last executing test programs: 5.026682066s ago: executing program 0 (id=4512): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1e1c}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004880}, 0x20040080) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 32) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4.805739173s ago: executing program 3 (id=4514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffd6c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) 4.424695562s ago: executing program 3 (id=4519): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb88a845000014aaaa040000000000010203040506070800000c00020006002000080000000c0003"], 0x58}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb88a845000014aaaa040000000000010203040506070800000c00020006002000080000000c0003"], 0x58}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010065bd7000fbdbdf252100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x24880}, 0x800) 3.539785139s ago: executing program 3 (id=4525): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000b00000000000000fdffff7f00000000430500000000000004000000000000000200000000000080000000000000000000000000000000000200000002000000000000002cbd7000003500000a0004005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010008000900000000000600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000049000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080001408000"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0xf8, r6, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d6cbb3fc82c2f2bec4fb84831d23227672fa3c9717fb5e4"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES8=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r8, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$netlink(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000067bc000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r13}, 0x38) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001dc0)={&(0x7f0000000640)="535e6029da72593859f1f95a1337e2eb8797a17dcb97", &(0x7f00000008c0)=""/176, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="966a7d2717fe80b230b5e7be75a21cf6bc04d8a9ba264d8f92d79148bee7037ea70f73de5c462d7f1dc16b4b04d5b7d5289ef730fc9b9fb0d44df0fd25cf03a5de93e1c9b2b912e1a1a148f9e268f1a971e418468bf1c445d1b210b17c950a85e24732db26f91563b9af74e313e4b0f62c6135443839f89e770da590c09695e5772d9393e6e1228db8fba6ebd43cd71d2f02e35ae9f8d4b1ec9a434720a0cd5952e1a65dbb25246f25ee588e0fb1f2780b66b6b2279471778ca3f6b45a96ca3920918e49d2d82579e46e5928", 0x0, r13, 0x4}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 3.521470887s ago: executing program 1 (id=4526): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x2}, 0x95) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRES8=r4, @ANYRESOCT=r0, @ANYRES32=r2], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000001824", 0x6}], 0x2, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x18}, 0x240088d4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x60e18}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x190ad186}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002f00002c0012800b00010067726574617000001c00028006000e00020000000800070064010101060010004e22000008000a00", @ANYRES32=r4, @ANYBLOB="c76ead0f59bbab1c0a84eee56503a6e5da4b9662d5b0da65243fb355b80c88dc8789346e8180991c036c125a564bde1c68ec980e9a2b5baf72a8ee23c8d8ffc1568c9b86580898267bdb680dbf26c02dfdc49aa6c2b14037d4af3a95bfc71528d93fb83ebb59230d5e3b1f4fcabfb67a7c85000c1d84aff70c3f91b9d687e3487f5a7557d4cb2f21a083ae3bc5b73b2f614efb8b0a684b9ff9edaea42c1bc5edba814e820429d1871d52284a"], 0x54}}, 0x24000000) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) write(r8, &(0x7f0000000140)="0c98cd185467ea82b8d8331433ccbd84b5ed6c", 0x13) 3.371134169s ago: executing program 2 (id=4527): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@null, 0x4, 'vcan0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'vxcan1\x00', {0xff}, {0xff}}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x95, 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x0, 0xb0e2, 0x10001, 0xc, 0xfffffffb, 0x18, 0x18}, {0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x81, 0x2}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@rand_addr=0x64010102, @ipv4=@loopback, 0x31}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x100, 0x2, 0xfffffffc, 'snmp_trap\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x400) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='-\x00', 0xb01882, &(0x7f0000000140)={@align, {0x8d9, 0x208a, 0x10000, 0x7}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1}) sendmsg$802154_dgram(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000380)={&(0x7f0000000280)="3fd3197570c924853b5b1bcf1c205d72422edf57a2a7fe776217c5cdd7d4797fc7b0c8603c8c1e217c09345d4b660e05bcce0e36f339160b4c9865a56659cc74725df25b40b7b2caf48d452ba00b9e45eba880dba13cf6cabea4c6fd895b4661c576704aa7c2d6a5eba567e5197b37849defdc8ffbb3ef709d0c36d7a0c9cb6c5c1ee9409743517f937a2c4fbaa632a50b81d35361717890d7ef331259cd6e065fe92cf4640013e55b04277e87e1237c45c475542236a6ff0aafb81fbdb971fb4a16b7dacc925b4fd42f1b519f44cc63ea772dc27fe3a4dfa0d9270f9df4050cb295e0c9d242ab", 0xe7}, 0x1, 0x0, 0x0, 0x1043}, 0x20048091) 3.275718415s ago: executing program 4 (id=4528): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) write(r3, &(0x7f0000000000)="01", 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, 0x0, &(0x7f0000000180)) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000000c0)={0x372fd0a4}, 0x4) 3.218891325s ago: executing program 1 (id=4529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x42c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_TESTDATA={0x102, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x55, 0x45, "26aca42ff33385db6b499ca9f1654382d9450a5a129a92d5ee7432be15282d092de06bd504c4e067d5858e98b98fab568c63d8130ed13999919e9de44c7451c0e0bb096dca3ea5d5878166b6c29aa0a448"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, '9'}, @NL80211_ATTR_TESTDATA={0x2f, 0x45, "ed4124a2c7393597f81fc64a301ee6064a2c2a5f2cbb27bcb22a2da46d0681fb3ca3801ccc789f37648f07"}, @NL80211_ATTR_TESTDATA={0x8e, 0x45, "ea38b126b090b1b6cca657056407637fee75b7071b5c4a454ada859dc2a6004df7ca721cd08d211726e1412c08270a2830982af1dad75885e6c8ccfcf1ab7c5041e9b91d695a2fdebec2362319a785914d529f340833515c2af21435cc9355a5650c841640d17e2dea30d4b2f7366d06553893ce809f461c5b2b2482a1467c2859fca9e940836e952035"}, @NL80211_ATTR_TESTDATA={0x14, 0x45, "5c6b0257bc6a90de50144fd1f51bec8b"}, @NL80211_ATTR_TESTDATA={0xcf, 0x45, "f2403ff116a8d2b25444581784ce94980adad6b5e19d39fe8704ece05b95113573ec453e247ff5fcd4d64be6958b47f1b4aa238950c7ac96d1074061bd51544a08be1aef1062714af9e8aba376b7c48cb23ce4a867015676ca828ecfde0bb73bb1eb38377550556629b5e01be804caef059a32d9efeb533d44ec62e0d2afc9361f325eac0d544f2cbd385ea7e8844a5923ae518edc7092ca3c7f3110c398cf2dc8514685f7811ee8745d4639ee6f28323abaddb5cf407aa14b5c3fd2df76d1fa07d5e01496d186a2f7d1fc"}, @NL80211_ATTR_TESTDATA={0x1f, 0x45, "1ed5216f762f56536f440286efc682645240500af24d86ca0bc30d"}, @NL80211_ATTR_TESTDATA={0xdc, 0x45, "657fcbe4e127d1023273e776eae7c727c988447c922adc126405cd733c2e3f55e1a813e54af1e5be85d1e9a5a535001d0fbdfe89816634d92a98848b8844bb4e578fdace715b3f56b091f0f09ee2848a9998bc0fdcd5c4da3420cc9355182a70939f7ea81b01f550740f7b8ac696c54bcd83464c4ecac78a6349d94cd5f6e18673ba9e2b12ef07cefe064b0b409ff13e4bec21d87b7e2a851104a70ce4602e3ff8a8dc2c3a5577e963bed3a4ac070c4edbf5fce3f28d06df004edc3c37079158583d5a5fdc81735f96f7609e00dae9066134ba3348dd2139"}]}, 0x42c}, 0x1, 0x0, 0x0, 0x1000}, 0x24004000) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000600)={{@_ha_fsid={[0x3, 0xe]}, {0x100, 0x7fff, 0x81, 0x1}}, {{[0x3, 0x5, 0x0, 0x3]}, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000580)=[{{@align=0x8, {0x7, 0x3ff, 0x6, 0x2}}, 0x6, 0x0, '[{\x00'}, {{@align=0x2, {0x0, 0x100, 0x8}}, 0x1ff, 0x0, 'nl80211\x00'}, {{@_ha_fsid={[0x3, 0x8000]}, {0x1, 0x5, 0x2, 0x3}}, 0x5, 0x0, 'nl80211\x00'}]}}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x94, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000008c0)={r0, &(0x7f00000007c0)='\xff\xff\xff\xff\xff\xff', 0x280000, &(0x7f0000000800)={@align=0x10000, {0x4, 0x1, 0x20, 0x6}}, 0x6, &(0x7f0000000840), &(0x7f0000000880)=0xfffffcd8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'vlan0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x20, &(0x7f0000000bc0)={&(0x7f0000000b40)=""/2, 0x2, 0x0, &(0x7f0000000b80)=""/50, 0x32}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x6, 0x9, 0x2, 0x10010, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x3}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0xc, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='syzkaller\x00', 0xe5, 0xb6, &(0x7f00000009c0)=""/182, 0x41000, 0x21, '\x00', r4, @tracing=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x5, 0x0, 0x9}, 0x10, r5, 0xffffffffffffffff, 0x4, &(0x7f0000000d40)=[r6, r7], &(0x7f0000000d80)=[{0x1, 0x5, 0x5, 0x7}, {0x3, 0x4, 0x1, 0x3}, {0x2, 0x3, 0x5, 0x8}, {0x3, 0x1, 0xe, 0xa}], 0x10, 0x3}, 0x94) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000e80)={0x9, 0x8, 0x0, 0x200, 0x8}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r1, 0xe27a91ebd11bd3c2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000814}, 0x4) sendmsg$rds(r3, &(0x7f0000003980)={&(0x7f0000000fc0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001000)=""/51, 0x33}, {&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/114, 0x72}, {&(0x7f00000011c0)=""/225, 0xe1}, {&(0x7f00000012c0)=""/142, 0x8e}], 0x5, &(0x7f0000003740)=[@fadd={0x58, 0x114, 0x6, {{0xd, 0x2}, &(0x7f0000001400)=0x2, &(0x7f0000001440)=0x7ff, 0xc0a, 0x400, 0x3, 0x3, 0x2, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0xff}, &(0x7f0000001480), &(0x7f00000014c0)=0x2, 0xffffffffffffffff, 0xa, 0x2, 0x9, 0x48, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2db}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8001}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x8}, {&(0x7f0000001500)=""/4096, 0x1000}, &(0x7f0000002500), 0x0, 0x0, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000002540)=0x4, &(0x7f0000002580)=0x9, 0x2, 0x4, 0x80, 0x4, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x50a0, 0x9e72}, &(0x7f00000025c0)=0x10, &(0x7f0000002600)=0x6, 0x6, 0x43f, 0xffffffffffffa21b, 0x2, 0x50, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002640)=""/4096, 0x1000}, &(0x7f0000003640), 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003680)=""/66, 0x42}, &(0x7f0000003700), 0x37}}], 0x238, 0x200008c1}, 0x10) setsockopt(r3, 0x5a95, 0xcd3, &(0x7f00000039c0)="f37b142a0d2f227a677300fc5acd232b65b240e026cf24f40d4f7fae2445c08aad2e4fd2b4be4b92a8f5999168a37a6008c761a6ae26b084fe5bcc089f2b5c14638d7c64d6cbd1e5fe83187f73bd52ebca150a7837367c43617599edb9ba8a027c818ddb8e7c902da818e6ad738c", 0x6e) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000003a40)={@empty, @loopback, 0x0, "72fa8a0e76fce2368e4f8a52d370da3b6ada9056bdb3ca4a8e26fdc4acd0ba2f", 0x7, 0x9, 0x4, 0x2}, 0x3c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003ac0), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000003cc0)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003b00)={0x148, r9, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0xff81}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000003d40), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x24, r10, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x48011}, 0x4080) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x29, 0x2, 0x0) close(r6) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000040c0)={0xffffffffffffffff, 0x3000, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000041c0)={0x11, 0x12, &(0x7f0000003f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, 0xfffffffffffffffc, 0xfffffff8, 0x27, &(0x7f0000004000)=""/39, 0x41100, 0x44, '\x00', r4, 0x0, r8, 0x8, &(0x7f0000004040)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000004080)={0x1, 0xc, 0x8, 0xd1fe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000004100)=[r7, r7, r7, r7, r3, r12, r6, 0x1], &(0x7f0000004140)=[{0x2, 0x1, 0xd, 0x9}, {0x2, 0x2, 0xb, 0x4}, {0x1, 0x2, 0x6, 0x1}, {0x5, 0x1, 0xa, 0x2}, {0x1, 0x2, 0xf, 0xb}, {0x3, 0x3, 0xe, 0x5}], 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r12, 0x8040942d, &(0x7f0000004280)) 3.158142638s ago: executing program 0 (id=4530): setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01080000000000000000050000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800034000000001080001400000000d080002400000000d0900010073797a30"], 0xc8}}, 0x0) 3.018482983s ago: executing program 2 (id=4531): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x1, 0x8044) 3.011685192s ago: executing program 1 (id=4532): syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a0028000600000060"], 0x64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x5c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) write$tun(r4, &(0x7f0000000440)={@val={0x0, 0x88a8}, @val={0x1, 0x0, 0x21, 0x8, 0x1ff, 0x3}, @llc={@snap={0x0, 0x0, "dec3", "f2002f", 0x22f0, "562995b23e33f6a05aa557d8d85d6e3a754a77293fa679b6ef3928feaf015d5dcd3a56c383ccdc23bfb0d5c760b599c22d360377f8cab1b1b05cbc898d2c436556c1919b0a6fc3d15d463e3b890772956c27629a78e13bdb6fc751b7af8e401fe7aa99f7dd0e00d23fb50f7cc697aa86c350874ae9c08202ef22d025abcc799cb4b55df89ee4baea4676debf7a4a012f635a08e1c2620176df203524eef198793eefc9360026fe21b0c1e7fd04f1046a739dc74156578d70dd5052d2a700aaf835067d6a592dc8a6"}}}, 0xdf) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYBLOB="6601956e08e2fec2c97efbcc134531d0fb3a161a49e3f2621c1c0212314e21fe9831f63ec6dd2fa375053b1920e70ced019bbf572683f370b67062138c6cb2dd6a758b6328cba2f30f0dc45e3243be6cc1e6669aa4f8d2d03d8c213bcbaeeb9d8e5d6e51591fe7659d3d812064e51136e7e63d004e2c2a77cb3e2d13f4c8d5a3bada92af2e07960d21fff14f56eb7606c75eb6123edc975ca1c93137f5edfc23bd95183367cd8c458fffd24708bcadf90d9d3d789cd49da0e7ec420d00b6ca4f9ecdec", @ANYBLOB="d5fa7a7d2d759c7518b28801e606bf62db38e7829204a81930d58ef99c67efe0789506e309e3edd53b0f68b4cfd3f74b822c4eac27255332a8d895c4d05f9c64c9fcf2a673b01f681f494ca15a32b8340122ed27e0611cbeb5ab078779b5285c3dfbd33531eae04b3e434ba8cf3672241bdb80a649553794ab78055281332650e37772319efcf5c5262baef74edf93d940f0c70449000c6a8ecc5c7a22436f375bc539c83d7930b9175c49e120cc6a536708c4b81ece028ec5fceb2f9ccc93da32501fee62b61d474056ed398be9bb048ed7f58b14321f53b8639b95be62361185d6e03a1471498760932a28e5d0e2d163e87d004bdbd5c61c0bc7", @ANYRES8=r3], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x24, 0x0, &(0x7f0000000040)) 2.629952063s ago: executing program 0 (id=4533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000380), &(0x7f0000000440)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56147, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{0x2b, 0x1, 0x5a, 0x7fff}, {0x0, 0x0, 0x3, 0x2}, {0x6300, 0x0, 0x8, 0x673}, {0x7f00, 0x5, 0x7, 0xfffffffe}, {0x4, 0x7, 0x55, 0x10001}]}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.578647751s ago: executing program 2 (id=4534): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0xf, r2, 0x0, r0}, 0x10) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x3, &(0x7f0000002340)=""/38, 0x26}, 0x14800000}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002380)=""/42, 0x2a}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/23, 0x17}, {&(0x7f0000002500)=""/181, 0xb5}, {&(0x7f00000025c0)=""/255, 0xff}], 0x5}, 0x10}, {{&(0x7f0000002740)=@sco, 0x80, &(0x7f0000002940)=[{&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f00000028c0)=""/112, 0x70}], 0x2}}, {{&(0x7f0000002980)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002a00)=""/177, 0xb1}, {&(0x7f0000002ac0)=""/52, 0x34}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/143, 0x8f}, {&(0x7f0000003bc0)=""/252, 0xfc}], 0x5, &(0x7f0000003d40)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004d40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000004dc0)=""/23, 0x17}, {&(0x7f0000004e00)=""/153, 0x99}, {&(0x7f0000004ec0)=""/164, 0xa4}, {&(0x7f0000004f80)}], 0x4, &(0x7f0000005000)=""/11, 0xb}}, {{&(0x7f0000005040)=@hci, 0x80, &(0x7f0000007240)=[{&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/61, 0x3d}, {&(0x7f0000006100)=""/137, 0x89}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/72, 0x48}], 0x5, &(0x7f00000072c0)=""/97, 0x61}, 0xd}, {{&(0x7f0000007340)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000007680)=[{&(0x7f00000073c0)=""/214, 0xd6}, {&(0x7f00000074c0)=""/254, 0xfe}, {&(0x7f00000075c0)=""/174, 0xae}], 0x3, &(0x7f00000076c0)=""/50, 0x32}, 0x4}, {{0x0, 0x0, &(0x7f0000007c00)=[{&(0x7f0000007700)=""/229, 0xe5}, {&(0x7f0000007800)=""/96, 0x60}, {&(0x7f0000007880)=""/222, 0xde}, {&(0x7f0000007980)=""/125, 0x7d}, {&(0x7f0000007a00)=""/97, 0x61}, {&(0x7f0000007a80)=""/102, 0x66}, {&(0x7f0000007b00)=""/215, 0xd7}], 0x7, &(0x7f0000007c80)=""/168, 0xa8}, 0x3}], 0x8, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbead549e1b70207d6d00000900"/26], 0x20}, 0x1, 0x0, 0x0, 0x20004094}, 0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x4001) 2.200128639s ago: executing program 4 (id=4535): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdr={0xb0, 0x15, 0x400, 0x70bd2c, 0x25dfdbff, {0xa, 0x38, 0x35, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfded, 0x3, 0x7fffffff, 0x8}}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0xffff, 0x3}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xff}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x100}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0xb0}}, 0x4000001) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdr={0xb0, 0x15, 0x400, 0x70bd2c, 0x25dfdbff, {0xa, 0x38, 0x35, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfded, 0x3, 0x7fffffff, 0x8}}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0xffff, 0x3}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xff}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x100}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0xb0}}, 0x4000001) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000200)='pimreg\x00', 0x40000, &(0x7f0000000240)={@align=0x9, {0x5, 0x2, 0x7}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x10}, {[0x0, 0x973, 0xbb0, 0x7]}, 0x5, 0x36, &(0x7f0000000300)=""/54}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000200)='pimreg\x00', 0x40000, &(0x7f0000000240)={@align=0x9, {0x5, 0x2, 0x7}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x10}, {[0x0, 0x973, 0xbb0, 0x7]}, 0x5, 0x36, &(0x7f0000000300)=""/54}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000001800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000580)={0x1208, 0xb, 0x8, 0x301, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8}, [@nested={0x14, 0xcb, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x1}]}, @generic="59ab4b685de30252ed5848599893b8efe9aba15f90e36194d3b8a2c066e5064c7ba62f3c8f2f7e209436710fe32bfe99f88cbf6c2771a042f52da1aad3ad93edec07719bdbef864656ef13ea7a2d96ab26f3ee0e2ca52e532a56434b7c206caf32f59a22c298c68b48bce893a1ae5f89e9bc51fd2f061292e20ab564e5aa9da56d3f45dee2bf75dba2834bd793b77960dc120728279aa1b48e431c6528dac7ec0fa2ac8ef816f5fe1d1aab5c8f4300b6e3ff63", @generic="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", @typed={0x8, 0xf5, 0x0, 0x0, @fd=r6}, @generic="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", @generic="74bf6de40f64045317a44a123ee2e3e27f04dc4e2743598a5401c369d756e2bcbc9914877b6e3973"]}, 0x1208}, 0x1, 0x0, 0x0, 0x8841}, 0xc004) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001b80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f00000018c0)={0x250, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "78ed854530ce3b4b6feb8a54e9eebd77121097b5660e82"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @empty, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff9a00}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x2404019c}, 0x24004081) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001b80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f00000018c0)={0x250, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "78ed854530ce3b4b6feb8a54e9eebd77121097b5660e82"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @empty, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff9a00}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x2404019c}, 0x24004081) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001bc0)=0x0) r9 = getgid() setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001c00)={r8, r5, r9}, 0xc) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001c80), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001cc0)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001d40)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000021c0)={&(0x7f0000001c40), 0xc, &(0x7f0000002180)={&(0x7f0000001d80)={0x3d4, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c9beda9}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x765}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002200)={r8, r5, r9}, 0xc) (async) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002200)={r8, r5, r9}, 0xc) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000002280), r3) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r13, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000023c0), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)={0xa0, r14, 0xe10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x13cdd32372319e6f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000050) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)={0xa0, r14, 