last executing test programs: 4.855900557s ago: executing program 0 (id=3935): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000440)="00fbff008600000000003271a5bf00", 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) epoll_create1(0x0) recvmsg$can_raw(r1, &(0x7f00000008c0)={&(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/50, 0x32}], 0x2}, 0x0) bind$can_raw(r1, &(0x7f0000000a40)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000a80)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x9) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000cc0)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x80047437, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000d40)=0x804, 0x4) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000d80)={{0x2, 0x4, @private=0xa010102}, {0x1, @broadcast}, 0x0, {0x2, 0x80fe, @local}, 'veth1_to_bridge\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000e00)=[{&(0x7f0000000e40)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r8 = gettid() r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f0000000f40)=@framed, &(0x7f0000000f80)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000fc0)=@generic={&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r9}, 0x18) sendmsg$nl_route(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f00000012c0)='\x00', 0x0}, 0x48) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000480)="0cc7b4bc7d158449ed5abc7c164065ce", 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0), 0x48) 4.716883536s ago: executing program 1 (id=3936): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000003d7e4873c3300070100000098ffffffffffffff090c00018008000600ac4e41d6"], 0x20}}, 0x4010) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200200d0}, 0x4040) sendmsg$NFT_BATCH(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004b00)=ANY=[@ANYBLOB="14000000100001000000000000e4ffff0200000a2c0000000b0a010300000000000000000a0000090900010073797a31000000000900020073797a31"], 0xfea8}, 0x1, 0x0, 0x0, 0x40091}, 0x40) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0xa, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r5, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x1, 0x5, 0x0) 4.703649525s ago: executing program 4 (id=3938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xfffffffd, 0x3, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0xc800) 4.438648315s ago: executing program 4 (id=3941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r4, &(0x7f0000000fc0)=[{&(0x7f00000004c0)=""/84}, {&(0x7f0000000700)=""/251}, {&(0x7f0000000800)=""/159}, {&(0x7f0000000f80)=""/52}], 0x1000000000000398) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000000000eeb70500000000000085000000630000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r6, 0x0, 0xe, 0x0, &(0x7f0000000a00)="0011223344552011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r2], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3000000010000108000000020000000012000000", @ANYBLOB="2fbb235fb43475594e5a79c1e8f66fb4e5278894e0a64927160a8f22e33080f615", @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}}, 0x4048891) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe8}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040891}, 0x20008000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x342, 0x20000001, 0x9, 0x9ab5, 0xe9c8, {0x6, 0x2, 0x401, 0x0, 0x1}, {0xe, 0x2, 0x51, 0x0, 0x5, 0x7fffffff}, 0x4, 0x6, 0x6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.093361465s ago: executing program 0 (id=3943): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0x8, 0xf, 0x102}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1e, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0xb, 0x9, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r5, r2}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000140)={'pim6reg0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40380, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local}) write$cgroup_int(r7, &(0x7f0000000200)=0x2, 0x12) recvmsg(r6, &(0x7f0000001940)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001640)=""/103, 0x67}, {&(0x7f00000016c0)=""/234, 0xea}, {&(0x7f00000017c0)=""/32, 0x20}], 0x4, &(0x7f0000001840)=""/247, 0xf7}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r10}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 3.950580804s ago: executing program 2 (id=3946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r0, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f00000014c0)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f00000015c0), &(0x7f0000001600), 0x0, 0x700}, 0x2c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000015c0)={{r2}, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') unshare(0x2040600) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, r5, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xa}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6b}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.815354493s ago: executing program 1 (id=3947): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0xc004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x11, 0x5, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000000c0), 0x4) recvmsg$kcm(r5, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000580)="0b50eab17b56e5801085d7af7a393ce8d0400b25c713ec2417c195bb2c72448a48d9f2b0fdafb68d2447d08e822e9f665c5285543764339fb45b91b19865591f4adabf48081016e5739ff477545d749face07957cc14ff046749cbec816aeaabaf9fbfaa5e35ece310c65440ead0830c296066efa22933dd13a2b8c508b1cbf1e8035cc8d62d6982ebeae4df0949247938f032457e1d4084dfd6a5a5dce129d9a91bfd5e5a7bffdbdf7e82c2cf4d137b8d0a0f32f9bf92840973297725cd9957e38cda26dbe7de987c5aefb2380038461a52f7dbb3") setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f50d000000f4ffffffffffffff00", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8054) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.809758667s ago: executing program 2 (id=3948): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa38a12d21eb18029}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x120, 0xf, 0xa, 0x801, 0x70bd28, 0x25dfdbfd, {0x3, 0x0, 0x8}, [@generic="a595f98765a04db3b01ab620efd97005f61b9782b380ffe3a9f91843f2820a3231870542e83fe3ce418bfb5ce37107201610e97a15d9b8d062d739664da602751a4288dc0dfc39510d82dc02f5d581b5a13d57eba87e9c46c92c7b97f009e24bfc995a1ab719630db7b0c37dfafe283a38cb1d2af948d231f9801a40b2384f31137cd162c1d39a1bbc871eed4ce638bab1d7f92a056a6465b94961536a94acffa42f7aee8eeae393db78980dc2a47acbc19814367e2cc56234013ac7230ad0ecdd94f5adadf141b3c672544bf3abe59a16e1675e1cc4975c0ce22f3c8e111489f7bec3dcedad34d7f1003c2ac88a5d", @nested={0x1c, 0x76, 0x0, 0x1, [@typed={0x4, 0x63}, @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@local}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x5}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'netpci0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0x100, 0x1003, 0x2, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x400010, 0x10001006, 0x2, 0x8, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x85, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0x6, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x401, 0x100aa, 0x1000, 0x2, 0x0, 0x7, 0x8b, 0x5, 0x2af, 0x9, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x3, 0x8, 0x6, 0x3, 0x3, 0x480, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x81, 0x100, 0x5f9, 0x252, 0x2f, 0xb, 0x4, 0x9, 0xc50, 0xffffffff, 0xe, 0x2, 0xd9a, 0x3, 0xc102, 0xfffffffd, 0x3, 0x2, 0x8927, 0x8, 0xfe, 0x4, 0x2, 0x40, 0x8, 0x0, 0x5, 0x402, 0x66cd, 0x8000008, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) r4 = socket(0x2b, 0x1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x30, 0x30, 0x30, 0x2e, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x22, 0x0, 0x3}, 0x28) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x8041) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8, 0x8000, 0x5b30, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) 3.793827828s ago: executing program 3 (id=3949): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000400), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000440)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'gre0\x00', r3, 0x80, 0x700, 0xc8, 0x1ff, {{0x2d, 0x4, 0x0, 0x4, 0xb4, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @remote, {[@cipso={0x86, 0x50, 0x0, [{0x0, 0xe, "b37b2f4ab27a4a805db17469"}, {0x6, 0xf, "021e20fa1ab01f822ab6e7df97"}, {0x6, 0x12, "32152330258b9174170297cc6dcf84cc"}, {0x2, 0x11, "f8c9095ebc84b750d7f0dddd3135ba"}, {0x2, 0xa, "f3ef5eaa5cb2e69b"}]}, @cipso={0x86, 0x4d, 0x0, [{0x2, 0x9, "a78a43aeb77c1a"}, {0x6, 0x8, "1ba2c41530a2"}, {0x6, 0xd, "b038d52918edbce98397f8"}, {0x2, 0x2}, {0x7, 0x4, "3bf6"}, {0x2, 0x4, "d1cb"}, {0x5, 0xc, "9f441122c6ea39409e8e"}, {0x5, 0xa, "25846db99e89de2b"}, {0x1, 0x9, "f6f19413ab5c4a"}]}]}}}}}) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) 3.626738667s ago: executing program 3 (id=3950): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000540)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000000)='{)$)\'#$%\xed&\x00', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611883000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 3.53698429s ago: executing program 1 (id=3951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c804) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0]}, 0x40) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf25170000005c00068014000300322d00742d2b7a476dc9e5364c4323844400040067636d28616573290000000000000000000000000000000000010000000000001c"], 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x6, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[], 0x0) 3.445334556s ago: executing program 3 (id=3952): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, 0x8000100, 0x0, 0x1, 0x1, 0xffff}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000003c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f0000000140)={0x2, 0x4c24, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="08e21105fc2f6464c7bebb10a7f7849b7301bc89f4b6057ffac196f9b68fb027aeed7defe931be01799f18fc71c9ee531580983db2b0610440a80c08009323541706c516a623146bc472bad28424fba62639fdcf69be9031df4d131ed1577dbbf6a0d6eb5af0482cce32d3a327e831519531746fd6117725bf6a65641ecd4ac6d5853f9a0d8fb25faad4f8d8d44600897f1df10b5fed40d37b9f5e6dca04e62db557860a36e4a520bdb2fa3c7d25144f73a560227943449120f09ce0dd4f39bdb747afb82d1cd1790a909329c725af892b959117c865d59c065b9a842468de9dfa", 0xe1}, {&(0x7f0000000280)="a98efb6ada0c69e340a65f4556ec2c8af590118f518a4cae6f3526fe57c9bf3ed3d3f03f561dc8e08d2515de584e4650589de684a6483a6b5183f1b2aad196a6d21ad1074b4ea4969d6577e320831c", 0x4f}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x178}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)="5f72fca3e9490d45a53cec2617907b98903c624e72a9ac9d2855126cfb698c8aa18eb1", 0x23}, {&(0x7f0000000b40)="0db6bb79929355114aea1c41d8d1a43d039ccf07a7b904ab7ed2f9a69d01ad3bb451ecc6f0b08bec475614df953d9d07a0efe2fd409818c008f41e451e2f45df2581c75770304807c10a69ed6cb13ae8d98b15b3110080d11448a4a988a70368bcd7a3b9e7ebb58f4ec6f7079f42cfec14a5f2889f8476561303f12d", 0x7c}], 0x54}}], 0x3, 0x24004800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000540)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000580)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600010324bd70048e03630ff5d3800831c22bac7764e000fcffffff2e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044853}, 0x0) bind$tipc(r4, &(0x7f0000000680)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000740)={0x40, 0x3, 0x2}, 0x10) bind$tipc(r3, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a32000000203c000000080a010000000000000000000a00000608000940000000000900020073797a32000000000900010073797a31"], 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) 3.394830559s ago: executing program 1 (id=3953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000006c0)='GPL\x00', 0xf, 0x1001, &(0x7f0000000700)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000003c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b00), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002bc0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$nci(r4, &(0x7f0000002c00)=""/235, 0xeb) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r9, 0x941c, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000002fc0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003000)=ANY=[@ANYBLOB="0200000004000000"], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c00028005000100000000005400188008000140000000fd070002"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001940)=@newtfilter={0x11a8, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x117c, 0x2, [@TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7a}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_FW_POLICE={0x88c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xcd4, 0x400, 0x80000001, 0x2, 0x1, 0x3, 0x9, 0x4251, 0x1, 0x80, 0xfffffff8, 0x9, 0x1, 0x0, 0x80000000, 0x10, 0x3, 0x1, 0x8, 0x1, 0x9, 0x9, 0x5, 0x7, 0xffff, 0xb, 0x0, 0x4, 0x401, 0x4, 0x80000000, 0x62, 0x0, 0xffffff37, 0x8, 0x8, 0x200, 0x3c6a, 0x4, 0x3, 0x9, 0xc, 0xd2cf, 0x6, 0x4, 0xe, 0x2, 0x8, 0x4, 0x895, 0x0, 0x1, 0x4, 0x400, 0x0, 0x9, 0x6, 0x3, 0x8, 0x5, 0x0, 0xff, 0xffffffb7, 0xfffff7d0, 0xffff, 0x5, 0x75, 0x5, 0x3, 0x8, 0x1, 0x0, 0x8009, 0x9, 0x9, 0x10001, 0x3, 0x1, 0x1, 0x6, 0x8, 0x9, 0x5, 0x9, 0xb9, 0x3, 0x2, 0x8, 0x6, 0x2, 0x8, 0xa4e1, 0xfffffffd, 0x8, 0x8, 0x5034c01c, 0xf334, 0xff, 0x401, 0x80, 0x9, 0x401, 0xe, 0x8, 0xa, 0x7fffffff, 0x6, 0x80000001, 0x3, 0x1, 0x0, 0x11, 0x3, 0x100, 0x92e3, 0x7, 0x9, 0x0, 0x1, 0x6, 0x4, 0xfffffff7, 0x1e, 0x4, 0x3, 0x7, 0x5, 0xfffff801, 0x3ff, 0xfffffffb, 0xb, 0x1, 0x7, 0x3, 0x6, 0x4, 0x6, 0xef, 0x4, 0xfffffffa, 0x10, 0xfff, 0x0, 0x5, 0x1, 0x24, 0x3, 0x7, 0x7ff, 0x8000, 0x6, 0xe02a, 0x5, 0x882, 0x101, 0x200, 0x3, 0x3, 0x1ff, 0x91c, 0xb90, 0x9, 0x10, 0x9, 0x81, 0xff, 0x10, 0x6, 0x9, 0xc2fb, 0x0, 0x0, 0x5, 0x4, 0x0, 0xb9, 0x4, 0x40, 0xbe72, 0x5, 0x1, 0x3f12, 0x4, 0x0, 0x6, 0xffffffff, 0x4, 0x4f, 0x7df9, 0x7f, 0x400, 0x9, 0x10, 0x200, 0x60b, 0x100, 0x81, 0xff, 0x5, 0x100, 0x0, 0x1, 0x2, 0x0, 0x6, 0x3, 0x8, 0x2, 0x9, 0x7, 0x7, 0xfffffff9, 0x8000, 0x1, 0x0, 0x0, 0x9, 0xa54, 0x0, 0x5, 0x1, 0x1, 0x8, 0x1000, 0x401, 0x31ea3380, 0x9, 0xfffffffb, 0x1ff, 0x8, 0x1, 0x3, 0x3, 0x0, 0x0, 0x26, 0x10001, 0x0, 0x9, 0x8190, 0x9, 0xbd6, 0x8, 0x4, 0x2, 0x6, 0xffffffff, 0x9, 0x3, 0x5, 0x2, 0x80, 0x5, 0x9, 0x5, 0x401]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x0, 0x3, 0x9, {0x5, 0x2, 0x482f, 0x7, 0x9, 0xf0f}, {0xa, 0x2, 0x1, 0x6, 0x7, 0x932e}, 0x10, 0x3, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x313}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x0, 0xa39, 0x40000000, 0x82, 0x2, 0x4, 0xd30e, 0x4, 0x80000001, 0x3f1, 0xffffffff, 0x3ff, 0x1, 0x1, 0x41d8, 0x400, 0x2, 0x8, 0x7, 0x3ff, 0x2, 0x3, 0xfffffffd, 0xc, 0xffff, 0x1, 0xd8e, 0x3, 0x4, 0x5, 0xc1, 0x48d, 0x2, 0x9, 0x40, 0x4, 0x6da1bf72, 0xfff, 0x9, 0x442, 0x18ecd498, 0x6, 0x4, 0xfffffffd, 0x4, 0x7, 0x5, 0x8, 0x3, 0x6e3f, 0x4, 0xbf, 0x6, 0x7f, 0x8001, 0xf4fd, 0x7fffffff, 0x5, 0x7, 0x0, 0x5, 0x6, 0x1, 0x70000, 0x1, 0x101, 0x0, 0x80, 0x0, 0x40, 0x5, 0x5, 0xc, 0xffff, 0x7f, 0x100, 0x3, 0x8, 0x101, 0x100, 0x6, 0x2, 0x10001, 0x3148, 0x9, 0x8000, 0x3, 0x1, 0x45, 0x200, 0x6, 0x25a, 0x6, 0x100, 0x2a7, 0x9, 0xa9ab, 0x3, 0xb8, 0x2, 0xd, 0xb3fc, 0xe0be83, 0x0, 0x1, 0x4, 0x5, 0xbd, 0xf, 0x0, 0x4, 0x3, 0x2, 0x59, 0x7, 0x1000, 0x8001, 0x7, 0x8, 0x5, 0x9, 0x7, 0xea, 0x51, 0x10001, 0x6, 0x4000000, 0x5, 0x1f24, 0x3, 0x40, 0x1, 0x7, 0x0, 0xe, 0x9, 0x9, 0x4, 0x8, 0x4, 0x8, 0xe54, 0x0, 0x3, 0xfffffffc, 0x3, 0x400, 0x3, 0x3, 0x0, 0x5, 0x5, 0x100000, 0x8, 0x6, 0xf98, 0x8, 0x2, 0x9, 0xff, 0xddd4, 0x1ff, 0xa, 0x401, 0x1, 0x7, 0x7fff, 0xfffffff9, 0x67d, 0x0, 0x10, 0xffffffff, 0x8, 0x1ff, 0x972, 0x3, 0x7, 0xffff, 0x8, 0x1, 0x7, 0x6, 0x3ff, 0x7ff, 0x8, 0x3, 0x2, 0xffffffff, 0x50, 0xfffffff2, 0x9, 0x3, 0x8, 0x878e, 0xfffffffc, 0x7, 0x7f, 0x0, 0x8, 0x9, 0x8, 0x36d, 0x8, 0x3, 0x6a08, 0x8, 0x6, 0xe773e366, 0xffffffff, 0x7, 0x0, 0x9, 0xfff, 0x1, 0x8001, 0xfffffff7, 0xfffffffd, 0x5, 0x2, 0x2, 0xffffc886, 0x7, 0x2, 0x800, 0x8, 0x3, 0xe, 0x3, 0x200, 0x3, 0x2, 0x5446bd33, 0x19, 0x62ac4e48, 0x6, 0xffff, 0x6d, 0x10000, 0x800, 0x1, 0x6a36, 0xfffffff8, 0x9, 0x4d, 0x80, 0x1, 0x74, 0x0, 0x2, 0x6, 0x7ff, 0x2, 0x8, 0x8, 0x1000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_POLICE={0x87c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x369, 0xffffffff, 0xac5, 0x4, 0xe, 0x3, 0x4, 0x10000, 0x0, 0xff, 0x9, 0x7f, 0x100, 0x8, 0x6, 0xffffff6e, 0xe0, 0xe775, 0x8001, 0x0, 0x400, 0x2, 0xc2d6, 0xc, 0x3, 0x4, 0x0, 0x9, 0x2, 0x2, 0x0, 0x4, 0x0, 0x8, 0xffff, 0x3, 0x18, 0x6, 0x8, 0xfffffa25, 0x2000000, 0x30000, 0x918, 0x9, 0x8, 0x80000001, 0x1, 0x6, 0x4, 0x7, 0x80, 0x1, 0x9, 0x1, 0x9, 0x3ff, 0x7, 0x2, 0x8, 0x2, 0x6d8, 0xfffffff1, 0x8, 0x3, 0x2, 0x1c00000, 0x401, 0x7, 0x5, 0x10, 0x1, 0x8000, 0xe1, 0x10, 0x0, 0x7, 0x1d, 0x9a60, 0x6, 0x81, 0x0, 0xac, 0x38, 0x3ff, 0x5, 0x33e, 0x4, 0x220, 0xa, 0x8, 0x7, 0x4, 0x2, 0x3, 0x7, 0x0, 0x3, 0x5, 0x9f22, 0x10000, 0x4, 0x8, 0xffffa39f, 0x400, 0x3, 0x6, 0x5, 0xfffffffd, 0x0, 0x6, 0x2, 0x10, 0x71a1b8fe, 0x8, 0x1, 0x3ff, 0x4, 0x4, 0x101, 0x81, 0x319, 0x152f, 0xb, 0x2, 0xffff, 0x8, 0x10001, 0x7, 0x5, 0x4, 0x18, 0x1, 0x5, 0x0, 0x5, 0xf, 0x1, 0xfffffffe, 0x3, 0x0, 0x5, 0x2, 0x40, 0xe7, 0x80000001, 0x80000001, 0x8, 0x7, 0x0, 0x4, 0x3, 0x5, 0xa, 0x1, 0x5, 0x9, 0xe2, 0x9, 0x7f, 0x7f, 0x2, 0x5, 0x9, 0x9, 0xd, 0x2, 0xffff8829, 0x3, 0xfffffff3, 0x40, 0x4, 0x19a52400, 0x4, 0x200, 0x0, 0x1000, 0x9, 0x2, 0x6f, 0x6, 0x7, 0x6, 0x5, 0x4, 0x8, 0x7fffffff, 0x4, 0x5, 0xfffffffe, 0x8, 0x9, 0x77, 0x3, 0x7, 0xffffffff, 0x800, 0x1, 0xffff, 0x4, 0x0, 0x3, 0x8, 0x3, 0x8000, 0x6, 0x5b103341, 0x101, 0x1bf, 0x1, 0x6, 0x3, 0x1ff, 0x0, 0x8, 0x5, 0x9, 0x2, 0x0, 0x8, 0x6, 0x900000, 0x8, 0x6, 0x0, 0x6, 0x5, 0x9, 0x0, 0x400, 0x28d, 0x7, 0x7f, 0x4, 0x5, 0x4, 0x82, 0x9, 0x2, 0x8, 0x2, 0x100020, 0xfff, 0x7f, 0x6db4, 0xfffffeff, 0xfffffff0, 0x1b2, 0x2, 0x54d0, 0x950, 0x8, 0xffff0001, 0xa, 0xb0e9, 0x40]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x75defbe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x81, 0x6, 0x8, 0x1, 0x2, 0x5, 0x1, 0x80000001, 0x5, 0x6, 0xd54b, 0x0, 0x9, 0x2, 0x401, 0xfffeffff, 0xc, 0xfff, 0xc0, 0x7, 0x80000000, 0x9, 0x1, 0xf5f, 0x101, 0x0, 0x1, 0x832, 0x772634ce, 0x9e, 0x7fffffff, 0xe13, 0x7f, 0x87, 0x0, 0x1, 0x9, 0xffffffff, 0x9, 0x3ff, 0x7c05, 0x9, 0x1, 0xc9, 0x9, 0x7f, 0x7, 0x9, 0x81, 0x7ff, 0x0, 0x44ce, 0x81, 0xb, 0x5, 0x8, 0x34, 0x1, 0x61, 0x3, 0x9, 0x6, 0x7, 0x4, 0x80, 0x0, 0xfffffffe, 0x93cc, 0x4, 0xe3, 0xff, 0xff4, 0x2, 0x6, 0x8, 0x80, 0x3, 0x9, 0x36b59e69, 0x3, 0x9, 0x2, 0xc160, 0xfffffffd, 0x9, 0x6, 0x9, 0x1, 0x72c, 0x8, 0x1, 0x6, 0x1, 0x9, 0x2, 0x10001, 0x9c54, 0xcd3, 0x6, 0x30, 0x0, 0x8, 0x40, 0xc588736, 0xfffff50a, 0x8, 0x4, 0x100, 0x2, 0x9, 0x9, 0xe, 0xdae1, 0x4, 0xe, 0xd, 0xa17, 0xc00, 0xfffffff9, 0x3, 0x0, 0x0, 0x8, 0x3ffc0, 0x100, 0x8000, 0x7be, 0x956c, 0x9, 0x3, 0x8000, 0x10, 0x2000000, 0x1, 0xffffffff, 0x7, 0x1600000, 0x6, 0xa4, 0x8, 0x7, 0x4, 0x5, 0x8, 0x800, 0x5, 0x6, 0x0, 0x6, 0xfffffff9, 0xf332, 0x5, 0x2, 0x9a62, 0x3, 0xc, 0x8, 0xa, 0x4, 0x200, 0xc02, 0x0, 0x9ce, 0xaf5, 0x9, 0x8001, 0x4, 0xd0, 0x9, 0x1, 0xfffffe01, 0xea, 0x4, 0x5e, 0xe, 0x1ff, 0x2, 0x71, 0x2, 0xb76, 0xfffff5b7, 0x1, 0x2, 0x6, 0x2, 0x6, 0x0, 0xd37, 0x5, 0x2, 0x7fffffff, 0x0, 0xd, 0xfffffff8, 0x4, 0x80, 0x1, 0x7af0, 0x535a12d4, 0x2, 0x7fff, 0xde7c, 0x100, 0x3, 0x9, 0x6, 0x5, 0x3, 0x82, 0x55f4, 0x3b07, 0x9, 0x800, 0xffffffff, 0x2, 0x401, 0xa55, 0x1, 0x8, 0x5, 0xa72e, 0xfffff17a, 0xcc7, 0x1, 0x2, 0x9, 0x87, 0x401, 0x8, 0x76, 0x101, 0xffffffff, 0x3, 0x2, 0x4, 0x8, 0x80000001, 0x8, 0x2, 0x6, 0x3, 0xb723, 0xac, 0x6, 0x9, 0x400, 0x3, 0x80000001, 0x8, 0x2, 0x80000000, 0x7, 0x1, 0x4, 0xfffff1ed]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x6, 0x7, 0xf, {0xce, 0x2, 0x40, 0xbd5, 0x270c, 0x7fff}, {0x4, 0x1, 0xc, 0x3, 0x4, 0x6}, 0x5, 0x7b5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x9}}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x9, 0x1, 0x5, {0x4, 0x0, 0x7f, 0x6, 0x0, 0xf}, {0x8c, 0x2, 0x6, 0x9, 0x8001}, 0x5aa, 0x1, 0x2}}]}]}}]}, 0x11a8}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff0200000000000000000000000000010420655800000003010008000c0086dd080088be000000041807e8070100000000000007080022eb000000042c153707020000000000000000089f1d0800655800000000bdefe1370143a3724b958a7fa0b74206ca5b28afec7d800519611fc8cdb6f826ac1d33cb3ed98a7c12ea00b1bd4d417c35b29acc97a77afd2a9cc1c878deef6a622b80edf5d09b60a04ef5a4063077c7ce035402694ab6097077271a02599b578d76d57b0d36be9c"], 0x76) pwritev(r3, &(0x7f0000002f40)=[{&(0x7f0000002d00)="792b5b8717d6db2ad546b2353590f8392061c2d14bca27d639acb1fabf5d3fe79a968d1837894265ac9b3e3590a710189b128853cc2aa4a50a86aee2b75d72ade1c3ea2165740cdfce591bc928f61e466c2a72d7e52aa5201f84e5b43871396be7a279be1324e410adda78def8ada71003a33ab4c68dda3727b3ee3cf658160889153efc9b540962635ae320c07c7e9322ef9e427b233d61df5c4991e219099a1c22a5521f756edff2cdb0511ef6f686fd26964a213838a9812b6e17c36f8f1f5ff51f3f833f04bf9ed43dca88ddfbd9ea51b6988e", 