last executing test programs: 7.237377533s ago: executing program 4 (id=1283): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000300)={@none, 0xfffffffe, 0x3, 0x0, 0xc8, 0x81, "ba96c330d9e63bef85df84d05e7c8ce01fbd5623d699024796ebbf332e3876f4be9d702149ab68878657173c4c0e3aa7926b976662d202af0511c4c288d69bf40437532a835f8d2e4d123c8e7722ef45fcd08fd66278b29698dfd2811d0a69e66673f3455d186eb1c697a8257d5a86ebeb0c05d18d025db3921ec00abfc70309"}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x108, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x34, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x30, 0xff}}, @mesh_chsw={0x76, 0x6, {0x5, 0xb, 0xa, 0x3}}, @dsss={0x3, 0x1, 0xe}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x3, 0x0, {0x4, 0x6a, 0x0, 0xa, 0x0, 0x1, 0x1}, 0x306, 0x0, 0x4}}, @ibss={0x6, 0x2, 0xfff}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1478714775ee"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x3d, 0x2a, [@peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0x7, @val=0x2f, @void}}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x3c, 0x6}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x61, 0xa8, @device_b, 0x6559, @value=@device_b, 0x8642, 0x7, @broadcast, 0x6}}]}, @NL80211_ATTR_IE={0x3d, 0x2a, [@mesh_chsw={0x76, 0x6, {0xff, 0x6, 0x11, 0x1000}}, @channel_switch={0x25, 0x3, {0x1, 0x3c, 0x8c}}, @random_vendor={0xdd, 0x2a, "b7a136adf7c1e84ed9d24b4e5545e8ba3a92bacdaf6d8b9377a35885fbe4afbc45e73bb10bde386e897d"}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0xa0, 0x6, @vifc_lcl_addr=@remote, @broadcast}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000016c0)="48ccb07946e2bbe338fe703e3a3872c0c088eeb488fb949e16edfb67b87ab87df28d6aa7968d26fdb68db7e2ab742d44e41d807d96d2cf0096e36af3ee6b489542a93f8558bed6170a35e71acf28b735f07c2f839fca35d613ce68cb94f356c3f86d8e241208df5ac4153f8c201a78d142714a5bddfb20d2b9bf2922027988d1829858549f4590d34dc6ef2af28f63a39737dcb1eed3753a4fb89d28d39983d333614a44611a550a3a86dec696305bcf7ba9cbac707ec73fbe9977763134285665623074a3db12720ecf93716d0d7cf12e6a55a91793987da3628a36de917b07e84b0314444bfad0fe31d7278081af0417dbed6a5c7c6ae083b55fb1392032aef8fadbe571a9c549b4ece33c4ac7e44ff2d10fc568bdadc0d195702f717fa52c243191fa3c6cd097a5399a863938fd8076a4f59e9cd33ae4f924897a540432daba15cf0741ea5697b03740d6f2b486d967bcbf5fb5ebb09f4377c8238cae8573bdd747303ceb5e6b8be98fea887902cf1d10abc8a5453b5f1127313ee9888b571c169285eed0d7a845671c5e9b4ae0d983", 0x191}], 0x1) 5.640442089s ago: executing program 4 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x14}}], 0x18}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f00000029c0)=[{{&(0x7f0000001180)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001200)="7420d42d4ba420a933ca459bd757d48e6668f82556c85e412e3c60466a9a7378f94033fe4e4d47d0b9e27fa5e6ad737aa0033588db0e9392c389c64611854da9f6b4b1da0230baecec47d500f7dd661d69b5360578b220d65214fedf85ecc8ef2f8057c4e0f8929ffb3bd84fada7049a0094b468c5caa7cd37a1f4c518394a052c17e11ad438eea1c202b5f08fd1decaecf27e4a3062807c683fea1d9d25", 0x9e}, {&(0x7f00000012c0)="612664dbd2d1e417790b46a01087714368ac66b4f7e611f400dfac8edb03fc0cb083bda2dc387640351a46e282070ab057d98936a572e47197f796139b53e2bec219d9778b917e940679ded57930e275be3745fa25ff5fb7ff92023fc92dba569813b0dd17b3ec4891c3fffdb6a9baa39dbbaf7e0d96112e9b5c8523d3ae5d19433b04a1cfc9995d32d39033dbaf2d11de3b9f68a2d76bca283a6116e2fb29bb7d5116c10689dbcf891e781dd2e3c2314437efda2eb98f5d576743e090f20d5895d0d097ab6ae088f102a95697e2975a4bf2fc9b4245e4fb1c608cf98dafa9352bb678", 0xe3}, {&(0x7f00000013c0)="eca428c4ad8a4bc4aa4f61776800fa2aed26f6be269868bbdc7ca985699b6f67ce219dc305ea25f2d2ed71b5c0a43ad7f1d0a1ae1e594a19677245d74d8225dd01550e7f6c0537db5cf4cb09c57dc460a8076cbd85210cfc46", 0x59}, {&(0x7f0000001440)="0b29cf94962298b9727aea7b21b07fa160d512a5d9f228505405275e2d327ed9017fc028e2ca0e94609a51a7f217cbf1bd336767a0fd320564af949b7a2d83b63ab165ae6fac23be3323eb70275ddef10ad6fe2f229a0da05b9d19015a5e1a9ee97259a434d398c6074449d0d020272681a3aed12acbffc2e8f13a7158e306728393fad7ec59a3f33f9bb51f587650ba2698f5ed981ce8376d43ca10dbd88d49414ae312ffc77bc2473a6c0750ac6ab491871e481c756a6ed533d7f5bb5f", 0xbe}, {0x0}, {&(0x7f0000001580)="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", 0xffffffb6}], 0x6, &(0x7f0000002740)=[{0xc0, 0x10c, 0xd, "335309e04755bdb65036954309a5be827c1ee9b4e2271bb96ad913e9c2fbbc88fb9dd0efe3380731a2fb50b855f0a1762f2f908452836ec869125264b689d34f2b1857a4459259d6d3e046f002049f035df4df672204689342fc6fdf1867d08d37a7daf47bdc4d8ed8c27b221e492c7b536800224c00c8ebf44e1a45a29c05900e88fb84ec5c80054f670a439dcf8f7b507d780c0ae697f6702bc9dea17607d5b4c499aae7ace6b3dc0aea2d744d"}, {0x10, 0x109, 0x7ff}, {0x100, 0x111, 0xfffffff3, "afb920f852fb7aa13190e0e619c42f9c9db982daa8c5f2f8dec5401d05481547942e10427d7f7ecbb2293974dbabd215b185574cdb4c304ba397da22d9c614ad55069e114b781c90bc99590a07ad794489d681bf2d0ec03d63dc44a686b09437449317c0879cc29faab5caa93db1421471261396969a0480e06a0df02ed47e1671c29e55dadc8465e6b5a71c7bc47a8c58dfa97df48e01f859340d698ecea28051a9043cc8ff5bc4a5b5000c9e5e1d492f6ee2004c987d8e2171acdaea6eef3789236660802a6db386053e15692373a876bdccfcd69ad9ac2ab51070940f1e8f5539dbc5e1a822bbebf530991739"}, {0x78, 0x116, 0x7, "2dc4e0eeb0a77d218cd65c73b3a29b10ac2af4ac32c3e72bc0a69d2f105a09cfa1947a6f17794ddd48751c6e7ca1e5b0b00c9419ade50f53e51c48918b291c3c5d6cfb22fae8ce5e672a0c11da2bc21adb1b198b5ef7905f1c05f7b35490d395571973"}], 0x248}}], 0x1, 0x4008020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f00000000c0)=0xfff, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000b40)=@ethtool_dump={0x3e, 0x1}}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000000)=""/8, &(0x7f0000000080)=0x53) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.246860807s ago: executing program 0 (id=1290): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000100)=@nl=@kern={0x10, 0x0, 0x0, 0x2000}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="25d14c0f8acafbab88c65c5951b9cd2ddded3576835de30ec187f3b52d6087e90955576c412caeac7219e9d7dc255b4dd643692e3dce0b90ef8d193fbbdddd5439a144b9ca25450baa823c2e6a1c3889ded8981b575cee1cc1b26786343386362781b943825c7d72aa684b6ebdde7df704a8cdd45feacffd9530e0ce4c64b8332f175e4d38fef322df0bd7e912f736066fb4b40bdf", 0x95}, {&(0x7f0000000240)="1bc9332a", 0x4}], 0x2, &(0x7f00000002c0)=[{0xb8, 0x111, 0x5, "8039ea768c3488ef6489f5bb438363789c926913c388a819ae4653f3d962961eb10591a6e70e93cef0395f8801a22f8de7042352383f4f4eff521704b3f155bf0f98112b352892140d05225bd1c8366f30f45d6ee3657a15c6d528d1e3746a6b289e00979df78d1a39e3a6a3030572cc700558ddaa2fae622a37f09bdbf144b0b3c0790ca25a9b2a709f41c79bf817c4754e5b9ac327149c3b14d9805ecb9fed6b9c3ea0db9d0d"}, {0xc8, 0x88, 0xe, "23a1f8c8de8e63fb66751bc60634ea078716623cd59f75fe421c987f7baf3631dcd98ec27455f4fa6b8a046b03bb011dd51a4ef74c499db7d086a8f18018af75a432b289c391f8664150e9d13534f6a05c07791a3ca204127b51f309127b2af6ac083264df6d8ec36706c8f921a1cf6d0fc5edcd76abbaf472c689cccb6174253bc9e9ec335e7dc6b289be3390b216b80b4c54ee0a369c5f11cde3d657857b96480d4aa56c67104ecb110d9f1b8644e9a0c5df162f876a"}, {0x48, 0x117, 0x8, "c1c509ceb77d0682454e22f592e2bdbd56dd25961990acf3c0286285a9c4fc8eb7bfb2a9cf6939f7bb8930d2aca41515480212"}, {0x88, 0x109, 0xffffffff, "c2dffa4823529e87291fe2f87071f1cfd5b51405e6594984dc4dfaea17680eff6b922c0bb62af0c80b986586125738266405dd8331c9761bf4f81cfabcfbb26e8799900267dc15915273bd461992ddbb90625cac50c32f6caa849cba2ad3e23ea19cf6e5876ff9c49e715de9e7d42a0037"}], 0x250}, 0x0) pwritev(r2, &(0x7f0000000800)=[{&(0x7f0000000580)="c7f91de4d4f8f2f265e869d7a34a871c71cf58a1e86a5d35dd8edafdc3dd2007b7141fcbe5ea8e1533d88a57916ff2227d953909f55dcb924f75853caeef58ac286df9c476da5d465089d97d2ec276da425593fa081706072475dc09fab535f6fda62c25e831955fe515e7711dbaf032b74ad4c0aef1c40bbff2f861c70a12f97ac318d826856982bdbb3517fd64ca2c313e8bfcc3a1eb265710539a253bd51ba1a03100ec04a0c14b8d35900e73f7bac3aa29dc326ed35122078d80e7c121d67e4cc39f1ab6049094150860955b9a9899", 0xd1}, {&(0x7f0000000680)="3217a5437d6e17f193746abb8aa59a1fc55712c6def673df6ea44141351f134011f427a30778404da88fc6c162ec748c01a7ac79b2a207192b1f453620bf4566828bc9789b5769818718efb9cefa93e9994fabad1eafc30ef363392880d250c1d0f866df083deb0582871cfb54e175a698b9c4d15a4896270b1bfe1e9af5e3a47f6b4d23cf1c553af153fe3fc42e88f278cec98fc658058f1fb2c1824aecb163c148426342bc6d6cedb302fd7c5db63cd0fdbdd6185f0e7fa6b0aad7d990f39f", 0xc0}, {&(0x7f0000000740)="5c3d89e467e7f1988bf13b0d4279c92331757906e57ce2f92bf8c6364b9098f761e9ad12de540a02ae797553f8456b668edb53da3a24fdd66ad9919d2037b9ff555b84746b9224944b095ca01708556943caa78efae904e65c8a605aaf25acb15b4abb446dc9850d5040a1b1404cc71e176b12", 0x73}, {&(0x7f00000007c0)}], 0x4, 0xfffffffa, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000840)={'ip6tnl0\x00', 0x200}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x61, 0x80000000, 0x0, 0x10000, 0x1, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x2, 0x8, @void, @value, @value=r0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth1_to_hsr\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x2f, 0x30, 0x2, 0x0, 0x4, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8000, 0x45, 0x72e}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30f) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000a00)={{0x8, 0x2, 0xd, 0x8, 0x6}, [{0x650, 0x2b4, 0x1, 0x8}]}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000c80)={0x0, 0x7, 0xb3, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001080)={{r0}, r6, 0x4, @unused=[0x5, 0x81, 0x448b, 0x7fffffff], @devid=r7}) bind$unix(r1, &(0x7f0000002080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x50, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6339}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0fedbaae4759"}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=@mpls_getroute={0x24, 0x1a, 0x604, 0x70bd26, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x5, 0xfd, 0x4, 0xfe, 0x2}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000054) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002500)={'syztnl1\x00', &(0x7f0000002480)={'ip6_vti0\x00', r4, 0x29, 0x0, 0x48, 0x8, 0x44, @mcast2, @mcast2, 0x20, 0x7, 0x4, 0x5}}) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) write(r10, &(0x7f0000002540)="14736a3ef5ed7af867dc3267e2560b8dd169ce619b055f14e2f1bca324ffbfed31ca3be841f131c868809306868ec51e6a229675919416c73338b477f1b4b81eead94604c5b32c942b4784c7d1fd49bf3969a0d866ecb800ba48782ba27246ce41f7da87e5f62074662f3b2bd4ba93ceff247a302b84469b51454ba216014eb4439cdc070b1f0fe940a1f34ca820b2b922a88a2d2aeaecdc426913c8e37edfcb7ebf820f780b0df3c7242f78a7897c180c5ed20fd9be1ee24470497cc14d3440e592546196c47a25600ffaa3930a3fc6e6b945a012218268d70e942752b416938250f7ae54bfbe1ca6ed67fdba6facec0c048c3c7d", 0xf5) write$cgroup_subtree(r0, &(0x7f0000002640)={[{0x2b, 'io'}, {0x2d, 'cpuset'}]}, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000003780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003740)={&(0x7f00000026c0)={0x1060, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x10, 0x3, 0x2, 0x7, 0x1, 'syz0\x00', "e0ea046e81c3863fe7d642c7cc062d3e289707f66533921ca62e2159ec01122e", "5646d0c1251359e31d6d008d4ab5c8e0519670bfa5f7a95163a805b61c04d9e1", [{0x5, 0x97, {0x2, 0x6}}, {0x6, 0x10, {0x0, 0x7}}, {0x10, 0x1, {0x3, 0x5}}, {0x7, 0x200, {0x1, 0x23}}, {0x5, 0x8, {0x3, 0x7f}}, {0x5130, 0x8, {0x3, 0x101}}, {0x0, 0x9, {0x3, 0x80000000}}, {0x9, 0xf4, {0x2, 0x7443}}, {0x9, 0xdc39, {0x3, 0x80000000}}, {0x98b, 0x1, {0x1, 0x2}}, {0x200, 0x5, {0x1, 0xb0}}, {0x7, 0x4, {0x1, 0x7ff}}, {0x6, 0x4, {0x2, 0x4}}, {0x5, 0x3, {0x3, 0x1}}, {0x5, 0x5, {0x2, 0x8}}, {0x8f, 0x4, {0x3, 0x1e}}, {0x6, 0x7, {0x2, 0x6}}, {0x9, 0xfff8, {0x1, 0xf44c}}, {0x2, 0x626, {0x1, 0x80}}, {0x8, 0x5, {0x3, 0x81}}, {0x3, 0x99, {0x2, 0x7}}, {0x6, 0x2, {0x1, 0xfffff000}}, {0x7a, 0x0, {0x2, 0x4}}, {0x1, 0x401, {0x2, 0xc}}, {0x9, 0x80, {0x0, 0x5}}, {0x68f, 0x5, {0x1}}, {0x7f, 0x0, {0x0, 0x3ff}}, {0x8, 0x5, {0x3, 0x1}}, {0x5, 0xd7c4, {0x2, 0x80000000}}, {0xfff, 0x2, {0x1, 0x6}}, {0xfffb, 0x3ff, {0x2, 0x9}}, {0x80, 0x54, {0x2, 0xfffffe3a}}, {0x8, 0x8, {0x0, 0x5}}, {0xd, 0x0, {0x0, 0x1b}}, {0x815a, 0x8, {0x2, 0x2}}, {0xe, 0x4, {0x3, 0xfffffffc}}, {0x81, 0x7, {0x3, 0x8}}, {0x0, 0x3ff, {0x0, 0xffff}}, {0x0, 0x68, {0x3, 0x1}}, {0x7, 0x1000, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x10001}, 0x8, 0x3, 0x0, 0x7, 0x1c, 'syz0\x00', "672cb3bee4abb72646368ad3a5e85e110c9b5324e909bc8a04126ed014eddd4c", "51cb17ba54aec109ac11ad0ded89432ee5fcffc42654fbd88e69bf09ab4988e3", [{0x101, 0x1, {0x3, 0xa00000}}, {0xb, 0x800, {0x2, 0xff}}, {0x5, 0x9, {0x1, 0x9}}, {0xbb0, 0x8, {0x1, 0x7f}}, {0x2, 0xc, {0x1, 0x7ff}}, {0x3, 0x0, {0x0, 0x4}}, {0x4, 0x400, {0x2, 0x1}}, {0x81, 0xb93f, {0x0, 0x4}}, {0x2, 0x9, {0x1, 0xf0c0}}, {0xf52f, 0x9, {0x1, 0x3d9}}, {0x4, 0x3, {0x6, 0x3}}, {0x82, 0x9134, {0x2, 0x7fffffff}}, {0x0, 0x8, {0x2, 0x4}}, {0x3, 0x968, {0x0, 0x8e}}, {0x7, 0x0, {0x2, 0x3}}, {0x1, 0x6, {0x0, 0x8246}}, {0x5, 0x31, {0x2, 0xf8}}, {0x1, 0xb, {0x2, 0x7}}, {0x2, 0x3, {0x2, 0x8000}}, {0x9, 0xe18, {0x1, 0x9}}, {0xca07, 0xf6, {0x0, 0x3}}, {0xbf, 0x4, {0x0, 0x101}}, {0x7, 0x8, {0x0, 0x8}}, {0x0, 0x1, {0x0, 0x3ff}}, {0xe, 0x6, {0x0, 0x10000}}, {0x2, 0x5, {0x2}}, {0x7, 0x6, {0x3, 0xa1c}}, {0x1, 0x9524, {0x0, 0x7}}, {0x7, 0x3, {0x1, 0xd57}}, {0xfff, 0x1000, {0x1, 0x3}}, {0x4, 0x18d4, {0x0, 0xb068}}, {0x100, 0x5, {0x0, 0x8}}, {0x5, 0x1, {0x0, 0xfff}}, {0x3, 0x2, {0x3, 0x7}}, {0x7, 0x1000, {0x1, 0x6}}, {0x8, 0x0, {0x1, 0x5}}, {0x3, 0xdeb5, {0x3, 0x400}}, {0x4, 0x6, {0x0, 0x4}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0xaf8a, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xa}, 0x3, 0x90, 0x3, 0xf, 0x4, 'syz1\x00', "30ddf38c99d654044220b86fa1fdb3aaec47df277a5d71d911e65288f4e47008", "7a706a53b59e5c834480f8d228eb606ba35badb3a49570b92cb2121fd9a00eac", [{0xc, 0xd6fc, {0x2, 0x3be}}, {0x5, 0xfff, {0x2, 0xbf}}, {0x7c, 0x9, {0x1, 0x6}}, {0xae4d, 0x4, {0x3}}, {0x2426, 0x0, {0x0, 0x5}}, {0xe, 0x403b, {0x2, 0x2663}}, {0x400, 0x1000, {0x1, 0x9}}, {0xff1e, 0x1, {0x2, 0x5}}, {0x1, 0xffff}, {0x3, 0x8001, {0x3, 0x461}}, {0x7, 0x6, {0x3, 0xff12}}, {0x3, 0x18, {0x3, 0x9}}, {0x7, 0x3, {0x2}}, {0x3, 0x1, {0x3, 0x8}}, {0x8, 0x4, {0x1, 0x5ee}}, {0x4, 0x7bd5, {0x1, 0xff}}, {0x8, 0x10, {0x3, 0x2}}, {0x3, 0x9, {0x3, 0x6}}, {0xb, 0x95, {0x3, 0x1}}, {0x8, 0x6, {0x1, 0x10c3}}, {0x3ff, 0x6, {0x1, 0x1}}, {0x9, 0x8, {0x3, 0xb}}, {0x3, 0x92ae, {0x3, 0x4}}, {0x9535, 0x4, {0x1, 0x4}}, {0xf0a2, 0x2, {0x1, 0x3}}, {0x8d, 0x1ff, {0x2, 0x800}}, {0x2, 0x7132, {0x1, 0x2}}, {0x1, 0x6, {0x0, 0x6}}, {0x6495, 0x80, {0x3, 0x4}}, {0x6, 0x6, {0x0, 0xfffffffb}}, {0x8001, 0x0, {0x0, 0xfffffb8d}}, {0x8, 0x5, {0x1, 0xd}}, {0xfff3, 0x40, {0x0, 0x5}}, {0xfffd, 0x6777}, {0xffff, 0xc6, {0x0, 0x3}}, {0x52, 0x9, {0x0, 0x6}}, {0x2, 0x1, {0x0, 0x3f}}, {0x4, 0x12, {0x1, 0x8}}, {0xd, 0x1449, {0x0, 0x10001}}, {0x6, 0x6d, {0x2, 0xbc}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x8, 0x0, 0xf2, 0x0, 0x20, 'syz1\x00', "d8c5d899a05f1c45e40e9e5fb73c390deb6fb3054703fa59e861d9eba531cc06", "f7b4bc57188fb6c85442d1fe64d9d4b66373babffcc886642740f39911c5d7b1", [{0x7fff, 0x4, {0x1, 0x9}}, {0xae5e, 0x80, {0x3, 0x5}}, {0xaaa, 0x5, {0x3, 0x4}}, {0x1, 0x3f, {0x0, 0xbeeb}}, {0x3, 0x6, {0x1}}, {0xfffb, 0x3, {0x3, 0x8}}, {0xc, 0x8, {0x0, 0x5}}, {0x7, 0x8, {0x1, 0x8}}, {0x4000, 0x9, {0x0, 0x1000}}, {0x4, 0x2, {0x0, 0x9}}, {0x6, 0x2, {0x1, 0x5}}, {0x9f, 0x7, {0x0, 0xfff}}, {0x40, 0x8, {0x1, 0x5}}, {0xa549, 0x1, {0x2, 0x1b4}}, {0x7, 0xff80, {0x0, 0x2}}, {0x5, 0x7c4, {0x3, 0x6}}, {0x9, 0x0, {0x0, 0x7f}}, {0x5, 0x0, {0x0, 0xcfe9}}, {0x5, 0x5, {0x0, 0xfffffff3}}, {0xcd, 0x3, {0x0, 0xfffffffe}}, {0x81, 0x8, {0x0, 0x2}}, {0x0, 0x1, {0x0, 0xe}}, {0x8, 0x7fff, {0x1}}, {0x7d44, 0x7, {0x0, 0x1ac}}, {0x400, 0x4, {0x2, 0x6}}, {0x8, 0x3}, {0xf43f, 0xea, {0x1, 0x6}}, {0x5, 0x8001, {0x0, 0xffffff81}}, {0x4, 0x5, {0x2, 0x9}}, {0x1, 0x7, {0x2, 0x2}}, {0x6, 0xfff7, {0x2, 0x4}}, {0x2, 0x5, {0x0, 0x2}}, {0x3ff, 0x84f, {0x2, 0x8}}, {0x101, 0x0, {0x3, 0xfffffffa}}, {0x6, 0xd3, {0x0, 0x1}}, {0x8, 0x272, {0x3, 0x3}}, {0x0, 0x800, {0x2, 0x4}}, {0x1, 0x7, {0x1, 0x6}}, {0x2, 0x5, {0x0, 0x9f8}}, {0x200, 0x0, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3}, 0xfe, 0x5a, 0x1ff, 0x400, 0x5, 'syz1\x00', "1c32ad2b3c130390a27eee6bcf04c00298a38c6af8f86d3a77193b4fd11659d9", "19acb4c48bbd8b683ea691dae12bd806fe5088119bf59437edc6ebcc327b98de", [{0x8, 0x5f4, {0x3, 0x1}}, {0xc, 0xf, {0x2, 0xa}}, {0x8, 0x4, {0x1, 0x3}}, {0x2, 0xce0, {0x2, 0xbeb}}, {0x6, 0x6, {0x2, 0x5}}, {0x800, 0x4, {0x1, 0x8}}, {0x0, 0x3, {0x3, 0x2}}, {0xf, 0x1000, {0x2, 0x2}}, {0x1, 0x2, {0x3, 0xd8}}, {0x6, 0x6, {0x2, 0x4}}, {0x8, 0x2, {0x2, 0x4}}, {0x6, 0x18f6, {0x0, 0x6}}, {0x5, 0x8000, {0x2}}, {0x2, 0xb, {0x3}}, {0x5, 0x3, {0x0, 0x5ae}}, {0x2000, 0x2}, {0x8, 0x2, {0x0, 0xad}}, {0x4, 0x9084, {0x1, 0x5}}, {0xffff, 0x5, {0x3}}, {0x785c, 0x2, {0x0, 0x1}}, {0x100, 0x7ff, {0x0, 0xcbc}}, {0x85, 0x6, {0x0, 0x7}}, {0xd7, 0x0, {0x1, 0xc1eb}}, {0x7, 0x2, {0x3, 0x2}}, {0x2, 0x0, {0x2, 0x100}}, {0x35e4, 0x5, {0x2, 0xf58e}}, {0x1, 0x200, {0x2, 0xcb}}, {0x7ff, 0x800, {0x3, 0x5}}, {0xb, 0x6160, {0x1, 0x5}}, {0x1fe, 0x40, {0x2, 0xe6cd}}, {0xff9f, 0x7, {0x0, 0x6}}, {0x0, 0xc, {0x2, 0x8}}, {0xffff, 0x3ff, {0x0, 0xd}}, {0xc7b, 0x2, {0x1}}, {0x3ee, 0x7, {0x1, 0x2}}, {0x6, 0x49eb, {0x2, 0x8}}, {0x9, 0x2}, {0x1, 0xa749, {0x1, 0xa}}, {0x7, 0xfeff, {0x0, 0x1}}, {0x8, 0x1, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{}, 0x9c, 0x0, 0x8, 0x1, 0xd, 'syz0\x00', "db9982bbbac8c549917a89db64586d24c582ff33eaa594ebbf9c1e5308a49d05", "21b9ec5cc71bdc17ee72994576690f871b9869094c9e2b6542ecdc06ce6b6d42", [{0x2, 0xe30f, {0x1, 0x5}}, {0xd, 0x6, {0x2, 0x17d8}}, {0xfff6, 0xb, {0x1, 0x4}}, {0xa5, 0x6, {0xeaa7c125825411c6}}, {0x7, 0xaa85, {0x2, 0x7}}, {0x5000, 0x1}, {0x5, 0x5d9d, {0x2, 0x2}}, {0x2d, 0x6, {0x1, 0xc62c}}, {0x2, 0x8, {0x3, 0xbdbf}}, {0x2, 0x6, {0x3}}, {0xfffa, 0xa6, {0x0, 0x2}}, {0xfffa, 0x5, {0x2, 0x9}}, {0x9, 0x941, {0x1, 0xfffffffe}}, {0x6a96, 0x2, {0x1, 0x8}}, {0x2, 0x1ff, {0x3, 0xc2000000}}, {0x1, 0xb, {0x0, 0x9}}, {0x10, 0x6, {0x2, 0x5}}, {0x2, 0xa}, {0x200, 0x7fff, {0x2, 0x9}}, {0x6, 0x1, {0x0, 0x7ff}}, {0x0, 0x87}, {0x5, 0xdba, {0x2, 0xc}}, {0x5, 0x9, {0x1, 0x5}}, {0x1, 0x9000, {0x1, 0x3}}, {0x2, 0x1, {0x1, 0xfffffffe}}, {0x101, 0x2, {0x1, 0xa}}, {0x2, 0x5, {0x3, 0x10}}, {0x0, 0xfe00, {0x0, 0x80000001}}, {0x7, 0x4, {0x2, 0x7fffffff}}, {0x1, 0x7, {0x0, 0xdd}}, {0xe58e, 0x40, {0x2, 0x5}}, {0x7, 0x101, {0x1, 0xffffffec}}, {0xfffc, 0x6, {0x3, 0x7}}, {0x3ad, 0x2, {0x2, 0xbb}}, {0x6, 0x0, {0x3, 0x3ff}}, {0x5, 0x8, {0x3, 0x4}}, {0x3, 0x2, {0x1, 0x5}}, {0x8, 0xcbd, {0x1}}, {0x1, 0x1, {0x2, 0x1ee}}, {0xfffa, 0x5, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x10000}, 0x2, 0x6, 0x9, 0x6, 0x0, 'syz1\x00', "cb0ba4e3bb786708a3ced594106a0fdd6bfbfca83359dad79aea56631696df5a", "d5a10ed94350e72022180991b8d72ef1c3aee5d64fddafcaa9aea78bfffa707f", [{0x5abc, 0x6, {0x2, 0x8}}, {0x800, 0x0, {0x2, 0xe}}, {0x2, 0x185b, {0x2, 0x2}}, {0x9, 0x9, {0x0, 0x5}}, {0xa8fe, 0x1, {0x1, 0xc1}}, {0x0, 0x0, {0x3}}, {0x8, 0xf5, {0x0, 0xa}}, {0xf15e, 0x5, {0x2, 0x7253}}, {0x1a6, 0xfffb, {0x0, 0x5}}, {0x327, 0xe, {0x1, 0x9b}}, {0x2, 0x8e, {0x1, 0x4}}, {0x4, 0x9, {0x2, 0x80}}, {0x1, 0x1000, {0x0, 0x200}}, {0x4, 0x7fff, {0x3, 0x9}}, {0x7, 0x9, {0x0, 0x10000}}, {0xf14, 0x7fff, {0x0, 0x2}}, {0xf800, 0xba9, {0x1, 0x6}}, {0x4, 0x7, {0x1, 0x6dbc}}, {0xff, 0xe, {0x0, 0x1}}, {0x0, 0xfff9, {0x3, 0x5}}, {0x100, 0xa6a3, {0x0, 0x3}}, {0x0, 0x7ff, {0x0, 0x9}}, {0x7, 0x8000, {0x3, 0x2}}, {0x85f, 0x9005, {0x0, 0x1ff}}, {0xc, 0x7, {0x0, 0x409}}, {0x9, 0x2, {0x2, 0x7}}, {0x3, 0x2, {0x1, 0x3}}, {0x5, 0xb, {0x1, 0x5}}, {0x9, 0x5, {0x1, 0xc69}}, {0x9, 0x8d86, {0x1, 0x3}}, {0xcad, 0xd0, {0x1, 0x6}}, {0x9, 0x7, {0x0, 0x80000000}}, {0x8, 0x2, {0x2, 0xc291}}, {0x5, 0x8000, {0x2}}, {0x5, 0x3, {0x0, 0x1}}, {0x4, 0x81, {0x0, 0x57b6}}, {0x5, 0x101, {0x2}}, {0xfff7, 0x8001, {0x3, 0xd}}, {0x8, 0x401, {0x3, 0xb02}}, {0x7, 0x3, {0x3}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40000}, 0x10000050) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003800)=@o_path={&(0x7f00000037c0)='./file0\x00', r2, 0x4000, r3}, 0x18) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000003840)=0xa, 0x4) getsockopt$IP_SET_OP_VERSION(r9, 0x1, 