0xe10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x13cdd32372319e6f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000050) socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r15, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x30, r16, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0x800) socket$inet6_mptcp(0xa, 0x1, 0x106) r17 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000026c0)=@o_path={&(0x7f0000002680)='./file0\x00', 0x0, 0x18, r17}, 0x18) (async) r18 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000026c0)=@o_path={&(0x7f0000002680)='./file0\x00', 0x0, 0x18, r17}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000002700), {[{{@ip={@rand_addr=0x64010101, @broadcast, 0xff, 0xffffff00, 'batadv0\x00', 'batadv_slave_1\x00', {}, {}, 0x1}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast2, 0xff, 0xffffffff, 'batadv_slave_0\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x0, 0x8}, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002a00)=r18, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002a00)=r18, 0x4) 1.623538518s ago: executing program 4 (id=4536): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) 1.263626259s ago: executing program 4 (id=4537): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000047000701feffffffffffffff017c0000082e0c5c6a9029d8"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9f3969eb010018000000000400000d58000024060000000000000000000001000084ff0300000000000000000000c10000000000000000000006020000000000"], 0x0, 0x3e}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffff0000000008000a0000000000060002000100000014001f00"], 0x5c}, 0x1, 0x620b}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r7 = socket(0x40000000001c, 0x3, 0x0) setsockopt$inet6_int(r7, 0x29, 0x9, &(0x7f0000000240)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000009c0)={{r1, &(0x7f00000004c0)='lowpan\x00', 0x141540, &(0x7f0000000500)={@_ha_fsid={[0x0, 0x10000]}, {0x8, 0x5, 0x6, 0x100}}, 0x1, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x7}, 0x3, &(0x7f0000000940)=[{0x0, 0x6, &(0x7f0000000600)='(\x00', &(0x7f0000000640)="43a793cc13afe1cc00437aa4f48069cba24dd035131b91ef26fa675c400f715f97a419c0126b446c82a9b7023e737a3832ef7c8cbdd8637b68366b7cb374024157918f418e49ce89bae3df9c92fd734c5bb7a129e2b69f51ee20791d1ea6fce8889a36da950c65213907eca77103e2cd388be62189ff2d209285fdac957800f4068e9f", 0x83}, {0x1, 0x2, &(0x7f0000000700)='lowpan\x00', &(0x7f0000000740)="f84e52c6ff790f69f4828361916739cb2e381396323ca74decabd200e7ffc07552931011ccb7abbef6c0fe354619e54e87048018e8428a8ec2a30ab2f2cefbf40504e50b079875fff1d9b60e771e316380153e96527b439c5711b1f581a0c1e61665dfa1e1183f1e79a6406ceb2f0e0ca0eb2b64a54860376be8fd7c07a8cf59d8c07fffa5eb955f39d679cfa312b00dabd13d0fdcb68c80a0d07348d2e402fcc9334e510058f4532175ca362aebc8f149c034df0dced10c3ae1fb76b3b95c8d7352e6ffba7467aaab0a63d119f1963be3f8ed3a923f28302f955b9989946d327adac8f38a422dfd950b0c1242f8f958e13403aebf", 0xf5, 0x2}, {0x2, 0x8, &(0x7f0000000840)='lowpan\x00', &(0x7f0000000880)="9c5cf9e9549e920ecfd37bece0940f4d99bd8e6de10474909bbc809bd26430263aac14fa5c2a071455a149fe7364a51405bd3ec78ffb3cbb12f040ab8d447e636b023375b5007571adb5e5354e4f2e88d949f1b4b4c652dca2b11485a2101079bcaaa1e312efb29d77226a528c44658e7e77d3fbb1390dd5558f9b1620c14c8bc68d63cffb62c61b1a06a89f33c6fae1e94606", 0x93, 0x18}]}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, r1, 0x1, 0x1, 0x3}, 0x50) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000720c0000000000000b000000185500000c00000000000000000000008520000002000000186b000003000000000000000400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000005b70000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000001856000001000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="000000000000000085000000890000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1ff, 0x3d, &(0x7f00000003c0)=""/61, 0x41000, 0x0, '\x00', r8, 0x1b, r1, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x2, 0x8000, 0x101}, 0x10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000ac0)=[0x1, r9, r11, 0x1, r12], &(0x7f0000000b00)=[{0x0, 0x2, 0x10, 0x1}, {0x2, 0x4, 0x1, 0x7}, {0x4, 0x3, 0xa, 0x9}, {0x5, 0x2, 0xa, 0x4}, {0x4, 0x2, 0x8}, {0x1, 0x4, 0xa, 0x2}, {0x5, 0x2, 0xe, 0xf}, {0x1, 0x4, 0x9, 0xb}, {0x2, 0x5, 0xd, 0xb}], 0x10, 0x3}, 0x94) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYRESOCT=r13], 0x0, 0xfffffffffffffd81}, 0x28) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r15, @ANYBLOB="010000000300"/17], 0x48) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x2c, r18, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0xfffffff5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r18, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6c}, @void, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @mon_options, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r16}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="34000000100039040000000000000000000003e4", @ANYRES32=r8, @ANYBLOB="6a900040024002000000128b9db7800b0001006c6f7770616e00000408901558abdf82166aebd606cefdc9b7f640963a246cd6a5fe89cd9c836cf1f7f18930eeca3ccc3ee4e8e8404516f8550bc8af57baab9bda8b75970fe805f20a7962d9ccd22705c9390aa6e1c458f5e1c30605057e86304c9d059df87dc7b7dd80de4d16363a0c7007543a03d6541644c478b2dbf14360db300d840477c80f48a20f775c3ba08730e4509c14d180814b6c382465d674a25380fa533ccc1bc2693c0d48c1438b74c31c89417d6c5772e11d320e55434707e58c6c72fd3ea920d5c75f9e6aa7624620d098dc384743bb849eb968fa"], 0x34}}, 0x0) 1.26096753s ago: executing program 3 (id=4538): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.070577406s ago: executing program 2 (id=4539): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x62}, [@alu={0x4, 0x1, 0x1, 0xa, 0x1, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000003ff6)='GPL\x00', 0x200005, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6(0xa, 0x80004, 0xff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x45, r4}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) 1.06541297s ago: executing program 1 (id=4540): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0) 943.271987ms ago: executing program 0 (id=4541): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x101, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000040)="063a4617ae581010514f65980f27e4f3ec373dc1ffc7df0911c0110a6942655cbd4f636e7ad0ee295d287fe730cd8beaa5ede6c47fa578198a00af23d143ffe80a83b86d79d81c0936b97169") (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000003c0)={{r1}, r5, 0x10, @inherit={0x50, &(0x7f0000000340)={0x0, 0x1, 0x4, 0x1, {0x12, 0x5, 0x0, 0x1, 0x7}, [0xcf]}}, @subvolid}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter={0x1e, 0x6, 0x1, 0x22d29bb4, 0x5000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x3}, @const={0x5, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000001480)=""/253, 0x3e, 0xfd, 0x1, 0xfffffffe}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)={0x1b, 0x0, 0x0, 0xc, 0x0, r6, 0x4, '\x00', 0x0, r7, 0x0, 0x5}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001640)={r3}) getpeername$l2tp6(r8, &(0x7f0000001680)={0xa, 0x0, 0x0, @dev}, &(0x7f00000016c0)=0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001700)="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") (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000001800)=""/4096, &(0x7f0000002800)=0x1000) (rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000002d80)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000002e80)=0xe8) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$netlink(r8, &(0x7f0000006b80)={&(0x7f0000002840)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc, &(0x7f0000006ac0)=[{&(0x7f0000002880)={0x1c4, 0x1a, 0x1, 0x6, 0x25dfdbfc, "", [@generic="304a25a9572b96a83566f2f6936ab510fffd71a7ef2896ca6c858a33d8faa095f16fdf56dbb0f3ac30e4e40b911dc38081df13dab274b30088222fd0a55123da7ac849513d5207724ba541fb03c6854b66c05f4e1c99fee01c1e25e5d5576c91987f20df68dc9c76084abb3e2ed1438136c419d3b6f815c1af4717914e5d538ca7556e600876a19492d204dd907a6328b3539afd7e66a135bddaab99ce1878d429a3fc58f63e21837fe58cece3e2a9dd9b689e33a6e1a63cb3d95fed7077644b2b6e2381bd9fd6b49d4e93d9ffaae806c205d416b1db0d3eb5462d376302b4992ce4cd24037fb3a330", @nested={0x4c, 0x155, 0x0, 0x1, [@generic="26ca744ea4bf83dbaf8318bf8d4594ec065424cc556246fb12b0c836059c5adcafd77c78ab2798fb47c396c5dfb4709f99d0b8c9cac81709", @nested={0x4, 0x10}, @nested={0x4, 0x94}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}]}, @typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="df1f448ddb66e7f385ed671cffbb1f79e62eb0596b9ad45b9e56cbfa4e2f64c4dd6d3194d5877106565888b7d459a29f774334e7552564b517676a5b88ee8409effea06dfdff01505976e27466db680badee6600e7751a2ae265a6c13acc3e108c5fea88", @typed={0x4, 0x15b}, @typed={0x4, 0x6}, @typed={0x6, 0x5d, 0x0, 0x0, @str='-\x00'}]}, 0x1c4}, {&(0x7f0000002a80)={0x2c4, 0x3e, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x11d, 0x0, 0x0, @u32}, @nested={0x49, 0x120, 0x0, 0x1, [@generic="13228251f3a0e12c88e89c77e628b71f4f1a8dcedf1e15079663332ce56f7302fbf2ddb1c8ee4f9634af1a32c7d0321eaba7a06f3fe098480584472204fa634263b194c304"]}, @typed={0x14, 0x152, 0x0, 0x0, @ipv6=@private0}, @generic="38a037d60f83ae2d989c0dbd6c17b8d6d46e5782bb96681abcac92f64e", @nested={0xc, 0x10d, 0x0, 0x1, [@typed={0x5, 0x119, 0x0, 0x0, @str='\x00'}]}, @generic="d138d407cab16ed2a25f64c818fc5c441070014beaea397c598e0866827afbe258e7230331a6b38bca18ec44ab80778b3f3b16f99aede12441a466681f81c37f6bde285d46c049a3f56f2d149e6f1f7b3e4db39e399ba069d1891d3cdc746f304261232396e657cfec80ed0203aff7d3aebd04704827ba61c642d5ce5064454776e10bd32e0b431c70f015da31c6cfcd68d086c11e4b7f749e044ac436122df98ecfa2676a03", @typed={0x8, 0x45, 0x0, 0x0, @u32=0x7}, @nested={0x171, 0xac, 0x0, 0x1, [@generic="1f27e577f792699ba8356e79bf9f6e9a827781824982ad0740daac37b74213955aaeebb1a141376855b67fab03441cf21f1ab9c8c86a1a56c7944583c2c970ee3a90714ad8d6586b4f7192239f67fc9c3222372f754b3fd4f339508a03b39d9828d5a48c89b1bf8e765d8ce72f1349c242acf1b5b0a3896a85e944add0d10222af7cd402f88f12a7a44dde39aba6e5129f632a84d1d603dff8af0ebacb3ce28cb838377f3654c69e3d7fbeea", @nested={0x4, 0xd1}, @typed={0x4, 0x36}, @generic="84a5b44b52692d461d6464b6aa8ed911a64117adf05847554967c263a37ebc7fcd28aa4f8e61080b95bffa2c1b", @nested={0x4, 0xa5}, @nested={0x4, 0x9b}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x7}, @typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}, @generic="db658dcd965842b07749edfe842f4a6721ec825d1d7a5d2e1fa7e78c70ec372e72300904e069dadfb6ed4e2e51d275cd9cba6ac36f0585cfed028bd55d476fca566efc43fc0e454828a9320a1fdd7eaad20c05117cb0c3dd424921b8883057ef92d8dadbc42cb384199ff391a7e07ddeb91a6a14"]}]}, 0x2c4}, {&(0x7f0000002ec0)={0x24f4, 0x42, 0x800, 0x70bd25, 0x25dfdbfb, "", [@generic="89f50b493d9306626d4cfe8c53f628cea91061f104119274b0b0ed90", @nested={0x23e, 0x168, 0x0, 0x1, [@generic="608f91e2f6b3394c81df5a30eefd6a0b72b2f8ef6365ac7b1a1ec8800f4c07809a953a7c3afa439eb7976f274b5a3396a53303e38a5102757624ea830cd244c453152842f9f1122b7f3a2ca29ed975a11642cf91a40ccaaa37c13a7ae22b1c1b5f5c72de", @typed={0x7, 0x7, 0x0, 0x0, @str='(#\x00'}, @nested={0x4, 0x53}, @generic="aec38da05b0525055aade53d46ae9dde28de0d64fa70caedc5cedae6cb19a4d78fa57a51a0452a224a24b39b851fd48a3217310fdd1a10dc51998ae4974829a1f89baf1e9d74d5ba7c2fac23bb1e592c92a729cd16bfde28e182e20db2652906cea3db1a3fb5b6df414ef61b669dcc1c874a0d97ea2332d8da34bf67c539cc93cde8146d050c1c99c611194a79d78a019d44d4a25557a7fd68951fed95f2c4a5ef7ad4da987b32aa406a31be62858f97c5f4ccffa68500d27a2147ef07ad04503691c5237f341c", @generic="a9bc55b6aa3bbaf9cb482803031f4d65519e38e66f07d8b3d3a5c1420eb4dc0b5b939018fbd1ff46775b2cc6b825e14a1282d41c2f452960a3e2bd941a478eb962332629839f388ea96014366ab3d2f10627edbef78bddad0d58cb1b5c4d4ae3493714eac18c640092b280137533262a8e8e", @generic="23b983e9a7dd7ad47b9fc19e", @generic="4ab57656e31fe9f3e3d1fd783ef26be3c78c36b185a778e8cbe4395d32a5eaf5ae4bbf56d33209d28d91ba067baaa07f3cbfae2f2b8a75a43e9cec728c339d2de1dd3f38e7f01ae9e3bfbc370da92e48dd4afb5710d03ed0477330d2be1a91b27bbab138b767e0fae97ea8cdbe27e6312ea0f8b6f9dd921b36b0c00ae3a0c3eb6c329967b4"]}, @generic="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", @nested={0x8d, 0x12f, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @uid=r9}, @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@remote}, @generic="c9f74c4b826a7b039bbb739c1ab007fe38945e899b8374b0a34b3551097eef2d61e2c41624230fd9f41a336098307e970904b7bc0f675bff3f5a49ad7544aa68d27372b1db811836a9741a04b92bf6cae5421c94d02736ddc8", @nested={0x4, 0x131}, @nested={0x4, 0x3f}, @typed={0x4, 0xb7}, @typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}]}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x10b5, 0xeb, 0x0, 0x1, [@generic="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", @generic="75ab1e582e2bfccd1c61dac09deb177fac143dcf34ae7e729b242dad88511dc915d795c9ee5138dab94ffeeaa9b2d58d33429d7670ec0a60aae0f09801ac10138554c408968935b97b0e90364aeeddebeb88bf8eb5da3d633c48e8c960621b3466b8172893f50116", @typed={0x8, 0xc1, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x124}, @nested={0x4, 0xc}, @nested={0x4, 0x59}, @typed={0x4, 0xe9}, @generic="381e68766e0a265a871385b6825f5042e2b7baeee9db777a908532a4f13d688c9d", @typed={0xc, 0x45, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x132}]}, @nested={0xe1, 0x89, 0x0, 0x1, [@nested={0x4, 0x46}, @generic="68a926506c3b0353e932c4289ca0dcdf9696ee7b294a65619950d4deb5b491c55d7569bd83b891f171394fef6003804c1f8f398f83f760fcb43201f5e75ef8a6cda95fc9575eaabde065f44f5507f7229b5aa0822477d27fc167db7d970461722870b80654444e00f65694909d0002931d31ba6a3474da7b28d53e2db032b51d1a768bda11d9314a68b395414389cdca6416f0283255aa8687d9c2e2eb924b7266a5985a56637409623f63de62cec11c2aff0e7e60314e9b6fa4c294b4d2e05b98aadedd4f97ba0e91ae2e131dfb2831a6d069671f", @nested={0x4, 0x47}]}, @nested={0x51, 0xba, 0x0, 0x1, [@generic="4d74463b8f3c07caa53733e344c9c32f6c1a9fb55b691893e101b8274f9fa84fcac0ca1b37abedb7b6d67ca769a5ef194f09ad1e2e39193fb0b36615a8e668e708da2025685058d79d", @nested={0x4, 0x73}]}]}, 0x24f4}, {&(0x7f00000053c0)={0x230, 0x39, 0x20, 0x70bd29, 0x25dfdbfd, "", [@generic="ee1463ceb5ce7749be39a6588d1f074ff5403e42728d36d5baa72b563ed5855b196e3fdac1453a71df7f21644692ac58f9e9e02f2175b85324a5a50270b8e6ce6fa2224406c7b12a7ece2c4f577ae45597c83f6b6497215b30a7630cd5edf77b3f2e09f4186adac4c59c5d945c97536791f0ebf952b4821af490764f717911d93e2d4839f2f22793e2b46da96081b9ca0f8ba0f0da10c96d19985a2802c3a0a9524fef1d", @nested={0xc0, 0x18, 0x0, 0x1, [@generic="a6102b1623e04ff36f0d74137a55fca5ad12b5be9eea17fdc20dab9a6e429e68f3de87faac3d053fab391a7cbc07cf3324817efd3a9b7dfb155fe1be4fe27df3e18bcc917e05d02f17783d6dc9f7a715fae3e4c232174b1d392555521f950483be78ccc9185f7a2becb37bbd5fe97f91419ee4a142c2bfadc50f492b22b73b89b75d0f559ed26813e4d1a8d7800e0473124c483fe827431012f3a6c91dd5ef794da9ec3a27a679f022e38423709d57713aea27663f6ef7b452159adb"]}, @generic="6cde3baa35855050a0ad36c6a70006fdd23474c71d18990a1cc3cbfaf700ea9c2018da846458cd2c3c0ad11e6ae4f82eeeee6eb2f73bc87c97f98b779e33456ce703c2fe13184934150a5016852a6ad42449114c11f6c3d974944162948719c23f1221dddf2ce179f1ff7b49801ee07379d148208340cfe740e422f33ab278ed45ad6a553a33567f78759f509aa44380341b5c3fcfec66c366f4239f744f7f9fd3fd123bc5694b733f9403d3fc192ba4e1b4d2f280a0943d0c53"]}, 0x230}, {&(0x7f0000005600)={0x1408, 0x31, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xf7, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1115, 0x107, 0x0, 0x1, [@generic="a4cd6ffa41f11aad6cad2f3af947a080e5a764d07204f4c973fff9f0dd0255e97f703d3eb01f3384e0c5708dbe651fa1368fd79b588c614c02bf7bc16e5a5205d3526b6fe0a3cf796e1a727375db1c2dd8d7dee692aa66e869ecbc5ac01e9bc5ce2cea544fc405ba736ec5460a78041305720e96e79b5ffd024a2e6c136aab59eaf159674169e7e693e405c7dc6365eaf4916b1138d3eb390c40b56f9757fbac333ef9dbd6e04920452261345e71e829398777f70daed7a23bf0f8b39f8df1d7322bd9aebac85b2aef89d3d25f", @generic="e61d322ff5fc742290334a6f7d7094219458323c532895d2c1d00713fa109bf78d059f3f8fe86d718b020c332b251a6a200a76291aeac62f20e6454b1c6b2d987a6adcb9", @generic="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"]}, @typed={0x14, 0xb6, 0x0, 0x0, @ipv6=@mcast1}, @generic="f96bf22cec4d0d01ce78cb286f8674cdd76b29cc2c0fa7097483b4a3b05a5827b3f4453d4ff608e7d9e8df658d5bfa4246558d2da5bd99b6c5c2304c6b4847e45d26865e0553a34ba4298fd76feedc356f901514e1b79bd23ad2cdf81dbe9cc48842c5c6a623d9564deaebf402f27783cfc32c89599eba807f66e0f4d4bfa1718ab3cb", @nested={0x37, 0x1e, 0x0, 0x1, [@nested={0x4, 0xa2}, @generic="8242e78baf71dc1d6d4bb4449e412553557e8626732b9ca962e649318e9716cdb07c36e4ff02b9bb213eebe9fba217"]}, @nested={0x1ff, 0x136, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="a66068ab753730ef9b7e09b3ff42931ff612de7e4ad340d02b27e6ba101ce0beba2481f9ecfffae15a87516cce0021894ae2cec4a41ccc2f5ed34afee5ee525da0b4dc0885", @generic="2f029203889032c4dc3db24935bab751b22f003422b1b4a87700ed3260d29d5668c7011cd91749dcf19a5a8763ce8c99e2c84aa05144b5a05f34c0a24f4e02e3be0118621cd774c72fab38", @nested={0x4, 0x92}, @generic="70b19ba9cf350bb6332ffb7e9617221eaf6ef4b04625afc86e2215d2a1bae0213a4a3a6287e2a0848328fe59c63f0d8803de87234c88ae3252c8ae304ce5f4f436eeb088fadc1162914c923d82932ff09f2dbc9a1a354ab1fb31b70afaeacfb93831c31da560e7eea83f672192c7cc9b71e784b375659eb45d7e1edab7cf33df341891f1ad960e79f758874f673fefbb161c1d7f1814fe18a2a761365e0e635a561be3c5f8e8e9bba9f1fe53a1d1d2c53453c989e8edcdafc1944a8cf4be82fcb5f0fd48a556c232edcc03a836260b032b716bdf5f4d1f", @nested={0x4, 0x88}, @generic="548fdd34a3574bff44019e0ec8122905e09f440acb98eaf8c8aa336e097500c66754e1a99c7682c246f5252fbccdd82108d589af02d8588b550505fe531eff09c528dc4b9aa8f4e3cabe787de5c38cff282d057adbd012ea4ec932850bd3a1b4aca52668b2d22e8e2521a49566c0a27b1f61031a70cd0b9e807e2ba5e2388e495e847b81"]}]}, 0x1408}, {&(0x7f0000006a40)={0x7c, 0x42, 0x200, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0xdd, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x111}, @generic="9b821bd58ad75c6a019b6992e9e4631678259dff3fc119dc692dca4849cf88de790e936f471be626ee59d48613c416e5c527ad6a58de592f7931a9a30ecd66d2e8a0778caaa020bf3b07ed5631ee975f3fc3a51bae1a2ceb730d5d9c7388fa6f"]}, 0x7c}], 0x6, &(0x7f0000006b40)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18, 0x4000}, 0x40000) (async) r11 = accept4$vsock_stream(r2, &(0x7f0000006bc0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800) ioctl$SIOCGSTAMPNS(r11, 0x8907, &(0x7f0000006c00)) (async) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000006c40), &(0x7f0000006c80)=0xc) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000006cc0), 0x4000, 0x0) ioctl$EXT4_IOC_GETSTATE(r12, 0x40046629, &(0x7f0000006d00)) (async, rerun: 32) getsockopt$sock_timeval(r11, 0x1, 0x43, &(0x7f0000006d40), &(0x7f0000006d80)=0x10) (async, rerun: 32) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000006e80)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006e40)={&(0x7f0000006e00)={0x10, 0x3f2, 0x200, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0xc800) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000006ec0)) (async) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000006f80)={&(0x7f0000006f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006f40)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x40005) 488.165445ms ago: executing program 1 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="21000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="120100000000000014000300766c616e3000000000000000000000000a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4090000000000ff6910ae0000000000c409000000000000950074000000000000da3d239f7ff23775930e012e4d603b8ee0eecaaa4ff372733957c4bfdaee78981e9e806a3f46914788aa788cbd5fbff63f302b07cd61a094bf5bad01dc81ab75f063897d425385854e0497d42108025802fda76741e5352bfcd4"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) 487.177947ms ago: executing program 4 (id=4543): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)='\xff\xff\xff\xff\xff\xff', 0x801, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x7fffffff]}, {0xa, 0x3, 0x9, 0x9}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000001c0)=0x4}) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) (async) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 482.774882ms ago: executing program 3 (id=4544): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0xc7, 0x0, 0x6, 0x0, 0x1, [0xb, 0x180, 0x8, 0x6]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, 0xfffffffffffffffd) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @multicast2}, &(0x7f00000001c0)=0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xfffffeff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6ccf}, [@call={0x85, 0x0, 0x0, 0xa6}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x7a, &(0x7f0000000100)=""/122, 0x41000, 0xc, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0x3, 0x6df7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3, r4, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x1, 0xf, 0x6}, {0x2, 0x4, 0x1, 0x4}], 0x10, 0x4}, 0x94) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000004c0)={r5}) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @private}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000580)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x8, 0xfffffffb, 0xb, 0x40, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000740)={r3, &(0x7f0000000640)='GPL\x00', 0x26a082, &(0x7f0000000680)={@_ha_fsid={[0x1fb54316, 0x2b89]}, {0x8, 0x5, 0x9, 0x9}}, 0xfffffff7, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xc5}) sendmsg$rds(r8, &(0x7f0000000a40)={&(0x7f0000000780)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/25, 0x19}], 0x1, &(0x7f0000000980)=[@rdma_dest={0x18, 0x114, 0x2, {0x0, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000840)=""/109, 0x6d}, &(0x7f00000008c0), 0xa}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0x10}, &(0x7f0000000900)=0x8001, &(0x7f0000000940)=0x10, 0x8, 0x2, 0x5, 0xabf, 0x21, 0x4}}], 0xb8, 0x40040}, 0x4844) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x10, r1}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000b00), &(0x7f0000000b40)) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r8}, 0x8) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r8) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r11, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_inet_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000d00)) ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f0000000d40)={0x1, 0x2, 0x71e2, 0x2, 0x5, 0x8}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000001140)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_DELTABLE={0xdc, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x68, 0x6, "b469c053e3649c7737ff8832a254e54d42465086666dec79c2c6b252ba6d57f06a663050ed40c55dc0d7045a00a22a02418f2b60981d98b6b1710edeb302cead5149df3184c07fa10fcafa10c61ce87701253188cf1e0c304c65cdcd0e6755fbcd183e56"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x38, 0x6, "d03cb4b83ad00d46a5d6e12111b55cbfd02816c7401d0714faff5cde1db975c0c80e03130a8d98a39bb58169b22b5b1db2dc8643"}]}, @NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x62}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0xbf, 0xc, "23e0e20a6c5698de609dc1b8e0b0257a2ef863ad347ecf72749ee4be1922417b3ae3b235504eb998b9ce2a47500a27d857edd088af5aef897894cb4c5539e4ea4118a7c091bdd16815768372348dc5f40c3a849be6a7ce31ddd54a0c1adf55150579ed2d845358680fdbe91a523f04e36667b95aecc2caea32b920dd7a41e3e7571d234db96dcbf4cfb08412ddd9a242f3c94729428d08e81b57de8fa74ce08ae92e90c60f2119957009933a8563c795902779a902eb0ae5fa1e38"}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x320}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000011c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000001200)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r13, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10) close(r12) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001840)={{r0, &(0x7f0000001340)='\x92/\x9b\x00', 0xa000, &(0x7f0000001380)={@align=0x9, {0xffff, 0x0, 0x1, 0x4}}, 0x7, &(0x7f00000013c0)={@_ha_fsid}, &(0x7f0000001400)}, 0x4, &(0x7f00000017c0)=[{0x3, 0xfffffffa, &(0x7f0000001440)=',+)(\x00', &(0x7f0000001480)="54a2d498bf13e7304f873fa8e4ef1950e09f512d1eb454d7b0e3ba6a4cb1c6160d7ac63ea50d085323f88b2185f7181a9b72b0cd4517255fadf79bb101f1e1d4fc3989991d1bd96b513c08642c9d7032a1aefc6732e27cc4d9a0839943f3adff25106dbe308b4950fe5a3ab05f0ae39c19ced1a8b6146b099d4ad5b92511562d5ce13a01bba252599c27bd9518fa8bc6de502fc00c5a2ed35bfbbf0bfe31a9b00466e3c5bb9b4e7a2500819b7da5c63e", 0xb0, 0x32}, {0x2, 0x2, &(0x7f0000001540)=':#\x00', &(0x7f0000001580)}, {0x1, 0x1, &(0x7f00000015c0)='%.