last executing test programs: 3m44.008095056s ago: executing program 0 (id=463): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x24, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x24}}, 0x4008030) close(r3) socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x2}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) bind$rds(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073007a310000000008000440000000000900010073797a300000000008"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r9}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f0000000100)="36e6736a645224a3405f10", &(0x7f0000000240), 0x2}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYRES16=r6, @ANYRES16=r11, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}, 0x1, 0x0, 0x0, 0x2c801}, 0x11) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 3m42.019767553s ago: executing program 0 (id=472): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xb4}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0xc}, {r2, 0x4000}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r2, 0x7866) shutdown(r2, 0x0) unshare(0x400) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x8f, 0x1, 0x3, 0x1, 0xfffffffffffffff9, 0x7, 0x1}, &(0x7f0000000240)={0x9, 0x5, 0x3, 0x6, 0x5, 0xffffffffffffffff, 0xc0000, 0x4}, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90", 0xd) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300016201000010800000000008c4a46d9bb2c16", @ANYRES32=0x0, @ANYBLOB="0000000000000000050010000400000008001b0000000000"], 0x30}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000240), 0x831f}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000100)=0x100000001) 3m41.29229228s ago: executing program 0 (id=478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x5, @remote, 0xffffbce5}], 0xb0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0x8000000000000000, 0x4, 0x9, 0x8, 0x4}, [{0x9d9b, 0x0, 0x2}, {0x9, 0x0, 0x9, 0xf7}]}) 3m40.988887952s ago: executing program 0 (id=481): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x402040, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180), 0x4) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) close(0x3) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r10, &(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=0x0, @ANYRES8=r8, @ANYRES8, @ANYRESHEX=r5], 0x33) sendfile(r10, r8, 0x0, 0x10000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r12, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000800) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001000)="d504b0e048fba24bf370c3323d8a6e13d986368ee3174791b895925caa2ffa00333619ad86150be45c5a8dba0329680f8e748141f4241be8f155774e25bb6c29a1fd87d33f7366900a7cc77f4182e27fd42279f5de39c655e0c928dc60715de9dc1be69e3048f12ead23b7f4139516ab16722383d5e435ac70682f7696a92378aa3553b3e6ad9a29afbd9e8c4ab5cd1aca9e2bb42d13f0fbd4ebce265aad81e10047169e25869a7309f7", 0xaa}, {&(0x7f00000010c0)="f4f5cde668756bdca46c44f343154aa3dce08e187fd7a9e3cd54dce7b7097a83c33f66187c832e4fb585dea51b527fc9559683fec695199ca6d8", 0x3a}, {&(0x7f0000001100)="bf941fc5a0875148f1d44e84b05b4dae401e3d7064673db8b7664013af51247f8e72b190ebd6899b7351a03b0affe93a37febf030b0cd7fbba9c9a0d49a5360fc929aa73073a74f99a1b9475cea316f49b3d265760c752d2257ea746f10699eb4cd27ab9bc251a9fbe1a89334afece37c1b7f35d9b5c5a455e71c9786ff018761e0e46fbdb73984de2f9f2647680006f09984ce0c963d8881d6e6f1c5461dcbe34e858bc8b082d24bd5711", 0xab}], 0x3, &(0x7f0000001400)=[@rights={{0x1c, 0x1, 0x1, [r10, r13, r5]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x30, 0x1, 0x1, [r6, r4, r8, r13, r8, 0xffffffffffffffff, r11, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}], 0xc8, 0xc001}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001500)="454379f4af", 0x5}, {&(0x7f0000001540)="b6bf36cbea2eb37dd0170d56562049a6437cfadae0df46cc9a3a18df21fc4aa1b0cefc947f4988a5b3a6411b84e302db26d0e0ab13c9596cedc3f125c6046dad31412a2f0b48d7791e8447175c2274582ba720b11693dfaf9faf9b2dc9ef5357ee6a280b61794e1175f02ba49095b368cf639fa33c9a73bc615d9d851cb008faaf5af37188f565a040651cf79a91e03f1452d1eb69c9c7e363ea5abf0ba61a6981c8e79a7d7479137cf32d503b183a040b5dfbf609d60b561502682bcdc4f606472a7035c7781c7b55308df9809cbd0f5e47ef9f8392382683c3", 0xda}, {&(0x7f0000001640)="38673609d1562bd6aff74a0a419c6ef1a99baf0cce07824612df144eb1ccb6cd1f29272e941836c378cbb9e85a2d6bd084bc256dbfcd3d9cb733198cfeb57db6d3fac2e8219c8fe6c1be7c8dea9281275d2261fea43f1d", 0x57}, {&(0x7f00000016c0)="f3c98582fcbc2e5f9ca469160f3bae51dde04899b3e163074ec28bfbd95821eec2a69ddc9d9c9fed38dc49275f71cad7647c45ac6ea4083e81b4d1093fbaa804395af4c2dade2df68bd16fd817234a503057717625f07e944159a4895d34166c8fe379c6bbd95eaec61c9e8061ba376db87fc6b652f8f5055c6b44b286d46a785366a39f15a50dcf97e55ae748eff410c3fad207694021c20c95f5e66b095d5368b2d51cfe758a65b137c51e8e9d279dbf53646da04d8bc19ffd53476fd9915aff852600c8ee77dcc294483e2ec0e52800e82210432193ba3a3475c072375590cfafdd38f7df9ee21edb06", 0xeb}], 