0x53, &(0x7f0000003880), &(0x7f00000038c0)=0x8) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000003940), 0x10) 4.99020967s ago: executing program 0 (id=1294): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x7, 0x2) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0x3, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 4.615745802s ago: executing program 4 (id=1296): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000007000020000000080019bbcbca4d720d8e9880000085950000000000d46a69f03b6a64c01964d729626205884343796e19631080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 4.54615311s ago: executing program 0 (id=1300): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000180)={@mcast1, @remote, 0x20, 0x20}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000027c0)={'syztnl2\x00', &(0x7f0000002740)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x8, 0x9, 0x12, @local, @local, 0x7, 0x8000, 0x2, 0x2}}) sendmsg$inet(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002800)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}, @rr={0x7, 0x1b, 0x28, [@multicast2, @rand_addr=0x64010100, @loopback, @multicast1, @loopback, @remote]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x11, "f4c87199417898e00a13f3878493b9"}, {0x6, 0x3, "a7"}, {0x5, 0x7, "a447760d13"}, {0x9, 0x10, "21b6b4fdcaf42352e3b8623081a3"}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xc, "1c14c3486a64c7764259"}, {0x7, 0x3, "cb"}, {0x1, 0x7, "33485eba56"}, {0x6, 0x9, "b74f25b0c5b97f"}]}, @rr={0x7, 0x7, 0x66, [@broadcast]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "924ec4378f89"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x99}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc605}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @rand_addr=0x64010101}}}], 0x138}, 0x24008801) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x5fffff7e}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x88}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000851000000400000085000000720000001800000000100000000000000000000095000000000000009500000000000000850000000a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r6, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x64000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900000000000c000100000100000000000008000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4.030971013s ago: executing program 4 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101101, 0x0) close(r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.932687755s ago: executing program 1 (id=1306): socket$kcm(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045040038000000000001907864010100ac1414aa0c00907888400000450600020066000c106afe6f4a869c1cd12980010a010102e00000027df30ef95e2940"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103900000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a20fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x38, 0xffffffffffffffff, &(0x7f00000003c0)) write(r1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000000c0)=r4, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000001b40)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x1000, 0x3, {{0x3c, 0x4, 0x0, 0x5, 0xf0, 0x64, 0x0, 0x1e, 0x4, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x44, 0xc4, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x1}, {@private=0xa010100, 0xff}, {@remote, 0x2}, {@empty, 0x9}, {@multicast1, 0x100}, {@multicast1, 0xdbf}, {@remote, 0xe}]}, @ssrr={0x89, 0x1f, 0x3d, [@dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0x6c, 0x1, 0x3, [{@loopback, 0x5}, {@rand_addr=0x64010102, 0x7}, {@remote, 0x8}, {@remote, 0x1}, {@loopback, 0xe01e}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@multicast2, 0x9}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x23, 0xa9, [@rand_addr=0x64010101, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @broadcast, @local]}, @ra={0x94, 0x4}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000020000000000000003000000fe35f3000800000001d30000070000003954018002000000b52e8000080000009500000000000000d3a950281f7889a7c6482a8af128e821bc183c4f1ed3f77e87228630011652c0ed83e9745ad8e1a01c200da27b25a41eb5d406fc3b47c7ef58f416e83f020c3e3220b8adfeefa7694ccc56ae1656227e"], &(0x7f0000000640)='GPL\x00', 0x5a8, 0xf0, &(0x7f0000000680)=""/240, 0x41100, 0x20, '\x00', r6, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x2, 0x9, 0xe}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000009c0)=[0x1, r7, r8], &(0x7f0000000a00)=[{0x2, 0x5, 0xe, 0x4}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x8, 0xb}, {0x1, 0x1, 0x7, 0x4}], 0x10, 0xb95}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r5, 0x20, &(0x7f0000000140)={&(0x7f0000000500)=""/239, 0xef, 0x0, &(0x7f00000003c0)=""/74, 0x4a}}, 0x10) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}, {&(0x7f0000000440)="739135680a1d6fb520a135d74fcb507ba32aad7141e7c84382b075f75900bfba6841728e5b4c8a67abb35cf32dabf4feff1183ecaeead6a4c72e99892e55e2159959e12d4c06b8bb0e3b92a227bcddfc9de9b16bac13757c6dfa3c8764ea3fea50e0664cf70a842c69d3e914d4fcef3d553f0cd60f1ddb1074f8e570e868e2068ca79d988a43bfd31c69e3b1393380bd163b85f4b6b15e", 0x97}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 3.78288435s ago: executing program 3 (id=1307): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0xb9}]}}}]}, 0x3c}}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0xb9}]}}}]}, 0x3c}}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r5, 0x2, 0x70bd2a, 0x2000000}, 0x14}}, 0x7d437d9176d759a6) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf2509000200736d7a3000000000080053"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) r15 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r15, 0x0, 0x30, &(0x7f0000000d80)={0x7, {{0x2, 0x4e21, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110) (async) setsockopt$inet_MCAST_MSFILTER(r15, 0x0, 0x30, &(0x7f0000000d80)={0x7, {{0x2, 0x4e21, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x28, 0x1, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r16, {0xb}, {0xffff, 0xf}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0x897, 0x6, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x28, 0x1, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r16, {0xb}, {0xffff, 0xf}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0x897, 0x6, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r3, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 3.739025055s ago: executing program 1 (id=1308): r0 = socket(0x10, 0x803, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x40e0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) (async) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000012"], 0x108}}], 0x1, 0xc040) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010428bd70000300000000000000", @ANYRES32=r5, @ANYBLOB="00000000051c0000340012800e00010069703665727370616e0000002000028004001200050016", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) 3.377151114s ago: executing program 0 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fefffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4012000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 3.245957731s ago: executing program 1 (id=1311): getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) socketpair(0x4, 0x6, 0x40, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x5, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}}, 0x4000000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000200)={0x0, 0x6, 0x2}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x190, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x164, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x45b0}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6604}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffff931}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}]}, 0x190}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbf}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008034}, 0x4000080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x40001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r3, 0x200, 0x3, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x41001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x891) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000ac0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000b00)=0xc) connect$inet6(r1, &(0x7f0000000b40)={0xa, 0x4e20, 0x1, @local, 0xfffffff9}, 0x1c) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000b80)="1650af757d2c51f4d9f694ca2955e4815ac2db717845fed615a3dc87b5e8d1c11e004797cf63dfd8bdc9b7be3cbc9187bc67e8434db0d5a636ca8ef503ef7c5524ad33b13130682828041096ff364941d1a1cd17fa27c6b70d73afcb3bee9ee8c183987c2ba913dd6635ef61a5238612277a68efe28f731b7aed829505e0fd67756e66ff8fc4501449944114b13120b617172f409c0511d88fa5daa3197032aab8c0404f738f5b332f0cd7b4fbcb5e9e2a09899b06ed879bba9fea67fcfbc105a31895800f6c1928b0a801d32248e3113591b13315e136ba557ed720842500a7c387769098fd809dc289ea5f432ba5f88429a1") setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000c80)=0x81, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x78, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001000)={'gre0\x00', &(0x7f0000000f40)={'sit0\x00', r6, 0x700, 0x3de1ace7bbfefca5, 0x7, 0x9, {{0x20, 0x4, 0x1, 0x3f, 0x80, 0x66, 0x0, 0xf5, 0x29, 0x0, @private=0xa010101, @multicast1, {[@timestamp={0x44, 0x28, 0xa8, 0x0, 0x5, [0x7, 0x9, 0xf, 0x2, 0x4, 0x62, 0x2, 0x3d63c1ca, 0x1]}, @rr={0x7, 0xb, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xcb, 0x1, 0x6, [{@rand_addr=0x64010100, 0x101}, {@loopback, 0x401}]}, @rr={0x7, 0xb, 0xd6, [@broadcast, @empty]}, @noop, @lsrr={0x83, 0xb, 0x87, [@empty, @private=0xa010102]}, @lsrr={0x83, 0x7, 0x50, [@local]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x114, r11, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x114}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r13, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x801) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000001340)={'filter\x00', 0x4}, 0x68) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r13, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x40, 0x2f}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x24040114) 3.244995919s ago: executing program 3 (id=1312): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000002c0)=0x5293, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x7fffffff, 0x4) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x0) 3.231085564s ago: executing program 2 (id=1313): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf677}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdc34}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0x2c}}, 0x44041) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000180)=0xf6ee, 0x4) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x400, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8001, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0xfffffffffffffdf3}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 3.103097821s ago: executing program 2 (id=1314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000ad00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x24044080) 3.078521012s ago: executing program 1 (id=1315): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x7) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f00000003c0)="11eb534bfc0b", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010020118110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf910000000000cecb959f7f7d9ea300850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2.906339737s ago: executing program 2 (id=1316): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 2.771115908s ago: executing program 2 (id=1317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000680)={@broadcast, @random="0086ffff00", @void, {@x25={0x805, {0x3, 0x2f, 0x27}}}}, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280035c710000108000000000000000000000000ca39bd7ed278119af5dddca41296336788372a86213b7ffb2fb8bf9cf45e9a26939524e4037bfe4e5a3a8fce4fe9f9fd81d176c0ca29f0bf2d1051d7d3546b0da19e84bd47d48142cd9ceedbc92cf5ae", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) epoll_create1(0x0) epoll_create1(0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x40000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000400)=@getae={0x11c, 0x1f, 0x300, 0x70bd26, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d2, 0x2, 0xff}, @in=@empty, 0x3ff, 0x3507}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e21, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @migrate={0x50, 0x11, [{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, @in=@empty, 0x2b, 0x0, 0x0, 0x3504, 0x0, 0x2}]}, @algo_auth={0x5b, 0x1, {{'poly1305-generic\x00'}, 0x98, "22eef03c84a0d75a28c7faf7af3a77f69e2e0f"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075c, 0xfffffffe}}]}, 0x11c}}, 0x4810) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r0}, 0x18) 2.327104311s ago: executing program 3 (id=1318): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'vcan0\x00', @random="0003230c1100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) listen(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004380)=ANY=[], 0x128}}, 0x8041) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="2a4bead0f28cdba38a9540844572d729dbfb9a0ea2348943f83548969e331f204276176eb181e02e6674aeb5e97d0c6de3393e029ecea638bf35b1643be194f2f504eaafd8abde", 0x47}, {&(0x7f00000000c0)="60732360fb06df9531c416571adc63aad6eebd8d59ddbfc6005bf39dbd0119fd9190592497aeb2d93cbd3a6387571c95937c445c8ba9d959a12705582b929d4f899434641be1e07da3bca434b8483542b21e5861e19b19c02692b93d094d965e53427b9dc62f9ce19a165091294bad44f52570ba3ee97757b127a1ea024dbf151dcacd7ea947d181bff101ea956c37c246c9ddc767995f21be1831b293aef5fe229b6728677450b85ded64b608f039f04b24e3c43f5cc8b2ff935e9bd8ac0c07d4c384a724c49570dff28f1b13de642f20193df5b9c21854b04975483e4f3d7b69637bf025d28d67721ed159544d36", 0xef}, {&(0x7f00000001c0)="5681176be1c6655a4633aed73ba79e5de0b1d5ba5e66422ad7af8035d02a9735ba8f331e3bcc588c378a2e08da3c42b6fda735ff67dc00a731ab5e613719252feb24e2bd75357c2322360fdb95606d61ff4e0c39f7630231421979d2bd1f39bbfee50657590ad38fff67ee19228476e12bf673f533b3b6afd3d4ac5b107c02df3583513722d5e3bf8b4b5db8dc37c4586cb333f303fa694b82a8c5bb", 0x9c}, {&(0x7f0000000280)="e8cf473a166767cd2daa9995fe19bfb4a334629f3860d86d351b050295344f2c27c779b83159deccd00011755629599c7a9c9e88cf3ac2f6b42412bafceb02bf5573ee9e46e21c93aac6510a5e", 0x4d}, {&(0x7f0000000300)="c886c6143618281e040706cf63356eff19a466cba76b6701ec34510a49f520e77cdb990fbac254f4ec8fd26811f0979cb7aa18f80005493734b6b3520bcb10aedca792b80f1ad5dbfac0c0ce263e23d2e0ea", 0x52}, {&(0x7f0000000380)="767f4bb22812d9c4d5e6ce0fadf891c6f6b4371bf1c86fcf1147c4a8439341013ee113dadc208e00c21d925d1bf9ebe6ed8acfe9e71a4452c3f972336e85d433bc340faa4c90d5c559a10d5b04cc3203105e931e2313a27a4d70b308b5f85c0d4ca4226fa3ad3b630bcf78824ceb281b930a23716262e2cb", 0x78}, {&(0x7f0000000400)="0d0515fdb9f8866a2772245399f38791a7c58da85512f4f51c61295c239b1f7e0d35db870026ece9979e2760791108cd8cd31c3670c7a10d94955bbe41202334308fee607458d74150b69bb4c462580967420cdb1b5fc95466a33c41433a4144cb401af6d76cc2e85287687e7419c55b205fcedd8d70e53bc650ca91b73aeb2aebd26154d163ca1e5142ff100ba2a7864ed10fef55dfe99d1c0c7d6010d9aa822490c564738d5c0f7e4ea0a0ab76afa4a55a194ea068800beb8a5d565f2a59534dec4f1827b34516067415231f8f06af70dba3853b10bddb4155aaf10c", 0xdd}], 0x7) 2.229735402s ago: executing program 3 (id=1319): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x26, 0x1, 0x5) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}, @TCA_EM_META_RVALUE={0x66, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e0063d9b6db1dd4827bffff02000000010000060000000008000f0009"], 0x24}, 0x1, 0x0, 0x0, 0x2052}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000200)={0x2c, 0xa, r6, 0x1}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r6, 0x1000000, r7}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x4, 0xe, 0x2, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f00000002c0)=0x1c, 0x4) 1.186459335s ago: executing program 0 (id=1320): sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e001073"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1201}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=@deltclass={0x80, 0x29, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x5}, {0xa, 0xfff1}, {0x1, 0xd}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xce1d}]}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0xa5}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x3f}}, @TCA_RATE={0x6, 0x5, {0x10, 0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x2008000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x24, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x89}, @generic={0x7, 0x2, 0x4, 0x9, 0x4}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0xc8, &(0x7f0000000940)=""/200, 0x1e00, 0x20, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xe, 0x7fff, 0x8}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000ac0)=[{0x2, 0x1, 0xe, 0x9}, {0x2, 0x5, 0x5, 0xa}, {0x2, 0x4, 0x3, 0x7}, {0x3, 0x3, 0xf, 0x6}, {0x2, 0x4, 0x1, 0x3}, {0x1, 0x1, 0xe, 0x3}, {0x0, 0x3, 0xd, 0x6}, {0x2, 0x4, 0x4, 0x4}, {0x1, 0x2, 0x9, 0x1}]}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 1.154683654s ago: executing program 4 (id=1321): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) r2 = socket(0x1e, 0x80a, 0xffffffff) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x28, 0xa, 0xffff3bcb) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff1, 0x7}, {0xfff3, 0x9}, {0xffff, 0x10}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x1) unshare(0x400) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r7) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf251f0000000800020003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @private=0xa010101}, 0x0, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="6ee94eb1c7202730baf5497f04a4", 0xe}], 0x1, &(0x7f0000000600)=[{0x108, 0x118, 0x4, "bd04cecfb216f2677b8a577434c85b921d15fd758a351fe1da09c05c90f71e18cada50c96d97f3a77ee609c79917722d5b842e2cfbfc510ff34f1ea47f5392a76e3debd816c764b0b67d71371749afe9ffc624c8f37e0b06f19d50b21ce3cdc1f58d2ced8412d36251d94f3a483e96e11404df7d587491d95dc97ba80bf8151f3a8382e4b72afbeef3d4f9365a86b559a625a13451ff60896f12ad911937b71234b6d8c4395bf6e92afdc65df36154200262f21a8582cd8578c062d748d7565d948c06c3b2c9a216fc25dff02db6a9960dd5e3a7c8285f0f7dddb77737c7ec42fe93323e95b17c95045f1c948919b468682b3d6a7c84df"}, {0xb0, 0xff, 0x7, "99c16c5488c9f5bd572b9df2da17bc5107b53ddaf44cc0425c1d06c3a25c038fce34029fa1a1e5ca370b06619a78b8476fe90f2ed38b1f99c52eb481b067e05c29c79e7b14f16c92c92898e68860959badbca29cf6d78fdd712ec3dabcf5c7f0c8b2672ff6c2d7d4da578024478d0505c5500bdc2bc3ffeb7b62d65acb0cb31bd389500edf9aeaba1ffb8c8665bd7407d3a99d5d2b9d145c96433acdb95e"}, {0x60, 0x108, 0x80, "00a96e94be7d900831792d9d14f8650e8b60915434d3a829671c8edc3f90a438bab8d6ca004ad6d93d336c5ad2e475678f81b98e75a2d9da6dd3e72e3f41c1c7bcef0ad6e7bfa57754ba3b03"}, {0xb8, 0x88, 0x3, "58f8bf7c29bb19964fa1b0af96660fca6915f9b72e46319acc77b218f1bc4390f13f697d1fad4891788bb15f3da412cc41644ad51fe1d203e8a595ee5a1855ded35edf9aac46c98023fd01b40b19c3703b0a8cf2d213cdac0bf8f67f1e9a697c6eb98e5e521a34e6628c354f12ddee3d3d9d4fd89ce09536e878425f58e0568fbea2cfd341e5f442fbedcdf8683849ff844c5fee8e3ad9c47ae0190d2cb1f3acbf"}], 0x2d0}, 0x800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, r9, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r10, r9, 0x4, r9}, 0x9) close(0x4) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 875.18791ms ago: executing program 1 (id=1322): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0xb270, 0x200, 0x6, 0x4, r3, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 798.253139ms ago: executing program 3 (id=1323): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) unshare(0x22020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x619, r2}, 0x38) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3fd}}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 797.074976ms ago: executing program 2 