\\\\(,\x00', &(0x7f0000001600)="65395df62969e6f306f57291a9436f51604c12efeb9a92b9c28543b68bc690aa072c6910b58175689413a59589df90da1a929c95421107348c6f77403902f58085f642ba3ed1e5c4d6df7b3fd3307cf8c5d0aac4e3c44158877ca594313b71aebb3dda71d08893fb176041e2996d2835604d74f81190deca73df5a0921b52921b36520ccc830ba6de9e4768411ee1475d4cf07ace28c5ed92b2fd338eccd669d9a52f1ee142401fde51d2d2b24438c9088a61eb225efe48be01c5d2d0a632380dfb3188af020cfa82eb66165343ed806d7f9b5b0c0bc698c8c32fda984c9dfc9a37cdebd553ade593c9a43", 0xeb, 0x18}, {0x1, 0xa, &(0x7f0000001700)='\\{^\x00', &(0x7f0000001740)="c754d963427de9ced65706bbe8a729c1c74227a062607ee5e0cb893b6fcd153dd5f8421b9903a1dd8b9211364deed9a71cbe040b2a6693ee2688996e9f8e27048004376eb599dd33a5e1a9b59a59e809ec556826898b37e6960d", 0x5a, 0x28}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000018c0)={@map, r16, 0x25, 0x2028, r8}, 0x20) 480.205499ms ago: executing program 0 (id=4545): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="58000000140001feffff7f00000000001e000000ffffffff00"/88, 0x58) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x110, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa0b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffc}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44851}, 0x4040) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x2}, 0x2120) 244.447124ms ago: executing program 2 (id=4546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x3, 0x9, {{0xb, 0x4, 0x3, 0xc, 0x2c, 0x65, 0x0, 0x40, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x94, 0x8, "7c456722fce1"}, @rr={0x7, 0xb, 0xf7, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x44, 0x6a, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_GROUPS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x3, 0x9, {{0xb, 0x4, 0x3, 0xc, 0x2c, 0x65, 0x0, 0x40, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x94, 0x8, "7c456722fce1"}, @rr={0x7, 0xb, 0xf7, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x44, 0x6a, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_GROUPS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) (async) 138.933471ms ago: executing program 4 (id=4547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x48}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000340)=[{&(0x7f00000003c0)="89e5ee0c7cdad9fcb47380c988a8", 0xe}], 0x1) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0xf, 0x2, 0x50, @loopback, @local, 0x700, 0x8000, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000500)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r9, 0x4}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000680)={&(0x7f0000000380), 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x88, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000014) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000006c0)={0x1, 'macvtap0\x00', {}, 0x7}) 137.596692ms ago: executing program 1 (id=4548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0xfff3}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x4, 0x20000000, 0x3, 0x3}, 0x3f82}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) 83.163737ms ago: executing program 0 (id=4549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000007c0)={0x80}) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040), 0x8) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028004001200060011c4798bf600d4e8b2d3f6700133bf65bfc64dfe9d798e3dffbee862f37659d8062e94873652b2f5461a860a7c4a01a2e81fc88b8399acbfdd7f28e18b4694ffe975f74ea4465e90c1ee15d9fbe74308a676a6ce5deaa0f2374590ae6bc3a4cbf98b6f2f6ae007ea2d78569cbf4e380e5566ec17f96ea47baa89e509f37b0dec44eb6134828bf8ad4f66e115b6db382ea0b4f5d7ffe329b43c9926ca5689e1a95dbd2321aea5f58f3152d3d6e3fcbb0e442dcb726130f0d41075e4eb19d029e11fedddc2f70e33d7914803841805d691ba85c46b0c04b87fa3341fec6ba794bc93ca"], 0x40}}, 0x0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x10, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000740)={{r0, &(0x7f0000000180)='/{(@\x00', 0x800, &(0x7f0000000200)={@align=0x8, {0x6, 0x7ff, 0x9, 0x6a}}, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x1}, 0x3, &(0x7f00000006c0)=[{0x3, 0x400, &(0x7f0000000300)='erspan\x00', &(0x7f0000000340)="dccc47dc238f59500b575c9d6995c1438a8ee677c9116ba8387b4c6f92353436bc591c7f24ab713e8a45bbd3e9c5c94f4d6b277bdbb2f29419ab235c294edf389995242ecccdb683bfbd35db961ad2b24976da9d8a6c43378387e225391876818168f3d736c1a12611ca3bc3c319737da78094a9c45dff0c0b0f1dc9a0bfa266bbb2b77dc95dd5eb4f4bb3e4b069ad2a040c3ff3bc4ef21e8ff8f951570e079e34e2103a26a1a0ce5c4902dda90695459f3694ca735e78e7afcfa9de7286ea9878dccdc30eb15cb164758a1cb52a4820faba6afff986e1a1b40f85e8c3f7f03bba88e6129c805a02af12ea", 0xeb, 0x20}, {0x2, 0x0, &(0x7f0000000440)='erspan\x00', &(0x7f0000000480)="618fba9b0e82c903c2038f28fa0c58ea0e378e1911b89ee556b1d9a99747532de25140dae8038c9afb929050b94149ff2bc174164d88a74ac280fa11a53c992beb4e6fe3448b111b0c05ed3ecafe1e0161fc728d1e102b078cc952925ca669846dd0f104fb1507da0697596fd70d2b4bcdf0e4b03c41956c2a4560d59ff676ff9376feb38a0d29cfb7d019308927f6faf21123e6278f97c64c46", 0x9a, 0x20}, {0x2, 0x6, &(0x7f0000000540)='$@\x00', &(0x7f0000000600)="9f4df9040b5724b47db3623e8c578c06500b6987a4a83ce70bb97be72db76b5611f92ab5de3d4d2d517150d10caf9884ccb3fd8e270a6f55a16a18b655c3b276faadaa6e227225aa45e1e1e7ded5a06e6159df06e3fb0dd1b8f730f64d2ed42fdc94e765e92fb1223910fc9757364653712e557db62bb64bf5f0a05d794dd7ff3a3a05eeb3", 0x85, 0x20}]}) 76.824036ms ago: executing program 3 (id=4550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) listen(r0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xe3e2be3bcdb5a679) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000000c0)='+}\x00', 0x3) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r5, 0x111, 0x32, 0x0, &(0x7f0000000380)) (async) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000000000000000088a83b008100370086dd60fb35190014030000000000000100000000ffffe0000002fe8000000000000000000000000000bb330000000000000002004e2868000000"], 0x0) 0s ago: executing program 2 (id=4551): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x2, 0x9, {{0x3c, 0x4, 0x1, 0x31, 0xf0, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x14, 0x97, 0x1, 0xf, [{@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp={0x44, 0x28, 0xc0, 0x0, 0x4, [0xfe2, 0xfffff0ee, 0xd, 0xf, 0xff, 0x3, 0x5, 0xffffffff, 0x9]}, @noop, @end, @lsrr={0x83, 0x17, 0x92, [@dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x3c, 0xaf, 0x1, 0x2, [{@empty, 0x5}, {@rand_addr=0x64010101, 0x6e9}, {@broadcast, 0x80}, {@broadcast, 0x4}, {@loopback, 0x10001}, {@loopback, 0x4}, {@rand_addr=0x64010100, 0x10000}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x2, [{@loopback, 0x1}, {@empty, 0x10}, {@multicast2, 0x1ff}]}, @cipso={0x86, 0x2a, 0x3, [{0x5, 0xf, "cd52be74a208d5b81f67166b72"}, {0x6, 0x9, "c90750d214efa3"}, {0x7, 0x5, "238aeb"}, {0x1, 0x7, "23fbc97d72"}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x4, 0x20, @mcast2, @local, 0x40, 0x708, 0x9, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x8a0, {{0x11, 0x4, 0x1, 0x38, 0x44, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xdc, 0x3, 0x5, [{@private=0xa010101, 0x7fff}]}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x9, [{@empty, 0xe}, {@loopback, 0x8}, {@loopback, 0x4f9}]}, @ssrr={0x89, 0x7, 0xaa, [@remote]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000550002a483e0f400fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00020300ac1414aa0000000000000000000000008edd000020000100", @ANYRES32=r4, @ANYBLOB="01020400fc0200000000000000000000000000018b67000020000100", @ANYRES32=r5, @ANYBLOB="00010000fc0000000000000000000000000000010800000020000100", @ANYRES32=0x0, @ANYBLOB="01030000ac1414bb0000000000000000000000008edd0000"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0xdb876addbcf7f63) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x1, 0x4, 0x1, 0x80000000, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) kernel console output (not intermixed with test programs): tdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.480248][T17803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 379.588529][T13764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.603104][T18055] netlink: 'syz.4.3228': attribute type 21 has an invalid length. [ 379.621713][T18055] netlink: 'syz.4.3228': attribute type 5 has an invalid length. [ 379.722277][T17803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.733713][T17803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.745873][T17803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 379.794907][T18055] netlink: 'syz.4.3228': attribute type 33 has an invalid length. [ 379.828857][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.837098][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.845258][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.853950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.900266][T18055] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 379.916533][T18055] bond1 (unregistering): Released all slaves [ 379.978602][T18070] __nla_validate_parse: 69 callbacks suppressed [ 379.978754][T18070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3232'. [ 380.032437][T17803] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.048659][T18070] netlink: 'syz.1.3232': attribute type 1 has an invalid length. [ 380.058019][T17803] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.069038][T18070] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3232'. [ 380.079648][T17803] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 380.253710][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3237'. [ 380.293399][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3236'. [ 380.320184][T18084] Bluetooth: MGMT ver 1.23 [ 380.550313][T17803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.581009][T17803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.604951][T17803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.650352][T17803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.669672][T17803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.692551][T17803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.728796][T17803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.743559][T17803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.868468][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.919805][T18115] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 380.934034][T18117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3245'. [ 380.947665][ T5627] Bluetooth: hci4: command tx timeout [ 380.970016][T18115] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 381.063506][T17803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.131805][T17803] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.155167][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.162451][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.224596][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.231867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.686881][T13762] IPVS: starting estimator thread 0... [ 381.829170][T18152] IPVS: using max 27 ests per chain, 64800 per kthread [ 381.843906][T18157] netlink: 'syz.4.3255': attribute type 7 has an invalid length. [ 381.874675][T18157] netlink: 'syz.4.3255': attribute type 7 has an invalid length. [ 382.036644][T18166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3257'. [ 382.130923][T18170] netlink: 'syz.0.3259': attribute type 21 has an invalid length. [ 382.163606][T18170] netlink: 'syz.0.3259': attribute type 22 has an invalid length. [ 382.178785][T18170] netlink: 'syz.0.3259': attribute type 23 has an invalid length. [ 382.184583][T18173] xt_hashlimit: size too large, truncated to 1048576 [ 382.214478][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3259'. [ 382.345170][T17803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.518279][T17803] veth0_vlan: entered promiscuous mode [ 382.569018][T17803] veth1_vlan: entered promiscuous mode [ 382.624090][T17803] veth0_macvtap: entered promiscuous mode [ 382.660070][T17803] veth1_macvtap: entered promiscuous mode [ 382.729645][T17803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.766209][T17803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.867613][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.895560][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.941069][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.973061][T18201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.980425][T18201] IPv6: NLM_F_CREATE should be set when creating new route [ 382.987706][T18201] IPv6: NLM_F_CREATE should be set when creating new route [ 383.008180][T18199] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3267'. [ 383.028988][ T5627] Bluetooth: hci4: command tx timeout [ 383.036309][T18198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3267'. [ 383.058872][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.176931][T18211] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 383.216115][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.249225][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.258304][T18211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3269'. [ 383.279354][T18204] veth3: entered promiscuous mode [ 383.288225][T18204] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 383.318672][T18211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.384856][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.412152][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.624657][T18226] batadv_slave_0: entered promiscuous mode [ 383.649622][T18226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.791263][ T5742] net_ratelimit: 18 callbacks suppressed [ 383.791282][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.875307][T18226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.988156][T13819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.996560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.042984][T18239] xt_hashlimit: size too large, truncated to 1048576 [ 384.260122][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.275100][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.283782][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.296003][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.314525][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.350648][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.419851][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.928576][T18266] netlink: NAT attribute has 4 unknown bytes [ 384.950330][T18266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.032158][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.039182][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.040621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.061496][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.081735][T18271] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 385.228321][T18275] __nla_validate_parse: 2 callbacks suppressed [ 385.228344][T18275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3287'. [ 385.421006][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.458181][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.530594][T18289] validate_nla: 3 callbacks suppressed [ 385.530612][T18289] netlink: 'syz.1.3292': attribute type 3 has an invalid length. [ 385.619462][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.742666][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 385.761934][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.773567][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.805892][T18304] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 385.817212][T13763] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 386.076176][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.114896][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.364607][T18319] netlink: 'syz.2.3302': attribute type 2 has an invalid length. [ 386.392840][ T5627] Bluetooth: hci3: command tx timeout [ 386.455448][T18309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.511407][T18323] xt_hashlimit: size too large, truncated to 1048576 [ 386.573044][T18324] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3304'. [ 386.644916][T18330] xt_hashlimit: size too large, truncated to 1048576 [ 386.694064][T18309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.772481][T18323] sctp: [Deprecated]: syz.3.3304 (pid 18323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.772481][T18323] Use struct sctp_sack_info instead [ 387.045000][T18309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.154403][T18339] tipc: Can't bind to reserved service type 1 [ 387.166857][T18334] syzkaller0: entered promiscuous mode [ 387.179243][T18334] syzkaller0: entered allmulticast mode [ 387.315202][T18309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.354036][T18334] tipc: Started in network mode [ 387.359941][T18334] tipc: Node identity 6a4ebfcc64f9, cluster identity 4711 [ 387.369854][T18334] tipc: Enabled bearer , priority 0 [ 387.399622][T18333] tipc: Resetting bearer [ 387.450362][T18333] tipc: Disabling bearer [ 387.527207][T18346] netlink: 'syz.3.3311': attribute type 11 has an invalid length. [ 387.676621][ T36] pim6reg527: left allmulticast mode [ 387.683445][ T36] dvmrp0: left allmulticast mode [ 387.706041][T18355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3314'. [ 388.032114][ T36] bond5 (unregistering): (slave geneve3): Releasing active interface [ 388.091013][ T36] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 388.103908][ T36] bond3 (unregistering): (slave bridge2): the permanent HWaddr of slave - 6a:b0:0d:dd:f7:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 388.122673][ T36] bond3 (unregistering): (slave bridge3): making interface the new active one [ 388.134966][ T36] bond3 (unregistering): (slave bridge3): Error 16 setting MAC of new active slave [ 388.154455][ T36] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 388.192095][ T36] bond0 (unregistering): Released all slaves [ 388.209623][ T36] bond1 (unregistering): Released all slaves [ 388.228905][ T36] bond2 (unregistering): Released all slaves [ 388.264331][ T36] bond3 (unregistering): Released all slaves [ 388.282402][ T36] bond4 (unregistering): Released all slaves [ 388.311779][ T36] bond5 (unregistering): Released all slaves [ 388.330099][ T36] bond6 (unregistering): Released all slaves [ 388.346847][ T36] bond7 (unregistering): Released all slaves [ 388.381315][ T36] bond8 (unregistering): Released all slaves [ 