last executing test programs: 3.835207152s ago: executing program 3 (id=1392): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x44010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd70000000000001"], 0xd4}}, 0x4080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r6, 0x0) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.764798343s ago: executing program 0 (id=1393): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x1, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @broadcast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1700"/28], 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000003c0), &(0x7f0000000440)=@buf="2b260a0bab97d8300eb838ec213d9fb539216431950f20aa0daea541e2e1740c46e3edac28fe91d07b6e3bc9dee9a51bf7fcd4303de453ce4c0ceb8487c349ba9c3a475d0a9324e757782f4de172feff3c81479dee1c793d218ac95d44208c081c681394ea5e0ee0c7fe2c5b4d21c3657b84bbf53f01ed995440c0fcde5d8045ddbe3b85a408ede0738034a0e381eb29148984b1e4860ecb1f46dc4ca28fa271a8b8faa5908c33b44c0508b1dd734a1767f08e988905fd855992007bf7e4a6b77ed5685f6fd152c6086bbf3e8ba2a817e9a601355faf89d2a1985413256bbc56aaa21870ba2f"}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400101a0, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r9, 0xc040583f, &(0x7f0000000100)={{@_ha_fsid={[0x3, 0x2]}, {0x5, 0x1, 0xfffffff8, 0x6}}, {{[0x203, 0x2, 0x4, 0x6]}, 0x0, 0x2, 0x200, 0x0, &(0x7f00000000c0)=[{{@align=0xe6, {0x3, 0x3, 0xfffffffa, 0x1}}, 0x4, 0x0, 'drbg_nopr_sha512\x00'}]}}) 3.224258486s ago: executing program 2 (id=1396): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x0) close(r8) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_emit_ethernet(0x6a, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x34, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', [], "00040000"}}}}}}}, 0x0) 3.196983678s ago: executing program 0 (id=1397): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x8, 0x0, @mcast1, 0x2}, 0x1c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000600)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) getsockopt$inet6_tcp_buf(r7, 0x6, 0x21, &(0x7f00000001c0)=""/106, &(0x7f0000000240)=0x6a) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff00, 0xff000000, 0x7, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x168}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @local, 0xf}}}, {{@arp={@initdev={0xac, 0x1e, 0x11, 0x0}, @broadcast, 0xffffffff, 0xff0000ff, 0xc, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x42, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd7}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x85}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000058c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8040) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x2c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2cd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x89d0}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 3.084094291s ago: executing program 3 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000340)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000600000000000000120000001800000085000000a80000008520000001000000181200"/52, @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008500000074000000183300000100000000000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x1ff, 0xb4, &(0x7f00000005c0)=""/180, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0xa08, 0x59}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, r0], &(0x7f0000000740)=[{0x2, 0x2, 0xf, 0x7}, {0x4, 0x4, 0x7, 0x3}, {0x1, 0x2, 0xa}, {0x4, 0x2, 0x7, 0x6}, {0x1, 0x4, 0xe, 0x7}, {0x5, 0x1, 0x0, 0x6}, {0x1, 0x2, 0x6, 0x3}, {0x1, 0x1, 0xa, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000008c0)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x788f, 0x7800, 0xfffffffb, 0x1, {{0x5, 0x4, 0x2, 0x33, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @loopback, @loopback}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f80)=@newtfilter={0x32dc, 0x2c, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0x3}, {0xfff1, 0xe}, {0xffe0, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x23b0, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x239c, 0x2, [@m_mirred={0x10b0, 0x16, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x3, 0x2, 0x1}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x810000, 0x9, 0x5, 0x3}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x1, 0x1, 0x42f7, 0x3}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x74, 0x6, 0xffffffffffffffff, 0x7aecca1c, 0x9}, 0x4, r4}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x10f4, 0x11, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x406a, 0x4, 0x85, 0x7}, @multicast1, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x8, 0x4, 0x9}, @empty, @rand_addr=0x64010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x8, 0x0, 0x2, 0x4095}, @remote, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x1, 0x9, 0xc}, @private=0xa010100, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7, 0x20000000, 0x9, 0x4}, @loopback, @rand_addr=0x64010102, 0x0, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xc4, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x0, 0x0, 0x0, 0x6}}]}, {0x7d, 0x6, "105bc375ada0c8303a2d9ad191704c271b488bc8c9b4a4bc87619282cdb2181adafa60ebd8d97dba4914b5f2e0479c6c49a1be735ff092e2a21690de3b68cf16593ec14fc4b6195446e222ac465ca029931c7d10477dacb5ca56323fdedf2deb3dd19f7faadbda8687ab31034017308f088184d9f4b780a8f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x130, 0x1, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xf2a3f}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x85b9a}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3c63a}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x48000000, 0xff, 0x5, 0x1, 0x4f3abbaf}}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x92998}, @TCA_MPLS_PROTO={0x6, 0x4, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xda}]}, {0x9f, 0x6, "92c869532b879ab44e20b93b3a0d546eb0bb19eddb3e69564dc2591ae5766ed3624c02dd9c492c328d227a53f4071023fbc3d2d40fc090fbd79484b34369d40042ffbec1bbe82fe47e5521c7d9678ecfaee4e09296e2afe107d31cade6b3e60d28f795cee53b7fec2c9c770fee14d935e9630ade0c4b7b404d1f15ea15474d2a395c72b94321bacea9ba2a93fb3b12cfac886761208c448a441a56"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0xee0, 0x2, [@TCA_FW_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0xb15e, 0x2, 0x58696c91, {0x7, 0x1, 0xd, 0x9, 0x10, 0x8001}, {0xd9, 0x2, 0x0, 0x3, 0x3, 0x3ff}, 0x5, 0x61, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x7}}, @TCA_FW_MASK={0x8}, @TCA_FW_ACT={0xe80, 0x4, [@m_connmark={0x15c, 0x17, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3f80000, 0x3, 0x0, 0x7, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfffffffe, 0x5, 0x4, 0x5}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x0, 0x0, 0x9, 0xffffffff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x837, 0x0, 0x0, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x0, 0x7, 0xff, 0x3}, 0x200}}]}, {0x9d, 0x6, "4286eb0033bfa2afc24edbd40e6e9686ffe45dd92d8cb764a46ea54e90e0ff8a9944b11f880a8cf7db81f15d2cef20af2aba60787afb87cb0389b0fc727e49350f5c1531b3da3b9b405cbee590d7fccdc7d9f33afc51aa9cf260e164800d5a999d11f71afe587219b8a891754b884aa273dc65aba3b764d18dda0d3eb19318cba1e6225c0cb5745f9bd30635d48340ec3aa34b698b9b8c82b0"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x1d4, 0x6, 0x0, 0x0, {{0x7}, {0x114, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_TARG={0xf0, 0x6, {0x7000, 'filter\x00', 0x1, 0x2, "60f806908dc1175ed020317bf4829ac191c86785b87c081ae9f24660c1820c9638a73ed4563f11ddeba212b99946ed62fdc640147c50d6901d4c20f65694fbd17d90f3a4dd9da010feb3aa1487888c3f7d5784bee97b45284f234ec2b20b0c835246d71f5b80a4ea5b9a4687a5435347d26985f40464a0be3032a51178cf1294d1bc604e7bc443fb0510ea2a90271e1ca2cc8d53979314d0905f4eaa93aa9371b283fc7b682e15d484fb4fbefa6803331ab425063253680f92e48a2f26290058a0cf85b36dc8"}}]}, {0x9c, 0x6, "bf52f8b8a55865ef66b2f3c0f426a75ae73abe9b1280108b3b751d92f4103e4394b419a2f833ca51d7c7609b0a46d29660e580ac05a7ca10fe8c5a7a276d2f9165c89c5578739e3bbe96cb585531deeb30bd5a64fdaed16ff5cccf2c4cfb057c72c8c2edc9e0e431b4ab89c5db4dee8eb2919742d9318fa2143ea5f3e9a341efd781bd7ec3b2478c60efecd2c218aa0e87709d578511764e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_csum={0x154, 0x1f, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xcec4, 0x7, 0x0, 0xfff, 0x20000000}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x3, 0x1, 0x0, 0x9}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x1, 0x8, 0x6, 0x8}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x9, 0x2, 0x9e, 0x80000000}, 0x4}}]}, {0xb7, 0x6, "f894eb8b9b9374d3840b162907b81296271c60dc34f845ca0f983d79653aed25341ce91d7eb0212513755e12e033f8eb766a4b674cbbda91ecf2afb63779c30e50745feb300f1e4eb69a44cf193905dc3d8d7e6909a514fd76b1cfd3ddf972472521bd3147c9ee72607c95b66cd4e85f60d2526086769023fab8577e5cfe9ca74cd72a27035464ff284ab39d6d4f949bb25a435cd59800b8926811b09aec40ecddd5926c4258ac81eb1b5ce5ae4a1fb95c410b"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}, @m_police={0x4a4, 0x20, 0x0, 0x0, {{0xb}, {0x454, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x9, 0xa, 0x1ff, 0x69ce, 0x9, 0xffffffff, 0x3, 0x0, 0x2, 0x10001, 0x38000, 0x72ba, 0x3, 0x101, 0xfffffff7, 0x3ff, 0x1000000, 0xe, 0x2, 0x1, 0x596, 0x3, 0x4, 0x9b1a, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x5, 0x6, 0x3, 0x1, 0x6, 0x6, 0x6, 0x8001, 0x0, 0x81, 0x8, 0x1ff, 0x7, 0x8, 0x2, 0x81, 0x9, 0x0, 0x5ea8a7b2, 0x0, 0x3, 0x7f, 0x6f7, 0x7, 0x419, 0x9, 0x400, 0x8, 0x5, 0x0, 0x2, 0x9, 0x10001, 0x7, 0xfffffff9, 0x3, 0x8, 0x4, 0x5, 0x4, 0x3, 0x6, 0xb7fb, 0x2, 0x3, 0x6, 0x6, 0x7, 0xfffffffe, 0x8, 0x180000, 0x400, 0xffffffff, 0x80, 0x7, 0xfffffffa, 0xb, 0x0, 0xc, 0xc, 0x5, 0x1ff, 0x40000000, 0x9, 0x7, 0xd, 0x4, 0xf67e, 0x81, 0x9, 0x8, 0x4, 0x9, 0x0, 0x239, 0x7, 0x7, 0x6, 0x7, 0xfff, 0x8000, 0xffffffff, 0x39e0, 0x2, 0x2, 0xfffffff8, 0x5, 0x1, 0x2, 0x2, 0x800, 0x40, 0x80, 0x3, 0x1, 0x4, 0xb, 0x4, 0x800, 0x8e1, 0x7, 0x4, 0x9, 0x101, 0xffffff26, 0x8001, 0x9, 0xce79, 0x7, 0x4, 0x0, 0x6, 0x4, 0xb1c9, 0xd, 0x114, 0xc706, 0xfffffffc, 0x689b71e9, 0xfff, 0x4, 0x7, 0x1, 0x50000000, 0x5, 0xa, 0xb9, 0x0, 0x100, 0x9, 0x627, 0x4, 0x200, 0x4, 0x5, 0x10001, 0x40004000, 0x44c30ee2, 0x4, 0x0, 0x2b9f, 0x80000000, 0xfffffff8, 0xb, 0x200, 0x3, 0x8745, 0x0, 0x4, 0x0, 0xfff, 0x0, 0x5, 0x5, 0x2, 0x7fff, 0x2, 0x6, 0x5, 0xa, 0x6, 0x3, 0x100, 0x7f, 0x7fff, 0x72, 0xfffffffd, 0xb10, 0x607, 0x3, 0xd5, 0x7, 0x9, 0x5, 0x2, 0x7, 0x8, 0x8, 0x9, 0x9, 0xefd, 0xe, 0x7, 0x5f0, 0x7, 0x0, 0xffff, 0x7, 0x4, 0x7fffffff, 0xfffffffe, 0x5, 0x4, 0x6, 0x8, 0x2, 0xc, 0x3, 0xb96b, 0x9, 0x3, 0x1, 0x5, 0x1, 0x1, 0x1008000, 0x6, 0xfffffffb, 0xb777, 0x10, 0x4, 0x4, 0x6, 0x5, 0x9, 0x19d3d21, 0x84ac, 0x3, 0x8, 0x0, 0xf6, 0x6, 0x2, 0x3, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa5a6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x4, 0x7, 0x6, 0x36, {0x3, 0x0, 0xff, 0x6, 0x1, 0x4}, {0x6, 0x0, 0x0, 0xf001, 0x5, 0xff}, 0xffff0000, 0xbc, 0x78d}}]]}, {0x28, 0x6, "95b38013a2da44c09d95a88e17ffa40c4f84052d4434ea91a9207c0074ce68416ff4bbed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x9c, 0x7, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf8000000, 0x1, 0x4, 0x5, 0x6}}, @TCA_DEF_DATA={0xb, 0x3, 'filter\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x554a, 0x2, 0x3, 0xffffff81}}]}, {0x31, 0x6, "0b68cb53ef0e2af55cdd99ac207313d6dacaa9a6127374c5ea63faea9a42686d33ec46261f5195708941e81653"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xa0, 0x19, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x7, 0x7, 0x0, 0x800}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x8001, 0x5, 0x2, 0xed4}}]}, {0x2c, 0x6, "367ad3659fc8f74775351abf9dd81f8c4b74d085b36a934be99fe52c59d723494db0edb45b110965"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0xf0, 0x7, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fffffff, 0x800, 0x3, 0x200, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7f}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x6}}]}, {0x91, 0x6, "13462b7156ec90e7d5e9db75effe8316ccf79eba0904304eb3343d6e181bb503a9f03587906d07aacc7ebc773e7539258f8ced2cfa97b6ca799b84923b57e57ca6aa6f5ca09ca2cfb297436dc0f9976b0934013f94f04632ef6b02f850169ef9a3e366bcdcd92e94aeace4876b856dbb63d0b2705026522a81330803f3755859ec4f4d762efdd50863dd323bb8"}, {0xc}, {0xc, 0x8, {0x7, 0x2}}}}, @m_csum={0x15c, 0x13, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x1, 0xfffff001, 0x3}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x100, 0x1, 0x1}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x27, 0x1, 0x6, 0xffff0001, 0x2}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x10000000, 0x1, 0x1}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x20000000, 0x9, 0xd00000}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7ff, 0x2, 0x5, 0x7}, 0x24}}]}, {0x86, 0x6, "18285ae89595ae58e9b5b1722155db208d5c497b7793e47f5cee3198c88cad52e4d3974764fd2df4ebd83bb138b4c53612c2e4acc4278f985b8869232031a819f7918a45ce55c5992b8d7e939a560da9081dfb5be7e534f38f2621ba7ccc5393b365f358a436b09a21177f36b0fae5e108ceae6665f83f338aed397d65e87e2fd047"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x154, 0x1d, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3, 0x10000001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x8, 0x7, 0x1}}]}, {0x101, 0x6, "c432784d781985ed7f6df09c53540063a56b9e73e4c9e6e8efd32ec7548c78fb6b34c3e44521ce39628c13ca05df484655d083405c19fc94b1455a2bf134b44aa322e9ad431415e700ef59571634ecfd0f3f546690d86c8b05af3ff20b261697f46105e59ddf7b0b41bc09c029a19e4bdbaff2d4eecaf6919ae086f96bd22d8e3dec336907a20fe95d7804a5209aeb4b62d5b39fe01adcf95a55cccf205edd15999f30f93065dd577a0eaf9b3ea437b389ba32bae5175cc15cb9dda3f47a4b42549b0bc6544ac74961c6f53a3daa9624bace51b61dac144eb419eb8148822673622ae17b9f1d76601d7d81308ad2620e4bedb8519ac0d4d82e0c12d61f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ct={0x78, 0x1e, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x32, 0x6, "c8445579578f6b68b7decf721033bbe24a737f9c46264ecb509ced26c2de05d7a423789bc3ac3df22ee176cfeea3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_CHAIN={0x8, 0xb, 0x811}]}, 0x32dc}}, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl2\x00', r2, 0x8, 0xf831, 0x7, 0x9, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x65, 0x0, 0xd4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x49, 0x0, 0xc, [0x0, 0x8, 0x7594018]}, @generic={0x44, 0xa, "3fe9df3cb4f537bd"}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x7, "dea72e2806"}, {0x6, 0x11, "32d06de857f6f4fd5aedd0d1514def"}]}, @timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0x1, [{@broadcast, 0x4000}]}, @rr={0x7, 0x1b, 0x53, [@multicast1, @multicast2, @rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010100, @multicast2]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@newtfilter={0x11d8, 0x2c, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe, 0xffe0}, {0x4, 0xffe0}, {0xfff1, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x6, 0xd}}, @TCA_RATE={0x6, 0x5, {0x8a, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_bpf={{0x8}, {0x118c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_ACT={0x12c, 0x1, [@m_mirred={0x128, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x747, 0x9, 0x0, 0x1, 0x9}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x7, 0x6, 0x3, 0x2}, 0x1, r2}}]}, {0xbb, 0x6, "fcf21e82cb85ba7f58775c6c30ec3e651d5023a849080b7c89abe8f7d11a82789a13f9c5a93db419576d9c9fb424a74c2fd7758565ce55ea73372a7bd70323b1b9a7d857fd47f46ab7086f6548747d9e89162e40806a99ffca8d52379eb1f92b2f14234a7097af0f12d5804b99c57e4e15a05872364bcffa5e5ae2f9cf80e6296d792314152e29beb502a7820171e6443416de3ce1bb9035859a609994a0a7fee9d4122795ce4e70d3ca1cc1a97113aba2ba513f22ae6f"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xb, 0x6, 0xe, 0xa}, {0x7, 0x5, 0x9, 0x3}, {0x2, 0x3, 0x7, 0xfa3a}, {0x80, 0x7, 0x4}, {0x6, 0xf1, 0x80, 0xcaf2}]}}, @TCA_BPF_ACT={0x304, 0x1, [@m_sample={0x14c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffff9, 0x1, 0x30000008, 0x0, 0x9}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ae}]}, {0xf8, 0x6, "cbf5ef878ef59e9578eefe3f6b6480e9bff9317e1ba1b13cb01c58e3332d15cacf0ff0ab3e6ce42a3706cc1f308b95955e39844375a94caf00fa05b3d359ae7b2e3f92426ad5cc3f58aecf1fa53837f5daaeb730bfe7629a5e313ad0dfbc19858fbd66e102cdab414fbc7955d1113fee47bfdb781c91ade479b47cc18f38d98ec1d228450799ab03d243dda6da6525cc0264ba3c9a5c503bfc95c0e35f1edab248d19df9c565c4d6a97bb25ac841ce14ca8e11c904c68fd179f4bc511d1e93d1dc78806a9ed1c8a7076a6101303d1bcf3ef5a014759a5a97bc92af088e18223720b2bbf5fa3d140a63b9e046242a3cf97b63e283"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xa0, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1000}]}, {0x69, 0x6, "349efb0e0426cfe720287460bda12cb9c42c3d94470e976b0b779a1fd3c521757ccac126d0fae3818c843b427c1943027b54618a2fb05a4eacb099d0156f5dde8149570560d0e86c6db166de9eb3ec091dfbbfa3d51c832981cafa0fb5275cb51364110b2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xc4, 0x1f, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x262d, 0x6}}]}, {0x8c, 0x6, "21fbb8f27dbe7a040c667e6777afa9f7e2fbf55534156736456015f127fa90acb921c05f0ad6867a9c9b88a5da8f41e4374e02a3e04885e6a8f5ae92a7e374ac26e2d0cbd43b985fe56ee88a004ca9df7b30d0b321a829d2b2d12500c7e21178c764d52f74da53c03e6ec5df818a7725a3c65335d36f8b82cf4f42af42547196b7165789d92022fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_skbedit={0x50, 0x15, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x14, 0x6, "177c4847b0f449adc7bce2f2dd48046c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}, @TCA_BPF_ACT={0x3bc, 0x1, [@m_csum={0x124, 0xe, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x5, 0x4, 0x6, 0x7}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x6, 0xb, 0xffffffff}, 0x1a}}]}, {0xbf, 0x6, "8755554e1d1ca9cda6231c9fd900fd3128b1b4774d5e514e1a8db2d37321f3bf8eea7741cf0f40fccbdae4c7d4275dd828ef5b1e8dc5f3307dc5f7a50fd877a8a5dc47a107be839da410509eba37df778026b5634c81f11ab026e8bffe50553a30b14e931fced123675b7a6cf118229f2383130da9ae7c852daf264fa836b6e5b8a195b2658896f3c9af49958c291fb1a072377ae3f87ea4dda5950557a3c23249a6564aa4aa9762481e7bead8e95d67a36dc220dd2e91c11b31bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x124, 0xc, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x3, 0xffff, 0x76a0}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x0, 0x20000000, 0x4, 0x65}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x30e, 0x20000000, 0x0, 0x80000001}}, @TCA_DEF_DATA={0x7, 0x3, '}[\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'route\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'sfb\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0xffffffffffffffff, 0x2, 0x401}}, @TCA_DEF_DATA={0xa, 0x3, 'route\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'route\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xf47a, 0x6, 0xfffffffa, 0x3ff}}]}, {0x4b, 0x6, "8930f5abd909cc250515705f40d5a7c83cba0236a7556badc5121a99d4709c1b7b98d105ea4d45e0133a3e249d44be39b0e7ad0743ff56ceab064f8340893ee3e5ba424553cc69"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x8c, 0x1e, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}]}, {0x5b, 0x6, "74199d2b9e0a381745c7b9a0df9ba2e59d8d2b2a0d24759fef7fc44b6e4387c21786dc1981e795abf18fe5cac26cca06465c79ce0ce9819314bb2cab85345332e0b3a17c4f945a1c74335f96defe5ea9f5971057dc8bd5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xe4, 0x6, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x10000000, 0x10001, 0xe}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x61, 0x6, "c4e357152549c04277bd35d4435d9a0af013103bc16dadacf427c0985f4a6a0d3238a77bbaba02566cbd06503607d96dbf977a261a0587531eb2efa8de0d43bd82fd1414c81011e77586c152e6b1edc882de5d5a0dec85f1f4d14e8120"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x8, 0x80, 0x0, 0x1ff}, {0xacae, 0x4, 0x8, 0x7}, {0x4, 0xf, 0x23, 0xfffffff1}, {0xa, 0xf, 0xd, 0x7fff}, {0x1, 0xc, 0xe9, 0x40}, {0x6, 0x5, 0xd3, 0x2}, {0x1, 0x0, 0x0, 0x1}]}}, @TCA_BPF_ACT={0x904, 0x1, [@m_connmark={0xfc, 0x6, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0xfffffffffffffdec, 0x1, {{0x7, 0x80000000, 0xffffffffffffffff, 0xb, 0x6}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x4, 0x0, 0x2}, 0x48fd}}]}, {0x91, 0x6, "3e52cfde1da575b9d5798ec65a95ddbf2b5d01051dd4defb6e0df5e4a57850a0e5d1ab5c8f007338858ea3fc93ffc13340fab6d5e50c3b3198ad3d4878c9b18d0a28a482ac8b6f76ce8a7327be132acf8c9ead0490c102a24052193a60bea567cda1b7c9ce75708faea90cf60b7f60e4b1722e890321fecccd001108b9184caddcfb57330daa49fa56fe5dda12"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xf4, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0xc, 0x20000000, 0x2, 0x6aa}, @private=0xa010101, @multicast2}}]}, {0xa4, 