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES32=r7, @ANYRES32=r11, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0x44}}], 0x2, 0x40004) (async) ioctl$TUNSETGROUP(r3, 0x400454ce, r14) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_USER(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3ed, 0x400, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x800) 3m40.228364194s ago: executing program 0 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r1, 0x5c2a7000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r2, 0xac9d4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000001, 0x6e073, 0xffffffffffffffff, 0x2000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf254900000008000300", @ANYRES32=r4, @ANYBLOB="0c0083000200000000000000149cdc6b10701812ad9221a02ef521d004fb4f1671d314d3c011a558ffdd0cd32f06db6231986073c337b004cc38ae7c8d9be28a0881a3075857ae8356f38cb898fc6d51afb538824a15545e0d6707a806dacb7fe15d686f2f57e733010c14a6f9c5d26657b72e1ec787650f57e39f6be5e9500cb8588fadf5ce296d553c359ebcbbf03fcb952bfe81ddad4cd3516ae973689c05308925e72d206576031b465b749b49f0c07c0901f9426234c5893afa5fac39879df50f48a53e5d74e2fc8242ab37c99ef6e861c93663e17640b6ac8406049d6023e8de7f3a55fd"], 0x28}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000084) 3m37.403266331s ago: executing program 0 (id=492): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044894) unshare(0x2a060400) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x553dc5a7, 0x5, 0x20009, 0x101, 0x10000000008002, 0x6ca], 0x1, 0x0, 0x0, [{}]}, 0x88) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044894) (async) unshare(0x2a060400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x553dc5a7, 0x5, 0x20009, 0x101, 0x10000000008002, 0x6ca], 0x1, 0x0, 0x0, [{}]}, 0x88) (async) 3m21.99710067s ago: executing program 32 (id=492): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044894) unshare(0x2a060400) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x553dc5a7, 0x5, 0x20009, 0x101, 0x10000000008002, 0x6ca], 0x1, 0x0, 0x0, [{}]}, 0x88) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044894) (async) unshare(0x2a060400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x553dc5a7, 0x5, 0x20009, 0x101, 0x10000000008002, 0x6ca], 0x1, 0x0, 0x0, [{}]}, 0x88) (async) 2.536639979s ago: executing program 2 (id=1623): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x40000fff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f00000005c0), 0x0}, 0x20) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x5, 0xa) bind$netlink(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000507d0000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000000880)={0x1, 0x2, @status={[0x7, 0x7fffffffffffffff, 0xe3a, 0xfffffffffffffff7, 0x4]}, [0x2, 0x0, 0x4b, 0x1, 0x2e69, 0x9, 0x4, 0x4, 0x8, 0x2, 0x8, 0x9, 0x7, 0x400, 0x1, 0x0, 0x9, 0x1, 0x2, 0x0, 0x6, 0x400, 0x9, 0x3, 0x0, 0x4, 0x79c, 0x7fffffff, 0xd8, 0x908, 0x400, 0x1, 0x8, 0x9, 0x2, 0x6, 0x1ecbe29b, 0x0, 0x4, 0x1, 0x0, 0x7fff, 0x0, 0x100, 0x8000, 0xbc2c, 0xc3, 0x4, 0x5, 0xf, 0x7, 0x8, 0x2, 0x3, 0x66, 0x5, 0xa, 0x4, 0x400, 0x2, 0x1, 0x7ff, 0x5, 0x55]}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.432378164s ago: executing program 4 (id=1624): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x208803, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001900000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x200006}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000180a010200000000000000000500000a08000740000000030c0105400000000000000002140000001100010000000000000000000900000a"], 0x50}}, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2.089440661s ago: executing program 2 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5, 0x2}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfeffff, 0xfffffffffffffd19, 0x0, 0x0, 0x0, 0x8, 0x0, 0x90, 0x0, &(0x7f0000000280)="000022be46a1c48ee3b3c90b20a1a108e54002f89e5ccf94d3b0e09d0d5d13180c464d9b1d85e8fb2d3e043ea60441705559cd67df056f511033c7af9d2fb7993855fc3673cd7cb26c86e10f56c4d3375d7af4776757cfea4dd25cdeb707f7c45f14aeea74faa36bc09195a7a0bed72e19d34d3f5e0c73e5e1622a490a41c0daf3bd2c51d61945a3a92ce77b6fcd2b2f", 0x0, 0x6, 0x0, 0x3}, 0xfffffffffffffc63) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfffffffffffffd58, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x3c}}, 0x0) 2.058667004s ago: executing program 4 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791217000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300001007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x9}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r3, 0x2dbf536bb84b147, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1420}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90c6e61df43607ab1c0e8e3f19bb95272c080300", @ANYRES16, @ANYBLOB="00022dbd7000ffdbdf254b00000007f10300", @ANYRES32, @ANYBLOB="0400ec000a00f500d001733ee6c30000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 1.839370831s ago: executing program 