0xd5}, {&(0x7f0000002e00)="326e37c242fc42281ed9", 0xa}, {&(0x7f0000002e40)="dd954f2edfc501b9574e8506368b5e769c85f1c6e51886648e9fa69d07d198d53a80b059856feb23305d4af0aeaf384a9e6379740c03984200e04e124e9636bf0c0a66c717d2839005119f0a4b1398ea31e11c3662cbab0c", 0x58}, {&(0x7f0000002ec0)="fb449f1509dd93004f4c0a9ea64a24ecf15fa7", 0x13}, {&(0x7f0000002f00)="cc5200b7ff9db9f0169eaaaa6b52681d66d455463b8831a36d22cefcf3f88125", 0x20}], 0x5, 0x63d, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 3.351517659s ago: executing program 2 (id=3954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000540)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000640)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000ac0)=""/47}, {&(0x7f0000000b00)=""/224}, {&(0x7f0000000c00)=""/4096}, {&(0x7f0000001c00)=""/124}, {&(0x7f0000001c80)=""/60}]}}, {{&(0x7f0000001cc0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001dc0)=""/149}, {&(0x7f0000001e80)=""/118, 0xffffffe2}, {&(0x7f0000001f00)=""/188}, {&(0x7f0000001fc0)=""/57}, {&(0x7f0000002000)=""/135}, {&(0x7f00000020c0)=""/101}, {&(0x7f0000002140)=""/171}], 0x0, &(0x7f0000002200)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000002580)={0x7, 'pimreg1\x00', {0x7a5}, 0x14}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000002540)={0x41, 0x0, 0x2}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000022c0)={r6, 0x20, &(0x7f0000002300)={&(0x7f0000002340)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x8041) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250f008000240007800c0003"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000025c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20040040}, 0x1000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x13, r1, 0x0) 3.345757718s ago: executing program 4 (id=3955): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000000c099e86b3702fc4900000008000000f6289e82e27b4d5f7e3efbc9684ed7c5b87642069b9e5b105d1b5b891d8e4e761808f43511400d4c51245797012d3326e06aabb2c6185afe34291b9a1bd927504362a4d2deb74104719bf22c2b918d030d135d1fc03a5d611e4a86e3097b8b80cae26bb5174168e55040fc8a4f1b5d2d4a3afc8ea8726906b9e2871ba8f5e3c044f5326c962b44a1be3d5f616cd5a58128341dc07c483f811d5e42176000"/187, @ANYRESDEC=r0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b00000000000500090001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r1 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000f12000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0xdfb95000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket(0x2d, 0x2, 0x0) connect$netlink(r4, &(0x7f00000000c0)=@proc={0x2d, 0x0, 0x25dfdbfe, 0x8000}, 0xc) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x7f, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e26, @rand_addr=0x64010101}}}, 0x108) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aa86dd60002000001c2b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000002800000000000000000", @ANYRES32=0x41424344, @ANYRESOCT=r2, @ANYRESDEC=r3], 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x2f, 0x0, &(0x7f0000000080)=0x700) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x8, @remote}, 0x10, 0x0, 0xd1, &(0x7f0000000380)=[@mask_cswp={0x0, 0x114, 0x9, {{0x1, 0x1ff}, &(0x7f0000000400), &(0x7f0000000340)=0xdcd, 0x6, 0xffff, 0x0, 0x5, 0x0, 0x1}}], 0x48}, 0x9895) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x8000400) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x40000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) getsockopt(r0, 0x8, 0x7, &(0x7f0000000800)=""/156, &(0x7f00000008c0)=0x9c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000a00)=[{&(0x7f0000000a40)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000904fcff", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [r8, r8]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}], 0x50, 0x40800}}], 0x1, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d1}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 3.080260241s ago: executing program 4 (id=3956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xe, 0x0, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d14390ccdec53f3a8e9a83b400ffffffff0000791048ff000000006104480000000000950000004d4fd540978d0d248dbb36e63887b5c2a26cbaed3252ba4994368c2ac0aa6b3543bf6fb7fba03ce4e91466"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$netlink(0x10, 0x3, 0x15) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x9) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000600)={0x1f, 0xffff, 0x2}, 0x6) socket$kcm(0x1e, 0x5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) 2.37219808s ago: executing program 3 (id=3957): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000500)={@broadcast, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@generic={0x2, 0x6, "59a2d6", 0xd4b, 0x73, 0x1, @local, @empty, {[], "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"}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 749.06413ms ago: executing program 4 (id=3958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r3, @ANYBLOB="4000308014000400403a050c5baee2004ef2b6d713459a7a20000180080001000000000014000380080002000200000006004100000300000500020002000000"], 0x5c}}, 0x0) 730.134905ms ago: executing program 0 (id=3959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x4}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001d00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x84000) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001900), &(0x7f0000001940)=0xc) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000001b80)={0x3de0000000000000, 0x4, 0x4, 0x3, 0x6, 0x0, [{0x9, 0x5, 0x9, '\x00', 0x4}, {0xb, 0x9649, 0x0, '\x00', 0x1000}, {0x7, 0x8, 0x8, '\x00', 0x800}, {0x7, 0x400, 0x40000000000000, '\x00', 0x400}, {0x7, 0x80000000, 0xd2, '\x00', 0x802}, {0x7, 0x40000008, 0xfffffffffffffe01}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001980)={{{@in=@empty, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000001a80)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a0cf660000f2170e65e3f503a7e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r10, 0x0, 0xe, 0x0, &(0x7f00000009c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) sendmmsg$unix(r3, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x50, 0x40800}}], 0x1, 0x0) 708.851421ms ago: executing program 3 (id=3960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'veth0_macvtap\x00', {0x2, 0x4e22, @multicast1}}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}]}]}, 0x38}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000005c0)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000640)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x6) listen(r2, 0xa) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r1, 0x200, 0x0, 0x40000}, 0x14}}, 0x8d4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000580)=0x79) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100001008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x404a000}, 0x808c0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 589.223084ms ago: executing program 1 (id=3961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000601000000000000", @ANYRES32, @ANYBLOB="000000000000001064080000000000001800000000000000000000000000000195000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/152, 0x98}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$inet6(0xa, 0x5, 0xff) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000d80)=0x6d91, 0x4) sendmsg$sock(r3, &(0x7f0000000dc0)={&(0x7f0000000e00)=@in6={0xa, 0x4ea3, 0x10081, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000e80)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x845) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x18, 0x140a, 0x109, 0x70bd69, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000050) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="6a3f9ab8d42d2ffd508da778faa9357279d3a8", 0x13}], 0x1}, 0x4000) write$tun(r1, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0], 0xffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="2e000000000000000000000000000000611800000000000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000001d0802000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x14, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x14, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001480)={r10}, 0xc) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000018}, 0x80) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000680)='gre0\x00', 0x10) 553.455643ms ago: executing program 2 (id=3962): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c804) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0]}, 0x40) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25170000005c00068014000300322d00742d2b7a476dc9e5364c4323844400040067636d28616573290000000000000000000000000000000000010000000000001c"], 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x6, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[], 0x0) 498.664768ms ago: executing program 3 (id=3963): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000020000000100000f03deffff01000000010000000300000044942d000000000000000f010004008400002e"], &(0x7f0000000640)=""/2, 0x46, 0x2, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "adf83dd9149bc431", "bbc6ae386b11411f6ff3dce3504e9d5c", '\x00', "a5cc48f33a8300"}, 0x28) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 370.115367ms ago: executing program 0 (id=3964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'tunl0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffd, 0x2}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000780)={'syzkaller0\x00', @random="2b0100004ec6"}) 338.82849ms ago: executing program 2 (id=3965): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x10}, @jmp={0x5, 0x1, 0xc, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 286.706668ms ago: executing program 4 (id=3966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000080), 0x10) sendto$l2tp(r1, &(0x7f0000000180)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) recvfrom$l2tp(r1, 0x0, 0x0, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4000000}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 157.131491ms ago: executing program 2 (id=3967): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x67) listen(0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000284000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5490000090780000"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRES64=r1, @ANYRESHEX=0x0], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xffffff71) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r4, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x20008080) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f0000000ac0)={0xa, 0x4001, 0xffff, @loopback={0xfec0ffffffffffff}, 0xfffffffd}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002580)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000006000000000000000080000018110000", @ANYRES32, @ANYBLOB="9a4a57646e32971386fdf0397a3015aed7ae0564e7ed1850880bf8435e3febd6d9b64fab8e2f49f84880417fc922d1d156d5cfca0521f11a08c365a1e029acf4a9ac15043fa61e6cb8723b75963935e8e28a5765e386cfc9c25347110ed49326fa7ca1271f", @ANYRES32, @ANYBLOB="0000000000000000b702001000000000850000008600000061660a000400000018010000202070251e000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200007708000000b7030000070000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000"], &(0x7f00000021c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x80100, 0x27, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000002240)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x9, 0x3}, 0x10, 0x1ec8c, 0xffffffffffffffff, 0x0, &(0x7f0000002540), 0x0, 0x10, 0xcfc8}, 0x94) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000c40)=""/4097, &(0x7f0000001c80)=0x1001) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001cc0)={r3, 0xffffffffffffffff, 0x1b, 0x0, @val=@netfilter={0x7, 0x1, 0x2}}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000001d40)={r7}, 0x8) sendmsg$nl_generic(r8, &(0x7f0000002a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002a00)={&(0x7f0000002640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00t\x00', @ANYRES32=0x0, @ANYBLOB="78004b800800a500ac141421a687e48c41afbef8f7c908ab64493e2ad5d6d4928f0483f1ad68bdc3b027e3f178fdcaf474f295a32282ae577acb5ff55c939572043bd0019cc6dc8b721bbbcb0ac89be61e058679fa71ed3a803c64f3d45f4b7f518e41fe08000a00", @ANYRES32=r0, @ANYBLOB="0c00f500010000000000c1ed817f9adf988dd182d4f54b75e69420792396c195d9fa9664c917d57bbbeafd82698c56259b40ea5ae039aba6b317097d8b9f4d3406386b46b835c42e424fa5e6f0d06ec1e01b7b204aefdc2874e8a828b86bbebc953b53a3b275fa9a96f8b353922b538928f555330081c75caff43322c7214ec3a2db162cd402f626c44b2671ea0f6e0ba054e06a50198c2a33f8b41230c91a0000"], 0x3bc}}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d80)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000080)=0x3, 0x4) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 149.451873ms ago: executing program 1 (id=3968): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={&(0x7f0000000440)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40841) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000006c0)={0x1, 0x8, 0x8dd}, &(0x7f0000000700)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000740)={&(0x7f0000000780)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000800)='A', 0x1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="20000000000000008400000b00"/28, @ANYRES32=r8], 0x20, 0x44014}, 0x2c048904) r9 = socket$rds(0x15, 0x5, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000880)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0x3f, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x10000042, 0x0, 0x2}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r12 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r12, &(0x7f0000000340)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) bind$pptp(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x3c}, @in=@loopback, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x4c, 0x12, {{'echainiv(aegis128-aesni)\x00'}, 0xfffffffffffffd65, 0x80}}]}, 0x13c}}, 0x0) 42.446366ms ago: executing program 0 (id=3969): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x8, 0x2, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'gretap0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x1, 0x0, {{0x28, 0x4, 0x2, 0xe, 0xa0, 0x67, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x34, 0x7a, 0x1, 0x6, [{@broadcast, 0x100}, {@empty, 0x2}, {@private=0xa010101, 0x5}, {@loopback, 0x8}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x844}]}, @lsrr={0x83, 0x1f, 0x1d, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @empty, @loopback]}, @lsrr={0x83, 0xb, 0xfb, [@empty, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x74, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@multicast2, 0x100}, {@rand_addr=0x64010101, 0x7f}, {@rand_addr=0x64010100, 0xc}]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r1, @ANYBLOB="0900000000000000000000000000000000000000b999cecb0ad25536057f2e2d6cdd335a0fc25c31b256bd54d466acddf514c798ab6e6ecc6936595810a339c8fad44b64f9de23be0573eb048b3a4709731e9388f7a48ca0fe7e8d51d90b40a8037cab5ab06a1e46186cbc42f445bad0273999e6704acfa56889391a83d1cd71e80e91bb5e3f645a6b03e33649f74b05e708a3bcc5aac5864b8a5d75da9828b8", @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000140)=@newtaction={0x878, 0x30, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{0x168, 0x1, [@m_ipt={0xc8, 0x1a, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x74, 0x6, "c3ac3bc5b11a8b0ff9276fd3351135eea420c626beafd4f204c348e4a2cbea4acb1503ea420c14d13b519d184693cca2998134f6f6dc0a5aa589a1e93de85e076f089337502fca0bda552abd9e25d95ddb9b5020397700dea428e3584ad18ecc9fdb2bbf2f51f89b7ccb921c3e54e885"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x9c, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3d42}]}, {0x3d, 0x6, "58ab19ca3bd0aa9e673b01a8f6c4eef3e18d9245f767cef5a40078414187a5c60a01be308e42a9261fe9815ef72ef3ee9b0f6c36a9e8897dfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x6fc, 0x1, [@m_ipt={0xa8, 0xa, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x2d, 0x6, "2a24fd8b2ef0a3a43b2abe975e07733a41592a2953dd6af8f9826c1b8c72221e9271912f2404c4babb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x230, 0x1f, 0x0, 0x0, {{0x8}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0xe3, 0x6, {0x8, 'mangle\x00', 0x4b, 0x3, "8977f0d2e5277e91b7a779d17c1118cd9806741316c36a142cafa309a5ad1a4f8a0a13ece8c70dd19f0d142b7f95d87a6c1e6466d2a18c964104631285555c28d4baf4a9702edd2f01108b48899eaddf66d2bf98c01ea1b5640bfd32a1293893feb167043b2a63994a98586b46b310396bb5a24881167d90f01ac8d5cb06d60d06e3fb2f5b0b4238ec5be43a237b4d3d2d0bb85ac0ac3949dd41458433e74ca95c87d04b8b767b248b5d49521c20c9e7b122db5934b075e72d"}}]}, {0xc1, 0x6, "d1549816432bea507a9be060ad257445d260002051bbd763d616472b7a990d879037640fc22bddaba91102475710c53d3a7d2fc36f34ab8f80ddd0618599d36a851064831753b8510db9eca23a2822f8222636bade20de765a3b89e9cf9332736c0c358772214912e53c1daa8cc82bb8bfc0165290e13cdef5ede3c8416786d6d60b53a02b4ca6607dd40eb0ec915ed0cb7ee39d52bb6f74f878593d2e9f2621a759645eca1f60e6f24da659c012b9f1f6e05af2d739cfd0f381e2e941"}, {0xc, 0x7, {0x0, 0x5957bacc50bdc5d}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0xa4, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x4d, 0x6, "f5053a4cf03454f3885099dd490b7c122c8ae02e17c39fd5f4d5ac71b4a7be364106d03da80482c9fc2c4bfc36179f89269411e859e1d5aa9b67dca171087ef4dfe18c3f9e0b51dc0c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x37c, 0x13, 0x0, 0x0, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x49, 0x6, {0x1, 'security\x00', 0x83, 0x2000, "0078c1bc48323c63b16764431131b071851c94955b81c2af6e33e6f744cba0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xad, 0x6, {0xc, 'filter\x00', 0x0, 0x11, "55cabad500bdcad3dc262d56abc4bfe2c26ac828b5c7690b08d22ab00bad99ac8d4d8f8e793922989990dcc4d3dc10596d96d95c7ea700f7fe75c1b04e0a5de69cd425cc4e314c4cd8c1531e95438e2720681a2507f5bf0ece26a70b9b882e5c496b540a260d06d9ac92e21471ecb560829922747df821ac19c8e83d92492a0c653130"}}, @TCA_IPT_TARG={0x127, 0x6, {0x5e, 'raw\x00', 0x5, 0x6, "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"}}]}, {0xf9, 0x6, "89a738304aa9345750c6aad3303aa5d998ca4baaee3aafdeb752cf50657b802d00e7d0c2746ce11543fa0acb5e2be23ef3eefab3e5a3764deecd7f6be1bb0c46cc0b0d4697205895948518c9c727c564af69a5626d59073864391e50696922a2c703d012cc51f38f4e67e7fa10c5d553a55d7778794bb2cbfce9ddafea075578afddb3bee3539b3fb8ccbfac1b6cdc998f9b834769776d287f344984eabff3b7e022ba403f374f1af967441c3d84629064096f025357a850bfb7537d12606ec656d82303407e00d45a20dc94c28ae88191188e765c8d99857dd1c8365976e44391ba59eb3a21d994670b97cb0a64ed0ebda7a357b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x878}, 0x1, 0x0, 0x0, 0x10}, 0x4800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x80, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x881) syz_emit_ethernet(0x72, &(0x7f0000000000)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "8d0022eb00000000d9dedb35"}}}}}}}, 0x0) 0s ago: executing program 0 (id=3970): r0 = socket(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x4bc, 0x0, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x6}, 0x7, 0x59, 0x8, 0x79, 0x12, 'syz0\x00', "058c338cab6c994db91b7fdfa29f58fc6a7064e373d51f8beb8ca4cdd0193ac5", "6ba88f1361508dc0933982be4b80595d47b18201c2a85c56e306574d2a46a2fc", [{0x8, 0x4a67, {0x0, 0x1}}, {0x0, 0x7ff, {0x3, 0xa}}, {0x2, 0x0, {0x3, 0x8}}, {0x7f, 0x0, {0x1, 0x7}}, {0xf2b, 0x3, {0x3}}, {0x9, 0xb, {0x2, 0x6}}, {0x180, 0x9, {0x0, 0x8001}}, {0x2, 0x0, {0x1, 0x4}}, {0x660, 0x81, {0x2, 0x7f}}, {0x3, 0x8, {0x1, 0x4}}, {0x3, 0xfffa, {0x1, 0x400}}, {0x6, 0xaf, {0x3, 0x80}}, {0xe9, 0x48, {0x3}}, {0x8, 0x8001, {0x1, 0x1000}}, {0x0, 0xf5d0, {0x3, 0x8}}, {0xd, 0xc2a, {0x2, 0x81}}, {0x1, 0x5c3, {0x1, 0x2}}, {0x2, 0x8, {0x3, 0x46000000}}, {0x8, 0x10, {0x3, 0x8}}, {0x5, 0x2000, {0x3, 0x5}}, {0xc, 0x35c, {0x0, 0x42}}, {0x6, 0x6, {0x2, 0x100}}, {0x7, 0x3, {0x1, 0x1}}, {0x2, 0xfe3, {0x3, 0x7}}, {0x100, 0xfffb, {0x1, 0x27b}}, {0x7, 0x250c, {0x1, 0x6}}, {0xd, 0x9a81, {0x0, 0x6a3b}}, {0x8e, 0xd, {0x1, 0x101}}, {0xfffb, 0x3, {0x1, 0xd1d7}}, {0x3, 0x8, {0x1, 0x3}}, {0x400, 0x4, {0x0, 0x400}}, {0x6, 0x8001, {0x2, 0xf}}, {0xffff, 0x3, {0x0, 0xb4b}}, {0x24e6, 0x6, {0x3, 0x5}}, {0xffff, 0x3a8b, {0x1, 0x9}}, {0x7e, 0x1, {0x1, 0x60}}, {0xc, 0x5, {0x3, 0x1}}, {0x9, 0x5, {0x0, 0xb}}, {0xf49c, 0x3, {0x0, 0x7}}, {0x8, 0x800, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffff3}, 0x8, 0x5, 0x6, 0x4, 0x5, 