0x6, "c83d651776fd696ec9130cb16c162d52e59c67ae37e9272bcfd3a8685c017ca525d1ecb335e15d04bf86fbb2b8765776a2db23a5efa7a1e4c3570386cbc3f0ec533eb265d591daa2f9ddaf65e2851556cd6eb9f029b466f3494b8f48b5c888534071d1b3d27c34a4cda8d006cc90618672277fe0dedbfaaa2a06ff5a8263446d9eddaff4b3cee9fb1d9ec7324aab9dabbd66a8d84e1128670317bae123d9faaa"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x150, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4d, 0x1, 0x5, 0x1}, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xe96, 0x10000000, 0x25144479, 0x8}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2d}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x100, 0x20000000, 0x100, 0x6}, @empty, @rand_addr=0x64010101, 0xffffff00}}]}, {0xad, 0x6, "ce2306c2743325ee205ff2244c12c2721e8adb451f28e107053e0c3cdd00c8ffe4fbc88f582813172e4fd9847a458a1e1200b7d94e9a3ebc27db1948c8fe4d0f52eb7ad1174322689f7e15bb8a8626a9c104470641a54094fde52cafa51693db043e1d6095689e2ff9b71d20eded2b4c08d0bfb993cbc5a49b4c5f65d90557c88a0f2231cce02f3bf11e35c75176ef8cf97a7c6d202dbb26957b04006743b66aa1478127b32d07e7da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_simple={0xac, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x632, 0x3, 0x6, 0xd, 0xfffff000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x100, 0x7, 0x2, 0x5}}]}, {0x50, 0x6, "bb0e122a2482679a0512a255404f290b99be25d60033bcc10404adf4e6ad21a057cb85b0beb97cab67c57c03e0b42774233a83f586cd2f1b09f8ad5190803c1149dc5808b4022557b5f41c71"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x180, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xfffeffff, 0x20000000, 0x0, 0x4}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="933126421a6e"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x6, 0x10000005, 0xd, 0x5}, 0x8}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0xe9, 0x6, "0fc9ba6240939d1e3f716ec43b69eae67ee767a21eea7ad4ea18d38b05db1451b8500eda34093aac0ca86ec956207a0978d503f3e3f24a0332ddad4459e90d69a2ba18005ecb28364a46d5530e96475d22cb4d818bd3b3d26dbcd1fe81199e2722cf008eff16fb8be14b749cfd31004ca6299ef4352bcaf8a30d5949973125861aec70fd247fff60fed36e9e5c408fc067198a814d7c8a9f3037feb6f356182c975e49906610591703547b0f5578ddb3a7e887ec94104977def96d63f1f5f99988efcc29906e3f3b8b6ec83f3674c74d7f94521079a1a83411ad8ccbc2f90791c92b8184c8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x1e0, 0x1f, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x31d, 0x20000000, 0x0, 0x7}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x4, 0x5, 0x7ff}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x920, 0xfff, 0x8, 0xac}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1000, 0x4, 0xb2e, 0x5}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x1, 0x0, 0xf, 0x9}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xffffffc0, 0x1, 0x8, 0x10c}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xb, 0x4, 0x1ff, 0xd10}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x0, 0x2, 0x3}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x543b074, 0x4, 0x6, 0x3}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x20000000, 0x100, 0x2}, 0x5, r2}}]}, {0x72, 0x6, "8935848db24043651ed6ef04dbb0310385ffed079f1cce4d965e6e58b3d0e8351439debcd6a3e952d1a82085fd29cb6b07f4dcb8aeede5d9e1edb6024569d1dcb21b3f4c2a75b66ec6fddf261adcee54f6b4cc269965c2807d6a20666a44b00d5249fae677fff0d95094bc6d0057"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xe8, 0x10, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xaaaa8}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x99, 0x6, "3669cab6bbfe04caecf6168272d40d0e22722fe8f7cd646dfc619efe1691aab0d0b7cef78b95e55248e9b6f68d6b8f7e77132fe2eb8988e3b567df8b4d551df39c3fe84f8cd7dc11729b30e0340010cdff08a894ecb122bb102e222063946b1cbe169460baa75ba823197f37c21e04550678751cdd89335c842492a5432e06d601daae7adfee8964523488d9637c13c7a30fb332fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xcc, 0x19, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa63, 0x3}}]}, {0x92, 0x6, "be3e1e8254fd151bf280d7cd0d604b52dd1f26aa301ea90d3dd979cb03a311ba84bec612b26adf72141962c2e1c924aa1a63cc8cf4a53dfcd0e36bd8e20d248acf31377e780661cca54329b05c384a5d2ec330ce247081ae7b8d6c913a70a741354597e46dd486414ac81cd56d6a9954d2d7625cda3f990f9b82c01596dc2e50e26c859d2de66245048789d6372d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x20048804}, 0x4890) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r14 = accept4(r13, 0x0, 0x0, 0x80800) setsockopt$sock_int(r14, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r14, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2.766446917s ago: executing program 2 (id=1402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @mcast2, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000080)=0x4578, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r7, 0x0, 0xffffffff000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xd613, 0xa9, &(0x7f0000000380)=""/169, 0x41000, 0x10, '\x00', 0x0, 0x19, r7, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xf, 0x0, 0x1}, 0x10, 0x17b09, r7, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.540316749s ago: executing program 3 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="980500002c0007012bbd7000ffdbdf25087c0000180001801400dd8008004700ac1414bb0800da00ff235e006c050380660503"], 0x598}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0xb, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020]}}}}]}, 0x88}}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000)="01e817652b9e95f0cfc98dcb55dfe75c2288ee0d", 0x7, r5}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESHEX=r5, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x7, 0xbb, &(0x7f0000000240)=""/187, 0x41100, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x8}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xa, 0x3, 0x3a) close(r9) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000c40)="ddac4a45", 0x4}, {0x0}], 0x2) 2.539850426s ago: executing program 0 (id=1405): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) listen(r3, 0x7f) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8800, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x44, 0x140f, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000200)={0x28, r4, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x8004) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000300)=@generic={0x0, 0x0, 0x7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f00000003c0)={'ip6gre0\x00', 0xfffffffffffffffe, 0xfffffff9}) 2.148725303s ago: executing program 4 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r3, r2, 0x26}, 0x10) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x82) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5761, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7f700004c0012802700010069703667726500003c000280050008000e00000006000f00090000000500160001000000080015005d300a0006000e000100000006000e00000000fe0500160004000000040014"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) 1.936328656s ago: executing program 1 (id=1409): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xfe, @loopback, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="fe2f6e5391700ad0c6d7f0f92f13e57de78aeecc26b014f9550381a4d2349f7e05f433bc177dfcb09e3faea0f64d8ca49366478b77930c5ca1d3da01aaa65627d2adfc408eb92b1c2e9ad10614ce6825d4ec5284919fbd51fff227470da24cd910ce68bb"], 0x18, 0x4855}, 0x24000052) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x40840) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000002056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff0335a90012000000080003000d4c30bd8cc3ae0673b90cf79db3a8edd006cf8e7a883a629e7b804b118deee96c7ad2ed9b1bd76d61010000", @ANYRES32=r11, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x581c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x1412, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bind$netlink(r2, &(0x7f0000003a00)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) 1.894555729s ago: executing program 4 (id=1410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r1], 0x58}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e66db19856922aa1f6aba1ea9a53f94a68ad2e0f8f1a862d2404efaac6c97763ff655f1d51129c8228264ee73132a4cd75b11ea4bd5cb495c6a9d2633d2e024fe79ca2d74930bb8033b51bfa1516fe2961a0af6cb1fd6edc63f01186557862649d58f2d7143271bbe247fc24258de1353ad5179b2704823e34c57382b9ac0f47502b53d741c75673558fec0507361769ce8e9912adcc86a867f379acc0ec52f7d41fa81eef5213e6f218ebda2aa21db7e07078e03b22c8af8c5e24e148584f5db6ee22825e056178f7a1", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESHEX=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x40400d4}, 0xb2614f84bd0b3a43) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000440)={&(0x7f00000001c0), 0x0, 0x20, 0x2, 0x1}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x40) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x40b942b37d0000) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @private=0xa010100}, 0xa9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x80, 0x10}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/70, 0x328000, 0x1000, 0x20, 0x4}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2bbe}, &(0x7f0000000040)=0x8) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r13 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r11, &(0x7f0000000300)={0x2c, 0x7, r12, 0x3b, r13}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r10, 0x3, 0x20, 0x6, 0xfffffffffffffff7}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r10, 0x6}, 0x8) 1.81910295s ago: executing program 3 (id=1411): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) sendfile(r3, r4, 0x0, 0x10000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x14, 0x1e, 0x301, 0x20000002, 0x400, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x1, 'V'}, &(0x7f0000001400)=0x9) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x98ae, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)='/', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) close(r7) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x12, 0x4000}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r9, @ANYRES8], 0x10) 1.753217022s ago: executing program 2 (id=1412): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r3], 0x5c}}, 0x800) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x68}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.750625707s ago: executing program 1 (id=1413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x0) close(r8) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_emit_ethernet(0x6a, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x34, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', [], "00040000"}}}}}}}, 0x0) 1.563499746s ago: executing program 2 (id=1414): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020200000004000000a01d3d3162d5adf16dbaf3125b5e36bad070fb781dde47eb63ac29256c65978c4195c829ae00a30aeee4f78133246a9524b3925709bd6ba390dad65ac03402903213eece3c14fa79573f5df2d80c1ee7f79b604c7bf7521fafdcc32a79e30d53b4d0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x7) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'macvtap0\x00'}}, 0x1e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="18150000", @ANYRES32=r0, @ANYRES16=r3], &(0x7f0000000440)='syzkaller\x00', 0xd5a2, 0x6a, &(0x7f00000000c0)=""/106, 0x41000, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0xb, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000200)=[{0x1, 0x2, 0xc, 0x9}, {0x3, 0x10003, 0xc, 0x2}, {0x3, 0x2, 0x3, 0x4}, {0x1, 0x4, 0x5, 0x3b464b351e315a1c}, {0x3, 0x1, 0x8, 0xb}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffd}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x24, r6, 0x1, 0x170bd2e, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x2000044) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x7, 0x81, {{0x8, 0x4, 0x3, 0x8, 0x20, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0xc, 0x30, 0x0, 0xb, [0xd, 0xffffffff]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r7, 0x25, 0x18, @void}, 0x10) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.505676803s ago: executing program 3 (id=1415): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000640000000180a0101000b000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000061400000010000100efffffffffffffff0000000a"], 0xc8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000)="01e817652b9e95f0cfc98dcb55dfe75c2288ee0d", 0x7, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000000100)=""/218}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x7, 0xbb, &(0x7f0000000240)=""/187, 0x41100, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0x3, 0x6}], 0x10, 0x8}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x8}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001000010027bd700403dcdf2500000000", @ANYRES32=r13, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000000540)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r13, 0x25, 0x6, @void}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 1.44679481s ago: executing program 0 (id=1416): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0xb}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x6, 0x4, 0x9e9, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r3, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, @in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}]}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000afeffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000064030000020000001d44000000000000620a20ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.37923816s ago: executing program 4 (id=1417): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) epoll_create1(0x80000) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{&(0x7f0000001180)=@can={0x1d, r1}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001200)='EP', 0x2}, {0x0}], 0x2, &(0x7f0000002880)=ANY=[], 0xd0}}], 0x1, 0x41) 1.377321268s ago: executing program 1 (id=1418): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xc]}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x24}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008801}, 0x20040000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6800000}, 0x94) 1.216794867s ago: executing program 0 (id=1419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x6, 0x0, 0x7}, 0xc) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.215025191s ago: executing program 4 (id=1420): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000030000000000000000000000850000009700000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000000000001180000000000000084000000070000000a"], 0x38}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x6, 0x43, @remote, @local, 0x20, 0x8000, 0x3, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000800)={'syztnl2\x00', &(0x7f00000006c0)={'ip_vti0\x00', r3, 0x802f, 0x7800, 0x9, 0x80000000, {{0x29, 0x4, 0x2, 0x2, 0xa4, 0x65, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0xeb, 0x1, 0x0, [{@loopback, 0x101}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x2e, 0x2, [{0x1, 0x10, "3332f1e31bc4e4e03922410a3e57"}, {0x2, 0x7, "11b1d82a1b"}, {0x7, 0x9, "5105f5e2040747"}, {0x2, 0x6, "de7f9a7d"}, {0x5, 0x2}]}, @cipso={0x86, 0x25, 0x0, [{0x6, 0x4, "469d"}, {0x1, 0x5, '8~I'}, {0x5, 0xe, "bc888e4e49904c885b2df504"}, {0x1, 0x8, "370a15063896"}]}, @lsrr={0x83, 0xb, 0xd3, [@local, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x98, 0x3, 0xc, [{@multicast1, 0x2d7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}]}]}}}}}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x40}}, 0x0) r8 = socket(0x28, 0x5, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r9, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x16, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x44000014) splice(r1, 0x0, r4, 0x0, 0x10d00, 0xf) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="e923d8", 0x3, 0x854, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) writev(r4, &(0x7f0000000780), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000040)) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}]}}]}, 0x58}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.014496856s ago: executing program 2 (id=1421): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x40080}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000004e000100000000e2ff0080000003"], 0x20}}, 0x0) 1.014300615s ago: executing program 0 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @mcast2, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000080)=0x4578, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r7, 0x0, 0xffffffff000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xd613, 0xa9, &(0x7f0000000380)=""/169, 0x41000, 0x10, '\x00', 0x0, 0x19, r7, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xf, 0x0, 0x1}, 0x10, 0x17b09, r7, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.014063928s ago: executing program 1 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) (fail_nth: 6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 717.34007ms ago: executing program 1 (id=1424): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xfe, @loopback, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="fe2f6e5391700ad0c6d7f0f92f13e57de78aeecc26b014f9550381a4d2349f7e05f433bc177dfcb09e3faea0f64d8ca49366478b77930c5ca1d3da01aaa65627d2adfc408eb92b1c2e9ad10614ce6825d4ec5284919fbd51fff227470da24cd910ce68bb"], 0x18, 0x4855}, 0x24000052) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x40840) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000004056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff0335a90012000000080003000d4c30bd8cc3ae0673b90cf79db3a8edd006cf8e7a883a629e7b804b118deee96c7ad2ed9b1bd76d61010000", @ANYRES32=r11, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x581c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x1412, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bind$netlink(r2, &(0x7f0000003a00)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) 215.471858ms ago: executing program 4 (id=1425): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="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", 0x194) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="a00300000102010300000000000000000300000408000940000000020600074000030000740002800c00028005"], 0x3a0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c01000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000200feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a0101020000000000000000000000000000000032"], 0x23c}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}}, 0x4) (async, rerun: 32) r2 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) (async) recvmsg$kcm(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f0000000600)=""/112, 0x70}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 104.560922ms ago: executing program 2 (id=1426): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) listen(r3, 0x7f) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8800, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x44, 0x140f, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000200)={0x28, r4, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x8004) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000300)=@generic={0x0, 0x0, 0x7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f00000003c0)={'ip6gre0\x00', 0xfffffffffffffffe, 0xfffffff9}) 104.21049ms ago: executing program 3 (id=1427): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x101, 0x5, 0x3ff, 0x8}, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f60000008b2f00001c00128009000100626f6e6400f32291bd0000000c00028048db31f70003"], 0x44}}, 0x0) 91.336113ms ago: executing program 1 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x1}], 0x1}, 0x4000040) (async, rerun: 64) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'ipvlan1\x00'}) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ppoll(&(0x7f0000000200)=[{r3, 0x2000}, {r4, 0x8052}, {0xffffffffffffffff, 0x6000}, {r1, 0x2}, {r1}, {r1, 0x4000}, {r0, 0x8000}, {r3, 0x288}], 0x8, &(0x7f0000000280)={0x77359400}, &(0x7f00000003c0)={[0x8]}, 0x8) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0190c200000008004500005800000000002f9078000000e0e000c800b48065580000000010000800000086dd080088be000000001000000088f7ffff00000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000047803495827e59184c680ad276b5def7880e191f34443964fe5a1e2f4f493599146daef1bd46180b813f59c5eab2d39e0cd03b02af81308a69886b4f2e2e24054be8577f2e4d065df5c997e48285a8472da8ab13a6deb21ee93000b536528d9b16feaad4fc10454ae8f71db39cf637d3908f3ab6b66e3b17dfae85", @ANYRES16, @ANYBLOB="140427bd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async) r5 = socket(0x1f, 0x1, 0xfffffff9) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) getsockname$packet(r7, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500"], 0x2c}}, 0x884) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32, @ANYRES8=r2], 0x58}}, 