1 (id=1632): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000bfe7d7ce00000000ffffffffce6147b847f185000000a30000009500"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x7, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, r8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x804) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x74, &(0x7f0000000200)={r10, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r12, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.725745802s ago: executing program 4 (id=1633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x1, 0xf7}]}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x5f, 0x0, 0x0, 0x2e]}}, 0x0, 0x37}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x5d70, '\x00', 0x0, r1, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830080000a732db46e65972"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, 0xffffffffffffffff}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x89, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000480)={r2, &(0x7f0000000340)='\x00', 0x801, &(0x7f0000000380)={@_ha_fsid={[0x3, 0x4]}, {0xa806, 0x7, 0x10001, 0x40}}, 0xc, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb, 0x3d}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$sock(r9, &(0x7f00000004c0)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x101, @private2, 0xc, 0x2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000640)='>', 0x1}], 0x1}, 0x20040010) sendmsg$inet6(r9, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x80000, 0x100000000, 0xca8}, {0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x0, 0x3c}, 0x0, @in6=@dev, 0xfffffffc, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x400003, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x3501, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x40c0) 1.680168913s ago: executing program 2 (id=1634): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@broadcast, @random="050000005bde", @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x7, 0x9, "0549aee3dae617"}, @generic={0x0, 0x2}, @generic={0x44, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0xb, 0xf}}}}}, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2c, 0x0, @private1, @loopback, [@hopopts={0x33}, @hopopts={0x3c, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x8, 0xa}}]}]}}}}}}}, 0x0) 1.545803822s ago: executing program 2 (id=1637): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000000901010000000000000000050000080c00048008000140ffffffff080003400000000408000640000000000c000480080001400000ca3e0c00048008000140fffeffff0900010073797a310000000009000100737948bdea0dcb36cef923fcbf8d7a7a31000000000800034000000007"], 0x68}, 0x1, 0x0, 0x0, 0x4008881}, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1d, 0x4e24, 0x2, @remote, 0x2}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000f2ff000000000000"], 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, 0x0, 0x25236, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0xfffffffffffffe2f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r10, &(0x7f0000000000), 0x0}, 0x20) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000c5f470655a6321300d79087c400ffffffffffffaaaaaaaaaabb08004500c52c00000000002f9078ac1e0001e000000100006558001890780400000000000000655800000000000054"], 0xfdef) 1.416049578s ago: executing program 5 (id=1638): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x208, 0x2b8, 0xb0000010, 0x118, 0x5c8f0200, 0x208, 0x3a8, 0x3a8, 0x208, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x15}, [0xff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0x0, 0xff000000, 0xffffff00], 'macvlan0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x3a, 0x7, 0x4, 0x45}, 0x0, 0xf0, 0x118, 0x700, {}, [@common=@unspec=@nfacct={{}, {'syz1\x00', 0x10001}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x0, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x612, '\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x20e220fe5f63e4d0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800003000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20048080) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @remote}}, [0x4, 0x401, 0x401, 0x8, 0x5, 0x200, 0xc, 0x5, 0x5, 0x60, 0x10, 0xf42, 0x3, 0x3, 0x10000]}, &(0x7f0000000140)=0x100) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x9, 0x4, 0x80000001}) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @broadcast, 0x4e20, 0x7, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x14) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @private1, 0x4}, @in6={0xa, 0x4e22, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000280)=0x10) 1.394720793s ago: executing program 1 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0x3, 0x0, 0x7, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "f57de0eb74757e1d"}, 0x3}}]}, 0x14c}}, 