NFT_BATCH(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000005108000440000000370800024000000002240001800a000100726564697200000014000280080001400000000908000240000400040900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="61050c05010280c40303032104c400"], 0xf) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010001fff00000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000400000028001280090001007665746800000000180002801400010000000040", @ANYRES32=0x0, @ANYBLOB="0003020001020100080020003e0f0000"], 0x50}}, 0x4040004) 2.071118647s ago: executing program 0 (id=4310): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket(0x10, 0x803, 0x8) (async) r1 = socket(0x10, 0x803, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000711230000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000440), &(0x7f0000000480)=@tcp6=r6}, 0x47) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000440), &(0x7f0000000480)=@tcp6=r6}, 0x47) shutdown(r6, 0x0) (async) shutdown(r6, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @void}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r9) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r10, @ANYBLOB="280012800900010076657468"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2.019862768s ago: executing program 3 (id=4311): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x1e95, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e22, @loopback}], 0x2c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r0, 0x3, 0x3, [0xbcf, 0x100, 0x5]}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) listen(r3, 0x10000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x7ff, 0x2, 0x4000, 0x1, 0xf836, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000180)="fe889207464da97d6ea26511bd6ca546697b7562dc507c78a9664951269c72c2fb5ff7e781bf9f0283265e4906163490d20cb801c7bd7364c1a37c8ab0c1c7ba2bab3bcdda3cdc96e405d2e975d2b1d06d2a21bd3c17603fa5fdb87c8709ae04e98adc7d69cac166b237a166ad5294c03ab444027e7de011e4c6ad864f485d2e9f8565e7d06d0a0993c3", &(0x7f0000000240)=@udp6, 0x2}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000300)={0x1, 0x2}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000380)={r0, @in={{0x2, 0x4e23, @remote}}, 0x3, 0x8, 0xd59, 0x0, 0x8, 0x9, 0x7f}, 0x9c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000440)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x7, 0x10, 0xfffffffffffffc00, 0x2}, &(0x7f00000004c0)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={r9, 0x7}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000540)={'bridge_slave_1\x00', @remote}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x35, r11}) r12 = accept4$x25(r3, &(0x7f0000000680)={0x9, @remote}, &(0x7f00000006c0)=0x12, 0x80000) accept4$x25(r12, &(0x7f0000000700), &(0x7f0000000740)=0x12, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@bridge_getlink={0x64, 0x12, 0x8, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r11, 0x0, 0x60088}, [@IFLA_PHYS_SWITCH_ID={0x5, 0x24, "c7"}, @IFLA_EVENT={0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_IFALIASn={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x85) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r6, 0x84, 0x24, &(0x7f00000008c0)=0x6, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x10, r7, 0x978d3000) bind$tipc(r5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000900)={r9, @in={{0x2, 0x4e24, @remote}}}, &(0x7f00000009c0)=0x84) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x8c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd25}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xd490}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fffffff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40011}, 0x24000090) 2.01926859s ago: executing program 4 (id=4312): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x5d, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0xf2ff, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0xa0a37ef53425e602}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}}, 0x40000) 1.461543105s ago: executing program 5 (id=4313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x50, 0x1401, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x5, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) accept4(r2, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014ffffff9eeea6346627ef62726f6164636173742d6c696e6b0000"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7ddd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x200c4444) 909.590997ms ago: executing program 1 (id=4314): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "a6493a7b26e8f5de714f86407ffa223f"}}}}}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x1}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001c40)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e20, 0xb, 0xf7fc, 0x0, 0xa, 0x80, 0x0, 0x1}, {0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x1000, 0xfffffffffffffffb}, {0x3, 0x2, 0x80, 0x2}, 0xfffffffc, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x8002, 0x3c}, 0x0, @in6=@loopback, 0x3504, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in=@multicast1, 0x0, 0x32}, 0x2, @in6=@empty, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x3501, 0x1, 0x0, 0x4, 0x8, 0x80000000}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x10000, 0x6c}, 0xa, @in6=@loopback, 0x3504, 0x4, 0x3, 0x4, 0x0, 0xabd}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x32}, 0x2, @in6=@local, 0xfffffffd, 0x5, 0x2, 0x4, 0x10000}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) socket$tipc(0x1e, 0x4, 0x0) (async) r4 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000400)={0x4000042, 0x83f}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000440)={0x800042, 0x1}, 0x10) close(0x3) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/93, 0x5d}], 0x1}}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x10000, 0x0) (async) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/93, 0x5d}], 0x1}}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x10000, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4054}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4054}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x3, 0xff) (async) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001880)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0xa8, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000008b000000000000000601000018110000", @ANYRES32=r6, @ANYBLOB="0007000000000000b702000014000000b7030000fffe00008500000086200000bf090000000000005509010000000080950000009d000000bf9100fa08000000000000002000000085000000d4000000b7000000000500009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x3, 0xfec, &(0x7f0000000880)=""/4076, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 832.124305ms ago: executing program 3 (id=4315): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000dc0)="1c00000066001f3853584707f9f0ffffff000000bb000000f3f80000a4", 0x1d) r1 = socket(0xa, 0x3, 0xff) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000d80)=0x2, 0x4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000005140), 0x4) sendmsg$inet(r4, &(0x7f0000005180)={0x0, 0x0, 0x0}, 0x4800) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000580)={0xa, 0x6, 0x3, @mcast1}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x2a}], 0x1}, 0x30008b08) 828.636347ms ago: executing program 4 (id=4316): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket(0x2, 0x3, 0x6) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x88, 0x4) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) (async) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="360383d9512280", @ANYRES16=r6, @ANYBLOB="000225bd7000fcdbdf252300000005002100e9000000080024000900000005002600020000000500250003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20048801) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0xfdef, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) sendmsg$key(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000c40)={0x2, 0xa, 0x1, 0x8, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0xc012) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a80008801c0007800800050000000000080006000000000008008787ca00000024"], 0xd8}}, 0x4000050) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x1, 0x2, 0x3, 0xd, 0x80}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) (async, rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r12, 0x1, 0x3}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000004000000080000000000000001"], 0x40) (async, rerun: 64) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRESOCT=r4, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x1004}, 0x10) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x3}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 751.594938ms ago: executing program 0 (id=4317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3, 0x3, 0x7fff, 0x840, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x16, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0xb, 0x0, 0x2, 0xfffffffffffffff8, 0x10}, @call={0x85, 0x0, 0x0, 0x13}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc23}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x1, 0x3, 0x4, 0xd, 0xa, 0x100, 0x10}]}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x9, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x387b}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @generic={0x95}], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x801, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x8014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 714.033857ms ago: executing program 5 (id=4318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f0000000200)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0xa, 0x80, 0x140}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r3, 0x0, 0x0, 0x4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1da}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xac}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0xd, 0x0, &(0x7f0000000700), 0x41000, 0x0, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x1, 0x0, 0x200}, 0x10, 0x1e3, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 639.103002ms ago: executing program 5 (id=4319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) (async) unshare(0x22020600) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) (async) ppoll(&(0x7f0000000000)=[{r3, 0xc511}], 0x1, 0x0, 0x0, 0x0) (async) accept(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 636.573114ms ago: executing program 3 (id=4320): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003e40)={0x6, 0xd, &(0x7f0000003f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000003f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000004040)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x93) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003e40)={0x6, 0xd, &(0x7f0000003f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000003f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000004040)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x93) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) (async) 540.326368ms ago: executing program 1 (id=4321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x16, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09002020000000008f29d158039b90627d7b60f0d5ca47f33eed47409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x71, 0x71, 0x3, 0xb, 0xc, 0x1}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8bf30da716cd479d}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400101a0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) 435.941806ms ago: executing program 0 (id=4322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000600)={'wlan0\x00'}) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x7e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x42f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c9}, 0x20008891) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002cbd70007dc5e290730000000c00990084f100006b0000000500ee00030000000500ee00810000000800ef00010000800800ef0004000000"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0xb1ff77c2cc214adf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) (rerun: 64) 424.709186ms ago: executing program 4 (id=4323): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x58}}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) 340.192911ms ago: executing program 5 (id=4324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="cf", 0x1}, {&(0x7f0000000340)="fd", 0x1}, {&(0x7f0000000380)='0', 0x1}, {&(0x7f00000003c0)="d5", 0x1}, {&(0x7f0000000400)='q', 0x1}], 0x5, 0xa) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x15c, 0x10, 0x1, 0x70bd25, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {@in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x9, 0x1}, 0x0, 0x0, 0xa, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5}]}, 0x15c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) 303.937037ms ago: executing program 1 (id=4325): socket(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2a, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000001680)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="6c000000100001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="18430100a1a20100140003007866726d30000000000000000000000030001a800c000a8005000800020000003f000a8014000700ff0100000000000000000000050000000000000003000000050027"], 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000020c0)=ANY=[@ANYBLOB="bc04000000050108000000000000000002000003540201000100000006000000075908007900120073797a3000000000000000000000000000000000000000000000000000000008058c338cab6c994db91b7fdfa29f58fc6a7064e373d51f8beb8ca4cdd0193ac56ba88f1361508dc0933982be4b80595d47b18201c2a85c56e306574d2a46a2fc0800674a00000000010000000000ff07030000000a0000000200000003000000080000007f00000001000000070000002b0f0300030000000000000009000b00020000000600000080010900000000000180000002000000010000000400000060068100020000007f0000000300080001000000040000000300faff01000000000400000600af000300000080000000e900480003000000000000000800018001000000001000000000d0f503000000080000000d002a0c02000000810000000100c30501000000020000000200080003000000000000460800100003000000080000000500002000000000050000000c005c0300000000420000000600060002000000000100000700030001000000010000000200e30f03000000070000000001fbff010000007b02000007000c2501000000060000000d00819a000000003b6a00008e000d000100000001010000fbff030001000000d7d1000003000800010000000300000000020000000f000000ffff0300000000004b0b0000e62406000300000005000000ffff8b3a01000000090000007e00010001000000600000000c000500030000000100000009000500000000000b0000009cf4050000000000070000000800000802000000090000005402010000000000f3ffffff0805060004000f0073797a3000000000000000000000000000000000000000000000000000000000ef1fcc22cbbbc2e0160797c63a23a0e990e9975abe4bedc20ab7643c8cd2f7d25f2681d9be0b6a121a0bce8eff56a056e27a3a2bd21d6e50f3e6e2c9d3c2b47970000100020000000000804709000400000000000e00000009008f0001000000000800000800f3000100000001fcffff0500050002000000030000000d00030000000000ffffffff0a00000802000000050000000700000002000000da0000000800010001000000050000007e0901000100000008ffffff0800060000000000080000007a00040003000000000000000700000000000000380f00009500040002000000070000000600ff0302000000ffffff7f4000000002000000100000000100010002000000030000000101ff000100000005000000ffffd46f00000000040000005202010002000000030000000900070002000000f8ffffff010009000200000008000000ff0f010402000000020000000a000100000000000001000008000700020000000100000001000f0001000000010000000400ff01020000000a0000004000020002000000040000000800090001000000000000000010010402000000000100000600050002000000010100000200495a02000000070000000d00ffff010000007f000000020001000200000081000000c0ff00000300000002000000ad00e200030000009814000008000001020000000100000000000900010000000200000009000700020000000700000002000100030000000700"/1212, @ANYBLOB="e948dc77354efdce1e45037dbb42550c068b2dab1f8f9bef8016babe958f8a28900925fa3cf3219a4d4192b6dabf8e51bf7a61fd7292233fef68dad475e709b1f21f2ee26e28541de426466b37fa9ec55e98661ea3dc95d4ed79d48f0fd83fd591902ad52d1b301b76df10fff2a0f6ec292464c41cf9866eae668bf9fb4b63e27a851b57cdd1367544978c66af3687b9b7d1248dc98ac02075d2d02cf2a418b8c6cdeb44a3e691075994910c7ca86b4f23cd74d22d64d9d9cfe76487905e6483c52c729191d79f28a57167cff119699e76faaef0a7324ee353fe3b4ee247421512ef96233939622d98f9369da7"], 0x4bc}, 0x1, 0x0, 0x0, 0x4008001}, 0x14000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001f80)=ANY=[@ANYBLOB="0500000001090000ffffffffb2230000000003bd7a9b33a69e25ebeece2cdde2a7f04e86cc7ad4d464c49a795f72a79a7429f466efe377a21fcb695943844acc9bc5c318f4fae60f13bd03fa254adf98d9ab8c1fa3d603d316d3ffc3be8c9370ef85f3801fe7b6ff5fc98541154ee9252ef3ddcbacc49b16925e2431dbb8c0d7f7b37b3c358bdbfc0a71f66a47f159915e97a726e7c0a9cb6d2c67e8b40dbfd228a522cde814919796491385eb1660a72c94ea44d0daa34f08fe6c77bb4dc9811f00"/208, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"], 0x80}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) sendmsg$can_bcm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="06000000740000000100000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100007733077200"/24], 0x48}}, 0x8044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4004000) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x400000000000047, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1402, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80010}, 0x800) sendmsg$NFT_BATCH(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=""/139, &(0x7f00000004c0)=0x8b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf523}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 203.105333ms ago: executing program 4 (id=4326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000130001ffffffe600fbdbdf25fc0000000000000000000000cb0149a20000000000000000000000000000000000000004000100000a0060"], 0xb8}}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e1e, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000640)="f5", 0xfffffffffffffff4}], 0x1}}, {{&(0x7f0000000680)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8e}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r4, 0x1) r5 = socket$kcm(0x11, 0x2, 0x300) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000002d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000001e80)={0xe0c, 0x0, 0x5, 0x3, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x0, 0xf}, 0x3, 0x3, 0xfffb, 0x5e, 0x23, 'syz1\x00', "aa920d69e42b9c6a248cc03f92f2628f0f57a50abe919373e60dae7d65176b00", "ebc15be03878ba24ed3ef7ac4b83e4a435f78c6e09c5b7ed18837d7ac67110f1", [{0xfff8, 0x1, {0x1, 0x9}}, {0x488a, 0x7, {0x3, 0x7fffffff}}, {0x63, 0x7, {0x2, 0xbca}}, {0xa8, 0x1, {0x2, 0x9}}, {0xac61, 0x2, {0x2, 0x6}}, {0xfff4, 0x3a, {0x3, 0x101}}, {0x9, 0x200, {0x2, 0x5}}, {0x8, 0x4, {0x3, 0x101}}, {0x81, 0x8, {0x3}}, {0xa858, 0xf, {0x0, 0x9}}, {0x3, 0xffff, {0x2, 0x1}}, {0x4, 0x4, {0x3, 0x80000000}}, {0xecf5, 0x6, {0x3, 0x7fffffff}}, {0x1ff, 0xfff0, {0x2, 0x3}}, {0x4, 0x9, {0x1, 0x5}}, {0x1000, 0x6, {0x3, 0x9}}, {0x100, 0xe7, {0x0, 0x8}}, {0x1, 0x4872, {0x1, 0x2}}, {0x2, 0x6, {0x3, 0xe5a}}, {0xe, 0x1, {0x3, 0x1}}, {0x6, 0x4, {0x0, 0x7}}, {0x40, 0x7ff, {0x1, 0xffff}}, {0x7, 0xff, {0x1, 0x8}}, {0x8, 0x47, {0x2, 0x8}}, {0xb2, 0x9, {0x0, 0x4}}, {0x40, 0x1000, {0x0, 0x5}}, {0x2, 0x6, {0x2, 0x5}}, {0xe, 0x2}, {0x5, 