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 561.544881ms ago: executing program 4 (id=1325): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x28}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) close(0x3) pwrite64(r1, 0x0, 0xfffffffffffffd90, 0x2000000000006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0xfffffed0}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{0x2d01, 0x5, 0xbb, 0x2}, {0x6, 0xfd, 0xfa, 0x4}, {0x6c, 0x0, 0xf3, 0xffff}, {0xff, 0x6, 0x2, 0x4}, {0x0, 0xf5, 0x2a, 0x7}, {0x3, 0x4, 0x3}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010026bd7000fbdbdf25e0000001000000001b00000000000000000004d50a00ff000c0015005c073591829b13256fb41786803b0009000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f0000000140), &(0x7f0000000200)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r11, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x4, 0x3, 0x2, 0x6, 0x8c, 0x9, 0x5, 0x6}}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 451.16911ms ago: executing program 2 (id=1326): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x600000, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 274.219605ms ago: executing program 1 (id=1327): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 272.850419ms ago: executing program 3 (id=1328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000500)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000290000000400000001000000000000eb17000000000000002900000004"], 0x30}, 0xc4) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000910805e86e8175b194db121162cbe78311fb73198712abe3c8c6f912a80ab30e405689f441a378e0a43fd1ad33e574235f93a7b3f7ee4806431d2eb917c2125fce11e15fa8e80ddb9181fdb5deb332049f00d63abe685f783d3099597c1e4d2a40806d0897fe12376f428de7891261d87fd446d34eb3801e64d7e88bfaaf84be626570e56fd8b6bfbdfca5b7ba8c706ed6faa4a9f373"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r11, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x48, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x48}}, 0x20000040) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r7, 0x0, 0x54) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x24}}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x100, 0x401, 0x14, 0x3, 0x9, 0x7, 0xaad, 0x78, 0x20}, {0x9}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) kernel console output (not intermixed with test programs): (bridge_slave_1) entered forwarding state [ 90.029430][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.089913][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.145476][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.168230][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.195472][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.203075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.219225][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.226517][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.250585][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.258376][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.313369][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.320692][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.338212][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.412808][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.478873][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.510127][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.543434][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.550675][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.562966][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.570212][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.599951][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.621872][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.629146][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.653252][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.660490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.682013][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.958069][ T5837] veth0_vlan: entered promiscuous mode [ 91.012845][ T5837] veth1_vlan: entered promiscuous mode [ 91.059420][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.141255][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.232316][ T5823] veth0_vlan: entered promiscuous mode [ 91.252843][ T5837] veth0_macvtap: entered promiscuous mode [ 91.281537][ T5837] veth1_macvtap: entered promiscuous mode [ 91.306398][ T5823] veth1_vlan: entered promiscuous mode [ 91.411433][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.463216][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.477601][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.522103][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.536251][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.570555][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.584053][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.598956][ T5823] veth0_macvtap: entered promiscuous mode [ 91.625650][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.637997][ T5823] veth1_macvtap: entered promiscuous mode [ 91.684912][ T5835] Bluetooth: hci0: command tx timeout [ 91.690397][ T5835] Bluetooth: hci1: command tx timeout [ 91.738996][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.764109][ T5835] Bluetooth: hci2: command tx timeout [ 91.795616][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.844907][ T5835] Bluetooth: hci3: command tx timeout [ 91.851716][ T5835] Bluetooth: hci4: command tx timeout [ 91.867264][ T5824] veth0_vlan: entered promiscuous mode [ 91.916188][ T1140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926954][ T1140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.957455][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.959064][ T5836] veth0_vlan: entered promiscuous mode [ 91.974001][ T1140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984598][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.012837][ T1140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032379][ T5824] veth1_vlan: entered promiscuous mode [ 92.079226][ T5832] veth0_vlan: entered promiscuous mode [ 92.093818][ T24] cfg80211: failed to load regulatory.db [ 92.112492][ T5836] veth1_vlan: entered promiscuous mode [ 92.145024][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.164156][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.186264][ T5832] veth1_vlan: entered promiscuous mode [ 92.196475][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.213572][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.289104][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.301333][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.313068][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.353347][ T5824] veth0_macvtap: entered promiscuous mode [ 92.371254][ T5836] veth0_macvtap: entered promiscuous mode [ 92.393306][ T5824] veth1_macvtap: entered promiscuous mode [ 92.441257][ T5832] veth0_macvtap: entered promiscuous mode [ 92.452606][ T5836] veth1_macvtap: entered promiscuous mode [ 92.517988][ T5832] veth1_macvtap: entered promiscuous mode [ 92.530354][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.562354][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.590224][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.606142][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.637343][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.649694][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.661749][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.673090][ T5950] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 92.683374][ T5950] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 92.691726][ T5950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.716700][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.733877][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.743372][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.753018][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.763314][ T5950] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 92.788229][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.798483][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.821205][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.855187][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.871138][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.945171][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.957614][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.997133][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.041645][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.053582][ T5959] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 93.061919][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.078845][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 93.175104][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.183010][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.292776][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.314802][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.325310][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.423402][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.431813][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.539067][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.555233][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.717969][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.740060][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.768849][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.778446][ T5835] Bluetooth: hci1: command tx timeout [ 93.778463][ T5830] Bluetooth: hci0: command tx timeout [ 93.821853][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.830063][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.846695][ T5835] Bluetooth: hci2: command tx timeout [ 93.850336][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.870213][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.900576][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.924480][ T5835] Bluetooth: hci4: command tx timeout [ 93.925449][ T5830] Bluetooth: hci3: command tx timeout [ 94.096774][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.104725][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.119945][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.120845][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.145644][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.148797][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.974699][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 95.246610][ T6018] tipc: Started in network mode [ 95.251712][ T6018] tipc: Node identity 3e3362d89926, cluster identity 4711 [ 95.290813][ T6018] tipc: Enabled bearer , priority 0 [ 95.336375][ T6021] Bluetooth: MGMT ver 1.23 [ 95.369768][ T6018] syzkaller0: entered promiscuous mode [ 95.382240][ T6018] syzkaller0: entered allmulticast mode [ 95.389072][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 95.455902][ T6021] vlan2: entered promiscuous mode [ 95.487196][ T6021] bond0: entered promiscuous mode [ 95.505458][ T6021] bond_slave_0: entered promiscuous mode [ 95.512876][ T6021] bond_slave_1: entered promiscuous mode [ 95.561680][ T6028] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 95.634939][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 95.679913][ T6038] tipc: Resetting bearer [ 95.842416][ T6038] tipc: Disabling bearer [ 96.154499][ T6062] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.202430][ T6062] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 96.877465][ T6105] Zero length message leads to an empty skb [ 96.950964][ T6109] netlink: 'syz.2.34': attribute type 24 has an invalid length. [ 97.410515][ T6118] tipc: Can't bind to reserved service type 1 [ 97.535961][ T6128] --map-set only usable from mangle table [ 97.859396][ T6137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.996481][ T1115] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 98.035630][ T1115] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 98.063396][ T1115] bond0: now running without any active interface! [ 98.313833][ T6142] xt_TCPMSS: Only works on TCP SYN packets [ 98.574391][ T6152] __nla_validate_parse: 2 callbacks suppressed [ 98.574413][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 98.669808][ T6156] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 98.732889][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 98.757098][ T6146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.896898][ T6168] xt_policy: neither incoming nor outgoing policy selected [ 99.145202][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 99.155730][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 99.407638][ T6181] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 99.436168][ T6172] raw_sendmsg: syz.1.51 forgot to set AF_INET. Fix it! [ 99.453355][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 99.515200][ T6179] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'. [ 99.804476][ T6196] netlink: 348 bytes leftover after parsing attributes in process `syz.1.59'. [ 99.830546][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.57'. [ 99.878093][ T6189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 99.882054][ T6186] syz.2.56 (6186) used greatest stack depth: 17472 bytes left [ 100.586040][ T6234] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 100.597979][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.605689][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.731978][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.752138][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.923162][ T6095] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.932866][ T6095] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.983325][ T6095] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.008745][ T6095] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.141684][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.74'. [ 101.220413][ T6251] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.255178][ T6256] gretap0: entered promiscuous mode [ 101.265384][ T6256] gretap0: left promiscuous mode [ 101.280064][ T6258] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 101.298331][ T6258] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.336082][ T6251] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.459094][ T6251] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.576761][ T6251] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.710490][ T6276] lo: entered promiscuous mode [ 101.716193][ T6276] tunl0: entered promiscuous mode [ 101.721743][ T6276] gre0: entered promiscuous mode [ 101.729496][ T6276] gretap0: entered promiscuous mode [ 101.735462][ T6276] erspan0: entered promiscuous mode [ 101.741026][ T6276] ip_vti0: entered promiscuous mode [ 101.746830][ T6276] ip6_vti0: entered promiscuous mode [ 101.752429][ T6276] sit0: entered promiscuous mode [ 101.758181][ T6276] ip6tnl0: entered promiscuous mode [ 101.764705][ T6276] ip6gre0: entered promiscuous mode [ 101.770164][ T6276] syz_tun: entered promiscuous mode [ 101.776643][ T6276] ip6gretap0: entered promiscuous mode [ 101.782622][ T6276] bridge0: entered promiscuous mode [ 101.789316][ T6276] vcan0: entered promiscuous mode [ 101.795677][ T6276] bond0: entered promiscuous mode [ 101.800953][ T6276] bond_slave_0: entered promiscuous mode [ 101.807401][ T6276] bond_slave_1: entered promiscuous mode [ 101.814459][ T6276] team0: entered promiscuous mode [ 101.819613][ T6276] team_slave_0: entered promiscuous mode [ 101.826294][ T6276] team_slave_1: entered promiscuous mode [ 101.832228][ T6276] dummy0: entered promiscuous mode [ 101.837992][ T6276] nlmon0: entered promiscuous mode [ 101.843340][ T6276] caif0: entered promiscuous mode [ 101.849538][ T6276] batadv0: entered promiscuous mode [ 101.855200][ T6276] vxcan0: entered promiscuous mode [ 101.860779][ T6276] vxcan1: entered promiscuous mode [ 101.866533][ T6276] veth0: entered promiscuous mode [ 101.871856][ T6276] veth1: entered promiscuous mode [ 101.877211][ T6276] wg0: entered promiscuous mode [ 101.882345][ T6276] wg1: entered promiscuous mode [ 101.887690][ T6276] wg2: entered promiscuous mode [ 101.892805][ T6276] veth0_to_bridge: entered promiscuous mode [ 101.900276][ T6276] veth1_to_bridge: entered promiscuous mode [ 101.906765][ T6276] veth0_to_bond: entered promiscuous mode [ 101.912903][ T6276] veth1_to_bond: entered promiscuous mode [ 101.919355][ T6276] veth0_to_team: entered promiscuous mode [ 101.927488][ T6276] veth1_to_team: entered promiscuous mode [ 101.933865][ T6276] veth0_to_batadv: entered promiscuous mode [ 101.940260][ T6276] batadv_slave_0: entered promiscuous mode [ 101.946653][ T6276] veth1_to_batadv: entered promiscuous mode [ 101.952953][ T6276] batadv_slave_1: entered promiscuous mode [ 101.963039][ T6276] xfrm0: entered promiscuous mode [ 101.968661][ T6276] veth0_to_hsr: entered promiscuous mode [ 101.975068][ T6276] veth1_to_hsr: entered promiscuous mode [ 101.988189][ T6276] hsr0: entered promiscuous mode [ 101.993579][ T6276] veth1_virt_wifi: entered promiscuous mode [ 102.000828][ T6276] veth0_virt_wifi: entered promiscuous mode [ 102.017073][ T6276] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 102.025427][ T6276] vlan0: entered promiscuous mode [ 102.030994][ T6276] vlan1: entered promiscuous mode [ 102.036817][ T6276] macvlan0: entered promiscuous mode [ 102.042482][ T6276] macvlan1: entered promiscuous mode [ 102.048257][ T6276] ipvlan0: entered promiscuous mode [ 102.054110][ T6276] ipvlan1: entered promiscuous mode [ 102.059974][ T6276] macvtap0: entered promiscuous mode [ 102.065812][ T6276] macsec0: entered promiscuous mode [ 102.071403][ T6276] geneve0: entered promiscuous mode [ 102.077663][ T6276] geneve1: entered promiscuous mode [ 102.083231][ T6276] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 102.092125][ T6276] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 102.100063][ T6276] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 102.108762][ T6276] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 102.123759][ T6276] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 102.136778][ T6276] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 102.144251][ T6276] macvlan2: entered promiscuous mode [ 102.149775][ T6276] gre1: entered promiscuous mode [ 102.243131][ T6278] syzkaller0: entered promiscuous mode [ 102.253065][ T6278] syzkaller0: entered allmulticast mode [ 102.263133][ T6286] netlink: 'syz.2.83': attribute type 2 has an invalid length. [ 102.287374][ T6088] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.311758][ T6286] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 102.360053][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.446233][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.627908][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.820833][ T6306] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 102.909499][ T6306] team0 (unregistering): Port device team_slave_0 removed [ 102.983003][ T6306] team0 (unregistering): Failed to send options change via netlink (err -105) [ 103.023979][ T6306] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 103.055047][ T6306] team0 (unregistering): Port device team_slave_1 removed [ 103.665859][ T6358] warning: `syz.1.