0x404c004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="c7f7a85205e7a5cdf595585b6aa1358d9ed0d5e536a746094970f7d5552783ba864250a6702ca2451d6bb9dfe15d1394dc274bb6ae61d8a30e89c3ee80e7fc8c305b947ff3b2ceb12bce99b79c283480de447b973dfa9d50c135d80c992d392275853a842771d2450fe8859b64acb047050d486ca49051d9a23fba093f029bc546bfa18c90564dcec13586863b", @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.219182953s ago: executing program 1 (id=1641): socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (rerun: 32) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}]}, @struct={0x5}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x45, 0x0, 0x0, 0x100000}, 0x28) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1b4, r4, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x179, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Ik^\xee\xa9=\x98\xdf\xf0S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x8d\xa9\xfe\"T=4\x89\xe6S6G)\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\r\x0f\xa9!<\xben\n\x802l\x05I\x1e\xbf=\xfd\x1a\xff\xaa=R\x19\xc6L\xb3./9\xb8W\n\xd1s\xba\xc5\xf8\xda(\xfe\x9cty\xb0:PE\xee\xd2\x176\x10L\xf9\x9a\x1d\xe8\xcb\x93\xc9\x8d\x1e\xc5<\xc8m\xa0.`x\x88\x18\xe9#\xf4\x0e\xb5t\x825\x94\x1b\xa0\x11a\x8d\xab\xbfL\x88\x0e\xfb\xc3\xb1\xab\x04&K\xcf-\x19\xe4\x00\x94\xa8\xc6\xe1L\xb82\x1ed\xa6W\xed|\xafM7\xab\xc9R\xef\xcfgp\x94>]fk\xe9\x15\x93K\xdeUDUdQ\xb7\xc4\x19\xd3\xda\xcd\x91;C`\x90\'\x9b\x80\xf0\xb7\xc7\x1eb\x0e\xe2\xa2\xb9\x8b\x8d\x98\xca\x96\xe1\xbf]\x8b\xc7\xaa\xbb6\xa2f\xd8'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) (async) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000180)=""/10, 0xa}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xb2, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000007c06fffe8000000000000000000000000000aa000000000000040000000000000000003c0c040604200500ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff0a010100fc0200000000000000000083faec3300334ac1000000000000000220924a7ae25142070000000000bbfe8000000000000000020000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x4000004) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async, rerun: 64) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 64) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000200)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote, 0xfffffffe}}, {{0xa, 0x4e20, 0x0, @remote}}]}, 0x190) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1.128050869s ago: executing program 3 (id=1642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000680)=@allocspi={0x10c, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x33}, {@in6=@remote, 0x4d5, 0x33}, @in=@local, {0xfffffffffffffffd, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x1}, {0x500000, 0x4, 0x6, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2400c8c0}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x2c000010) 1.101327149s ago: executing program 5 (id=1643): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r0, @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x441c5}, 0x0) 1.001662974s ago: executing program 3 (id=1644): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000030400ddff00fbdbdf2500000000", @ANYBLOB="0011000000000000540034801400350064766d727030000000000000000000001400350073797a6b616c6c657231000000000000140035006261746164765f736c6176655f310000140035007369743000000000000000000000000008001c00", @ANYBLOB="04001400"], 0x90}, 0x1, 0xba01}, 0x810) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb3662f2ee18c44653c3c3e3b7f6056f06544e49d92544e11e70", 0x34}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@remote, @rand_addr=0x64010101, 0x1b, 0x6}}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1, 0xc}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0), &(0x7f0000001100)=0xc) getpid() getuid() ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r5, 0xf, 0x100000000, 0xfffffffffffffff1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r6], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x20000000, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r10}}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r12 = getgid() socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r8, r8]}}], 0x38, 0x24008800}, 0x40040c4) 916.708276ms ago: executing program 2 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x7, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x511, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 916.021946ms ago: executing program 5 (id=1646): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x5c0, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), 0x7}, 0x24044800) 878.761186ms ago: executing program 5 (id=1647): r0 = socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x2b, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0xd, 0x80005, 0x68}, 0xffffffffffffffd3) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000800ca800400018069e5b9e007b3fc2a30d41b147928c4bf250f76b46ae736d9df37b83fbbf88db0ff6bbabcf0bc5f6e068fdd1cec57dd701432e040c5a3322b9568"], 0x1c}}, 