0xa, {0x2, 0x7}}, {0x7fff, 0x0, {0x1, 0x2}}, {0x7, 0x8, {0x2, 0x4}}, {0x5, 0x5, {0x1, 0x200}}, {0x2e37, 0xffff, {0x0, 0x3}}, {0x5, 0x7, {0x2, 0xfffffffe}}, {0x4, 0x8001, {0x2}}, {0x3, 0x3, {0x3, 0x10001}}, {0x5, 0x800, {0x3, 0x5}}, {0x8, 0x91, {0x3, 0x8}}, {0x0, 0x9, {0x1, 0xffffffb4}}, {0xfff6, 0x9, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x19, 0x5e, 0xcc88, 0x1, 0x3, 'syz0\x00', "13e6bee8b577b154b1b9762d8ccbc8ef3c59e78e56fef1c32791fc53ee9b0acc", "af9b65d42c0e171ffd26813b53d839248cf005f820f524b4a34b3d7c40b26209", [{0x8, 0x86, {0x2, 0x6}}, {0x5f0, 0x1, {0x3, 0x6}}, {0x1, 0x1, {0x2, 0x1}}, {0x1d, 0x8, {0x3, 0x8}}, {0x8, 0x568, {0x0, 0x4}}, {0x401, 0xd, {0x0, 0x4}}, {0x6, 0x9, {0x0, 0x4}}, {0x5, 0xe28e, {0x3, 0x8}}, {0x2, 0x9, {0x2, 0x6}}, {0x5, 0x4, {0x3, 0xffff}}, {0x3, 0x4, {0x3, 0x3}}, {0x1, 0x6, {0x2, 0x3}}, {0x1, 0xffff, {0x1, 0x10000}}, {0x4, 0x1cee, {0x3, 0x4}}, {0x2e3, 0x1, {0x0, 0x2}}, {0x3, 0x8, {0x3, 0x5}}, {0x100, 0x8, {0x2, 0x6e}}, {0x5, 0x5, {0x1, 0xae}}, {0x82ee, 0x5, {0x2, 0x7}}, {0xfff, 0x4, {0x1, 0xb}}, {0xfffa, 0x481, {0x3, 0xc}}, {0x0, 0x2, {0x1, 0xfffff21e}}, {0x0, 0x4, {0x3, 0xf3800000}}, {0xd, 0x7f, {0x3, 0x3}}, {0x4, 0x4, {0x3, 0x6}}, {0x1ff, 0xfeff, {0x3, 0x8}}, {0x10, 0x8, {0x2, 0x6}}, {0x8000, 0x4, {0x2, 0x3}}, {0x1ff, 0x8, {0x2, 0x5}}, {0x6, 0x8, {0x1, 0x53e1}}, {0xb, 0x40, {0x2, 0x9}}, {0x0, 0x2, {0x3, 0xb}}, {0x3, 0xf, {0x2, 0x8}}, {0x7, 0xfa00, {0x2, 0x6}}, {0x0, 0x1, {0x2, 0x8001}}, {0x648e, 0x200, {0x1, 0x1000}}, {0x9, 0x648, {0x1, 0x1}}, {0x8, 0x633, {0x0, 0x9}}, {0xffe0, 0x2a, {0x0, 0x10001}}, {0x7, 0xaeab, {0x3, 0x7f}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x7, 0x31, 0xa9e, 0x7, 0x0, 'syz1\x00', "110ec6623e97a7ef663428923a6eff7ea4c7b95d8c52585f27ddbb702b0676e1", "2ddd88482e08e73ee8f5efa36cdea9840eb455ac8a483450152cda8069172439", [{0x5, 0x9, {0x0, 0x7f}}, {0x8, 0x9, {0x3, 0x3}}, {0x10, 0x1, {0x8e5815a290568d23, 0xfff}}, {0x2cf9, 0xfffe, {0x1, 0x800}}, {0x0, 0x542f, {0x3, 0x7f}}, {0x0, 0x40, {0x0, 0x6}}, {0x2, 0x4, {0x2, 0x37b54a5e}}, {0x5, 0xa, {0x1, 0x6}}, {0x9, 0x4e01, {0x2, 0x9}}, {0x7, 0x83e, {0x2, 0xfe}}, {0x7, 0x8, {0x0, 0x3}}, {0x9, 0x8, {0x1, 0xe}}, {0x8001, 0x15, {0x0, 0x9}}, {0x2ef, 0x22, {0x3}}, {0x7, 0xfff, {0x0, 0xcd5}}, {0xffff, 0xfff7, {0x1, 0x80}}, {0x4, 0x0, {0x3, 0x6}}, {0xab, 0x7, {0x3, 0x4eaea49}}, {0x80, 0x3, {0x2, 0x9bd}}, {0xe7a, 0x10, {0x2, 0xffffffff}}, {0x3, 0x3, {0x2, 0x101}}, {0x8, 0x2, {0x1, 0x1}}, {0x1, 0x8, {0x2, 0x200}}, {0x2ee, 0x1ff, {0x2, 0x81}}, {0x7, 0x6, {0x0, 0x8000}}, {0x5, 0x840, {0x1, 0x7}}, {0xb2f3, 0x1ff, {0x1, 0x10}}, {0x4, 0x8, {0x0, 0x800}}, {0xde4, 0x6, {0x1, 0x5}}, {0x8, 0x2, {0x3, 0x81}}, {0x93, 0x5, {0x1, 0x2}}, {0x7, 0x4, {0x0, 0x4}}, {0xcb8, 0x9, {0x0, 0xf}}, {0x1000, 0x0, {0x1, 0x10}}, {0xffff, 0x8, {0x1, 0x2}}, {0x6, 0x8, {0x1, 0x1}}, {0x2, 0x2f3, {0x0, 0xf}}, {0x2b27, 0x81, {0x1, 0x5}}, {0x2, 0x4, {0x3, 0x43}}, {0x4, 0x0, {0x2}}]}}}, {{0x254, 0x1, {{0x0, 0xe}, 0xbb, 0x6, 0x6, 0x400, 0x1d, 'syz0\x00', "0478a9fc3ab1261165fe032104a60f3861bf5dbc52645a4b58b7ff1dfefa4801", "ee7c4772a7b00733dca123926ca1bcac5a2c4ffa0168b10a40aa093aca9e3c96", [{0x100, 0x6, {0x1, 0x40000000}}, {0x202, 0x4, {0x2, 0x9}}, {0x6, 0x1, {0x0, 0x2}}, {0x1, 0x0, {0x3, 0x7}}, {0x6ea, 0xfffd, {0x3}}, {0x1, 0x200, {0x2, 0xfffffffc}}, {0x2, 0x0, {0x0, 0x1}}, {0x81, 0x2, {0x2, 0xa}}, {0x120, 0x1, {0x1, 0x10001}}, {0x1, 0x4, {0x2, 0x9}}, {0xf5, 0x6, {0x3, 0x369}}, {0x9, 0xffff, {0x1, 0x9}}, {0x400, 0x8, {0x0, 0x5}}, {0x100, 0x5, {0x1, 0xcaaf}}, {0x913c, 0x6, {0x2, 0x9}}, {0x22d, 0x9, {0x0, 0x1}}, {0x1000, 0x1, {0x0, 0x80000001}}, {0x9, 0xff, {0x1, 0x6}}, {0x1, 0x101, {0x0, 0x4}}, {0x401, 0x5, {0x0, 0x80000001}}, {0x2, 0x1, {0x2, 0x3}}, {0x7, 0x56b, {0x0, 0x40}}, {0xc17, 0x3, {0x1, 0x80}}, {0x7ff, 0x5, {0x2, 0xfffffff8}}, {0x2, 0x0, {0x2, 0x9}}, {0x6, 0x7ff, {0x3, 0x8}}, {0x7, 0xa781, {0x1, 0xd3a}}, {0x81, 0xa, {0x2, 0x5}}, {0xb9, 0x5, {0x1, 0x1}}, {0xfffc, 0xb, {0x3, 0x8}}, {0xe, 0x2000, {0x2, 0x5}}, {0x6, 0x1, {0x0, 0x1}}, {0x0, 0xa, {0x0, 0x9}}, {0x9, 0x9, {0x0, 0x7}}, {0x9, 0x8, {0x2, 0x9}}, {0x5, 0x5, {0x1, 0x7}}, {0x8, 0x9, {0x2, 0x80000000}}, {0x9, 0xef2, {0x1, 0xfffffffa}}, {0xfffe, 0x8001, {0x0, 0x4}}, {0xb, 0x6, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x9f4c}, 0x40, 0xfa, 0x4, 0x1, 0x8, 'syz1\x00', "2e1aa5da3d59f34b1d97da40348c932558aa2a93bb152e46e2b466e9f6b20fe1", "69e8eec6551b7331b6adbf4e0a95713d62f2983807854ff00cba89447e4681e0", [{0xffff, 0x8, {0x3, 0x7fff}}, {0x6, 0xe, {0x3, 0x8001}}, {0x4, 0x0, {0x1}}, {0x1, 0x5, {0x1, 0x7}}, {0x1a1, 0x1, {0x1, 0xb}}, {0x0, 0xc2d, {0x2, 0x6}}, {0x4, 0xff, {0x0, 0x1}}, {0x9c, 0x0, {0x1, 0x705188d7}}, {0x8, 0x2, {0x3, 0x4}}, {0x62d, 0x6, {0x3, 0x4}}, {0x0, 0x7fff, {0x0, 0x5}}, {0x175c, 0x38, {0x2, 0x2}}, {0x5, 0x3, {0x2, 0x7}}, {0x5, 0x9, {0x1, 0x1}}, {0x8, 0x1, {0x2, 0x4}}, {0x3, 0x1, {0x0, 0x800}}, {0x7fff, 0xfffd, {0x1, 0x6}}, {0x5793, 0x9, {0x3, 0x47}}, {0x1, 0x800, {0x2}}, {0x0, 0xfff, {0x1, 0xa646}}, {0xc, 0xff, {0x2, 0x6}}, {0x1, 0x3, {0x3, 0xb0b9}}, {0x3, 0x3, {0x1, 0x1}}, {0xb0, 0x8000, {0x0, 0x6}}, {0x61dd, 0x3ff, {0x1, 0xffff}}, {0x5, 0x2, {0x1, 0x7}}, {0x200, 0x6, {0x2, 0x7}}, {0xb, 0x1, {0x2, 0x6}}, {0x200, 0x0, {0x3, 0x1000}}, {0xfffb, 0x7, {0x3, 0xb31}}, {0x81, 0x7fff, {0x0, 0x2}}, {0x9, 0x2, {0x1, 0x7}}, {0x4, 0x1, {0x0, 0x1000}}, {0x800, 0x2, {0x1, 0x400}}, {0xfd5a, 0x9, {0x2, 0x5}}, {0x37, 0xe, {0x3, 0x3}}, {0xa, 0x6d4, {0x0, 0x2}}, {0xf801, 0x1, {0x3, 0xb}}, {0x8, 0x3, {0x3, 0x81}}, {0xf3, 0x6, {0x3, 0xb}}]}}}, {{0x254, 0x1, {{0x3, 0x7fffffff}, 0x4, 0xc0, 0x4a, 0x8001, 0x2, 'syz0\x00', "672ccd1f54f015ee3935ba59442b704ecd022faf9648680bfc268c35819302ee", "a8b8d51ec6f2e603fde0e3c21f1a9aa01bb519c9448dbb0c7ee78e3e093225ae", [{0x8, 0x3800, {0x2, 0xb41}}, {0x4, 0x1, {0x3, 0xfffffff4}}, {0x101, 0xda3f}, {0x800, 0x40, {0x3, 0x3}}, {0x3, 0xfff, {0x1, 0x2}}, {0xff, 0x100, {0x0, 0x35}}, {0xe9a4, 0x8, {0x0, 0x2}}, {0x1, 0xf, {0x0, 0x1}}, {0x4, 0x6, {0x0, 0x9}}, {0x8dd, 0xd, {0x2, 0x9}}, {0x200, 0x8000, {0x3, 0x6}}, {0x3ff, 0x6, {0x1, 0x1000000}}, {0x2, 0x2, {0x3, 0x5}}, {0x2a, 0x5cc, {0x0, 0x2}}, {0x8, 0x2}, {0x8, 0x428, {0x3, 0x8e}}, {0xe, 0x8, {0x1, 0x3}}, {0xc7, 0x81, {0x3, 0xe5}}, {0x5, 0x0, {0x1, 0x3000}}, {0xa, 0xa1, {0x3}}, {0x2, 0x0, {0x1, 0xb6}}, {0xb1, 0x4, {0x2, 0x7}}, {0x2, 0xc49, {0x2, 0x6}}, {0x2, 0x4, {0x1, 0x81}}, {0x1ff, 0xe, {0x0, 0x7}}, {0x0, 0x8, {0x2, 0xffffffc0}}, {0x5, 0x0, {0x2, 0x3}}, {0x3ff, 0x2, {0x1, 0x401}}, {0x7, 0x6, {0x2, 0xfff}}, {0x7, 0x7, {0x0, 0x1}}, {0x1, 0x843, {0x1, 0xa8}}, {0x9, 0x2, {0x0, 0x10000}}, {0x55, 0x9, {0x3, 0x4}}, {0x3, 0x1, {0x2, 0x8}}, {0x9, 0x6, {0x3, 0x200}}, {0x9, 0xc80, {0x3, 0x2000000}}, {0x6, 0x2, {0x3, 0x2}}, {0x3, 0x3ff, {0x3, 0x44ae}}, {0xfff, 0xd, {0x0, 0x25}}, {0x1, 0x2, {0x0, 0xff}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000800)={&(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x6, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001cc0)="d16b98b287e30a8d1ac86d409b4bb459fd0b0e84cbdf2691818103ee0bab716b71619d85b5c123405f7711e03095045610a1236b3795c41516ec9faa6e554e6ebe1743753df8ae981cfe846930eab5f4bcc405cbc34dcabd48d502d73f61fcac9dba5dc31d68052933b678fbe47400c1b63797b8eedbb0", 0x77}], 0x4}, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x8}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x134}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000041c7540127b97000fefdffff017c000008004280040008002000018006000600800a00001400a400ff0100000000000001040002800000000000ffff"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000019c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x4042890}, 0x40000) r10 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000200)="0a00f32b4bc1de3d1978590306bd3894", 0x10}], 0x1, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x10044001) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000001c40)=r10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001dc0)=ANY=[@ANYBLOB='D\r\x00D', @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf251400000008001d00", @ANYRES32=r3, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB="08001d00", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=r10, @ANYBLOB="145677ca7a184cf2ad1381e1effd49ac7c37bc20c965026dcc07499be71751066446044a7cf1b147d42f03750fa7b902e7e7259e48f1c3d170231ceabd7da3af4ed2d1c208189ea75926165dd95daba4ec96cb7d4177e5d021b9545fc230640332424ea9799f489fe20b4977c3c9a4bf490d9c5e720931", @ANYRES32=r11, @ANYBLOB="0800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 201.924595ms ago: executing program 5 (id=4327): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x5d, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0xfff2, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0xa0a37ef53425e602}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}}, 0x40000) 93.279076ms ago: executing program 3 (id=4328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="f3d249d07415b7cf441b64490ff507a207ee485fc6ef387418c574823e5a9f7436aaa4cd440bc2d9c4e8cf5b6448c976464de318e939a4509039f684c57181189fa3020bfd2d0262fcde013f5ddb277e616a548b2f8def42ece266edd530aafc8551441c642e17afdaa61557f7a6e7113e0a45532fdd7bb7b42c639ddb9556648a72158d7f4d7df76240cf1840604bb9262b1527178fc677e1a6e2d3c6a0d354ddc03ff054a7b59bc04ee7938bd02fcae040e45959b19d3711"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="00000800000003000000000000104559001c000c00000401"], 0x2a) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000500000014000180060001000a0000000800050001000000400002801400010000000000007700432a00000000000001060002005000000008000300030000000800040001000000080005000000200008000600"], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000680001040000000000000000021c0000009be63ded2d60bb3fa8a3b9f33efff7", @ANYRES32=0x1, @ANYRES16=r0, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRESHEX=r0], 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000480)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01090000000000005600000f037dcb912468e9cf104968073c2c000b0000782700190004000400000007fd", 0x3b}], 0x1) 0s ago: executing program 5 (id=4329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000dc0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x44) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)=@newlink={0x60, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x60}}, 0x0) sendto$packet(r2, &(0x7f00000009c0)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000a00)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x10, 0x0, 0xff, @private2, @local, {[@routing={0x84}, @dstopts={0x3c}]}}}}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000c80)={{r1, &(0x7f0000000ac0)='conntrack\x00', 0x80101, &(0x7f0000000b00)={@_ha_fsid={[0x7fffffff, 0x5]}, {0x8, 0x5, 0x1, 0x2}}, 0xed75, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0x5}, {[0xfffffffa, 0x6, 0xfffffff8]}, 0x51e5, 0xac, &(0x7f0000000bc0)=""/172}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x25}}]}, &(0x7f0000000900)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) kernel console output (not intermixed with test programs): netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.015597][ T7074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.367669][ T8827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.367693][ T8827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.447270][ T7984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.447295][ T7984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.469271][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2938'. [ 497.482825][T18949] netlink: 'syz.4.2946': attribute type 2 has an invalid length. [ 497.575971][T18949] !: entered promiscuous mode [ 497.612641][T18949] __nla_validate_parse: 1 callbacks suppressed [ 497.612665][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 497.612827][T18949] !: left promiscuous mode [ 497.732834][T18952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.743873][T18952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.757043][T18952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.768073][T18952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.768834][T18952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.491025][ T7228] infiniband s`z1: ib_query_port failed (-19) [ 498.562759][ T7984] smbdirect: ib_dev[s`z1] removed [ 498.618254][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2952'. [ 498.618278][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 498.932016][ T6236] nci: nci_rx_work: unknown MT 0x6 [ 498.935578][T19004] netlink: 'syz.5.2951': attribute type 4 has an invalid length. [ 498.935597][T19004] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2951'. [ 499.065623][T19004] net_ratelimit: 16 callbacks suppressed [ 499.065649][T19004] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 499.362613][T19016] netlink: 'syz.4.2955': attribute type 19 has an invalid length. [ 499.908858][ T5636] Bluetooth: hci0: command tx timeout [ 500.020676][T18951] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.023220][T18951] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.023227][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 500.023365][T18951] bridge_slave_0: entered allmulticast mode [ 500.031129][T18951] bridge_slave_0: entered promiscuous mode [ 500.038093][T18951] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.038199][T18951] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.038329][T18951] bridge_slave_1: entered allmulticast mode [ 500.042925][T18951] bridge_slave_1: entered promiscuous mode [ 500.114891][T19043] netlink: 'syz.3.2958': attribute type 2 has an invalid length. [ 500.114917][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 500.122856][T18951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.127858][T18951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.191419][T18951] team0: Port device team_slave_0 added [ 500.195511][T18951] team0: Port device team_slave_1 added [ 500.242700][T18951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.242720][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.242747][T18951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.245817][T18951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.245831][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.245854][T18951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.297805][T18951] hsr_slave_0: entered promiscuous mode [ 500.298995][T18951] hsr_slave_1: entered promiscuous mode [ 500.299910][T18951] debugfs: 'hsr0' already exists in 'hsr' [ 500.299929][T18951] Cannot create hsr debugfs directory [ 500.578947][T18951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.578970][T18951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.690978][T18951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.691019][T18951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.792228][T18951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.792271][T18951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.938840][T18951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.938891][T18951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.550614][T18982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.570746][T18951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.612197][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.622217][T18951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.679970][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.682170][T18951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.708520][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.711030][T18951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.740520][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.903526][T19098] rdma_op ffff8880751afa38 conn xmit_rdma 0000000000000000 [ 501.967104][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 501.985031][ T5636] Bluetooth: hci0: command tx timeout [ 501.986063][T19098] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 502.099713][T19098] batman_adv: batadv0: Removing interface: syzkaller0 [ 502.324590][T18951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.392398][T18951] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.428169][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.428296][ T7986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.489379][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.489515][ T7074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.530260][T19111] netlink: 'syz.5.2965': attribute type 62 has an invalid length. [ 502.544662][T19120] netlink: 'syz.4.2968': attribute type 2 has an invalid length. [ 502.549190][T19120] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2968'. [ 502.549214][T19120] nbd: must specify an index to disconnect [ 503.820978][T19160] xt_CT: No such helper "netbios-ns" [ 503.937353][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2975'. [ 503.937392][T19176] netlink: 'syz.5.2975': attribute type 30 has an invalid length. [ 503.996238][T19176] vxlan0: entered promiscuous mode [ 503.996265][T19176] vxlan0: entered allmulticast mode [ 504.001154][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2975'. [ 504.001190][T19179] netlink: 'syz.5.2975': attribute type 30 has an invalid length. [ 504.065379][ T5636] Bluetooth: hci0: command tx timeout [ 504.078926][T19179] vxlan1: entered promiscuous mode [ 504.078944][T19179] vxlan1: entered allmulticast mode [ 504.135447][ T7984] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.135510][ T7984] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.135546][ T7984] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.135581][ T7984] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.438369][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 504.464641][T19193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2978'. [ 504.529457][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'. [ 504.543597][T18951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.735968][T18951] veth0_vlan: entered promiscuous mode [ 504.765255][T18951] veth1_vlan: entered promiscuous mode [ 505.253317][T19218] bond3 (unregistering): Released all slaves [ 505.585948][T18951] veth0_macvtap: entered promiscuous mode [ 505.610874][T18951] veth1_macvtap: entered promiscuous mode [ 505.661553][T18951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.708549][T18951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.748413][T19245] bridge9: entered allmulticast mode [ 505.782132][T19239] dvmrp1: entered allmulticast mode [ 505.787518][ T8827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.787602][ T8827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.787635][ T8827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.787666][ T8827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.046296][T19257] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.120183][ T6236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.120207][ T6236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.145512][ T5636] Bluetooth: hci0: command tx timeout [ 506.215305][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.215329][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.313948][T19271] syzkaller0: entered promiscuous mode [ 506.313975][T19271] syzkaller0: entered allmulticast mode [ 507.440650][T19304] netlink: 'syz.1.2998': attribute type 11 has an invalid