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.853729][ T6363] __nla_validate_parse: 9 callbacks suppressed [ 103.853750][ T6363] netlink: 26 bytes leftover after parsing attributes in process `syz.3.103'. [ 103.931047][ T6369] netlink: zone id is out of range [ 103.963682][ T6369] netlink: zone id is out of range [ 103.986739][ T6369] netlink: zone id is out of range [ 104.006698][ T6369] netlink: zone id is out of range [ 104.021952][ T6369] netlink: zone id is out of range [ 104.027901][ T6369] netlink: zone id is out of range [ 104.033186][ T6369] netlink: zone id is out of range [ 104.038934][ T6369] netlink: zone id is out of range [ 104.044486][ T6369] netlink: zone id is out of range [ 104.050618][ T6369] netlink: zone id is out of range [ 104.572750][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'. [ 104.604131][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'. [ 104.619974][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'. [ 104.640576][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.111'. [ 104.689161][ T6412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.112'. [ 105.168766][ T6434] pim6reg1: entered promiscuous mode [ 105.177146][ T6434] pim6reg1: entered allmulticast mode [ 105.451091][ T6447] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 105.462801][ T6447] netlink: 'syz.0.125': attribute type 6 has an invalid length. [ 105.483593][ T6447] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 105.497206][ T6447] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 105.505848][ T6447] netlink: 'syz.0.125': attribute type 6 has an invalid length. [ 105.514093][ T6447] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 105.561478][ T6443] geneve2: entered promiscuous mode [ 105.571575][ T6443] geneve2: entered allmulticast mode [ 105.604837][ T1140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.627360][ T1140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.665141][ T1140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.699569][ T1140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.811877][ T6465] netlink: 'syz.3.128': attribute type 2 has an invalid length. [ 105.906009][ T6466] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 106.001698][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 106.160982][ T6446] dvmrp0: entered allmulticast mode [ 106.264845][ T6480] nbd4: detected capacity change from 0 to 63 [ 106.287148][ T6483] block nbd4: NBD_DISCONNECT [ 106.297465][ T6095] dvmrp0 (unregistering): left allmulticast mode [ 106.309110][ T6483] block nbd4: Disconnected due to user request. [ 106.344622][ T6483] block nbd4: shutting down sockets [ 106.381645][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.391528][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.407095][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.416734][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.425896][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.436054][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.443980][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.453540][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.461705][ T5899] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.476515][ T5899] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.488635][ T5899] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.512868][ T5899] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.545989][ T5899] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.588166][ T5899] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.612459][ T5899] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.655319][ T5899] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.669659][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 106.681863][ T5899] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.720432][ T5899] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.772136][ T5899] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.822180][ T5899] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.853130][ T5899] ldm_validate_partition_table(): Disk read failed. [ 106.889482][ T5899] Dev nbd4: unable to read RDB block 0 [ 106.918678][ T5899] nbd4: unable to read partition table [ 106.976010][ T5899] ldm_validate_partition_table(): Disk read failed. [ 107.018087][ T5899] Dev nbd4: unable to read RDB block 0 [ 107.052949][ T5899] nbd4: unable to read partition table [ 107.053989][ T6499] IPVS: Scheduler module ip_vs_sip not found [ 107.131156][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 107.579897][ T6529] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 107.704591][ T6538] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 107.713426][ T6532] netlink: 76 bytes leftover after parsing attributes in process `syz.3.142'. [ 108.391151][ T6560] "syz.1.152" (6560) uses obsolete ecb(arc4) skcipher [ 108.441339][ T6558] syzkaller0: entered promiscuous mode [ 108.447689][ T6558] syzkaller0: entered allmulticast mode [ 108.955225][ T6592] __nla_validate_parse: 4 callbacks suppressed [ 108.955242][ T6592] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.160'. [ 109.039325][ T6595] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 109.094852][ T6595] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 109.141484][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.151915][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.175515][ T6599] syzkaller0: entered promiscuous mode [ 109.185545][ T6599] syzkaller0: entered allmulticast mode [ 109.201078][ T6611] net_ratelimit: 47 callbacks suppressed [ 109.201100][ T6611] openvswitch: netlink: Message has 592 unknown bytes. [ 109.215511][ T6611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.289171][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 109.335789][ T6598] bond1: (slave gretap1): making interface the new active one [ 109.350821][ T6598] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 109.855111][ T6634] xt_CT: No such helper "netbios-ns" [ 109.978080][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 110.270801][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.175'. [ 110.330306][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 110.465234][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 110.625618][ T6666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.715085][ T6661] x_tables: unsorted underflow at hook 3 [ 110.968315][ T6695] bridge: RTM_NEWNEIGH with invalid ether address [ 110.988141][ T6695] bridge: RTM_NEWNEIGH with invalid ether address [ 111.300145][ T6704] validate_nla: 8 callbacks suppressed [ 111.300159][ T6704] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 111.319788][ T6702] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.373661][ T6704] netlink: 1 bytes leftover after parsing attributes in process `syz.3.184'. [ 111.419338][ T6706] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.510696][ T6702] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.647986][ T6702] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.742480][ T6721] netlink: 'syz.3.191': attribute type 9 has an invalid length. [ 111.777614][ T6702] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.793976][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.191'. [ 111.891413][ T6721] tap0: tun_chr_ioctl cmd 1074025677 [ 111.911825][ T6721] tap0: linktype set to 769 [ 111.953031][ T6088] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.047161][ T6736] vlan2: entered promiscuous mode [ 112.095699][ T6083] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.147686][ T6090] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.325920][ T6090] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.600318][ T6758] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 112.614970][ T6765] syzkaller1: entered promiscuous mode [ 112.620601][ T6758] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 112.644680][ T6765] syzkaller1: entered allmulticast mode [ 113.085266][ T6785] sctp: [Deprecated]: syz.4.209 (pid 6785) Use of int in max_burst socket option. [ 113.085266][ T6785] Use struct sctp_assoc_value instead [ 113.252422][ T6798] netlink: 'syz.4.212': attribute type 25 has an invalid length. [ 113.308155][ T6095] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.321351][ T6798] netlink: 'syz.4.212': attribute type 25 has an invalid length. [ 113.337571][ T6095] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.379201][ T6095] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.417998][ T6095] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.491163][ T6807] netlink: 'syz.2.215': attribute type 3 has an invalid length. [ 113.700101][ T6817] Bluetooth: MGMT ver 1.23 [ 113.720296][ T6817] x_tables: duplicate underflow at hook 3 [ 114.119031][ T6835] __nla_validate_parse: 11 callbacks suppressed [ 114.119052][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'. [ 114.348916][ T6847] wg1: entered promiscuous mode [ 114.355757][ T6847] wg1: entered allmulticast mode [ 114.392752][ T6847] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 114.445315][ T6847] bond1 (unregistering): Released all slaves [ 114.531775][ T6852] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 114.595850][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 114.621152][ T6852] bond2: entered promiscuous mode [ 114.629103][ T6852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.638592][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 114.677231][ T6852] bond2: (slave bridge2): making interface the new active one [ 114.685042][ T6852] bridge2: entered promiscuous mode [ 114.692352][ T6852] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 114.913016][ T6870] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 114.951171][ T6875] netlink: 11 bytes leftover after parsing attributes in process `syz.1.233'. [ 114.968343][ T6870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.996579][ T6877] delete_channel: no stack [ 115.025226][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.234'. [ 115.060972][ T6877] bridge0: entered promiscuous mode [ 115.073641][ T6877] macsec1: entered promiscuous mode [ 115.116940][ T6875] IPv6: NLM_F_REPLACE set, but no existing node found! [ 115.195187][ T6882] sctp: [Deprecated]: syz.4.237 (pid 6882) Use of int in maxseg socket option. [ 115.195187][ T6882] Use struct sctp_assoc_value instead [ 115.319757][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 115.330919][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 115.420990][ T6887] netlink: 'syz.1.239': attribute type 27 has an invalid length. [ 115.431840][ T6887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.239'. [ 115.612048][ T6895] netlink: 1 bytes leftover after parsing attributes in process `syz.1.242'. [ 115.652898][ T6895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.680906][ T6901] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.721523][ T6901] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.881161][ T6901] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.912220][ T6901] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.032987][ T6901] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.063163][ T6901] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.104045][ T6920] netlink: 'syz.1.245': attribute type 1 has an invalid length. [ 116.144229][ T6920] netlink: 172 bytes leftover after parsing attributes in process `syz.1.245'. [ 116.168581][ T6920] NCSI netlink: No device for ifindex 813332851 [ 116.216665][ T6901] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.255857][ T6901] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.289507][ T6923] sctp: [Deprecated]: syz.0.247 (pid 6923) Use of int in max_burst socket option. [ 116.289507][ T6923] Use struct sctp_assoc_value instead [ 116.476505][ T6090] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.502189][ T6090] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.581065][ T6088] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.604842][ T6088] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.651035][ T6088] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.659841][ T6088] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.702608][ T1140] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.713791][ T1140] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.247737][ T6952] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.410672][ T6958] validate_nla: 1 callbacks suppressed [ 117.410694][ T6958] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 118.205000][ T6966] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 119.010100][ T7018] netlink: 'syz.4.274': attribute type 10 has an invalid length. [ 119.082733][ T7018] team0: Port device geneve0 added [ 119.642619][ T7047] __nla_validate_parse: 8 callbacks suppressed [ 119.642641][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.280'. [ 120.043533][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 120.160499][ T7068] bridge3: port 1(ip6gretap1) entered blocking state [ 120.173694][ T7068] bridge3: port 1(ip6gretap1) entered disabled state [ 120.180985][ T7068] ip6gretap1: entered allmulticast mode [ 120.189880][ T7068] ip6gretap1: entered promiscuous mode [ 120.280074][ T7064] bridge3: port 2(veth3) entered blocking state [ 120.295166][ T7064] bridge3: port 2(veth3) entered disabled state [ 120.312284][ T7064] veth3: entered allmulticast mode [ 120.338043][ T7064] veth3: entered promiscuous mode [ 120.352100][ T7064] bridge3: port 2(veth3) entered blocking state [ 120.358960][ T7064] bridge3: port 2(veth3) entered forwarding state [ 120.393498][ T6095] bridge3: port 2(veth3) entered disabled state [ 120.470188][ T7074] gretap1: entered promiscuous mode [ 120.485673][ T7074] batman_adv: batadv0: Adding interface: gretap1 [ 120.492081][ T7074] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.584281][ T7074] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 120.696532][ T7078] netlink: 'syz.2.287': attribute type 12 has an invalid length. [ 120.733024][ T7078] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 120.763562][ T7078] netlink: 148 bytes leftover after parsing attributes in process `syz.2.287'. [ 120.865784][ T7078] netlink: 59 bytes leftover after parsing attributes in process `syz.2.287'. [ 120.894236][ T7081] batadv_slave_1: entered promiscuous mode [ 121.050396][ T7080] batadv_slave_1: left promiscuous mode [ 121.717903][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 121.894486][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 122.001593][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.024133][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.697061][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.300'. [ 124.619321][ T7156] netlink: 'syz.0.305': attribute type 13 has an invalid length. [ 124.637525][ T7156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 124.673232][ T7154] syzkaller1: entered promiscuous mode [ 124.694355][ T7154] syzkaller1: entered allmulticast mode [ 125.229497][ T7177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.307'. [ 125.490767][ T7173] syzkaller1: entered promiscuous mode [ 125.496858][ T7173] syzkaller1: entered allmulticast mode [ 126.558177][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 126.568841][ T7199] openvswitch: netlink: EtherType 50a is less than min 600 [ 126.678530][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 126.713011][ T7208] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 126.733205][ T7208] netlink: 96 bytes leftover after parsing attributes in process `syz.1.318'. [ 127.145202][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.172211][ T7222] bridge_slave_1: left allmulticast mode [ 127.198329][ T7222] bridge_slave_1: left promiscuous mode [ 127.232214][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.697828][ T7242] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 127.748104][ T7242] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 127.878418][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.327'. [ 127.954996][ T7248] bond1: (slave geneve2): making interface the new active one [ 127.992671][ T7248] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 128.018249][ T7253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.033388][ T6083] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.043873][ T1140] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.052779][ T1140] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.104299][ T6083] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.241865][ T7261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'. [ 128.258116][ T7264] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.657772][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 129.350304][ T7307] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 129.453978][ T7309] sctp: [Deprecated]: syz.0.341 (pid 7309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.453978][ T7309] Use struct sctp_sack_info instead [ 129.769630][ T7326] netlink: 'syz.1.347': attribute type 1 has an invalid length. [ 129.810614][ T7326] netlink: 96 bytes leftover after parsing attributes in process `syz.1.347'. [ 129.823884][ T7326] netlink: 1 bytes leftover after parsing attributes in process `syz.1.347'. [ 129.863404][ T7326] netlink: 'syz.1.347': attribute type 1 has an invalid length. [ 129.874100][ T7326] netlink: 'syz.1.347': attribute type 8 has an invalid length. [ 129.906512][ T7331] xt_TCPMSS: Only works on TCP SYN packets [ 129.915590][ T7326] netlink: 582 bytes leftover after parsing attributes in process `syz.1.347'. [ 130.213719][ T30] audit: type=1800 audit(1772534439.362:2): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.353" name="blkio.bfq.time_recursive" dev="tmpfs" ino=360 res=0 errno=0 [ 130.296176][ T7337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.335648][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 130.379363][ T7337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.475207][ T7358] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 131.206738][ T7368] netlink: 'syz.3.358': attribute type 9 has an invalid length. [ 131.870181][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 131.879313][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'. [ 132.062166][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 132.364815][ T7337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.453336][ T7374] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 132.506818][ T7337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.663367][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.694355][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.718013][ T7383] syzkaller0: entered promiscuous mode [ 132.724253][ T7383] syzkaller0: entered allmulticast mode [ 132.731726][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.755753][ T6095] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.050867][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.057532][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.080492][ T7397] netlink: 14 bytes leftover after parsing attributes in process `syz.1.366'. [ 133.147337][ T7394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.156805][ T7394] bond3: entered promiscuous mode [ 133.163989][ T7394] bond0: (slave bond3): Enslaving as an active interface with an up link [ 133.252143][ T7397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.299906][ T7397] bond_slave_0: left promiscuous mode [ 133.334356][ T7397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.344160][ T7397] bond_slave_1: left promiscuous mode [ 133.364298][ T7397] bond0 (unregistering): (slave bond3): Releasing backup interface [ 133.381675][ T7397] bond3: left promiscuous mode [ 133.397877][ T7397] bond0 (unregistering): Released all slaves [ 133.620698][ T7409] syz_tun: entered allmulticast mode [ 133.640092][ T7409] xt_connbytes: Forcing CT accounting to be enabled [ 133.659843][ T7409] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 133.686375][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 133.724798][ T7409] syz_tun (unregistering): left allmulticast mode [ 133.738555][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 133.773219][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 134.046304][ T7422] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.102101][ T7422] netlink: 80 bytes leftover after parsing attributes in process `syz.2.374'. [ 134.374594][ T7432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.532179][ T7432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.649887][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 134.707699][ T7432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.800855][ T7432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.949722][ T6088] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 134.976309][ T6088] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.010413][ T6088] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.043272][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.446069][ T7467] netlink: 'syz.4.386': attribute type 29 has an invalid length. [ 135.735469][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.805777][ T7480] netlink: 128 bytes leftover after parsing attributes in process `syz.2.390'. [ 135.816514][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 136.141817][ T7491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.158175][ T7491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.275512][ T7491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.323785][ T7491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.445274][ T7491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.473676][ T7491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.596831][ T7491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.611501][ T7491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.833848][ T6088] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.842214][ T6088] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.896989][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.917832][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.950550][ T1140] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.959856][ T1140] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 137.010031][ T1140] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.044204][ T1140] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 137.356085][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 137.701683][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.407'. [ 137.727967][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 137.741506][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.763365][ T7533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.812764][ T7540] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 137.865957][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'. [ 137.875012][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'. [ 137.893298][ T7538] bridge3: entered promiscuous mode [ 137.909126][ T7538] bridge3: entered allmulticast mode [ 137.922774][ T7538] team0: Port device bridge3 added [ 138.052540][ T7538] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 138.060495][ T7538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.408'. [ 138.246556][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 138.292802][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 138.480176][ T7564] xt_ipcomp: unknown flags 1D [ 138.541740][ T7568] syzkaller1: entered promiscuous mode [ 138.552708][ T7568] syzkaller1: entered allmulticast mode [ 138.747252][ T7575] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 138.848503][ T7575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.947589][ T7579] veth3: entered promiscuous mode [ 139.005408][ T7579] bond2: (slave veth3): Enslaving as an active interface with an up link [ 139.074611][ T7591] FAULT_INJECTION: forcing a failure. [ 139.074611][ T7591] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.097556][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: syz.4.423 Not tainted syzkaller #0 PREEMPT(full) [ 139.097586][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.097608][ T7591] Call Trace: [ 139.097615][ T7591] [ 139.097624][ T7591] dump_stack_lvl+0xe8/0x150 [ 139.097667][ T7591] should_fail_ex+0x412/0x560 [ 139.097697][ T7591] _copy_from_iter+0x1d3/0x1670 [ 139.097729][ T7591] ? rcu_is_watching+0x15/0xb0 [ 139.097764][ T7591] ? __pfx__copy_from_iter+0x10/0x10 [ 139.097800][ T7591] ? netlink_sendmsg+0x650/0xb40 [ 139.097825][ T7591] ? skb_put+0x11b/0x210 [ 139.097866][ T7591] netlink_sendmsg+0x6c0/0xb40 [ 139.097901][ T7591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.097932][ T7591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.097957][ T7591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.097982][ T7591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.098006][ T7591] ____sys_sendmsg+0xa68/0xad0 [ 139.098046][ T7591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.098085][ T7591] ? import_iovec+0x73/0xa0 [ 139.098118][ T7591] ___sys_sendmsg+0x2a5/0x360 [ 139.098153][ T7591] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.098220][ T7591] ? __fget_files+0x2a/0x420 [ 139.098250][ T7591] ? __fget_files+0x3a0/0x420 [ 139.098289][ T7591] __x64_sys_sendmsg+0x1bd/0x2a0 [ 139.098321][ T7591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.098363][ T7591] ? __pfx_ksys_write+0x10/0x10 [ 139.098396][ T7591] do_syscall_64+0x14d/0xf80 [ 139.098425][ T7591] ? trace_irq_disable+0x3b/0x150 [ 139.098455][ T7591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.098477][ T7591] ? clear_bhb_loop+0x40/0x90 [ 139.098502][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.098523][ T7591] RIP: 0033:0x7f970a59c799 [ 139.098554][ T7591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.098572][ T7591] RSP: 002b:00007f970b4ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.098601][ T7591] RAX: ffffffffffffffda RBX: 00007f970a815fa0 RCX: 00007f970a59c799 [ 139.098616][ T7591] RDX: 0000000004004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 139.098630][ T7591] RBP: 00007f970b4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 139.098642][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.098654][ T7591] R13: 00007f970a816038 R14: 00007f970a815fa0 R15: 00007ffd60adae28 [ 139.098687][ T7591] [ 139.481824][ T24] IPVS: starting estimator thread 0... [ 139.584132][ T7600] IPVS: using max 25 ests per chain, 60000 per kthread [ 140.080071][ T7627] bond0: option all_slaves_active: invalid value (13) [ 140.090564][ T7627] bond0 (unregistering): Released all slaves [ 140.332749][ T7640] FAULT_INJECTION: forcing a failure. [ 140.332749][ T7640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.346221][ T7640] CPU: 0 UID: 0 PID: 7640 Comm: syz.4.436 Not tainted syzkaller #0 PREEMPT(full) [ 140.346250][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.346263][ T7640] Call Trace: [ 140.346271][ T7640] [ 140.346279][ T7640] dump_stack_lvl+0xe8/0x150 [ 140.346316][ T7640] should_fail_ex+0x412/0x560 [ 140.346347][ T7640] _copy_from_iter+0x1d3/0x1670 [ 140.346379][ T7640] ? rcu_is_watching+0x15/0xb0 [ 140.346413][ T7640] ? __pfx__copy_from_iter+0x10/0x10 [ 140.346448][ T7640] ? netlink_sendmsg+0x650/0xb40 [ 140.346473][ T7640] ? skb_put+0x11b/0x210 [ 140.346505][ T7640] netlink_sendmsg+0x6c0/0xb40 [ 140.346541][ T7640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.346573][ T7640] ? aa_sock_msg_perm+0xf1/0x1b0 [ 140.346600][ T7640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.346625][ T7640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.346650][ T7640] ____sys_sendmsg+0xa68/0xad0 [ 140.346690][ T7640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.346741][ T7640] ? import_iovec+0x73/0xa0 [ 140.346775][ T7640] ___sys_sendmsg+0x2a5/0x360 [ 140.346812][ T7640] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.346878][ T7640] ? __fget_files+0x2a/0x420 [ 140.346907][ T7640] ? __fget_files+0x3a0/0x420 [ 140.346947][ T7640] __x64_sys_sendmsg+0x1bd/0x2a0 [ 140.346982][ T7640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.347024][ T7640] ? __pfx_ksys_write+0x10/0x10 [ 140.347057][ T7640] do_syscall_64+0x14d/0xf80 [ 140.347087][ T7640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.347107][ T7640] ? clear_bhb_loop+0x40/0x90 [ 140.347133][ T7640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.347153][ T7640] RIP: 0033:0x7f970a59c799 [ 140.347172][ T7640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.347189][ T7640] RSP: 002b:00007f970b4ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.347210][ T7640] RAX: ffffffffffffffda RBX: 00007f970a815fa0 RCX: 00007f970a59c799 [ 140.347224][ T7640] RDX: 0000000004004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 140.347237][ T7640] RBP: 00007f970b4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 140.347249][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.347260][ T7640] R13: 00007f970a816038 R14: 00007f970a815fa0 R15: 00007ffd60adae28 [ 140.347290][ T7640] [ 140.883357][ T7657] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 140.956853][ T7657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.018616][ T7662] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 141.068630][ T7657] __nla_validate_parse: 5 callbacks suppressed [ 141.068653][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 141.084532][ T7662] bond1: (slave batadv1): making interface the new active one [ 141.094417][ T7662] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 141.124595][ T7657] bond1 (unregistering): (slave batadv1): Releasing active interface [ 141.161666][ T7657] bond1 (unregistering): Released all slaves [ 141.424828][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 141.464766][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 141.900431][ T7707] bridge_slave_1: left allmulticast mode [ 141.914302][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.926915][ T7707] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 142.041405][ T7710] tap0: tun_chr_ioctl cmd 1074025692 [ 142.813308][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 143.099256][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.464'. [ 143.243835][ T7748] netlink: 566 bytes leftover after parsing attributes in process `syz.1.466'. [ 143.309692][ T7756] netlink: 64 bytes leftover after parsing attributes in process `syz.4.468'. [ 143.325633][ T7757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 143.342718][ T7756] vlan3: entered promiscuous mode [ 143.363778][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 143.373784][ T7756] geneve1: entered promiscuous mode [ 143.594558][ T7773] xt_ecn: cannot match TCP bits for non-tcp packets [ 143.613383][ T7767] xt_ecn: cannot match TCP bits for non-tcp packets [ 143.648883][ T7776] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 143.724240][ T7781] veth0_to_bridge: entered promiscuous mode [ 143.769563][ T7785] unsupported nlmsg_type 40 [ 143.771847][ T7784] netlink: 'syz.1.472': attribute type 29 has an invalid length. [ 143.817919][ T7775] netlink: 'syz.1.472': attribute type 29 has an invalid length. [ 143.825237][ T7785] netlink: 'syz.0.476': attribute type 16 has an invalid length. [ 143.834025][ T7785] netlink: 'syz.0.476': attribute type 17 has an invalid length. [ 143.861928][ T7785] lo: left promiscuous mode [ 143.878674][ T7785] tunl0: left promiscuous mode [ 143.886452][ T7785] gre0: left promiscuous mode [ 143.899609][ T7785] gretap0: left promiscuous mode [ 143.912122][ T7785] erspan0: left promiscuous mode [ 143.931225][ T7785] ip_vti0: left promiscuous mode [ 143.950631][ T7785] ip6_vti0: left promiscuous mode [ 143.975459][ T7785] sit0: left promiscuous mode [ 143.986497][ T7792] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 143.995325][ T7785] ip6tnl0: left promiscuous mode [ 144.002549][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 144.014676][ T7785] ip6gre0: left promiscuous mode [ 144.022150][ T7785] syz_tun: left promiscuous mode [ 144.030047][ T7785] ip6gretap0: left promiscuous mode [ 144.040555][ T7785] vcan0: left promiscuous mode [ 144.049737][ T7785] bond0: left promiscuous mode [ 144.057467][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.066780][ T7785] team0: left promiscuous mode [ 144.073069][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.080967][ T7785] dummy0: left promiscuous mode [ 144.090146][ T7785] nlmon0: left promiscuous mode [ 144.097419][ T7785] caif0: left promiscuous mode [ 144.102272][ T7785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.127696][ T7780] veth0_to_bridge: left promiscuous mode [ 144.136349][ T7792] syz_tun: entered promiscuous mode [ 144.150503][ T7792] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 144.169641][ T7796] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 144.333003][ T7796] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 144.506879][ T7796] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 144.571457][ T7810] netlink: 'syz.0.484': attribute type 21 has an invalid length. [ 144.666388][ T7796] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 145.025779][ T7827] x_tables: duplicate underflow at hook 3 [ 145.099870][ T1140] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.233147][ T1140] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.341919][ T6095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.407268][ T6095] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.465996][ T7840] ipvlan2: entered promiscuous mode [ 145.511890][ T7846] xt_bpf: check failed: parse error [ 145.529999][ T7846] lo speed is unknown, defaulting to 1000 [ 145.548539][ T7846] lo speed is unknown, defaulting to 1000 [ 145.557254][ T7846] lo speed is unknown, defaulting to 1000 [ 145.632889][ T7846] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.682199][ T7850] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 145.700488][ T7846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.790948][ T7850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.870559][ T7846] lo speed is unknown, defaulting to 1000 [ 145.915941][ T7850] bond1: (slave ip6gretap1): making interface the new active one [ 145.935078][ T7850] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 145.955076][ T7846] lo speed is unknown, defaulting to 1000 [ 145.966169][ T7846] lo speed is unknown, defaulting to 1000 [ 145.972111][ T7866] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 145.983215][ T7846] lo speed is unknown, defaulting to 1000 [ 146.081007][ T7846] lo speed is unknown, defaulting to 1000 [ 146.092594][ T7846] lo speed is unknown, defaulting to 1000 [ 146.388298][ T7886] __nla_validate_parse: 10 callbacks suppressed [ 146.388318][ T7886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.504'. [ 146.562387][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.507'. [ 147.093813][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 147.155874][ T7899] lo speed is unknown, defaulting to 1000 [ 147.163842][ T7897] netlink: 1315 bytes leftover after parsing attributes in process `syz.4.508'. [ 147.190895][ T7897] netlink: 'syz.4.508': attribute type 5 has an invalid length. [ 147.282047][ T5840] IPVS: starting estimator thread 0... [ 147.313707][ T7921] tipc: Enabling of bearer rejected, failed to enable media [ 147.337763][ T7921] trusted_key: syz.1.513 sent an empty control message without MSG_MORE. [ 147.373803][ T7923] IPVS: using max 27 ests per chain, 64800 per kthread [ 147.638544][ T7934] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 148.100627][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.115360][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 148.269833][ T7971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.523'. [ 148.299173][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 148.331846][ T7977] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.525'. [ 148.580919][ T7983] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 148.606464][ T7983] bond2 (unregistering): Released all slaves [ 148.640571][ T7980] lo speed is unknown, defaulting to 1000 [ 148.648986][ T7988] netlink: 176 bytes leftover after parsing attributes in process `syz.4.528'. [ 148.888381][ T7997] Cannot find add_set index 2 as target [ 148.895874][ T7994] syzkaller0: entered promiscuous mode [ 148.904514][ T7994] syzkaller0: entered allmulticast mode [ 148.917697][ T7999] Driver unsupported XDP return value 0 on prog (id 209) dev N/A, expect packet loss! [ 149.030264][ T8001] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 149.110671][ T8004] openvswitch: netlink: EtherType 50a is less than min 600 [ 149.288022][ T8008] sit1: entered promiscuous mode [ 149.293149][ T8008] sit1: entered allmulticast mode [ 150.900431][ T7947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.111282][ T8022] bpq0: entered promiscuous mode [ 151.133568][ T8022] bpq0: entered allmulticast mode [ 151.232213][ T8032] lo speed is unknown, defaulting to 1000 [ 151.417842][ T8037] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 151.463704][ T8042] __nla_validate_parse: 2 callbacks suppressed [ 151.463726][ T8042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.545'. [ 151.552625][ T8040] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 151.706706][ T8040] bond3 (unregistering): Released all slaves [ 152.109541][ T8059] lo speed is unknown, defaulting to 1000 [ 152.201206][ T8067] netlink: 'syz.1.550': attribute type 5 has an invalid length. [ 152.554043][ T8078] bpq0: left promiscuous mode [ 152.566394][ T8078] bpq0: left allmulticast mode [ 152.595213][ T8081] netlink: 'syz.4.553': attribute type 10 has an invalid length. [ 152.635685][ T8081] team0: Failed to send options change via netlink (err -105) [ 152.662266][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 152.691125][ T8081] team0: Port device dummy0 added [ 152.770473][ T8084] IPVS: length: 132 != 8 [ 152.809460][ T9] IPVS: starting estimator thread 0... [ 152.845403][ T8084] pimreg: entered allmulticast mode [ 152.903611][ T8089] IPVS: using max 32 ests per chain, 76800 per kthread [ 153.161303][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 153.174414][ T8058] pimreg: left allmulticast mode [ 153.321692][ T8122] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 153.398428][ T8122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.563'. [ 153.836588][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 153.879394][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 153.885831][ T1140] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.897512][ T1140] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.954014][ T1140] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.962302][ T1140] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.129629][ T8154] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 154.317978][ T8158] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 154.685056][ T8174] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.578'. [ 154.702954][ T8173] lo speed is unknown, defaulting to 1000 [ 154.920314][ T8186] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 155.101221][ T8195] dvmrp0: entered allmulticast mode [ 155.266261][ T8198] ip6gretap0: entered promiscuous mode [ 155.272206][ T8198] vlan2: entered promiscuous mode [ 155.585548][ T6083] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 155.596637][ T6083] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 155.643805][ T6083] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 155.652528][ T6083] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 155.758493][ T8204] lo speed is unknown, defaulting to 1000 [ 155.910852][ T8228] netlink: 104 bytes leftover after parsing attributes in process `syz.1.592'. [ 155.971857][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 155.982815][ T8228] syzkaller1: entered promiscuous mode [ 156.014259][ T8228] syzkaller1: entered allmulticast mode [ 156.217371][ T8245] openvswitch: netlink: Message has 24 unknown bytes. [ 156.261213][ T8246] openvswitch: netlink: Message has 24 unknown bytes. [ 156.307023][ T8245] netlink: 83 bytes leftover after parsing attributes in process `syz.0.595'. [ 156.598957][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 156.610846][ T8257] netlink: 'syz.3.597': attribute type 16 has an invalid length. [ 156.636801][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.599'. [ 156.642254][ T8257] netlink: 'syz.3.597': attribute type 17 has an invalid length. [ 156.844309][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 156.886744][ T8265] netlink: 'syz.1.601': attribute