388.412510][T18351] macvlan0: entered promiscuous mode [ 388.429899][T18356] vlan0: entered promiscuous mode [ 388.468992][ T5627] Bluetooth: hci3: command tx timeout [ 388.497202][T18356] team0: Port device vlan0 added [ 388.749957][T18360] bridge0: port 2(bridge_slave_1) entered listening state [ 388.761781][T18360] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.786078][ T36] tipc: Disabling bearer [ 388.805488][ T36] tipc: Left network mode [ 388.854367][T18367] bond10: entered promiscuous mode [ 388.861006][T18367] bond10: entered allmulticast mode [ 388.867002][T18367] 8021q: adding VLAN 0 to HW filter on device bond10 [ 388.869040][ C0] net_ratelimit: 13 callbacks suppressed [ 388.869057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.009335][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.043891][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.189041][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.197981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.206347][ T136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.307994][ T154] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.317365][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.320634][T18388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3319'. [ 389.340374][T18388] netlink: 'syz.2.3319': attribute type 7 has an invalid length. [ 389.349078][T18388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3319'. [ 389.566389][T18393] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 389.585588][T18393] bond11 (unregistering): Released all slaves [ 389.812691][T18408] netlink: 'syz.3.3323': attribute type 8 has an invalid length. [ 389.834273][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 389.910577][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.041904][T18417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3326'. [ 390.171271][T18309] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.217612][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.229266][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.237672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.344552][T18419] bond1: Removing last arp target with arp_interval on [ 390.547633][ T5627] Bluetooth: hci3: command tx timeout [ 390.585295][T18446] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 390.620813][T18446] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 390.638811][T18309] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.649952][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3334'. [ 390.799803][T18459] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 390.823473][T18459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3335'. [ 391.005132][T18471] x_tables: duplicate entry at hook 4 [ 391.135897][T18243] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.152092][T18243] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.161301][T18243] bridge_slave_0: entered allmulticast mode [ 391.181528][T18243] bridge_slave_0: entered promiscuous mode [ 391.247649][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 391.265364][T18243] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.283985][T18243] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.299499][T18243] bridge_slave_1: entered allmulticast mode [ 391.321640][T18243] bridge_slave_1: entered promiscuous mode [ 391.470971][T18478] netlink: 'syz.2.3338': attribute type 34 has an invalid length. [ 391.481397][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 391.592331][T18243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.614876][T18243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.704741][T18243] team0: Port device team_slave_0 added [ 391.715720][T18243] team0: Port device team_slave_1 added [ 391.858980][T18243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.882832][T18243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.926876][T18493] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3343'. [ 391.949113][T18243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.033641][T18243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.052082][T18243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.082319][T18243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.229228][T18503] x_tables: duplicate underflow at hook 3 [ 392.241215][T18503] x_tables: duplicate underflow at hook 1 [ 392.286308][T18505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 392.434877][T18243] hsr_slave_0: entered promiscuous mode [ 392.504998][T18243] hsr_slave_1: entered promiscuous mode [ 392.533314][T18243] debugfs: 'hsr0' already exists in 'hsr' [ 392.559754][T18243] Cannot create hsr debugfs directory [ 392.627744][ T5627] Bluetooth: hci3: command tx timeout [ 392.635512][T18510] erspan0: entered promiscuous mode [ 392.651103][T18510] vlan2: entered promiscuous mode [ 392.706274][T18523] lo: left allmulticast mode [ 392.943736][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 393.153203][T18541] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3355'. [ 393.197485][T18540] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3355'. [ 393.210072][ T36] hsr_slave_0: left promiscuous mode [ 393.319514][T18556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3356'. [ 393.362157][T18556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3356'. [ 393.820294][ T13] smc: removing ib device syz2 [ 393.945872][T18546] lo: entered promiscuous mode [ 393.958560][T18546] netlink: 'syz.2.3357': attribute type 2 has an invalid length. [ 393.976366][T18546] net_ratelimit: 18 callbacks suppressed [ 393.976380][T18546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.046236][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.088465][T18553] bridge_slave_0 (unregistering): left allmulticast mode [ 394.109101][T18553] bridge_slave_0 (unregistering): left promiscuous mode [ 394.116552][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.176796][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 394.188627][T13764] syz2: Port: 1 Link DOWN [ 394.521077][ T1161] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.780192][ T13] smbdirect: ib_dev[syz2] removed [ 395.091442][ T154] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.127386][ T154] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.186679][ T154] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.610047][T18620] tc_dump_action: action bad kind [ 395.814897][T13819] IPVS: starting estimator thread 0... [ 395.940712][T18636] IPVS: using max 27 ests per chain, 64800 per kthread [ 396.364643][T18659] __nla_validate_parse: 3 callbacks suppressed [ 396.364662][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3379'. [ 396.593589][T18659] bond2: entered promiscuous mode [ 396.691939][T18662] macvlan2: entered promiscuous mode [ 396.697892][T18662] macvlan2: entered allmulticast mode [ 396.704782][T18662] bond2: (slave macvlan2): Opening slave failed [ 397.192448][T18685] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 397.232885][T18685] netlink: 'syz.2.3386': attribute type 3 has an invalid length. [ 397.278289][T18685] netlink: 'syz.2.3386': attribute type 7 has an invalid length. [ 397.332356][T18685] netlink: 'syz.2.3386': attribute type 8 has an invalid length. [ 397.401696][T18685] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3386'. [ 397.429621][T18685] NCSI netlink: No device for ifindex 131092 [ 397.684294][T18243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.734631][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.767649][T18243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.832226][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.869440][T18243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.920591][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.964076][T18243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.004004][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.323585][T18243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.419948][T18243] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.427992][T18738] xt_ecn: cannot match TCP bits for non-tcp packets [ 398.469551][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.476803][ T8907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.489560][ T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.537057][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.544297][ T8907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.870317][T18746] ipvlan1: entered promiscuous mode [ 398.884004][T18746] ipvlan1: entered allmulticast mode [ 398.906321][T18746] veth0_vlan: entered allmulticast mode [ 399.588152][T18769] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3402'. [ 399.664274][T18783] xt_hashlimit: size too large, truncated to 1048576 [ 399.796371][T18772] wireguard: wg2: Could not create IPv4 socket [ 400.233348][ T36] IPVS: stop unused estimator thread 0... [ 400.345271][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 400.688637][T18243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.851440][T18818] netlink: 'syz.3.3413': attribute type 2 has an invalid length. [ 400.940369][T18818] : entered promiscuous mode [ 400.980747][T18243] veth0_vlan: entered promiscuous mode [ 401.041657][T18826] xt_l2tp: v2 doesn't support IP mode [ 401.048454][T18243] veth1_vlan: entered promiscuous mode [ 401.081794][T18830] openvswitch: netlink: Multiple metadata blocks provided [ 401.105555][T18830] openvswitch: netlink: Multiple metadata blocks provided [ 401.194518][T18243] veth0_macvtap: entered promiscuous mode [ 401.237514][T18243] veth1_macvtap: entered promiscuous mode [ 401.304023][T18243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.318238][T18840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.364035][T18243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.415753][T18843] openvswitch: netlink: EtherType 2 is less than min 600 [ 401.433161][ T8907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.498762][ T8909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.516372][ T8909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.597413][ T8909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.783675][ T8909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.819404][ T8909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.905656][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.938910][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.980281][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3427'. [ 402.009420][T18867] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3427'. [ 402.195042][T18872] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 402.208217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.239403][T18872] xt_hashlimit: size too large, truncated to 1048576 [ 402.327281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.463282][T18882] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 402.552250][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.640372][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.708310][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.743202][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.773110][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.784142][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.800992][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.814312][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.089200][T18900] netlink: 'syz.1.3434': attribute type 1 has an invalid length. [ 403.299962][T18900] bond3: entered promiscuous mode [ 403.328084][T18900] bond3: entered allmulticast mode [ 403.346554][T18900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.873481][T18941] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3440'. [ 403.893396][ T8907] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.961429][ T8907] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51567 - 0 [ 404.015717][ T8907] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 404.222256][T18953] syzkaller0: entered promiscuous mode [ 404.284162][T18953] syzkaller0: entered allmulticast mode [ 404.382966][ T8907] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.402368][ T8907] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51567 - 0 [ 404.414049][ T8907] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 404.604797][ T8907] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.643936][ T8907] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51567 - 0 [ 404.682251][ T8907] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 404.867778][ T5627] Bluetooth: hci2: command tx timeout [ 404.877303][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3450'. [ 404.964624][ T8907] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.017919][ T8907] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51567 - 0 [ 405.055466][ T8907] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 405.186419][T19000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3452'. [ 405.352342][T18999] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 405.450547][T18999] bond2 (unregistering): Released all slaves [ 406.076015][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 406.385137][T19053] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3466'. [ 406.416553][T19053] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3466'. [ 406.717530][ C0] net_ratelimit: 11 callbacks suppressed [ 406.719264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.868432][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.959796][ T5627] Bluetooth: hci2: command tx timeout [ 407.177188][ T8907] bond1 (unregistering): (slave geneve2): Releasing active interface [ 407.306926][ T8907] bond0 (unregistering): Released all slaves [ 407.334687][ T8907] bond1 (unregistering): Released all slaves [ 407.352465][ T8907] bond2 (unregistering): Released all slaves [ 407.372768][ T8907] bond3 (unregistering): Released all slaves [ 407.390250][ T8907] bond4 (unregistering): Released all slaves [ 407.411790][ T8907] bond5 (unregistering): Released all slaves [ 407.430556][ T8907] bond6 (unregistering): Released all slaves [ 407.439576][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.452205][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.466784][ T8907] bond7 (unregistering): Released all slaves [ 407.476506][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.493032][ T8907] bond8 (unregistering): Released all slaves [ 407.512175][ T8907] bond9 (unregistering): Released all slaves [ 407.529328][ T8907] bond10 (unregistering): Released all slaves [ 407.548418][ T8907] bond11 (unregistering): Released all slaves [ 407.620411][T19056] syzkaller0: entered promiscuous mode [ 407.638832][T19056] syzkaller0: entered allmulticast mode [ 407.686678][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 407.883634][ T8907] tipc: Left network mode [ 407.889714][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3469'. [ 407.908294][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.143236][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3472'. [ 408.176330][T19092] netlink: 'syz.1.3472': attribute type 5 has an invalid length. [ 408.210780][T19092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3472'. [ 408.324151][T19092] geneve2: entered promiscuous mode [ 408.330336][T19092] geneve2: entered allmulticast mode [ 408.463990][T19109] netlink: 'syz.0.3475': attribute type 16 has an invalid length. [ 408.520074][T19109] netlink: 'syz.0.3475': attribute type 17 has an invalid length. [ 408.550652][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.947491][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.028157][ T5627] Bluetooth: hci2: command tx timeout [ 409.153474][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3480'. [ 409.213436][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.250113][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.284730][T18887] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.305654][T18887] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.339665][T18887] bridge_slave_0: entered allmulticast mode [ 409.366791][T18887] bridge_slave_0: entered promiscuous mode [ 409.398783][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 409.444296][T19145] tipc: Enabling of bearer rejected, failed to enable media [ 409.460040][T18887] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.477241][T18887] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.489348][T18887] bridge_slave_1: entered allmulticast mode [ 409.506062][T18887] bridge_slave_1: entered promiscuous mode [ 409.569300][T19153] lo: entered promiscuous mode [ 409.593007][T19153] tunl0: entered promiscuous mode [ 409.608378][T19153] gre0: entered promiscuous mode [ 409.622648][T19153] gretap0: entered promiscuous mode [ 409.660264][T19153] ip_vti0: entered promiscuous mode [ 409.681385][T19153] ip6_vti0: entered promiscuous mode [ 409.694277][T19153] sit0: entered promiscuous mode [ 409.711786][T19153] ip6tnl0: entered promiscuous mode [ 409.721607][T19153] ip6gre0: entered promiscuous mode [ 409.733109][T19153] syz_tun: entered promiscuous mode [ 409.744689][T19153] ip6gretap0: entered promiscuous mode [ 409.759614][T19153] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.767439][T19153] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.778630][T19153] bridge0: entered promiscuous mode [ 409.790130][T19153] vcan0: entered promiscuous mode [ 409.860207][T19153] bond0: entered promiscuous mode [ 409.870667][T19153] bond_slave_0: entered promiscuous mode [ 409.876894][T19153] bond_slave_1: entered promiscuous mode [ 409.889159][T19153] team0: entered promiscuous mode [ 409.906709][T19153] team_slave_0: entered promiscuous mode [ 409.918584][T19153] team_slave_1: entered promiscuous mode [ 409.932185][T19153] dummy0: entered promiscuous mode [ 409.946029][T19153] nlmon0: entered promiscuous mode [ 409.962696][T19153] batadv0: entered promiscuous mode [ 409.974180][T19153] vxcan0: entered promiscuous mode [ 410.050821][T19153] vxcan1: entered promiscuous mode [ 410.062914][T19153] veth0: entered promiscuous mode [ 410.087529][T19153] veth1: entered promiscuous mode [ 410.107913][T19153] wg0: entered promiscuous mode [ 410.127797][T19153] wg1: entered promiscuous mode [ 410.144752][T19153] wg2: entered promiscuous mode [ 410.163535][T19153] veth0_to_bridge: entered promiscuous mode [ 410.217995][T19153] veth1_to_bridge: entered promiscuous mode [ 410.267956][T19153] veth0_to_bond: entered promiscuous mode [ 410.302061][T19153] veth1_to_bond: entered promiscuous mode [ 410.335290][T19153] veth0_to_team: entered promiscuous mode [ 410.373306][T19153] veth1_to_team: entered promiscuous mode [ 410.414000][T19153] veth0_to_batadv: entered promiscuous mode [ 410.436732][T19153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.447226][T19153] batadv_slave_0: entered promiscuous mode [ 410.458868][T19153] veth1_to_batadv: entered promiscuous mode [ 410.487798][T19153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.497525][T19153] batadv_slave_1: entered promiscuous mode [ 410.510823][T19153] xfrm0: entered promiscuous mode [ 410.522290][T19153] veth0_to_hsr: entered promiscuous mode [ 410.546323][T19153] veth1_to_hsr: entered promiscuous mode [ 410.565240][T19153] hsr0: entered promiscuous mode [ 410.580700][T19153] veth1_virt_wifi: entered promiscuous mode [ 410.596036][T19153] veth0_virt_wifi: entered promiscuous mode [ 410.608640][T19153] virt_wifi0: entered promiscuous mode [ 410.621784][T19153] vlan0: entered promiscuous mode [ 410.633868][T19153] vlan1: entered promiscuous mode [ 410.646577][T19153] macvlan0: entered promiscuous mode [ 410.655753][T19153] macvlan1: entered promiscuous mode [ 410.665145][T19153] ipvlan0: entered promiscuous mode [ 410.673168][T19153] ipvlan1: left allmulticast mode [ 410.680102][T19153] veth0_vlan: left allmulticast mode [ 410.699465][T19153] macvtap0: entered promiscuous mode [ 410.709797][T19153] macsec0: entered promiscuous mode [ 410.719735][T19153] geneve0: entered promiscuous mode [ 410.729834][T19153] geneve1: entered promiscuous mode [ 410.749178][T19153] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 410.775380][T19153] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 410.794498][T19153] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 410.819142][T19153] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 410.841685][T19153] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 410.871440][T19153] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 410.882318][T19153] bond1: entered promiscuous mode [ 410.890907][T19153] bridge1: entered promiscuous mode [ 410.896600][T19153] ip6erspan0: entered promiscuous mode [ 411.040739][T19158] macvtap1: entered promiscuous mode [ 411.046224][T19158] dummy0: entered promiscuous mode [ 411.098210][T13822] dummy0: left promiscuous mode [ 411.104701][ T1161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.128091][ T5627] Bluetooth: hci2: command tx timeout [ 411.174672][T18887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.281584][T19177] netlink: 'syz.1.3491': attribute type 1 has an invalid length. [ 411.291369][T19177] netlink: 'syz.1.3491': attribute type 4 has an invalid length. [ 411.303045][T19177] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3491'. [ 411.314028][T19177] netlink: 'syz.1.3491': attribute type 1 has an invalid length. [ 411.337930][T19177] netlink: 'syz.1.3491': attribute type 4 has an invalid