0x0) (async) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r7, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x8}, 0x94) (async) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000023) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 757.115832ms ago: executing program 4 (id=1648): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x200, 0x8001, 0x4, r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x0, 0x0, 0x4, 0x3}}, 0x26) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x388}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x460}, 0x4) 676.024706ms ago: executing program 1 (id=1649): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x3, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000004840)={0x2c, r4, 0xc01, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000800) bind$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r1, 0x0) write$cgroup_type(r0, 0x0, 0x0) 674.470166ms ago: executing program 3 (id=1650): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001500)={{0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x420840, &(0x7f0000000040)={@_ha_fsid={[0x1]}, {0x0, 0x100, 0x7ff}}, 0x5748, &(0x7f0000000080), &(0x7f00000000c0)=0x5}, 0x5, &(0x7f0000001440)=[{0x3, 0x7, &(0x7f0000000100)=']\x00', &(0x7f0000000140)="52b6792b7ef23d3d12ad683fa5d265b3c902755395ae8aef97180129049d2a5e814411e7eb12309b9458da9cc00a73b44fbae3df5c30e03988bdb74c2de60f559464049106de0121efe276268766094f067dda3af8af06e58ead3ef393bc00d7fe2e29563a15f3aaab32c2290da18f7b9f29b0ceb8b40cbcd745a587a59d12552c465ea3c406f34815f9ddae42d55c0b7e44f27a79328385bcaf7fe0c95ede1cd2784f5bcb9244bab5cc3448a045b4ff9d6763c2a95bdf0dee023878029efc888b9a39446de6511be43bd800fae9f2e17361ea0364a3a3", 0xd7}, {0x3, 0x6, &(0x7f0000000240)='&.:-*,(^@){:/*$-&-*{)\x00', &(0x7f0000000280)="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", 0x1000, 0x4b17bcbf8f359e4d}, {0x2, 0x9, &(0x7f0000001280)='!^\']]&!{*\x00', &(0x7f00000012c0)="7719355b3c491ed355a2d8dcbde324322c93317a731311b0b39425acf70d173ecbab164c64492dc94880a71c1d8f9858af780b195f2dc877659c698172b2f8f4df26ea679fdab64fecd32373324173c723c40586f22c5269a59ef05a4ea6e5c0d409059c3c52138acb5c", 0x6a, 0x2}, {0x2, 0x3, &(0x7f0000001340)='$,{^:\x00', &(0x7f0000001380)="2a984cfc40f900a5bb073a7f7828b2a7373983a1563f20fc1e054c62d80d027117454912250c8cc8efb2c63732765656fa79d813ebc99338d6ba2f67a396", 0x3e, 0x22}, {0x1, 0x9, &(0x7f00000013c0)=':\x00', &(0x7f0000001400)="aaf537843c821c3c6d7a74b499d9", 0xe, 0x10}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x90, r1, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@device_b, {0x9, 0x6}}, @tdls_setup_resp={0xc, 0x1, 0x5c, 0x8, @val=0x1c1d, @void, @void, @void}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x176}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x7f}}, 0x110, 0x54, @random=0x8, @void, @void}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001880)={'dummy0\x00', @broadcast}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x38, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x49}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001ac0)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004000}, 0xc800) connect$vsock_stream(r0, &(0x7f0000001c00)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000001cc0)=0x1ff, 0x4) sendfile(r2, r5, &(0x7f0000001d00)=0x7, 0x7) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000001d40)={0x4, 0xfffffffffffffffa, 0x9, 0x0, 0x0, [{{r5}, 0x1}, {{}, 0xf}, {{r0}, 0x5}, {{r0}, 0xf}, {{r2}, 0x9}, {{r2}, 0xafef}, {{r2}, 0x5}, {{r2}, 0x9}, {{r5}, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x2c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2010}, 0x480c0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001f80)=0x7fff, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000001fc0), r2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000002000)={0x0, 0x1, 0x7fffffffffffffff, 0x5}) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000002040)) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000002080)=0xa49, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002100), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40b4020}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r7, 0x405, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xf4cf31cce9bc564f) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000002240)=0x6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002340)={r5, &(0x7f0000002280)="812aa34d04c3cb9fdb4018b275a33e6f446062ea9a428d12761ad929229644f42525c4ab8ad58a763e79de73e651fa3efac4e476ad4f6e46a04e6924ce4b25173103c0087fdd804200d00db7312bd132c73d60fd55b6c9969dc2f9dcadfc6401cc5867b2491d3c30b072f56f59d5080c3fdb4a91e6daf066158674f57c6bacf169d74a4f6e3d0da3d0b95e6868ed9dc917ca45039d852e14c5fa18e66d3be4f2"}, 0x20) sendmsg$nl_netfilter(r0, &(0x7f0000002980)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002400)={0x504, 0xe, 