length. [ 507.904855][ T5636] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 507.911490][T19312] Bluetooth: MGMT ver 1.23 [ 507.953546][T19316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 507.955346][T19316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 507.962524][T19316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 507.982232][T19316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 507.992279][T19316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 508.193915][T19322] digital: digital_start_poll: Unknown protocol [ 508.334025][T19338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3003'. [ 508.334065][T19338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3003'. [ 508.740641][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740667][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740682][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740693][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740705][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740716][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740728][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740739][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740750][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740762][T19352] tc action pedit 'at' offset 9 out of bounds [ 508.740813][T19352] TC_ACT_REPEAT abuse ? [ 509.062507][T19370] netlink: 'syz.5.3009': attribute type 1 has an invalid length. [ 509.062679][T19372] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3009'. [ 509.322754][T19383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3010'. [ 509.541389][T19395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3013'. [ 509.900094][T19407] netlink: 'syz.5.3018': attribute type 11 has an invalid length. [ 510.147469][ T5636] Bluetooth: hci3: command tx timeout [ 510.237203][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036cb7400: rx timeout, send abort [ 510.237654][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888036cb7400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 510.527884][T19434] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3022'. [ 511.798661][T19313] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.800499][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.800669][T19313] bridge_slave_0: entered allmulticast mode [ 511.804244][T19313] bridge_slave_0: entered promiscuous mode [ 511.838872][T19313] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.839074][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.839269][T19313] bridge_slave_1: entered allmulticast mode [ 511.869875][T19313] bridge_slave_1: entered promiscuous mode [ 511.918527][T19313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.922852][T19313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.072285][T19313] team0: Port device team_slave_0 added [ 512.086070][T19313] team0: Port device team_slave_1 added [ 512.225612][ T5636] Bluetooth: hci3: command tx timeout [ 512.361161][T19313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.361183][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.361236][T19313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.413754][T19313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.413771][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.413799][T19313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.752478][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 513.111954][T19483] €&: renamed from ip6gre0 (while UP) [ 513.293700][T19507] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 513.327502][T19313] hsr_slave_0: entered promiscuous mode [ 513.330459][T19313] hsr_slave_1: entered promiscuous mode [ 513.331351][T19313] debugfs: 'hsr0' already exists in 'hsr' [ 513.331372][T19313] Cannot create hsr debugfs directory [ 513.467501][T19518] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 513.492851][T19518] netlink: 'syz.3.3035': attribute type 11 has an invalid length. [ 513.524299][T19520] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 513.629359][T19527] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 513.831597][T19534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3040'. [ 514.052866][T19534] Bluetooth: hci0: unsupported parameter 5134 [ 514.052892][T19534] Bluetooth: hci0: unsupported parameter 8192 [ 514.052905][T19534] Bluetooth: hci0: unsupported parameter 5134 [ 514.052918][T19534] Bluetooth: hci0: unsupported parameter 8192 [ 514.068133][T19548] tap0: tun_chr_ioctl cmd 21731 [ 514.217831][T19550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.305168][ T5636] Bluetooth: hci3: command tx timeout [ 514.350462][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3045'. [ 514.531579][T19572] batman_adv: batadv0: Adding interface: veth0 [ 514.531599][T19572] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.531632][T19572] batman_adv: batadv0: Interface activated: veth0 [ 514.531649][T19572] batadv0: mtu less than device minimum [ 514.533309][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.534951][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.536352][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.537730][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.539101][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.540521][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.541980][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.543353][T19572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.591397][T19566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.618928][T19566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.624526][T19566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.671009][T19566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.682113][T19566] batman_adv: batadv0: Interface deactivated: dummy0 [ 514.682136][T19566] batman_adv: batadv0: Removing interface: dummy0 [ 514.692147][T19566] batman_adv: batadv0: Interface deactivated: veth0 [ 514.692167][T19566] batman_adv: batadv0: Removing interface: veth0 [ 514.775840][T19576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'. [ 514.801927][T19576] vlan1: entered allmulticast mode [ 514.801950][T19576] bridge9: entered allmulticast mode [ 514.980202][T19313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 514.998537][T19313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.999662][T19313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 515.003836][T19313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.029915][T19313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 515.047820][T19313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.062126][T19313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 515.074100][T19313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.083122][T19581] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3050'. [ 515.125165][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3050'. [ 515.131181][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3050'. [ 515.494614][T19313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.552345][T19313] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.579852][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.579980][ T8832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.639238][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.639378][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.876242][ T30] audit: type=1804 audit(1793822274.046:18): pid=19611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3056" name="/newroot/122/cgroup.controllers" dev="tmpfs" ino=651 res=1 errno=0 [ 515.878091][ T30] audit: type=1800 audit(1793822274.046:19): pid=19611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3056" name="cgroup.controllers" dev="tmpfs" ino=651 res=0 errno=-22 [ 515.986454][T19613] netlink: 'syz.0.3058': attribute type 30 has an invalid length. [ 515.992004][T19611] netlink: 'syz.5.3056': attribute type 10 has an invalid length. [ 516.045258][T19614] netlink: 'syz.5.3056': attribute type 10 has an invalid length. [ 516.088094][T19613] bond1: option arp_missed_max: invalid value (0) [ 516.088119][T19613] bond1: option arp_missed_max: allowed values 1 - 255 [ 516.090055][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'. [ 516.094100][T19613] bond1 (unregistering): Released all slaves [ 516.218043][T19611] team0: Port device dummy0 added [ 516.385659][ T5636] Bluetooth: hci3: command tx timeout [ 516.469843][T19614] team0: Port device dummy0 removed [ 516.654003][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 516.835994][T19647] vlan0: entered promiscuous mode [ 516.836019][T19647] bridge0: entered promiscuous mode [ 516.931372][T19650] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3062'. [ 517.298685][T19668] tun0: tun_chr_ioctl cmd 1074025675 [ 517.298714][T19668] tun0: persist enabled [ 517.300985][T19652] tun0: tun_chr_ioctl cmd 2148553947 [ 517.446871][T19676] netlink: 'syz.0.3069': attribute type 1 has an invalid length. [ 517.454441][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'. [ 517.492772][T19678] Bluetooth: hci0: unsupported parameter 5161 [ 517.492798][T19678] Bluetooth: hci0: unsupported parameter 8192 [ 517.492810][T19678] Bluetooth: hci0: unsupported parameter 5161 [ 517.492823][T19678] Bluetooth: hci0: unsupported parameter 8192 [ 517.685369][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 517.749627][T19313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.772706][T19684] xt_TCPMSS: Only works on TCP SYN packets [ 518.294028][T19718] xt_NFQUEUE: number of total queues is 0 [ 518.328901][T19718] 8021q: VLANs not supported on vxcan0 [ 518.331732][T19313] veth0_vlan: entered promiscuous mode [ 518.356408][T19313] veth1_vlan: entered promiscuous mode [ 518.403685][T19313] veth0_macvtap: entered promiscuous mode [ 518.416099][T19313] veth1_macvtap: entered promiscuous mode [ 518.449081][T19313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.468155][T19313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.555553][ T7986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.555601][ T7986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.555636][ T7986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.555670][ T7986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.757541][ T7984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.757567][ T7984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.763740][T19731] syzkaller0: entered promiscuous mode [ 518.763762][T19731] syzkaller0: entered allmulticast mode [ 518.888810][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.888835][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.935756][T19733] tipc: Started in network mode [ 518.935791][T19733] tipc: Node identity ac14140f, cluster identity 4711 [ 518.936093][T19733] tipc: New replicast peer: 255.255.255.255 [ 518.936839][T19733] tipc: Enabled bearer , priority 10 [ 519.104663][T19742] netlink: 'syz.3.3083': attribute type 5 has an invalid length. [ 519.358160][T19745] syzkaller0: entered promiscuous mode [ 519.358191][T19745] syzkaller0: entered allmulticast mode [ 521.546590][ T5769] tipc: Node number set to 2886997007 [ 522.563607][T19774] net_ratelimit: 55 callbacks suppressed [ 522.563622][T19774] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.572862][T19774] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.692732][T19779] __nla_validate_parse: 3 callbacks suppressed [ 522.692755][T19779] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3088'. [ 522.823600][T19316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 522.834963][T19316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 522.839553][T19316] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 522.840720][T19316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 522.841543][T19316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.084513][T19800] xt_hashlimit: size too large, truncated to 1048576 [ 523.137421][T19802] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.3092'. [ 523.137555][T19802] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 523.404145][T19802] 0ªX¹¦Dö»: entered allmulticast mode [ 523.605301][T19807] bond1 (unregistering): Released all slaves [ 523.751285][T19809] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3092'. [ 523.834609][ T5644] batman_adv: batadv0: Interface deactivated: syz_tun [ 523.855800][T19812] FAULT_INJECTION: forcing a failure. [ 523.855800][T19812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 523.855836][T19812] CPU: 1 UID: 0 PID: 19812 Comm: syz.0.3094 Not tainted syzkaller #0 PREEMPT(full) [ 523.855859][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 523.855871][T19812] Call Trace: [ 523.855879][T19812] [ 523.855888][T19812] dump_stack_lvl+0xe8/0x150 [ 523.855927][T19812] should_fail_ex+0x3eb/0x540 [ 523.856024][T19812] _copy_from_iter+0x1d3/0x1680 [ 523.856076][T19812] ? __alloc_skb+0x27a/0x7a0 [ 523.856110][T19812] ? __alloc_skb+0x27a/0x7a0 [ 523.856143][T19812] ? __alloc_skb+0x27a/0x7a0 [ 523.856174][T19812] ? __pfx__copy_from_iter+0x10/0x10 [ 523.856194][T19812] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 523.856217][T19812] ? __alloc_skb+0x27a/0x7a0 [ 523.856245][T19812] ? __alloc_skb+0x27a/0x7a0 [ 523.856281][T19812] ? netlink_sendmsg+0x64f/0xb20 [ 523.856308][T19812] ? skb_put+0x112/0x210 [ 523.856331][T19812] netlink_sendmsg+0x6bb/0xb20 [ 523.856367][T19812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.856402][T19812] ? aa_sock_msg_perm+0x144/0x210 [ 523.856438][T19812] ? apparmor_socket_sendmsg+0x98/0x360 [ 523.856496][T19812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.856524][T19812] sock_sendmsg_nosec+0x14e/0x190 [ 523.856556][T19812] ____sys_sendmsg+0x54e/0x850 [ 523.856586][T19812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.856619][T19812] ? import_iovec+0x73/0xa0 [ 523.856648][T19812] ___sys_sendmsg+0x2a5/0x360 [ 523.856668][T19812] ? __lock_acquire+0x747/0x2de0 [ 523.856701][T19812] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.856770][T19812] ? __fget_files+0x3a2/0x420 [ 523.856819][T19812] ? __fget_files+0x2a/0x420 [ 523.856855][T19812] __x64_sys_sendmsg+0x1b1/0x290 [ 523.856882][T19812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.856928][T19812] do_syscall_64+0x166/0x520 [ 523.856952][T19812] ? trace_irq_disable+0x3b/0x140 [ 523.856981][T19812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.857003][T19812] ? clear_bhb_loop+0x70/0xc0 [ 523.857027][T19812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.857048][T19812] RIP: 0033:0x7f24a519fb19 [ 523.857069][T19812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.857087][T19812] RSP: 002b:00007f24a5fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.857110][T19812] RAX: ffffffffffffffda RBX: 00007f24a5425fa0 RCX: 00007f24a519fb19 [ 523.857126][T19812] RDX: 0000000004000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 523.857140][T19812] RBP: 00007f24a5fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 523.857153][T19812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.857165][T19812] R13: 00007f24a5426038 R14: 00007f24a5425fa0 R15: 00007ffceaa72d88 [ 523.857200][T19812] [ 524.045658][ T5644] batman_adv: batadv0: Removing interface: syz_tun [ 524.402733][T19815] syzkaller0: entered promiscuous mode [ 524.402892][T19815] syzkaller0: entered allmulticast mode [ 524.463696][T19836] netlink: 'syz.5.3097': attribute type 4 has an invalid length. [ 524.463723][T19836] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3097'. [ 524.866911][T19316] Bluetooth: hci1: command tx timeout [ 525.578922][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 526.857037][T19856] vlan2: entered promiscuous mode [ 526.857062][T19856] hsr0: entered promiscuous mode [ 526.857604][T19856] vlan2: entered allmulticast mode [ 526.857621][T19856] hsr0: entered allmulticast mode [ 526.857635][T19856] hsr_slave_0: entered allmulticast mode [ 526.857651][T19856] hsr_slave_1: entered allmulticast mode [ 526.894106][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'. [ 526.920700][T19858] hsr_slave_0: left promiscuous mode [ 526.921322][T19858] hsr_slave_1: left promiscuous mode [ 526.946780][T19316] Bluetooth: hci1: command tx timeout [ 527.207646][T19873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3106'. [ 527.207675][T19873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3106'. [ 527.207690][T19873] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3106'. [ 528.065637][T19911] vcan0: tx address claim with broadcast sa [ 528.101524][T19911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3115'. [ 528.101582][T19911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3115'. [ 528.442183][T19929] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 528.612555][T19929] bond1: entered promiscuous mode [ 528.629377][T19929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.676249][T19936] ovs-dp0: entered promiscuous mode [ 528.728874][T19929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.729123][T19929] bond1: (slave xfrm0): The slave device specified does not support setting the MAC address [ 528.729134][T19929] bond1: (slave xfrm0): Setting fail_over_mac to active for active-backup mode [ 528.731735][T19929] bond1: (slave xfrm0): making interface the new active one [ 528.731754][T19929] xfrm0: entered promiscuous mode [ 528.733635][T19929] bond1: (slave xfrm0): Enslaving as an active interface with an up link [ 529.025676][T19316] Bluetooth: hci1: command tx timeout [ 529.030285][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.030492][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.030685][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.030888][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.040635][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.040833][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.041010][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.049621][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 529.136526][T19789] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.138309][T19789] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.138780][T19789] bridge_slave_0: entered allmulticast mode [ 529.142837][T19789] bridge_slave_0: entered promiscuous mode [ 529.177633][T19789] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.179375][T19789] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.179991][T19789] bridge_slave_1: entered allmulticast mode [ 529.183412][T19789] bridge_slave_1: entered promiscuous mode [ 529.291941][T19789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.310796][T19789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.477829][T19789] team0: Port device team_slave_0 added [ 529.487711][T19789] team0: Port device team_slave_1 added [ 529.569205][T19789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.569223][T19789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.569251][T19789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.574213][T19789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.574230][T19789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.574258][T19789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.775285][T19789] hsr_slave_0: entered promiscuous mode [ 529.779878][T19789] hsr_slave_1: entered promiscuous mode [ 529.790115][T19789] debugfs: 'hsr0' already exists in 'hsr' [ 529.790140][T19789] Cannot create hsr debugfs directory [ 530.391339][T19989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.639008][T19999] netlink: 'syz.1.3131': attribute type 21 has an invalid length. [ 530.798459][T19789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.820807][T20007] netlink: 'syz.5.3133': attribute type 1 has an invalid length. [ 530.911155][T19789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.003054][T19789] bond0: (slave netdevsim1): Releasing backup interface [ 531.016747][T19789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.105561][T19316] Bluetooth: hci1: command tx timeout [ 531.177270][T19789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.606026][T19789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.612693][T19789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.613712][T19789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.645581][T19789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.647037][T19789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.654071][T19789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.669263][T19789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.693809][T19789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.821301][T20042] netlink: 'syz.0.3142': attribute type 2 has an invalid length. [ 531.943380][T19789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.973199][T19789] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.001586][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.001645][ T8832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.007333][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.007443][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.200297][T20054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.231190][T20056] sock: sock_timestamping_bind_phc: sock not bind to device [ 532.302994][T20058] ip_tables: iptables: counters copy to user failed while replacing table [ 532.308934][T20058] C: renamed from lo (while UP) [ 532.344651][T20058] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.539986][T20066] netlink: 'syz.5.3149': attribute type 3 has an invalid length. [ 533.017751][T20090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.577100][T19789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.666491][T20115] __nla_validate_parse: 67 callbacks suppressed [ 533.666514][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 533.773382][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 536.926141][T19789] veth0_vlan: entered promiscuous mode [ 536.961993][T19789] veth1_vlan: entered promiscuous mode [ 537.150751][T19789] veth0_macvtap: entered promiscuous mode [ 537.165055][T19789] veth1_macvtap: entered promiscuous mode [ 537.197675][T19789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.224387][T19789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.262720][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3164'. [ 537.275692][ T8827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.278290][ T8827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.278477][ T8827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.542706][T20193] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 537.587187][ T8832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.691701][T20201] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3166'. [ 538.099863][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.100228][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.100565][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.100981][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.101350][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.101707][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.102155][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.102561][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.103152][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.103539][T20205] ip_tables: iptables: counters copy to user failed while replacing table [ 538.593149][ T8827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.593175][ T8827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.604313][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3169'. [ 538.760403][T20224] team0: Port device syz_tun removed [ 538.779351][T20224] bridge_slave_0: left allmulticast mode [ 538.779381][T20224] bridge_slave_0: left promiscuous mode [ 538.779701][T20224] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.812789][T20224] bridge_slave_1: left allmulticast mode [ 538.812817][T20224] bridge_slave_1: left promiscuous mode [ 538.813042][T20224] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.842776][T20224] bond0: (slave bond_slave_0): Releasing backup interface [ 538.869955][T20224] bond0: (slave bond_slave_1): Releasing backup interface [ 538.931494][T20224] team0: Port device team_slave_0 removed [ 538.999551][T20224] team0: Port device team_slave_1 removed [ 539.024608][T20230] vlan0: entered promiscuous mode [ 539.068913][T20230] team0: Port device vlan0 added [ 539.102959][T20228] vlan2: entered promiscuous mode [ 539.102987][T20228] team0: entered promiscuous mode [ 539.103001][T20228] team_slave_0: entered promiscuous mode [ 539.103273][T20228] team_slave_1: entered promiscuous mode [ 539.167426][ T8832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.167451][ T8832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.529459][T20253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3177'. [ 539.734586][T20266] tipc: Enabling of bearer rejected, failed to enable media [ 540.005945][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3182'. [ 540.046607][T20286] netlink: 'syz.1.3184': attribute type 10 has an invalid length. [ 540.046632][T20286] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3184'. [ 540.303638][T20292] ip6gre1: entered allmulticast mode [ 540.838259][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'. [ 540.839893][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'. [ 541.302306][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'. [ 541.302337][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'. [ 541.430274][ T8827] IPVS: starting estimator thread 0... [ 541.514960][T20351] IPVS: using max 26 ests per chain, 62400 per kthread [ 541.552246][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 541.552267][T20356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3202'. [ 541.552274][T20356] tc_dump_action: action bad kind [ 541.682085][T20359] netlink: 'syz.5.3203': attribute type 1 has an invalid length. [ 541.682109][T20359] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3203'. [ 541.979499][T20359] xt_IDLETIMER: timeout value is zero [ 542.323702][T20213] udevd[20213]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 543.739543][T20463] net_ratelimit: 57 callbacks suppressed [ 543.739564][T20463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 543.879810][T20470] bond1: entered promiscuous mode [ 543.879838][T20470] bond1: entered allmulticast mode [ 544.449284][T20496] netlink: 'syz.0.3241': attribute type 1 has an invalid length. [ 544.666423][T20501] __nla_validate_parse: 5 callbacks suppressed [ 544.666446][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'. [ 544.702029][T20503] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 544.702055][T20503] netlink: 'syz.3.3244': attribute type 2 has an invalid length. [ 544.728530][T20503] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 544.728555][T20503] netlink: 'syz.3.3244': attribute type 2 has an invalid length. [ 545.169953][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 545.179091][T20523] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 545.263947][T20527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.301875][T20538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3250'. [ 545.369862][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3250'. [ 545.412383][T20539] syzkaller1: entered promiscuous mode [ 545.412408][T20539] syzkaller1: entered allmulticast mode [ 546.116115][T20567] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 546.611231][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3267'. [ 546.678273][T20569] netlink: 'syz.4.3263': attribute type 4 has an invalid length. [ 546.721619][T20579] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 546.828246][T20586] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3270'. [ 547.117548][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3274'. [ 547.285329][T20601] netpci0: tun_chr_ioctl cmd 1074025678 [ 547.285356][T20601] netpci0: group set to 0 [ 547.450490][T20617] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 1, id = 0 [ 547.635698][T20623] Bluetooth: hci0: unsupported parameter 5134 [ 547.635725][T20623] Bluetooth: hci0: unsupported parameter 8192 [ 547.635738][T20623] Bluetooth: hci0: unsupported parameter 5134 [ 547.635763][T20623] Bluetooth: hci0: unsupported parameter 8192 [ 548.040792][T20636] ip6gretap1: entered allmulticast mode [ 548.044304][T20636] batman_adv: batadv0: Adding interface: ip6gretap1 [ 548.044324][T20636] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.044357][T20636] batman_adv: batadv0: Interface activated: ip6gretap1 [ 548.064531][T20638] Bluetooth: hci0: unsupported parameter 5135 [ 548.064552][T20638] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 548.220286][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3288'. [ 548.220323][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3288'. [ 548.247314][T20643] erspan0: entered promiscuous mode [ 548.249305][T20643] erspan0: left promiscuous mode [ 548.399317][T20650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3291'. [ 548.511093][T20650] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.511855][T20650] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.632075][T20650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.649851][T20650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.655891][T20662] ip_tables: iptables: counters copy to user failed while replacing table [ 548.816252][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.816301][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.816334][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.816366][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.839088][T20664] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 549.479430][T20686] syzkaller1: entered promiscuous mode [ 549.479457][T20686] syzkaller1: entered allmulticast mode [ 549.842947][T20693] __nla_validate_parse: 147 callbacks suppressed [ 549.842973][T20693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3304'. [ 550.169328][T20703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3306'. [ 550.396208][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 550.446584][ T7984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.448389][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.448432][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.448466][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.512208][T20722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3312'. [ 550.598782][T20725] netlink: 'syz.1.3313': attribute type 39 has an invalid length. [ 550.956991][T20735] syzkaller1: entered promiscuous mode [ 550.957017][T20735] syzkaller1: entered allmulticast mode [ 550.961712][ T7992] syzkaller1: tun_net_xmit 48 [ 551.000851][T20735] IPv6: addrconf: prefix option has invalid lifetime [ 551.000869][T20735] IPv6: addrconf: prefix option has invalid lifetime [ 551.152119][T20747] veth3: entered promiscuous mode [ 551.542135][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 551.559140][T20773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3326'. [ 551.638904][T20776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3327'. [ 551.639444][T20776] tipc: MTU too low for tipc bearer [ 552.016739][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 552.016764][T20801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3333'. [ 552.017504][T20799] x_tables: duplicate underflow at hook 1 [ 552.132323][T20805] netlink: 'syz.4.3335': attribute type 219 has an invalid length. [ 552.212705][T20810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3336'. [ 552.272990][T20810] netlink: 'syz.4.3336': attribute type 10 has an invalid length. [ 552.296349][T20810] team0: Port device veth1_to_hsr added [ 552.537833][T20824] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 552.537863][T20824] nbd: couldn't find device at index 767 [ 552.991116][T20849] vlan2: entered promiscuous mode [ 552.991140][T20849] macvlan0: entered promiscuous mode [ 553.123643][ T13] dvmrp6: left allmulticast mode [ 553.720537][ T7984] smc: removing ib device syz0 [ 553.722504][ T13] bond0 (unregistering): Released all slaves [ 553.737874][ T13] bond1 (unregistering): Released all slaves [ 553.759075][ T13] bond2 (unregistering): Released all slaves [ 553.779599][ T13] bond3 (unregistering): Released all slaves [ 553.807743][ T13] bond4 (unregistering): Released all slaves [ 553.818819][ T13] bond5 (unregistering): Released all slaves [ 553.843706][ T13] bond6 (unregistering): Released all slaves [ 553.969798][ T7984] smbdirect: ib_dev[syz0] removed [ 554.062516][T20871] netlink: 'syz.1.3353': attribute type 10 has an invalid length. [ 554.403133][T20871] dummy0: entered promiscuous mode [ 554.421773][T20871] team0: Port device dummy0 added [ 554.955813][T20898] netlink: 'syz.4.3360': attribute type 10 has an invalid length. [ 554.955839][T20898] openvswitch: netlink: Flow key attr not present in new flow. [ 555.600810][T20921] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 555.603215][T20921] __nla_validate_parse: 5 callbacks suppressed [ 555.603232][T20921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3365'. [ 555.704316][T20926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3366'. [ 555.737853][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3366'. [ 556.011469][T20935] veth1_to_team: entered promiscuous mode [ 556.024617][T20935] veth1_to_team: left promiscuous mode [ 556.594646][T20935] veth1_to_team: entered promiscuous mode [ 556.621574][T20935] veth1_to_team: left promiscuous mode [ 556.786012][T19316] Bluetooth: hci1: command 0x0405 tx timeout [ 557.059635][T20959] xt_hashlimit: size too large, truncated to 1048576 [ 557.144093][ T8827] IPVS: starting estimator thread 0... [ 557.273310][T20969] IPVS: using max 25 ests per chain, 60000 per kthread [ 557.382697][T20964] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 557.610544][T20983] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3376'. [ 557.947045][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 557.982480][T20992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'. [ 558.032736][T20995] netlink: 'syz.0.3379': attribute type 25 has an invalid length. [ 558.032763][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 558.081696][T20995] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 558.358924][T21003] erspan0: entered promiscuous mode [ 558.359083][T21003] vlan2: entered promiscuous mode [ 558.423005][ T30] audit: type=1804 audit(1793822316.586:20): pid=21009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3381" name="/newroot/187/cgroup.controllers" dev="tmpfs" ino=980 res=1 errno=0 [ 558.424397][ T30] audit: type=1800 audit(1793822316.586:21): pid=21009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3381" name="cgroup.controllers" dev="tmpfs" ino=980 res=0 errno=-22 [ 558.474902][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 558.515318][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3381'. [ 558.636148][T21018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.672153][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3381'. [ 558.802052][ T30] audit: type=1804 audit(1793822316.966:22): pid=21023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3381" name="/newroot/187/cgroup.controllers" dev="tmpfs" ino=980 res=1 errno=0 [ 558.848402][T21024] netlink: 'syz.1.3385': attribute type 49 has an invalid length. [ 559.189417][T21017] veth5: entered allmulticast mode [ 559.252068][T21017] bond3: (slave veth5): Enslaving as an active interface with an up link [ 559.378913][T21019] bond3 (unregistering): (slave veth5): Releasing backup interface [ 559.432557][T21019] bond3 (unregistering): Released all slaves [ 559.588960][T21024] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 559.607304][ T13] tipc: Left network mode [ 560.090438][T21067] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 560.125140][T21071] batman_adv: batadv0: Adding interface: wlan1 [ 560.125161][T21071] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.125192][T21071] batman_adv: batadv0: Interface activated: wlan1 [ 560.174162][T21067] bridge0: entered allmulticast mode [ 560.405442][T21077] syzkaller0: entered promiscuous mode [ 560.405470][T21077] syzkaller0: entered allmulticast mode [ 560.409600][T21080] netlink: 'syz.1.3396': attribute type 2 has an invalid length. [ 560.421686][T21072] tipc: Started in network mode [ 560.421714][T21072] tipc: Node identity 968b612e653d, cluster identity 4711 [ 560.421917][T21072] tipc: Enabled bearer , priority 0 [ 560.603402][T21068] tipc: Resetting bearer [ 560.651648][ T13] IPVS: stopping master sync thread 8602 ... [ 560.722969][T21068] tipc: Disabling bearer [ 560.770035][T21099] __nla_validate_parse: 3 callbacks suppressed [ 560.770058][T21099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3399'. [ 560.830979][T21099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3399'. [ 560.992841][T21104] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 561.011062][T21104] bond2 (unregistering): Released all slaves [ 561.229718][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 561.398344][T21116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3403'. [ 561.506865][T21121] macsec1: entered promiscuous mode [ 561.998096][ T13] veth1_to_team: left promiscuous mode [ 562.893902][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3411'. [ 563.110523][T21147] syzkaller0: MTU not usable for tipc bearer [ 563.110748][T21147] tipc: Enabling of bearer rejected, failed to enable media [ 563.156013][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3405'. [ 563.386450][T21198] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 563.589983][T21198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.590884][T21198] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 563.675380][T21198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.676871][T21198] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 563.775497][T21225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3419'. [ 563.782158][T21198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.788367][T21198] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 563.822697][ T13] IPVS: stop unused estimator thread 0... [ 563.911260][T21198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.926851][T21198] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 563.998375][T21198] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.002033][T21198] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 