length. [ 411.356443][T19177] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3491'. [ 411.376246][T18887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.437985][ T8909] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.626526][T19188] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3494'. [ 411.650493][T19188] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3494'. [ 411.708302][T18887] team0: Port device team_slave_0 added [ 411.727522][ T154] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.749115][T19193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3494'. [ 411.762330][T13758] net_ratelimit: 14 callbacks suppressed [ 411.762347][T13758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.775318][T19193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3494'. [ 411.818830][ T154] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.910258][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.964225][T18887] team0: Port device team_slave_1 added [ 412.148880][T19165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.234781][T19219] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.334768][T18887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.354648][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.418094][T18887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.501108][ T8907] hsr_slave_0: left promiscuous mode [ 412.529135][ T8907] hsr_slave_1: left promiscuous mode [ 412.553833][ T8907] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 412.570505][ T8907] batman_adv: batadv0: Removing interface: ipvlan3 [ 412.639939][ T8907] veth1_vlan: left promiscuous mode [ 412.923364][T19248] __nla_validate_parse: 7 callbacks suppressed [ 412.923383][T19248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3507'. [ 413.001150][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3507'. [ 413.038662][T13758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.166653][ T8907] team0 (unregistering): Port device vlan0 removed [ 413.194181][T19162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.208341][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.219492][T19250] xt_hashlimit: size too large, truncated to 1048576 [ 413.233780][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.246631][T13765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.759221][T13765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.786839][T19250] xt_hashlimit: size too large, truncated to 1048576 [ 413.840906][T18887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.850195][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.877415][T18887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.896915][T19238] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 413.909475][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 413.919213][T19238] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 413.961490][T19238] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 414.173082][T18887] hsr_slave_0: entered promiscuous mode [ 414.182783][T18887] hsr_slave_1: entered promiscuous mode [ 414.200051][T18887] debugfs: 'hsr0' already exists in 'hsr' [ 414.216142][T18887] Cannot create hsr debugfs directory [ 414.235931][T19165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.752920][T19281] netlink: 'syz.3.3513': attribute type 1 has an invalid length. [ 414.771700][T19287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3512'. [ 414.793635][T19287] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3512'. [ 414.860270][T19281] bond2: entered promiscuous mode [ 414.865995][T19281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.920733][T19281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3513'. [ 414.974447][T19281] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3513'. [ 415.020842][T19292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.044992][T19292] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 415.055895][T19299] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3515'. [ 415.068508][T19292] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 415.102419][T19292] bond2: (slave ip6gre1): making interface the new active one [ 415.122296][T19292] ip6gre1: entered promiscuous mode [ 415.139094][T19292] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 415.254703][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 415.705296][T19315] bridge_slave_0: left allmulticast mode [ 415.736166][T19315] bridge_slave_0: left promiscuous mode [ 415.765276][T19315] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.809163][T19315] bridge_slave_1: left allmulticast mode [ 415.822466][T19315] bridge_slave_1: left promiscuous mode [ 415.836653][T19315] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.861878][T19331] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3525'. [ 415.900067][T19315] bond0: (slave bond_slave_0): Releasing backup interface [ 415.927001][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3520'. [ 415.994161][T19315] bond0: (slave bond_slave_1): Releasing backup interface [ 416.043469][T19342] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 416.052647][T19315] team0: Port device team_slave_0 removed [ 416.062218][T19342] netlink: 'syz.3.3526': attribute type 2 has an invalid length. [ 416.114231][T19315] team0: Port device team_slave_1 removed [ 416.149705][T19315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.164000][T19315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.184644][T19315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.194398][T19315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.228162][T19321] team0: Mode changed to "loadbalance" [ 416.398828][T19352] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3527'. [ 416.754675][T19369] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 416.989318][T19380] net_ratelimit: 17 callbacks suppressed [ 416.989341][T19380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.005489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.025145][T19381] netlink: 'syz.1.3537': attribute type 4 has an invalid length. [ 417.349339][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.752592][T18887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.787530][T18887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.820449][T18887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.880394][T18887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.921176][T18887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.984622][T18887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.032139][T18887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.061350][T18887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.070399][T19427] __nla_validate_parse: 6 callbacks suppressed [ 418.070418][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 418.206253][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 418.378149][T18887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.389829][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.470566][T18887] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.515674][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.522986][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.545451][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 418.575670][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.582962][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.950094][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.960792][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.970279][T13765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.331936][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 419.428144][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.597694][T13758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.606171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.711376][T19503] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 419.746514][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3565'. [ 419.851876][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3565'. [ 419.926477][T19506] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 420.005782][T19506] bond5: (slave lo): Enslaving as an active interface with an up link [ 420.210061][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3565'. [ 420.410949][T19529] ip6t_rpfilter: unknown options [ 420.431652][T19529] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3570'. [ 420.578686][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'. [ 420.674426][T18887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.740844][T19542] macsec1: entered promiscuous mode [ 420.753005][T19550] Cannot find del_set index 4 as target [ 420.761267][T19542] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 420.874155][T19551] netlink: 'syz.4.3577': attribute type 10 has an invalid length. [ 421.024932][T19561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3580'. [ 421.079960][T18887] veth0_vlan: entered promiscuous mode [ 421.095210][T18887] veth1_vlan: entered promiscuous mode [ 421.152468][T18887] veth0_macvtap: entered promiscuous mode [ 421.196369][T18887] veth1_macvtap: entered promiscuous mode [ 421.283532][T18887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.389031][T18887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.643194][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.729698][ T8907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.819401][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.859700][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.005160][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.043356][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.162460][T13762] net_ratelimit: 5 callbacks suppressed [ 422.162480][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.273594][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.298098][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.554366][T19165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.629161][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.637793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.996817][T19644] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 423.063055][T19644] bond2 (unregistering): Released all slaves [ 423.211669][T19657] syzkaller1: entered promiscuous mode [ 423.232260][T19657] syzkaller1: entered allmulticast mode [ 423.350655][T19644] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 423.394681][T19644] bond2 (unregistering): Released all slaves [ 423.593987][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.625856][T19644] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 423.681733][T19644] bond2 (unregistering): Released all slaves [ 423.868280][T19681] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3605'. [ 424.063292][T19687] bridge_slave_0: left allmulticast mode [ 424.084081][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.102863][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.111910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.156237][T19687] bridge_slave_1: left allmulticast mode [ 424.174842][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.214497][T19701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3611'. [ 424.230205][T19687] bond0: (slave bond_slave_0): Releasing backup interface [ 424.243034][T19687] bond0: (slave bond_slave_1): Releasing backup interface [ 424.255610][T19687] team0: Port device team_slave_0 removed [ 424.264262][T19687] team0: Port device team_slave_1 removed [ 424.271896][T19687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.298602][T19687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.318732][T19687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.341529][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 424.366705][T19699] team0: Mode changed to "loadbalance" [ 424.374316][T19703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3610'. [ 424.630370][T19165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.678743][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3616'. [ 424.723559][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.050878][T19743] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3619'. [ 425.065234][T19745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3620'. [ 425.322118][T19753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3623'. [ 425.364515][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3624'. [ 425.551042][T19763] bridge_slave_0: left allmulticast mode [ 425.557124][T19763] bridge_slave_0: left promiscuous mode [ 425.563074][T19763] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.585898][T19765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3627'. [ 425.604949][T19763] bridge_slave_1: left allmulticast mode [ 425.615184][T19763] bridge_slave_1: left promiscuous mode [ 425.623449][T19763] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.640124][T19763] bond0: (slave bond_slave_0): Releasing backup interface [ 425.663465][T19763] bond0: (slave bond_slave_1): Releasing backup interface [ 425.700908][T19763] team0: Port device team_slave_0 removed [ 425.713796][T19763] team0: Port device team_slave_1 removed [ 425.725882][T19763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.734528][T19763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.746677][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.755642][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.766848][T19763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.774660][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.783061][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.792006][T19763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.799892][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.817812][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.831232][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.849319][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.861710][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.874797][T19765] erspan0: entered allmulticast mode [ 425.887272][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.895257][T19769] tunl0: entered promiscuous mode [ 425.896826][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.908583][T19769] netlink: 'syz.1.3630': attribute type 3 has an invalid length. [ 425.918942][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.926046][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.938826][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.945118][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.952752][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.959625][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.965940][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.973145][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 425.982448][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 425.991508][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.002772][T19770] team0: Mode changed to "loadbalance" [ 426.006269][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.041207][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.061370][T19778] bridge1: entered allmulticast mode [ 426.077763][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.105419][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.131053][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.139472][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.152114][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.170945][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.190919][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.206064][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.217093][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.237067][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.243674][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.260461][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.286163][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.319934][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.343593][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.367403][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.373705][T19790] netlink: 'syz.0.3634': attribute type 10 has an invalid length. [ 426.389490][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.405732][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.419304][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.426859][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.460573][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.488171][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.501632][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.531803][T19779] Bluetooth: hci0: unsupported parameter 5134 [ 426.550755][T19779] Bluetooth: hci0: unsupported parameter 8192 [ 426.774975][T19808] syzkaller0: entered promiscuous mode [ 426.789578][T19808] syzkaller0: entered allmulticast mode [ 427.459491][T19855] net_ratelimit: 14 callbacks suppressed [ 427.459512][T19855] openvswitch: netlink: Missing valid actions attribute. [ 427.750228][T19161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.763412][T19877] tipc: Started in network mode [ 427.783434][T19877] tipc: Node identity 2003, cluster identity 4711 [ 427.823224][T19877] tipc: Node number set to 8195 [ 428.041343][T19886] debugfs: 'hsr1' already exists in 'hsr' [ 428.048031][T19886] Cannot create hsr debugfs directory [ 428.053906][T19886] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 428.069785][T19886] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 428.087322][T19886] hsr1: entered promiscuous mode [ 428.107781][T19889] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 428.129135][T19889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.572717][T19916] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 428.601724][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.637119][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.648965][T19916] bond2 (unregistering): Released all slaves [ 428.671873][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.699161][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.709208][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.722641][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.951835][T19925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.012445][T19925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.026241][T19925] 8021q: adding VLAN 0 to HW filter on device bond4 [ 429.045868][T19925] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.064512][T19950] xt_bpf: check failed: parse error [ 429.109259][T19951] __nla_validate_parse: 12 callbacks suppressed [ 429.109279][T19951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3678'. [ 429.199041][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'. [ 429.232931][T19947] syzkaller0: entered promiscuous mode [ 429.240525][T19947] syzkaller0: entered allmulticast mode [ 429.382787][T19960] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 430.472301][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 430.492745][T20024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3695'. [ 432.882065][T19982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.949089][T19165] net_ratelimit: 266 callbacks suppressed [ 432.949120][T19165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.176115][T20051] xt_l2tp: missing protocol rule (udp|l2tpip) [ 433.316961][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 433.375970][ T30] audit: type=1804 audit(1787006306.781:9): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3707" name="/newroot/22/cgroup.controllers" dev="tmpfs" ino=129 res=1 errno=0 [ 433.402063][ T30] audit: type=1800 audit(1787006306.811:10): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3707" name="cgroup.controllers" dev="tmpfs" ino=129 res=0 errno=0 [ 433.426255][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3709'. [ 433.450912][T20055] netlink: 'syz.2.3707': attribute type 83 has an invalid length. [ 433.509829][T13756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.518286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.648220][T20074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3711'. [ 433.696178][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 433.729391][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 433.921326][T20097] netlink: 'syz.1.3714': attribute type 10 has an invalid length. [ 434.005420][T20097] team0: Device veth0_macvtap failed to register rx_handler [ 434.062078][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.233084][T20119] netlink: 'syz.0.3722': attribute type 33 has an invalid length. [ 434.453215][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'. [ 434.486381][T20134] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3726'. [ 434.497487][T20134] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3726'. [ 434.532162][T20134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.536240][T20142] netlink: 'syz.4.3728': attribute type 5 has an invalid length. [ 434.549944][T20138] syz_tun: vlans aren't supported yet for dev_uc|mc_add() [ 434.556246][T20142] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3728'. [ 434.569486][T20134] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.580625][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'. [ 434.706511][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3729'. [ 