'syz0\x00', "ef1fcc22cbbbc2e0160797c63a23a0e990e9975abe4bedc20ab7643c8cd2f7d2", "5f2681d9be0b6a121a0bce8eff56a056e27a3a2bd21d6e50f3e6e2c9d3c2b479", [{0x70, 0x1, {0x2, 0xb}}, {0x9, 0x4, {0x0, 0xe}}, {0x9, 0x8f, {0x1, 0x800}}, {0x8, 0xf3, {0x1, 0xfffffc01}}, {0x5, 0x5, {0x2, 0x3}}, {0xd, 0x3, {0x0, 0xffffffff}}, {0xa, 0x800, {0x2, 0x5}}, {0x7, 0x0, {0x2, 0xda}}, {0x8, 0x1, {0x1, 0x5}}, {0x97e, 0x1, {0x1, 0xffffff08}}, {0x8, 0x6, {0x0, 0x8}}, {0x7a, 0x4, {0x3}}, {0x7, 0x0, {0x0, 0xf38}}, {0x95, 0x4, {0x2, 0x7}}, {0x6, 0x3ff, {0x2, 0x7fffffff}}, {0x40, 0x0, {0x2, 0x10}}, {0x1, 0x1, {0x2, 0x3}}, {0x101, 0xff, {0x1, 0x5}}, {0xffff, 0x6fd4, {0x0, 0x4}}, {0x252, 0x1, {0x2, 0x3}}, {0x9, 0x7, {0x2, 0xfffffff8}}, {0x1, 0x9, {0x2, 0x8}}, {0xfff, 0x401, {0x2, 0x2}}, {0xa, 0x1, {0x0, 0x100}}, {0x8, 0x7, {0x2, 0x1}}, {0x1, 0xf, {0x1, 0x1}}, {0x4, 0x1ff, {0x2, 0xa}}, {0x40, 0x2, {0x2, 0x4}}, {0x8, 0x9, {0x1, 0x9}}, {0x1000, 0x401, {0x2, 0x100}}, {0x6, 0x5, {0x2, 0x101}}, {0x2, 0x5a49, {0x2, 0x7}}, {0xd, 0xffff, {0x1, 0x7f}}, {0x2, 0x1, {0x2, 0x81}}, {0xffc0, 0x0, {0x3, 0x2}}, {0xad, 0xe2, {0x3, 0x1498}}, {0x8, 0x100, {0x2, 0x1}}, {0x0, 0x9, {0x1, 0x2}}, {0x9, 0x7, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0x7}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8000}, 0x14000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6000, 0x11}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c801}, 0x4040) kernel console output (not intermixed with test programs): 0x10/0x10 [ 344.754681][T17713] do_syscall_64+0x166/0x520 [ 344.754700][T17713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.754717][T17713] ? clear_bhb_loop+0x70/0xc0 [ 344.754738][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.754755][T17713] RIP: 0033:0x7fe2c755fd8e [ 344.754773][T17713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 344.754787][T17713] RSP: 002b:00007fe2c8447fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.754806][T17713] RAX: ffffffffffffffda RBX: 00007fe2c84486c0 RCX: 00007fe2c755fd8e [ 344.754822][T17713] RDX: 000000000000000f RSI: 00007fe2c84480a0 RDI: 0000000000000005 [ 344.754833][T17713] RBP: 00007fe2c8448090 R08: 0000000000000000 R09: 0000000000000000 [ 344.754844][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.754854][T17713] R13: 00007fe2c7826038 R14: 00007fe2c7825fa0 R15: 00007ffda90a4b18 [ 344.754886][T17713] [ 345.176619][ T7354] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.344192][ T7354] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.461525][ T7354] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.520702][T17734] vlan2: entered promiscuous mode [ 345.520739][T17734] hsr0: entered promiscuous mode [ 345.520990][T17734] vlan2: entered allmulticast mode [ 345.521005][T17734] hsr0: entered allmulticast mode [ 345.521017][T17734] hsr_slave_0: entered allmulticast mode [ 345.521039][T17734] hsr_slave_1: entered allmulticast mode [ 345.576891][ T7354] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.634280][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 345.663600][T17737] hsr_slave_0: left promiscuous mode [ 345.671136][T17737] hsr_slave_1: left promiscuous mode [ 345.997118][T17696] rxe_eth0 speed is unknown, defaulting to 1000 [ 346.279451][ T30] audit: type=1804 audit(1792909285.245:14): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2942" name="/newroot/7/cgroup.controllers" dev="tmpfs" ino=55 res=1 errno=0 [ 346.461697][T17748] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2945'. [ 346.570656][ T5637] Bluetooth: hci1: command tx timeout [ 346.799945][ T7354] bond2 (unregistering): (slave geneve2): Releasing active interface [ 346.820311][ T7354] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 346.820338][ T7354] bridge1 (unregistering): left promiscuous mode [ 346.842372][ T7354] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 346.842394][ T7354] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - 6e:ed:f2:2d:7a:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 346.842420][ T7354] bridge3 (unregistering): left promiscuous mode [ 346.842438][ T7354] bond4 (unregistering): (slave bridge4): making interface the new active one [ 346.842459][ T7354] bridge4 (unregistering): entered promiscuous mode [ 346.880770][ T7354] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 346.880796][ T7354] bridge4 (unregistering): left promiscuous mode [ 346.961106][ T7354] bond10 (unregistering): (slave bridge9): Releasing active interface [ 346.961130][ T7354] bond10 (unregistering): (slave bridge9): the permanent HWaddr of slave - 12:28:1c:fe:ae:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 346.990534][ T7354] bond10 (unregistering): (slave bridge10): Releasing active interface [ 346.996471][ T7354] bond10 (unregistering): (slave bridge11): Releasing active interface [ 347.016460][ T7354] bond10 (unregistering): (slave bridge12): Releasing active interface [ 347.020798][ T7354] bond10 (unregistering): (slave bridge13): Releasing active interface [ 347.027602][ T7354] bond10 (unregistering): (slave bridge14): Releasing active interface [ 347.054383][ T7354] bond10 (unregistering): (slave bridge15): Releasing active interface [ 347.067830][ T7354] bond10 (unregistering): (slave bridge16): Releasing active interface [ 347.072700][ T7354] bond10 (unregistering): (slave bridge17): Releasing active interface [ 347.096328][ T7354] bond10 (unregistering): (slave bridge18): Releasing active interface [ 347.100978][ T7354] bond10 (unregistering): (slave bridge19): Releasing active interface [ 347.122480][ T7354] bond10 (unregistering): (slave bridge20): Releasing active interface [ 347.156447][ T7354] bond0 (unregistering): Released all slaves [ 347.188207][ T7354] bond1 (unregistering): Released all slaves [ 347.205939][ T7354] bond2 (unregistering): Released all slaves [ 347.213563][ T7354] bond3 (unregistering): Released all slaves [ 347.259747][ T7354] bond4 (unregistering): Released all slaves [ 347.282598][ T7354] bond5 (unregistering): Released all slaves [ 347.297816][ T7354] bond6 (unregistering): (slave veth7): Releasing active interface [ 347.298519][ T7354] bond6 (unregistering): Released all slaves [ 347.333641][ T7354] bond7 (unregistering): Released all slaves [ 347.348833][ T7354] bond8 (unregistering): Released all slaves [ 347.361776][ T7354] bond9 (unregistering): (slave veth13): Releasing active interface [ 347.362967][ T7354] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 347.386919][ T7354] bond9 (unregistering): Released all slaves [ 347.397263][ T7354] bond10 (unregistering): Released all slaves [ 347.409941][ T7354] bond11 (unregistering): Released all slaves [ 347.421901][ T7354] bond12 (unregistering): (slave veth15): Releasing active interface [ 347.424127][ T7354] bond12 (unregistering): Released all slaves [ 347.444629][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 347.444663][T17750] netlink: 'syz.2.2944': attribute type 9 has an invalid length. [ 347.601458][T17696] lo speed is unknown, defaulting to 1000 [ 347.670173][ T7354] tipc: Left network mode [ 347.859434][T17774] netlink: 'syz.0.2948': attribute type 2 has an invalid length. [ 348.056157][T17779] openvswitch: netlink: Actions may not be safe on all matching packets [ 348.313918][T17787] tipc: Enabled bearer , priority 0 [ 348.342259][T17790] syzkaller0: entered promiscuous mode [ 348.342281][T17790] syzkaller0: entered allmulticast mode [ 348.509671][T17787] tipc: Resetting bearer [ 348.602508][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 348.635252][ T5637] Bluetooth: hci1: command tx timeout [ 348.653866][T17798] batman_adv: batadv0: Adding interface: veth0 [ 348.653882][T17798] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.653911][T17798] batman_adv: batadv0: Interface activated: veth0 [ 348.700115][T17798] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 348.700138][T17798] batman_adv: batadv0: Removing interface: ip6gretap1 [ 348.702712][T17798] batman_adv: batadv0: Interface deactivated: gretap0 [ 348.702731][T17798] batman_adv: batadv0: Removing interface: gretap0 [ 348.736819][T17798] batman_adv: batadv0: Interface deactivated: veth0 [ 348.736839][T17798] batman_adv: batadv0: Removing interface: veth0 [ 348.788290][T17799] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2951'. [ 348.928376][T17778] tipc: Resetting bearer [ 349.028503][T17778] tipc: Disabling bearer [ 349.067281][T17809] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2953'. [ 349.067415][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 349.092596][ T7354] hsr_slave_0: left promiscuous mode [ 349.111950][ T7354] hsr_slave_1: left promiscuous mode [ 349.205709][ T7354] veth1_vlan: left promiscuous mode [ 349.205778][ T7354] @ÿ: left promiscuous mode [ 350.204151][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 350.715816][ T5637] Bluetooth: hci1: command tx timeout [ 350.736766][ T7354] IPVS: stop unused estimator thread 0... [ 350.782877][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'. [ 350.827918][T17696] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.832030][T17873] netlink: 'syz.2.2964': attribute type 5 has an invalid length. [ 350.838799][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.838940][T17696] bridge_slave_0: entered allmulticast mode [ 350.854478][T17696] bridge_slave_0: entered promiscuous mode [ 350.879914][T17696] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.880064][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.880210][T17696] bridge_slave_1: entered allmulticast mode [ 350.891336][T17696] bridge_slave_1: entered promiscuous mode [ 350.999811][T17696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.006705][T17696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.153490][T17696] team0: Port device team_slave_0 added [ 351.153675][T17876] syzkaller0: entered promiscuous mode [ 351.153693][T17876] syzkaller0: entered allmulticast mode [ 351.178567][T17696] team0: Port device team_slave_1 added [ 351.352280][T17696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.352297][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.352321][T17696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.383482][T17696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.383499][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.383523][T17696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.645189][T17696] hsr_slave_0: entered promiscuous mode [ 351.647237][T17696] hsr_slave_1: entered promiscuous mode [ 351.648009][T17696] debugfs: 'hsr0' already exists in 'hsr' [ 351.648029][T17696] Cannot create hsr debugfs directory [ 352.090448][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 352.470707][T17931] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 352.615331][T17935] FAULT_INJECTION: forcing a failure. [ 352.615331][T17935] name failslab, interval 1, probability 0, space 0, times 0 [ 352.615363][T17935] CPU: 0 UID: 0 PID: 17935 Comm: syz.0.2974 Not tainted syzkaller #0 PREEMPT(full) [ 352.615384][T17935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 352.615395][T17935] Call Trace: [ 352.615402][T17935] [ 352.615410][T17935] dump_stack_lvl+0xe8/0x150 [ 352.615443][T17935] should_fail_ex+0x410/0x560 [ 352.615477][T17935] should_failslab+0xa8/0x100 [ 352.615505][T17935] ? skb_clone+0x212/0x3a0 [ 352.615522][T17935] kmem_cache_alloc_noprof+0x9c/0x600 [ 352.615546][T17935] ? skb_clone+0x212/0x3a0 [ 352.615571][T17935] skb_clone+0x212/0x3a0 [ 352.615592][T17935] bpf_clone_redirect+0x170/0x4b0 [ 352.615624][T17935] ? bpf_test_run+0x1d1/0x830 [ 352.615646][T17935] bpf_prog_885767c90d177146+0x62/0x6b [ 352.615667][T17935] ? __kernel_text_address+0xd/0x30 [ 352.615689][T17935] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.615708][T17935] ? arch_stack_walk+0xfb/0x150 [ 352.615737][T17935] ? lock_acquire+0x115/0x350 [ 352.615764][T17935] ? ktime_get+0x45/0x220 [ 352.615788][T17935] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 352.615809][T17935] ? lockdep_hardirqs_on+0x7b/0x110 [ 352.615827][T17935] ? ktime_get+0x45/0x220 [ 352.615844][T17935] ? seqcount_lockdep_reader_access+0xea/0x100 [ 352.615865][T17935] ? bpf_test_run+0x1d1/0x830 [ 352.615890][T17935] ? bpf_test_timer_continue+0x114/0x390 [ 352.615919][T17935] bpf_test_run+0x354/0x830 [ 352.615964][T17935] ? __pfx_bpf_test_run+0x10/0x10 [ 352.616003][T17935] ? __kasan_krealloc+0xec/0x110 [ 352.616041][T17935] ? eth_type_trans+0x33f/0x640 [ 352.616068][T17935] ? skb_dst_set+0x72/0x140 [ 352.616092][T17935] bpf_prog_test_run_skb+0xe35/0x2230 [ 352.616134][T17935] ? __fget_files+0x2a/0x420 [ 352.616153][T17935] ? __fget_files+0x3a2/0x420 [ 352.616172][T17935] ? __fget_files+0x2a/0x420 [ 352.616197][T17935] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 352.616221][T17935] bpf_prog_test_run+0x2c5/0x340 [ 352.616252][T17935] __sys_bpf+0xa22/0xd90 [ 352.616285][T17935] ? __pfx___sys_bpf+0x10/0x10 [ 352.616321][T17935] ? __fget_files+0x2a/0x420 [ 352.616359][T17935] ? ksys_write+0x242/0x270 [ 352.616383][T17935] ? __pfx_ksys_write+0x10/0x10 [ 352.616409][T17935] __x64_sys_bpf+0xba/0xd0 [ 352.616432][T17935] do_syscall_64+0x166/0x520 [ 352.616449][T17935] ? trace_irq_disable+0x3b/0x140 [ 352.616470][T17935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.616488][T17935] ? clear_bhb_loop+0x70/0xc0 [ 352.616511][T17935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.616528][T17935] RIP: 0033:0x7fbbcc19f559 [ 352.616546][T17935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.616561][T17935] RSP: 002b:00007fbbccfd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.616581][T17935] RAX: ffffffffffffffda RBX: 00007fbbcc426090 RCX: 00007fbbcc19f559 [ 352.616595][T17935] RDX: 0000000000000028 RSI: 0000200000001740 RDI: 000000000000000a [ 352.616606][T17935] RBP: 00007fbbccfd6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.616619][T17935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.616630][T17935] R13: 00007fbbcc426128 R14: 00007fbbcc426090 R15: 00007ffe3bb0a798 [ 352.616663][T17935] [ 352.797851][ T5637] Bluetooth: hci1: command tx timeout [ 353.272247][T17956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2978'. [ 353.272288][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2978'. [ 353.376563][T17958] tipc: Enabling of bearer rejected, already enabled [ 353.407900][T17961] Cannot find set identified by id 65534 to match [ 353.409827][T17961] netlink: 'syz.0.2981': attribute type 21 has an invalid length. [ 353.409846][T17961] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2981'. [ 353.418840][T17961] netlink: 'syz.0.2981': attribute type 4 has an invalid length. [ 353.418858][T17961] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2981'. [ 353.468123][T17963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2980'. [ 353.647139][T17696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.663295][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.664166][T17696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.690593][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.700655][T17696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.746289][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.747183][T17696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.747506][T17971] netlink: 'syz.1.2982': attribute type 6 has an invalid length. [ 353.751922][T17971] Cannot find del_set index 0 as target [ 353.767357][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.106892][T17696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.223533][T17696] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.258637][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.258749][ T7372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.291695][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.291800][ T7372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.412963][T18032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2990'. [ 355.785537][T18049] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2994'. [ 356.057604][T17696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.711539][T18083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2998'. [ 356.822851][T18088] netlink: 'syz.0.2999': attribute type 1 has an invalid length. [ 356.822875][T18088] netlink: 'syz.0.2999': attribute type 2 has an invalid length. [ 356.901214][T17696] veth0_vlan: entered promiscuous mode [ 356.923321][T17696] veth1_vlan: entered promiscuous mode [ 356.983804][T17696] veth0_macvtap: entered promiscuous mode [ 357.000452][T17696] veth1_macvtap: entered promiscuous mode [ 357.025600][T17696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.078303][T17696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.192329][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'. [ 357.229644][ T7359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.229710][ T7359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.229747][ T7359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.229779][ T7359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.538535][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3003'. [ 357.661448][ T7354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.661468][ T7354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.901792][ T7400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.901813][ T7400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.042917][T18132] __nla_validate_parse: 1 callbacks suppressed [ 359.042939][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2932'. [ 359.674259][T18173] syzkaller0: entered promiscuous mode [ 359.674283][T18173] syzkaller0: entered allmulticast mode [ 359.865973][T18179] tipc: Enabling of bearer rejected, failed to enable media [ 360.173709][ T4947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.180358][ T4947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.185389][ T4947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.199539][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.201743][ T4947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.550753][T18184] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.550790][T18184] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 360.550814][T18184] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.958402][T18213] syzkaller0: entered promiscuous mode [ 360.958424][T18213] syzkaller0: entered allmulticast mode [ 360.984327][T18213] tipc: Enabled bearer , priority 0 [ 361.035825][T18213] tipc: Resetting bearer [ 361.098579][T18212] tipc: Resetting bearer [ 361.154256][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3021'. [ 361.167947][T18212] tipc: Disabling bearer [ 361.227323][T18185] rxe_eth0 speed is unknown, defaulting to 1000 [ 361.456220][T18185] lo speed is unknown, defaulting to 1000 [ 361.950374][T18238] syzkaller1: entered promiscuous mode [ 361.950396][T18238] syzkaller1: entered allmulticast mode [ 361.961831][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.999475][T18242] tipc: Enabled bearer , priority 0 [ 362.009229][T18242] syzkaller0: entered promiscuous mode [ 362.009249][T18242] syzkaller0: entered allmulticast mode [ 362.034690][T18242] tipc: Resetting bearer [ 362.235412][ T4947] Bluetooth: hci0: command tx timeout [ 362.300372][T18185] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.300473][T18185] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.300662][T18185] bridge_slave_0: entered allmulticast mode [ 362.304056][T18185] bridge_slave_0: entered promiscuous mode [ 362.321680][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'. [ 362.347436][T18185] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.348471][T18185] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.348629][T18185] bridge_slave_1: entered allmulticast mode [ 362.350272][T18185] bridge_slave_1: entered promiscuous mode [ 362.380680][T18261] netlink: 'syz.0.3032': attribute type 1 has an invalid length. [ 362.427019][T18256] veth9: entered allmulticast mode [ 362.466244][T18263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3031'. [ 362.482410][T18185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.491660][T18185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.589469][T18185] team0: Port device team_slave_0 added [ 362.595265][T18185] team0: Port device team_slave_1 added [ 362.663531][T18185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.663549][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.663572][T18185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.673175][T18235] tipc: Resetting bearer [ 362.749820][T18235] tipc: Disabling bearer [ 362.764585][T18271] sctp: [Deprecated]: syz.4.3034 (pid 18271) Use of int in maxseg socket option. [ 362.764585][T18271] Use struct sctp_assoc_value instead [ 