564.128938][T21198] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 565.016778][T21268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3426'. [ 565.347612][T19316] Bluetooth: hci5: command 0x0406 tx timeout [ 566.369508][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3438'. [ 566.472746][T21337] netlink: 'syz.1.3440': attribute type 3 has an invalid length. [ 566.702331][T21346] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.710708][ T7986] IPVS: starting estimator thread 0... [ 566.785428][ T5636] Bluetooth: hci0: command tx timeout [ 566.795059][T21351] IPVS: using max 29 ests per chain, 69600 per kthread [ 566.979860][T21363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.285237][T21378] openvswitch: netlink: Flow key attr not present in new flow. [ 567.289778][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'. [ 567.289806][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'. [ 567.362804][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3448'. [ 567.366460][T21380] netlink: 'syz.5.3448': attribute type 4 has an invalid length. [ 567.395268][T21389] netlink: 'syz.5.3448': attribute type 4 has an invalid length. [ 567.398298][T21386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3448'. [ 567.461467][ T30] audit: type=1804 audit(1793822325.626:23): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3449" name="/newroot/59/cgroup.controllers" dev="tmpfs" ino=323 res=1 errno=0 [ 567.461527][ T30] audit: type=1800 audit(1793822325.626:24): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3449" name="cgroup.controllers" dev="tmpfs" ino=323 res=0 errno=-22 [ 567.461876][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3450'. [ 567.497284][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3450'. [ 567.816184][T21404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3451'. [ 567.817494][T21408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3451'. [ 567.887102][T21412] Bluetooth: hci0: Invalid link address type 1 for 66:55:8e:3a:22:11 [ 568.183516][T21433] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 568.243784][T21435] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 568.294585][T21441] netlink: 'syz.0.3460': attribute type 1 has an invalid length. [ 568.649688][T21461] validate_nla: 1 callbacks suppressed [ 568.649714][T21461] netlink: 'syz.3.3464': attribute type 3 has an invalid length. [ 568.649729][T21461] netlink: 'syz.3.3464': attribute type 1 has an invalid length. [ 568.649744][T21461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3464'. [ 568.649760][T21461] NCSI netlink: No device for ifindex 0 [ 569.098155][T21479] 0·: renamed from hsr0 (while UP) [ 569.127420][T21479] 0·: entered allmulticast mode [ 569.127448][T21479] hsr_slave_0: entered allmulticast mode [ 569.127466][T21479] hsr_slave_1: entered allmulticast mode [ 569.128023][T21479] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 569.228881][T21489] netlink: 'syz.0.3474': attribute type 1 has an invalid length. [ 569.228906][T21489] netlink: 'syz.0.3474': attribute type 1 has an invalid length. [ 569.624756][T21513] netlink: 'syz.5.3480': attribute type 5 has an invalid length. [ 569.832498][T21525] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 569.962612][T21522] veth3: entered allmulticast mode [ 570.000710][T21522] bond2: (slave veth3): Enslaving as an active interface with an up link [ 570.038933][T21531] bond2 (unregistering): (slave veth3): Releasing backup interface [ 570.059103][T21531] bond2 (unregistering): Released all slaves [ 570.244965][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.245016][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.245048][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.245083][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.301564][T21542] dummy0: left promiscuous mode [ 570.343988][T21542] team0: Port device dummy0 removed [ 570.376868][T21542] bridge_slave_0: left allmulticast mode [ 570.376897][T21542] bridge_slave_0: left promiscuous mode [ 570.377120][T21542] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.430281][T21542] bridge_slave_1: left allmulticast mode [ 570.430312][T21542] bridge_slave_1: left promiscuous mode [ 570.430534][T21542] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.473216][T21542] bond0: (slave bond_slave_0): Releasing backup interface [ 570.496383][T21542] bond0: (slave bond_slave_1): Releasing backup interface [ 570.517244][T21542] team_slave_0: left promiscuous mode [ 570.518649][T21548] xt_REDIRECT: bad MAP_IPS. [ 570.537944][T21542] team0: Port device team_slave_0 removed [ 570.541610][T21542] team_slave_1: left promiscuous mode [ 570.566488][T21542] team0: Port device team_slave_1 removed [ 570.567529][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.567552][T21542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.572454][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.572479][T21542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.620599][T21559] xt_CT: No such helper "netbios-ns" [ 570.635863][T21542] batman_adv: batadv0: Interface deactivated: wlan1 [ 570.635879][T21542] batman_adv: batadv0: Removing interface: wlan1 [ 570.640654][T21542] bond1: (slave xfrm0): Releasing backup interface [ 570.640675][T21542] xfrm0: left promiscuous mode [ 570.655573][T21542] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 570.655595][T21542] batman_adv: batadv0: Removing interface: ip6gretap1 [ 570.677920][T21547] vlan0: entered promiscuous mode [ 570.942277][T21576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 571.032824][T21585] netlink: 'syz.1.3497': attribute type 1 has an invalid length. [ 571.372836][T21606] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 571.379408][T21606] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 571.471091][ T8832] IPVS: starting estimator thread 0... [ 571.559340][T21607] IPVS: using max 24 ests per chain, 57600 per kthread [ 571.812992][T21595] __nla_validate_parse: 9 callbacks suppressed [ 571.813015][T21595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3500'. [ 572.202682][T21620] bridge7: entered promiscuous mode [ 572.204501][T21620] bridge7: entered allmulticast mode [ 572.214103][T21620] batman_adv: batadv0: Adding interface: syzkaller0 [ 572.214122][T21620] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.214154][T21620] batman_adv: batadv0: Interface activated: syzkaller0 [ 572.277350][T21624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3507'. [ 572.736368][T21639] tipc: Started in network mode [ 572.736399][T21639] tipc: Node identity ded5f79488fe, cluster identity 4711 [ 572.736586][T21639] tipc: Enabled bearer , priority 0 [ 572.802871][T21641] syzkaller0: entered promiscuous mode [ 572.802899][T21641] syzkaller0: entered allmulticast mode [ 572.803577][T21641] tipc: Resetting bearer [ 572.821898][T21638] tipc: Resetting bearer [ 575.241790][T21638] tipc: Disabling bearer [ 575.312621][ T5769] tipc: Node number set to 1445722004 [ 575.397346][T21670] tipc: Enabled bearer , priority 0 [ 575.398531][T21670] syzkaller0: entered promiscuous mode [ 575.398565][T21670] syzkaller0: entered allmulticast mode [ 575.402260][T21670] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 575.478830][T21670] tipc: Resetting bearer [ 575.510719][T21669] tipc: Resetting bearer [ 575.556393][T21669] tipc: Disabling bearer [ 575.660271][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3522'. [ 575.828897][T21684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.900847][T21682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.932336][T21695] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3526'. [ 575.933340][T21700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.955474][T21700] sctp: Trying to GSO but underlying device doesn't support it. [ 575.963661][T21700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3527'. [ 576.050881][ T5636] block nbd3: Receive control failed (result -32) [ 576.139704][T21706] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3530'. [ 576.141048][T21706] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.141392][T21706] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.263585][T21712] netlink: 'syz.4.3532': attribute type 1 has an invalid length. [ 576.341115][T21712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.393947][T21723] ip_tables: iptables: counters copy to user failed while replacing table [ 576.403483][T21716] bond1: (slave gretap1): making interface the new active one [ 576.413694][T21716] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 576.536988][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 576.787370][T21733] veth2: entered allmulticast mode [ 576.824310][T21702] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 576.824340][T21702] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 577.405326][T21746] netlink: 'syz.1.3541': attribute type 1 has an invalid length. [ 577.609012][T21751] netlink: 'syz.5.3542': attribute type 1 has an invalid length. [ 578.067953][T21702] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 578.067982][T21702] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 578.074213][T21746] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 578.211554][T21751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 578.243576][T21753] bond3: (slave ip6erspan0): making interface the new active one [ 578.259896][T21753] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 578.280490][T21702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 578.280536][T21702] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 578.348352][T21762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'. [ 578.364922][T21762] dummy0: entered promiscuous mode [ 578.365942][T21762] macvlan2: entered promiscuous mode [ 578.368224][T21762] dummy0: left promiscuous mode [ 578.511189][T21702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 578.511225][T21702] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 578.644312][T21702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 578.644341][T21702] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 578.723454][T21777] netlink: 'syz.5.3552': attribute type 1 has an invalid length. [ 578.782238][T21780] rdma_rxe: rxe_newlink: failed to add wg0 [ 579.028795][T21795] netlink: 804 bytes leftover after parsing attributes in process `syz.1.3557'. [ 579.031204][T21795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3557'. [ 579.213117][T21802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3560'. [ 579.301839][T21806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3560'. [ 579.350376][T21809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3560'. [ 579.350420][T21809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3560'. [ 579.509592][T21806] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 579.718722][T21822] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3565'. [ 579.849142][ C1] vcan0: j1939_tp_rxtimer: 0xffff888087802000: rx timeout, send abort [ 579.901205][T21820] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 579.903560][T21820] bond7 (unregistering): Released all slaves [ 579.951659][T21826] tipc: MTU too low for tipc bearer [ 580.202155][T21830] Cannot find add_set index 0 as target [ 580.313415][T21839] netlink: 964 bytes leftover after parsing attributes in process `syz.5.3571'. [ 580.313442][T21839] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 580.349205][ C1] vcan0: j1939_tp_rxtimer: 0xffff888087802000: abort rx timeout. Force session deactivation [ 580.432071][T21845] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 580.443695][T21847] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 580.521816][T21845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.568938][T21847] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.666760][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 580.703752][T21860] veth0: entered promiscuous mode [ 580.706786][T21860] macvlan2: entered promiscuous mode [ 580.710822][T21860] veth0: left promiscuous mode [ 580.834202][T21871] ip_tables: iptables: counters copy to user failed while replacing table [ 581.178836][T21876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.191329][T21876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.505826][ T7990] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.506608][ T7990] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.506703][ T7986] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.506742][ T7986] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.858925][T21896] team0: No ports can be present during mode change [ 581.893393][T21904] veth0: Caught tx_queue_len zero misconfig [ 581.969334][T21907] xfrm0: entered allmulticast mode [ 581.969593][T21907] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 582.278503][T21916] netlink: 'syz.5.3589': attribute type 3 has an invalid length. [ 582.284337][T21916] syzkaller0: entered promiscuous mode [ 582.284357][T21916] syzkaller0: entered allmulticast mode [ 582.306360][ T7992] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.306607][ T7992] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.307293][ T7992] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.307326][ T7992] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.308574][T21920] pimreg0: tun_chr_ioctl cmd 1074025677 [ 582.308699][T21920] pimreg0: linktype set to 776 [ 582.664208][T21937] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.797275][T21940] ip_tables: iptables: counters copy to user failed while replacing table [ 582.824218][T21945] syzkaller1: entered promiscuous mode [ 582.824242][T21945] syzkaller1: entered allmulticast mode [ 583.255239][T21958] xfrm1: entered allmulticast mode [ 583.721229][T21971] xt_SECMARK: invalid mode: 9 [ 583.998656][T21909] NFSD: Failed to start, no listeners configured. [ 584.407816][T21983] netlink: 'syz.5.3608': attribute type 4 has an invalid length. [ 584.862831][ T6236] IPVS: starting estimator thread 0... [ 584.946649][T22013] IPVS: using max 23 ests per chain, 55200 per kthread [ 584.951808][T22019] __nla_validate_parse: 10 callbacks suppressed [ 584.951829][T22019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3616'. [ 584.951854][T22019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3616'. [ 585.058455][T22021] netlink: 'syz.5.3617': attribute type 1 has an invalid length. [ 585.179578][T22021] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3617'. [ 585.202251][T22023] bond4: (slave geneve2): making interface the new active one [ 585.216473][T22023] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 585.225677][T22021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.234782][ T8827] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 585.234830][ T8827] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 585.234865][ T8827] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 585.251885][ T8827] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 585.297824][T22025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'. [ 585.297855][T22025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3618'. [ 585.349858][T22025] bond7: invalid ARP target 0.0.0.0 specified for addition [ 585.349889][T22025] bond7: option arp_ip_target: invalid value (0) [ 585.349904][T22025] bond7: Removing last arp target with arp_interval on [ 585.382054][T22025] bond7 (unregistering): Released all slaves [ 585.614907][T22028] syzkaller1: entered promiscuous mode [ 585.614931][T22028] syzkaller1: entered allmulticast mode [ 586.064244][T22061] netlink: 'syz.0.3624': attribute type 1 has an invalid length. [ 586.064269][T22061] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3624'. [ 586.079808][T22061] netlink: 'syz.0.3624': attribute type 2 has an invalid length. [ 586.097048][T22065] netlink: 'syz.0.3624': attribute type 1 has an invalid length. [ 586.097070][T22065] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3624'. [ 586.108414][T22067] netlink: 'syz.0.3624': attribute type 2 has an invalid length. [ 586.230991][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3626'. [ 586.284506][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 586.428958][T22090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.443410][T22085] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 586.483622][T22090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.485541][T22089] SET target dimension over the limit! [ 587.077493][T22098] syzkaller0: entered promiscuous mode [ 587.077518][T22098] syzkaller0: entered allmulticast mode [ 587.219254][T22113] hsr0: entered promiscuous mode [ 587.219741][T22114] hsr0: entered allmulticast mode [ 587.219758][T22114] hsr_slave_0: entered allmulticast mode [ 587.219773][T22114] hsr_slave_1: entered allmulticast mode [ 587.221470][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3634'. [ 587.223262][T22113] hsr_slave_0: left promiscuous mode [ 587.224598][T22113] hsr_slave_1: left promiscuous mode [ 587.342561][T22113] hsr0 (unregistering): left promiscuous mode [ 587.342607][T22113] hsr0 (unregistering): left allmulticast mode [ 587.612710][T22131] macsec0: entered promiscuous mode [ 587.639740][T22131] veth1_macvtap: left promiscuous mode [ 587.703472][T22131] macsec0 (unregistering): left promiscuous mode [ 587.761011][T22138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.780121][T22138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.938767][T22145] netlink: 'syz.4.3643': attribute type 1 has an invalid length. [ 588.063977][T22152] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 588.294953][T22175] netlink: 'syz.4.3649': attribute type 2 has an invalid length. [ 588.448071][T22180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.451758][T22180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.604947][T22190] netlink: 'syz.5.3655': attribute type 21 has an invalid length. [ 588.605055][T22190] netlink: 'syz.5.3655': attribute type 1 has an invalid length. [ 588.807919][T22201] netlink: 'syz.4.3656': attribute type 4 has an invalid length. [ 588.808129][T22193] netlink: 'syz.4.3656': attribute type 4 has an invalid length. [ 589.337608][T22218] netlink: 'syz.3.3661': attribute type 1 has an invalid length. [ 589.381406][T22218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.397871][T22218] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 589.453713][T22230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.761852][T22246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.914072][T22264] IPVS: sync thread started: state = MASTER, mcast_ifn = nicvf0, syncid = 4, id = 0 [ 590.041414][T22270] ip_tables: iptables: counters copy to user failed while replacing table [ 590.044232][T22270] __nla_validate_parse: 8 callbacks suppressed [ 590.044252][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 590.078377][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 590.410013][T22289] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 590.410041][T22289] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3684'. [ 590.445320][T22289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3684'. [ 591.444410][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 591.455860][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3697'. [ 