434.737754][T20149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3729'. [ 434.939169][T20158] xt_hashlimit: size too large, truncated to 1048576 [ 435.073643][T20166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.082200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.109161][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.209789][T20129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.461268][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'. [ 435.471071][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'. [ 435.492081][T20179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3742'. [ 435.513734][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.640756][T20181] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 435.961320][T20202] geneve2: entered promiscuous mode [ 435.980648][T20205] vcan1: entered promiscuous mode [ 435.993637][T20205] vcan1: entered allmulticast mode [ 436.028252][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 59459 - 0 [ 436.038633][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 59459 - 0 [ 436.048522][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 59459 - 0 [ 436.058094][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 59459 - 0 [ 436.781601][T20204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.003895][T20227] netlink: 'syz.4.3754': attribute type 3 has an invalid length. [ 437.485947][T20251] IPVS: length: 189 != 8 [ 437.909149][T20272] netlink: 'syz.2.3772': attribute type 15 has an invalid length. [ 437.935117][T20271] netlink: 'syz.2.3772': attribute type 15 has an invalid length. [ 438.012754][T20276] netlink: 'syz.3.3773': attribute type 3 has an invalid length. [ 438.060823][T20280] netlink: 'syz.2.3777': attribute type 1 has an invalid length. [ 438.073411][T20280] netlink: 'syz.2.3777': attribute type 11 has an invalid length. [ 438.226602][T20279] xt_CT: No such helper "pptp" [ 438.231975][T13822] net_ratelimit: 6 callbacks suppressed [ 438.231992][T13822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.502503][T20305] validate_nla: 1 callbacks suppressed [ 438.502546][T20305] netlink: 'syz.4.3782': attribute type 4 has an invalid length. [ 438.549748][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.558251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.775903][T20320] netlink: 'syz.3.3785': attribute type 2 has an invalid length. [ 439.278397][T19161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.328509][T20338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.336394][T20344] tun0: tun_chr_ioctl cmd 1074025675 [ 439.342557][T20344] tun0: persist disabled [ 439.356248][T20346] lo: left promiscuous mode [ 439.382154][T20346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.417279][T20355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.425730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.440455][T13756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.679230][T20366] __nla_validate_parse: 10 callbacks suppressed [ 439.679250][T20366] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3795'. [ 439.896277][T20377] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.095697][T20387] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 440.351081][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3807'. [ 440.493949][T20410] netlink: 'syz.4.3810': attribute type 12 has an invalid length. [ 440.502847][T20411] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 440.618858][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 440.644669][T20416] netlink: 'syz.2.3813': attribute type 5 has an invalid length. [ 440.659785][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 440.671413][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'. [ 440.704535][T20425] netlink: 'syz.0.3814': attribute type 1 has an invalid length. [ 440.716814][T20416] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3813'. [ 440.819789][T20425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.828023][T20426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.916332][T20426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.983934][T20430] erspan0: entered promiscuous mode [ 441.027942][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 441.523540][T20465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3825'. [ 444.239281][T20457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.249176][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3827'. [ 444.506921][T20501] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3837'. [ 444.626735][T20510] team0: No ports can be present during mode change [ 444.742514][T20522] __nla_validate_parse: 1 callbacks suppressed [ 444.742534][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'. [ 444.773439][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'. [ 444.881732][T20525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3843'. [ 445.081522][T20540] openvswitch: netlink: Unknown key attributes 1 [ 445.110525][T20541] pim6reg: entered allmulticast mode [ 445.167910][T20544] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 445.199712][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 445.273519][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 445.450858][T20556] ip6erspan0: entered allmulticast mode [ 445.664143][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3853'. [ 445.684581][T20565] team0: Unable to change to the same mode the team is in [ 445.706272][T20562] netlink: 'syz.3.3853': attribute type 1 has an invalid length. [ 445.729013][T20562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3853'. [ 445.796462][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3856'. [ 445.926588][T20575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3858'. [ 446.122746][T20593] netlink: zone id is out of range [ 446.147500][T20593] netlink: set zone limit has 4 unknown bytes [ 446.238503][T20598] ip_tables: iptables: counters copy to user failed while replacing table [ 446.270830][T20598] tipc: Enabling of bearer rejected, media not registered [ 446.364172][T20610] xt_TCPMSS: Only works on TCP SYN packets [ 446.406806][T20613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'. [ 446.536333][T20618] team0: Unable to change to the same mode the team is in [ 446.648202][T20622] bridge0: port 2(bridge_slave_1) entered listening state [ 446.676174][T20628] netlink: 'syz.1.3870': attribute type 7 has an invalid length. [ 446.693842][T20622] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.031879][T20645] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 447.049411][T20645] bond2 (unregistering): Released all slaves [ 447.358407][T20668] macsec1: entered promiscuous mode [ 447.991164][T20691] team0: No ports can be present during mode change [ 448.711629][T20715] netlink: 'syz.1.3898': attribute type 2 has an invalid length. [ 448.721243][T20717] FAULT_INJECTION: forcing a failure. [ 448.721243][T20717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.735082][T20715] netlink: 'syz.1.3898': attribute type 2 has an invalid length. [ 448.751424][T20717] CPU: 1 UID: 0 PID: 20717 Comm: syz.0.3897 Not tainted syzkaller #0 PREEMPT(full) [ 448.751453][T20717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.751472][T20717] Call Trace: [ 448.751482][T20717] [ 448.751491][T20717] dump_stack_lvl+0xe8/0x150 [ 448.751528][T20717] should_fail_ex+0x40c/0x560 [ 448.751559][T20717] _copy_from_user+0x2d/0xb0 [ 448.751593][T20717] ___sys_sendmsg+0x1c6/0x360 [ 448.751617][T20717] ? __lock_acquire+0x683/0x2cf0 [ 448.751650][T20717] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.751714][T20717] ? __fget_files+0x2a/0x420 [ 448.751741][T20717] ? __fget_files+0x3a2/0x420 [ 448.751779][T20717] __x64_sys_sendmsg+0x1b1/0x290 [ 448.751807][T20717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.751852][T20717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.751876][T20717] do_syscall_64+0x174/0x580 [ 448.751900][T20717] ? trace_irq_disable+0x3b/0x140 [ 448.751926][T20717] ? clear_bhb_loop+0x70/0xc0 [ 448.751951][T20717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.751972][T20717] RIP: 0033:0x7f9b8f99e0d9 [ 448.751993][T20717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.752011][T20717] RSP: 002b:00007f9b908bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.752034][T20717] RAX: ffffffffffffffda RBX: 00007f9b8fc25fa0 RCX: 00007f9b8f99e0d9 [ 448.752049][T20717] RDX: 0000000020000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 448.752063][T20717] RBP: 00007f9b908bb090 R08: 0000000000000000 R09: 0000000000000000 [ 448.752076][T20717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.752088][T20717] R13: 00007f9b8fc26038 R14: 00007f9b8fc25fa0 R15: 00007ffe4c24d3c8 [ 448.752129][T20717] [ 449.293044][T20731] macvtap1: entered promiscuous mode [ 449.365434][T20732] team0: Unable to change to the same mode the team is in [ 449.437991][T20740] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 449.453920][T20735] vxcan0: tx address claim with dlc 0 [ 449.520374][ T1161] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 449.650207][T20746] syzkaller0: entered promiscuous mode [ 449.656040][T20746] syzkaller0: entered allmulticast mode [ 449.860817][T20761] __nla_validate_parse: 11 callbacks suppressed [ 449.860839][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'. [ 449.892531][T20761] netlink: 'syz.4.3908': attribute type 5 has an invalid length. [ 449.928046][T20761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3908'. [ 449.961166][T20763] FAULT_INJECTION: forcing a failure. [ 449.961166][T20763] name failslab, interval 1, probability 0, space 0, times 0 [ 450.002136][T20763] CPU: 0 UID: 0 PID: 20763 Comm: syz.2.3910 Not tainted syzkaller #0 PREEMPT(full) [ 450.002166][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.002178][T20763] Call Trace: [ 450.002186][T20763] [ 450.002195][T20763] dump_stack_lvl+0xe8/0x150 [ 450.002231][T20763] should_fail_ex+0x40c/0x560 [ 450.002265][T20763] should_failslab+0xa8/0x100 [ 450.002287][T20763] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 450.002305][T20763] ? local_lock_release+0x9c/0x160 [ 450.002321][T20763] ? __alloc_skb+0x1d7/0x7a0 [ 450.002333][T20763] ? __alloc_skb+0x1d7/0x7a0 [ 450.002352][T20763] __alloc_skb+0x1d7/0x7a0 [ 450.002369][T20763] netlink_sendmsg+0x5d4/0xb40 [ 450.002466][T20763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.002487][T20763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.002511][T20763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.002536][T20763] sock_sendmsg_nosec+0x13a/0x180 [ 450.002560][T20763] ____sys_sendmsg+0x54e/0x850 [ 450.002581][T20763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.002605][T20763] ? import_iovec+0x73/0xa0 [ 450.002655][T20763] ___sys_sendmsg+0x2a5/0x360 [ 450.002670][T20763] ? __lock_acquire+0x683/0x2cf0 [ 450.002693][T20763] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.002737][T20763] ? __fget_files+0x2a/0x420 [ 450.002755][T20763] ? __fget_files+0x3a2/0x420 [ 450.002781][T20763] __x64_sys_sendmsg+0x1b1/0x290 [ 450.002800][T20763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.002831][T20763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.002847][T20763] do_syscall_64+0x174/0x580 [ 450.002863][T20763] ? trace_irq_disable+0x3b/0x140 [ 450.002882][T20763] ? clear_bhb_loop+0x70/0xc0 [ 450.002900][T20763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.002914][T20763] RIP: 0033:0x7f1ec9f9e0d9 [ 450.002928][T20763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.002941][T20763] RSP: 002b:00007f1ecae0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.002957][T20763] RAX: ffffffffffffffda RBX: 00007f1eca225fa0 RCX: 00007f1ec9f9e0d9 [ 450.002968][T20763] RDX: 0000000020000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 450.002977][T20763] RBP: 00007f1ecae0b090 R08: 0000000000000000 R09: 0000000000000000 [ 450.002988][T20763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.002997][T20763] R13: 00007f1eca226038 R14: 00007f1eca225fa0 R15: 00007ffe1a7cf3c8 [ 450.003021][T20763] [ 450.102832][T20766] netlink: 'syz.1.3911': attribute type 4 has an invalid length. [ 450.276637][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3912'. [ 450.309651][T20772] netlink: 'syz.1.3911': attribute type 4 has an invalid length. [ 450.330978][T20760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3907'. [ 450.372940][T20761] geneve2: entered promiscuous mode [ 450.380869][T20761] geneve2: entered allmulticast mode [ 450.447590][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 450.456722][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 450.491435][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 450.557157][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 450.621185][T20784] netlink: 400 bytes leftover after parsing attributes in process `syz.4.3915'. [ 450.724678][T20788] team0: Unable to change to the same mode the team is in [ 450.911368][T20805] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3923'. [ 450.925210][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 450.951067][T20805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3923'. [ 451.197611][T20823] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 451.276338][T20823] netlink: 'syz.0.3925': attribute type 2 has an invalid length. [ 451.301908][T20823] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 451.332819][T20823] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 451.366515][T20823] netlink: 'syz.0.3925': attribute type 2 has an invalid length. [ 451.386209][T20823] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 451.410572][T20823] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 451.455176][T20823] netlink: 'syz.0.3925': attribute type 2 has an invalid length. [ 451.526012][T20823] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 451.559118][T20823] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 451.744893][T20846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3932'. [ 451.816247][T20854] team0: Unable to change to the same mode the team is in [ 451.850408][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'. [ 451.959001][T20857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.092937][T20862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.383572][T20880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.053200][T20897] team0: Unable to change to the same mode the team is in [ 453.396822][T20916] block nbd3: Unsupported socket: should be TCP or UNIX. [ 453.433661][T20919] block nbd3: Unsupported socket: should be TCP or UNIX. [ 453.760831][T20947] tc_dump_action: action bad kind [ 453.842329][T20935] netlink: NAT attribute has 5 unknown bytes [ 453.855111][T20935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.253750][T20969] xt_nfacct: accounting object `' does not exist [ 454.348741][T20969] xt_hashlimit: size too large, truncated to 1048576 [ 454.728339][T20995] macvlan0: entered promiscuous mode [ 454.825838][T21000] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 454.943890][T21002] syzkaller0: entered promiscuous mode [ 454.956849][T21002] syzkaller0: entered allmulticast mode [ 455.619928][T21020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.712901][T21021] __nla_validate_parse: 7 callbacks suppressed [ 455.712923][T21021] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3982'. [ 455.925734][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 456.953534][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 457.583591][T21030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.892514][T21046] nbd: socks must be embedded in a SOCK_ITEM attr [ 458.305303][T21078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3996'. [ 458.518837][T21090] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 458.840941][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 458.850886][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 458.893636][T21106] validate_nla: 90 callbacks suppressed [ 458.893654][T21106] netlink: 'syz.4.4008': attribute type 1 has an invalid length. [ 458.912323][T21106] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4008'. [ 458.922205][T21106] netlink: 'syz.4.4008': attribute type 1 has an invalid length. [ 459.143058][T21119] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.4013'. [ 459.153900][T21119] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 459.163248][T21119] openvswitch: netlink: Message has 512 unknown bytes. [ 459.164946][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4012'. [ 459.170604][T21117] netlink: 'syz.0.4011': attribute type 32 has an invalid length. [ 459.198653][T21124] macvlan0: entered promiscuous mode [ 459.210423][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4012'. [ 459.257216][T21119] netlink: Failed to add @ helper -22 [ 459.263193][T21119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.458933][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4016'. [ 459.471088][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'. [ 459.776868][T21139] syzkaller1: entered promiscuous mode [ 459.826656][T21139] syzkaller1: entered allmulticast mode [ 459.946453][T21159] netlink: 'syz.3.4022': attribute type 21 has an invalid length. [ 460.022240][T21159] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 460.065974][T21169] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.074901][T21159] bond4 (unregistering): Released all slaves [ 460.343082][T21182] xt_hashlimit: size too large, truncated to 1048576 [ 460.353163][T21184] FAULT_INJECTION: forcing a failure. [ 460.353163][T21184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.369053][T21184] CPU: 1 UID: 0 PID: 21184 Comm: syz.3.4031 Not tainted syzkaller #0 PREEMPT(full) [ 460.369081][T21184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.369094][T21184] Call Trace: [ 460.369102][T21184] [ 460.369111][T21184] dump_stack_lvl+0xe8/0x150 [ 460.369147][T21184] should_fail_ex+0x40c/0x560 [ 460.369178][T21184] _copy_from_user+0x2d/0xb0 [ 460.369210][T21184] kstrtouint_from_user+0xd6/0x180 [ 460.369240][T21184] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 460.369286][T21184] proc_fail_nth_write+0x8e/0x210 [ 460.369317][T21184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 460.369356][T21184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 460.369385][T21184] vfs_write+0x296/0xba0 [ 460.369426][T21184] ? __pfx_vfs_write+0x10/0x10 [ 460.369460][T21184] ? __fget_files+0x2a/0x420 [ 460.369491][T21184] ? __fget_files+0x3a2/0x420 [ 460.369525][T21184] ? __fget_files+0x2a/0x420 [ 460.369560][T21184] ksys_write+0x150/0x270 [ 460.369593][T21184] ? __pfx_ksys_write+0x10/0x10 [ 460.369632][T21184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.369654][T21184] do_syscall_64+0x174/0x580 [ 460.369677][T21184] ? trace_irq_disable+0x3b/0x140 [ 460.369701][T21184] ? clear_bhb_loop+0x70/0xc0 [ 460.369726][T21184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.369745][T21184] RIP: 0033:0x7fd0ec95e90e [ 460.369765][T21184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.369782][T21184] RSP: 002b:00007fd0ed8aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.369804][T21184] RAX: ffffffffffffffda RBX: 00007fd0ed8ab6c0 RCX: 00007fd0ec95e90e [ 460.369819][T21184] RDX: 0000000000000001 RSI: 00007fd0ed8ab0a0 RDI: 0000000000000008 [ 460.369831][T21184] RBP: 00007fd0ed8ab090 R08: 0000000000000000 R09: 0000000000000000 [ 460.369844][T21184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.369855][T21184] R13: 00007fd0ecc26038 R14: 00007fd0ecc25fa0 R15: 00007ffcee66d728 [ 460.369890][T21184] [ 460.858258][T21195] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 460.892084][T21202] netlink: 'syz.0.4036': attribute type 1 has an invalid length. [ 461.034861][T21202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.175530][T21223] __nla_validate_parse: 2 callbacks suppressed [ 461.175550][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'. [ 461.260116][T21229] veth9: entered allmulticast mode [ 461.342815][T21232] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 461.376272][T21235] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4046'. [ 461.453345][T21238] netlink: 'syz.0.4047': attribute type 29 has an invalid length. [ 461.488806][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.498617][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.508492][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.517815][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.609472][T21242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4049'. [ 461.801460][T21255] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4053'. [ 462.052511][T21269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'. [ 462.196021][T21279] netlink: 'syz.4.4059': attribute type 5 has an invalid length. [ 462.241427][T21282] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 462.344518][T21289] tipc: Enabling of bearer rejected, media not registered [ 462.390264][T21288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4063'. [ 462.480354][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.504716][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4066'. [ 462.617470][T21301] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 462.661010][T21301] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 462.733121][T21310] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4073'. [ 462.755852][T21301] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 462.769259][T21312] netlink: ct_mark mask cannot be 0 [ 462.779477][T21312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.781037][T21310] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4073'. [ 462.814361][T21313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'. [ 462.839645][T21301] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 462.853323][ T30] audit: type=1804 audit(1787006336.261:11): pid=21312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4072" name="/newroot/176/cgroup.controllers" dev="tmpfs" ino=915 res=1 errno=0 [ 462.912346][ T30] audit: type=1800 audit(1787006336.261:12): pid=21312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4072" name="cgroup.controllers" dev="tmpfs" ino=915 res=0 errno=0 [ 463.054748][ T5627] block nbd3: Receive control failed (result -32) [ 463.293285][T21332] netlink: 'syz.4.4080': attribute type 4 has an invalid length. [ 463.303062][T21331] wg1 speed is unknown, defaulting to 1000 [ 463.321311][T21331] wg1 speed is unknown, defaulting to 1000 [ 463.354335][T21331] wg1 speed is unknown, defaulting to 1000 [ 463.390831][T21334] netlink: 'syz.3.4081': attribute type 4 has an invalid length. [ 463.649865][T21348] bond0: entered promiscuous mode [ 463.655172][T21348] bond_slave_0: entered promiscuous mode [ 463.664268][T21348] bond_slave_1: entered promiscuous mode [ 463.679014][T21348] gretap0: entered promiscuous mode [ 463.707810][T21348] debugfs: 'hsr1' already exists in 'hsr' [ 463.724080][T21348] Cannot create hsr debugfs directory [ 463.738938][T21348] hsr1: entered promiscuous mode [ 463.823520][T21358] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 463.940012][T21361] veth0: entered promiscuous mode [ 464.061917][T21351] veth0: left promiscuous mode [ 464.178723][T21371] FAULT_INJECTION: forcing a failure. [ 464.178723][T21371] name failslab, interval 1, probability 0, space 0, times 0 [ 464.196399][T21371] CPU: 0 UID: 0 PID: 21371 Comm: syz.4.4092 Not tainted syzkaller #0 PREEMPT(full) [ 464.196427][T21371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.196439][T21371] Call Trace: [ 464.196448][T21371] [ 464.196456][T21371] dump_stack_lvl+0xe8/0x150 [ 464.196494][T21371] should_fail_ex+0x40c/0x560 [ 464.196526][T21371] should_failslab+0xa8/0x100 [ 464.196559][T21371] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 464.196585][T21371] ? skb_clone+0x212/0x3a0 [ 464.196610][T21371] ? skb_clone+0x212/0x3a0 [ 464.196642][T21371] skb_clone+0x212/0x3a0 [ 464.196670][T21371] __netlink_deliver_tap+0x413/0x860 [ 464.196709][T21371] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.196736][T21371] netlink_deliver_tap+0x19c/0x1b0 [ 464.196762][T21371] netlink_sendskb+0x68/0x140 [ 464.196786][T21371] netlink_rcv_skb+0x2a4/0x4a0 [ 464.196812][T21371] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.196844][T21371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.196887][T21371] ? down_read+0x2be/0x330 [ 464.196919][T21371] genl_rcv+0x28/0x40 [ 464.196947][T21371] netlink_unicast+0x7bb/0x940 [ 464.196985][T21371] netlink_sendmsg+0x813/0xb40 [ 464.197019][T21371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.197050][T21371] ? aa_sock_msg_perm+0xf1/0x1b0 [ 464.197078][T21371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.197101][T21371] sock_sendmsg_nosec+0x13a/0x180 [ 464.197134][T21371] ____sys_sendmsg+0x54e/0x850 [ 464.197164][T21371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.197206][T21371] ? import_iovec+0x73/0xa0 [ 464.197241][T21371] ___sys_sendmsg+0x2a5/0x360 [ 464.197264][T21371] ? __lock_acquire+0x683/0x2cf0 [ 464.197298][T21371] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.197364][T21371] ? __fget_files+0x2a/0x420 [ 464.197391][T21371] ? __fget_files+0x3a2/0x420 [ 464.197435][T21371] __x64_sys_sendmsg+0x1b1/0x290 [ 464.197462][T21371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.197508][T21371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.197532][T21371] do_syscall_64+0x174/0x580 [ 464.197555][T21371] ? trace_irq_disable+0x3b/0x140 [ 464.197581][T21371] ? clear_bhb_loop+0x70/0xc0 [ 464.197607][T21371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.197628][T21371] RIP: 0033:0x7fd863f9e0d9 [ 464.197648][T21371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.197666][T21371] RSP: 002b:00007fd864dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.197687][T21371] RAX: ffffffffffffffda RBX: 00007fd864225fa0 RCX: 00007fd863f9e0d9 [ 464.197702][T21371] RDX: 0000000020000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 464.197716][T21371] RBP: 00007fd864dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 464.197728][T21371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.197741][T21371] R13: 00007fd864226038 R14: 00007fd864225fa0 R15: 00007ffccd4806d8 [ 464.197777][T21371] [ 464.612468][T21331] infiniband syz2: set down [ 464.617264][T13756] wg1 speed is unknown, defaulting to 1000 [ 464.623931][T21331] infiniband syz2: added wg1 [ 464.633070][T21331] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 464.639681][T21331] infiniband syz2: Couldn't open port 1 [ 464.654341][T21331] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 464.670916][T21331] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 464.688736][T21331] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 464.791207][T21331] RDS/IB: syz2: added [ 464.795343][T21331] smc: adding ib device syz2 with port count 1 [ 464.801720][T21331] smc: ib device syz2 port 1 has no pnetid [ 464.808041][T13762] wg1 speed is unknown, defaulting to 1000 [ 464.866013][T21331] wg1 speed is unknown, defaulting to 1000 [ 465.662179][T21331] wg1 speed is unknown, defaulting to 1000 [ 466.221210][T21331] wg1 speed is unknown, defaulting to 1000 [ 466.533195][T21331] wg1 speed is unknown, defaulting to 1000 [ 466.808274][T21331] wg1 speed is unknown, defaulting to 1000 [ 467.081184][T21331] wg1 speed is unknown, defaulting to 1000 [ 467.354421][T21331] wg1 speed is unknown, defaulting to 1000 [ 467.655626][T21331] wg1 speed is unknown, defaulting to 1000 [ 467.921241][T21388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.390633][T21422] __nla_validate_parse: 6 callbacks suppressed [ 468.390654][T21422] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4107'. [ 468.486668][T21420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4107'. [ 469.308714][T21447] xt_l2tp: wrong L2TP version: 0 [ 469.340857][T21447] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4115'. [ 469.450367][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'. [ 469.524560][T21457] team0: No ports can be present during mode change [ 469.551894][T21460] FAULT_INJECTION: forcing a failure. [ 469.551894][T21460] name failslab, interval 1, probability 0, space 0, times 0 [ 469.600709][T21460] CPU: 0 UID: 0 PID: 21460 Comm: syz.2.4119 Not tainted syzkaller #0 PREEMPT(full) [ 469.600743][T21460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.600756][T21460] Call Trace: [ 469.600765][T21460] [ 469.600774][T21460] dump_stack_lvl+0xe8/0x150 [ 469.600812][T21460] should_fail_ex+0x40c/0x560 [ 469.600845][T21460] should_failslab+0xa8/0x100 [ 469.600880][T21460] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 469.600907][T21460] ? skb_clone+0x212/0x3a0 [ 469.600931][T21460] ? skb_clone+0x212/0x3a0 [ 469.600964][T21460] skb_clone+0x212/0x3a0 [ 469.600994][T21460] __netlink_deliver_tap+0x413/0x860 [ 469.601035][T21460] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.601063][T21460] netlink_deliver_tap+0x19c/0x1b0 [ 469.601097][T21460] netlink_sendskb+0x68/0x140 [ 469.601123][T21460] netlink_rcv_skb+0x2a4/0x4a0 [ 469.601150][T21460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.601184][T21460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.601228][T21460] ? down_read+0x2be/0x330 [ 469.601260][T21460] genl_rcv+0x28/0x40 [ 469.601289][T21460] netlink_unicast+0x7bb/0x940 [ 469.601325][T21460] netlink_sendmsg+0x813/0xb40 [ 469.601363][T21460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.601394][T21460] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.601424][T21460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.601449][T21460] sock_sendmsg_nosec+0x13a/0x180 [ 469.601483][T21460] ____sys_sendmsg+0x54e/0x850 [ 469.601516][T21460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.601552][T21460] ? import_iovec+0x73/0xa0 [ 469.601588][T21460] ___sys_sendmsg+0x2a5/0x360 [ 469.601612][T21460] ? __lock_acquire+0x683/0x2cf0 [ 469.601645][T21460] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.601713][T21460] ? __fget_files+0x2a/0x420 [ 469.601740][T21460] ? __fget_files+0x3a2/0x420 [ 469.601780][T21460] __x64_sys_sendmsg+0x1b1/0x290 [ 469.601809][T21460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.601856][T21460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.601881][T21460] do_syscall_64+0x174/0x580 [ 469.601904][T21460] ? trace_irq_disable+0x3b/0x140 [ 469.601930][T21460] ? clear_bhb_loop+0x70/0xc0 [ 469.601957][T21460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.601979][T21460] RIP: 0033:0x7f1ec9f9e0d9 [ 469.601999][T21460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.602018][T21460] RSP: 002b:00007f1ecae0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.602040][T21460] RAX: ffffffffffffffda RBX: 00007f1eca225fa0 RCX: 00007f1ec9f9e0d9 [ 469.602055][T21460] RDX: 0000000020000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 469.602069][T21460] RBP: 00007f1ecae0b090 R08: 0000000000000000 R09: 0000000000000000 [ 469.602081][T21460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.602100][T21460] R13: 00007f1eca226038 R14: 00007f1eca225fa0 R15: 00007ffe1a7cf3c8 [ 469.602137][T21460] [ 470.061571][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'. [ 470.209791][T21472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4122'. [ 470.447050][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'. [ 470.724644][T21485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.749466][T21478] syzkaller0: entered promiscuous mode [ 470.762664][T21478] syzkaller0: entered allmulticast mode [ 470.842250][T21495] xt_hashlimit: size too large, truncated to 1048576 [ 470.953849][T21499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4130'. [ 471.095784][T21496] xt_hashlimit: size too large, truncated to 1048576 [ 471.759713][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4134'. [ 471.911215][T21515] tipc: Started in network mode [ 471.932524][T21515] tipc: Node identity 9acb0b37a486, cluster identity 4711 [ 471.957668][T21515] tipc: Enabled bearer , priority 0 [ 471.974512][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'. [ 472.168656][T21514] tipc: Disabling bearer [ 472.867853][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 488.236240][ T5623] Bluetooth: hci0: command 0x040f tx timeout [ 494.467209][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 495.836663][T21597] __nla_validate_parse: 2 callbacks suppressed [ 495.836684][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 495.844246][T21595] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4155'. [ 495.844288][T21595] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4155'. [ 495.844305][T21595] netlink: 'syz.3.4155': attribute type 6 has an invalid length. [ 495.844320][T21595] netlink: 'syz.3.4155': attribute type 5 has an invalid length. [ 495.844334][T21595] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4155'. [ 495.921807][T21594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4152'. [ 496.140688][T21610] netlink: 'syz.2.4159': attribute type 3 has an invalid length. [ 496.202870][T21610] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4159'. [ 496.498168][T21623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4161'. [ 496.555059][T21613] bond3: Unable to set down delay as MII monitoring is disabled [ 496.597546][T21613] bond3 (unregistering): Released all slaves [ 498.137560][T21673] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 498.164003][T21674] tunl0: left promiscuous mode [ 498.184316][T21674] tunl0: entered allmulticast mode [ 498.201547][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4177'. [ 498.232412][T21674] netlink: 'syz.3.4175': attribute type 17 has an invalid length. [ 498.287227][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 498.317156][T21674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4175'. [ 498.471218][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 498.612956][T21649] netlink: 'syz.2.4172': attribute type 2 has an invalid length. [ 498.862412][T21697] Bluetooth: MGMT ver 1.23 [ 498.898935][T21701] xt_hashlimit: size too large, truncated to 1048576 [ 500.734296][T21762] netlink: 'syz.2.4200': attribute type 8 has an invalid length. [ 501.508200][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.094710][T21711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.713624][T21789] __nla_validate_parse: 1 callbacks suppressed [ 502.713644][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 503.062520][T21806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4211'. [ 503.135519][T21804] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 503.160157][T21804] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 503.618415][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4217'. [ 503.683124][T21831] netlink: 'syz.2.4217': attribute type 20 has an invalid length. [ 503.713740][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4217'. [ 503.792054][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4217'. [ 503.810553][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.829933][T21831] netlink: 'syz.2.4217': attribute type 20 has an invalid length. [ 503.856276][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.868458][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4217'. [ 503.892010][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.921285][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.095600][T21842] netlink: 'syz.3.4223': attribute type 11 has an invalid length. [ 504.475520][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4228'. [ 504.504635][T21862] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4229'. [ 504.551036][T21845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.583177][T21845] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.640681][T21845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.040988][T21845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.052408][T21845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.100197][T21845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.112548][T21845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.122161][T21845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.132330][T21845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.144807][T21845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.409431][T19166] wg1 speed is unknown, defaulting to 1000 [ 505.447077][T19166] syz2: Port: 1 Link ACTIVE [ 505.764058][T21883] vcan1: entered promiscuous mode [ 505.772573][T21883] vcan1: entered allmulticast mode [ 505.825107][T19161] wg1 speed is unknown, defaulting to 1000 [ 505.947346][ T8907] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 506.133514][T21909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4237'. [ 506.340848][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 506.379311][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 506.426618][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 506.745473][T21928] netlink: zone id is out of range [ 506.768718][T21928] netlink: zone id is out of range [ 506.785729][T21928] netlink: zone id is out of range [ 506.829398][T21931] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4245'. [ 507.084253][T21937] bond3 (unregistering): Released all slaves [ 507.154261][T21947] netlink: 'syz.2.4250': attribute type 13 has an invalid length. [ 507.191109][T21947] netlink: 'syz.2.4250': attribute type 58 has an invalid length. [ 507.300860][T21953] netlink: 'syz.0.4251': attribute type 1 has an invalid length. [ 507.894405][T21972] wg1 speed is unknown, defaulting to 1000 [ 507.975024][T21982] __nla_validate_parse: 7 callbacks suppressed [ 507.975044][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4259'. [ 508.017417][T21982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4259'. [ 508.119261][T21982] macsec2: entered promiscuous mode [ 508.127698][T21982] bridge0: entered promiscuous mode [ 508.148852][T21982] macsec2: entered allmulticast mode [ 508.168588][T21982] bridge0: entered allmulticast mode [ 508.176224][T21990] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 508.280211][T21987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.499370][T21995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.710553][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 509.081063][T21992] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4260'. [ 509.127239][T21992] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4260'. [ 509.895894][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.000840][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.081324][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.168879][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.174492][T22034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4275'. [ 510.329031][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.352776][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.400268][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.493799][T22048] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4278'. [ 510.507542][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.558992][T22048] unsupported nlmsg_type 40 [ 510.568956][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4279'. [ 510.586100][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 510.609748][T22051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4279'. [ 510.669030][T22027] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 511.524408][T22082] xt_hashlimit: size too large, truncated to 1048576 [ 511.964019][T22097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4289'. [ 512.476583][T22116] bond4: entered promiscuous mode [ 512.483179][T22116] bond4: entered allmulticast mode [ 512.489433][T22116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.601581][T22123] erspan2: entered allmulticast mode [ 512.652372][T22123] bond4: (slave erspan2): making interface the new active one [ 512.677882][T22123] erspan2: entered promiscuous mode [ 512.723513][T22123] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 512.793652][T22127] syzkaller0: entered promiscuous mode [ 512.825236][T22127] syzkaller0: entered allmulticast mode [ 513.046895][T22152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4301'. [ 513.078156][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4301'. [ 513.441165][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'. [ 513.474642][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'. [ 513.607529][T22177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4309'. [ 513.932485][T22201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4315'. [ 513.986473][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4315'. [ 514.024252][T22187] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.305106][T22205] 8021q: adding VLAN 0 to HW filter on device bond6 [ 514.352388][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4318'. [ 514.611979][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.619324][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.883992][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4320'. [ 514.982170][T22223] validate_nla: 8 callbacks suppressed [ 514.982191][T22223] netlink: 'syz.3.4322': attribute type 1 has an invalid length. [ 515.163777][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 515.415695][T22238] netlink: 'syz.1.4326': attribute type 1 has an invalid length. [ 515.746024][T22251] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 515.822653][T22251] xt_hashlimit: size too large, truncated to 1048576 [ 516.604709][T22278] netlink: 'syz.4.4335': attribute type 1 has an invalid length. [ 516.860839][T22283] openvswitch: netlink: Flow key attr not present in new flow. [ 516.922226][T22288] openvswitch: netlink: Flow key attr not present in new flow. [ 517.253977][T22280] ip6gre0: entered promiscuous mode [ 518.896113][T22349] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 518.905190][T22349] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 518.961088][T22351] __nla_validate_parse: 6 callbacks suppressed [ 518.961109][T22351] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4353'. [ 519.020085][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4353'. [ 519.259770][T22351] team0: Port device team_slave_0 removed [ 519.449694][T22363] GUP no longer grows the stack in syz.0.4357 (22363): 200000003000-20000000a000 (200000001000) [ 519.490373][T22363] CPU: 0 UID: 0 PID: 22363 Comm: syz.0.4357 Not tainted syzkaller #0 PREEMPT(full) [ 519.490403][T22363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.490416][T22363] Call Trace: [ 519.490425][T22363] [ 519.490434][T22363] dump_stack_lvl+0xe8/0x150 [ 519.490472][T22363] __get_user_pages+0x238c/0x2720 [ 519.490559][T22363] ? __gup_longterm_locked+0xc3b/0x15c0 [ 519.490612][T22363] __gup_longterm_locked+0xd52/0x15c0 [ 519.490640][T22363] ? lock_acquire+0x106/0x350 [ 519.490689][T22363] gup_fast_fallback+0x1d8c/0x20e0 [ 