362.780969][T18185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.780985][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.781008][T18185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.968230][T18185] hsr_slave_0: entered promiscuous mode [ 362.968855][T18185] hsr_slave_1: entered promiscuous mode [ 362.972891][T18185] debugfs: 'hsr0' already exists in 'hsr' [ 362.972919][T18185] Cannot create hsr debugfs directory [ 363.153214][T18292] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3040'. [ 363.901943][T18185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.901978][T18185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 363.902002][T18185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.167455][T18322] syzkaller0: entered promiscuous mode [ 364.167478][T18322] syzkaller0: entered allmulticast mode [ 364.169772][T18337] tipc: Enabled bearer , priority 0 [ 364.240086][T18185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.240118][T18185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 364.240141][T18185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.284463][T18322] tipc: Resetting bearer [ 364.314444][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3048'. [ 364.315314][ T4947] Bluetooth: hci0: command 0x041b tx timeout [ 364.412535][T18185] team0: Port device netdevsim1 removed [ 364.440955][T18185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.440988][T18185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 364.441012][T18185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.592897][T18185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.592930][T18185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 364.592955][T18185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.643003][T18321] tipc: Resetting bearer [ 364.668363][T18321] tipc: Disabling bearer [ 364.710196][T18346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3052'. [ 364.711696][T18347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3052'. [ 364.826261][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3055'. [ 364.828898][T18359] netlink: 'syz.3.3055': attribute type 10 has an invalid length. [ 364.854100][T18359] team0: Port device netdevsim1 removed [ 364.862747][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.873473][T18359] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 364.968240][T18185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.973444][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.985318][T18185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.998424][T18362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3056'. [ 365.000283][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.001804][T18185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.029178][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.030083][T18185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 365.034391][T18185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.087521][T18368] ip6_vti0: left promiscuous mode [ 365.087543][T18368] ip6_vti0: left allmulticast mode [ 365.107429][T18368] ip6tnl0: left promiscuous mode [ 365.107451][T18368] ip6tnl0: left allmulticast mode [ 365.186607][T18374] veth0_to_bridge: entered promiscuous mode [ 365.186722][T18374] macsec1: entered allmulticast mode [ 365.186733][T18374] veth0_to_bridge: entered allmulticast mode [ 365.188671][T18374] veth0_to_bridge: left allmulticast mode [ 365.188687][T18374] veth0_to_bridge: left promiscuous mode [ 365.210420][T18185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.236941][T18185] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.245706][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.245812][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.277600][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.277660][ T7372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.396300][T18378] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 365.488169][ T7369] IPVS: starting estimator thread 0... [ 365.575146][T18384] IPVS: using max 27 ests per chain, 64800 per kthread [ 365.577382][T18387] vlan2: entered promiscuous mode [ 365.577403][T18387] bond0: entered promiscuous mode [ 365.577416][T18387] bond_slave_0: entered promiscuous mode [ 365.577647][T18387] bond_slave_1: entered promiscuous mode [ 365.903865][T18395] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 366.020396][T18399] ip6gretap0: entered promiscuous mode [ 366.040406][T18399] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 366.148634][T18403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.149721][T18403] bond_slave_0: left promiscuous mode [ 366.161110][T18403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.164768][T18403] bond_slave_1: left promiscuous mode [ 366.181712][T18403] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 366.196567][T18403] ip6gretap0: left promiscuous mode [ 366.198125][T18403] bond0 (unregistering): Released all slaves [ 366.238590][T18185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.309663][T18185] veth0_vlan: entered promiscuous mode [ 366.353270][T18185] veth1_vlan: entered promiscuous mode [ 366.380117][T18185] veth0_macvtap: entered promiscuous mode [ 366.383279][T18185] veth1_macvtap: entered promiscuous mode [ 366.395382][ T4947] Bluetooth: hci0: command 0x041b tx timeout [ 366.421573][T18185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.438547][T18185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.478148][ T6491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.503168][ T7359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.503223][ T7359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.637345][ T7354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.656413][ T7354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.656431][ T7354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.729736][ T7369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.729757][ T7369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.791319][T18421] netlink: 'syz.1.3071': attribute type 39 has an invalid length. [ 366.814317][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 367.211417][T18434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3013'. [ 367.524022][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 367.524045][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 367.878244][T18451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.337417][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.338357][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.341540][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.343137][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.343979][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.434574][T18440] netlink: 'syz.3.3074': attribute type 4 has an invalid length. [ 368.475519][ T5637] Bluetooth: hci0: command 0x041b tx timeout [ 368.560500][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3078'. [ 368.622840][T18460] erspan0: entered promiscuous mode [ 368.633109][T18460] gretap0: entered promiscuous mode [ 368.791301][T18464] syzkaller0: entered promiscuous mode [ 368.791326][T18464] syzkaller0: entered allmulticast mode [ 368.903478][T18473] netlink: 'syz.2.3081': attribute type 16 has an invalid length. [ 368.903509][T18473] netlink: 'syz.2.3081': attribute type 17 has an invalid length. [ 369.071042][T18476] netlink: 'syz.3.3082': attribute type 1 has an invalid length. [ 369.269368][T18476] bridge6: entered promiscuous mode [ 369.269392][T18476] bridge6: entered allmulticast mode [ 369.294365][T18476] bond8: (slave bridge6): making interface the new active one [ 369.308249][T18476] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 369.623123][T18453] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.049101][T18500] netlink: 'syz.4.3089': attribute type 5 has an invalid length. [ 370.104728][T18453] lo speed is unknown, defaulting to 1000 [ 370.260497][T18505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.293943][T18505] __nla_validate_parse: 4 callbacks suppressed [ 370.293962][T18505] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3091'. [ 370.476401][ T5637] Bluetooth: hci4: command tx timeout [ 370.555017][ T5637] Bluetooth: hci0: command 0x041b tx timeout [ 371.027637][T18529] syzkaller0: entered promiscuous mode [ 371.027666][T18529] syzkaller0: entered allmulticast mode [ 371.086034][T18453] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.087190][T18453] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.087332][T18453] bridge_slave_0: entered allmulticast mode [ 371.093149][T18453] bridge_slave_0: entered promiscuous mode [ 371.103298][T18453] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.103397][T18453] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.103523][T18453] bridge_slave_1: entered allmulticast mode [ 371.108690][T18453] bridge_slave_1: entered promiscuous mode [ 371.144545][T18535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3099'. [ 371.159688][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3099'. [ 371.177616][T18453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.187664][T18453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.281735][T18453] team0: Port device team_slave_0 added [ 371.296935][T18453] team0: Port device team_slave_1 added [ 371.344253][T18519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.401847][T18453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.401864][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.401886][T18453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.406877][T18453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.406892][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.406915][T18453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.491039][T18546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.583144][T18453] hsr_slave_0: entered promiscuous mode [ 371.588483][T18453] hsr_slave_1: entered promiscuous mode [ 371.593724][T18453] debugfs: 'hsr0' already exists in 'hsr' [ 371.593745][T18453] Cannot create hsr debugfs directory [ 371.888674][T18554] netlink: 'syz.1.3103': attribute type 16 has an invalid length. [ 371.888696][T18554] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3103'. [ 371.929418][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 371.934539][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 371.946179][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 371.946831][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 372.078894][T18453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.078927][T18453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 372.078950][T18453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.149603][T18565] tipc: Started in network mode [ 372.149621][T18565] tipc: Node identity , cluster identity 4711 [ 372.149632][T18565] tipc: Failed to obtain node identity [ 372.149658][T18565] tipc: Enabling of bearer rejected, failed to enable media [ 372.153582][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'. [ 372.165743][T18565] ip_tables: iptables: counters copy to user failed while replacing table [ 372.306335][T18453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.306371][T18453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 372.306395][T18453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.354729][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 372.474619][T18453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.474653][T18453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 372.474677][T18453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.536820][T18577] netlink: 'syz.1.3110': attribute type 1 has an invalid length. [ 372.556039][ T5637] Bluetooth: hci4: command tx timeout [ 373.343152][T18453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.377175][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.380363][T18453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.396323][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.397304][T18453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.429774][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.435766][T18453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.475301][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.559814][T18580] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.786686][T18627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.897142][T18453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.985628][T18453] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.020621][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.020729][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.048491][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.048595][ T7359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.052736][T18580] lo speed is unknown, defaulting to 1000 [ 374.206951][T18630] syzkaller0: entered promiscuous mode [ 374.206982][T18630] syzkaller0: entered allmulticast mode [ 374.638119][ T5637] Bluetooth: hci4: command tx timeout [ 376.715121][ T5637] Bluetooth: hci4: command tx timeout [ 376.910192][T18662] __nla_validate_parse: 5 callbacks suppressed [ 376.910211][T18662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3124'. [ 376.910466][T18662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3124'. [ 377.224046][T18673] netlink: 'syz.1.3128': attribute type 13 has an invalid length. [ 377.224061][T18673] netlink: 'syz.1.3128': attribute type 12 has an invalid length. [ 377.609546][T18687] veth0_to_bond: left allmulticast mode [ 377.717892][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 377.797775][T18692] Bluetooth: MGMT ver 1.23 [ 377.811540][T18691] bridge7: entered promiscuous mode [ 377.947276][T18692] lo: entered allmulticast mode [ 377.948030][T18692] tunl0: entered allmulticast mode [ 377.948724][T18692] gre0: entered allmulticast mode [ 377.952878][T18692] gretap0: entered allmulticast mode [ 377.953506][T18692] erspan0: entered allmulticast mode [ 377.959992][T18692] ip_vti0: entered allmulticast mode [ 377.960651][T18692] ip6_vti0: entered allmulticast mode [ 377.963011][T18692] sit0: entered allmulticast mode [ 377.963759][T18692] ip6tnl0: entered allmulticast mode [ 377.970125][T18692] ip6gre0: entered allmulticast mode [ 377.970790][T18692] syz_tun: entered allmulticast mode [ 377.974316][T18692] ip6gretap0: entered allmulticast mode [ 377.978135][T18692] bridge0: entered allmulticast mode [ 377.980949][T18692] vcan0: entered allmulticast mode [ 377.981608][T18692] team0: entered allmulticast mode [ 377.981623][T18692] team_slave_0: entered allmulticast mode [ 377.981639][T18692] team_slave_1: entered allmulticast mode [ 377.984320][T18692] dummy0: entered allmulticast mode [ 377.987716][T18692] nlmon0: entered allmulticast mode [ 377.988485][T18692] batadv0: entered allmulticast mode [ 377.991112][T18692] vxcan0: entered allmulticast mode [ 377.991727][T18692] vxcan1: entered allmulticast mode [ 377.992347][T18692] veth0: entered allmulticast mode [ 378.001185][T18692] veth1: entered allmulticast mode [ 378.003550][T18692] wg0: entered allmulticast mode [ 378.004718][T18692] wg1: entered allmulticast mode [ 378.008703][T18692] wg2: entered allmulticast mode [ 378.010163][T18692] veth0_to_bridge: entered allmulticast mode [ 378.018653][T18692] veth1_to_bridge: entered allmulticast mode [ 378.022490][T18692] veth0_to_bond: entered allmulticast mode [ 378.026310][T18692] bond_slave_0: entered allmulticast mode [ 378.026458][T18692] veth1_to_bond: entered allmulticast mode [ 378.028804][T18692] bond_slave_1: entered allmulticast mode [ 378.029576][T18692] veth0_to_team: entered allmulticast mode [ 378.039247][T18692] veth1_to_team: entered allmulticast mode [ 378.043901][T18692] veth0_to_batadv: entered allmulticast mode [ 378.047190][T18692] batadv_slave_0: entered allmulticast mode [ 378.049658][T18692] veth1_to_batadv: entered allmulticast mode [ 378.050361][T18692] batadv_slave_1: entered allmulticast mode [ 378.052189][T18692] xfrm0: entered allmulticast mode [ 378.053943][T18692] veth0_to_hsr: entered allmulticast mode [ 378.060120][T18692] veth1_to_hsr: entered allmulticast mode [ 378.062583][T18692] veth1_virt_wifi: entered allmulticast mode [ 378.063973][T18692] veth0_virt_wifi: entered allmulticast mode [ 378.064640][T18692] virt_wifi0: entered allmulticast mode [ 378.064778][T18692] veth1_vlan: entered allmulticast mode [ 378.071762][T18692] veth0_vlan: entered allmulticast mode [ 378.073996][T18692] vlan0: entered allmulticast mode [ 378.078260][T18692] vlan1: entered allmulticast mode [ 378.081958][T18692] macvlan0: entered allmulticast mode [ 378.082654][T18692] macvlan1: entered allmulticast mode [ 378.094361][T18692] ipvlan0: entered allmulticast mode [ 378.094526][T18692] ipvlan1: entered allmulticast mode [ 378.094672][T18692] veth1_macvtap: entered allmulticast mode [ 378.119737][T18692] veth0_macvtap: entered allmulticast mode [ 378.120502][T18692] macvtap0: entered allmulticast mode [ 378.150041][T18692] macsec0: entered allmulticast mode [ 378.150814][T18692] geneve0: entered allmulticast mode [ 378.173451][T18692] geneve1: entered allmulticast mode [ 378.174718][T18692] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 378.184057][T18692] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 378.210066][T18692] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 378.214074][T18692] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 378.227811][T18692] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 378.227972][T18692] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 378.228132][T18692] macvlan2: entered allmulticast mode [ 378.228281][T18692] virt_wifi0.2: entered allmulticast mode [ 378.228423][T18692] geneve2: entered allmulticast mode [ 378.228572][T18692] vxcan2: entered allmulticast mode [ 378.228700][T18692] vxcan3: entered allmulticast mode [ 378.232985][T18692] bridge1: entered allmulticast mode [ 378.367725][T18453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.437898][T18700] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 378.475676][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 378.628922][T18453] veth0_vlan: entered promiscuous mode [ 378.720341][T18453] veth1_vlan: entered promiscuous mode [ 378.747025][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3138'. [ 378.859715][T18722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3141'. [ 378.873554][T18722] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.3141'. [ 378.873578][T18722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3141'. [ 378.873595][T18722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3141'. [ 378.873609][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 378.902806][T18453] veth0_macvtap: entered promiscuous mode [ 378.913315][T18453] veth1_macvtap: entered promiscuous mode [ 378.938527][T18453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.961824][T18453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.997005][ T7354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.997746][ T6491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.997788][ T6491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.997820][ T6491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.087277][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'. [ 379.277691][ T7400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.277711][ T7400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.464336][ T7354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.464359][ T7354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.418279][ T4947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.423455][ T4947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.424273][ T4947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.449243][ T4947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.452963][ T4947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.574743][ T7359] smbdirect: ib_dev[s`z1] removed [ 380.593145][ T7229] infiniband s`z1: ib_query_port failed (-19) [ 381.116421][T18795] netlink: ct family unspecified [ 381.324253][T18810] bridge0: left allmulticast mode [ 381.400809][T18777] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.779803][T18777] lo speed is unknown, defaulting to 1000 [ 382.028247][T18831] syzkaller0: entered promiscuous mode [ 382.028268][T18831] syzkaller0: entered allmulticast mode [ 382.206817][T18838] netlink: 'syz.2.3172': attribute type 11 has an invalid length. [ 382.336383][T18777] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.336487][T18777] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.336933][T18777] bridge_slave_0: entered allmulticast mode [ 382.339682][T18848] xt_TCPMSS: Only works on TCP SYN packets [ 382.340122][T18777] bridge_slave_0: entered promiscuous