0x1020) (async) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="28e194b0981b68050000000000000036d140255ef074ce97ab6996db2dc0a513183449926999f727e0e0183f6aa35cd6bd844715ec17ec52630bc0a0d258695eefb90d482a242bffc71daae952ae8c", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf251400000030000180080003000600000008000300070000001c000280080003000200000008000400050000000800030004000000"], 0x44}, 0x1, 0x0, 0x0, 0x4841}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000a00ac1414000c0002800500010000000000240001"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x20048091}, 0xc000) (async) recvmsg(r0, &(0x7f0000002180)={&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000e80)=""/150, 0x96}], 0x2, &(0x7f0000002a00)=""/4109, 0x100d}, 0x141) 0s ago: executing program 4 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0xa}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x74, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x634, 0x7, 0x5, 0x0, 0x0, 0x655, 0xfffffbff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x83d, 0x7ff, 0x6, 0x2, 0x2}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r0) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r7, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r7, &(0x7f000000d6c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="26e845c8bd1b81440635d9d750351d50e3e299417a0f59b13b51a29b1c0654dcc47495faabb8608a", 0x28}], 0x1, &(0x7f0000000600)=[{0x10, 0x119, 0x80000c}], 0x10}}], 0x1, 0x8020) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001880)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r6, 0x511, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) kernel console output (not intermixed with test programs): slave_1 may have been left with an inconsistent configuration, please check. [ 117.392279][ T6647] syzkaller1: entered promiscuous mode [ 117.415642][ T6647] syzkaller1: entered allmulticast mode [ 118.041303][ T6688] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 118.116001][ T6696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.209416][ T6697] bond1: entered promiscuous mode [ 118.220865][ T6697] bond1: entered allmulticast mode [ 118.226616][ T6697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.328379][ T6688] bridge1: entered promiscuous mode [ 118.356386][ T6688] bridge1: entered allmulticast mode [ 118.383422][ T6688] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 118.417632][ T48] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.486480][ T6697] bridge2: entered promiscuous mode [ 118.492960][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 118.500761][ T6697] bridge2: entered allmulticast mode [ 118.515063][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 118.533013][ T6697] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 118.547652][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.704084][ T6719] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.717489][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.825977][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 118.920846][ T6728] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 118.929013][ T5630] block nbd1: Receive control failed (result -32) [ 118.938386][ T50] block nbd1: Receive control failed (result -32) [ 119.159030][ T6733] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.239'. [ 119.396772][ T6748] netlink: 'syz.2.242': attribute type 11 has an invalid length. [ 119.432353][ T6748] netlink: 'syz.2.242': attribute type 4 has an invalid length. [ 119.485154][ T6753] 8021q: VLANs not supported on ip_vti0 [ 119.698837][ T6761] netlink: 'syz.4.248': attribute type 8 has an invalid length. [ 119.883564][ T6771] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.995834][ T6775] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 120.236953][ T50] block nbd2: Receive control failed (result -1) [ 120.583494][ T6794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.683392][ T6796] bond2: (slave veth3): Enslaving as an active interface with an up link [ 120.738066][ T6794] __nla_validate_parse: 10 callbacks suppressed [ 120.738085][ T6794] netlink: 200 bytes leftover after parsing attributes in process `syz.0.261'. [ 120.788728][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 120.893744][ T6794] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 120.921077][ T6808] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 121.166224][ T6814] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 121.363838][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 121.414079][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 121.454825][ T6804] xt_hashlimit: size too large, truncated to 1048576 [ 121.484906][ T6832] erspan1: entered promiscuous mode [ 121.502062][ T6832] erspan1: entered allmulticast mode [ 121.529465][ T6834] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 121.943482][ T6849] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 122.053908][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 122.121972][ T6856] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 122.240752][ T6856] bond1: entered promiscuous mode [ 122.255754][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.308631][ T6859] ipvlan2: entered allmulticast mode [ 122.314342][ T6859] bond1: entered allmulticast mode [ 122.451851][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.461247][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.506048][ T6853] bond1: left promiscuous mode [ 122.518106][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.529299][ T6853] bridge1: left promiscuous mode [ 122.539188][ T6853] bridge2: left promiscuous mode [ 122.556557][ T6856] tipc: Failed to obtain node identity [ 122.568613][ T6856] tipc: Enabling of bearer rejected, failed to enable media [ 122.598158][ T6859] ipvlan3: entered allmulticast mode [ 122.611520][ T6868] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 122.637283][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 122.667521][ T6869] bond1: (slave bridge1): making interface the new active one [ 122.675175][ T6869] bridge1: entered promiscuous mode [ 122.682030][ T1177] bond1: (slave bridge1): link status up again after 0 ms [ 122.696061][ T6869] bridge1: entered allmulticast mode [ 122.705038][ T6869] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 122.732473][ T1075] bond1: (slave bridge1): link status up again after 0 ms [ 122.785239][ T1075] bond1: (slave bridge1): failed to get link speed/duplex [ 122.957562][ T6874] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 122.978175][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 123.037713][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 123.124816][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 123.189800][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 123.219711][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 123.368040][ T6892] x_tables: duplicate underflow at hook 1 [ 123.651117][ T6903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.292'. [ 123.699100][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 123.731124][ T6904] macsec0: entered promiscuous mode [ 123.772799][ T6904] veth1_macvtap: left promiscuous mode [ 123.844525][ T6904] macsec0 (unregistering): left promiscuous mode [ 123.913077][ T6901] raw_sendmsg: syz.4.293 forgot to set AF_INET. Fix it! [ 124.105502][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059470000: rx timeout, send abort [ 124.605619][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025425c00: rx timeout, send abort [ 124.614145][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059470000: abort rx timeout. Force session deactivation [ 125.114006][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025425c00: abort rx timeout. Force session deactivation [ 126.792323][ T6908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.807012][ T6931] __nla_validate_parse: 3 callbacks suppressed [ 126.807028][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 127.250080][ T6968] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 127.311695][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 127.365346][ T6974] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 127.487658][ T12] net_ratelimit: 50 callbacks suppressed [ 127.487677][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 127.511342][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.522477][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034896800: rx timeout, send abort [ 127.556852][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 127.601658][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'. [ 127.618440][ T181] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.648237][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.668211][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 127.685081][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 127.798070][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 127.917376][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 128.022612][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034895800: rx timeout, send abort [ 128.031314][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034896800: abort rx timeout. Force session deactivation [ 128.049027][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 128.104348][ T7008] syzkaller0: entered allmulticast mode [ 128.167904][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 128.279073][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 128.316400][ T7019] vcan0: tx drop: invalid da for name 0x000000000000c800 [ 128.401152][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 128.496098][ T7023] syzkaller0: entered allmulticast mode [ 128.527862][ T5831] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.530948][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034895800: abort rx timeout. Force session deactivation [ 128.536200][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 128.688207][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.697659][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.931455][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 129.097505][ T5831] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.770435][ T6992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.031518][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 131.075732][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.333'. [ 131.134235][ T7044] syzkaller0: entered allmulticast mode [ 131.153654][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 131.231710][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349c7000: rx timeout, send abort [ 131.401062][ T7060] netlink: 124 bytes leftover after parsing attributes in process `syz.2.339'. [ 131.731857][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349c7c00: rx timeout, send abort [ 131.741905][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349c7000: abort rx timeout. Force session deactivation [ 131.856733][ T7075] __nla_validate_parse: 1 callbacks suppressed [ 131.856753][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 131.890904][ T7072] lo speed is unknown, defaulting to 1000 [ 132.038129][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 132.046885][ T7075] bond3 (unregistering): Released all slaves [ 132.092220][ T7089] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 132.122281][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 132.168249][ T5841] hsr0: entered promiscuous mode [ 132.240176][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349c7c00: abort rx timeout. Force session deactivation [ 132.295021][ T7093] vcan0: tx drop: invalid da for name 0x000000000000ec00 [ 132.539646][ T12] net_ratelimit: 42 callbacks suppressed [ 132.539668][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 132.600440][ T7095] syzkaller0: entered allmulticast mode [ 132.689966][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697987][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.707296][ T57] bond1: (slave bridge1): failed to get link speed/duplex [ 132.929961][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.007427][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 133.063643][ T7126] sit0: left promiscuous mode [ 133.170814][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.194692][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ebd8800: rx timeout, send abort [ 133.249389][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.296354][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 133.328030][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.409251][ T7139] netlink: 236 bytes leftover after parsing attributes in process `syz.3.362'. [ 133.694839][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032208800: rx timeout, send abort [ 133.703360][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ebd8800: abort rx timeout. Force session deactivation [ 133.953854][ T7151] macsec1: entered promiscuous mode [ 133.961684][ T7151] bridge0: entered promiscuous mode [ 133.970150][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.046610][ T7156] syzkaller0: entered allmulticast mode [ 134.203270][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032208800: abort rx timeout. Force session deactivation [ 134.259157][ T1075] bond1: (slave bridge1): failed to get link speed/duplex [ 134.274080][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 134.284703][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 134.387355][ T1075] bond1: (slave bridge1): failed to get link speed/duplex [ 134.522410][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 134.694344][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.0.371'. [ 134.804848][ T7186] veth1_to_bond: entered allmulticast mode [ 134.831682][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 135.233555][ T7186] veth1_to_bond (unregistering): left allmulticast mode [ 135.272302][ T7186] bond0: (slave bond_slave_1): Releasing backup interface [ 135.569780][ T7202] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 135.604341][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 135.638268][ T7199] lo speed is unknown, defaulting to 1000 [ 135.783324][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.798708][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.808460][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.828368][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.842691][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.870344][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.892681][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.913965][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.922065][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.930428][ T7219] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 135.956460][ T7210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.083966][ T7212] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 136.556857][ T7246] syz_tun: entered allmulticast mode [ 137.574396][ T7264] __nla_validate_parse: 133 callbacks suppressed [ 137.574416][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.398'. [ 137.593316][ T48] net_ratelimit: 3351 callbacks suppressed [ 137.593335][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 137.701748][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.724138][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 137.747704][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 137.816590][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 137.914826][ T7285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 137.938412][ T7271] bond1: (slave veth3): Enslaving as an active interface with an up link [ 137.962699][ T7285] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 138.004761][ T7274] netlink: 200 bytes leftover after parsing attributes in process `syz.1.398'. [ 138.020677][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 138.033952][ T7283] x_tables: duplicate underflow at hook 2 [ 138.114927][ T7294] netlink: 156 bytes leftover after parsing attributes in process `syz.4.403'. [ 138.130063][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.139940][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 138.252986][ T7298] lo speed is unknown, defaulting to 1000 [ 138.259637][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 138.394386][ T7301] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 138.404659][ T7301] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 138.427490][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 138.547297][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 138.688986][ T1075] wlan1: Trigger new scan to find an IBSS to join [ 138.785261][ T7313] netlink: 80 bytes leftover after parsing attributes in process `syz.2.410'. [ 138.857352][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 138.950399][ T7320] netlink: 104 bytes leftover after parsing attributes in process `syz.2.411'. [ 138.964874][ T7320] tipc: Started in network mode [ 138.972011][ T7320] tipc: Node identity @, cluster identity 4711 [ 138.987564][ T7320] tipc: Enabling of bearer rejected, failed to enable media [ 139.015826][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 139.029814][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 139.245689][ T7326] netlink: 80 bytes leftover after parsing attributes in process `syz.2.414'. [ 139.579952][ T7244] syz_tun: left allmulticast mode [ 140.319616][ T7365] veth0_vlan: left promiscuous mode [ 140.348300][ T7365] veth0_vlan: entered promiscuous mode [ 140.370336][ T7365] team0: Device veth0_vlan failed to register rx_handler [ 140.511323][ T7379] : entered promiscuous mode [ 140.525360][ T7381] sctp: [Deprecated]: syz.3.432 (pid 7381) Use of int in maxseg socket option. [ 140.525360][ T7381] Use struct sctp_assoc_value instead [ 140.588415][ T7381] geneve2: entered promiscuous mode [ 140.603978][ T7381] geneve2: entered allmulticast mode [ 141.087235][ T7405] validate_nla: 62 callbacks suppressed [ 141.087265][ T7405] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 141.370280][ T7412] tipc: Started in network mode [ 141.388256][ T7412] tipc: Node identity 080211000001, cluster identity 4711 [ 141.422234][ T7412] tipc: Enabled bearer , priority 0 [ 141.458634][ T7419] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 141.576195][ T7419] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 141.709613][ T7427] bridge0: entered promiscuous mode [ 141.728744][ T181] wlan1: Trigger new scan to find an IBSS to join [ 141.742643][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.778688][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.816318][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.908617][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.923831][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.936616][ T7427] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 141.986095][ T7419] veth0_vlan: left promiscuous mode [ 142.018425][ T7419] veth0_vlan: entered promiscuous mode [ 142.050455][ T7419] team0: Device veth0_vlan failed to register rx_handler [ 142.093880][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.101135][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.287363][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 142.399883][ T7451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.489674][ T7455] bond2: (slave veth5): Enslaving as an active interface with an up link [ 142.550101][ T7454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.581476][ T7451] __nla_validate_parse: 13 callbacks suppressed [ 142.581496][ T7451] netlink: 200 bytes leftover after parsing attributes in process `syz.1.452'. [ 142.622541][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.453'. [ 142.655465][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 142.748928][ T7460] bond3: (slave veth5): Enslaving as an active interface with an up link [ 142.763089][ T48] net_ratelimit: 29 callbacks suppressed [ 142.763107][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 142.824654][ T5822] tipc: Node number set to 134418688 [ 142.843029][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 142.861867][ T7454] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 142.890655][ T7455] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 142.917478][ T1075] bond1: (slave bridge1): failed to get link speed/duplex [ 142.932774][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.090249][ T7463] lo speed is unknown, defaulting to 1000 [ 143.111104][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 143.148440][ T7480] xt_hashlimit: size too large, truncated to 1048576 [ 143.169832][ T7483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.459'. [ 143.238284][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 143.273842][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.316170][ T7485] bridge_slave_0 (unregistering): left allmulticast mode [ 143.378323][ T7485] bridge_slave_0 (unregistering): left promiscuous mode [ 143.389641][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.399460][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.409397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.648599][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 143.761172][ T7504] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 143.828224][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 144.014864][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 144.183908][ T7520] syzkaller1: entered promiscuous mode [ 144.196421][ T7520] syzkaller1: entered allmulticast mode [ 144.668039][ T7546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.472'. [ 144.699465][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.471'. [ 144.774888][ T12] wlan1: Trigger new scan to find an IBSS to join [ 144.885523][ T7552] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 144.976294][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 145.299757][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 145.454836][ T7578] vcan0: tx drop: invalid da for name 0x0000000000c70000 [ 145.585410][ T7581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.671306][ T7584] bond3: (slave veth5): Enslaving as an active interface with an up link [ 145.697871][ T1075] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 145.889417][ T7581] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 146.406959][ T7615] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 146.509645][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.576911][ T7625] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 146.793279][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.827843][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.808243][ T13] net_ratelimit: 34 callbacks suppressed [ 147.808260][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 147.898789][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.927341][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 148.037292][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 148.147984][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 148.277539][ T57] bond1: (slave bridge1): failed to get link speed/duplex [ 148.367522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.376755][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.407604][ T57] bond1: (slave bridge1): failed to get link speed/duplex [ 148.414950][ T7659] lo speed is unknown, defaulting to 1000 [ 148.444545][ T7660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.280372][ T7608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.516442][ T7667] __nla_validate_parse: 5 callbacks suppressed [ 149.516461][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 149.659772][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.504'. [ 149.732429][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 149.779996][ T7676] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 149.899888][ T7681] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 150.018971][ T7684] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 150.073924][ T7681] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 150.081833][ T7686] wg1: entered promiscuous mode [ 150.098540][ T7686] wg1: entered allmulticast mode [ 150.148931][ T7690] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 150.180267][ T7681] veth0_vlan: left promiscuous mode [ 150.203182][ T7681] veth0_vlan: entered promiscuous mode [ 150.247725][ T7681] team0: Device veth0_vlan failed to register rx_handler [ 150.282919][ T7693] FAULT_INJECTION: forcing a failure. [ 150.282919][ T7693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.327353][ T7693] CPU: 1 UID: 0 PID: 7693 Comm: syz.3.513 Not tainted syzkaller #0 PREEMPT(full) [ 150.327382][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.327395][ T7693] Call Trace: [ 150.327404][ T7693] [ 150.327412][ T7693] dump_stack_lvl+0xe8/0x150 [ 150.327443][ T7693] should_fail_ex+0x412/0x560 [ 150.327475][ T7693] _copy_from_user+0x2d/0xb0 [ 150.327505][ T7693] __copy_msghdr+0x3c5/0x5b0 [ 150.327530][ T7693] ___sys_sendmsg+0x213/0x360 [ 150.327548][ T7693] ? __lock_acquire+0x6b5/0x2cf0 [ 150.327576][ T7693] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.327601][ T7693] ? kstrtouint+0x6e/0xe0 [ 150.327651][ T7693] ? __fget_files+0x2a/0x420 [ 150.327673][ T7693] ? __fget_files+0x3a0/0x420 [ 150.327707][ T7693] __sys_sendmmsg+0x27c/0x4e0 [ 150.327733][ T7693] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.327759][ T7693] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 150.327817][ T7693] ? ksys_write+0x242/0x270 [ 150.327849][ T7693] ? __pfx_ksys_write+0x10/0x10 [ 150.327883][ T7693] __x64_sys_sendmmsg+0xa0/0xc0 [ 150.327904][ T7693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.327929][ T7693] do_syscall_64+0x15f/0xf80 [ 150.327958][ T7693] ? trace_irq_disable+0x3b/0x140 [ 150.327989][ T7693] ? clear_bhb_loop+0x40/0x90 [ 150.328014][ T7693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.328034][ T7693] RIP: 0033:0x7f43db19ce59 [ 150.328067][ T7693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.328083][ T7693] RSP: 002b:00007f43dc0b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.328108][ T7693] RAX: ffffffffffffffda RBX: 00007f43db415fa0 RCX: 00007f43db19ce59 [ 150.328122][ T7693] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 150.328139][ T7693] RBP: 00007f43dc0b8090 R08: 0000000000000000 R09: 0000000000000000 [ 150.328151][ T7693] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 150.328163][ T7693] R13: 00007f43db416038 R14: 00007f43db415fa0 R15: 00007fffe4b5b908 [ 150.328195][ T7693] [ 150.547815][ T7690] veth0_vlan: left promiscuous mode [ 150.557045][ T7690] veth0_vlan: entered promiscuous mode [ 150.567745][ T7690] team0: Device veth0_vlan failed to register rx_handler [ 150.735056][ T7699] syzkaller0: entered promiscuous mode [ 150.740675][ T7699] syzkaller0: entered allmulticast mode [ 150.922394][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 151.136218][ T7707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.218532][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'. [ 151.312595][ T7715] bond3: (slave veth7): Enslaving as an active interface with an up link [ 151.432668][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 151.457444][ T7707] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 151.473435][ T7708] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.519'. [ 151.484739][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.523'. [ 151.494275][ T7704] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 151.503484][ T7704] ipvlan0: entered allmulticast mode [ 151.509639][ T7704] veth0_vlan: entered allmulticast mode [ 151.531725][ T7704] team0: Device ipvlan0 failed to register rx_handler [ 151.592429][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 151.871007][ T7722] netlink: 68 bytes leftover after parsing attributes in process `syz.0.522'. [ 152.099376][ T7741] FAULT_INJECTION: forcing a failure. [ 152.099376][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 152.126894][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.3.527 Not tainted syzkaller #0 PREEMPT(full) [ 152.126920][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.126932][ T7741] Call Trace: [ 152.126940][ T7741] [ 152.126949][ T7741] dump_stack_lvl+0xe8/0x150 [ 152.126978][ T7741] should_fail_ex+0x412/0x560 [ 152.127011][ T7741] should_failslab+0xa8/0x100 [ 152.127045][ T7741] __kmalloc_noprof+0xe8/0x760 [ 152.127073][ T7741] ? sock_kmalloc+0xd6/0x160 [ 152.127100][ T7741] sock_kmalloc+0xd6/0x160 [ 152.127122][ T7741] ____sys_sendmsg+0x1c2/0x9f0 [ 152.127151][ T7741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.127179][ T7741] ? import_iovec+0x73/0xa0 [ 152.127211][ T7741] ___sys_sendmsg+0x2a5/0x360 [ 152.127230][ T7741] ? __lock_acquire+0x6b5/0x2cf0 [ 152.127255][ T7741] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.127281][ T7741] ? kstrtouint+0x6e/0xe0 [ 152.127331][ T7741] ? __fget_files+0x2a/0x420 [ 152.127354][ T7741] ? __fget_files+0x3a0/0x420 [ 152.127388][ T7741] __sys_sendmmsg+0x27c/0x4e0 [ 152.127414][ T7741] ? __pfx___sys_sendmmsg+0x10/0x10 [ 152.127442][ T7741] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 152.127529][ T7741] ? ksys_write+0x242/0x270 [ 152.127557][ T7741] ? __pfx_ksys_write+0x10/0x10 [ 152.127589][ T7741] __x64_sys_sendmmsg+0xa0/0xc0 [ 152.127608][ T7741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.127627][ T7741] do_syscall_64+0x15f/0xf80 [ 152.127653][ T7741] ? trace_irq_disable+0x3b/0x140 [ 152.127679][ T7741] ? clear_bhb_loop+0x40/0x90 [ 152.127720][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.127821][ T7741] RIP: 0033:0x7f43db19ce59 [ 152.127842][ T7741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.127856][ T7741] RSP: 002b:00007f43dc0b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.127875][ T7741] RAX: ffffffffffffffda RBX: 00007f43db415fa0 RCX: 00007f43db19ce59 [ 152.127905][ T7741] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 152.127916][ T7741] RBP: 00007f43dc0b8090 R08: 0000000000000000 R09: 0000000000000000 [ 152.127927][ T7741] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 152.127938][ T7741] R13: 00007f43db416038 R14: 00007f43db415fa0 R15: 00007fffe4b5b908 [ 152.127967][ T7741] [ 152.461986][ T7751] netlink: 'syz.4.531': attribute type 21 has an invalid length. [ 152.624555][ T7750] lo speed is unknown, defaulting to 1000 [ 152.724451][ T7765] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 152.868251][ T48] net_ratelimit: 49 callbacks suppressed [ 152.868270][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 153.088233][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.157986][ T1075] bond1: (slave bridge1): failed to get link speed/duplex [ 153.391989][ T7794] FAULT_INJECTION: forcing a failure. [ 153.391989][ T7794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.407283][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.0.541 Not tainted syzkaller #0 PREEMPT(full) [ 153.407310][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.407323][ T7794] Call Trace: [ 153.407331][ T7794] [ 153.407339][ T7794] dump_stack_lvl+0xe8/0x150 [ 153.407366][ T7794] should_fail_ex+0x412/0x560 [ 153.407398][ T7794] _copy_from_user+0x2d/0xb0 [ 153.407429][ T7794] ____sys_sendmsg+0x308/0x9f0 [ 153.407459][ T7794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.407489][ T7794] ? import_iovec+0x73/0xa0 [ 153.407522][ T7794] ___sys_sendmsg+0x2a5/0x360 [ 153.407541][ T7794] ? __lock_acquire+0x6b5/0x2cf0 [ 153.407568][ T7794] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.407594][ T7794] ? kstrtouint+0x6e/0xe0 [ 153.407644][ T7794] ? __fget_files+0x2a/0x420 [ 153.407667][ T7794] ? __fget_files+0x3a0/0x420 [ 153.407702][ T7794] __sys_sendmmsg+0x27c/0x4e0 [ 153.407729][ T7794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.407754][ T7794] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 153.407814][ T7794] ? ksys_write+0x242/0x270 [ 153.407846][ T7794] ? __pfx_ksys_write+0x10/0x10 [ 153.407881][ T7794] __x64_sys_sendmmsg+0xa0/0xc0 [ 153.407901][ T7794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.407922][ T7794] do_syscall_64+0x15f/0xf80 [ 153.407953][ T7794] ? clear_bhb_loop+0x40/0x90 [ 153.407978][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.407997][ T7794] RIP: 0033:0x7fa1fff9ce59 [ 153.408014][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.408030][ T7794] RSP: 002b:00007fa200ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.408051][ T7794] RAX: ffffffffffffffda RBX: 00007fa200215fa0 RCX: 00007fa1fff9ce59 [ 153.408065][ T7794] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 153.408077][ T7794] RBP: 00007fa200ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 153.408088][ T7794] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 153.408099][ T7794] R13: 00007fa200216038 R14: 00007fa200215fa0 R15: 00007ffd307c44d8 [ 153.408131][ T7794] [ 153.417559][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 153.722138][ T7789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.831116][ T7793] bond1: (slave veth3): Enslaving as an active interface with an up link [ 153.897980][ T7778] lo speed is unknown, defaulting to 1000 [ 153.898758][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 153.943240][ T7789] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 153.991986][ T7811] netlink: 'syz.0.543': attribute type 16 has an invalid length. [ 154.007935][ T7811] netlink: 'syz.0.543': attribute type 17 has an invalid length. [ 154.127506][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.184140][ T7811] wg1: left promiscuous mode [ 154.192395][ T7811] wg1: left allmulticast mode [ 154.226281][ T7811] veth0_vlan: left promiscuous mode [ 154.235173][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.246731][ T7811] veth0_vlan: entered promiscuous mode [ 154.320696][ T7811] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 154.329565][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.354557][ T7811] bond1: left allmulticast mode [ 154.364419][ T7811] bridge1: left allmulticast mode [ 154.383735][ T7811] bridge2: left allmulticast mode [ 154.417392][ T48] bond1: (slave bridge1): link status up again after 0 ms [ 154.437863][ T48] bond1: (slave bridge1): link status up again after 0 ms [ 154.780095][ T7828] __nla_validate_parse: 8 callbacks suppressed [ 154.780215][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 154.875345][ T7828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.079639][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 155.122931][ T7831] bond4: (slave veth7): Enslaving as an active interface with an up link [ 155.129636][ T7841] netlink: 6528 bytes leftover after parsing attributes in process `syz.3.553'. [ 155.200883][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 155.253206][ T7840] ip6tnl1: entered allmulticast mode [ 155.344992][ T7835] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 155.558592][ T7857] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 155.856977][ T7861] bond4: (slave geneve2): making interface the new active one [ 155.873641][ T7861] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 155.922249][ T1075] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.947578][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.968128][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.995929][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.182975][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.562'. [ 156.225195][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 156.468485][ T7894] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 156.587925][ T7894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.619224][ T7894] vlan3: entered allmulticast mode [ 156.624497][ T7894] bond2: entered allmulticast mode [ 156.647008][ T7894] bond2: (slave geneve3): making interface the new active one [ 156.657651][ T7894] geneve3: entered allmulticast mode [ 156.665223][ T7894] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 156.702239][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.741965][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.760392][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.785351][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.859884][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 156.874733][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.569'. [ 156.971217][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 157.091075][ T7914] netlink: 124 bytes leftover after parsing attributes in process `syz.0.572'. [ 157.816165][ T7941] netlink: 'syz.0.579': attribute type 5 has an invalid length. [ 157.864525][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a079400: rx timeout, send abort [ 157.890710][ T5822] net_ratelimit: 55 callbacks suppressed [ 157.890731][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.957237][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 158.087642][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 158.247329][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 158.297676][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.305858][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.364684][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805993e800: rx timeout, send abort [ 158.373211][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a079400: abort rx timeout. Force session deactivation [ 158.373246][ T1075] bond1: (slave bridge1): failed to get link speed/duplex [ 158.462561][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.536357][ T7970] vcan0: tx drop: invalid da for name 0x00000000f9060000 [ 158.548179][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 158.689027][ T36] bond1: (slave bridge1): failed to get link speed/duplex [ 158.873044][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805993e800: abort rx timeout. Force session deactivation [ 158.905011][ T7985] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 159.079665][ T7997] netlink: 'syz.0.592': attribute type 3 has an invalid length. [ 159.261811][ T8003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.295506][ T8007] bond1: (slave veth5): Enslaving as an active interface with an up link [ 159.381420][ T8003] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 159.595762][ T8017] vcan0: tx drop: invalid da for name 0x00000000f9ffff06 [ 159.647767][ T8022] netlink: 'syz.4.600': attribute type 30 has an invalid length. [ 159.702531][ T8022] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 159.718158][ T8022] bond2 (unregistering): Released all slaves [ 159.838415][ T8027] sctp: [Deprecated]: syz.1.603 (pid 8027) Use of int in max_burst socket option. [ 159.838415][ T8027] Use struct sctp_assoc_value instead [ 160.190601][ T8052] netlink: 'syz.1.606': attribute type 39 has an invalid length. [ 160.295948][ T8055] __nla_validate_parse: 22 callbacks suppressed [ 160.295967][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 160.316553][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 160.482647][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.609'. [ 160.659944][ T8074] netlink: 124 bytes leftover after parsing attributes in process `syz.4.610'. [ 160.798804][ T8082] netlink: 'syz.1.611': attribute type 2 has an invalid length. [ 160.842749][ T8082] netlink: 'syz.1.611': attribute type 8 has an invalid length. [ 160.874800][ T8082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.611'. [ 160.888666][ T8076] netlink: 'syz.1.611': attribute type 2 has an invalid length. [ 160.906403][ T8076] netlink: 'syz.1.611': attribute type 8 has an invalid length. [ 160.914487][ T8076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.611'. [ 161.160014][ T8109] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.224091][ T8109] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.310981][ T8109] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.389413][ T8109] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.487327][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.681784][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.695215][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.832022][ T8122] tipc: Resetting bearer [ 161.871850][ T1177] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.894501][ T1177] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.930496][ T1177] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.940801][ T1177] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.961553][ T1177] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.981114][ T1177] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.010571][ T1177] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.034210][ T1177] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.135581][ T8107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.254312][ T8107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.321886][ T8104] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.341635][ T8151] netlink: 'syz.1.624': attribute type 33 has an invalid length. [ 162.351667][ T8151] netlink: 152 bytes leftover after parsing attributes in process `syz.1.624'. [ 162.424462][ T8151] `: renamed from team0 [ 162.552201][ T8104] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.700323][ T8171] netlink: 'syz.3.629': attribute type 7 has an invalid length. [ 162.758924][ T8171] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.629'. [ 162.786286][ T8177] netlink: 124 bytes leftover after parsing attributes in process `syz.4.631'. [ 162.835548][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 162.907701][ T8104] net_ratelimit: 33 callbacks suppressed [ 162.907721][ T8104] bond1: (slave bridge1): failed to get link speed/duplex [ 162.944680][ T8183] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 