0x1, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x7}, [@generic="b9858b5a5bd7f1f0d6440723b180e0ba89be4cb3e7b743e058e08b886f56aeaba4f1014eb0d0380380d355a4ee8644626d63f316281d0943cc766d9653d6ee6032f285a5a5c4bc5ed48da022464e42137725917c0f159234bf99ce1641c59e1f821821262ad599f57b967d724a4185dd235b32125008751fcab1f984231dbeb9a4abafda1e0fd25fe52d7e70ad0616f160d5aa39f4dc4b16345424f3c8ff8a8dc38adb2cf5376adbf008bccaf00fc44f18ca4d0355d08d7af49589a4a0e208f422b9766104547e2ed1d51dc9ca23103d29795e38b14ef29044a3", @nested={0x1e1, 0xff, 0x0, 0x1, [@generic="f8681a60c136c87282ddc1a238d828b00ceccfce9ff214083e697ac1997911143e6a811dc595f15302657b5560cf2cf1a097a7e0a7a78f26deaeee98e9fbef28444def276d4f0e893bc91934558ea7ab386bd54aaea4023f8b003e744e99710106b55a89362cace61ae1e0938fc0507104d06dd89bde7e1b4b513e55724ccabf6c26c36bc467323255ac4bfffaeecd5d00cd791ec4e739e20707c7a836d61ca75160e2636e27628d03190796491cab224979be57a006f2fa3b162580350e7f53899012c70a45c33e8452a700897c637d0a2a592d8b161527f652d9d3cde1d5128d4a024cbad07214cf3182b6", @generic="ea1cf1cab1cac62e24dd95912ba856ed7ea2023a13e118dccc2beaebed17652db2017edd0fdc2ce3b9db5a28111075e6cc80c54b38368c90dd2009af7e5e1ea825da3983678b0079e439cda3d65b7b62908a4b9081d215e30d8e1718dadd0db77a3f465c53e896998bd943c2d92bc3f61ccaed30f6e13617190b42c29c81ee39dccd6883a1e2d7d0879fa06d3bef66b1414748d891891cbf38a5099df23c2a8faa174cb24cdb1b15ddd747ad9aafca27d0ded3231e0d4b2b9b4f6bfbddd154e06074c7cd79b74516c2c0f69fac", @typed={0x8, 0x15e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0xad, 0x0, 0x0, @pid}, @typed={0x4, 0x132}, @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xcd}, @nested={0x4, 0x13e}, @generic]}, @nested={0x8, 0x6c, 0x0, 0x1, [@nested={0x4, 0xe6}]}, @nested={0x14, 0x97, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @pid}, @nested={0x4, 0x158}, @nested={0x4, 0x104}]}, @nested={0x118, 0x2, 0x0, 0x1, [@generic="f6cd0a1b5852d8ef287f3819429ee793a287ed2c52d4f8067420", @nested={0x4, 0x55}, @generic="b41ed1c20f8ab79c8ddf49774255e615ce5103a5632b30a4a0892e6d8c7fddda64afb5c01c0b9456b1b61aed5a0a0ddad58e23903a02398e0c9c6d", @generic="162673c06cb3b0afa3fb12fbbbc2417da755bfa2b2aed2659245c0112a7a80ff34a68ea1104051cc1735aa3275d89fd72a94c5bd31739f1f27bc37b64f9547ccdb33fc37c6bd1513e885ac79760d3df38fabc36209bf4b2d63b7828f4c29509db9c8c061211260d3ee4b9fded432752910f50f41b5ed305e2ddc9bd9600944dbfc2ec069844a6c6be37691acf6709820f4c854d1f15c79d35f5f3104627abeb8deb1cbb71049afb964a090f152496cace29e6970fb951b27d1b6ff"]}, @typed={0xce, 0xde, 0x0, 0x0, @binary="a6c61f733f4c6baaff08da2895fa5f2a6138b01f234e996f34db76eacbd112dc79941ecec725b3f639d18055b09ef4a3f3447d0521598c216a3fa618da813ca74c38e4c79aea4a91cdb7df4cfe0ef6efcc10a2a1f16f233959f8c4952588e56d4d385389f60bc16f3e0089573e79dd4bc3c07953e94ef3eec6015782e0c43005e1aeaba1c57cdbc9ae9359085d3a0a989d4b6333d0ceef4ad3e24e77e6de98e06429137d6c0338fbc0f2ef8058a08c6afe58d47adc061c3d1e96909beee3a3b4bdb0d94c7e0669676970"}, @nested={0x2c, 0x55, 0x0, 0x1, [@nested={0x4, 0x150}, @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x155, 0x0, 0x0, @pid}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000000) 653.580069ms ago: executing program 2 (id=1651): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x7, 0x4, 0x101, 0x80, 0x9, 0x2, 0x8}, 0x20) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="27111fe15674666f38c00c52ea7248dbbd5a0ef07896dbd0fd739452d18bd6259561bed937c1cdc2", 0x28}], 0x1}, 0x4) 527.1765ms ago: executing program 4 (id=1652): socketpair(0x1a, 0x1, 0x8, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x14) 428.386557ms ago: executing program 5 (id=1653): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007914c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2a}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff00, 0x73}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0xf09b9493a977079}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r4], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x20) 426.108364ms ago: executing program 3 (id=1654): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000810001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a001400ffffffffffff00000800090000000000"], 0x48}}, 0x4040) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000001c0)=""/40, &(0x7f0000000280)=0x28) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)) (async) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff00030004"], 0x28}, 0x4004004) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x1}) 401.927053ms ago: executing program 4 (id=1655): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x8880) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6008080}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x260, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x911}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb1, 