mode [ 382.346752][T18777] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.348466][T18777] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.348848][T18777] bridge_slave_1: entered allmulticast mode [ 382.353049][T18777] bridge_slave_1: entered promiscuous mode [ 382.424723][T18850] xt_TCPMSS: Only works on TCP SYN packets [ 382.556258][ T4947] Bluetooth: hci2: command tx timeout [ 382.608496][T18777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.613605][T18777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.667513][T18777] team0: Port device team_slave_0 added [ 382.670411][T18777] team0: Port device team_slave_1 added [ 382.714601][T18826] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 382.747009][T18777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.747026][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.747050][T18777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.751344][T18777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.751358][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.751379][T18777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.871327][T18858] __nla_validate_parse: 5 callbacks suppressed [ 382.871346][T18858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3175'. [ 382.918127][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 382.933885][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 383.080029][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3177'. [ 383.134656][T18777] hsr_slave_0: entered promiscuous mode [ 383.143455][T18777] hsr_slave_1: entered promiscuous mode [ 383.144192][T18777] debugfs: 'hsr0' already exists in 'hsr' [ 383.144210][T18777] Cannot create hsr debugfs directory [ 383.415948][ T7400] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 383.417033][ T7400] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 383.417127][ T7400] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 383.417162][ T7400] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 383.603678][ T30] audit: type=1800 audit(1792909322.565:15): pid=18881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3182" name="blkio.bfq.time_recursive" dev="tmpfs" ino=364 res=0 errno=-22 [ 383.655282][ T194] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.673855][T18876] syzkaller0: entered promiscuous mode [ 383.673875][T18876] syzkaller0: entered allmulticast mode [ 383.717864][T18883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3183'. [ 383.721747][T18876] tipc: Started in network mode [ 383.721773][T18876] tipc: Node identity a6bcb07b6203, cluster identity 4711 [ 383.722000][T18876] tipc: Enabled bearer , priority 0 [ 383.727855][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3181'. [ 383.823445][ T5637] block nbd4: Receive control failed (result -32) [ 383.918303][T18777] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.991776][T18888] tipc: Resetting bearer [ 384.008825][T18875] tipc: Resetting bearer [ 384.044392][T18875] tipc: Disabling bearer [ 384.208679][T18777] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.374355][T18777] bond0: (slave netdevsim1): Releasing backup interface [ 384.386981][T18777] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.476061][ T6784] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.532931][T18902] bond1: entered promiscuous mode [ 384.533408][T18902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.604059][T18919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3191'. [ 384.636474][ T5637] Bluetooth: hci2: command tx timeout [ 384.657637][T18777] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.694162][T18919] vlan2: entered allmulticast mode [ 384.694187][T18919] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 384.959239][T18929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'. [ 385.100243][T18777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 385.186322][T18777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.187280][T18777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 385.211287][T18777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.245792][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3195'. [ 385.245818][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3195'. [ 385.302070][T18934] netlink: 'syz.1.3196': attribute type 9 has an invalid length. [ 385.319628][T18777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 385.333735][T18777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.342374][T18777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.353557][T18777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.457288][T18777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.503747][T18777] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.523902][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.523971][ T7359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.540029][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.540127][ T7359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.696386][T18949] xt_hashlimit: size too large, truncated to 1048576 [ 385.951266][T18959] block nbd5: server does not support multiple connections per device. [ 385.960333][T18959] block nbd5: shutting down sockets [ 386.405021][T18972] netlink: 'syz.2.3203': attribute type 17 has an invalid length. [ 386.470938][T18976] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20004 [ 386.715211][ T5637] Bluetooth: hci2: command tx timeout [ 386.798942][T18777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.801192][T18963] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 386.801213][T18963] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 386.913850][T18963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 386.915039][T18963] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 387.094564][T18777] veth0_vlan: entered promiscuous mode [ 387.097473][T18963] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 387.097493][T18963] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 387.133672][T18777] veth1_vlan: entered promiscuous mode [ 387.263436][T18963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.263458][T18963] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 387.330640][T18777] veth0_macvtap: entered promiscuous mode [ 387.356299][T18777] veth1_macvtap: entered promiscuous mode [ 387.424092][T18777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.450675][T18777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.625184][ T7372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.625225][ T7372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.625259][ T7372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.625288][ T7372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.853177][ T7359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.853197][ T7359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.992442][ T7372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.992463][ T7372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.127888][T19003] __nla_validate_parse: 10 callbacks suppressed [ 388.127908][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 388.590260][T19019] syzkaller0: entered promiscuous mode [ 388.590283][T19019] syzkaller0: entered allmulticast mode [ 389.421113][T19038] syzkaller1: entered promiscuous mode [ 389.421136][T19038] syzkaller1: entered allmulticast mode [ 389.478515][T19037] netlink: 'syz.2.3219': attribute type 39 has an invalid length. [ 389.720494][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3220'. [ 390.008605][T19060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.008623][T19060] IPv6: NLM_F_CREATE should be set when creating new route [ 390.008676][T19060] IPv6: NLM_F_CREATE should be set when creating new route [ 390.008699][T19060] IPv6: NLM_F_CREATE should be set when creating new route [ 390.123179][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3225'. [ 390.131687][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3225'. [ 390.150502][T19066] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 390.182178][T19065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.194683][T19066] macvtap1: entered allmulticast mode [ 390.251104][T19064] macvtap2: entered allmulticast mode [ 390.760926][T19104] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3238'. [ 390.760942][T19104] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 390.877764][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 392.556236][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 393.298118][T19071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.557968][T19121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 393.579110][T19122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3244'. [ 393.954235][T19138] tipc: Enabled bearer , priority 10 [ 393.962927][T19136] tipc: Resetting bearer [ 394.049047][T19136] tipc: Disabling bearer [ 394.085107][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.087874][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.088606][T19140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.482205][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 394.762732][T19164] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 394.999441][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3258'. [ 395.210748][T19170] syzkaller0: entered promiscuous mode [ 395.210770][T19170] syzkaller0: entered allmulticast mode [ 396.010910][T19188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.319418][T19184] bond0: entered promiscuous mode [ 397.319439][T19184] bond_slave_0: entered promiscuous mode [ 397.319654][T19184] bond_slave_1: entered promiscuous mode [ 397.321305][T19184] batadv0: entered promiscuous mode [ 397.322937][T19184] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 397.332562][T19184] bond0: left promiscuous mode [ 397.332580][T19184] bond_slave_0: left promiscuous mode [ 397.332790][T19184] bond_slave_1: left promiscuous mode [ 397.336049][T19184] batadv0: left promiscuous mode [ 397.792368][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3271'. [ 397.956543][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 397.977385][T19243] netlink: 'syz.0.3275': attribute type 1 has an invalid length. [ 397.977421][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3275'. [ 397.986626][T19246] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3276'. [ 398.015622][ T5637] block nbd5: Receive control failed (result -32) [ 398.336965][T19262] ip_tables: iptables: counters copy to user failed while replacing table [ 398.362007][T19262] syzkaller1: entered promiscuous mode [ 398.362026][T19262] syzkaller1: entered allmulticast mode [ 398.432171][T19270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 398.449878][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 399.093575][T19307] __nla_validate_parse: 1 callbacks suppressed [ 399.093594][T19307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3289'. [ 399.119269][T19307] veth0_macvtap: left promiscuous mode [ 399.268450][T19321] Cannot find add_set index 0 as target [ 399.322480][T19320] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3291'. [ 399.441537][T19326] netlink: 'syz.1.3293': attribute type 1 has an invalid length. [ 399.441558][T19326] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3293'. [ 399.499988][T19331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.499992][T19328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.903683][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 399.935946][T19349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.956754][T19350] ebt_among: dst integrity fail: 301 [ 399.974683][T19349] xt_CT: No such helper "syz0" [ 400.276063][T19375] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3307'. [ 400.306564][T19376] tipc: Enabled bearer , priority 0 [ 400.479732][ T30] audit: type=1800 audit(1792909339.445:16): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3309" name="blkio.bfq.time_recursive" dev="tmpfs" ino=83 res=0 errno=-22 [ 400.740040][T19397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3313'. [ 401.139483][T19370] tipc: Disabling bearer [ 402.038334][T19443] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 402.044377][T19443] netlink: 'syz.2.3326': attribute type 3 has an invalid length. [ 402.223846][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'. [ 402.236227][T19473] syz.3.3333: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 402.236402][T19473] CPU: 1 UID: 0 PID: 19473 Comm: syz.3.3333 Not tainted syzkaller #0 PREEMPT(full) [ 402.236423][T19473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 402.236439][T19473] Call Trace: [ 402.236447][T19473] [ 402.236455][T19473] dump_stack_lvl+0xe8/0x150 [ 402.236486][T19473] warn_alloc+0x24d/0x270 [ 402.236509][T19473] ? kasan_save_track+0x4f/0x80 [ 402.236531][T19473] ? kasan_save_track+0x3e/0x80 [ 402.236554][T19473] ? __pfx_warn_alloc+0x10/0x10 [ 402.236572][T19473] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 402.236597][T19473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.236634][T19473] __vmalloc_node_range_noprof+0x127/0x1540 [ 402.236677][T19473] ? rcu_is_watching+0x16/0xb0 [ 402.236706][T19473] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.236727][T19473] ? __kmalloc_cache_noprof+0x31c/0x600 [ 402.236749][T19473] ? __kmalloc_cache_noprof+0x148/0x600 [ 402.236771][T19473] ? xskq_create+0x56/0x220 [ 402.236801][T19473] xskq_create+0x148/0x220 [ 402.236827][T19473] ? xsk_init_queue+0x8a/0xe0 [ 402.236855][T19473] xsk_init_queue+0x8a/0xe0 [ 402.236882][T19473] xsk_setsockopt+0x52a/0x960 [ 402.236909][T19473] ? __pfx_xsk_setsockopt+0x10/0x10 [ 402.236933][T19473] ? __pfx_aa_sk_perm+0x10/0x10 [ 402.236967][T19473] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 402.236983][T19473] ? __pfx_xsk_setsockopt+0x10/0x10 [ 402.237009][T19473] do_sock_setsockopt+0x17c/0x1b0 [ 402.237038][T19473] __x64_sys_setsockopt+0x13d/0x1b0 [ 402.237068][T19473] do_syscall_64+0x166/0x520 [ 402.237084][T19473] ? trace_irq_disable+0x3b/0x140 [ 402.237104][T19473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.237123][T19473] ? clear_bhb_loop+0x70/0xc0 [ 402.237144][T19473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.237160][T19473] RIP: 0033:0x7fdd8399f559 [ 402.237175][T19473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.237190][T19473] RSP: 002b:00007fdd84850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 402.237207][T19473] RAX: ffffffffffffffda RBX: 00007fdd83c25fa0 RCX: 00007fdd8399f559 [ 402.237220][T19473] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 402.237231][T19473] RBP: 00007fdd83a36b20 R08: 0000000000000004 R09: 0000000000000000 [ 402.237243][T19473] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 402.237253][T19473] R13: 00007fdd83c26038 R14: 00007fdd83c25fa0 R15: 00007ffd691bf5f8 [ 402.237285][T19473] [ 402.241153][T19473] Mem-Info: [ 402.241165][T19473] active_anon:6035 inactive_anon:0 isolated_anon:0 [ 402.241165][T19473] active_file:195 inactive_file:43388 isolated_file:0 [ 402.241165][T19473] unevictable:0 dirty:336 writeback:0 [ 402.241165][T19473] slab_reclaimable:12527 slab_unreclaimable:127247 [ 402.241165][T19473] mapped:29617 shmem:524 pagetables:1311 [ 402.241165][T19473] sec_pagetables:0 bounce:0 [ 402.241165][T19473] kernel_misc_reclaimable:0 [ 402.241165][T19473] free:1207771 free_pcp:41389 free_cma:0 [ 402.241222][T19473] Node 0 active_anon:24140kB inactive_anon:0kB active_file:780kB inactive_file:173352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118468kB dirty:1344kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17984kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 402.241271][T19473] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 402.241316][T19473] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.241375][T19473] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 402.241408][T19473] Node 0 DMA32 free:865236kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24140kB inactive_anon:0kB active_file:780kB inactive_file:173352kB unevictable:0kB writepending:1344kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:165876kB local_pcp:12908kB free_cma:0kB [ 402.241461][T19473] lowmem_reserve[]: 0 0 0 0 0 [ 402.241492][T19473] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.241541][T19473] lowmem_reserve[]: 0 0 0 0 0 [ 402.241572][T19473] Node 1 Normal free:3950488kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.241623][T19473] lowmem_reserve[]: 0 0 0 0 0 [ 402.241653][T19473] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.241761][T19473] Node 0 DMA32: 1313*4kB (UME) 746*8kB (UM) 268*16kB (UM) 339*32kB (UME) 97*64kB (UME) 67*128kB (UM) 83*256kB (UM) 4*512kB (UME) 4*1024kB (ME) 1*2048kB (M) 194*4096kB (UM) = 865204kB [ 402.241903][T19473] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.241987][T19473] Node 1 Normal: 4*4kB (UM) 9*8kB (UM) 13*16kB (UM) 11*32kB (UM) 11*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950536kB [ 402.243380][T19473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.243396][T19473] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.243410][T19473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.243425][T19473] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.243438][T19473] 44103 total pagecache pages [ 402.243450][T19473] 0 pages in swap cache [ 402.243456][T19473] Free swap = 124996kB [ 402.243463][T19473] Total swap = 124996kB [ 402.243471][T19473] 2097051 pages RAM [ 402.243478][T19473] 0 pages HighMem/MovableOnly [ 402.243484][T19473] 433831 pages reserved [ 402.243490][T19473] 0 pages cma reserved [ 402.249987][T19476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3333'. [ 403.016287][T19488] tipc: Enabled bearer , priority 0 [ 403.270049][T19499] x_tables: duplicate underflow at hook 1 [ 403.697576][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3343'. [ 403.709849][T19512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3343'. [ 403.711568][T19481] tipc: Disabling bearer [ 404.661123][T19558] __nla_validate_parse: 3 callbacks suppressed [ 404.661144][T19558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'. [ 404.733703][T19555] batman_adv: batadv0: Adding interface: veth0 [ 404.733719][T19555] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.733747][T19555] batman_adv: batadv0: Interface activated: veth0 [ 404.761882][T19564] netlink: 'syz.1.3353': attribute type 3 has an invalid length. [ 404.761903][T19564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3353'. [ 404.802654][T19564] xt_time: unknown flags 0x4 [ 405.037239][T19568] netlink: 'syz.1.3355': attribute type 7 has an invalid length. [ 405.037254][T19568] netlink: 'syz.1.3355': attribute type 8 has an invalid length. [ 405.149621][T19577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3357'. [ 405.309120][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 405.739058][T19609] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 405.849798][T19609] bond2: entered promiscuous mode [ 405.852154][T19609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.854585][T19606] netlink: 'syz.1.3362': attribute type 4 has an invalid length. [ 405.907544][T19613] bond2: (slave bridge1): making interface the new active one [ 405.907577][T19613] bridge1: entered promiscuous mode [ 405.929119][T19613] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 406.043930][T19609] ipvlan2: entered allmulticast mode [ 406.043952][T19609] bond2: entered allmulticast mode [ 406.043966][T19609] bridge1: entered allmulticast mode [ 406.044269][T19609] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 406.044288][T19609] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 406.239680][T19629] netlink: 'syz.1.3368': attribute type 1 has an invalid length. [ 406.303024][T19629] bond0: entered promiscuous mode [ 406.303067][T19629] bond0: entered allmulticast mode [ 406.305599][T19629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.319808][T19639] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 406.345775][T19636] veth0_to_bond: entered allmulticast mode [ 406.381316][ T7359] IPVS: starting estimator thread 0... [ 406.419219][T19632] erspan1: entered allmulticast mode [ 406.432290][T19632] bond0: (slave erspan1): making interface the new active one [ 406.432311][T19632] erspan1: entered promiscuous mode [ 406.450183][T19632] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 406.466918][T19642] IPVS: using max 28 ests per chain, 67200 per kthread [ 406.524450][T19646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3372'. [ 406.579331][T19650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3373'. [ 406.830390][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 406.830646][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 407.007185][T19674] ip_tables: iptables: counters copy to user failed while replacing table [ 408.133150][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 408.177961][ T7359] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.178891][ T7359] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.178937][ T7359] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.178968][ T7359] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.420947][T19723] ip_tables: iptables: counters copy to user failed while replacing table [ 408.858121][T19741] Bluetooth: ISO socket layer initialized [ 409.835230][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.400128][T19690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.642949][T19764] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3405'. [ 410.644459][T19759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3403'. [ 410.735194][T19769] pim6reg: entered allmulticast mode [ 410.779144][T19771] tipc: Started in network mode [ 410.779174][T19771] tipc: Node identity 42c34914c01b, cluster identity 4711 [ 410.779343][T19771] tipc: Enabled bearer , priority 0 [ 410.791716][T19768] pim6reg: left allmulticast mode [ 410.853888][T19778] syzkaller0: entered promiscuous mode [ 410.853909][T19778] syzkaller0: entered allmulticast mode [ 410.864793][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 410.934012][T19771] tipc: Resetting bearer [ 410.961497][T19767] tipc: Resetting bearer [ 411.060119][T19767] tipc: Disabling bearer [ 411.320109][T19799] netlink: 'syz.4.3413': attribute type 11 has an invalid length. [ 411.409532][T19818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 411.414767][T19819] tipc: Started in network mode [ 411.414793][T19819] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 411.416819][T19819] tipc: Enabling of bearer rejected, failed to enable media [ 411.417176][T19818] tipc: Enabling of bearer rejected, failed to enable media [ 411.455472][T19821] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 411.467078][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3419'. [ 411.542300][T19817] netlink: 'syz.2.3418': attribute type 4 has an invalid length. [ 411.542321][T19817] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3418'. [ 411.571717][T19817] .