163.057605][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 163.169036][ T8195] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 163.173086][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 163.300752][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 163.310120][ T8203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.417236][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 163.427271][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.487419][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.707267][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 163.821196][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 165.406547][ T8233] __nla_validate_parse: 4 callbacks suppressed [ 165.406561][ T8233] netlink: 124 bytes leftover after parsing attributes in process `syz.4.647'. [ 166.056987][ T8193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.239638][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 166.267258][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 166.337086][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 166.590340][ T8257] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 166.824452][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'. [ 167.440397][ T8297] netlink: 44 bytes leftover after parsing attributes in process `syz.3.662'. [ 167.699501][ T8302] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 167.884718][ T8309] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 167.991231][ T8314] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 168.029402][ T8107] net_ratelimit: 61 callbacks suppressed [ 168.029420][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 168.075566][ T8314] veth0_vlan: left promiscuous mode [ 168.088624][ T8314] veth0_vlan: entered promiscuous mode [ 168.122370][ T8314] `: Device veth0_vlan failed to register rx_handler [ 168.189781][ T8104] bond1: (slave bridge1): failed to get link speed/duplex [ 168.317327][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 168.419240][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 168.432665][ T8336] sctp: [Deprecated]: syz.4.673 (pid 8336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.432665][ T8336] Use struct sctp_sack_info instead [ 168.450540][ T8104] bond1: (slave bridge1): failed to get link speed/duplex [ 168.514745][ T8337] sctp: [Deprecated]: syz.4.673 (pid 8337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.514745][ T8337] Use struct sctp_sack_info instead [ 168.574141][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 168.584793][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 168.621127][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.678'. [ 168.687476][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.697308][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 168.728979][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 168.824318][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 168.927288][ T5630] Bluetooth: hci4: command 0x0405 tx timeout [ 169.100906][ T8352] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.172450][ T8354] bond5: (slave veth7): Enslaving as an active interface with an up link [ 169.257415][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 169.280938][ T8364] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 169.280938][ T8364] Please contact the netfilter-devel mailing list or update your nftables rules. [ 169.338173][ T8352] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 169.467505][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 170.834549][ T8436] __nla_validate_parse: 5 callbacks suppressed [ 170.834571][ T8436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.703'. [ 170.852403][ T8437] sctp: [Deprecated]: syz.2.706 (pid 8437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.852403][ T8437] Use struct sctp_sack_info instead [ 170.879669][ T8429] smbdirect: ib_dev[syz2] removed [ 171.269440][ T8455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.710'. [ 171.324398][ T8455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.710'. [ 171.357584][ T8455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.710'. [ 171.400728][ T8455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.710'. [ 171.443481][ T8455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.710'. [ 171.462302][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.714'. [ 171.534996][ T8468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.759031][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 171.849545][ T8473] bond2: (slave veth7): Enslaving as an active interface with an up link [ 171.882160][ T8468] netlink: 200 bytes leftover after parsing attributes in process `syz.4.714'. [ 172.275589][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058ef7400: rx timeout, send abort [ 172.775752][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058ef6c00: rx timeout, send abort [ 172.784182][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058ef7400: abort rx timeout. Force session deactivation [ 172.983829][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 173.005162][ T8493] veth1: Caught tx_queue_len zero misconfig [ 173.047577][ T8497] net_ratelimit: 682 callbacks suppressed [ 173.047596][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.071767][ T8500] batadv_slave_0: entered promiscuous mode [ 173.094163][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.110027][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.143157][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.201376][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.237249][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 173.246390][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.284112][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058ef6c00: abort rx timeout. Force session deactivation [ 173.329607][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.332290][ T8500] bridge_slave_0 (unregistering): left allmulticast mode [ 173.366450][ T8500] bridge_slave_0 (unregistering): left promiscuous mode [ 173.382188][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.384112][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.434514][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.577691][ T8519] tipc: Enabling of bearer rejected, failed to enable media [ 173.611423][ T8499] batadv_slave_0: left promiscuous mode [ 173.743619][ T8529] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 174.531440][ T8559] syz_tun: entered allmulticast mode [ 175.341363][ T8558] syz_tun: left allmulticast mode [ 175.495877][ T8581] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 175.712200][ T8589] xt_limit: Overflow, try lower: 324382443/0 [ 175.901307][ T8595] sctp: [Deprecated]: syz.2.747 (pid 8595) Use of int in max_burst socket option. [ 175.901307][ T8595] Use struct sctp_assoc_value instead [ 175.927257][ T8602] __nla_validate_parse: 5 callbacks suppressed [ 175.927275][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 176.248481][ T8609] netlink: 'syz.1.752': attribute type 10 has an invalid length. [ 176.263839][ T8609] veth0_vlan: left promiscuous mode [ 176.279452][ T8609] veth0_vlan: entered promiscuous mode [ 176.313093][ T8609] `: Device veth0_vlan failed to register rx_handler [ 176.389926][ T8614] wg1: entered promiscuous mode [ 176.407313][ T8614] wg1: entered allmulticast mode [ 176.520160][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 176.792470][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'. [ 176.805521][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 176.849232][ T8627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.863030][ T8635] netlink: 200 bytes leftover after parsing attributes in process `syz.3.758'. [ 176.900813][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d6c3800: rx timeout, send abort [ 176.909424][ T8652] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 176.923108][ T8645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.056794][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.763'. [ 177.071574][ T8649] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 177.091527][ T8650] bond3: (slave veth9): Enslaving as an active interface with an up link [ 177.103953][ T8653] netlink: 200 bytes leftover after parsing attributes in process `syz.4.763'. [ 177.133412][ T8658] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 177.143457][ T8649] veth0_vlan: left promiscuous mode [ 177.158802][ T8649] veth0_vlan: entered promiscuous mode [ 177.168159][ T8649] team0: Device veth0_vlan failed to register rx_handler [ 177.310891][ T8664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'. [ 177.400955][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059a9fc00: rx timeout, send abort [ 177.409865][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d6c3800: abort rx timeout. Force session deactivation [ 177.767645][ T8678] geneve2: entered promiscuous mode [ 177.784878][ T8678] geneve2: entered allmulticast mode [ 177.814698][ T8682] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 177.825803][ T8682] netlink: 'syz.1.774': attribute type 4 has an invalid length. [ 177.836621][ T8682] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.774'. [ 177.909562][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059a9fc00: abort rx timeout. Force session deactivation [ 178.015262][ T8688] vcan0: tx drop: invalid da for name 0x000000f500000000 [ 178.024273][ T8689] xt_hashlimit: max too large, truncated to 1048576 [ 178.080526][ T8689] netlink: 14 bytes leftover after parsing attributes in process `syz.1.777'. [ 178.150462][ T8689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.210800][ T8689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.254204][ T8689] bond0 (unregistering): Released all slaves [ 178.317037][ T5644] udevd[5644]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 178.335728][ T48] net_ratelimit: 406 callbacks suppressed [ 178.335748][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 178.354729][ T8676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.363957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.471675][ T8696] bridge3: port 1(veth13) entered blocking state [ 178.487268][ T8696] bridge3: port 1(veth13) entered disabled state [ 178.501909][ T8696] veth13: entered allmulticast mode [ 178.533883][ T8696] veth13: entered promiscuous mode [ 178.587224][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 178.708135][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 178.837470][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 178.957442][ T8717] netlink: 'syz.1.787': attribute type 1 has an invalid length. [ 178.967424][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 178.976601][ T8718] netlink: 'syz.3.788': attribute type 4 has an invalid length. [ 179.001078][ T8718] netlink: 'syz.3.788': attribute type 13 has an invalid length. [ 179.088412][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.107831][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.153801][ T8720] bond0 (unregistering): Released all slaves [ 179.227513][ T8104] bond1: (slave bridge1): failed to get link speed/duplex [ 179.367458][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 179.483833][ T8739] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 179.541108][ T8741] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 179.618047][ T8739] team0: Port device dummy0 added [ 179.690820][ T8741] team0: Port device dummy0 removed [ 179.732946][ T8741] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.007965][ T8804] __nla_validate_parse: 5 callbacks suppressed [ 181.007984][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'. [ 181.120078][ T8804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.183257][ T8807] bond5: (slave veth9): Enslaving as an active interface with an up link [ 181.198986][ T8804] netlink: 200 bytes leftover after parsing attributes in process `syz.0.808'. [ 181.249448][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 181.293749][ T8804] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 181.422001][ T8813] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 181.451593][ T8813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.466259][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'. [ 181.592258][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 181.603719][ T8816] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 182.750187][ T8751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.781834][ T8815] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 183.021740][ T8828] wg1: entered promiscuous mode [ 183.034130][ T8828] wg1: entered allmulticast mode [ 183.346397][ T8839] net_ratelimit: 41 callbacks suppressed [ 183.346415][ T8839] gretap0: mtu less than device minimum [ 183.387418][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 183.539113][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 183.569180][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.687465][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 183.717596][ T8865] SET target dimension over the limit! [ 183.739241][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 183.783905][ T8872] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.829'. [ 183.838406][ T8876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.828'. [ 183.863584][ T8869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 183.877402][ T8104] bond1: (slave bridge1): failed to get link speed/duplex [ 183.954752][ T8875] bond6: (slave veth9): Enslaving as an active interface with an up link [ 183.994344][ T8869] netlink: 200 bytes leftover after parsing attributes in process `syz.2.826'. [ 184.040021][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'. [ 184.057322][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 184.085103][ T8884] netlink: 'syz.4.833': attribute type 9 has an invalid length. [ 184.103449][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4b2c00: rx timeout, send abort [ 184.135756][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.152985][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 184.288032][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.369375][ T8099] bond1: (slave bridge1): failed to get link speed/duplex [ 184.603603][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4b3c00: rx timeout, send abort [ 184.612081][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4b2c00: abort rx timeout. Force session deactivation [ 184.753605][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.883160][ T8927] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 184.901372][ T8927] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 184.953675][ T8934] vcan0: tx drop: invalid da for name 0x0000ee0000000000 [ 185.021349][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.078024][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.111921][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4b3c00: abort rx timeout. Force session deactivation [ 185.354457][ T8939] batadv_slave_1: entered promiscuous mode [ 185.398842][ T8099] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.417490][ T8099] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.452133][ T8937] batadv_slave_1: left promiscuous mode [ 185.511031][ T8099] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.557178][ T8099] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.608541][ T8958] netlink: 'syz.4.851': attribute type 61 has an invalid length. [ 185.966463][ T8968] bridge0: left promiscuous mode [ 185.994523][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.043502][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.134695][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.149923][ T8987] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 186.208504][ T8986] __nla_validate_parse: 9 callbacks suppressed [ 186.208523][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 186.233317][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.254740][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.292445][ T8968] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 186.319137][ T8987] netlink: 'syz.4.860': attribute type 10 has an invalid length. [ 186.400602][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.854'. [ 186.429887][ T8987] veth0_vlan: left promiscuous mode [ 186.439643][ T8987] veth0_vlan: entered promiscuous mode [ 186.453514][ T8987] team0: Device veth0_vlan failed to register rx_handler [ 186.708328][ T8997] syzkaller1: entered promiscuous mode [ 186.718848][ T8997] syzkaller1: entered allmulticast mode [ 187.155079][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.206434][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.223516][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.236436][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.258302][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.268783][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.284857][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.296514][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 187.332101][ T9023] bridge0: left promiscuous mode [ 187.339888][ T9037] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 187.346946][ T9023] 8021q: adding VLAN 0 to HW filter on device ` [ 187.368621][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.433951][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.459838][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.506349][ T9042] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 187.518185][ T9023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.542281][ T9023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.560299][ T9023] veth1_vlan: left promiscuous mode [ 187.573379][ T9023] veth0_vlan: left promiscuous mode [ 187.580844][ T9023] veth0_vlan: entered promiscuous mode [ 187.591659][ T9023] veth1_vlan: entered promiscuous mode [ 187.602808][ T9023] veth1_macvtap: left promiscuous mode [ 187.610622][ T9023] veth0_macvtap: left promiscuous mode [ 187.617915][ T9023] veth0_macvtap: entered promiscuous mode [ 187.625332][ T9023] veth1_macvtap: entered promiscuous mode [ 187.640269][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.650610][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.661499][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.671386][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.683973][ T9023] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 187.691683][ T9023] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 187.705102][ T9023] bridge0: entered promiscuous mode [ 187.710985][ T9023] macsec1: left promiscuous mode [ 187.720207][ T9023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.734140][ T9023] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.748508][ T9023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.881190][ T9042] veth0_vlan: left promiscuous mode [ 187.907461][ T9042] veth0_vlan: entered promiscuous mode [ 187.945873][ T9042] team0: Device veth0_vlan failed to register rx_handler [ 187.985492][ T8104] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.011038][ T8104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.051537][ T8104] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.076389][ T8104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.135361][ T8104] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.169581][ T8104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.229230][ T8104] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.241929][ T9063] sctp: [Deprecated]: syz.1.878 (pid 9063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.241929][ T9063] Use struct sctp_sack_info instead [ 188.258521][ T8104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.407271][ T139] net_ratelimit: 19 callbacks suppressed [ 188.407292][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 188.530261][ T8945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.749820][ T9081] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 188.790235][ T9081] ip6gretap0: entered promiscuous mode [ 189.200063][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 189.357295][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 189.375272][ T8952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.526758][ T9111] Bluetooth: MGMT ver 1.23 [ 189.574470][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.733928][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 189.752350][ T9114] netlink: 'syz.0.894': attribute type 5 has an invalid length. [ 190.177268][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 190.297269][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cfb000: rx timeout, send abort [ 190.308114][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 190.589446][ T9153] netlink: 