0x3, "e9c39ca3c4f79944e7664bad703e22cff8751c56ba22032afee558bc8779eb5ae5d9e03079a590949c251799c70a59cdfa3d19e06c69184710762352d8a9c4ea7f002bcfe79122815bfa4fd18c039f70e6835bfbf852f6c91e6bd1c47d73830d0f8a36f8b6c668a4c3d25457cb3eb3b47c8ba38e1adacaf401f5b410f4c3cd835f3e36c7a2ff2119ade1e6731a39f24ec933d2e76a8e4ff57d9e3f2e11d49850d7a3a4a3414823eefb032d3fa1"}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb7b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4ea}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x867}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 302.934431ms ago: executing program 3 (id=1656): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0xffffffffffffffff, 0x709d25}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x4044190) r1 = socket(0x10, 0x80805, 0x0) write(r1, 0x0, 0x0) 232.177136ms ago: executing program 1 (id=1657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f0000000080)="14a3db2a", 0x4}], 0x2) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x24, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="b9e9b053"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) 182.380571ms ago: executing program 5 (id=1658): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040)=0xfffffffe, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x1, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) socket(0x40000000015, 0x5, 0x0) r4 = socket(0x15, 0x5, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900010000ab4bb560bdb01f3fb66000000000000000e000000200000000000000000000000000000000000000000000000000000001000000000000d0cc49972a3697baa451de1f57020a8056c84047715e55b67eb320724281788b15247d0bf393135137808637941ecc5a8de93f747a54aad4dd5020b6819197ad0dde879f0a04c59714bdf5f9d19bd13aeba7dab0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9fffffffffffffffcfffffffffffffffdffffffffffffff00"/112], 0xb8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596f8aca1f26c4e54dd3c839c63ecba701f7518abef56"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0xc000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d5e518fa8efaafc35fe09bb40b3196e4d140582b7fd182730a400dd2abc2cf3449209e69a6e2e898fea5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r10}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r10, 0x68, &(0x7f0000000200)}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11) 124.691674ms ago: executing program 3 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @multicast2, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x25dfdffd, {0x2, 0x80, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r12}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xea5bc50b6199d77e) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r14, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x338, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r5}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6b180}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048014) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r15 = socket$netlink(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r16, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r17, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r18 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r18, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x8f, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, [0x0, 0x100004, 0x4, 0x0, 0x0, 0x0, 0x533e, 0x4]}}) 0s ago: executing program 1 (id=1660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180500002020782500000000002020207b1af8def5c0a2ed37f6d8000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x7, 0x4}, 0x80, 0x0}, 0x4040010) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000180), 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc4, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_MASK={0xa8, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000014}, 0x20040000) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020820034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) kernel console output (not intermixed with test programs): 4] tipc: Enabling of bearer rejected, failed to enable media [ 129.587340][ T6778] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 129.712198][ T6778] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.823625][ T6778] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.034178][ T6778] lo speed is unknown, defaulting to 1000 [ 130.074026][ T6778] lo speed is unknown, defaulting to 1000 [ 130.085148][ T6778] lo speed is unknown, defaulting to 1000 [ 130.096470][ T6778] lo speed is unknown, defaulting to 1000 [ 130.119390][ T6778] lo speed is unknown, defaulting to 1000 [ 130.370798][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'. [ 130.382954][ T6833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.243'. [ 130.540307][ T6838] xt_hashlimit: size too large, truncated to 1048576 [ 131.056688][ T6863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.250'. [ 131.285045][ T6861] lo speed is unknown, defaulting to 1000 [ 131.570665][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 