type 4 has an invalid length. [ 157.249258][ T8257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.267861][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 157.280127][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.600'. [ 157.496865][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 157.527227][ T8266] lo speed is unknown, defaulting to 1000 [ 157.741644][ T8290] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 157.782760][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 157.791867][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 157.945578][ T8293] tipc: Started in network mode [ 157.950574][ T8293] tipc: Node identity 323438841829, cluster identity 4711 [ 157.968548][ T8293] tipc: Enabled bearer , priority 0 [ 158.017725][ T8293] syzkaller0: entered promiscuous mode [ 158.030928][ T8293] syzkaller0: entered allmulticast mode [ 158.055161][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 158.083250][ T8298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.124929][ T8292] tipc: Resetting bearer [ 158.200378][ T8292] tipc: Disabling bearer [ 158.283218][ T8311] lo speed is unknown, defaulting to 1000 [ 158.641833][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 158.717012][ T8329] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.852332][ T8340] vlan2: entered allmulticast mode [ 158.861387][ T8340] bridge0: port 2(vlan2) entered blocking state [ 158.868431][ T8340] bridge0: port 2(vlan2) entered disabled state [ 158.877859][ T8340] vlan2: entered promiscuous mode [ 158.878224][ T8343] netlink: 'syz.3.618': attribute type 1 has an invalid length. [ 159.025384][ T8343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.049971][ T8345] macvlan2: entered promiscuous mode [ 159.055676][ T8345] macvlan2: entered allmulticast mode [ 159.062790][ T8345] bond2: entered allmulticast mode [ 159.073857][ T8345] bond2: entered promiscuous mode [ 159.082254][ T8345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.093404][ T8345] team0: Port device macvlan2 added [ 159.118332][ T8348] bond2: (slave ip6gretap1): making interface the new active one [ 159.129895][ T8348] ip6gretap1: entered promiscuous mode [ 159.138242][ T8348] ip6gretap1: entered allmulticast mode [ 159.146631][ T8348] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 159.385433][ T8333] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 159.772224][ T8377] pim6reg: entered allmulticast mode [ 160.356972][ T8405] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.367125][ T8405] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 160.498657][ T8405] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.511338][ T8409] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 160.522167][ T8405] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 160.591002][ T8409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.653081][ T8415] block nbd0: not configured, cannot reconfigure [ 160.721984][ T8416] bond2: (slave veth3): Enslaving as an active interface with a down link [ 160.725393][ T5830] Bluetooth: hci0: command 0x0401 tx timeout [ 160.754555][ T8405] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.766530][ T8405] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 160.859518][ T8405] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.884277][ T8405] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 161.148318][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 161.179994][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.252077][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 161.267578][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.281505][ T8450] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 161.299176][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 161.308256][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.322360][ T8448] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.380216][ T6088] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 161.390025][ T6088] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.411717][ T8448] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.496263][ T8448] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.614193][ T8448] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.770260][ T8463] lo speed is unknown, defaulting to 1000 [ 161.818945][ T8469] netlink: 'syz.3.658': attribute type 4 has an invalid length. [ 161.869040][ T8471] __nla_validate_parse: 12 callbacks suppressed [ 161.869060][ T8471] netlink: 452 bytes leftover after parsing attributes in process `syz.0.659'. [ 161.910985][ T1115] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.995083][ T8471] lo speed is unknown, defaulting to 1000 [ 162.004679][ T1115] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.077862][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.188548][ T8480] openvswitch: netlink: Flow key attr not present in new flow. [ 162.234731][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.235768][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 162.613162][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.676022][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.985554][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 163.017624][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 163.048916][ T8517] netlink: 148 bytes leftover after parsing attributes in process `syz.4.674'. [ 163.275242][ T8528] lo speed is unknown, defaulting to 1000 [ 163.292967][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 163.357822][ T8531] vlan3: entered promiscuous mode [ 163.402068][ T8535] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.492799][ T8535] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.527295][ T8535] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.570029][ T8547] syzkaller1: entered promiscuous mode [ 163.576150][ T8547] syzkaller1: entered allmulticast mode [ 163.586347][ T8547] netlink: 'syz.4.680': attribute type 30 has an invalid length. [ 163.629731][ T8535] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.018494][ T8553] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 164.026936][ T8553] netlink: 152 bytes leftover after parsing attributes in process `syz.3.683'. [ 164.243832][ T8567] netlink: 92 bytes leftover after parsing attributes in process `syz.3.686'. [ 164.287980][ T8562] syzkaller0: entered promiscuous mode [ 164.293834][ T8562] syzkaller0: entered allmulticast mode [ 164.447323][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 165.837300][ T1115] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.858001][ T8580] lo speed is unknown, defaulting to 1000 [ 165.858034][ T6083] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.951390][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.018065][ T1115] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.163154][ T8599] netlink: 'syz.2.694': attribute type 11 has an invalid length. [ 166.193784][ T8599] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.694'. [ 166.253622][ T8599] bridge4: entered promiscuous mode [ 166.263559][ T8599] bridge4: entered allmulticast mode [ 166.297811][ T8599] team0: Port device bridge4 added [ 166.330355][ T8606] bridge0: port 3(team0) entered blocking state [ 166.362704][ T8606] bridge0: port 3(team0) entered disabled state [ 166.377889][ T8606] team0: entered allmulticast mode [ 166.383836][ T8606] team_slave_0: entered allmulticast mode [ 166.389777][ T8606] team_slave_1: entered allmulticast mode [ 166.399709][ T8606] team0: entered promiscuous mode [ 166.405703][ T8606] team_slave_0: entered promiscuous mode [ 166.411819][ T8606] team_slave_1: entered promiscuous mode [ 166.816927][ T8626] lo speed is unknown, defaulting to 1000 [ 167.038785][ T8648] __nla_validate_parse: 2 callbacks suppressed [ 167.038807][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.706'. [ 167.094955][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.710'. [ 167.466922][ T8659] xt_CT: No such helper "snmp_trap" [ 167.494568][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.742140][ T8673] netlink: 'syz.2.718': attribute type 13 has an invalid length. [ 167.757046][ T8673] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.718'. [ 167.929337][ T8683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.717'. [ 168.009272][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 168.367340][ T8688] team_slave_0: entered promiscuous mode [ 168.373315][ T8688] team_slave_1: entered promiscuous mode [ 168.379163][ T8688] geneve0: entered promiscuous mode [ 168.384742][ T8688] dummy0: entered promiscuous mode [ 168.440680][ T8688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.513819][ T8685] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 169.039741][ T8713] xt_time: unknown flags 0xf4 [ 169.083851][ T8715] xt_ecn: cannot match TCP bits for non-tcp packets [ 169.165501][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'. [ 169.214356][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 169.237902][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 169.274600][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 169.305683][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.727'. [ 169.315730][ T8718] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 169.337001][ T8724] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 169.626551][ T8734] netlink: 'syz.0.731': attribute type 10 has an invalid length. [ 170.221050][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.270659][ T5830] block nbd0: Receive control failed (result -32) [ 170.675152][ T8769] netem: change failed [ 170.798833][ T8793] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 170.834444][ T8793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.080971][ T8805] netlink: 'syz.2.749': attribute type 9 has an invalid length. [ 171.650497][ T8816] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.803764][ T8816] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.944481][ T8816] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.014381][ T8816] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.196189][ T1140] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.273705][ T6095] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.292081][ T8847] syzkaller1: entered promiscuous mode [ 172.299288][ T8847] syzkaller1: entered allmulticast mode [ 172.324796][ T8848] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 172.343566][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.375628][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.585000][ T8855] ip6gretap0: entered promiscuous mode [ 172.903768][ T8869] __nla_validate_parse: 14 callbacks suppressed [ 172.903787][ T8869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.772'. [ 172.940795][ T8869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.772'. [ 173.026949][ T8866] pim6reg: entered allmulticast mode [ 173.184911][ T8870] pim6reg: left allmulticast mode [ 173.263565][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.272125][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.280538][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.311745][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.070635][ T8911] lo speed is unknown, defaulting to 1000 [ 174.419245][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 174.458536][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 175.037074][ T8967] tap0: tun_chr_ioctl cmd 1074025676 [ 175.042466][ T8967] tap0: owner set to 0 [ 175.146224][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 175.166331][ T8973] netlink: 'syz.3.795': attribute type 3 has an invalid length. [ 175.340630][ T8979] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 175.465170][ T8986] vlan4: entered allmulticast mode [ 175.470381][ T8986] team0: entered allmulticast mode [ 175.513929][ T8986] team_slave_0: entered allmulticast mode [ 175.519790][ T8986] team_slave_1: entered allmulticast mode [ 175.577207][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 175.614455][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.668817][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.763886][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 175.845508][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 175.868855][ T9004] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.804'. [ 175.970282][ T9012] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 175.978909][ T9012] netlink: 96 bytes leftover after parsing attributes in process `syz.3.806'. [ 175.989205][ T9012] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 176.016753][ T9004] IPVS: persistence engine module ip_vs_pe_ not found [ 176.192701][ T9022] netlink: 'syz.2.810': attribute type 9 has an invalid length. [ 176.675138][ T9053] vlan5: entered promiscuous mode [ 176.732022][ T9058] nftables ruleset with unbound chain [ 176.752612][ T9059] syzkaller0: entered promiscuous mode [ 176.794971][ T9059] syzkaller0: entered allmulticast mode [ 177.038771][ T9078] sctp: [Deprecated]: syz.4.826 (pid 9078) Use of int in maxseg socket option. [ 177.038771][ T9078] Use struct sctp_assoc_value instead [ 177.198707][ T9086] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.211217][ T9086] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 177.276706][ T9086] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.279363][ T9089] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 177.287932][ T9086] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 177.349663][ T9086] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.360148][ T9086] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 177.415130][ T9086] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.434332][ T9086] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 177.538063][ T1115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.549755][ T1115] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.641801][ T9097] Bluetooth: MGMT ver 1.23 [ 177.651231][ T1115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.665601][ T1115] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.695848][ T6097] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.713735][ T6097] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.778177][ T1115] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.799628][ T1115] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.983200][ T9109] x_tables: duplicate underflow at hook 1 [ 178.169969][ T9118] syzkaller0: entered promiscuous mode [ 178.185136][ T9118] syzkaller0: entered allmulticast mode [ 178.215343][ T9120] syzkaller1: entered promiscuous mode [ 178.220885][ T9120] syzkaller1: entered allmulticast mode [ 178.454500][ T9131] __nla_validate_parse: 164 callbacks suppressed [ 178.454524][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 178.705490][ T9138] lo speed is unknown, defaulting to 1000 [ 178.719264][ T9146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.847'. [ 178.810287][ T9146] netlink: 'syz.3.847': attribute type 83 has an invalid length. [ 178.960083][ T9157] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 178.968838][ T9157] netlink: 96 bytes leftover after parsing attributes in process `syz.4.850'. [ 178.979672][ T9157] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 178.988074][ T9157] netlink: 'syz.4.850': attribute type 8 has an invalid length. [ 178.996659][ T9157] netlink: 582 bytes leftover after parsing attributes in process `syz.4.850'. [ 179.006499][ T9157] netlink: 1 bytes leftover after parsing attributes in process `syz.4.850'. [ 179.027487][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 179.073626][ T9156] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 179.111290][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 179.202100][ T6095] bond0: (slave bond_slave_0): interface is now down [ 179.214304][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.231266][ T6095] bond0: (slave bond_slave_1): interface is now down [ 179.257953][ T6095] bond0: now running without any active interface! [ 179.295402][ T9165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.853'. [ 179.368466][ T9173] netlink: 52 bytes leftover after parsing attributes in process `syz.3.856'. [ 179.387924][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.854'. [ 179.634783][ T9180] tipc: Enabled bearer , priority 0 [ 179.780748][ T9180] syzkaller0: entered promiscuous mode [ 179.787527][ T9180] syzkaller0: entered allmulticast mode [ 179.794519][ T9180] tipc: Resetting bearer [ 179.940771][ T6097] tipc: Resetting bearer [ 180.045031][ T9189] tipc: Resetting bearer [ 181.698665][ T9189] tipc: Disabling bearer [ 181.734582][ T9216] tipc: Enabling of bearer rejected, failed to enable media [ 181.776091][ T5892] tipc: Node number set to 706558084 [ 182.360331][ T9263] team0: No ports can be present during mode change [ 182.569040][ T9268] macvlan2: entered allmulticast mode [ 182.586815][ T9268] hsr0: entered allmulticast mode [ 182.606358][ T9268] hsr_slave_0: entered allmulticast mode [ 182.644320][ T9268] hsr_slave_1: entered allmulticast mode [ 182.665020][ T9276] wg1 speed is unknown, defaulting to 1000 [ 182.670966][ T9276] wg1 speed is unknown, defaulting to 1000 [ 182.717703][ T9278] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 182.725700][ T9276] wg1 speed is unknown, defaulting to 1000 [ 182.752370][ T9276] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 182.835849][ T9276] wg1 speed is unknown, defaulting to 1000 [ 182.847660][ T9276] wg1 speed is unknown, defaulting to 1000 [ 182.906586][ T9288] validate_nla: 3 callbacks suppressed [ 182.906605][ T9288] netlink: 'syz.0.882': attribute type 11 has an invalid length. [ 182.925495][ T9276] wg1 speed is unknown, defaulting to 1000 [ 182.946150][ T9276] wg1 speed is unknown, defaulting to 1000 [ 182.983323][ T9290] vlan2: entered allmulticast mode [ 182.989304][ T9290] bond0: entered allmulticast mode [ 182.995565][ T9290] bond_slave_0: entered allmulticast mode [ 183.001355][ T9290] bond_slave_1: entered allmulticast mode [ 183.013051][ T9276] wg1 speed is unknown, defaulting to 1000 [ 183.089423][ T9290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.104934][ T9290] bond_slave_0: left allmulticast mode [ 183.119217][ T9290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.134607][ T9290] bond_slave_1: left allmulticast mode [ 183.140701][ T9290] bond0 (unregistering): Released all slaves [ 183.329854][ T9306] netlink: 'syz.1.886': attribute type 16 has an invalid length. [ 183.402310][ T9306] netlink: 'syz.1.886': attribute type 17 has an invalid length. [ 183.427270][ T5892] wg1 speed is unknown, defaulting to 1000 [ 183.458050][ T9310] : entered promiscuous mode [ 183.530771][ T9306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.721549][ T9323] __nla_validate_parse: 13 callbacks suppressed [ 183.721571][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 183.889805][ T9333] netlink: 'syz.4.894': attribute type 2 has an invalid length. [ 183.900325][ T9334] netlink: 'syz.4.894': attribute type 2 has an invalid length. [ 183.979212][ T9336] openvswitch: netlink: IP tunnel dst address not specified [ 183.996595][ T9334] !: entered promiscuous mode [ 184.015851][ T30] audit: type=1107 audit(1772534493.172:3): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']/]hWFwX$' [ 184.035626][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.894'. [ 184.374381][ T9359] netlink: 'syz.0.902': attribute type 21 has an invalid length. [ 184.382376][ T9359] netlink: 128 bytes leftover after parsing attributes in process `syz.0.902'. [ 184.422687][ T9359] netlink: 'syz.0.902': attribute type 5 has an invalid length. [ 184.433775][ T9359] netlink: 3 bytes leftover after parsing attributes in process `syz.0.902'. [ 184.670078][ T9373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.906'. [ 185.034810][ T9386] tipc: Started in network mode [ 185.047501][ T9386] tipc: Node identity 06b998325b68, cluster identity 4711 [ 185.071689][ T9386] tipc: Enabled bearer , priority 0 [ 185.094249][ T9389] netlink: 