'syz.1.905': attribute type 5 has an invalid length. [ 190.606090][ T9145] bridge5: port 1(veth15) entered blocking state [ 190.617783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.619802][ T9145] bridge5: port 1(veth15) entered disabled state [ 190.635582][ T9145] veth15: entered allmulticast mode [ 190.643029][ T9145] veth15: entered promiscuous mode [ 190.658844][ T9154] bridge5: port 2(dummy0) entered blocking state [ 190.665472][ T9154] bridge5: port 2(dummy0) entered disabled state [ 190.672404][ T9154] dummy0: entered allmulticast mode [ 190.680806][ T9154] dummy0: entered promiscuous mode [ 190.706472][ T9158] dummy0 (unregistering): left allmulticast mode [ 190.714799][ T9158] dummy0 (unregistering): left promiscuous mode [ 190.721780][ T9158] bridge5: port 2(dummy0) entered disabled state [ 190.797786][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026589800: rx timeout, send abort [ 190.806280][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058cfb000: abort rx timeout. Force session deactivation [ 191.191798][ T9170] bond0: (slave dummy0): Releasing backup interface [ 191.213038][ T9179] sctp: [Deprecated]: syz.1.915 (pid 9179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.213038][ T9179] Use struct sctp_sack_info instead [ 191.268714][ T9170] bridge_slave_0: left allmulticast mode [ 191.283919][ T9170] bridge_slave_0: left promiscuous mode [ 191.301872][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.309933][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026589800: abort rx timeout. Force session deactivation [ 191.357939][ T9170] bond0: (slave bond_slave_0): Releasing backup interface [ 191.407821][ T9170] bond0: (slave bond_slave_1): Releasing backup interface [ 191.448376][ T9170] team0: Port device team_slave_0 removed [ 191.473461][ T9170] team0: Port device team_slave_1 removed [ 191.488053][ T9170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.508759][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.520448][ T9193] __nla_validate_parse: 85 callbacks suppressed [ 191.520478][ T9193] netlink: 220 bytes leftover after parsing attributes in process `syz.1.915'. [ 191.540199][ T9170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.552508][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.593196][ T9170] bond1: (slave bridge1): Releasing backup interface [ 191.607421][ T9170] bridge1: left promiscuous mode [ 191.612815][ T9170] bridge1: left allmulticast mode [ 191.634754][ T9170] bond2: (slave bridge2): Releasing backup interface [ 191.655172][ T9170] bond3: (slave veth5): Releasing backup interface [ 191.663441][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.671643][ T9170] bond3: (slave veth5): the permanent HWaddr of slave - e2:c9:3b:e9:25:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 191.701976][ T9170] bond3: (slave bridge3): Releasing backup interface [ 191.722570][ T9170] bond4: (slave geneve2): Releasing active interface [ 191.744682][ T9170] bond5: (slave veth7): Releasing backup interface [ 191.752119][ T9170] bond5: (slave veth7): the permanent HWaddr of slave - f6:9a:70:d4:29:a9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 191.780284][ T9170] bond5: (slave bridge4): Releasing backup interface [ 191.796169][ T9170] bond6: (slave veth9): Releasing backup interface [ 191.914037][ T8107] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.985124][ T8107] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.014038][ T8107] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.058605][ T8107] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.308290][ T9209] syzkaller0: entered promiscuous mode [ 192.323572][ T9209] syzkaller0: entered allmulticast mode [ 192.350669][ T9212] netlink: 148 bytes leftover after parsing attributes in process `syz.4.926'. [ 192.415598][ T9209] netlink: 'syz.0.923': attribute type 7 has an invalid length. [ 192.461340][ T9209] netlink: 'syz.0.923': attribute type 7 has an invalid length. [ 192.516853][ T181] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.527443][ T5841] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.540141][ T181] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.558598][ T181] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.578776][ T181] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.656199][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059078c00: rx timeout, send abort [ 192.855000][ T9233] sctp: [Deprecated]: syz.4.932 (pid 9233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.855000][ T9233] Use struct sctp_sack_info instead [ 192.891032][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.932'. [ 193.156361][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596c3800: rx timeout, send abort [ 193.164858][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059078c00: abort rx timeout. Force session deactivation [ 193.457596][ T139] net_ratelimit: 16 callbacks suppressed [ 193.457615][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 193.589373][ T9259] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 193.608735][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 193.622059][ T9260] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 193.664712][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596c3800: abort rx timeout. Force session deactivation [ 193.711670][ T9262] block nbd4: Unsupported socket: should be TCP or UNIX. [ 193.730708][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 193.739949][ T7620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.762446][ T9262] netlink: 'syz.0.940': attribute type 2 has an invalid length. [ 193.877188][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 194.017250][ T9269] syzkaller0: entered promiscuous mode [ 194.027738][ T9269] syzkaller0: entered allmulticast mode [ 194.073953][ T9269] syzkaller0: left promiscuous mode [ 194.082394][ T9269] syzkaller0: left allmulticast mode [ 194.131271][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.139499][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.181830][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 194.310277][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ee7400: rx timeout, send abort [ 194.328357][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 194.370048][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.437547][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 194.483474][ T9294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.493871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.564927][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.952'. [ 194.810428][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ee5c00: rx timeout, send abort [ 194.819295][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ee7400: abort rx timeout. Force session deactivation [ 194.912913][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 195.061857][ T9329] netlink: 52 bytes leftover after parsing attributes in process `syz.3.962'. [ 195.318753][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ee5c00: abort rx timeout. Force session deactivation [ 195.618722][ T9350] vcan0: tx drop: invalid da for name 0x00c7000000000000 [ 195.664694][ T9357] netlink: 'syz.1.970': attribute type 49 has an invalid length. [ 196.076423][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 196.511306][ T9398] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.982'. [ 196.556436][ T9398] veth0: entered promiscuous mode [ 196.614842][ T9398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 196.626985][ T9394] netlink: 112 bytes leftover after parsing attributes in process `syz.1.980'. [ 196.713571][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 196.801137][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 196.867645][ T9407] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.895525][ T9414] bond7: (slave veth11): Enslaving as an active interface with an up link [ 196.924127][ T9415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.931769][ T9397] veth0: left promiscuous mode [ 196.966642][ T9414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.985'. [ 197.011023][ T9418] netlink: 200 bytes leftover after parsing attributes in process `syz.0.985'. [ 197.056932][ T9420] bond4: (slave veth5): Enslaving as an active interface with an up link [ 197.072686][ T9415] netlink: 200 bytes leftover after parsing attributes in process `syz.3.984'. [ 197.144240][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'. [ 197.173572][ T9414] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 197.292564][ T9415] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 197.559355][ T9446] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 197.626292][ T9446] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 197.635619][ T9446] veth0_vlan: left promiscuous mode [ 197.643968][ T9446] veth0_vlan: entered promiscuous mode [ 197.672058][ T9446] team0: Device veth0_vlan failed to register rx_handler [ 198.364068][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 198.374068][ T9481] block nbd4: server does not support multiple connections per device. [ 198.388064][ T9481] block nbd4: shutting down sockets [ 198.427272][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1004'. [ 198.514798][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 198.547233][ T139] net_ratelimit: 45 callbacks suppressed [ 198.547252][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 198.870438][ T9503] Bluetooth: MGMT ver 1.23 [ 198.908697][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.929282][ T8945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.942093][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 198.949707][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.076908][ T9511] sch_fq: defrate 8 ignored. [ 199.112541][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 199.237242][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 199.321311][ T9521] vcan0: tx drop: invalid da for name 0x00ee000000000000 [ 199.511098][ T9520] veth1_vlan: left promiscuous mode [ 199.520365][ T9520] veth0_vlan: left promiscuous mode [ 199.528869][ T9520] veth0_vlan: entered promiscuous mode [ 199.541311][ T9520] veth1_vlan: entered promiscuous mode [ 199.615319][ T9520] veth1_macvtap: left promiscuous mode [ 199.631139][ T9520] veth0_macvtap: left promiscuous mode [ 199.640565][ T9520] veth0_macvtap: entered promiscuous mode [ 199.648510][ T9520] veth1_macvtap: entered promiscuous mode [ 199.675197][ T9520] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 199.720085][ T8945] bridge0: entered promiscuous mode [ 199.734064][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 199.742087][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.887780][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.998267][ T9548] bond8: option lacp_rate: invalid value (128) [ 200.013994][ T9548] bond8 (unregistering): Released all slaves [ 200.109984][ T9546] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 200.137409][ T9546] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 200.173017][ T9554] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 200.261063][ T9556] netlink: 'syz.4.1025': attribute type 10 has an invalid length. [ 200.292880][ T9556] veth0_vlan: left promiscuous mode [ 200.315845][ T9556] veth0_vlan: entered promiscuous mode [ 200.381185][ T9556] team0: Device veth0_vlan failed to register rx_handler [ 200.531353][ T9566] bridge0: port 2(vlan2) entered blocking state [ 200.545437][ T9566] bridge0: port 2(vlan2) entered disabled state [ 200.570703][ T9566] vlan2: entered allmulticast mode [ 200.591094][ T9566] geneve0: entered allmulticast mode [ 200.600038][ T9566] vlan2: entered promiscuous mode [ 200.605199][ T9566] geneve0: entered promiscuous mode [ 200.816903][ T9578] netlink: 'syz.4.1033': attribute type 5 has an invalid length. [ 200.876668][ T9578] geneve3: entered promiscuous mode [ 200.894119][ T9578] geneve3: entered allmulticast mode [ 200.907409][ T181] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 200.946280][ T181] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 201.029151][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 201.061251][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 201.094919][ T9599] vcan0: tx drop: invalid da for name 0x00feffff00000000 [ 201.105473][ T9597] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 201.301335][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ed9400: rx timeout, send abort [ 201.412742][ T9612] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig [ 201.518767][ T9616] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 201.532638][ T9617] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 201.546632][ T9617] team0 (unregistering): Port device team_slave_0 removed [ 201.565018][ T9617] team0 (unregistering): Failed to send options change via netlink (err -105) [ 201.580805][ T9617] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 201.592328][ T9617] team0 (unregistering): Port device team_slave_1 removed [ 201.621187][ T9616] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 201.633105][ T9616] veth0_vlan: left promiscuous mode [ 201.639840][ T9616] veth0_vlan: entered promiscuous mode [ 201.666036][ T9616] team0: Device veth0_vlan failed to register rx_handler [ 201.801512][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596dfc00: rx timeout, send abort [ 201.811108][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ed9400: abort rx timeout. Force session deactivation [ 202.060750][ T9639] vcan0: tx drop: invalid da for name 0x06fffff900000000 [ 202.097851][ T9641] __nla_validate_parse: 13 callbacks suppressed [ 202.097870][ T9641] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1052'. [ 202.171154][ T9641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1052'. [ 202.309861][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596dfc00: abort rx timeout. Force session deactivation [ 203.040439][ T9671] netlink: 'syz.0.1057': attribute type 13 has an invalid length. [ 203.068265][ T9664] netlink: 'syz.0.1057': attribute type 13 has an invalid length. [ 203.086425][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 203.122051][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 203.480708][ T9690] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1063'. [ 203.579626][ T181] net_ratelimit: 28 callbacks suppressed [ 203.579645][ T181] bond1: (slave bridge1): failed to get link speed/duplex [ 203.731444][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 203.831976][ T9699] syzkaller0: entered promiscuous mode [ 203.851526][ T9699] syzkaller0: entered allmulticast mode [ 203.888512][ T48] bond1: (slave bridge1): failed to get link speed/duplex [ 203.944114][ T9707] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 203.947706][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 203.960913][ T9707] syzkaller1: linktype set to 270 [ 204.019084][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 204.035972][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 204.127927][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.158290][ T1177] bond1: (slave bridge1): failed to get link speed/duplex [ 204.356079][ T9721] netlink: 'syz.0.1075': attribute type 13 has an invalid length. [ 204.385870][ T9721] netlink: 'syz.0.1075': attribute type 17 has an invalid length. [ 204.478914][ T9714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.528717][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.567048][ T9714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.582783][ T9730] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 204.604468][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.644350][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.689597][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.101416][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.215855][ T9719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.229170][ T9719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.355853][ T9748] block nbd2: NBD_DISCONNECT [ 205.361224][ T9748] block nbd2: Send disconnect failed -32 [ 205.368520][ T9748] block nbd2: shutting down sockets [ 205.431392][ T9721] bridge0: left promiscuous mode [ 205.440299][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.449506][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.462844][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.481043][ T9721] wg1: left promiscuous mode [ 205.485777][ T9721] wg1: left allmulticast mode [ 205.512333][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.519598][ T9721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.551835][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.565388][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.587729][ T9721] veth1_vlan: left promiscuous mode [ 205.594299][ T9721] veth0_vlan: left promiscuous mode [ 205.600650][ T9721] veth0_vlan: entered promiscuous mode [ 205.610762][ T9721] veth1_vlan: entered promiscuous mode [ 205.621384][ T9721] veth1_macvtap: left promiscuous mode [ 205.629291][ T9721] veth0_macvtap: left promiscuous mode [ 205.646633][ T9721] veth0_macvtap: entered promiscuous mode [ 205.665509][ T9721] veth1_macvtap: entered promiscuous mode [ 205.676426][ T9721] bridge0: port 2(vlan2) entered blocking state [ 205.682999][ T9721] bridge0: port 2(vlan2) entered forwarding state [ 205.695140][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.708394][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.721754][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.736193][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.756605][ T9721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.769463][ T9721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.788469][ T9721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.804261][ T9721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.818881][ T9721] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.832537][ T9721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.840830][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 205.851245][ T9721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.983745][ T10] bridge0: entered promiscuous mode [ 205.998344][ T9744] netlink: 'syz.2.1079': attribute type 3 has an invalid length. [ 206.074142][ T9714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.108005][ T9758] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 206.112151][ T9714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.214131][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1081'. [ 206.257323][ T9756] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1081'. [ 206.300118][ T9714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.310844][ T9714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.340793][ T9763] netlink: 'syz.2.1084': attribute type 1 has an invalid length. [ 206.350917][ T9756] ip6tnl1: entered allmulticast mode [ 206.450683][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 206.456835][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 206.456853][ T4945] Bluetooth: hci2: command 0x0401 tx timeout [ 206.481430][ T9770] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 206.546361][ T9714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.583657][ T9714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.663058][ T9770] veth0_vlan: left promiscuous mode [ 206.678834][ T9770] veth0_vlan: entered promiscuous mode [ 206.694526][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'. [ 206.708206][ T9770] team0: Device veth0_vlan failed to register rx_handler [ 206.788946][ T9779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 206.919370][ T9781] bond8: (slave veth13): Enslaving as an active interface with an up link [ 206.956897][ T7620] IPVS: starting estimator thread 0... [ 207.002316][ T9781] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 207.047608][ T9793] IPVS: using max 30 ests per chain, 72000 per kthread [ 207.147735][ T8104] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.163957][ T8104] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.244568][ T8104] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.274294][ T8104] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.287636][ T9804] __nla_validate_parse: 3 callbacks suppressed [ 207.287657][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'. [ 207.322030][ T8107] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.330537][ T8107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.432156][ T8107] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.456815][ T8107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.552331][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 207.568840][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1096'. [ 207.716389][ T9816] vcan0: tx drop: invalid da for name 0xfeffffff00000000 [ 207.859390][ T9824] tipc: Started in network mode [ 207.877833][ T9824] tipc: Node identity 7e13a624552c, cluster identity 4711 [ 207.904844][ T9824] tipc: Enabled bearer , priority 0 [ 207.941043][ T9829] syzkaller0: entered promiscuous mode [ 207.963646][ T9829] syzkaller0: entered allmulticast mode [ 208.322022][ T9821] tipc: Resetting bearer [ 208.384106][ T9821] tipc: Disabling bearer [ 208.617359][ T5831] net_ratelimit: 104 callbacks suppressed [ 208.617378][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.647455][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 208.728551][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 208.739623][ T9860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1113'. [ 208.757376][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 208.845865][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 208.878105][ T8107] bond1: (slave bridge1): failed to get link speed/duplex [ 208.991555][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 209.018907][ T9875] openvswitch: netlink: Flow actions attr not present in new flow. [ 209.061851][ T139] bond1: (slave bridge1): failed to get link speed/duplex [ 209.086973][ T9875] batadv_slave_1: entered promiscuous mode [ 209.368967][ T9891] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1121'. [ 209.511719][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 209.648781][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.727573][ T1177] wlan1: Trigger new scan to find an IBSS to join [ 209.798549][ T9917] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 209.909270][ T9919] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 210.370772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.381112][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 210.448223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.215759][ T9903] bridge0: port 2(vlan2) entered disabled state [ 212.223062][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.273314][ T9903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.284750][ T9903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.418725][ T9919] veth0_vlan: left promiscuous mode [ 212.426507][ T9919] veth0_vlan: entered promiscuous mode [ 212.437920][ T9919] `: Device veth0_vlan failed to register rx_handler [ 212.536354][ T9936] syzkaller0: entered promiscuous mode [ 212.558723][ T9936] syzkaller0: entered allmulticast mode [ 212.577207][ T9873] batadv_slave_1: left promiscuous mode [ 212.600191][ T8107] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.610786][ T9944] nbd: nbd0 already in use [ 212.626912][ T8107] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.647354][ T8107] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.670905][ T8107] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.691430][ T8107] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.712087][ T9944] block nbd0: NBD_DISCONNECT [ 212.725405][ T9944] block nbd0: Send disconnect failed -32 [ 212.732924][ T8107] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.765444][ T9944] block nbd0: shutting down sockets [ 212.845373][ T8107] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.867329][ T8107] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.884795][ T9952] IPVS: length: 246 != 8 [ 212.995107][ T9961] pim6reg1: entered promiscuous mode [ 213.011537][ T9960] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 213.031259][ T9961] pim6reg1: entered allmulticast mode [ 214.667743][ T9954] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 214.756571][T10020] netlink: 'syz.4.1134': attribute type 4 has an invalid length. [ 214.781066][T10020] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1134'. [ 214.892819][T10017] syzkaller0: entered promiscuous mode [ 214.941064][T10017] syzkaller0: entered allmulticast mode [ 215.000621][T10017] tipc: Started in network mode [ 215.027363][T10017] tipc: Node identity dafef502a73b, cluster identity 4711 [ 215.039081][T10017] tipc: Enabled bearer , priority 0 [ 215.044554][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'. [ 215.067002][T10016] tipc: Resetting bearer [ 215.067525][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'. [ 215.105723][T10016] tipc: Disabling bearer [ 215.133992][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 215.142049][T10037] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1140'. [ 215.177688][T10032] block nbd0: server does not support multiple connections per device. [ 215.246599][T10032] block nbd0: shutting down sockets [ 215.425208][T10045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1142'. [ 215.576626][T10053] GUP no longer grows the stack in syz.3.1144 (10053): 200000003000-20000000a000 (200000001000) [ 215.588031][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.3.1144 Not tainted syzkaller #0 PREEMPT(full) [ 215.588057][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.588069][T10053] Call Trace: [ 215.588078][T10053] [ 215.588086][T10053] dump_stack_lvl+0xe8/0x150 [ 215.588121][T10053] __get_user_pages+0x2378/0x2720 [ 215.588170][T10053] ? __gup_longterm_locked+0xc4e/0x1630 [ 215.588212][T10053] ? __gup_longterm_locked+0xc4e/0x1630 [ 215.588237][T10053] ? down_read_killable+0x1bb/0x340 [ 215.588267][T10053] __gup_longterm_locked+0xdcf/0x1630 [ 215.588297][T10053] ? lock_acquire+0x106/0x350 [ 215.588339][T10053] gup_fast_fallback+0x1d84/0x20d0 [ 215.588401][T10053] ? __pfx_gup_fast_fallback+0x10/0x10 [ 215.588423][T10053] ? futex_unqueue+0x22/0x240 [ 215.588445][T10053] ? futex_unqueue+0x22/0x240 [ 215.588465][T10053] ? futex_unqueue+0x22/0x240 [ 215.588486][T10053] ? is_valid_gup_args+0x11f/0x200 [ 215.588513][T10053] ? get_user_pages_fast+0x4d/0xb0 [ 215.588540][T10053] __iov_iter_get_pages_alloc+0x370/0xa10 [ 215.588580][T10053] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 215.588622][T10053] iov_iter_get_pages2+0x5e/0xa0 [ 215.588655][T10053] __se_sys_vmsplice+0x7c7/0x1620 [ 215.588705][T10053] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 215.588733][T10053] ? __pfx_futex_wait+0x10/0x10 [ 215.588775][T10053] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 215.588820][T10053] ? put_files_struct+0x256/0x350 [ 215.588847][T10053] ? 0xffffffffff600000 [ 215.588903][T10053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.588927][T10053] do_syscall_64+0x15f/0xf80 [ 215.588955][T10053] ? trace_irq_disable+0x3b/0x140 [ 215.588985][T10053] ? clear_bhb_loop+0x40/0x90 [ 215.589010][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.589030][T10053] RIP: 0033:0x7f43db19ce59 [ 215.589049][T10053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.589066][T10053] RSP: 002b:00007f43dc0b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 215.589088][T10053] RAX: ffffffffffffffda RBX: 00007f43db415fa0 RCX: 00007f43db19ce59 [ 215.589103][T10053] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 215.589116][T10053] RBP: 00007f43db232d6f R08: 0000000000000000 R09: 0000000000000000 [ 215.589128][T10053] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 215.589140][T10053] R13: 00007f43db416038 R14: 00007f43db415fa0 R15: 00007fffe4b5b908 [ 215.589175][T10053] [ 216.142163][T10062] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1145'. [ 216.182375][T10068] netlink: 'syz.0.1146': attribute type 4 has an invalid length. [ 216.238283][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 216.269094][T10071] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1146'. [ 216.385036][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 216.844281][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a054c00: rx timeout, send abort [ 216.998728][T10076] netlink: 'syz.3.1151': attribute type 21 has an invalid length. [ 217.344466][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a057000: rx timeout, send abort [ 217.352826][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a054c00: abort rx timeout. Force session deactivation [ 217.772264][T10117] net_ratelimit: 5 callbacks suppressed [ 217.772283][T10117] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 217.852794][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a057000: abort rx timeout. Force session deactivation [ 218.179695][T10138] netlink: 'syz.0.1170': attribute type 50 has an invalid length. [ 218.371329][T10149] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 218.641112][T10161] netlink: 'syz.3.1176': attribute type 58 has an invalid length. [ 219.020859][T10156] syzkaller0: entered promiscuous mode [ 219.041689][T10156] syzkaller0: entered allmulticast mode [ 219.105249][T10180] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 220.962668][T10194] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 220.972337][T10194] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 220.981999][T10194] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 221.275686][T10227] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 221.729240][T10246] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 221.813206][T10252] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 221.846770][T10252] veth0_vlan: left promiscuous mode [ 221.860803][T10252] veth0_vlan: entered promiscuous mode [ 221.883444][T10252] team0: Device veth0_vlan failed to register rx_handler [ 222.011262][T10254] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 222.082686][T10256] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 222.515793][T10272] __nla_validate_parse: 7 callbacks suppressed [ 222.515817][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 222.564134][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 222.825104][T10280] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 223.357030][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803229f400: rx timeout, send abort [ 223.510846][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 223.639987][T10322] No such timeout policy "syz1" [ 223.857872][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ccec00: rx timeout, send abort [ 223.866691][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803229f400: abort rx timeout. Force session deactivation [ 223.954391][T10342] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 224.109393][T10345] bond9 (unregistering): Released all slaves [ 224.366259][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ccec00: abort rx timeout. Force session deactivation [ 224.418688][T10361] netlink: 'syz.0.1231': attribute type 2 has an invalid length. [ 224.466438][T10363] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 224.554658][T10367] netlink: 'syz.1.1233': attribute type 10 has an invalid length. [ 224.601333][T10367] veth0_vlan: left promiscuous mode [ 224.609654][T10367] veth0_vlan: entered promiscuous mode [ 224.617937][T10367] `: Device veth0_vlan failed to register rx_handler [ 224.760439][T10378] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 224.840331][T10381] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1238'. [ 224.849479][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805963d000: rx timeout, send abort [ 225.349537][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805963d000: abort rx timeout. Force session deactivation [ 225.359916][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801b7b3800: rx timeout, send abort [ 225.461948][T10398] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 225.578838][T10377] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 225.692086][T10406] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 225.757230][T10406] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 225.783398][T10406] veth0_vlan: left promiscuous mode [ 225.793501][T10406] veth0_vlan: entered promiscuous mode [ 225.803592][T10406] team0: Device veth0_vlan failed to register rx_handler [ 225.868700][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801b7b3800: abort rx timeout. Force session deactivation [ 225.892984][T10413] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 226.236465][T10421] sctp: [Deprecated]: syz.3.1251 (pid 10421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.236465][T10421] Use struct sctp_sack_info instead [ 226.265574][T10427] netlink: 'syz.4.1254': attribute type 8 has an invalid length. [ 226.289121][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 226.421104][T10427] bond0: entered promiscuous mode [ 226.438569][T10427] bond_slave_0: entered promiscuous mode [ 226.456811][T10427] batadv0: entered promiscuous mode [ 226.484277][T10427] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 226.533377][T10427] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 226.577975][T10427] hsr1: entered promiscuous mode [ 226.600707][T10427] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 226.812839][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 227.054572][T10459] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 227.344399][T10478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'. [ 227.346527][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 227.424873][T10480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.458458][T10484] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1268'. [ 227.520417][T10480] bond0: (slave veth9): Enslaving as an active interface with an up link [ 227.538240][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 227.560365][T10486] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1267'. [ 227.597907][T10480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1267'. [ 227.684245][T10480] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 228.138565][T10511] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1274'. [ 228.274766][T10516] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 228.507537][T10526] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1280'. [ 228.601886][T10531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1282'. [ 228.675621][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 228.802923][T10542] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.950473][T10548] bond8: (slave veth13): Enslaving as an active interface with an up link [ 228.992687][T10542] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1283'. [ 229.041002][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1283'. [ 229.157665][T10548] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 229.588944][T10582] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1296'. [ 229.904056][T10596] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 229.957973][T10596] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 229.966193][T10596] veth0_vlan: left promiscuous mode [ 229.979171][T10596] veth0_vlan: entered promiscuous mode [ 229.992633][T10596] team0: Device veth0_vlan failed to register rx_handler [ 230.938408][T10639] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 231.180273][T10644] atomic_op ffff888057eca198 conn xmit_atomic 0000000000000000 [ 231.214608][T10644] IPVS: length: 24 != 4839384 [ 231.511132][T10656] syzkaller0: entered promiscuous mode [ 231.518130][T10656] syzkaller0: entered allmulticast mode [ 231.527713][T10656] tipc: Started in network mode [ 231.532962][T10656] tipc: Node identity 12aeadf251cb, cluster identity 4711 [ 231.541373][T10656] tipc: Enabled bearer , priority 0 [ 231.561910][T10655] tipc: Resetting bearer [ 231.620734][T10655] tipc: Disabling bearer [ 231.627557][T10660] vcan0: tx drop: invalid da for name 0x000000000000ee00 [ 231.735657][T10664] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 231.802668][T10664] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 231.872962][T10672] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 232.253471][T10690] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 232.283883][T10690] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 232.522085][T10683] veth0_vlan: left promiscuous mode [ 232.543222][T10683] veth0_vlan: entered promiscuous mode [ 232.641889][T10683] bond1: left promiscuous mode [ 232.660966][T10683] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 232.709008][T10683] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 232.752120][T10702] __nla_validate_parse: 12 callbacks suppressed [ 232.752137][T10702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'. [ 232.817570][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.886543][T10683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.957579][T10683] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.977725][T10707] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1335'. [ 233.020637][T10683] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.078605][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.246698][T10698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.333124][T10699] bond5: (slave veth17): Enslaving as an active interface with an up link [ 233.342475][T10700] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1334'. [ 233.409894][T10702] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 233.419771][ T48] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.438204][ T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.462417][T10721] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 233.574372][ T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.609256][T10719] netlink: 'syz.2.1339': attribute type 10 has an invalid length. [ 233.613201][ T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.655433][T10728] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1341'. [ 234.324194][T10761] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1350'. [ 234.395039][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1351'. [ 234.452480][T10767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.462011][T10767] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1353'. [ 234.478324][T10764] 8021q: adding VLAN 0 to HW filter on device bond9 [ 234.484847][T10767] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 234.484958][T10767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1353'. [ 234.519315][T10764] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1351'. [ 234.533094][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1351'. [ 234.595662][T10764] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 234.796717][T10776] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 234.885962][T10782] veth0_vlan: left promiscuous mode [ 234.911411][T10782] veth0_vlan: entered promiscuous mode [ 234.946156][T10782] team0: Device veth0_vlan failed to register rx_handler [ 235.003924][ T30] audit: type=1804 audit(1778903279.029:4): pid=10787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1358" name="/newroot/250/cgroup.controllers" dev="tmpfs" ino=1295 res=1 errno=0 [ 235.060423][ T30] audit: type=1800 audit(1778903279.049:5): pid=10787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1358" name="cgroup.controllers" dev="tmpfs" ino=1295 res=0 errno=0 [ 235.944109][T10830] xt_hashlimit: overflow, rate too high: 0 [ 236.647625][T10870] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 236.703803][T10878] validate_nla: 1 callbacks suppressed [ 236.703823][T10878] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 236.962303][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059465c00: rx timeout, send abort [ 237.462727][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059466c00: rx timeout, send abort [ 237.471081][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059465c00: abort rx timeout. Force session deactivation [ 237.971045][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059466c00: abort rx timeout. Force session deactivation [ 239.150068][T10841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.175171][T10883] __nla_validate_parse: 12 callbacks suppressed [ 239.175190][T10883] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1380'. [ 239.193200][T10883] netlink: 'syz.4.1380': attribute type 1 has an invalid length. [ 239.201641][T10883] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1380'. [ 239.468217][T10902] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1385'. [ 239.482623][T10901] vlan3: entered promiscuous mode [ 239.606281][T10909] wg1: entered promiscuous mode [ 239.621971][T10909] wg1: entered allmulticast mode [ 239.724376][T10903] xt_CT: No such helper "syz1" [ 240.149793][T10927] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 240.255358][T10933] netlink: 'syz.4.1390': attribute type 10 has an invalid length. [ 240.624288][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 240.681006][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'. [ 240.741722][T10944] syzkaller0: entered promiscuous mode [ 240.785403][T10944] syzkaller0: entered allmulticast mode [ 240.803203][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 240.894597][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1392'. [ 