`: renamed from bond0 (while UP) [ 411.605916][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'. [ 411.607893][T19827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3421'. [ 411.631954][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'. [ 411.636189][T19827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3421'. [ 411.719789][T19832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.774698][T19841] tipc: Enabled bearer , priority 0 [ 411.782809][T19841] syzkaller0: entered promiscuous mode [ 411.782829][T19841] syzkaller0: entered allmulticast mode [ 411.804557][T19841] tipc: Resetting bearer [ 411.819426][T19840] tipc: Resetting bearer [ 411.851325][T19840] tipc: Disabling bearer [ 411.960486][T19851] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 412.300201][T19869] syzkaller0: entered promiscuous mode [ 412.300223][T19869] syzkaller0: entered allmulticast mode [ 412.340417][T19875] netlink: 'syz.3.3434': attribute type 15 has an invalid length. [ 412.355891][T19873] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 412.750193][T19896] IPVS: length: 4096 != 24 [ 413.103517][T19911] ip_tables: iptables: counters copy to user failed while replacing table [ 413.282154][T19929] netlink: 'syz.2.3447': attribute type 4 has an invalid length. [ 413.299913][T19924] bond0: (slave bond_slave_1): Releasing backup interface [ 413.419680][T19927] geneve2: entered promiscuous mode [ 413.731913][T19957] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 414.047898][T19968] macsec1: entered allmulticast mode [ 414.181852][T19972] ip_tables: iptables: counters copy to user failed while replacing table [ 414.403418][T19984] netlink: 'syz.4.3464': attribute type 7 has an invalid length. [ 414.718274][T20001] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 414.803676][T20001] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 414.869398][T20001] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 415.009184][T20001] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 415.124018][T20001] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 415.421099][T20024] syzkaller0: entered promiscuous mode [ 415.421124][T20024] syzkaller0: entered allmulticast mode [ 415.437107][T20031] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 415.460937][T20001] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 415.687631][T20055] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 416.042256][T20073] __nla_validate_parse: 10 callbacks suppressed [ 416.042276][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 416.334065][T17432] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 416.334100][T17432] CPU: 1 UID: 0 PID: 17432 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 416.334119][T17432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 416.334130][T17432] Call Trace: [ 416.334137][T17432] [ 416.334145][T17432] dump_stack_lvl+0xe8/0x150 [ 416.334175][T17432] dump_header+0xd3/0x4b0 [ 416.334201][T17432] oom_kill_process+0x3ab/0x9e0 [ 416.334231][T17432] out_of_memory+0x1064/0x1480 [ 416.334254][T17432] ? try_charge_memcg+0xc32/0x15e0 [ 416.334290][T17432] ? __pfx_out_of_memory+0x10/0x10 [ 416.334310][T17432] ? do_raw_spin_unlock+0xf5/0x200 [ 416.334344][T17432] try_charge_memcg+0xcdf/0x15e0 [ 416.334386][T17432] ? __pfx_try_charge_memcg+0x10/0x10 [ 416.334407][T17432] ? lock_acquire+0x115/0x350 [ 416.334445][T17432] ? charge_memcg+0x47/0x310 [ 416.334471][T17432] charge_memcg+0x1dd/0x310 [ 416.334496][T17432] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 416.334519][T17432] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 416.334545][T17432] swap_cache_alloc_folio+0x4de/0x990 [ 416.334577][T17432] swap_cluster_readahead+0x4f2/0x630 [ 416.334601][T17432] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 416.334644][T17432] swapin_readahead+0x1a3/0xc50 [ 416.334675][T17432] ? __pfx_swapin_readahead+0x10/0x10 [ 416.334699][T17432] ? swap_table_get+0x1e/0x260 [ 416.334715][T17432] ? swap_table_get+0x1e/0x260 [ 416.334733][T17432] ? swap_table_get+0x1e/0x260 [ 416.334751][T17432] ? swap_table_get+0x216/0x260 [ 416.334770][T17432] ? swap_cache_get_folio+0x2e7/0x2f0 [ 416.334794][T17432] do_swap_page+0x3fb/0x4c10 [ 416.334838][T17432] ? __lock_acquire+0x747/0x2de0 [ 416.334856][T17432] ? do_swap_page+0x126/0x4c10 [ 416.334883][T17432] ? __pfx_do_swap_page+0x10/0x10 [ 416.334908][T17432] ? __pte_offset_map+0x1ae/0x240 [ 416.334938][T17432] ? pte_offset_map_rw_nolock+0xea/0x160 [ 416.334960][T17432] handle_mm_fault+0x1398/0x3750 [ 416.334989][T17432] ? handle_mm_fault+0xf1/0x3750 [ 416.335018][T17432] ? __pfx_handle_mm_fault+0x10/0x10 [ 416.335035][T17432] ? lock_vma_under_rcu+0x45a/0x500 [ 416.335079][T17432] do_user_addr_fault+0xb35/0x1480 [ 416.335113][T17432] ? trace_page_fault_user+0x84/0x1e0 [ 416.335136][T17432] exc_page_fault+0x6a/0xc0 [ 416.335165][T17432] asm_exc_page_fault+0x26/0x30 [ 416.335180][T17432] RIP: 0033:0x7fd5e666d414 [ 416.335197][T17432] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a3 83 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 9c 82 ee 00 48 01 d1 39 7c 24 [ 416.335211][T17432] RSP: 002b:00007ffeea955ab0 EFLAGS: 00010206 [ 416.335227][T17432] RAX: 0000001b2e124000 RBX: 0000000000000181 RCX: 0000000000065900 [ 416.335239][T17432] RDX: 0000000001608ec5 RSI: 00007ffeea955b40 RDI: 000000000000001e [ 416.335250][T17432] RBP: 00007ffeea955aec R08: 000000000540e6a3 R09: 3fffffffffffffff [ 416.335261][T17432] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 416.335273][T17432] R13: 00000000000927c0 R14: 000000000006583c R15: 00007ffeea955b40 [ 416.335304][T17432] [ 416.344643][T17432] memory: usage 307200kB, limit 307200kB, failcnt 631 [ 416.344661][T17432] memory+swap: usage 307352kB, limit 9007199254740988kB, failcnt 0 [ 416.344673][T17432] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 416.344685][T17432] Memory cgroup stats for /syz1: [ 416.344906][T17432] cache 0 [ 416.344921][T17432] rss 0 [ 416.344927][T17432] rss_huge 0 [ 416.344933][T17432] shmem 0 [ 416.344939][T17432] mapped_file 0 [ 416.344945][T17432] dirty 0 [ 416.344950][T17432] writeback 0 [ 416.344956][T17432] workingset_refault_anon 8 [ 416.344963][T17432] workingset_refault_file 12 [ 416.344969][T17432] swap 155648 [ 416.344975][T17432] swapcached 212992 [ 416.344981][T17432] pgpgin 131915 [ 416.344987][T17432] pgpgout 131909 [ 416.344994][T17432] pgfault 224970 [ 416.345000][T17432] pgmajfault 8 [ 416.345005][T17432] inactive_anon 8192 [ 416.345012][T17432] active_anon 16384 [ 416.345018][T17432] inactive_file 0 [ 416.345024][T17432] active_file 0 [ 416.345030][T17432] unevictable 0 [ 416.345037][T17432] hierarchical_memory_limit 314572800 [ 416.345044][T17432] hierarchical_memsw_limit 9223372036854771712 [ 416.345051][T17432] total_cache 0 [ 416.345057][T17432] total_rss 0 [ 416.345063][T17432] total_rss_huge 0 [ 416.345069][T17432] total_shmem 0 [ 416.345075][T17432] total_mapped_file 0 [ 416.345082][T17432] total_dirty 0 [ 416.345087][T17432] total_writeback 0 [ 416.345094][T17432] total_workingset_refault_anon 8 [ 416.345101][T17432] total_workingset_refault_file 12 [ 416.345107][T17432] total_swap 155648 [ 416.345114][T17432] total_swapcached 212992 [ 416.345121][T17432] total_pgpgin 131915 [ 416.345127][T17432] total_pgpgout 131909 [ 416.345133][T17432] total_pgfault 224970 [ 416.345139][T17432] total_pgmajfault 8 [ 416.345146][T17432] total_inactive_anon 8192 [ 416.345152][T17432] total_active_anon 16384 [ 416.345158][T17432] total_inactive_file 0 [ 416.345165][T17432] total_active_file 0 [ 416.345171][T17432] total_unevictable 0 [ 416.345177][T17432] anon_cost 0 [ 416.345183][T17432] file_cost 0 [ 416.345200][T17432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3473,pid=20022,uid=0 [ 416.346368][T17432] Memory cgroup out of memory: Killed process 20022 (syz.1.3473) total-vm:99292kB, anon-rss:1276kB, file-rss:21708kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 416.864640][T20081] validate_nla: 3 callbacks suppressed [ 416.864658][T20081] netlink: 'syz.4.3487': attribute type 1 has an invalid length. [ 416.979057][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 416.979199][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 416.999732][T20086] netlink: 'syz.4.3487': attribute type 1 has an invalid length. [ 416.999750][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3487'. [ 418.404381][ T33] oom_reaper: reaped process 20022 (syz.1.3473), now anon-rss:0kB, file-rss:20544kB, shmem-rss:0kB [ 419.248355][T20073] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 419.248370][T20073] netlink: 'syz.0.3483': attribute type 2 has an invalid length. [ 419.249812][T20075] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 419.293023][T20083] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 419.299687][T20084] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 419.796106][T20121] erspan0: entered promiscuous mode [ 419.796130][T20121] erspan0: left allmulticast mode [ 419.812904][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 420.018135][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 420.377747][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 420.380082][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 420.380855][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 420.381147][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 420.394562][T20138] syzkaller0: entered promiscuous mode [ 420.394579][T20138] syzkaller0: entered allmulticast mode [ 420.496901][T20140] ip_tables: iptables: counters copy to user failed while replacing table [ 420.497599][T20140] bridge0: port 3(.`) entered blocking state [ 420.497843][T20140] bridge0: port 3(.`) entered disabled state [ 420.497995][T20140] .`: entered allmulticast mode [ 420.498010][T20140] bond_slave_0: entered allmulticast mode [ 420.498065][T20140] bond_slave_1: entered allmulticast mode [ 420.499825][T20140] .`: entered promiscuous mode [ 420.499839][T20140] bond_slave_0: entered promiscuous mode [ 420.500030][T20140] bond_slave_1: entered promiscuous mode [ 420.515428][T20140] ip_tables: iptables: counters copy to user failed while replacing table [ 420.637398][T20144] netlink: 'syz.2.3504': attribute type 1 has an invalid length. [ 420.701007][T20147] Cannot find set identified by id 0 to match [ 420.994480][T20162] syzkaller1: entered promiscuous mode [ 420.994500][T20162] syzkaller1: entered allmulticast mode [ 421.105678][T20175] __nla_validate_parse: 1 callbacks suppressed [ 421.105697][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'. [ 421.117384][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'. [ 421.117770][T20175] tipc: Enabling of bearer rejected, failed to enable media [ 421.303185][T20185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3512'. [ 421.514964][ T5637] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 421.525377][T20107] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 421.535678][T20097] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 421.537137][T20127] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 421.542210][T20130] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 421.542575][T20120] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 421.737918][T20212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.377086][T20237] xt_LOG: level 115 >= 8 [ 422.431892][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'. [ 422.536205][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3526'. [ 422.537096][T20247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3526'. [ 422.979414][T20254] netlink: 'syz.3.3527': attribute type 10 has an invalid length. [ 423.315973][T20272] syzkaller0: entered promiscuous mode [ 423.315995][T20272] syzkaller0: entered allmulticast mode [ 423.323784][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3533'. [ 423.760263][T20287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3537'. [ 423.764534][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'. [ 423.800993][T20287] vlan1: entered promiscuous mode [ 424.152089][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'. [ 424.503494][T20326] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.597435][ T30] audit: type=1804 audit(1792909363.565:17): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3547" name="/newroot/71/cgroup.controllers" dev="tmpfs" ino=380 res=1 errno=0 [ 424.597489][ T30] audit: type=1800 audit(1792909363.565:18): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3547" name="cgroup.controllers" dev="tmpfs" ino=380 res=0 errno=-22 [ 425.749281][T20388] syzkaller0: entered promiscuous mode [ 425.749306][T20388] syzkaller0: entered allmulticast mode [ 425.868433][T20391] Cannot find map_set index 2 as target [ 425.919415][T20393] vlan2: entered promiscuous mode [ 426.000903][T20390] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 426.131561][T20402] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 426.131581][T20402] __nla_validate_parse: 2 callbacks suppressed [ 426.131591][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 426.258692][T20406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3567'. [ 426.288483][T20401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.443888][T20401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.466344][T20415] pim6reg1: entered promiscuous mode [ 426.466364][T20415] pim6reg1: entered allmulticast mode [ 426.596301][T20401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.627536][T20421] tipc: Enabled bearer , priority 0 [ 426.629294][T20421] syzkaller0: entered promiscuous mode [ 426.629312][T20421] syzkaller0: entered allmulticast mode [ 426.750626][T20401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.801619][T20421] tipc: Resetting bearer [ 426.827578][T20418] tipc: Resetting bearer [ 426.850954][T20418] tipc: Disabling bearer [ 426.987560][ T7409] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.987619][ T7409] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.987649][ T7409] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.045576][ T7372] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.139661][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 427.139685][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 427.147290][T20448] ip_tables: iptables: counters copy to user failed while replacing table [ 427.149002][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 427.149023][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 427.149753][T20448] syzkaller1: entered promiscuous mode [ 427.149774][T20448] syzkaller1: entered allmulticast mode [ 427.164742][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 427.164764][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 427.180683][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 427.180705][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 428.256875][ T7398] IPVS: starting estimator thread 0... [ 428.347804][T20516] IPVS: using max 29 ests per chain, 69600 per kthread [ 428.473102][T20523] syzkaller1: entered promiscuous mode [ 428.473125][T20523] syzkaller1: entered allmulticast mode [ 428.730647][T20540] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 428.821154][T20548] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.844360][T20544] team0: Port device team_slave_0 removed [ 429.475166][T20577] netlink: 'syz.3.3612': attribute type 41 has an invalid length. [ 429.475404][T20577] netlink: 'syz.3.3612': attribute type 16 has an invalid length. [ 429.475419][T20577] netlink: 'syz.3.3612': attribute type 17 has an invalid length. [ 429.670553][T20577] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 429.776167][T20592] ip_tables: iptables: counters copy to user failed while replacing table [ 429.811112][T20595] netlink: 'syz.1.3617': attribute type 1 has an invalid length. [ 429.828474][T20601] sctp: [Deprecated]: syz.0.3615 (pid 20601) Use of int in max_burst socket option deprecated. [ 429.828474][T20601] Use struct sctp_assoc_value instead [ 429.870942][T20595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.871973][T20604] netlink: 'syz.3.3618': attribute type 30 has an invalid length. [ 429.893278][T20597] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.898379][T20597] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.910210][T20603] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 429.927732][T20597] netlink: 'syz.3.3618': attribute type 30 has an invalid length. [ 429.957759][T20604] vxlan0: entered promiscuous mode [ 429.957780][T20604] vxlan0: entered allmulticast mode [ 429.959125][T20606] netlink: zone id is out of range [ 429.959136][T20606] netlink: zone id is out of range [ 429.988246][T20597] vxlan1: entered promiscuous mode [ 429.988266][T20597] vxlan1: entered allmulticast mode [ 430.010698][T20595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.039202][T20595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.115146][ T6491] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.115203][ T6491] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.115232][ T6491] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.115260][ T6491] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.238449][T20623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 430.279889][T20628] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 430.494749][T20640] bridge1: entered promiscuous mode [ 430.494770][T20640] bridge1: entered allmulticast mode [ 430.512294][T20640] team0: Port device bridge1 added [ 430.567218][T20640] ipvlan2: entered promiscuous mode [ 430.573368][T20640] team0: Device ipvlan2 failed to register rx_handler [ 431.180213][T20686] __nla_validate_parse: 19 callbacks suppressed [ 431.180232][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'. [ 431.530731][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'. [ 431.554365][T20707] bond8: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 431.556997][T20707] bond8 (unregistering): Released all slaves [ 431.586958][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'. [ 431.618163][T20712] bond8: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 431.620866][T20712] bond8 (unregistering): Released all slaves [ 431.685960][T20719] Bluetooth: MGMT ver 1.23 [ 431.687225][T20720] Bluetooth: MGMT ver 1.23 [ 432.118182][T20740] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.221266][T20740] batman_adv: batadv0: Interface deactivated: veth0 [ 432.416048][T20740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.437848][T20740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.553613][T20767] block