592.123993][T22369] netlink: 'syz.0.3702': attribute type 2 has an invalid length. [ 592.124023][T22369] nbd: illegal input index -2147221500 [ 592.168874][T22374] netlink: 820 bytes leftover after parsing attributes in process `syz.3.3703'. [ 592.230963][T22385] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 592.402843][T22388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3706'. [ 592.476254][T22371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.476294][T22371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.523704][T22386] veth0_to_bridge: entered promiscuous mode [ 592.523982][T22386] macvtap1: entered allmulticast mode [ 592.523998][T22386] veth0_to_bridge: entered allmulticast mode [ 592.601271][T22371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.601311][T22371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.693365][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3709'. [ 592.712472][T22371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.712511][T22371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.751306][T22398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3709'. [ 592.880208][T22371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.880247][T22371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.255460][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.255496][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.255598][ T7986] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.255625][ T7986] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.255660][ T7986] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.255684][ T7986] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.287880][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.287929][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.450076][T22428] validate_nla: 1 callbacks suppressed [ 593.450098][T22428] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 593.472485][T22428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.492018][T22428] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 594.116513][T22456] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 595.175964][T22496] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.604571][T22547] __nla_validate_parse: 9 callbacks suppressed [ 596.604595][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 597.009841][T22557] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3752'. [ 597.336662][T22569] sctp: [Deprecated]: syz.0.3751 (pid 22569) Use of int in max_burst socket option. [ 597.336662][T22569] Use struct sctp_assoc_value instead [ 597.364275][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3754'. [ 597.863391][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 597.863417][T22580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3756'. [ 597.911077][T22581] 8021q: VLANs not supported on lo [ 598.015054][T22589] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3759'. [ 598.031494][T22586] netlink: 832 bytes leftover after parsing attributes in process `syz.0.3758'. [ 598.102104][T22591] pim6reg1: entered promiscuous mode [ 598.102129][T22591] pim6reg1: entered allmulticast mode [ 598.852158][T22616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.952635][T22627] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 599.009675][T22616] syzkaller0: entered promiscuous mode [ 599.009700][T22616] syzkaller0: entered allmulticast mode [ 599.290621][T22636] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3773'. [ 599.290663][T22636] netlink: 336 bytes leftover after parsing attributes in process `syz.4.3773'. [ 599.290679][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'. [ 600.682184][T22676] workqueue: Failed to create a rescuer kthread for wq "nfc24_nci_cmd_wq": -EINTR [ 602.012069][T22806] syzkaller0: entered promiscuous mode [ 602.012101][T22806] syzkaller0: entered allmulticast mode [ 602.177640][T22816] netlink: 'syz.5.3792': attribute type 1 has an invalid length. [ 602.443868][T22827] netlink: 'syz.5.3792': attribute type 10 has an invalid length. [ 602.443893][T22827] __nla_validate_parse: 4 callbacks suppressed [ 602.443905][T22827] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3792'. [ 602.662347][T22839] ip_tables: iptables: counters copy to user failed while replacing table [ 605.133605][ T3670] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 605.161869][T22857] netlink: 'syz.3.3798': attribute type 1 has an invalid length. [ 605.273827][T22864] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 605.274307][T22864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3800'. [ 605.297617][T22864] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 605.490265][T22868] bridge9: entered allmulticast mode [ 605.931087][T22891] ip_tables: iptables: counters copy to user failed while replacing table [ 605.939998][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3805'. [ 605.978770][T22893] netlink: 'syz.5.3806': attribute type 4 has an invalid length. [ 605.981185][T22893] netlink: 'syz.5.3806': attribute type 4 has an invalid length. [ 606.291008][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3807'. [ 606.646815][T22916] netlink: 'syz.5.3809': attribute type 3 has an invalid length. [ 606.646841][T22916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3809'. [ 606.778194][T22922] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 606.779451][T22922] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 606.782518][T22922] openvswitch: netlink: Flow key attribute not present in set flow. [ 607.073981][T22927] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3814'. [ 607.084241][T22927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3814'. [ 607.105223][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 607.118215][T22927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3814'. [ 607.182628][T22930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3815'. [ 607.478881][T22945] ip6gre1: entered allmulticast mode [ 607.720874][T22955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3821'. [ 607.803332][T22964] Bluetooth: hci0: unsupported parameter 5135 [ 607.803360][T22964] Bluetooth: hci0: unsupported parameter 65 [ 607.803374][T22964] Bluetooth: hci0: unsupported parameter 5135 [ 607.803387][T22964] Bluetooth: hci0: unsupported parameter 65 [ 607.996823][T22972] netlink: 'syz.4.3826': attribute type 1 has an invalid length. [ 608.126811][T22976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3827'. [ 608.286859][T22981] bridge_slave_0: left allmulticast mode [ 608.286889][T22981] bridge_slave_0: left promiscuous mode [ 608.287146][T22981] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.316050][T22981] bridge_slave_1: left allmulticast mode [ 608.316078][T22981] bridge_slave_1: left promiscuous mode [ 608.316518][T22981] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.346903][T22981] bond0: (slave bond_slave_0): Releasing backup interface [ 608.349912][T22981] bond0: (slave bond_slave_1): Releasing backup interface [ 608.371364][T22981] team0: Port device team_slave_0 removed [ 608.382121][T22981] team0: Port device team_slave_1 removed [ 608.382562][T22981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.384511][T22981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.407649][T22981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 608.410611][T22982] vlan0: entered promiscuous mode [ 608.437977][T22981] tipc: Enabled bearer , priority 0 [ 608.848553][T23007] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3837'. [ 608.862101][T23000] bond3: entered allmulticast mode [ 608.862600][T23000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 608.918819][T23000] ip6gretap1: entered allmulticast mode [ 608.919603][T23000] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 608.954837][T23000] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3836'. [ 608.957607][T23000] bond0 (unregistering): Released all slaves [ 608.984143][T23011] netlink: 'syz.3.3839': attribute type 3 has an invalid length. [ 608.984194][T23011] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3839'. [ 609.005720][ T7074] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 609.069341][T19316] block nbd4: Receive control failed (result -32) [ 609.070144][ T5636] block nbd4: Receive control failed (result -32) [ 609.118995][T23006] syzkaller0: left promiscuous mode [ 609.119020][T23006] syzkaller0: left allmulticast mode [ 609.165263][ T8832] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 609.269099][T23025] syzkaller1: entered promiscuous mode [ 609.269127][T23025] syzkaller1: entered allmulticast mode [ 609.355219][T23026] syzkaller1: tun_chr_ioctl cmd 3229636669 [ 609.355559][T23026] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 609.834064][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 609.844451][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 609.870777][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 609.874233][T23051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3849'. [ 609.953644][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 609.968915][T23056] netlink: 'syz.3.3851': attribute type 2 has an invalid length. [ 613.113760][T23075] netlink: 'syz.3.3858': attribute type 1 has an invalid length. [ 613.113783][T23075] __nla_validate_parse: 1 callbacks suppressed [ 613.113793][T23075] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.3858'. [ 613.127302][T23075] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3858'. [ 613.141215][T23075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3858'. [ 613.223039][T23083] netlink: 'syz.5.3860': attribute type 1 has an invalid length. [ 613.408293][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 613.777759][T23100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 613.777941][T23101] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 613.790009][T23103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 613.790127][T23104] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 614.270749][T23127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.588306][T23137] ipt_ECN: cannot use operation on non-tcp rule [ 614.602326][T23141] ipt_ECN: cannot use operation on non-tcp rule [ 614.602512][T23132] xfrm0: Caught tx_queue_len zero misconfig [ 614.639056][T23135] vlan2: entered promiscuous mode [ 614.639081][T23135] team0: entered promiscuous mode [ 614.639094][T23135] veth1_to_hsr: entered promiscuous mode [ 614.717643][T23132] macvlan3: entered allmulticast mode [ 614.717669][T23132] bridge0: entered allmulticast mode [ 614.918595][T23143] Set syz1 is full, maxelem 1029 reached [ 614.972547][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 614.981539][T23143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 615.004273][T23145] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3872'. [ 615.101291][T23153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3873'. [ 615.139632][T23148] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 615.279383][T23163] tipc: Enabling of bearer rejected, failed to enable media [ 615.322647][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3878'. [ 615.339112][T23163] x_tables: duplicate underflow at hook 1 [ 615.612265][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3880'. [ 615.723347][T23194] netlink: 'syz.5.3885': attribute type 1 has an invalid length. [ 615.762846][T23194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.834194][T23194] bond5: (slave gretap0): making interface the new active one [ 615.844192][T23194] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 615.950639][T23194] openvswitch: netlink: IP tunnel dst address not specified [ 616.441387][T23226] Bluetooth: ISO socket layer initialized [ 616.542172][T23228] netlink: 'syz.1.3895': attribute type 11 has an invalid length. [ 616.684774][T23233] netlink: 'syz.5.3897': attribute type 4 has an invalid length. [ 616.964546][T23250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.875441][T23294] ip_tables: iptables: counters copy to user failed while replacing table [ 617.967656][T23301] syzkaller0: entered promiscuous mode [ 617.967683][T23301] syzkaller0: entered allmulticast mode [ 618.095861][T23320] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 618.309678][T23320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.330058][T23321] bond2: (slave ip6erspan0): making interface the new active one [ 618.331269][T23321] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 618.371314][T23329] netlink: zone id is out of range [ 618.453665][T23335] __nla_validate_parse: 10 callbacks suppressed [ 618.453757][T23335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'. [ 618.693580][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3931'. [ 618.693606][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3931'. [ 618.693633][T23343] netlink: 'syz.1.3931': attribute type 14 has an invalid length. [ 619.068493][T23361] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3935'. [ 619.238930][T23368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 619.584088][T23352] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 620.523563][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3948'. [ 620.523835][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3948'. [ 620.524070][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3948'. [ 620.524368][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3948'. [ 620.529230][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3948'. [ 621.627515][T23448] sctp: [Deprecated]: syz.3.3954 (pid 23448) Use of int in maxseg socket option. [ 621.627515][T23448] Use struct sctp_assoc_value instead [ 622.939245][T23508] net_ratelimit: 1 callbacks suppressed [ 622.940238][T23508] ip_tables: iptables: counters copy to user failed while replacing table [ 623.445324][T23523] bond3 (unregistering): Released all slaves [ 623.468564][T23528] ip_tables: iptables: counters copy to user failed while replacing table [ 623.472326][T23527] ip_tables: iptables: counters copy to user failed while replacing table [ 623.498564][T23527] xt_hashlimit: size too large, truncated to 1048576 [ 623.881335][T23537] __nla_validate_parse: 33 callbacks suppressed [ 623.881361][T23537] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3975'. [ 624.022736][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 624.022776][T23547] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3978'. [ 624.022792][T23547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3978'. [ 624.073307][T23551] Bluetooth: hci0: unsupported parameter 5161 [ 624.073335][T23551] Bluetooth: hci0: unsupported parameter 8192 [ 624.073347][T23551] Bluetooth: hci0: unsupported parameter 5161 [ 624.073360][T23551] Bluetooth: hci0: unsupported parameter 8192 [ 624.073874][T23550] netlink: 'syz.3.3979': attribute type 10 has an invalid length. [ 624.099242][T23559] Bluetooth: hci0: unsupported parameter 5161 [ 624.099264][T23559] Bluetooth: hci0: unsupported parameter 8192 [ 624.099275][T23559] Bluetooth: hci0: unsupported parameter 5161 [ 624.099287][T23559] Bluetooth: hci0: unsupported parameter 8192 [ 624.135508][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 624.135534][T23552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3978'. [ 624.163776][T23552] netlink: 'syz.4.3978': attribute type 3 has an invalid length. [ 624.163799][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 624.272792][T23564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3979'. [ 624.582537][T23576] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.3980'. [ 624.746050][T23580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3983'. [ 624.920212][T23587] tipc: Enabling of bearer rejected, failed to enable media [ 625.877331][T23640] x_tables: duplicate entry at hook 2 [ 626.143959][T23653] pim6reg1: entered promiscuous mode [ 626.143985][T23653] pim6reg1: entered allmulticast mode [ 626.441179][T23663] 8021q: adding VLAN 0 to HW filter on device bond7 [ 626.472878][T23663] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 626.646964][T23672] sctp: [Deprecated]: syz.1.4009 (pid 23672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.646964][T23672] Use struct sctp_sack_info instead [ 626.688242][T23678] netlink: 'syz.1.4009': attribute type 1 has an invalid length. [ 626.790031][T23663] bond7 (unregistering): (slave geneve3): Releasing backup interface [ 626.971390][T23663] bond7 (unregistering): Released all slaves [ 627.213530][T23691] tipc: Enabling of bearer rejected, media not registered [ 627.289733][T23695] netlink: 'syz.4.4014': attribute type 8 has an invalid length. [ 627.476732][T23702] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 627.494132][T23702] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 627.507948][T23703] syzkaller0: entered promiscuous mode [ 627.507973][T23703] syzkaller0: entered allmulticast mode [ 628.577727][T23739] xt_hashlimit: invalid rate [ 628.578266][T23739] xt_hashlimit: invalid rate [ 628.578381][T23739] xt_hashlimit: invalid rate [ 628.578486][T23739] xt_hashlimit: invalid rate [ 628.578593][T23739] xt_hashlimit: invalid rate [ 628.578699][T23739] xt_hashlimit: invalid rate [ 628.578802][T23739] xt_hashlimit: invalid rate [ 628.583341][T23739] xt_hashlimit: invalid rate [ 628.583462][T23739] xt_hashlimit: invalid rate [ 628.583578][T23739] xt_hashlimit: invalid rate [ 628.654467][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.654874][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.655025][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.655154][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.655292][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.655420][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.655548][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.665102][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.665260][T23739] xt_MASQUERADE: bad MAP_IPS. [ 628.665392][T23739] xt_MASQUERADE: bad MAP_IPS. [ 629.267619][T23746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 629.293767][T23746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 629.816974][T23760] openvswitch: netlink: Message has 4613 unknown bytes. [ 629.850767][T23760] __nla_validate_parse: 10 callbacks suppressed [ 629.850793][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4033'. [ 629.921664][T23763] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 629.988772][T23763] bond3: entered promiscuous mode [ 629.989298][T23763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 630.061711][T23763] veth7: entered promiscuous mode [ 630.064054][T23763] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 630.142643][T23764] veth9: entered promiscuous mode [ 630.149076][T23764] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 630.360301][T23778] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.361361][T23779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4038'. [ 630.392416][T23778] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.727678][T23787] syzkaller0: entered promiscuous mode [ 630.727707][T23787] syzkaller0: entered allmulticast mode [ 632.684055][T23904] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4050'. [ 632.703226][T23904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4050'. [ 