116 bytes leftover after parsing attributes in process `syz.2.909'. [ 185.102991][ T9390] syzkaller0: entered promiscuous mode [ 185.118736][ T9390] syzkaller0: entered allmulticast mode [ 185.178158][ T9386] tipc: Resetting bearer [ 185.204691][ T9385] tipc: Resetting bearer [ 185.234211][ T9385] tipc: Disabling bearer [ 185.267264][ T9396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.526571][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 185.618728][ T9407] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 185.627454][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 185.727861][ T9413] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.780777][ T9410] bridge0: Device is already in use. [ 185.918600][ T9426] netlink: 'syz.2.919': attribute type 15 has an invalid length. [ 185.971989][ T9420] syzkaller1: entered promiscuous mode [ 185.995886][ T9420] syzkaller1: entered allmulticast mode [ 186.049249][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.923'. [ 186.080109][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.923'. [ 186.086039][ T9434] syzkaller0: entered promiscuous mode [ 186.103335][ T9434] syzkaller0: entered allmulticast mode [ 186.260329][ T9436] tc_dump_action: action bad kind [ 186.680095][ T9465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.706567][ T9464] siw: device registration error -23 [ 186.747491][ T9464] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link [ 186.772420][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.788996][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.245293][ T9483] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.266742][ T9483] tipc: Started in network mode [ 187.271781][ T9483] tipc: Node identity c6c64b6459d5, cluster identity 4711 [ 187.302662][ T9483] tipc: Enabled bearer , priority 0 [ 187.317309][ T9483] syzkaller0: entered promiscuous mode [ 187.328990][ T9483] syzkaller0: entered allmulticast mode [ 187.370506][ T9483] tipc: Resetting bearer [ 187.404414][ T9482] tipc: Resetting bearer [ 187.439856][ T9482] tipc: Disabling bearer [ 187.877188][ T9512] lo speed is unknown, defaulting to 1000 [ 187.911781][ T9512] wg1 speed is unknown, defaulting to 1000 [ 188.319459][ T9540] lo speed is unknown, defaulting to 1000 [ 188.347793][ T9540] wg1 speed is unknown, defaulting to 1000 [ 188.585799][ T9566] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 188.625181][ T9565] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 189.416953][ T9592] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 189.498001][ T9592] bond3 (unregistering): Released all slaves [ 189.948405][ T9611] netlink: 'syz.4.970': attribute type 5 has an invalid length. [ 190.146674][ T9617] openvswitch: netlink: Duplicate key (type 21). [ 190.169531][ T9617] __nla_validate_parse: 7 callbacks suppressed [ 190.169550][ T9617] netlink: 56 bytes leftover after parsing attributes in process `syz.2.973'. [ 190.512632][ T9627] bond0: entered promiscuous mode [ 190.586931][ T9626] vcan1: entered promiscuous mode [ 190.605386][ T9626] vcan1: entered allmulticast mode [ 190.616011][ T9626] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 190.684945][ T9626] bond0: (slave vcan1): Error -95 calling set_mac_address [ 191.225118][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 191.240858][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 191.400482][ T9656] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.985'. [ 191.509861][ T9664] netlink: 'syz.3.986': attribute type 12 has an invalid length. [ 191.525026][ T8783] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec [ 191.792734][ T9672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.989'. [ 191.937574][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 192.037919][ T9687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.990'. [ 192.110326][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.990'. [ 192.127276][ T9687] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 192.158447][ T9681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.352899][ T9698] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 192.387261][ T9698] team0: Device vxcan1 is of different type [ 192.399247][ T9703] netlink: 876 bytes leftover after parsing attributes in process `syz.0.995'. [ 192.420984][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 192.576848][ T9705] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 193.145472][ T9729] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 193.164215][ T9729] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 193.299007][ T9729] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 193.320662][ T9729] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 193.356835][ T9742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.407112][ T9741] netlink: 'syz.4.1006': attribute type 8 has an invalid length. [ 193.428438][ T9741] sch_fq: defrate 0 ignored. [ 193.461835][ T9729] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 193.505252][ T9729] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 193.607800][ T9729] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 193.628804][ T9729] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 193.810267][ T6083] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 193.819126][ T6083] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 193.884510][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 193.902120][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 193.933286][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 193.962407][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.025643][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.042201][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.489203][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.628657][ T9783] netlink: 'syz.4.1015': attribute type 10 has an invalid length. [ 194.740653][ T9788] syzkaller0: entered promiscuous mode [ 194.754482][ T9788] syzkaller0: entered allmulticast mode [ 196.554634][ T9795] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 196.562407][ T9795] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 196.584262][ T9797] macsec1: entered promiscuous mode [ 196.830613][ T9814] lo speed is unknown, defaulting to 1000 [ 196.842497][ T9815] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.858602][ T9815] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.877450][ T9814] wg1 speed is unknown, defaulting to 1000 [ 197.012911][ T9821] lo speed is unknown, defaulting to 1000 [ 197.077982][ T9821] wg1 speed is unknown, defaulting to 1000 [ 197.090638][ T9815] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.106933][ T9815] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.187752][ T9815] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.198216][ T9815] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.276988][ T9827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.286383][ T9833] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 197.396953][ T9815] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.439982][ T9815] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.525379][ T9843] __nla_validate_parse: 5 callbacks suppressed [ 197.525402][ T9843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 197.541704][ T9843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 197.566211][ T9843] netlink: 'syz.0.1028': attribute type 2 has an invalid length. [ 197.595538][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 197.697693][ T9845] Can't find ip_set type bitmap:ip,mac [ 197.914969][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1031'. [ 197.992840][ T1115] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.010429][ T1115] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.037236][ T9860] batman_adv: batadv0: Removing interface: gretap1 [ 198.097757][ T1115] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.106682][ T1115] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.147324][ T1115] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.156379][ T1115] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.195444][ T6097] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.205591][ T6097] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.234769][ T9865] pimreg: tun_chr_ioctl cmd 1074025677 [ 198.240489][ T9865] pimreg: linktype set to 823 [ 198.398504][ T9877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1037'. [ 198.604480][ T9881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 198.829977][ T9891] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 198.876449][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 198.927659][ T9890] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 199.198866][ T9915] block nbd0: NBD_DISCONNECT [ 199.204372][ T9915] block nbd0: Send disconnect failed -32 [ 199.244228][ T9915] block nbd0: shutting down sockets [ 199.259241][ T9919] netlink: 'syz.2.1051': attribute type 13 has an invalid length. [ 199.394111][ T9923] block nbd0: not configured, cannot reconfigure [ 199.435775][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 199.456501][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 199.565503][ T9933] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 199.635097][ T9934] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 199.664647][ T9930] lo speed is unknown, defaulting to 1000 [ 199.673001][ T9930] wg1 speed is unknown, defaulting to 1000 [ 200.413311][ T9972] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 200.561971][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 201.652134][T10034] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 201.855131][T10038] veth11: entered promiscuous mode [ 202.277337][T10066] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 202.285446][T10066] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 202.482231][T10075] lo speed is unknown, defaulting to 1000 [ 202.516699][T10075] wg1 speed is unknown, defaulting to 1000 [ 202.636490][T10084] __nla_validate_parse: 4 callbacks suppressed [ 202.636511][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 202.687267][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 202.709112][T10086] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 202.740001][T10086] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.930920][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1107'. [ 203.058620][T10108] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 203.142509][T10114] xt_bpf: check failed: parse error [ 203.155542][T10114] siw: device registration error -23 [ 203.169596][T10086] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.189289][T10086] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 203.321747][T10086] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.356223][T10086] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 203.463565][T10106] wg1 speed is unknown, defaulting to 1000 [ 203.486314][T10086] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.536241][T10086] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 203.668417][T10129] netem: incorrect gi model size [ 203.675254][T10129] netem: change failed [ 203.844711][T10111] IPVS: length: 132 != 8 [ 203.873876][ T6097] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.882263][ T6097] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 203.921204][ T6097] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.940994][ T6097] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 203.973232][ T1586] IPVS: starting estimator thread 0... [ 204.013627][ T6088] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.022653][ T6088] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.072889][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 204.103582][T10144] IPVS: using max 28 ests per chain, 67200 per kthread [ 204.119374][ T6088] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.142121][ T6088] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.454042][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1126'. [ 204.486847][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 204.530590][T10167] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 204.555777][T10167] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1128'. [ 204.646447][T10167] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 205.396069][ T1115] IPVS: stop unused estimator thread 0... [ 205.567410][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1136'. [ 205.980041][ T5899] udevd[5899]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 206.706259][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 206.720111][T10254] wg1 speed is unknown, defaulting to 1000 [ 207.141716][T10272] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1153'. [ 207.498440][T10290] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 207.713053][T10300] batadv0: entered promiscuous mode [ 207.728877][T10300] vlan1: entered promiscuous mode [ 208.362140][T10290] wg1 speed is unknown, defaulting to 1000 [ 208.452871][T10304] __nla_validate_parse: 2 callbacks suppressed [ 208.452891][T10304] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1162'. [ 208.574083][T10330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1166'. [ 208.663179][T10332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1167'. [ 208.715610][T10334] netlink: 'syz.1.1168': attribute type 3 has an invalid length. [ 208.749075][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'. [ 208.762239][T10334] netlink: 'syz.1.1168': attribute type 3 has an invalid length. [ 208.933597][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 209.167842][T10344] syzkaller0: entered promiscuous mode [ 209.213674][T10344] syzkaller0: entered allmulticast mode [ 209.298582][T10364] wg1 speed is unknown, defaulting to 1000 [ 209.529828][T10384] openvswitch: netlink: Message has 572 unknown bytes. [ 209.537223][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.647622][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1181'. [ 209.781020][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 210.007810][T10404] dvmrp0: entered allmulticast mode [ 210.026684][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 210.874511][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 210.913218][T10423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1190'. [ 211.131210][T10431] syzkaller0: entered promiscuous mode [ 211.157600][T10431] syzkaller0: entered allmulticast mode [ 211.575174][T10470] netlink: 'syz.3.1203': attribute type 4 has an invalid length. [ 211.924530][T10398] Bluetooth: hci0: command 0x0401 tx timeout [ 211.931005][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 211.938433][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 211.946183][T10398] Bluetooth: hci4: command 0x0406 tx timeout [ 213.009795][T10464] tipc: New replicast peer: 255.255.255.255 [ 213.017752][T10464] tipc: Enabled bearer , priority 10 [ 213.100290][T10466] wg1 speed is unknown, defaulting to 1000 [ 213.308023][T10481] smc: adding net device wg2 with user defined pnetid SYZ0 [ 213.466952][T10497] tipc: Enabled bearer , priority 0 [ 213.525571][T10504] __nla_validate_parse: 2 callbacks suppressed [ 213.525592][T10504] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1211'. [ 213.554341][T10493] syzkaller0: entered promiscuous mode [ 213.559859][T10493] syzkaller0: entered allmulticast mode [ 213.579010][T10501] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.587532][ T5840] IPVS: starting estimator thread 0... [ 213.611372][T10505] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.636802][T10497] tipc: Resetting bearer [ 213.694093][T10506] IPVS: using max 29 ests per chain, 69600 per kthread [ 213.791640][T10492] tipc: Resetting bearer [ 213.815397][T10492] tipc: Disabling bearer [ 213.913008][T10518] wg1 speed is unknown, defaulting to 1000 [ 213.985601][T10508] wg1 speed is unknown, defaulting to 1000 [ 214.015983][T10525] netlink: 'syz.3.1217': attribute type 15 has an invalid length. [ 214.149280][ T8783] tipc: Node number set to 2668841828 [ 214.210537][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 214.562457][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'. [ 214.598608][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'. [ 214.625946][T10559] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1227'. [ 214.645677][T10562] rdma_op ffff8880559a81f0 conn xmit_rdma 0000000000000000 [ 214.657205][T10551] wg1 speed is unknown, defaulting to 1000 [ 214.694546][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 214.808325][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.817081][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.860099][T10572] netlink: 'syz.4.1231': attribute type 11 has an invalid length. [ 214.878730][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 214.976961][T10576] sctp: [Deprecated]: syz.1.1232 (pid 10576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.976961][T10576] Use struct sctp_sack_info instead [ 215.080298][T10582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 215.330802][T10594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1238'. [ 215.356430][T10596] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.371949][T10594] rdma_rxe: rxe_newlink: failed to add lo [ 215.400271][T10594] IPVS: stopping backup sync thread 7358 ... [ 215.450369][T10596] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.503939][T10596] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.625271][T10596] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.830652][T10615] bond5 (unregistering): Released all slaves [ 215.890154][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 215.940252][T10614] wg1 speed is unknown, defaulting to 1000 [ 216.023325][T10624] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 216.238772][T10633] netlink: 'syz.3.1251': attribute type 10 has an invalid length. [ 216.276036][ T1115] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.294393][ T1115] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.318306][T10633] team0: Device veth1_macvtap failed to register rx_handler [ 216.388306][ T6083] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.472132][T10645] FAULT_INJECTION: forcing a failure. [ 216.472132][T10645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.495144][ T1115] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.503654][T10645] CPU: 0 UID: 0 PID: 10645 Comm: syz.1.1254 Not tainted syzkaller #0 PREEMPT(full) [ 216.503692][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.503707][T10645] Call Trace: [ 216.503716][T10645] [ 216.503725][T10645] dump_stack_lvl+0xe8/0x150 [ 216.503762][T10645] should_fail_ex+0x412/0x560 [ 216.503794][T10645] _copy_from_iter+0x1d3/0x1670 [ 216.503826][T10645] ? rcu_is_watching+0x15/0xb0 [ 216.503863][T10645] ? __pfx__copy_from_iter+0x10/0x10 [ 216.503900][T10645] ? netlink_sendmsg+0x650/0xb40 [ 216.503925][T10645] ? skb_put+0x11b/0x210 [ 216.503958][T10645] netlink_sendmsg+0x6c0/0xb40 [ 216.503995][T10645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.504026][T10645] ? aa_sock_msg_perm+0xf1/0x1b0 [ 216.504054][T10645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.504078][T10645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.504103][T10645] ____sys_sendmsg+0xa68/0xad0 [ 216.504144][T10645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.504185][T10645] ? import_iovec+0x73/0xa0 [ 216.504219][T10645] ___sys_sendmsg+0x2a5/0x360 [ 216.504256][T10645] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.504451][T10645] ? __fget_files+0x2a/0x420 [ 216.504532][T10645] ? __fget_files+0x3a0/0x420 [ 216.504636][T10645] __x64_sys_sendmsg+0x1bd/0x2a0 [ 216.504738][T10645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.504849][T10645] ? __pfx_ksys_write+0x10/0x10 [ 216.504934][T10645] do_syscall_64+0x14d/0xf80 [ 216.505013][T10645] ? trace_irq_disable+0x3b/0x150 [ 216.505086][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.505140][T10645] ? clear_bhb_loop+0x40/0x90 [ 