241.228966][T10965] netlink: 'syz.1.1398': attribute type 4 has an invalid length. [ 241.241224][T10962] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1396'. [ 241.250779][T10961] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 241.266428][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1396'. [ 241.269137][T10965] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1398'. [ 241.453081][T10976] vcan0: tx drop: invalid da for name 0x0000000000c70000 [ 241.577406][T10967] nbd0: detected capacity change from 0 to 63 [ 241.602287][ T5630] block nbd0: Receive control failed (result -32) [ 241.609365][ T5638] block nbd0: Receive control failed (result -32) [ 241.624624][ T5644] block nbd0: Send control failed (result -32) [ 241.644330][ T5644] block nbd0: Request send failed, requeueing [ 241.673554][ T1673] block nbd0: Dead connection, failed to find a fallback [ 241.682681][ T1673] block nbd0: shutting down sockets [ 241.688712][ T1673] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.703268][ T1673] buffer_io_error: 18 callbacks suppressed [ 241.703284][ T1673] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.717926][ T5644] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.728893][ T5644] Buffer I/O error on dev nbd0, logical block 1, async page read [ 241.737678][ T5644] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.746837][ T5644] Buffer I/O error on dev nbd0, logical block 2, async page read [ 241.754821][ T5644] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.764111][ T5644] Buffer I/O error on dev nbd0, logical block 3, async page read [ 241.772131][ T5644] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.781528][ T5644] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.789500][ T5644] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.798650][ T5644] Buffer I/O error on dev nbd0, logical block 1, async page read [ 241.806576][ T5644] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.816247][ T5644] Buffer I/O error on dev nbd0, logical block 2, async page read [ 241.824229][ T5644] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.833417][ T5644] Buffer I/O error on dev nbd0, logical block 3, async page read [ 241.841418][ T5644] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.850586][ T5644] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.858693][ T5644] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.887749][ T5644] Buffer I/O error on dev nbd0, logical block 1, async page read [ 241.950282][ T5644] ldm_validate_partition_table(): Disk read failed. [ 241.963159][T10984] netlink: 'syz.3.1404': attribute type 1 has an invalid length. [ 241.989151][ T5644] Dev nbd0: unable to read RDB block 0 [ 242.010215][ T30] audit: type=1804 audit(1778903286.029:6): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1407" name="/newroot/291/cgroup.controllers" dev="tmpfs" ino=1504 res=1 errno=0 [ 242.069027][ T5644] nbd0: unable to read partition table [ 242.078605][T10994] netlink: 'syz.3.1404': attribute type 10 has an invalid length. [ 242.113775][T10991] sctp: [Deprecated]: syz.1.1407 (pid 10991) Use of int in maxseg socket option. [ 242.113775][T10991] Use struct sctp_assoc_value instead [ 242.129952][T10994] veth0_vlan: left promiscuous mode [ 242.136942][ T30] audit: type=1800 audit(1778903286.029:7): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1407" name="cgroup.controllers" dev="tmpfs" ino=1504 res=0 errno=0 [ 242.165455][T10994] veth0_vlan: entered promiscuous mode [ 242.171751][ T30] audit: type=1800 audit(1778903286.039:8): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1407" name="cgroup.controllers" dev="tmpfs" ino=1504 res=0 errno=0 [ 242.194962][ T5644] ldm_validate_partition_table(): Disk read failed. [ 242.217729][T10994] team0: Device veth0_vlan failed to register rx_handler [ 242.229311][ T5644] Dev nbd0: unable to read RDB block 0 [ 242.265384][ T5644] nbd0: unable to read partition table [ 243.158511][T11032] IPv6: sit2: Disabled Multicast RS [ 243.244389][T11038] FAULT_INJECTION: forcing a failure. [ 243.244389][T11038] name failslab, interval 1, probability 0, space 0, times 0 [ 243.267915][T11037] tipc: Enabling of bearer rejected, failed to enable media [ 243.274752][T11038] CPU: 1 UID: 0 PID: 11038 Comm: syz.1.1423 Not tainted syzkaller #0 PREEMPT(full) [ 243.274821][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.274861][T11038] Call Trace: [ 243.274883][T11038] [ 243.274915][T11038] dump_stack_lvl+0xe8/0x150 [ 243.275001][T11038] should_fail_ex+0x412/0x560 [ 243.275125][T11038] should_failslab+0xa8/0x100 [ 243.275210][T11038] __kmalloc_cache_noprof+0x88/0x660 [ 243.275277][T11038] ? __pfx_stack_trace_save+0x10/0x10 [ 243.275346][T11038] ? rtnl_newlink+0x136/0x1bb0 [ 243.275439][T11038] rtnl_newlink+0x136/0x1bb0 [ 243.275523][T11038] ? kasan_save_track+0x3e/0x80 [ 243.275589][T11038] ? kasan_save_free_info+0x46/0x50 [ 243.275644][T11038] ? __kasan_slab_free+0x5c/0x80 [ 243.275727][T11038] ? dev_hard_start_xmit+0x2cd/0x830 [ 243.275777][T11038] ? __dev_queue_xmit+0x14d9/0x3950 [ 243.275828][T11038] ? __netlink_deliver_tap+0x5ad/0x850 [ 243.275880][T11038] ? netlink_deliver_tap+0x19c/0x1b0 [ 243.275922][T11038] ? netlink_unicast+0x730/0x8e0 [ 243.275992][T11038] ? netlink_sendmsg+0x813/0xb40 [ 243.276045][T11038] ? __pfx_rtnl_newlink+0x10/0x10 [ 243.276123][T11038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.276227][T11038] ? kasan_quarantine_put+0xbb/0x1f0 [ 243.276254][T11038] ? lockdep_hardirqs_on+0x7a/0x110 [ 243.276373][T11038] ? nlmon_xmit+0xb0/0x100 [ 243.276433][T11038] ? kmem_cache_free+0x182/0x650 [ 243.276552][T11038] ? __lock_acquire+0x6b5/0x2cf0 [ 243.276618][T11038] ? __dev_queue_xmit+0x2b6/0x3950 [ 243.276683][T11038] ? __local_bh_enable_ip+0xd0/0x130 [ 243.276746][T11038] ? lockdep_hardirqs_on+0x7a/0x110 [ 243.276813][T11038] ? __dev_queue_xmit+0x2b6/0x3950 [ 243.276865][T11038] ? __local_bh_enable_ip+0xd0/0x130 [ 243.276916][T11038] ? __dev_queue_xmit+0x2b6/0x3950 [ 243.276985][T11038] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 243.277104][T11038] ? __pfx_rtnl_newlink+0x10/0x10 [ 243.277172][T11038] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 243.277256][T11038] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 243.277330][T11038] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 243.277401][T11038] ? ref_tracker_free+0x693/0x840 [ 243.277496][T11038] ? __pfx_ref_tracker_free+0x10/0x10 [ 243.277593][T11038] netlink_rcv_skb+0x232/0x4b0 [ 243.277643][T11038] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 243.277725][T11038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.277820][T11038] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.277874][T11038] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.277934][T11038] netlink_unicast+0x75c/0x8e0 [ 243.278028][T11038] netlink_sendmsg+0x813/0xb40 [ 243.278106][T11038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.278158][T11038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 243.278226][T11038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.278295][T11038] ____sys_sendmsg+0x972/0x9f0 [ 243.278337][T11038] ? __might_fault+0xaf/0x130 [ 243.278415][T11038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.278483][T11038] ? import_iovec+0x73/0xa0 [ 243.278547][T11038] ___sys_sendmsg+0x2a5/0x360 [ 243.278589][T11038] ? __lock_acquire+0x6b5/0x2cf0 [ 243.278650][T11038] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.278776][T11038] ? __fget_files+0x2a/0x420 [ 243.278832][T11038] ? __fget_files+0x3a0/0x420 [ 243.278909][T11038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 243.278966][T11038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.279036][T11038] ? __pfx_ksys_write+0x10/0x10 [ 243.279144][T11038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.279206][T11038] do_syscall_64+0x15f/0xf80 [ 243.279279][T11038] ? trace_irq_disable+0x3b/0x140 [ 243.279343][T11038] ? clear_bhb_loop+0x40/0x90 [ 243.279401][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.279450][T11038] RIP: 0033:0x7f348e79ce59 [ 243.279491][T11038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.279530][T11038] RSP: 002b:00007f348f5db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.279573][T11038] RAX: ffffffffffffffda RBX: 00007f348ea15fa0 RCX: 00007f348e79ce59 [ 243.279604][T11038] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 243.279633][T11038] RBP: 00007f348f5db090 R08: 0000000000000000 R09: 0000000000000000 [ 243.279661][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.279691][T11038] R13: 00007f348ea16038 R14: 00007f348ea15fa0 R15: 00007ffe1ef4b228 [ 243.279768][T11038] [ 243.976949][T11034] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 244.220518][T11060] __nla_validate_parse: 6 callbacks suppressed [ 244.220537][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 244.267652][ T1177] [ 244.270040][ T1177] ====================================================== [ 244.277069][ T1177] WARNING: possible circular locking dependency detected [ 244.284120][ T1177] syzkaller #0 Not tainted [ 244.288554][ T1177] ------------------------------------------------------ [ 244.295583][ T1177] kworker/u8:8/1177 is trying to acquire lock: [ 244.301770][ T1177] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 244.311631][ T1177] [ 244.311631][ T1177] but task is already holding lock: [ 244.319018][ T1177] ffff88802bbaaae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 244.327897][ T1177] [ 244.327897][ T1177] which lock already depends on the new lock. [ 244.327897][ T1177] [ 244.338308][ T1177] [ 244.338308][ T1177] the existing dependency chain (in reverse order) is: [ 244.347343][ T1177] [ 244.347343][ T1177] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 244.355267][ T1177] lock_sock_nested+0x41/0x100 [ 244.360581][ T1177] __inet6_bind+0x30c/0xf60 [ 244.365636][ T1177] mptcp_bind+0x110/0x1d0 [ 244.370520][ T1177] __sys_bind+0x2e3/0x410 [ 244.375392][ T1177] __x64_sys_bind+0x7a/0x90 [ 244.380444][ T1177] do_syscall_64+0x15f/0xf80 [ 244.385594][ T1177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.392043][ T1177] [ 244.392043][ T1177] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 244.399809][ T1177] lock_sock_nested+0x41/0x100 [ 244.405212][ T1177] inet_shutdown+0x6a/0x390 [ 244.410271][ T1177] nbd_mark_nsock_dead+0x2e9/0x560 [ 244.415931][ T1177] recv_work+0x1c2e/0x1d40 [ 244.420898][ T1177] process_scheduled_works+0xb5d/0x1860 [ 244.427518][ T1177] worker_thread+0xa53/0xfc0 [ 244.432682][ T1177] kthread+0x389/0x470 [ 244.437306][ T1177] ret_from_fork+0x514/0xb70 [ 244.442448][ T1177] ret_from_fork_asm+0x1a/0x30 [ 244.447760][ T1177] [ 244.447760][ T1177] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 244.455423][ T1177] __mutex_lock+0x1a3/0x1550 [ 244.460565][ T1177] nbd_queue_rq+0x37b/0x1100 [ 244.465704][ T1177] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 244.471798][ T1177] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 244.478680][ T1177] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 244.485209][ T1177] blk_mq_run_hw_queue+0x348/0x4f0 [ 244.490867][ T1177] blk_mq_dispatch_list+0xd16/0xe10 [ 244.496650][ T1177] blk_mq_flush_plug_list+0x48d/0x570 [ 244.502567][ T1177] __blk_flush_plug+0x3ed/0x4d0 [ 244.507969][ T1177] __submit_bio+0x28d/0x580 [ 244.513010][ T1177] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 244.519183][ T1177] block_read_full_folio+0x599/0x830 [ 244.524999][ T1177] filemap_read_folio+0x137/0x3b0 [ 244.530562][ T1177] do_read_cache_folio+0x358/0x590 [ 244.536221][ T1177] read_part_sector+0xb6/0x2b0 [ 244.541532][ T1177] adfspart_check_ICS+0xb1/0x960 [ 244.547016][ T1177] bdev_disk_changed+0x817/0x1770 [ 244.552580][ T1177] blkdev_get_whole+0x380/0x510 [ 244.557970][ T1177] bdev_open+0x31e/0xd30 [ 244.562763][ T1177] blkdev_open+0x470/0x610 [ 244.567705][ T1177] do_dentry_open+0x785/0x14e0 [ 244.573000][ T1177] vfs_open+0x3b/0x340 [ 244.577598][ T1177] path_openat+0x2e08/0x3860 [ 244.582727][ T1177] do_file_open+0x23e/0x4a0 [ 244.587768][ T1177] do_sys_openat2+0x113/0x200 [ 244.592989][ T1177] __x64_sys_openat+0x138/0x170 [ 244.598372][ T1177] do_syscall_64+0x15f/0xf80 [ 244.603505][ T1177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.609934][ T1177] [ 244.609934][ T1177] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 244.617191][ T1177] __mutex_lock+0x1a3/0x1550 [ 244.622318][ T1177] nbd_queue_rq+0xc6/0x1100 [ 244.627355][ T1177] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 244.633438][ T1177] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 244.640301][ T1177] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 244.646837][ T1177] blk_mq_run_hw_queue+0x348/0x4f0 [ 244.652494][ T1177] blk_mq_dispatch_list+0xd16/0xe10 [ 244.658224][ T1177] blk_mq_flush_plug_list+0x48d/0x570 [ 244.664135][ T1177] __blk_flush_plug+0x3ed/0x4d0 [ 244.669549][ T1177] __submit_bio+0x28d/0x580 [ 244.674581][ T1177] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 244.680749][ T1177] block_read_full_folio+0x599/0x830 [ 244.686571][ T1177] filemap_read_folio+0x137/0x3b0 [ 244.692136][ T1177] do_read_cache_folio+0x358/0x590 [ 244.697787][ T1177] read_part_sector+0xb6/0x2b0 [ 244.703093][ T1177] adfspart_check_ICS+0xb1/0x960 [ 244.708571][ T1177] bdev_disk_changed+0x817/0x1770 [ 244.714129][ T1177] blkdev_get_whole+0x380/0x510 [ 244.719514][ T1177] bdev_open+0x31e/0xd30 [ 244.724295][ T1177] blkdev_open+0x470/0x610 [ 244.729242][ T1177] do_dentry_open+0x785/0x14e0 [ 244.734536][ T1177] vfs_open+0x3b/0x340 [ 244.739139][ T1177] path_openat+0x2e08/0x3860 [ 244.744267][ T1177] do_file_open+0x23e/0x4a0 [ 244.749309][ T1177] do_sys_openat2+0x113/0x200 [ 244.754524][ T1177] __x64_sys_openat+0x138/0x170 [ 244.759904][ T1177] do_syscall_64+0x15f/0xf80 [ 244.765032][ T1177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.771459][ T1177] [ 244.771459][ T1177] -> #3 (set->srcu){.+.+}-{0:0}: [ 244.778596][ T1177] __synchronize_srcu+0xca/0x300 [ 244.784075][ T1177] elevator_switch+0x1e8/0x7a0 [ 244.789376][ T1177] elevator_change+0x2cc/0x450 [ 244.794698][ T1177] elevator_set_default+0x36c/0x430 [ 244.800425][ T1177] blk_register_queue+0x3e9/0x4e0 [ 244.805982][ T1177] __add_disk+0x677/0xd50 [ 244.810844][ T1177] add_disk_fwnode+0xfb/0x480 [ 244.816060][ T1177] nbd_dev_add+0x72c/0xb50 [ 244.821015][ T1177] nbd_init+0x168/0x1f0 [ 244.825799][ T1177] do_one_initcall+0x250/0x870 [ 244.831115][ T1177] do_initcall_level+0x104/0x190 [ 244.836622][ T1177] do_initcalls+0x59/0xa0 [ 244.841511][ T1177] kernel_init_freeable+0x2a6/0x3e0 [ 244.847346][ T1177] kernel_init+0x1d/0x1d0 [ 244.852244][ T1177] ret_from_fork+0x514/0xb70 [ 244.857374][ T1177] ret_from_fork_asm+0x1a/0x30 [ 244.862691][ T1177] [ 244.862691][ T1177] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 244.870548][ T1177] __mutex_lock+0x1a3/0x1550 [ 244.875694][ T1177] elevator_change+0x1b3/0x450 [ 244.881018][ T1177] elevator_set_none+0xb5/0x140 [ 244.886421][ T1177] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 244.892774][ T1177] nbd_start_device+0x17f/0xb10 [ 244.898187][ T1177] nbd_genl_connect+0x165b/0x1cf0 [ 244.903765][ T1177] genl_family_rcv_msg_doit+0x22a/0x330 [ 244.909865][ T1177] genl_rcv_msg+0x61c/0x7a0 [ 244.914923][ T1177] netlink_rcv_skb+0x232/0x4b0 [ 244.920236][ T1177] genl_rcv+0x28/0x40 [ 244.924764][ T1177] netlink_unicast+0x75c/0x8e0 [ 244.930078][ T1177] netlink_sendmsg+0x813/0xb40 [ 244.935378][ T1177] ____sys_sendmsg+0x972/0x9f0 [ 244.940680][ T1177] ___sys_sendmsg+0x2a5/0x360 [ 244.945891][ T1177] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.951368][ T1177] do_syscall_64+0x15f/0xf80 [ 244.956499][ T1177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.962948][ T1177] [ 244.962948][ T1177] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 244.971568][ T1177] blk_alloc_queue+0x546/0x680 [ 244.976878][ T1177] __blk_mq_alloc_disk+0x197/0x390 [ 244.982538][ T1177] nbd_dev_add+0x499/0xb50 [ 244.987501][ T1177] nbd_init+0x168/0x1f0 [ 244.992192][ T1177] do_one_initcall+0x250/0x870 [ 244.997517][ T1177] do_initcall_level+0x104/0x190 [ 245.003010][ T1177] do_initcalls+0x59/0xa0 [ 245.007883][ T1177] kernel_init_freeable+0x2a6/0x3e0 [ 245.013635][ T1177] kernel_init+0x1d/0x1d0 [ 245.018515][ T1177] ret_from_fork+0x514/0xb70 [ 245.023643][ T1177] ret_from_fork_asm+0x1a/0x30 [ 245.028959][ T1177] [ 245.028959][ T1177] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 245.036195][ T1177] __lock_acquire+0x15a5/0x2cf0 [ 245.041590][ T1177] lock_acquire+0x106/0x350 [ 245.046633][ T1177] fs_reclaim_acquire+0x71/0x100 [ 245.052111][ T1177] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 245.058478][ T1177] __alloc_skb+0x27d/0x7d0 [ 245.063446][ T1177] tcp_send_active_reset+0x8a/0x550 [ 245.069189][ T1177] __tcp_close+0x4c5/0xfe0 [ 245.074141][ T1177] tcp_close+0x28/0x110 [ 245.078829][ T1177] inet_release+0x143/0x190 [ 245.083872][ T1177] sock_release+0x85/0x150 [ 245.088832][ T1177] rds_tcp_accept_one+0x641/0xd70 [ 245.094407][ T1177] rds_tcp_accept_worker+0x1d/0x70 [ 245.100065][ T1177] process_scheduled_works+0xb5d/0x1860 [ 245.106235][ T1177] worker_thread+0xa53/0xfc0 [ 245.111394][ T1177] kthread+0x389/0x470 [ 245.116012][ T1177] ret_from_fork+0x514/0xb70 [ 245.121143][ T1177] ret_from_fork_asm+0x1a/0x30 [ 245.126444][ T1177] [ 245.126444][ T1177] other info that might help us debug this: [ 245.126444][ T1177] [ 245.136679][ T1177] Chain exists of: [ 245.136679][ T1177] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 245.136679][ T1177] [ 245.149641][ T1177] Possible unsafe locking scenario: [ 245.149641][ T1177] [ 245.157093][ T1177] CPU0 CPU1 [ 245.162471][ T1177] ---- ---- [ 245.167839][ T1177] lock(k-sk_lock-AF_INET6); [ 245.172546][ T1177] lock(sk_lock-AF_INET6); [ 245.179581][ T1177] lock(k-sk_lock-AF_INET6); [ 245.186784][ T1177] lock(fs_reclaim); [ 245.190794][ T1177] [ 245.190794][ T1177] *** DEADLOCK *** [ 245.190794][ T1177] [ 245.198955][ T1177] 4 locks held by kworker/u8:8/1177: [ 245.204288][ T1177] #0: ffff888032abb140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 245.215175][ T1177] #1: ffffc90005a57c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 245.227975][ T1177] #2: ffff8880318e6260 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 245.238694][ T1177] #3: ffff88802bbaaae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 245.248024][ T1177] [ 245.248024][ T1177] stack backtrace: [ 245.253919][ T1177] CPU: 0 UID: 0 PID: 1177 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 245.253935][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.253946][ T1177] Workqueue: krdsd rds_tcp_accept_worker [ 245.253964][ T1177] Call Trace: [ 245.253971][ T1177] [ 245.253978][ T1177] dump_stack_lvl+0xe8/0x150 [ 245.253995][ T1177] print_circular_bug+0x2e1/0x300 [ 245.254016][ T1177] check_noncircular+0x12e/0x150 [ 245.254037][ T1177] __lock_acquire+0x15a5/0x2cf0 [ 245.254053][ T1177] ? worker_thread+0xa53/0xfc0 [ 245.254068][ T1177] ? kthread+0x389/0x470 [ 245.254085][ T1177] ? ret_from_fork+0x514/0xb70 [ 245.254106][ T1177] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 245.254125][ T1177] lock_acquire+0x106/0x350 [ 245.254139][ T1177] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 245.254182][ T1177] fs_reclaim_acquire+0x71/0x100 [ 245.254204][ T1177] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 245.254224][ T1177] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 245.254245][ T1177] ? __alloc_skb+0x27d/0x7d0 [ 245.254266][ T1177] ? __alloc_skb+0x186/0x7d0 [ 245.254288][ T1177] __alloc_skb+0x27d/0x7d0 [ 245.254311][ T1177] tcp_send_active_reset+0x8a/0x550 [ 245.254335][ T1177] __tcp_close+0x4c5/0xfe0 [ 245.254353][ T1177] tcp_close+0x28/0x110 [ 245.254368][ T1177] inet_release+0x143/0x190 [ 245.254389][ T1177] sock_release+0x85/0x150 [ 245.254407][ T1177] rds_tcp_accept_one+0x641/0xd70 [ 245.254426][ T1177] ? process_scheduled_works+0xa70/0x1860 [ 245.254442][ T1177] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 245.254464][ T1177] rds_tcp_accept_worker+0x1d/0x70 [ 245.254480][ T1177] ? process_scheduled_works+0xa70/0x1860 [ 245.254495][ T1177] process_scheduled_works+0xb5d/0x1860 [ 245.254521][ T1177] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.254539][ T1177] ? assign_work+0x3d5/0x5e0 [ 245.254555][ T1177] worker_thread+0xa53/0xfc0 [ 245.254580][ T1177] kthread+0x389/0x470 [ 245.254599][ T1177] ? __pfx_worker_thread+0x10/0x10 [ 245.254614][ T1177] ? __pfx_kthread+0x10/0x10 [ 245.254633][ T1177] ret_from_fork+0x514/0xb70 [ 245.254650][ T1177] ? __pfx_ret_from_fork+0x10/0x10 [ 245.254664][ T1177] ? __switch_to+0xc79/0x1410 [ 245.254687][ T1177] ? __pfx_kthread+0x10/0x10 [ 245.254706][ T1177] ret_from_fork_asm+0x1a/0x30 [ 245.254730][ T1177] [ 245.265885][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'.