634.410597][T23903] xfrm0: entered allmulticast mode [ 634.453555][T23903] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 634.741388][T23924] syzkaller1: entered promiscuous mode [ 634.741413][T23924] syzkaller1: entered allmulticast mode [ 634.781922][T23917] netlink: 'syz.4.4053': attribute type 1 has an invalid length. [ 634.881776][T23922] batadv_slave_1: entered promiscuous mode [ 634.913900][T23923] batadv_slave_1: left promiscuous mode [ 635.740505][T23967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.071636][T23988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'. [ 636.194846][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 636.218651][T23986] tcf_pedit_act: 22 callbacks suppressed [ 636.218672][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218685][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218696][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218706][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218715][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218724][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218733][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218743][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218752][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218761][T23986] tc action pedit 'at' offset 9 out of bounds [ 636.218795][T23986] TC_ACT_REPEAT abuse ? [ 636.469580][T24006] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4076'. [ 637.065480][T24042] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.4084'. [ 637.096561][T24045] xt_hashlimit: size too large, truncated to 1048576 [ 637.096582][T24045] xt_hashlimit: max too large, truncated to 1048576 [ 637.121418][T24030] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 637.241467][T24048] tls_set_device_offload_rx: netdev not found [ 637.691233][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4093'. [ 637.779093][T24077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4093'. [ 637.932253][T24087] netlink: 'syz.3.4094': attribute type 6 has an invalid length. [ 637.932287][T24087] netlink: 'syz.3.4094': attribute type 6 has an invalid length. [ 637.938355][T24087] netlink: 37 bytes leftover after parsing attributes in process `syz.3.4094'. [ 637.938396][T24087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.125321][T24100] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4095'. [ 638.410542][T24112] netlink: 'syz.4.4095': attribute type 4 has an invalid length. [ 638.720604][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4094'. [ 638.935943][T24113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 639.221096][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 639.420253][T24133] netlink: 'syz.3.4100': attribute type 11 has an invalid length. [ 639.862102][T24163] openvswitch: netlink: Flow key attr not present in new flow. [ 639.862729][T24163] sctp: [Deprecated]: syz.1.4107 (pid 24163) Use of int in maxseg socket option. [ 639.862729][T24163] Use struct sctp_assoc_value instead [ 639.986285][T24167] netlink: 'syz.5.4106': attribute type 1 has an invalid length. [ 640.160185][T24164] x_tables: ip_tables: osf match: only valid for protocol 6 [ 640.180925][T24171] bond5: entered allmulticast mode [ 640.182765][T24164] IPVS: length: 229 != 24 [ 640.353063][T24175] macvlan2: entered promiscuous mode [ 640.353088][T24175] macvlan2: entered allmulticast mode [ 640.354165][T24175] bond5: entered promiscuous mode [ 640.360376][T24175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 640.386970][T24175] bond5: left promiscuous mode [ 640.419371][T24187] netlink: 'syz.0.4110': attribute type 4 has an invalid length. [ 640.880345][T24203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.886166][T24203] xt_LOG: level 16 >= 8 [ 641.083728][T24218] __nla_validate_parse: 11 callbacks suppressed [ 641.083754][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4122'. [ 641.083771][T24218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4122'. [ 641.122357][T24222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4123'. [ 641.163811][T24224] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4121'. [ 641.291062][T24229] syzkaller1: entered promiscuous mode [ 641.291087][T24229] syzkaller1: entered allmulticast mode [ 641.867082][T24246] No such timeout policy "syz0" [ 642.996794][T24259] syzkaller1: entered promiscuous mode [ 642.996823][T24259] syzkaller1: entered allmulticast mode [ 643.057861][T24257] netlink: 'syz.4.4133': attribute type 2 has an invalid length. [ 643.423862][T24277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4137'. [ 643.451400][T24278] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4137'. [ 644.267604][T24309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4143'. [ 644.637217][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 644.696929][T24320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 644.984315][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4152'. [ 645.013955][T24335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4152'. [ 645.305554][T24355] netlink: 'syz.3.4156': attribute type 12 has an invalid length. [ 645.305578][T24355] netlink: 'syz.3.4156': attribute type 29 has an invalid length. [ 645.414519][T24353] TCP: TCP_TX_DELAY enabled [ 645.626016][T24367] IPVS: Scheduler module ip_vs_mh not found [ 645.655991][T24367] xt_hashlimit: size too large, truncated to 1048576 [ 645.751675][T24366] IPVS: Scheduler module ip_vs_mh not found [ 646.328510][T24397] __nla_validate_parse: 12 callbacks suppressed [ 646.328533][T24397] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4162'. [ 646.399409][T24398] syzkaller0: entered promiscuous mode [ 646.399434][T24398] syzkaller0: entered allmulticast mode [ 646.473987][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'. [ 646.581204][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'. [ 646.581234][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'. [ 646.693614][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4173'. [ 646.705102][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4173'. [ 646.728930][T24413] FAULT_INJECTION: forcing a failure. [ 646.728930][T24413] name failslab, interval 1, probability 0, space 0, times 0 [ 646.728959][T24413] CPU: 0 UID: 0 PID: 24413 Comm: syz.0.4173 Not tainted syzkaller #0 PREEMPT(full) [ 646.728978][T24413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 646.728989][T24413] Call Trace: [ 646.728996][T24413] [ 646.729003][T24413] dump_stack_lvl+0xe8/0x150 [ 646.729035][T24413] should_fail_ex+0x3eb/0x540 [ 646.729062][T24413] should_failslab+0xa8/0x100 [ 646.729088][T24413] __kmalloc_cache_noprof+0x9e/0x600 [ 646.729110][T24413] ? basic_change+0x2e1/0xfc0 [ 646.729130][T24413] ? basic_change+0x2e1/0xfc0 [ 646.729161][T24413] basic_change+0x2e1/0xfc0 [ 646.729194][T24413] ? __pfx_basic_change+0x10/0x10 [ 646.729236][T24413] tc_new_tfilter+0x1324/0x1900 [ 646.729284][T24413] ? __pfx_tc_new_tfilter+0x10/0x10 [ 646.729306][T24413] ? __dev_queue_xmit+0x29b/0x3920 [ 646.729342][T24413] ? lock_acquire+0x115/0x350 [ 646.729378][T24413] ? __pfx_tc_new_tfilter+0x10/0x10 [ 646.729401][T24413] rtnetlink_rcv_msg+0x802/0xc00 [ 646.729422][T24413] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 646.729439][T24413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.729458][T24413] ? __copy_skb_header+0xa3/0x4a0 [ 646.729488][T24413] netlink_rcv_skb+0x226/0x4a0 [ 646.729513][T24413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.729531][T24413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.729568][T24413] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.729590][T24413] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.729619][T24413] netlink_unicast+0x8ef/0xa80 [ 646.729658][T24413] netlink_sendmsg+0x7f0/0xb20 [ 646.729688][T24413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.729715][T24413] ? aa_sock_msg_perm+0x144/0x210 [ 646.729737][T24413] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.729764][T24413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.729786][T24413] sock_sendmsg_nosec+0x14e/0x190 [ 646.729811][T24413] ____sys_sendmsg+0x54e/0x850 [ 646.729834][T24413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.729862][T24413] ? import_iovec+0x73/0xa0 [ 646.729887][T24413] ___sys_sendmsg+0x2a5/0x360 [ 646.729910][T24413] ? __lock_acquire+0x747/0x2de0 [ 646.729935][T24413] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.729989][T24413] ? __fget_files+0x3a2/0x420 [ 646.730011][T24413] ? __fget_files+0x2a/0x420 [ 646.730040][T24413] __x64_sys_sendmsg+0x1b1/0x290 [ 646.730061][T24413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.730100][T24413] do_syscall_64+0x166/0x520 [ 646.730120][T24413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.730137][T24413] ? clear_bhb_loop+0x70/0xc0 [ 646.730159][T24413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.730175][T24413] RIP: 0033:0x7f24a519fb19 [ 646.730193][T24413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.730208][T24413] RSP: 002b:00007f24a5fbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.730228][T24413] RAX: ffffffffffffffda RBX: 00007f24a5425fa0 RCX: 00007f24a519fb19 [ 646.730240][T24413] RDX: 0000000000040000 RSI: 0000200000000380 RDI: 0000000000000003 [ 646.730251][T24413] RBP: 00007f24a5fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 646.730262][T24413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.730272][T24413] R13: 00007f24a5426038 R14: 00007f24a5425fa0 R15: 00007ffceaa72d88 [ 646.730302][T24413] [ 648.090436][T24461] openvswitch: netlink: Actions may not be safe on all matching packets [ 648.180239][T24471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 648.185915][T24471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4190'. [ 648.220873][T24470] geneve4: entered promiscuous mode [ 648.281968][T24471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4190'. [ 648.358225][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 648.365948][T24480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4193'. [ 648.833159][T24506] pimreg: entered allmulticast mode [ 649.128647][T24522] netlink: 'syz.1.4200': attribute type 1 has an invalid length. [ 649.282322][T24528] bond3: option mode: unable to set because the bond device has slaves [ 649.486335][T24533] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 650.242506][T24575] openvswitch: netlink: Actions may not be safe on all matching packets [ 650.264177][T24575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.288108][T24575] netlink: 'syz.1.4213': attribute type 23 has an invalid length. [ 650.546777][T24592] netlink: 'syz.4.4215': attribute type 1 has an invalid length. [ 650.694206][T24601] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.807472][T24579] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.810610][T24579] bond5: (slave bond6): making interface the new active one [ 650.812585][T24579] bond5: (slave bond6): Enslaving as an active interface with an up link [ 650.843707][T24598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 650.851466][T24598] bond5: (slave bond7): Enslaving as a backup interface with an up link [ 650.894856][T24589] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 650.910642][T24606] 8021q: adding VLAN 0 to HW filter on device bond5 [ 651.458061][T24640] netlink: 'syz.4.4226': attribute type 11 has an invalid length. [ 651.458088][T24640] __nla_validate_parse: 11 callbacks suppressed [ 651.458100][T24640] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4226'. [ 651.842327][T24637] netlink: 'syz.4.4226': attribute type 29 has an invalid length. [ 653.792005][T24649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.333789][T24681] Bluetooth: MGMT ver 1.23 [ 654.685671][T24697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.798728][T24701] tipc: Enabled bearer , priority 0 [ 654.819463][T24701] tipc: Resetting bearer [ 654.838018][T24689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 654.842706][T24689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4236'. [ 654.935359][T24707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.117096][ T30] audit: type=1800 audit(1793822413.286:25): pid=24715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4245" name="memory.events" dev="tmpfs" ino=1419 res=0 errno=-22 [ 655.356116][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.377799][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.377967][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.378159][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.378320][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.378484][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.378645][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.378809][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.378974][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.382206][T24727] netlink: 'syz.4.4249': attribute type 10 has an invalid length. [ 655.805228][ T7231] tipc: Node number set to 4088815918 [ 655.989635][T24748] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4258'. [ 655.989660][T24748] tc_dump_action: action bad kind [ 656.124004][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'. [ 656.124189][T24756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.228699][T24756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.229786][ T7994] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 656.265416][T24764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4259'. [ 656.668762][T24783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4263'. [ 659.075259][T24757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.396512][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4270'. [ 659.402874][T24812] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 659.403396][T24810] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4272'. [ 659.496878][T24809] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4271'. [ 659.602080][T24818] dvmrp0: entered allmulticast mode [ 659.602279][T24809] syzkaller0: left promiscuous mode [ 659.602298][T24809] syzkaller0: left allmulticast mode [ 659.610812][T24818] dvmrp0: left allmulticast mode [ 659.621569][T24809] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4271'. [ 659.897630][T24823] dvmrp0: entered allmulticast mode [ 660.426482][T24850] validate_nla: 25 callbacks suppressed [ 660.426506][T24850] netlink: 'syz.1.4283': attribute type 5 has an invalid length. [ 660.800191][T24866] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4285'. [ 660.845381][T24871] ip_tables: iptables: counters copy to user failed while replacing table [ 660.895887][T24871] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 661.203916][T24851] netlink: 'syz.0.4281': attribute type 2 has an invalid length. [ 661.203939][T24851] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4281'. [ 661.331732][T24879] netlink: 'syz.3.4288': attribute type 29 has an invalid length. [ 661.996247][T24897] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4293'. [ 661.996287][T24897] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4293'. [ 661.996303][T24897] netlink: 'syz.5.4293': attribute type 5 has an invalid length. [ 661.996334][T24897] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4293'. [ 664.579199][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4298'. [ 664.581900][T24920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4298'. [ 664.805054][T24936] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 664.877835][T24938] netlink: 'syz.0.4305': attribute type 1 has an invalid length. [ 664.899719][T24938] batman_adv: batadv0: Adding interface: dummy0 [ 664.899740][T24938] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.899773][T24938] batman_adv: batadv0: Interface activated: dummy0 [ 664.963073][T24938] Bluetooth: MGMT ver 1.23 [ 665.003495][T24938] batadv0: mtu less than device minimum [ 665.005357][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.006844][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.008326][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.009774][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.011423][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.012881][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.014362][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.066496][T24943] netlink: 'syz.0.4305': attribute type 10 has an invalid length. [ 665.066517][T24943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4305'. [ 665.117589][T24943] batadv0: entered promiscuous mode [ 665.117618][T24943] batadv0: entered allmulticast mode [ 665.118528][T24943] bridge0: port 3(batadv0) entered blocking state [ 665.118651][T24943] bridge0: port 3(batadv0) entered disabled state [ 665.133303][T24944] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4308'. [ 665.133849][T24938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.133862][T24938] IPv6: NLM_F_CREATE should be set when creating new route [ 665.133906][T24938] IPv6: NLM_F_CREATE should be set when creating new route [ 665.181575][T24944] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4308'. [ 665.182341][T24943] batadv0: failed to initialize vlan filtering on this port [ 665.366900][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4312'. [ 665.371585][T24956] veth10: entered allmulticast mode [ 665.416855][T24968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'. [ 665.923186][T24978] netlink: 'syz.5.4313': attribute type 1 has an invalid length. [ 666.392215][T24968] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 666.459179][T24970] veth5: entered allmulticast mode [ 666.570580][T24985] net_ratelimit: 14 callbacks suppressed [ 666.570605][T24985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 667.054510][T25021] __nla_validate_parse: 5 callbacks suppressed [ 667.054535][T25021] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4325'. [ 667.078772][T25021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4325'. [ 667.098729][T25021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4325'. [ 667.130365][T25021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4325'. [ 667.144990][ T7994] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.155222][ T7994] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.157103][ T7984] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.157165][ T7984] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.211418][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4327'. [ 667.214302][T25023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4327'. [ 667.340759][T25027] xt_hashlimit: size too large, truncated to 1048576 [ 667.342534][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4326'. [ 667.392590][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 667.409440][T25029] TC_ACT_REPEAT abuse ? [ 667.431755][T25029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4328'. [ 667.433019][T25029] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4328'. [ 667.702173][T25041] netlink: 'syz.5.4333': attribute type 12 has an invalid length. [ 667.875707][T25045] pim6reg: entered allmulticast mode [ 667.885269][T25045] xt_nfacct: accounting object `syz0' does not exist [ 667.886498][T25044] pim6reg: left