216.505197][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.505258][T10645] RIP: 0033:0x7fb9db79c799 [ 216.505318][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.505367][T10645] RSP: 002b:00007fb9d99ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.505422][T10645] RAX: ffffffffffffffda RBX: 00007fb9dba15fa0 RCX: 00007fb9db79c799 [ 216.505471][T10645] RDX: 0000000000000044 RSI: 0000200000001200 RDI: 0000000000000003 [ 216.505504][T10645] RBP: 00007fb9d99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 216.505537][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.505568][T10645] R13: 00007fb9dba16038 R14: 00007fb9dba15fa0 R15: 00007ffd29c2fb58 [ 216.505658][T10645] [ 216.768998][T10647] veth1_to_hsr: entered promiscuous mode [ 216.799749][T10647] macvtap1: entered promiscuous mode [ 216.817004][T10647] macvtap1: entered allmulticast mode [ 216.836906][T10647] veth1_to_hsr: entered allmulticast mode [ 217.033561][T10665] netlink: 'syz.4.1261': attribute type 11 has an invalid length. [ 217.429068][T10690] FAULT_INJECTION: forcing a failure. [ 217.429068][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 217.474160][T10690] CPU: 1 UID: 0 PID: 10690 Comm: syz.1.1267 Not tainted syzkaller #0 PREEMPT(full) [ 217.474188][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.474200][T10690] Call Trace: [ 217.474208][T10690] [ 217.474216][T10690] dump_stack_lvl+0xe8/0x150 [ 217.474250][T10690] should_fail_ex+0x412/0x560 [ 217.474278][T10690] should_failslab+0xa8/0x100 [ 217.474302][T10690] ? skb_clone+0x212/0x3a0 [ 217.474333][T10690] kmem_cache_alloc_noprof+0x87/0x650 [ 217.474363][T10690] ? __netlink_lookup+0xc6/0x8b0 [ 217.474397][T10690] skb_clone+0x212/0x3a0 [ 217.474433][T10690] __netlink_deliver_tap+0x404/0x850 [ 217.474473][T10690] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.474502][T10690] netlink_deliver_tap+0x19c/0x1b0 [ 217.474530][T10690] netlink_unicast+0x7e3/0x9b0 [ 217.474563][T10690] ? __pfx_netlink_unicast+0x10/0x10 [ 217.474590][T10690] ? netlink_sendmsg+0x650/0xb40 [ 217.474623][T10690] ? skb_put+0x11b/0x210 [ 217.474656][T10690] netlink_sendmsg+0x813/0xb40 [ 217.474692][T10690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.474722][T10690] ? aa_sock_msg_perm+0xf1/0x1b0 [ 217.474749][T10690] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.474773][T10690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.474798][T10690] ____sys_sendmsg+0xa68/0xad0 [ 217.474840][T10690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.474881][T10690] ? import_iovec+0x73/0xa0 [ 217.474916][T10690] ___sys_sendmsg+0x2a5/0x360 [ 217.474952][T10690] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.475024][T10690] ? __fget_files+0x2a/0x420 [ 217.475054][T10690] ? __fget_files+0x3a0/0x420 [ 217.475091][T10690] __x64_sys_sendmsg+0x1bd/0x2a0 [ 217.475126][T10690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.475167][T10690] ? __pfx_ksys_write+0x10/0x10 [ 217.475201][T10690] do_syscall_64+0x14d/0xf80 [ 217.475230][T10690] ? trace_irq_disable+0x3b/0x150 [ 217.475259][T10690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.475280][T10690] ? clear_bhb_loop+0x40/0x90 [ 217.475306][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.475326][T10690] RIP: 0033:0x7fb9db79c799 [ 217.475347][T10690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.475365][T10690] RSP: 002b:00007fb9d99ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.475388][T10690] RAX: ffffffffffffffda RBX: 00007fb9dba15fa0 RCX: 00007fb9db79c799 [ 217.475404][T10690] RDX: 0000000000000044 RSI: 0000200000001200 RDI: 0000000000000003 [ 217.475417][T10690] RBP: 00007fb9d99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 217.475431][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.475443][T10690] R13: 00007fb9dba16038 R14: 00007fb9dba15fa0 R15: 00007ffd29c2fb58 [ 217.475476][T10690] [ 217.845698][T10696] team0: left allmulticast mode [ 217.850731][T10696] team_slave_0: left allmulticast mode [ 217.864997][T10696] team_slave_1: left allmulticast mode [ 217.870576][T10696] team0: left promiscuous mode [ 217.911544][T10696] team_slave_0: left promiscuous mode [ 217.917947][T10696] team_slave_1: left promiscuous mode [ 217.925038][T10696] bridge0: port 3(team0) entered disabled state [ 217.943272][T10696] bridge_slave_0: left allmulticast mode [ 217.949931][T10696] bridge_slave_0: left promiscuous mode [ 217.956435][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.971486][T10696] bridge_slave_1: left allmulticast mode [ 217.977960][T10696] bridge_slave_1: left promiscuous mode [ 217.985481][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.072073][T10696] team0: Port device team_slave_0 removed [ 218.086322][T10696] team0: Port device team_slave_1 removed [ 218.094810][T10696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.105345][T10696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.144441][T10703] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.158817][T10710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.166147][T10710] IPv6: NLM_F_CREATE should be set when creating new route [ 218.173850][T10703] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 218.214985][T10713] smc: net device wlan0 applied user defined pnetid SYZ0 [ 218.316653][T10703] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.355016][T10703] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 218.384023][T10720] bpq0: entered allmulticast mode [ 218.466200][T10703] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.482931][T10703] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 218.544966][T10703] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.574228][T10703] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 218.652085][T10736] __nla_validate_parse: 9 callbacks suppressed [ 218.652104][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 218.679800][T10733] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1280'. [ 218.693916][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 218.772168][ T1115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 218.780919][ T1115] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 218.799545][T10742] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 218.825832][ T1140] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 218.834726][ T1140] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 218.850790][ T1140] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 218.860402][ T1140] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.294254][T10742] syz_tun: left promiscuous mode [ 219.351752][T10742] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.407300][T10742] team_slave_0: left promiscuous mode [ 219.413331][T10742] team_slave_1: left promiscuous mode [ 219.445343][T10742] geneve0: left promiscuous mode [ 219.587799][T10742] wg1: left promiscuous mode [ 219.592492][T10742] wg1: left allmulticast mode [ 219.682315][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.735275][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.181569][T10742] vlan3: left promiscuous mode [ 220.187325][T10742] geneve1: left promiscuous mode [ 220.193036][T10742] sit1: left promiscuous mode [ 220.199409][T10742] sit1: left allmulticast mode [ 220.231225][T10742] veth11: left promiscuous mode [ 220.331939][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.358511][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.382497][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.413585][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.439181][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.468243][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.502038][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.532144][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.570803][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.603275][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.849135][T10789] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1291'. [ 221.029068][T10792] wg1 speed is unknown, defaulting to 1000 [ 221.178863][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 221.261102][T10802] tipc: Enabling of bearer rejected, failed to enable media [ 221.657186][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 221.666741][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 222.014772][T10844] netlink: 'syz.3.1305': attribute type 3 has an invalid length. [ 222.041102][T10844] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1305'. [ 222.549073][T10861] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 222.583719][T10861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 222.603770][T10861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 222.682683][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 224.677921][T10874] ipvlan2: entered allmulticast mode [ 224.683276][T10874] veth0_vlan: entered allmulticast mode [ 224.780189][T10898] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 224.787852][T10898] pim6reg1: linktype set to 776 [ 224.845999][T10910] pimreg: entered allmulticast mode [ 224.867315][T10912] dvmrp0: left allmulticast mode [ 224.882760][T10912] pimreg: left allmulticast mode [ 224.971003][T10918] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 225.078109][T10921] wg1 speed is unknown, defaulting to 1000 [ 225.341629][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1322'. [ 225.401192][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1322'. [ 225.511293][T10935] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1325'. [ 225.588179][T10937] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1326'. [ 225.977162][T10944] [ 225.979570][T10944] ====================================================== [ 225.986631][T10944] WARNING: possible circular locking dependency detected [ 225.993703][T10944] syzkaller #0 Not tainted [ 225.998214][T10944] ------------------------------------------------------ [ 226.005268][T10944] syz.3.1328/10944 is trying to acquire lock: [ 226.011392][T10944] ffffffff8e85e9a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 226.021048][T10944] [ 226.021048][T10944] but task is already holding lock: [ 226.028464][T10944] ffff8880266d4318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 226.038819][T10944] [ 226.038819][T10944] which lock already depends on the new lock. [ 226.038819][T10944] [ 226.049263][T10944] [ 226.049263][T10944] the existing dependency chain (in reverse order) is: [ 226.058319][T10944] [ 226.058319][T10944] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 226.066997][T10944] blk_alloc_queue+0x546/0x680 [ 226.072348][T10944] __blk_mq_alloc_disk+0x197/0x390 [ 226.078035][T10944] nbd_dev_add+0x499/0xb50 [ 226.083034][T10944] nbd_init+0x168/0x1f0 [ 226.087772][T10944] do_one_initcall+0x250/0x8d0 [ 226.093122][T10944] do_initcall_level+0x104/0x190 [ 226.098644][T10944] do_initcalls+0x59/0xa0 [ 226.103557][T10944] kernel_init_freeable+0x2a6/0x3e0 [ 226.109335][T10944] kernel_init+0x1d/0x1d0 [ 226.114243][T10944] ret_from_fork+0x51e/0xb90 [ 226.119464][T10944] ret_from_fork_asm+0x1a/0x30 [ 226.124819][T10944] [ 226.124819][T10944] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 226.132091][T10944] fs_reclaim_acquire+0x71/0x100 [ 226.137609][T10944] prepare_alloc_pages+0x152/0x650 [ 226.143301][T10944] __alloc_frozen_pages_noprof+0x12f/0x380 [ 226.149682][T10944] __alloc_pages_noprof+0xa/0x30 [ 226.155201][T10944] pcpu_populate_chunk+0x182/0xb30 [ 226.160887][T10944] pcpu_alloc_noprof+0xc6c/0x19c0 [ 226.166489][T10944] xt_percpu_counter_alloc+0x161/0x220 [ 226.172545][T10944] translate_table+0x1332/0x20b0 [ 226.178060][T10944] ip6t_register_table+0x11b/0x800 [ 226.183762][T10944] ip6table_raw_table_init+0x54/0x80 [ 226.189631][T10944] xt_find_table_lock+0x30c/0x3e0 [ 226.195246][T10944] xt_request_find_table_lock+0x26/0x100 [ 226.201467][T10944] do_ip6t_get_ctl+0x716/0x1230 [ 226.206897][T10944] nf_getsockopt+0x26e/0x290 [ 226.212074][T10944] ipv6_getsockopt+0x1fd/0x2b0 [ 226.217459][T10944] do_sock_getsockopt+0x2d3/0x3f0 [ 226.223065][T10944] __x64_sys_getsockopt+0x1a4/0x240 [ 226.228848][T10944] do_syscall_64+0x14d/0xf80 [ 226.234019][T10944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.240487][T10944] [ 226.240487][T10944] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 226.248281][T10944] __lock_acquire+0x15a5/0x2cf0 [ 226.253722][T10944] lock_acquire+0xf0/0x2e0 [ 226.258719][T10944] __mutex_lock+0x19f/0x1300 [ 226.263891][T10944] pcpu_alloc_noprof+0x218/0x19c0 [ 226.269495][T10944] sbitmap_init_node+0x1e1/0x640 [ 226.275009][T10944] sbitmap_queue_init_node+0x3e/0x4d0 [ 226.280958][T10944] blk_mq_init_tags+0x15c/0x2d0 [ 226.286382][T10944] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 226.292428][T10944] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 226.298856][T10944] nbd_start_device+0x17f/0xb10 [ 226.304285][T10944] nbd_genl_connect+0x165b/0x1cf0 [ 226.309928][T10944] genl_family_rcv_msg_doit+0x22a/0x330 [ 226.316062][T10944] genl_rcv_msg+0x61c/0x7a0 [ 226.321147][T10944] netlink_rcv_skb+0x232/0x4b0 [ 226.326506][T10944] genl_rcv+0x28/0x40 [ 226.331067][T10944] netlink_unicast+0x80f/0x9b0 [ 226.336405][T10944] netlink_sendmsg+0x813/0xb40 [ 226.341744][T10944] ____sys_sendmsg+0xa68/0xad0 [ 226.347086][T10944] ___sys_sendmsg+0x2a5/0x360 [ 226.352346][T10944] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.357869][T10944] do_syscall_64+0x14d/0xf80 [ 226.363038][T10944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.369499][T10944] [ 226.369499][T10944] other info that might help us debug this: [ 226.369499][T10944] [ 226.379773][T10944] Chain exists of: [ 226.379773][T10944] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 226.379773][T10944] [ 226.393496][T10944] Possible unsafe locking scenario: [ 226.393496][T10944] [ 226.400988][T10944] CPU0 CPU1 [ 226.406404][T10944] ---- ---- [ 226.411818][T10944] lock(&q->q_usage_counter(io)#49); [ 226.417254][T10944] lock(fs_reclaim); [ 226.423809][T10944] lock(&q->q_usage_counter(io)#49); [ 226.431767][T10944] lock(pcpu_alloc_mutex); [ 226.436319][T10944] [ 226.436319][T10944] *** DEADLOCK *** [ 226.436319][T10944] [ 226.444503][T10944] 6 locks held by syz.3.1328/10944: [ 226.449743][T10944] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 226.458013][T10944] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 226.467064][T10944] #2: ffff8880266799d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 226.478539][T10944] #3: ffff8880266798d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 226.489581][T10944] #4: ffff8880266d4318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 226.500389][T10944] #5: ffff8880266d4350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 226.511453][T10944] [ 226.511453][T10944] stack backtrace: [ 226.517396][T10944] CPU: 1 UID: 0 PID: 10944 Comm: syz.3.1328 Not tainted syzkaller #0 PREEMPT(full) [ 226.517428][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.517442][T10944] Call Trace: [ 226.517451][T10944] [ 226.517460][T10944] dump_stack_lvl+0xe8/0x150 [ 226.517496][T10944] print_circular_bug+0x2e1/0x300 [ 226.517533][T10944] check_noncircular+0x12e/0x150 [ 226.517572][T10944] __lock_acquire+0x15a5/0x2cf0 [ 226.517614][T10944] lock_acquire+0xf0/0x2e0 [ 226.517641][T10944] ? pcpu_alloc_noprof+0x218/0x19c0 [ 226.517671][T10944] __mutex_lock+0x19f/0x1300 [ 226.517703][T10944] ? pcpu_alloc_noprof+0x218/0x19c0 [ 226.517726][T10944] ? stack_depot_save_flags+0x3f3/0x810 [ 226.517756][T10944] ? kasan_save_track+0x4f/0x80 [ 226.517778][T10944] ? kasan_save_track+0x3e/0x80 [ 226.517797][T10944] ? pcpu_alloc_noprof+0x218/0x19c0 [ 226.517819][T10944] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 226.517841][T10944] ? blk_mq_init_tags+0x83/0x2d0 [ 226.517866][T10944] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 226.517887][T10944] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 226.517912][T10944] ? __pfx___mutex_lock+0x10/0x10 [ 226.517943][T10944] ? genl_rcv+0x28/0x40 [ 226.517976][T10944] ? ____sys_sendmsg+0xa68/0xad0 [ 226.518008][T10944] ? ___sys_sendmsg+0x2a5/0x360 [ 226.518049][T10944] pcpu_alloc_noprof+0x218/0x19c0 [ 226.518080][T10944] sbitmap_init_node+0x1e1/0x640 [ 226.518113][T10944] sbitmap_queue_init_node+0x3e/0x4d0 [ 226.518148][T10944] blk_mq_init_tags+0x15c/0x2d0 [ 226.518179][T10944] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 226.518204][T10944] ? kfree+0x1c1/0x630 [ 226.518234][T10944] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 226.518262][T10944] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 226.518297][T10944] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 226.518327][T10944] ? sysfs_add_file_mode_ns+0x259/0x300 [ 226.518367][T10944] nbd_start_device+0x17f/0xb10 [ 226.518403][T10944] ? device_create_file+0xf4/0x1b0 [ 226.518438][T10944] nbd_genl_connect+0x165b/0x1cf0 [ 226.518476][T10944] ? __pfx_nbd_genl_connect+0x10/0x10 [ 226.518510][T10944] ? rcu_is_watching+0x15/0xb0 [ 226.518546][T10944] ? __nla_parse+0x40/0x60 [ 226.518577][T10944] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 226.518617][T10944] genl_family_rcv_msg_doit+0x22a/0x330 [ 226.518657][T10944] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.518701][T10944] ? __lock_acquire+0x6b5/0x2cf0 [ 226.518732][T10944] genl_rcv_msg+0x61c/0x7a0 [ 226.518770][T10944] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.518804][T10944] ? __pfx_nbd_genl_connect+0x10/0x10 [ 226.518834][T10944] ? __lock_acquire+0x6b5/0x2cf0 [ 226.518868][T10944] netlink_rcv_skb+0x232/0x4b0 [ 226.518896][T10944] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.518931][T10944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.518967][T10944] ? down_read+0x272/0x2e0 [ 226.518985][T10944] ? genl_rcv+0xd/0x40 [ 226.519018][T10944] genl_rcv+0x28/0x40 [ 226.519050][T10944] netlink_unicast+0x80f/0x9b0 [ 226.519078][T10944] ? __pfx_netlink_unicast+0x10/0x10 [ 226.519103][T10944] ? netlink_sendmsg+0x650/0xb40 [ 226.519130][T10944] ? skb_put+0x11b/0x210 [ 226.519162][T10944] netlink_sendmsg+0x813/0xb40 [ 226.519195][T10944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.519225][T10944] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 226.519258][T10944] ? aa_sock_msg_perm+0xf1/0x1b0 [ 226.519285][T10944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.519309][T10944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.519337][T10944] ____sys_sendmsg+0xa68/0xad0 [ 226.519382][T10944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.519420][T10944] ? import_iovec+0x73/0xa0 [ 226.519453][T10944] ___sys_sendmsg+0x2a5/0x360 [ 226.519489][T10944] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.519526][T10944] ? futex_wake+0x4ac/0x580 [ 226.519574][T10944] ? __fget_files+0x2a/0x420 [ 226.519604][T10944] ? __fget_files+0x3a0/0x420 [ 226.519641][T10944] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.519676][T10944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.519715][T10944] ? rcu_is_watching+0x15/0xb0 [ 226.519752][T10944] do_syscall_64+0x14d/0xf80 [ 226.519783][T10944] ? trace_irq_disable+0x3b/0x150 [ 226.519817][T10944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.519840][T10944] ? clear_bhb_loop+0x40/0x90 [ 226.519865][T10944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.519887][T10944] RIP: 0033:0x7f26b5f9c799 [ 226.519908][T10944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.519928][T10944] RSP: 002b:00007f26b6db0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.519952][T10944] RAX: ffffffffffffffda RBX: 00007f26b6215fa0 RCX: 00007f26b5f9c799 [ 226.519969][T10944] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 000000000000000b [ 226.519985][T10944] RBP: 00007f26b6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 226.519999][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.520012][T10944] R13: 00007f26b6216038 R14: 00007f26b6215fa0 R15: 00007ffe827807b8 [ 226.520038][T10944] [ 227.055777][ T5831] block nbd0: Receive control failed (result -32) [ 227.062656][ T5831] block nbd0: Receive control failed (result -32)