nbd0: reconnected socket [ 432.572909][T20771] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3657'. [ 432.591620][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 432.795852][ T7392] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.795885][ T7392] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.795908][ T7392] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.796838][ T7392] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.796863][ T7392] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.796886][ T7392] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.796920][ T7392] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.796955][ T7392] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.796977][ T7392] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.797009][ T7392] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.797031][ T7392] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.797051][ T7392] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.967014][T20784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3665'. [ 432.992734][T20783] netlink: 'syz.1.3665': attribute type 21 has an invalid length. [ 432.992755][T20783] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.992850][T20783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3665'. [ 433.024688][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 433.034449][ T7359] pim6reg: left allmulticast mode [ 433.271534][ T4947] block nbd0: Receive control failed (result -32) [ 433.497521][ T7359] bond0 (unregistering): Released all slaves [ 433.501722][ T7359] bond1 (unregistering): Released all slaves [ 433.513677][ T7359] bond2 (unregistering): Released all slaves [ 433.528694][ T7359] bond3 (unregistering): Released all slaves [ 433.537372][ T7359] bond4 (unregistering): Released all slaves [ 433.569877][ T7359] bond5 (unregistering): Released all slaves [ 433.580815][ T7359] bond6 (unregistering): Released all slaves [ 433.591472][ T7359] bond7 (unregistering): Released all slaves [ 433.608813][ T7359] bond8 (unregistering): Released all slaves [ 433.618369][ T7359] bond9 (unregistering): Released all slaves [ 433.640762][ T7359] bond10 (unregistering): Released all slaves [ 433.663552][ T7359] bond11 (unregistering): Released all slaves [ 433.741632][T20800] bond0 (unregistering): Released all slaves [ 433.896766][T20807] erspan1: entered promiscuous mode [ 433.934428][ T7359] tipc: Disabling bearer [ 433.934681][ T7359] tipc: Left network mode [ 433.990900][T20813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3669'. [ 434.072626][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3671'. [ 434.086648][ T7359] IPVS: stopping master sync thread 11921 ... [ 434.093992][ T7359] IPVS: stopping backup sync thread 11713 ... [ 434.224286][T20822] ip6t_hbh: unknown flags AD [ 434.279914][T20826] ip6_vti0: left allmulticast mode [ 434.798679][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.878650][T20841] bond8: option all_slaves_active: invalid value (255) [ 434.892145][T20841] bond8 (unregistering): Released all slaves [ 435.129823][T20863] netlink: 'syz.1.3680': attribute type 11 has an invalid length. [ 435.248191][T20869] netlink: 'syz.1.3680': attribute type 11 has an invalid length. [ 435.309983][T20876] tipc: Enabling of bearer rejected, failed to enable media [ 435.441282][ T7359] veth1_macvtap: left promiscuous mode [ 435.441317][ T7359] veth0_macvtap: left promiscuous mode [ 435.441418][ T7359] veth1_vlan: left promiscuous mode [ 435.887254][T20859] syzkaller1: entered promiscuous mode [ 435.887385][T20859] syzkaller1: entered allmulticast mode [ 435.891950][T20882] pim6reg: entered allmulticast mode [ 435.892132][T20887] pim6reg: left allmulticast mode [ 435.943625][T20895] syzkaller0: entered promiscuous mode [ 435.943640][T20895] syzkaller0: entered allmulticast mode [ 435.967276][T20898] tipc: Enabled bearer , priority 0 [ 436.188250][T20902] batadv0: entered promiscuous mode [ 436.188610][T20902] macvlan3: entered promiscuous mode [ 436.206036][T20902] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 436.206758][T20902] batadv0: left promiscuous mode [ 436.266961][T20903] batadv0: entered promiscuous mode [ 436.267237][T20903] macvlan3: entered promiscuous mode [ 436.268525][T20903] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 436.269201][T20903] batadv0: left promiscuous mode [ 436.310576][T20917] ip_tables: iptables: counters copy to user failed while replacing table [ 436.367108][T20911] vlan3: entered allmulticast mode [ 436.394043][T20911] bridge0: port 3(vlan3) entered blocking state [ 436.394182][T20911] bridge0: port 3(vlan3) entered disabled state [ 436.404064][T20911] vlan3: entered promiscuous mode [ 436.612529][ T7359] IPVS: stop unused estimator thread 0... [ 436.670433][T20928] __nla_validate_parse: 7 callbacks suppressed [ 436.670453][T20928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3699'. [ 436.849037][T20943] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 437.003307][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3703'. [ 437.022677][T20951] erspan0: entered promiscuous mode [ 437.023802][T20951] macvlan3: entered promiscuous mode [ 437.042574][T20951] erspan0: left promiscuous mode [ 437.065506][T20950] bridge0: port 3(syz_tun) entered blocking state [ 437.065567][T20950] bridge0: port 3(syz_tun) entered disabled state [ 437.066756][T20950] syz_tun: entered promiscuous mode [ 437.073612][T20950] bridge0: port 3(syz_tun) entered blocking state [ 437.073680][T20950] bridge0: port 3(syz_tun) entered forwarding state [ 437.084994][ T7245] tipc: Node number set to 3300896891 [ 437.214324][T20959] tipc: Enabling of bearer rejected, failed to enable media [ 437.621143][T20981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3711'. [ 437.636450][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3711'. [ 438.067412][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 438.214799][T21009] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 438.230540][T21001] syzkaller1: entered promiscuous mode [ 438.230560][T21001] syzkaller1: entered allmulticast mode [ 438.370284][T21024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3722'. [ 438.380431][T21023] tipc: Enabling of bearer rejected, failed to enable media [ 438.584684][T21038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3724'. [ 438.600343][T21038] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3724'. [ 438.615981][T21038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3724'. [ 438.632669][T21042] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3724'. [ 438.780443][T21050] ip_tables: iptables: counters copy to user failed while replacing table [ 438.861401][T21052] bridge5: entered allmulticast mode [ 438.922889][T21059] bridge6: entered allmulticast mode [ 438.958378][T21067] Cannot find add_set index 0 as target [ 438.962081][T21067] x_tables: duplicate underflow at hook 1 [ 439.018306][T21073] netlink: 'syz.4.3732': attribute type 3 has an invalid length. [ 439.120786][T21079] v: renamed from vlan1 (while UP) [ 439.242802][T21085] netlink: 'syz.4.3734': attribute type 2 has an invalid length. [ 439.440715][T21091] tc_dump_action: action bad kind [ 439.851743][T21105] TC_ACT_REPEAT abuse ? [ 440.061872][T21110] tipc: Trying to set illegal importance in message [ 440.607638][T21131] netlink: 'syz.3.3748': attribute type 7 has an invalid length. [ 440.607659][T21131] netlink: 'syz.3.3748': attribute type 8 has an invalid length. [ 440.640195][T21133] netlink: 'syz.3.3748': attribute type 7 has an invalid length. [ 440.640213][T21133] netlink: 'syz.3.3748': attribute type 8 has an invalid length. [ 440.674657][T21131] bond_slave_0: entered promiscuous mode [ 440.679527][T21131] bond_slave_0: left promiscuous mode [ 440.723558][T21133] bond_slave_0: entered promiscuous mode [ 440.723758][T21133] bond_slave_0: left promiscuous mode [ 440.920967][T21145] tipc: Failed to remove unknown binding: 66,1,1/0:3177511084/3177511086 [ 440.920999][T21145] tipc: Failed to remove unknown binding: 66,1,1/0:3177511084/3177511086 [ 440.923487][T21147] netlink: 'syz.3.3753': attribute type 6 has an invalid length. [ 441.095007][ T7372] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.095058][ T7372] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.095112][ T7372] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.095144][ T7372] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.101601][T21154] tipc: Cannot configure node identity twice [ 441.318177][T21165] batadv_slave_1: entered promiscuous mode [ 441.407136][T21175] ip_tables: iptables: counters copy to user failed while replacing table [ 441.772925][T21209] syzkaller0: entered promiscuous mode [ 441.772946][T21209] syzkaller0: entered allmulticast mode [ 442.045607][T21164] batadv_slave_1: left promiscuous mode [ 442.353959][T21252] __nla_validate_parse: 13 callbacks suppressed [ 442.353980][T21252] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3765'. [ 442.840152][T21313] bond0: entered promiscuous mode [ 442.840172][T21313] bond_slave_0: entered promiscuous mode [ 442.844333][T21313] batadv0: entered promiscuous mode [ 442.845681][T21313] debugfs: 'hsr1' already exists in 'hsr' [ 442.845710][T21313] Cannot create hsr debugfs directory [ 442.845770][T21313] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 442.845787][T21313] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 442.848911][T21313] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 442.900144][T21313] bond0: left promiscuous mode [ 442.900166][T21313] bond_slave_0: left promiscuous mode [ 442.932228][T21313] batadv0: left promiscuous mode [ 443.301612][T21313] bridge0: entered allmulticast mode [ 443.463303][T21330] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3773'. [ 443.480028][T21326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.480424][T21313] bridge_slave_1: left promiscuous mode [ 443.482017][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.512575][T21313] bridge_slave_0: left allmulticast mode [ 443.512599][T21313] bridge_slave_0: left promiscuous mode [ 443.512796][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.667491][T21329] netlink: 'syz.0.3772': attribute type 3 has an invalid length. [ 443.755045][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.941358][T21348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3778'. [ 444.132795][T21360] syzkaller0: left promiscuous mode [ 444.132817][T21360] syzkaller0: left allmulticast mode [ 444.198795][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3780'. [ 444.293241][T21366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3783'. [ 444.320539][T21366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3783'. [ 444.412949][T21368] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3784'. [ 444.413002][T21368] netlink: 'syz.2.3784': attribute type 9 has an invalid length. [ 444.413014][T21368] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3784'. [ 444.413026][T21368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3784'. [ 444.478681][T21375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3786'. [ 444.752490][T21388] tipc: Failed to remove unknown binding: 66,0,0/3300896891:2910357669/2910357670 [ 444.779025][T21388] tipc: Failed to remove unknown binding: 66,0,0/3300896891:2910357669/2910357670 [ 444.841052][T21392] syzkaller0: entered promiscuous mode [ 444.841073][T21392] syzkaller0: entered allmulticast mode [ 445.188842][T21401] vlan2: entered allmulticast mode [ 445.188863][T21401] bridge_slave_0: entered allmulticast mode [ 445.260706][T21405] vlan2: entered allmulticast mode [ 445.464909][T21413] batman_adv: batadv0: Adding interface: syzkaller0 [ 445.465189][T21413] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.465218][T21413] batman_adv: batadv0: Interface activated: syzkaller0 [ 445.509372][T21412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.509396][T21412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.526696][T21412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.526716][T21412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.539857][T21412] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 445.539876][T21412] batman_adv: batadv0: Removing interface: syzkaller0 [ 445.832127][T21425] syzkaller1: entered promiscuous mode [ 445.832152][T21425] syzkaller1: entered allmulticast mode [ 445.982492][T21431] syzkaller0: entered promiscuous mode [ 445.982514][T21431] syzkaller0: entered allmulticast mode [ 446.660574][T21457] ip_tables: iptables: counters copy to user failed while replacing table [ 447.210709][T21470] xt_hashlimit: size too large, truncated to 1048576 [ 447.210737][T21470] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 447.439243][T21479] netlink: 'syz.0.3812': attribute type 4 has an invalid length. [ 447.439265][T21479] __nla_validate_parse: 6 callbacks suppressed [ 447.439275][T21479] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3812'. [ 447.485054][T21479] .`: renamed from bond0 (while UP) [ 447.560356][T21486] tipc: Enabling of bearer rejected, already enabled [ 447.560865][T21481] syzkaller0: entered promiscuous mode [ 447.560882][T21481] syzkaller0: entered allmulticast mode [ 447.646834][T21486] tipc: Resetting bearer [ 447.798337][T21498] tipc: Enabled bearer , priority 0 [ 447.828398][T21495] syzkaller0: entered promiscuous mode [ 447.828419][T21495] syzkaller0: entered allmulticast mode [ 447.839902][T21499] netlink: 'syz.4.3821': attribute type 2 has an invalid length. [ 447.885946][T21498] tipc: Resetting bearer [ 448.089185][T21516] ip_tables: iptables: counters copy to user failed while replacing table [ 448.129917][T21517] x_tables: duplicate underflow at hook 1 [ 448.160426][T21521] ip6t_rpfilter: unknown options [ 448.225855][T21526] netlink: 'syz.2.3825': attribute type 16 has an invalid length. [ 448.225876][T21526] netlink: 'syz.2.3825': attribute type 17 has an invalid length. [ 448.252144][T21516] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.265752][T21516] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.279976][T21525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3828'. [ 448.341414][T21516] tipc: Resetting bearer [ 448.341743][T21516] tipc: Resetting bearer [ 448.386594][T21526] 8021q: adding VLAN 0 to HW filter on device .` [ 448.386970][T21526] bridge0: port 3(.`) entered blocking state [ 448.387220][T21526] bridge0: port 3(.`) entered forwarding state [ 448.416926][T21526] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.417061][T21526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.420567][T21526] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.420706][T21526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.458588][T21526] veth0_to_bond: left allmulticast mode [ 448.476021][ T4947] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 448.479767][T21526] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 448.557438][T21525] bond3: option primary_reselect: invalid value (6) [ 448.563406][T21525] bond3 (unregistering): Released all slaves [ 448.594438][T21534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3829'. [ 448.734759][T21532] netlink: 'syz.3.3829': attribute type 1 has an invalid length. [ 448.774177][T21540] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3831'. [ 448.790797][T21532] tc_dump_action: action bad kind [ 448.875613][ T7239] tipc: Node number set to 226509494 [ 449.091133][T21562] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 449.179300][ T6787] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.212584][T21566] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 449.212605][T21566] netlink: 1368 bytes leftover after parsing attributes in process `syz.3.3834'. [ 449.215708][T21566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.605722][ T6787] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.632698][T21574] tipc: Enabling of bearer rejected, already enabled [ 449.650348][T21572] ip_tables: iptables: counters copy to user failed while replacing table [ 485.813665][T21595] netlink: 'syz.3.3845': attribute type 4 has an invalid length. [ 485.902006][T21600] syzkaller0: entered promiscuous mode [ 485.902030][T21600] syzkaller0: entered allmulticast mode [ 485.921798][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 486.329584][T21614] xt_hashlimit: size too large, truncated to 1048576 [ 486.364110][T21615] xt_hashlimit: size too large, truncated to 1048576 [ 486.948333][T21626] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3852'. [ 487.167063][T21642] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.3856'. [ 487.251840][T21643] tipc: Enabled bearer , priority 0 [ 487.353924][T21632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3855'. [ 487.457338][T21645] syzkaller0: entered promiscuous mode [ 487.457362][T21645] syzkaller0: entered allmulticast mode [ 487.457841][T21645] tipc: Resetting bearer [ 487.510917][T21631] tipc: Resetting bearer [ 487.695607][T21671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3857'. [ 487.861064][T21678] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3858'. [ 487.959157][T21681] netlink: 'syz.1.3861': attribute type 1 has an invalid length. [ 488.071952][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3861'. [ 489.783250][T21631] tipc: Disabling bearer [ 489.800495][T21681] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 489.806425][T21684] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 489.819913][ T7231] tipc: Node number set to 11777 [ 490.171749][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3863'. [ 490.778383][T21732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3873'. [ 490.943889][T21744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3872'. [ 491.021916][T21737] syzkaller0: entered promiscuous mode [ 491.021933][T21737] syzkaller0: entered allmulticast mode [ 491.603932][ T6491] IPVS: starting estimator thread 0... [ 491.685245][T21753] IPVS: using max 30 ests per chain, 72000 per kthread [ 491.793171][T21748] IPVS: sh: FWM 3 0x00000003 - no destination available [ 493.528496][T21796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3885'. [ 494.624981][T21785] tipc: Enabling of bearer rejected, failed to enable media [ 494.952142][T21812] xt_nat: multiple ranges no longer supported [ 495.017238][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3889'. [ 495.250732][T21825] syzkaller0: entered promiscuous mode [ 495.250755][T21825] syzkaller0: entered allmulticast mode [ 495.403568][T21831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3891'. [ 496.133055][T21845] syzkaller0: entered promiscuous mode [ 496.133081][T21845] syzkaller0: entered allmulticast mode [ 496.138502][ T6491] tipc: Subscription rejected, illegal request [ 499.457601][T21857] ip6gretap0: entered promiscuous mode [ 499.459992][T21857] batadv0: entered promiscuous mode [ 499.462257][T21857] debugfs: 'hsr1' already exists in 'hsr' [ 499.462272][T21857] Cannot create hsr debugfs directory [ 499.538437][T21873] tipc: Resetting bearer [ 499.540277][T21889] tipc: Enabling of bearer rejected, failed to enable media [ 499.682005][T21898] syzkaller0: entered promiscuous mode [ 499.682026][T21898] syzkaller0: entered allmulticast mode [ 499.762395][T21901] ip_tables: iptables: counters copy to user failed while replacing table [ 499.854456][T21906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.860017][T21906] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.894055][T21906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.918774][T21906] batman_adv: batadv0: Interface activated: veth0 [ 500.051887][T21906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.062161][T21906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.088976][T21924] netlink: 'syz.3.3901': attribute type 1 has an invalid length. [ 500.092942][T21906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.092966][T21906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.101506][T21906] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 500.182411][T21917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3901'. [ 500.257786][T21924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.523840][ T30] audit: type=1800 audit(1792909439.485:19): pid=21943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3906" name="blkio.bfq.time_recursive" dev="tmpfs" ino=735 res=0 errno=-22 [ 500.674544][T21948] netlink: 'syz.2.3910': attribute type 1 has an invalid length. [ 500.735932][T21948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.768949][T21952] bond0: (slave veth0_to_bond): making interface the new active one [ 500.772294][T21952] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 