519.490710][T22363] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.490835][T22363] ? __pfx_gup_fast_fallback+0x10/0x10 [ 519.490861][T22363] ? is_valid_gup_args+0x11f/0x200 [ 519.490889][T22363] ? get_user_pages_fast+0x4d/0xb0 [ 519.490923][T22363] __iov_iter_get_pages_alloc+0x378/0xa40 [ 519.490965][T22363] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 519.491005][T22363] iov_iter_get_pages2+0x5e/0xa0 [ 519.491041][T22363] __se_sys_vmsplice+0x7b5/0x1660 [ 519.491096][T22363] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 519.491132][T22363] ? __pfx_futex_wake+0x10/0x10 [ 519.491238][T22363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.491263][T22363] do_syscall_64+0x174/0x580 [ 519.491286][T22363] ? trace_irq_disable+0x3b/0x140 [ 519.491313][T22363] ? clear_bhb_loop+0x70/0xc0 [ 519.491340][T22363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.491362][T22363] RIP: 0033:0x7f9b8f99e0d9 [ 519.491384][T22363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.491402][T22363] RSP: 002b:00007f9b908bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 519.491426][T22363] RAX: ffffffffffffffda RBX: 00007f9b8fc25fa0 RCX: 00007f9b8f99e0d9 [ 519.491441][T22363] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 519.491455][T22363] RBP: 00007f9b8fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 519.491467][T22363] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 519.491480][T22363] R13: 00007f9b8fc26038 R14: 00007f9b8fc25fa0 R15: 00007ffe4c24d3c8 [ 519.491518][T22363] [ 519.784089][T22365] bond7: entered promiscuous mode [ 519.790401][T22365] bond7: entered allmulticast mode [ 519.798396][T22365] 8021q: adding VLAN 0 to HW filter on device bond7 [ 520.184162][T22377] geneve1: left promiscuous mode [ 520.208976][T22377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4361'. [ 520.230942][T22382] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4362'. [ 520.485523][T22384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4363'. [ 520.535065][T22386] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4365'. [ 520.566176][T22384] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4363'. [ 520.576680][T22386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4365'. [ 520.894267][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'. [ 521.031868][T22395] vlan2: entered promiscuous mode [ 521.100077][T22395] hsr0: entered promiscuous mode [ 521.122209][T22395] vlan2: entered allmulticast mode [ 521.145578][T22395] hsr0: entered allmulticast mode [ 521.170683][T22395] hsr_slave_0: entered allmulticast mode [ 521.191908][T22395] hsr_slave_1: entered allmulticast mode [ 521.262485][T22409] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4369'. [ 521.337866][T22401] hsr_slave_0: left promiscuous mode [ 521.361473][T22401] hsr_slave_1: left promiscuous mode [ 521.724989][T22405] veth1_macvtap: left promiscuous mode [ 521.746590][T22409] bond2: entered allmulticast mode [ 521.778152][T22409] ip6gre1: entered allmulticast mode [ 522.698125][T22445] netlink: 'syz.4.4381': attribute type 1 has an invalid length. [ 523.117285][T22447] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.136781][T22447] bond3: (slave bond4): making interface the new active one [ 523.179815][T22447] bond3: (slave bond4): Enslaving as an active interface with an up link [ 523.279507][T22448] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 523.324596][T22458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.738779][T22518] __nla_validate_parse: 6 callbacks suppressed [ 524.738800][T22518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4395'. [ 525.541717][T22545] netlink: 'syz.0.4403': attribute type 5 has an invalid length. [ 525.598353][T22545] netlink: 'syz.0.4403': attribute type 9 has an invalid length. [ 525.640853][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4403'. [ 525.816201][T22543] syzkaller0: entered promiscuous mode [ 525.843346][T22543] syzkaller0: entered allmulticast mode [ 526.295832][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4408'. [ 526.337494][T22563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4408'. [ 526.468711][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.099609][T22585] netlink: 'syz.4.4414': attribute type 1 has an invalid length. [ 527.158983][T22585] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4414'. [ 527.233765][T22585] netlink: 'syz.4.4414': attribute type 1 has an invalid length. [ 527.575855][T22599] af_packet: packet size is too long (35212 > 1484) [ 527.615145][T22596] 8021q: VLANs not supported on ip6_vti0 [ 528.245455][T22614] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 528.265181][T22614] bond4 (unregistering): Released all slaves [ 528.322850][T22619] netlink: 'syz.4.4426': attribute type 32 has an invalid length. [ 528.366591][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4426'. [ 528.412048][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4427'. [ 528.666078][T22619] bond5: Setting coupled_control to off (0) [ 528.714149][T22624] veth0_macvtap: left promiscuous mode [ 529.423236][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4435'. [ 529.629512][T22663] xt_hashlimit: size too large, truncated to 1048576 [ 529.652862][T22666] netlink: 'syz.0.4438': attribute type 9 has an invalid length. [ 529.827832][T22662] bond4: entered promiscuous mode [ 529.850079][T22662] bond4: entered allmulticast mode [ 529.976339][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4439'. [ 530.022578][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4439'. [ 530.084185][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4439'. [ 530.158567][T22672] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 530.342146][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'. [ 530.384853][T22676] netlink: 'syz.2.4441': attribute type 5 has an invalid length. [ 530.535172][ T154] smbdirect: ib_dev[syz0] removed [ 530.578985][T22677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.706844][T22677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.782503][T22677] bond0 (unregistering): Released all slaves [ 530.793062][T22691] netlink: 'syz.4.4445': attribute type 1 has an invalid length. [ 530.824229][T22691] netlink: 'syz.4.4445': attribute type 3 has an invalid length. [ 530.834122][T22691] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4445'. [ 530.858367][T22680] hsr_slave_0: left promiscuous mode [ 530.866878][T22680] hsr_slave_1: left promiscuous mode [ 531.778734][T22722] netlink: 'syz.3.4454': attribute type 39 has an invalid length. [ 531.860439][ T36] smc: removing ib device syz2 [ 531.910972][T13762] wg1 speed is unknown, defaulting to 1000 [ 531.935601][T13762] syz2: Port: 1 Link DOWN [ 531.993730][ T36] smbdirect: ib_dev[syz2] removed [ 532.032229][T22725] geneve3: entered promiscuous mode [ 532.070999][T22725] geneve3: entered allmulticast mode [ 532.248211][T22738] netlink: 'syz.0.4459': attribute type 1 has an invalid length. [ 533.404679][T22765] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4466'. [ 534.425375][T22781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.531927][T22785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4474'. [ 534.588770][T22787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4475'. [ 534.660978][T22791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 534.759413][T22785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4474'. [ 535.752295][T22820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4482'. [ 536.225576][T22820] macvtap1: entered promiscuous mode [ 536.247714][T22820] vlan0: entered promiscuous mode [ 536.259765][T22820] macvtap1: entered allmulticast mode [ 536.273906][T22820] vlan0: entered allmulticast mode [ 536.287584][T22820] veth0_vlan: entered allmulticast mode [ 536.634158][T22837] netlink: 'syz.4.4488': attribute type 2 has an invalid length. [ 536.673495][T22839] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4489'. [ 536.954664][T22851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4491'. [ 537.811321][T22873] xt_hashlimit: size too large, truncated to 1048576 [ 538.015326][T22878] 8021q: VLANs not supported on lo [ 538.865879][T22898] netlink: 'syz.4.4503': attribute type 83 has an invalid length. [ 538.990693][T22902] netlink: 'syz.4.4504': attribute type 1 has an invalid length. [ 539.894787][T22938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4514'. [ 540.223209][T22952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4519'. [ 540.300382][T22954] openvswitch: netlink: IPv4 tunnel dst address is zero [ 541.054544][T22974] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4525'. [ 541.100198][T22974] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4525'. [ 541.136677][T22976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4526'. [ 541.172057][T22974] netlink: 'syz.3.4525': attribute type 16 has an invalid length. [ 541.199718][T22974] netlink: 'syz.3.4525': attribute type 17 has an invalid length. [ 541.234843][T22980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4525'. [ 541.280548][T22974] tunl0: left allmulticast mode [ 541.304211][T22983] Unknown options in mask 4 [ 541.326452][T22974] gre0: left promiscuous mode [ 541.359770][T22974] ip_vti0: left promiscuous mode [ 541.391483][T22974] ip6_vti0: left promiscuous mode [ 541.434604][T22974] sit0: left promiscuous mode [ 541.491476][T22974] ip6tnl0: left promiscuous mode [ 541.518687][T22974] ip6gre0: left promiscuous mode [ 541.539595][T22974] syz_tun: left promiscuous mode [ 541.555436][T22974] ip6gretap0: left promiscuous mode [ 541.578061][T22974] vcan0: left promiscuous mode [ 541.602554][T22974] team0: left promiscuous mode [ 541.613661][T22974] dummy0: left promiscuous mode [ 541.632266][T22974] nlmon0: left promiscuous mode [ 541.652164][T22974] batadv0: left promiscuous mode [ 541.671035][T22974] vxcan0: left promiscuous mode [ 541.692435][T22974] vxcan1: left promiscuous mode [ 541.706152][T22974] veth0: left promiscuous mode [ 541.723622][T22974] veth1: left promiscuous mode [ 541.750688][T22974] wg0: left promiscuous mode [ 541.772190][T22974] wg2: left promiscuous mode [ 541.794049][T22974] veth0_to_bridge: left promiscuous mode [ 541.816732][T22974] bridge_slave_0: left promiscuous mode [ 541.839777][T22974] veth1_to_bridge: left promiscuous mode [ 541.869424][T22974] bridge_slave_1: left promiscuous mode [ 541.922334][T22974] veth0_to_bond: left promiscuous mode [ 541.946199][T22974] bond_slave_0: left promiscuous mode [ 541.956161][T22974] veth1_to_bond: left promiscuous mode [ 541.963087][T22974] bond_slave_1: left promiscuous mode [ 541.984138][T22974] veth0_to_team: left promiscuous mode [ 542.013243][T22974] team_slave_0: left promiscuous mode [ 542.028663][T22974] veth1_to_team: left promiscuous mode [ 542.036702][T22974] team_slave_1: left promiscuous mode [ 542.046866][T22974] veth0_to_batadv: left promiscuous mode [ 542.055061][T22974] batadv_slave_0: left promiscuous mode [ 542.063470][T22974] veth1_to_batadv: left promiscuous mode [ 542.074595][T22974] batadv_slave_1: left promiscuous mode [ 542.082023][T22974] xfrm0: left promiscuous mode [ 542.092607][T22974] veth0_to_hsr: left promiscuous mode [ 542.108931][T22974] veth1_to_hsr: left promiscuous mode [ 542.122617][T22974] hsr0: left promiscuous mode [ 542.135201][T22974] veth1_virt_wifi: left promiscuous mode [ 542.165632][T22974] veth0_virt_wifi: left promiscuous mode [ 542.186625][T22974] virt_wifi0: left promiscuous mode [ 542.231057][T22974] vlan0: left promiscuous mode [ 542.280656][T22974] macvlan0: left promiscuous mode [ 542.319452][T22974] macvlan1: left promiscuous mode [ 542.374933][T22974] ipvlan0: left promiscuous mode [ 542.428491][T22974] ipvlan1: left promiscuous mode [ 542.476323][T22974] macvtap0: left promiscuous mode [ 542.529193][T22974] macsec0: left promiscuous mode [ 542.571159][T22974] geneve0: left promiscuous mode [ 542.614385][T22974] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 542.660032][T22974] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 542.715362][T22974] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 542.755984][T22974] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 542.808305][T22974] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 542.853972][T22974] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 542.866810][T22974] bond1: left promiscuous mode [ 542.877423][T22974] bridge1: left promiscuous mode [ 542.884378][T22974] ip6erspan0: left promiscuous mode [ 542.891508][T22974] bond2: left promiscuous mode [ 542.896508][T22974] ip6gre1: left promiscuous mode [ 542.954760][T22974] hsr1: left promiscuous mode [ 542.975505][T22974] geneve2: left promiscuous mode [ 543.001282][T22974] syzkaller0: left promiscuous mode [ 543.006856][T22974] syzkaller0: left allmulticast mode [ 543.021619][T22974] bond4: left promiscuous mode [ 543.026608][T22974] erspan2: left promiscuous mode [ 543.035226][T22974] bond4: left allmulticast mode [ 543.071426][T22974] erspan2: left allmulticast mode [ 543.081568][T23033] netlink: 'syz.4.4536': attribute type 3 has an invalid length. [ 543.098909][T23034] netlink: 'syz.4.4536': attribute type 3 has an invalid length. [ 543.132766][T22992] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4525'. [ 543.308551][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4537'. [ 543.443217][T23043] netlink: 'syz.3.4538': attribute type 4 has an invalid length. [ 543.565532][T23047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4537'. [ 544.138428][T23069] netlink: 'syz.4.4543': attribute type 2 has an invalid length. [ 544.164048][T23071] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4542'. [ 544.176298][T23069] netlink: 'syz.4.4543': attribute type 2 has an invalid length. [ 544.567272][ T8909] [ 544.569669][ T8909] ============================================ [ 544.575916][ T8909] WARNING: possible recursive locking detected [ 544.582222][ T8909] syzkaller #0 Not tainted [ 544.586660][ T8909] -------------------------------------------- [ 544.592864][ T8909] kworker/u8:11/8909 is trying to acquire lock: [ 544.599124][ T8909] ffff888028c3d958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 544.609155][ T8909] [ 544.609155][ T8909] but task is already holding lock: [ 544.616578][ T8909] ffff88807891ed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 544.626503][ T8909] [ 544.626503][ T8909] other info that might help us debug this: [ 544.634598][ T8909] Possible unsafe locking scenario: [ 544.634598][ T8909] [ 544.642422][ T8909] CPU0 [ 544.645724][ T8909] ---- [ 544.649218][ T8909] lock(&qdisc_xmit_lock_key#4); [ 544.654388][ T8909] lock(&qdisc_xmit_lock_key#4); [ 544.659446][ T8909] [ 544.659446][ T8909] *** DEADLOCK *** [ 544.659446][ T8909] [ 544.667694][ T8909] May be due to missing lock nesting notation [ 544.667694][ T8909] [ 544.676055][ T8909] 11 locks held by kworker/u8:11/8909: [ 544.681574][ T8909] #0: ffff8880542c8140 ((wq_completion)bond4#3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 544.692692][ T8909] #1: ffffc9000528fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 544.705617][ T8909] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820 [ 544.715359][ T8909] #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 544.725511][ T8909] #4: ffff8880290b0228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 544.738192][ T8909] #5: ffff88807891ed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 544.748511][ T8909] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 544.757555][ T8909] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 544.767419][ T8909] #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 544.776300][ T8909] #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 544.786272][ T8909] #10: ffff888029030228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 544.799033][ T8909] [ 544.799033][ T8909] stack backtrace: [ 544.804942][ T8909] CPU: 0 UID: 0 PID: 8909 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 544.804967][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.804983][ T8909] Workqueue: bond4 bond_alb_monitor [ 544.805016][ T8909] Call Trace: [ 544.805026][ T8909] [ 544.805038][ T8909] dump_stack_lvl+0xe8/0x150 [ 544.805070][ T8909] print_deadlock_bug+0x279/0x290 [ 544.805104][ T8909] __lock_acquire+0x24df/0x2cf0 [ 544.805136][ T8909] ? __pfx_netif_skb_features+0x10/0x10 [ 544.805163][ T8909] ? ret_from_fork_asm+0x1a/0x30 [ 544.805194][ T8909] ? __lock_acquire+0x683/0x2cf0 [ 544.805224][ T8909] ? sch_direct_xmit+0x15f/0x4c0 [ 544.805242][ T8909] lock_acquire+0x106/0x350 [ 544.805268][ T8909] ? sch_direct_xmit+0x15f/0x4c0 [ 544.805296][ T8909] _raw_spin_lock+0x2e/0x40 [ 544.805396][ T8909] ? sch_direct_xmit+0x15f/0x4c0 [ 544.805415][ T8909] sch_direct_xmit+0x15f/0x4c0 [ 544.805438][ T8909] ? __pfx_sch_direct_xmit+0x10/0x10 [ 544.805459][ T8909] ? arp_solicit+0xb90/0xe40 [ 544.805487][ T8909] __dev_queue_xmit+0x177f/0x3820 [ 544.805527][ T8909] ? __dev_queue_xmit+0x29b/0x3820 [ 544.805555][ T8909] ? __lock_acquire+0x683/0x2cf0 [ 544.805581][ T8909] ? arpt_do_table+0x25b/0x1f90 [ 544.805651][ T8909] ? __pfx___dev_queue_xmit+0x10/0x10 [ 544.805683][ T8909] ? __pfx_arpt_do_table+0x10/0x10 [ 544.805714][ T8909] ? NF_HOOK+0xa2/0x3c0 [ 544.805738][ T8909] NF_HOOK+0x33a/0x3c0 [ 544.805761][ T8909] ? __pfx_arp_xmit_finish+0x10/0x10 [ 544.805784][ T8909] ? NF_HOOK+0xa2/0x3c0 [ 544.805806][ T8909] ? __pfx_NF_HOOK+0x10/0x10 [ 544.805827][ T8909] ? lock_acquire+0x106/0x350 [ 544.805854][ T8909] ? __pfx_arp_xmit_finish+0x10/0x10 [ 544.805878][ T8909] ? inet_addr_type_dev_table+0x25/0x190 [ 544.805930][ T8909] arp_xmit+0x16c/0x270 [ 544.805952][ T8909] ? arp_xmit+0x23/0x270 [ 544.805974][ T8909] arp_solicit+0xbdc/0xe40 [ 544.806004][ T8909] ? __pfx_arp_solicit+0x10/0x10 [ 544.806030][ T8909] ? __neigh_event_send+0xea4/0x1510 [ 544.806114][ T8909] ? __pfx_arp_solicit+0x10/0x10 [ 544.806138][ T8909] __neigh_event_send+0xf0c/0x1510 [ 544.806177][ T8909] neigh_resolve_output+0x1a1/0x720 [ 544.806211][ T8909] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 544.806242][ T8909] ? ip_finish_output2+0x3de/0x10b0 [ 544.806268][ T8909] ip_finish_output2+0xc4b/0x10b0 [ 544.806294][ T8909] ? ip_skb_dst_mtu+0x811/0xa50 [ 544.806317][ T8909] ? ip_finish_output2+0x3de/0x10b0 [ 544.806344][ T8909] ? ip_finish_output+0x40b/0x530 [ 544.806369][ T8909] ip_output+0x29f/0x450 [ 544.806392][ T8909] ? ip_output+0x5a/0x450 [ 544.806415][ T8909] iptunnel_xmit+0x626/0xd10 [ 544.806472][ T8909] ip_tunnel_xmit+0x195b/0x2040 [ 544.806510][ T8909] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 544.806543][ T8909] ? __pfx_gre_build_header+0x10/0x10 [ 544.806593][ T8909] __gre_xmit+0x19e/0x240 [ 544.806614][ T8909] ? __pfx___gre_xmit+0x10/0x10 [ 544.806634][ T8909] ? iptunnel_handle_offloads+0x2fd/0x630 [ 544.806666][ T8909] erspan_xmit+0xad5/0x1590 [ 544.806694][ T8909] ? __pfx_erspan_xmit+0x10/0x10 [ 544.806716][ T8909] ? __lock_acquire+0x683/0x2cf0 [ 544.806747][ T8909] dev_hard_start_xmit+0x2cd/0x830 [ 544.806781][ T8909] sch_direct_xmit+0x257/0x4c0 [ 544.806804][ T8909] ? __pfx_sch_direct_xmit+0x10/0x10 [ 544.806824][ T8909] ? __switch_to_asm+0x70/0x70 [ 544.806857][ T8909] __dev_queue_xmit+0x177f/0x3820 [ 544.806890][ T8909] ? __dev_queue_xmit+0x29b/0x3820 [ 544.806921][ T8909] ? __pfx___dev_queue_xmit+0x10/0x10 [ 544.806947][ T8909] ? rcu_is_watching+0x15/0xb0 [ 544.806985][ T8909] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 544.807011][ T8909] ? trace_kmem_cache_alloc+0x29/0xe0 [ 544.807033][ T8909] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 544.807059][ T8909] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 544.807082][ T8909] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 544.807113][ T8909] ? __alloc_skb+0x4cc/0x7a0 [ 544.807136][ T8909] ? alb_send_lp_vid+0x14e/0x550 [ 544.807169][ T8909] alb_send_lp_vid+0x348/0x550 [ 544.807203][ T8909] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 544.807242][ T8909] alb_send_learning_packets+0x12c/0x300 [ 544.807274][ T8909] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 544.807304][ T8909] ? bond_alb_monitor+0xf3/0x1820 [ 544.807336][ T8909] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 544.807372][ T8909] bond_alb_monitor+0x3d0/0x1820 [ 544.807405][ T8909] ? bond_alb_monitor+0xf3/0x1820 [ 544.807434][ T8909] ? __pfx_bond_alb_monitor+0x10/0x10 [ 544.807464][ T8909] ? rcu_is_watching+0x15/0xb0 [ 544.807494][ T8909] ? process_scheduled_works+0xa20/0x14e0 [ 544.807523][ T8909] process_scheduled_works+0xa8e/0x14e0 [ 544.807562][ T8909] ? __pfx_process_scheduled_works+0x10/0x10 [ 544.807588][ T8909] ? assign_work+0x3cf/0x5d0 [ 544.807612][ T8909] worker_thread+0xa47/0xfb0 [ 544.807650][ T8909] kthread+0x388/0x470 [ 544.807678][ T8909] ? __pfx_worker_thread+0x10/0x10 [ 544.807699][ T8909] ? __pfx_kthread+0x10/0x10 [ 544.807727][ T8909] ret_from_fork+0x514/0xb70 [ 544.807769][ T8909] ? __pfx_ret_from_fork+0x10/0x10 [ 544.807797][ T8909] ? __switch_to+0xc89/0x1420 [ 544.807822][ T8909] ? __pfx_kthread+0x10/0x10 [ 544.807850][ T8909] ret_from_fork_asm+0x1a/0x30 [ 544.807889][ T8909] [ 545.315859][T23081] syzkaller0: entered promiscuous mode [ 545.321485][T23081] syzkaller0: entered allmulticast mode [ 545.331307][T23081] 0: reclassify loop, rule prio 0, protocol 800 [ 545.511049][T23090] syzkaller0: entered promiscuous mode [ 545.516634][T23090] syzkaller0: entered allmulticast mode [ 545.542440][T23092] pimreg: entered allmulticast mode