allmulticast mode [ 668.262939][T25057] block nbd0: reconnected socket [ 668.332543][ T5636] block nbd0: Receive control failed (result -32) [ 669.265429][ C1] TC_ACT_REPEAT abuse ? [ 671.345311][ C1] TC_ACT_REPEAT abuse ? [ 673.425129][ C1] TC_ACT_REPEAT abuse ? [ 674.467787][ C1] TC_ACT_REPEAT abuse ? [ 676.550961][ C0] TC_ACT_REPEAT abuse ? [ 678.626890][ C1] TC_ACT_REPEAT abuse ? [ 680.706453][ C1] TC_ACT_REPEAT abuse ? [ 681.756459][ C1] TC_ACT_REPEAT abuse ? [ 683.825338][ C0] TC_ACT_REPEAT abuse ? [ 685.905035][ C1] TC_ACT_REPEAT abuse ? [ 687.985009][ C1] TC_ACT_REPEAT abuse ? [ 689.035234][ C1] TC_ACT_REPEAT abuse ? [ 691.106758][ C1] TC_ACT_REPEAT abuse ? [ 693.185531][ C1] TC_ACT_REPEAT abuse ? [ 695.264980][ C1] TC_ACT_REPEAT abuse ? [ 696.315002][ C1] TC_ACT_REPEAT abuse ? [ 698.386385][ C0] TC_ACT_REPEAT abuse ? [ 700.465002][ C1] TC_ACT_REPEAT abuse ? [ 702.545098][ C1] TC_ACT_REPEAT abuse ? [ 703.587615][ C0] TC_ACT_REPEAT abuse ? [ 705.665937][ C0] TC_ACT_REPEAT abuse ? [ 707.746602][ C1] TC_ACT_REPEAT abuse ? [ 709.825413][ C1] TC_ACT_REPEAT abuse ? [ 710.866353][ C0] TC_ACT_REPEAT abuse ? [ 712.947944][ C0] TC_ACT_REPEAT abuse ? [ 715.025051][ C1] TC_ACT_REPEAT abuse ? [ 717.105117][ C1] TC_ACT_REPEAT abuse ? [ 718.148742][ C1] TC_ACT_REPEAT abuse ? [ 720.235017][ C1] TC_ACT_REPEAT abuse ? [ 722.306436][ C1] TC_ACT_REPEAT abuse ? [ 724.385003][ C1] TC_ACT_REPEAT abuse ? [ 725.425189][ C0] TC_ACT_REPEAT abuse ? [ 727.505288][ C0] TC_ACT_REPEAT abuse ? [ 729.585080][ C1] TC_ACT_REPEAT abuse ? [ 731.665285][ C1] TC_ACT_REPEAT abuse ? [ 732.708029][ C0] TC_ACT_REPEAT abuse ? [ 734.790181][ C1] TC_ACT_REPEAT abuse ? [ 736.865158][ C1] TC_ACT_REPEAT abuse ? [ 738.944926][ C1] TC_ACT_REPEAT abuse ? [ 739.985812][ C0] TC_ACT_REPEAT abuse ? [ 742.066058][ C0] TC_ACT_REPEAT abuse ? [ 744.145117][ C1] TC_ACT_REPEAT abuse ? [ 746.225067][ C1] TC_ACT_REPEAT abuse ? [ 747.270266][ C0] TC_ACT_REPEAT abuse ? [ 747.618586][ T7984] C: left allmulticast mode [ 747.880683][ T7984] bond15 (unregistering): (slave gretap0): Releasing active interface [ 747.959871][ T7984] bond13 (unregistering): (slave bridge8): Releasing backup interface [ 747.978211][ T7984] bond1 (unregistering): Released all slaves [ 747.990631][ T7984] bond2 (unregistering): Released all slaves [ 748.001932][ T7984] bond3 (unregistering): Released all slaves [ 748.015884][ T7984] bond4 (unregistering): Released all slaves [ 748.033684][ T7984] bond5 (unregistering): Released all slaves [ 748.045871][ T7984] bond6 (unregistering): Released all slaves [ 748.052854][ T7984] bond7 (unregistering): Released all slaves [ 748.065607][ T7984] bond8 (unregistering): Released all slaves [ 748.095158][ T7984] bond17 (unregistering): (slave bond0): Releasing backup interface [ 748.096382][ T7984] bond0 (unregistering): Released all slaves [ 748.110271][ T7984] bond9 (unregistering): Released all slaves [ 748.126155][ T7984] bond10 (unregistering): Released all slaves [ 748.134307][ T7984] bond11 (unregistering): Released all slaves [ 748.160940][ T7984] bond12 (unregistering): Released all slaves [ 748.172307][ T7984] bond13 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 748.173929][ T7984] bond13 (unregistering): Released all slaves [ 748.193845][ T7984] bond14 (unregistering): Released all slaves [ 748.209410][ T7984] bond15 (unregistering): Released all slaves [ 748.218264][ T7984] bond16 (unregistering): Released all slaves [ 748.235860][ T7984] bond17 (unregistering): Released all slaves [ 748.480512][ T7984] : left promiscuous mode [ 748.551174][ T7984] tipc: Disabling bearer [ 748.551345][ T7984] tipc: Disabling bearer [ 748.552763][ T7984] tipc: Disabling bearer [ 748.552997][ T7984] tipc: Left network mode [ 748.678848][ T7984] IPVS: stopping backup sync thread 17537 ... [ 748.927636][ T7984] [ 748.929980][ T7984] ====================================================== [ 748.936979][ T7984] WARNING: possible circular locking dependency detected [ 748.943977][ T7984] syzkaller #0 Not tainted [ 748.948381][ T7984] ------------------------------------------------------ [ 748.955412][ T7984] kworker/u8:17/7984 is trying to acquire lock: [ 748.961660][ T7984] ffff88801cec4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 748.972207][ T7984] [ 748.972207][ T7984] but task is already holding lock: [ 748.979569][ T7984] ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 748.989148][ T7984] [ 748.989148][ T7984] which lock already depends on the new lock. [ 748.989148][ T7984] [ 748.999550][ T7984] [ 748.999550][ T7984] the existing dependency chain (in reverse order) is: [ 749.008559][ T7984] [ 749.008559][ T7984] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 749.016551][ T7984] down_write+0x91/0x200 [ 749.021322][ T7984] kernfs_add_one+0x41/0x510 [ 749.026434][ T7984] kernfs_create_dir_ns+0x18c/0x220 [ 749.032153][ T7984] internal_create_group+0x440/0x1180 [ 749.038053][ T7984] cpuhp_invoke_callback+0x434/0x810 [ 749.043868][ T7984] cpuhp_issue_call+0x3f0/0x750 [ 749.049245][ T7984] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 749.056009][ T7984] __cpuhp_setup_state+0x3f/0x60 [ 749.061471][ T7984] do_one_initcall+0x250/0x870 [ 749.066751][ T7984] do_initcall_level+0x10a/0x1a0 [ 749.072211][ T7984] do_initcalls+0x59/0xa0 [ 749.077061][ T7984] kernel_init_freeable+0x29d/0x3e0 [ 749.082784][ T7984] kernel_init+0x22/0x1d0 [ 749.087722][ T7984] ret_from_fork+0x514/0xb70 [ 749.092836][ T7984] ret_from_fork_asm+0x1a/0x30 [ 749.098210][ T7984] [ 749.098210][ T7984] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 749.106030][ T7984] [ 749.106030][ T7984] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 749.113853][ T7984] cpus_read_lock+0x3d/0x160 [ 749.118964][ T7984] static_key_slow_inc+0x12/0x30 [ 749.124422][ T7984] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 749.131004][ T7984] nbd_genl_foreach_sock+0x265/0x450 [ 749.136805][ T7984] nbd_genl_reconfigure+0xbbb/0x1040 [ 749.142733][ T7984] genl_family_rcv_msg_doit+0x233/0x340 [ 749.148819][ T7984] genl_rcv_msg+0x614/0x7a0 [ 749.153842][ T7984] netlink_rcv_skb+0x226/0x4a0 [ 749.159129][ T7984] genl_rcv+0x28/0x40 [ 749.163627][ T7984] netlink_unicast+0x8ef/0xa80 [ 749.168910][ T7984] netlink_sendmsg+0x7f0/0xb20 [ 749.174199][ T7984] sock_sendmsg_nosec+0x14e/0x190 [ 749.179744][ T7984] ____sys_sendmsg+0x54e/0x850 [ 749.185033][ T7984] ___sys_sendmsg+0x2a5/0x360 [ 749.190230][ T7984] __x64_sys_sendmsg+0x1b1/0x290 [ 749.195690][ T7984] do_syscall_64+0x166/0x520 [ 749.200809][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.207320][ T7984] [ 749.207320][ T7984] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 749.214990][ T7984] __mutex_lock+0x197/0x15a0 [ 749.220109][ T7984] nbd_queue_rq+0x373/0xff0 [ 749.225133][ T7984] blk_mq_dispatch_rq_list+0x499/0x1990 [ 749.231209][ T7984] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 749.238055][ T7984] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 749.244560][ T7984] blk_mq_run_work_fn+0x167/0x2f0 [ 749.250114][ T7984] process_scheduled_works+0xc3d/0x1630 [ 749.256188][ T7984] worker_thread+0xa47/0xfb0 [ 749.261306][ T7984] kthread+0x38b/0x480 [ 749.265904][ T7984] ret_from_fork+0x514/0xb70 [ 749.271019][ T7984] ret_from_fork_asm+0x1a/0x30 [ 749.276302][ T7984] [ 749.276302][ T7984] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 749.283522][ T7984] __mutex_lock+0x197/0x15a0 [ 749.288632][ T7984] nbd_queue_rq+0xc1/0xff0 [ 749.293570][ T7984] blk_mq_dispatch_rq_list+0x499/0x1990 [ 749.299645][ T7984] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 749.306493][ T7984] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 749.312993][ T7984] blk_mq_run_work_fn+0x167/0x2f0 [ 749.318538][ T7984] process_scheduled_works+0xc3d/0x1630 [ 749.324611][ T7984] worker_thread+0xa47/0xfb0 [ 749.329725][ T7984] kthread+0x38b/0x480 [ 749.334312][ T7984] ret_from_fork+0x514/0xb70 [ 749.339424][ T7984] ret_from_fork_asm+0x1a/0x30 [ 749.344714][ T7984] [ 749.344714][ T7984] -> #4 (set->srcu){.+.+}-{0:0}: [ 749.351846][ T7984] __synchronize_srcu+0xca/0x2f0 [ 749.357305][ T7984] elevator_switch+0x1e8/0x7b0 [ 749.362602][ T7984] elevator_change+0x2fa/0x480 [ 749.367889][ T7984] elevator_set_default+0x375/0x440 [ 749.373615][ T7984] blk_register_queue+0x404/0x4f0 [ 749.379161][ T7984] __add_disk+0x6b8/0xdb0 [ 749.384255][ T7984] add_disk_fwnode+0x100/0x3a0 [ 749.389625][ T7984] nbd_dev_add+0x733/0xb60 [ 749.394569][ T7984] nbd_init+0x168/0x1f0 [ 749.399252][ T7984] do_one_initcall+0x250/0x870 [ 749.404802][ T7984] do_initcall_level+0x10a/0x1a0 [ 749.410262][ T7984] do_initcalls+0x59/0xa0 [ 749.415111][ T7984] kernel_init_freeable+0x29d/0x3e0 [ 749.420831][ T7984] kernel_init+0x22/0x1d0 [ 749.425863][ T7984] ret_from_fork+0x514/0xb70 [ 749.431157][ T7984] ret_from_fork_asm+0x1a/0x30 [ 749.436439][ T7984] [ 749.436439][ T7984] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 749.444259][ T7984] __mutex_lock+0x197/0x15a0 [ 749.449370][ T7984] elevator_change+0x1af/0x480 [ 749.454663][ T7984] elevator_set_none+0xb5/0x140 [ 749.460042][ T7984] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 749.466369][ T7984] nbd_start_device+0x189/0xb30 [ 749.471739][ T7984] nbd_genl_connect+0x167d/0x1cd0 [ 749.477292][ T7984] genl_family_rcv_msg_doit+0x233/0x340 [ 749.483373][ T7984] genl_rcv_msg+0x614/0x7a0 [ 749.488657][ T7984] netlink_rcv_skb+0x226/0x4a0 [ 749.494117][ T7984] genl_rcv+0x28/0x40 [ 749.498615][ T7984] netlink_unicast+0x8ef/0xa80 [ 749.503986][ T7984] netlink_sendmsg+0x7f0/0xb20 [ 749.509278][ T7984] sock_sendmsg_nosec+0x14e/0x190 [ 749.514825][ T7984] ____sys_sendmsg+0x54e/0x850 [ 749.520134][ T7984] ___sys_sendmsg+0x2a5/0x360 [ 749.525338][ T7984] __x64_sys_sendmsg+0x1b1/0x290 [ 749.530798][ T7984] do_syscall_64+0x166/0x520 [ 749.535913][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.542326][ T7984] [ 749.542326][ T7984] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 749.550938][ T7984] blk_alloc_queue+0x544/0x690 [ 749.556231][ T7984] __blk_mq_alloc_disk+0x194/0x390 [ 749.562125][ T7984] nbd_dev_add+0x494/0xb60 [ 749.567061][ T7984] nbd_init+0x168/0x1f0 [ 749.571740][ T7984] do_one_initcall+0x250/0x870 [ 749.577023][ T7984] do_initcall_level+0x10a/0x1a0 [ 749.582740][ T7984] do_initcalls+0x59/0xa0 [ 749.587590][ T7984] kernel_init_freeable+0x29d/0x3e0 [ 749.593310][ T7984] kernel_init+0x22/0x1d0 [ 749.598170][ T7984] ret_from_fork+0x514/0xb70 [ 749.603452][ T7984] ret_from_fork_asm+0x1a/0x30 [ 749.608735][ T7984] [ 749.608735][ T7984] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 749.615944][ T7984] fs_reclaim_acquire+0x71/0x100 [ 749.621404][ T7984] kmem_cache_alloc_noprof+0x5f/0x600 [ 749.627294][ T7984] __kernfs_iattrs+0xdd/0x380 [ 749.632585][ T7984] kernfs_iop_setattr+0xe6/0x3f0 [ 749.638048][ T7984] notify_change+0xbba/0xea0 [ 749.643203][ T7984] do_truncate+0x1c2/0x250 [ 749.648144][ T7984] path_openat+0x18a6/0x20f0 [ 749.653284][ T7984] do_file_open+0x23e/0x4a0 [ 749.658323][ T7984] do_sys_openat2+0x115/0x200 [ 749.663528][ T7984] __x64_sys_openat+0x138/0x170 [ 749.668899][ T7984] do_syscall_64+0x166/0x520 [ 749.674013][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.680425][ T7984] [ 749.680425][ T7984] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 749.688940][ T7984] __lock_acquire+0x164c/0x2de0 [ 749.694315][ T7984] lock_acquire+0x115/0x350 [ 749.699353][ T7984] down_write+0x91/0x200 [ 749.704118][ T7984] kernfs_unlink_sibling+0x6d/0x240 [ 749.709835][ T7984] kernfs_rename_ns+0x575/0x9e0 [ 749.715210][ T7984] sysfs_rename_link_ns+0x16e/0x1b0 [ 749.720934][ T7984] device_rename+0x110/0x210 [ 749.726108][ T7984] __dev_change_net_namespace+0x156d/0x2050 [ 749.732697][ T7984] __cfg80211_switch_netns+0x14b/0x650 [ 749.738677][ T7984] cfg80211_pernet_exit+0x7a/0xe0 [ 749.744226][ T7984] ops_undo_list+0x451/0x8f0 [ 749.749356][ T7984] cleanup_net+0x572/0x810 [ 749.754296][ T7984] process_scheduled_works+0xc3d/0x1630 [ 749.760565][ T7984] worker_thread+0xa47/0xfb0 [ 749.765681][ T7984] kthread+0x38b/0x480 [ 749.770271][ T7984] ret_from_fork+0x514/0xb70 [ 749.775733][ T7984] ret_from_fork_asm+0x1a/0x30 [ 749.781022][ T7984] [ 749.781022][ T7984] other info that might help us debug this: [ 749.781022][ T7984] [ 749.791242][ T7984] Chain exists of: [ 749.791242][ T7984] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 749.791242][ T7984] [ 749.805842][ T7984] Possible unsafe locking scenario: [ 749.805842][ T7984] [ 749.813460][ T7984] CPU0 CPU1 [ 749.818819][ T7984] ---- ---- [ 749.824181][ T7984] lock(&root->kernfs_rwsem); [ 749.829202][ T7984] lock(cpuhp_state_mutex); [ 749.836308][ T7984] lock(&root->kernfs_rwsem); [ 749.843681][ T7984] lock(&root->kernfs_iattr_rwsem); [ 749.849053][ T7984] [ 749.849053][ T7984] *** DEADLOCK *** [ 749.849053][ T7984] [ 749.857276][ T7984] locks held by kworker/u8:17/7984: 6, last CPU#1: [ 749.864055][ T7984] #0: ffff88801cec6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 749.874939][ T7984] #1: ffffc90003497c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 749.885644][ T7984] #2: ffffffff9147d628 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 749.894962][ T7984] #3: ffffffff9148c2e0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0xe0 [ 749.904629][ T7984] #4: ffffffff916d45c0 (cfg80211_mutex){+.+.}-{4:4}, at: __cfg80211_switch_netns+0x6f/0x650 [ 749.914813][ T7984] #5: ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 749.924827][ T7984] [ 749.924827][ T7984] stack backtrace: [ 749.930713][ T7984] CPU: 1 UID: 0 PID: 7984 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 749.940252][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 749.950304][ T7984] Workqueue: netns cleanup_net [ 749.955088][ T7984] Call Trace: [ 749.958370][ T7984] [ 749.961309][ T7984] dump_stack_lvl+0xe8/0x150 [ 749.965915][ T7984] print_circular_bug+0x2e2/0x300 [ 749.970948][ T7984] check_noncircular+0x12f/0x150 [ 749.975894][ T7984] __lock_acquire+0x164c/0x2de0 [ 749.980763][ T7984] ? __lock_acquire+0x747/0x2de0 [ 749.985728][ T7984] ? __lock_acquire+0x747/0x2de0 [ 749.990680][ T7984] lock_acquire+0x115/0x350 [ 749.995195][ T7984] ? kernfs_unlink_sibling+0x6d/0x240 [ 750.000578][ T7984] down_write+0x91/0x200 [ 750.004832][ T7984] ? kernfs_unlink_sibling+0x6d/0x240 [ 750.010205][ T7984] ? __pfx_down_write+0x10/0x10 [ 750.015062][ T7984] ? kernfs_root+0x1c/0x230 [ 750.019573][ T7984] ? kernfs_root+0x1c/0x230 [ 750.024082][ T7984] ? kernfs_root+0x1ea/0x230 [ 750.028683][ T7984] kernfs_unlink_sibling+0x6d/0x240 [ 750.033886][ T7984] kernfs_rename_ns+0x575/0x9e0 [ 750.038742][ T7984] sysfs_rename_link_ns+0x16e/0x1b0 [ 750.043954][ T7984] device_rename+0x110/0x210 [ 750.048553][ T7984] __dev_change_net_namespace+0x156d/0x2050 [ 750.054463][ T7984] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 750.060715][ T7984] ? __pfx_stack_trace_save+0x10/0x10 [ 750.066094][ T7984] ? __mutex_trylock_common+0x15f/0x270 [ 750.071652][ T7984] ? __pfx___mutex_trylock_common+0x10/0x10 [ 750.077552][ T7984] ? rcu_is_watching+0x16/0xb0 [ 750.082325][ T7984] ? trace_contention_end+0x3d/0x140 [ 750.087627][ T7984] ? __mutex_lock+0x305/0x15a0 [ 750.092407][ T7984] ? rcu_is_watching+0x16/0xb0 [ 750.097200][ T7984] ? trace_contention_end+0x3d/0x140 [ 750.102506][ T7984] ? __mutex_lock+0x305/0x15a0 [ 750.107283][ T7984] ? __cfg80211_switch_netns+0x6f/0x650 [ 750.112851][ T7984] ? __pfx___mutex_lock+0x10/0x10 [ 750.117887][ T7984] ? __pfx___mutex_lock+0x10/0x10 [ 750.122917][ T7984] __cfg80211_switch_netns+0x14b/0x650 [ 750.128387][ T7984] cfg80211_pernet_exit+0x7a/0xe0 [ 750.133424][ T7984] ops_undo_list+0x451/0x8f0 [ 750.138027][ T7984] ? __pfx_ops_undo_list+0x10/0x10 [ 750.143149][ T7984] ? idr_destroy+0x227/0x290 [ 750.147768][ T7984] cleanup_net+0x572/0x810 [ 750.152203][ T7984] ? __pfx_cleanup_net+0x10/0x10 [ 750.157162][ T7984] ? rcu_is_watching+0x16/0xb0 [ 750.161953][ T7984] ? process_scheduled_works+0x97a/0x1630 [ 750.167693][ T7984] process_scheduled_works+0xc3d/0x1630 [ 750.173275][ T7984] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.179268][ T7984] ? assign_work+0x3cf/0x5d0 [ 750.183879][ T7984] worker_thread+0xa47/0xfb0 [ 750.188516][ T7984] kthread+0x38b/0x480 [ 750.192611][ T7984] ? __pfx_worker_thread+0x10/0x10 [ 750.197737][ T7984] ? __pfx_kthread+0x10/0x10 [ 750.202353][ T7984] ret_from_fork+0x514/0xb70 [ 750.206947][ T7984] ? save_fpregs_to_fpstate+0x176/0x200 [ 750.212500][ T7984] ? __pfx_ret_from_fork+0x10/0x10 [ 750.217615][ T7984] ? __switch_to+0xc78/0x1410 [ 750.222305][ T7984] ? __pfx_kthread+0x10/0x10 [ 750.226900][ T7984] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 750.231677][ T7984] [ 750.241882][ C1] TC_ACT_REPEAT abuse ? [ 750.804286][T16208] bond0: (slave syz_tun): Releasing backup interface [ 751.038683][T19789] bond5: (slave syz_tun): Removing an active aggregator [ 751.038977][T19789] bond5: (slave syz_tun): Releasing backup interface [ 751.296930][ T7984] IPVS: stop unused estimator thread 0... [ 751.477732][ T7984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.526501][ T7984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.586316][ T7984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.635361][ T7984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.705167][ T7984] dvmrp0: left allmulticast mode [ 751.733401][ T7984] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 751.733572][ T7984] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 751.733889][ T7984] ip6gretap1 (unregistering): left allmulticast mode [ 751.858690][ T7984] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 751.973965][ T7984] bond1 (unregistering): (slave gretap1): Releasing active interface [ 752.119956][ T7984] bond1 (unregistering): Released all slaves [ 752.126811][ T7984] bond2 (unregistering): Released all slaves [ 752.132106][ T7984] bond3 (unregistering): Released all slaves [ 752.137359][ T7984] bond0 (unregistering): Released all slaves [ 752.143711][ T7984] bond4 (unregistering): Released all slaves [ 752.161423][ T7984] bond5 (unregistering): (slave bond6): Releasing backup interface [ 752.162295][ T7984] bond5 (unregistering): (slave bond7): Releasing backup interface [ 752.162863][ T7984] bond5 (unregistering): Released all slaves [ 752.175588][ T7984] bond6 (unregistering): Released all slaves [ 752.180573][ T7984] bond7 (unregistering): Released all slaves [ 752.209820][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 752.278890][ T7984] tipc: Disabling bearer [ 752.279308][ T7984] tipc: Left network mode [ 752.314247][ C1] TC_ACT_REPEAT abuse ? [ 752.321181][ T7984] IPVS: stopping backup sync thread 20617 ... [ 752.492240][ T7984] hsr_slave_0: left promiscuous mode [ 752.492796][ T7984] hsr_slave_1: left promiscuous mode [ 752.630570][ T7984] veth1_to_hsr (unregistering): left promiscuous mode [ 752.630863][ T7984] team0 (unregistering): Port device veth1_to_hsr removed [ 752.688369][ T5297] 8021q: adding VLAN 0 to HW filter on device eth8 [ 752.910451][ T7984] IPVS: stop unused estimator thread 0... [ 753.025333][ T5297] 8021q: adding VLAN 0 to HW filter on device eth9 [ 753.256510][ T5297] 8021q: adding VLAN 0 to HW filter on device eth10 [ 754.385397][ C1] TC_ACT_REPEAT abuse ? [ 755.426037][ C0] TC_ACT_REPEAT abuse ? [ 757.507626][ C0] TC_ACT_REPEAT abuse ?