500.832190][T21954] netlink: 'syz.3.3911': attribute type 39 has an invalid length. [ 501.096506][ T7354] IPVS: starting estimator thread 0... [ 501.122695][T21965] ip_tables: iptables: counters copy to user failed while replacing table [ 501.128146][T21965] syzkaller1: entered promiscuous mode [ 501.128165][T21965] syzkaller1: entered allmulticast mode [ 501.148991][T21965] tipc: Enabled bearer , priority 0 [ 501.188969][T21969] IPVS: using max 28 ests per chain, 67200 per kthread [ 501.322114][T21972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3914'. [ 501.322153][T21972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 501.594425][T21976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3915'. [ 501.594492][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3915'. [ 501.594507][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3915'. [ 501.594572][T21976] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3915'. [ 501.594586][T21976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3915'. [ 501.854672][T21985] ip6t_rt: unknown flags 1F [ 501.993982][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3918'. [ 502.012050][T21985] IPv6: sit1: Disabled Multicast RS [ 502.188905][T21990] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3920'. [ 502.645171][T22022] netlink: 'syz.4.3929': attribute type 9 has an invalid length. [ 502.778431][T22030] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 503.298612][T22033] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 503.869806][T22052] netlink: 'syz.0.3935': attribute type 8 has an invalid length. [ 503.972248][T22052] veth3: entered allmulticast mode [ 503.974108][T22057] syzkaller0: left promiscuous mode [ 503.974129][T22057] syzkaller0: left allmulticast mode [ 503.974576][T22057] tipc: Resetting bearer [ 504.010221][T22061] nbd6: detected capacity change from 0 to 63 [ 504.016042][ T4947] block nbd6: Receive control failed (result -32) [ 504.016218][ T2017] block nbd6: Send control failed (result -32) [ 504.016344][ T2017] block nbd6: Request send failed, requeueing [ 504.022127][ T2017] block nbd6: Dead connection, failed to find a fallback [ 504.022190][ T2017] block nbd6: shutting down sockets [ 504.022296][ T2017] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.022418][ T2017] Buffer I/O error on dev nbd6, logical block 0, async page read [ 504.079790][ T2017] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.079820][ T2017] Buffer I/O error on dev nbd6, logical block 1, async page read [ 504.080395][ T2017] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.080422][ T2017] Buffer I/O error on dev nbd6, logical block 2, async page read [ 504.080537][ T2017] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.080560][ T2017] Buffer I/O error on dev nbd6, logical block 3, async page read [ 504.081079][ T2017] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.081131][ T2017] Buffer I/O error on dev nbd6, logical block 0, async page read [ 504.081246][ T2017] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.081269][ T2017] Buffer I/O error on dev nbd6, logical block 1, async page read [ 504.083106][ T2017] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.083130][ T2017] Buffer I/O error on dev nbd6, logical block 2, async page read [ 504.084704][ T2017] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.084730][ T2017] Buffer I/O error on dev nbd6, logical block 3, async page read [ 504.094476][ T2017] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.094503][ T2017] Buffer I/O error on dev nbd6, logical block 0, async page read [ 504.115128][ T2042] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 504.115156][ T2042] Buffer I/O error on dev nbd6, logical block 1, async page read [ 504.138165][T21995] ldm_validate_partition_table(): Disk read failed. [ 504.141869][T21995] Dev nbd6: unable to read RDB block 0 [ 504.152011][T21995] nbd6: unable to read partition table [ 504.280741][T21995] ldm_validate_partition_table(): Disk read failed. [ 504.289053][T21995] Dev nbd6: unable to read RDB block 0 [ 504.295182][T21995] nbd6: unable to read partition table [ 505.306412][T22098] tipc: Failed to remove unknown binding: 66,0,0/11777:3169412316/3169412318 [ 505.306440][T22098] tipc: Failed to remove unknown binding: 66,0,0/11777:3169412316/3169412317 [ 505.308455][T22098] __nla_validate_parse: 5 callbacks suppressed [ 505.308471][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'. [ 505.310688][T22098] tipc: Failed to remove unknown binding: 66,0,0/11777:3169412316/3169412318 [ 505.310715][T22098] tipc: Failed to remove unknown binding: 66,0,0/11777:3169412316/3169412317 [ 505.350980][T22110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3954'. [ 505.480557][T22113] netlink: 'syz.1.3953': attribute type 2 has an invalid length. [ 505.730182][T22124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3956'. [ 506.351113][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'. [ 507.730677][T22114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3954'. [ 507.730791][T22119] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3954'. [ 507.990068][T22151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3959'. [ 508.304210][T22167] ip6gre1: entered promiscuous mode [ 508.304233][T22167] ip6gre1: entered allmulticast mode [ 508.326532][T22168] tipc: Started in network mode [ 508.326560][T22168] tipc: Node identity 0253bd7c46a3, cluster identity 4711 [ 508.326714][T22168] tipc: Enabled bearer , priority 0 [ 508.328238][T22168] syzkaller0: entered promiscuous mode [ 508.328257][T22168] syzkaller0: entered allmulticast mode [ 508.334664][T22168] tipc: Resetting bearer [ 508.378655][T22165] tipc: Resetting bearer [ 508.421427][ T30] audit: type=1800 audit(1792909447.385:20): pid=22173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3966" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1055 res=0 errno=-22 [ 508.453229][T22165] tipc: Disabling bearer [ 508.461878][T22176] ip_tables: iptables: counters copy to user failed while replacing table [ 508.580282][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3970'. [ 508.590746][T22183] netlink: 4 bytes leftover after parsing a ** replaying previous printk message ** [ 508.590746][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 508.600897][T22183] [ 508.615807][T22183] ====================================================== [ 508.622815][T22183] WARNING: possible circular locking dependency detected [ 508.629828][T22183] syzkaller #0 Not tainted [ 508.634223][T22183] ------------------------------------------------------ [ 508.641218][T22183] syz.0.3970/22183 is trying to acquire lock: [ 508.647268][T22183] ffff88801d2dca10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 508.657803][T22183] [ 508.657803][T22183] but task is already holding lock: [ 508.665159][T22183] ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 508.674727][T22183] [ 508.674727][T22183] which lock already depends on the new lock. [ 508.674727][T22183] [ 508.685125][T22183] [ 508.685125][T22183] the existing dependency chain (in reverse order) is: [ 508.694134][T22183] [ 508.694134][T22183] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 508.702155][T22183] down_write+0x91/0x200 [ 508.706929][T22183] kernfs_add_one+0x41/0x510 [ 508.712043][T22183] kernfs_create_dir_ns+0x18c/0x220 [ 508.717759][T22183] internal_create_group+0x440/0x1180 [ 508.723656][T22183] cpuhp_invoke_callback+0x434/0x810 [ 508.729463][T22183] cpuhp_issue_call+0x3f0/0x750 [ 508.734836][T22183] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 508.741430][T22183] __cpuhp_setup_state+0x3f/0x60 [ 508.746893][T22183] do_one_initcall+0x250/0x870 [ 508.752185][T22183] do_initcall_level+0x10a/0x1a0 [ 508.757637][T22183] do_initcalls+0x59/0xa0 [ 508.762500][T22183] kernel_init_freeable+0x29d/0x3e0 [ 508.768213][T22183] kernel_init+0x22/0x1d0 [ 508.773067][T22183] ret_from_fork+0x514/0xb70 [ 508.778183][T22183] ret_from_fork_asm+0x1a/0x30 [ 508.783464][T22183] [ 508.783464][T22183] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 508.791281][T22183] [ 508.791281][T22183] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 508.799009][T22183] cpus_read_lock+0x3d/0x160 [ 508.804113][T22183] static_key_slow_inc+0x12/0x30 [ 508.809572][T22183] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 508.815807][T22183] nbd_genl_foreach_sock+0x265/0x450 [ 508.821614][T22183] nbd_genl_reconfigure+0xbbb/0x1040 [ 508.827427][T22183] genl_family_rcv_msg_doit+0x233/0x340 [ 508.833492][T22183] genl_rcv_msg+0x614/0x7a0 [ 508.838514][T22183] netlink_rcv_skb+0x226/0x4a0 [ 508.843793][T22183] genl_rcv+0x28/0x40 [ 508.848291][T22183] netlink_unicast+0x8ef/0xa80 [ 508.853566][T22183] netlink_sendmsg+0x7f0/0xb20 [ 508.858847][T22183] sock_sendmsg_nosec+0x14e/0x190 [ 508.864393][T22183] ____sys_sendmsg+0x54e/0x850 [ 508.869675][T22183] ___sys_sendmsg+0x2a5/0x360 [ 508.874882][T22183] __x64_sys_sendmsg+0x1b1/0x290 [ 508.880425][T22183] do_syscall_64+0x166/0x520 [ 508.885526][T22183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.891933][T22183] [ 508.891933][T22183] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 508.899568][T22183] __mutex_lock+0x197/0x15a0 [ 508.904670][T22183] nbd_queue_rq+0x373/0xff0 [ 508.909687][T22183] blk_mq_dispatch_rq_list+0x499/0x1990 [ 508.915752][T22183] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 508.922597][T22183] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 508.929104][T22183] blk_mq_run_work_fn+0x167/0x2f0 [ 508.934656][T22183] process_scheduled_works+0xc3d/0x1630 [ 508.940724][T22183] worker_thread+0xa47/0xfb0 [ 508.945837][T22183] kthread+0x38b/0x480 [ 508.950417][T22183] ret_from_fork+0x514/0xb70 [ 508.955521][T22183] ret_from_fork_asm+0x1a/0x30 [ 508.960807][T22183] [ 508.960807][T22183] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 508.968021][T22183] __mutex_lock+0x197/0x15a0 [ 508.973125][T22183] nbd_queue_rq+0xc1/0xff0 [ 508.978061][T22183] blk_mq_dispatch_rq_list+0x499/0x1990 [ 508.984137][T22183] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 508.990979][T22183] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 508.997478][T22183] blk_mq_run_work_fn+0x167/0x2f0 [ 509.003039][T22183] process_scheduled_works+0xc3d/0x1630 [ 509.009108][T22183] worker_thread+0xa47/0xfb0 [ 509.014215][T22183] kthread+0x38b/0x480 [ 509.018798][T22183] ret_from_fork+0x514/0xb70 [ 509.023903][T22183] ret_from_fork_asm+0x1a/0x30 [ 509.029185][T22183] [ 509.029185][T22183] -> #4 (set->srcu){.+.+}-{0:0}: [ 509.036333][T22183] __synchronize_srcu+0xca/0x2f0 [ 509.041819][T22183] elevator_switch+0x1e8/0x7b0 [ 509.047100][T22183] elevator_change+0x2fa/0x480 [ 509.052379][T22183] elevator_set_default+0x375/0x440 [ 509.058097][T22183] blk_register_queue+0x404/0x4f0 [ 509.063638][T22183] __add_disk+0x6b8/0xdb0 [ 509.068491][T22183] add_disk_fwnode+0x100/0x3a0 [ 509.073771][T22183] nbd_dev_add+0x733/0xb60 [ 509.078718][T22183] nbd_init+0x168/0x1f0 [ 509.083383][T22183] do_one_initcall+0x250/0x870 [ 509.088672][T22183] do_initcall_level+0x10a/0x1a0 [ 509.094133][T22183] do_initcalls+0x59/0xa0 [ 509.098980][T22183] kernel_init_freeable+0x29d/0x3e0 [ 509.104692][T22183] kernel_init+0x22/0x1d0 [ 509.109534][T22183] ret_from_fork+0x514/0xb70 [ 509.114634][T22183] ret_from_fork_asm+0x1a/0x30 [ 509.119913][T22183] [ 509.119913][T22183] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 509.127723][T22183] __mutex_lock+0x197/0x15a0 [ 509.132835][T22183] elevator_change+0x1af/0x480 [ 509.138111][T22183] elevator_set_none+0xb5/0x140 [ 509.143479][T22183] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 509.149804][T22183] nbd_start_device+0x189/0xb30 [ 509.155173][T22183] nbd_genl_connect+0x167d/0x1cd0 [ 509.160715][T22183] genl_family_rcv_msg_doit+0x233/0x340 [ 509.166779][T22183] genl_rcv_msg+0x614/0x7a0 [ 509.171801][T22183] netlink_rcv_skb+0x226/0x4a0 [ 509.177080][T22183] genl_rcv+0x28/0x40 [ 509.181584][T22183] netlink_unicast+0x8ef/0xa80 [ 509.186862][T22183] netlink_sendmsg+0x7f0/0xb20 [ 509.192140][T22183] sock_sendmsg_nosec+0x14e/0x190 [ 509.197679][T22183] ____sys_sendmsg+0x54e/0x850 [ 509.202960][T22183] ___sys_sendmsg+0x2a5/0x360 [ 509.208151][T22183] __x64_sys_sendmsg+0x1b1/0x290 [ 509.213598][T22183] do_syscall_64+0x166/0x520 [ 509.218695][T22183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.225102][T22183] [ 509.225102][T22183] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 509.233705][T22183] blk_alloc_queue+0x544/0x690 [ 509.238980][T22183] __blk_mq_alloc_disk+0x194/0x390 [ 509.244605][T22183] nbd_dev_add+0x494/0xb60 [ 509.249540][T22183] nbd_init+0x168/0x1f0 [ 509.254210][T22183] do_one_initcall+0x250/0x870 [ 509.259496][T22183] do_initcall_level+0x10a/0x1a0 [ 509.264956][T22183] do_initcalls+0x59/0xa0 [ 509.269799][T22183] kernel_init_freeable+0x29d/0x3e0 [ 509.275525][T22183] kernel_init+0x22/0x1d0 [ 509.280380][T22183] ret_from_fork+0x514/0xb70 [ 509.285493][T22183] ret_from_fork_asm+0x1a/0x30 [ 509.290775][T22183] [ 509.290775][T22183] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 509.297980][T22183] fs_reclaim_acquire+0x71/0x100 [ 509.303444][T22183] kmem_cache_alloc_noprof+0x5f/0x600 [ 509.309339][T22183] __kernfs_iattrs+0xdd/0x380 [ 509.314538][T22183] kernfs_iop_setattr+0xe6/0x3f0 [ 509.319992][T22183] notify_change+0xbba/0xea0 [ 509.325103][T22183] do_truncate+0x1c2/0x250 [ 509.330036][T22183] path_openat+0x18a6/0x20f0 [ 509.335151][T22183] do_file_open+0x23e/0x4a0 [ 509.340179][T22183] do_sys_openat2+0x115/0x200 [ 509.345375][T22183] __x64_sys_openat+0x138/0x170 [ 509.350743][T22183] do_syscall_64+0x166/0x520 [ 509.355841][T22183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.362243][T22183] [ 509.362243][T22183] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 509.370750][T22183] __lock_acquire+0x164c/0x2de0 [ 509.376113][T22183] lock_acquire+0x115/0x350 [ 509.381123][T22183] down_write+0x91/0x200 [ 509.385874][T22183] kernfs_unlink_sibling+0x6d/0x240 [ 509.391583][T22183] kernfs_rename_ns+0x575/0x9e0 [ 509.397028][T22183] sysfs_rename_link_ns+0x16e/0x1b0 [ 509.402738][T22183] device_rename+0x110/0x210 [ 509.407833][T22183] cfg80211_dev_rename+0x16f/0x250 [ 509.413453][T22183] nl80211_set_wiphy+0x63f/0x3430 [ 509.419002][T22183] genl_family_rcv_msg_doit+0x233/0x340 [ 509.425063][T22183] genl_rcv_msg+0x614/0x7a0 [ 509.430089][T22183] netlink_rcv_skb+0x226/0x4a0 [ 509.435361][T22183] genl_rcv+0x28/0x40 [ 509.439861][T22183] netlink_unicast+0x8ef/0xa80 [ 509.445130][T22183] netlink_sendmsg+0x7f0/0xb20 [ 509.450408][T22183] sock_sendmsg_nosec+0x14e/0x190 [ 509.455940][T22183] ____sys_sendmsg+0x54e/0x850 [ 509.461219][T22183] ___sys_sendmsg+0x2a5/0x360 [ 509.466411][T22183] __x64_sys_sendmsg+0x1b1/0x290 [ 509.471858][T22183] do_syscall_64+0x166/0x520 [ 509.476952][T22183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.483354][T22183] [ 509.483354][T22183] other info that might help us debug this: [ 509.483354][T22183] [ 509.493566][T22183] Chain exists of: [ 509.493566][T22183] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 509.493566][T22183] [ 509.507978][T22183] Possible unsafe locking scenario: [ 509.507978][T22183] [ 509.515417][T22183] CPU0 CPU1 [ 509.520768][T22183] ---- ---- [ 509.526117][T22183] lock(&root->kernfs_rwsem); [ 509.530869][T22183] lock(cpuhp_state_mutex); [ 509.537967][T22183] lock(&root->kernfs_rwsem); [ 509.545235][T22183] lock(&root->kernfs_iattr_rwsem); [ 509.550508][T22183] [ 509.550508][T22183] *** DEADLOCK *** [ 509.550508][T22183] [ 509.558632][T22183] locks held by syz.0.3970/22183: 4, last CPU#1: [ 509.564941][T22183] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 509.573122][T22183] #1: ffffffff914bed60 (cfg80211_mutex){+.+.}-{4:4}, at: nl80211_set_wiphy+0xaa/0x3430 [ 509.582856][T22183] #2: ffff88807e7a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_set_wiphy+0x4e8/0x3430 [ 509.592848][T22183] #3: ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 509.602839][T22183] [ 509.602839][T22183] stack backtrace: [ 509.608714][T22183] CPU: 1 UID: 0 PID: 22183 Comm: syz.0.3970 Not tainted syzkaller #0 PREEMPT(full) [ 509.618071][T22183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 509.628116][T22183] Call Trace: [ 509.631385][T22183] [ 509.634311][T22183] dump_stack_lvl+0xe8/0x150 [ 509.638898][T22183] print_circular_bug+0x2e2/0x300 [ 509.643918][T22183] check_noncircular+0x12f/0x150 [ 509.648854][T22183] __lock_acquire+0x164c/0x2de0 [ 509.653698][T22183] ? __lock_acquire+0x747/0x2de0 [ 509.658627][T22183] ? __lock_acquire+0x747/0x2de0 [ 509.663555][T22183] lock_acquire+0x115/0x350 [ 509.668048][T22183] ? kernfs_unlink_sibling+0x6d/0x240 [ 509.673415][T22183] down_write+0x91/0x200 [ 509.677648][T22183] ? kernfs_unlink_sibling+0x6d/0x240 [ 509.683010][T22183] ? __pfx_down_write+0x10/0x10 [ 509.687850][T22183] ? kernfs_root+0x1c/0x230 [ 509.692346][T22183] ? kernfs_root+0x1c/0x230 [ 509.696850][T22183] ? kernfs_root+0x1c/0x230 [ 509.701345][T22183] ? kernfs_root+0x1ea/0x230 [ 509.705929][T22183] kernfs_unlink_sibling+0x6d/0x240 [ 509.711117][T22183] kernfs_rename_ns+0x575/0x9e0 [ 509.715959][T22183] sysfs_rename_link_ns+0x16e/0x1b0 [ 509.721150][T22183] device_rename+0x110/0x210 [ 509.725729][T22183] cfg80211_dev_rename+0x16f/0x250 [ 509.730828][T22183] nl80211_set_wiphy+0x63f/0x3430 [ 509.735847][T22183] ? lock_acquire+0x115/0x350 [ 509.740515][T22183] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 509.745963][T22183] ? nl80211_pre_doit+0x543/0xfa0 [ 509.750984][T22183] ? nl80211_pre_doit+0x86e/0xfa0 [ 509.755999][T22183] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 509.762327][T22183] genl_family_rcv_msg_doit+0x233/0x340 [ 509.767893][T22183] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.773963][T22183] ? bpf_lsm_capable+0x9/0x20 [ 509.778645][T22183] ? security_capable+0x7e/0x2c0 [ 509.783589][T22183] genl_rcv_msg+0x614/0x7a0 [ 509.788100][T22183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.793122][T22183] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 509.798491][T22183] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 509.803949][T22183] ? __pfx_nl80211_post_doit+0x10/0x10 [ 509.809424][T22183] netlink_rcv_skb+0x226/0x4a0 [ 509.814182][T22183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.819203][T22183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.824487][T22183] ? down_read+0x2b9/0x320 [ 509.828904][T22183] genl_rcv+0x28/0x40 [ 509.832887][T22183] netlink_unicast+0x8ef/0xa80 [ 509.837660][T22183] netlink_sendmsg+0x7f0/0xb20 [ 509.842424][T22183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.847705][T22183] ? aa_sock_msg_perm+0x144/0x210 [ 509.852722][T22183] ? apparmor_socket_sendmsg+0x98/0x360 [ 509.858262][T22183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.863546][T22183] sock_sendmsg_nosec+0x14e/0x190 [ 509.868567][T22183] ____sys_sendmsg+0x54e/0x850 [ 509.873330][T22183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.878615][T22183] ? import_iovec+0x73/0xa0 [ 509.883114][T22183] ___sys_sendmsg+0x2a5/0x360 [ 509.887788][T22183] ? __lock_acquire+0x747/0x2de0 [ 509.892715][T22183] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.897911][T22183] ? futex_wait+0x2a2/0x390 [ 509.902413][T22183] ? __fget_files+0x3a2/0x420 [ 509.907079][T22183] ? __fget_files+0x2a/0x420 [ 509.911666][T22183] __x64_sys_sendmsg+0x1b1/0x290 [ 509.916595][T22183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.922056][T22183] do_syscall_64+0x166/0x520 [ 509.926638][T22183] ? trace_irq_disable+0x3b/0x140 [ 509.931654][T22183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.937706][T22183] ? clear_bhb_loop+0x70/0xc0 [ 509.942372][T22183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.948253][T22183] RIP: 0033:0x7fdd2ab9f559 [ 509.952656][T22183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.972248][T22183] RSP: 002b:00007fdd2b97f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.980651][T22183] RAX: ffffffffffffffda RBX: 00007fdd2ae25fa0 RCX: 00007fdd2ab9f559 [ 509.988611][T22183] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000007 [ 509.996574][T22183] RBP: 00007fdd2ac36b20 R08: 0000000000000000 R09: 0000000000000000 [ 510.004532][T22183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.012489][T22183] R13: 00007fdd2ae26038 R14: 00007fdd2ae25fa0 R15: 00007ffd4310b928 [ 510.020467][T22183] [ 510.027008][ T7359] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.033716][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.035065][ T6491] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.035105][ T6491] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.080143][T22184] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3970'. [ 511.595488][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!