132.816646][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.827428][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.179010][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.265'. [ 133.484347][ T6948] syzkaller0: entered promiscuous mode [ 133.522944][ T6948] syzkaller0: entered allmulticast mode [ 133.567327][ T6958] tipc: Enabled bearer , priority 0 [ 133.642069][ T6965] netlink: 84 bytes leftover after parsing attributes in process `syz.1.273'. [ 133.652270][ T6948] tipc: Resetting bearer [ 133.770823][ T6958] tipc: Resetting bearer [ 133.824043][ T6972] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 133.832565][ T6958] tipc: Disabling bearer [ 133.870347][ T6969] netlink: 96 bytes leftover after parsing attributes in process `syz.1.273'. [ 133.905343][ T6980] netlink: 84 bytes leftover after parsing attributes in process `syz.1.273'. [ 133.942733][ T6975] syzkaller0: entered promiscuous mode [ 133.958818][ T6975] syzkaller0: entered allmulticast mode [ 134.029382][ T6979] gretap1: entered allmulticast mode [ 134.066741][ T6979] bond1: (slave gretap1): making interface the new active one [ 134.085495][ T6979] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.142406][ T6975] netlink: 44 bytes leftover after parsing attributes in process `syz.4.274'. [ 134.331919][ T6998] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 134.514497][ T7004] netlink: 'syz.1.281': attribute type 2 has an invalid length. [ 134.609619][ T7004] : entered promiscuous mode [ 134.821171][ T7018] netlink: 124 bytes leftover after parsing attributes in process `syz.4.284'. [ 134.859823][ T7022] tipc: Started in network mode [ 134.867315][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 134.894583][ T7022] tipc: Node identity ac14140f, cluster identity 4711 [ 134.913861][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 134.934211][ T7022] tipc: New replicast peer: 255.255.255.255 [ 134.971106][ T7022] tipc: Enabled bearer , priority 10 [ 134.993568][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 135.176025][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 135.837760][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.291'. [ 135.892736][ T7067] netlink: 64 bytes leftover after parsing attributes in process `syz.1.293'. [ 136.080348][ T6448] tipc: Node number set to 2886997007 [ 136.158645][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 136.168881][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.296'. [ 136.901882][ T7109] syzkaller0: entered promiscuous mode [ 136.907653][ T7109] syzkaller0: entered allmulticast mode [ 136.937748][ T7110] netlink: 'syz.3.305': attribute type 4 has an invalid length. [ 137.384528][ T7125] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 137.416785][ T7125] bridge0: entered promiscuous mode [ 137.636866][ T7142] veth0: entered promiscuous mode [ 137.675506][ T7141] veth0: left promiscuous mode [ 137.915121][ T7154] ip6tnl1: entered allmulticast mode [ 138.069047][ T680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.101904][ T6426] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.115864][ T680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.220298][ T6426] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.469289][ T7173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.517615][ T7173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.764880][ T7188] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 138.816031][ T7191] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 138.871943][ T6426] lo speed is unknown, defaulting to 1000 [ 138.905227][ T6436] lo speed is unknown, defaulting to 1000 [ 139.053204][ T6426] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.216540][ T7211] __nla_validate_parse: 12 callbacks suppressed [ 139.216561][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 139.497763][ T7222] sock: sock_set_timeout: `syz.1.341' (pid 7222) tries to set negative timeout [ 139.508004][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 139.540510][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 139.610008][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 139.614141][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 139.858966][ T7240] ip6gre1: entered promiscuous mode [ 139.864663][ T7240] ip6gre1: entered allmulticast mode [ 139.872668][ T7242] bridge_slave_1: left allmulticast mode [ 139.878781][ T7242] bridge_slave_1: left promiscuous mode [ 139.886043][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.942370][ T7242] bridge_slave_0: left allmulticast mode [ 139.965839][ T7242] bridge_slave_0: left promiscuous mode [ 139.981826][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.109640][ T7249] veth1_to_hsr: entered promiscuous mode [ 140.122186][ T7249] xt_hashlimit: size too large, truncated to 1048576 [ 140.302666][ T7256] IPVS: length: 24 != 176077124664 [ 140.731425][ T1549] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.745716][ T1549] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.760353][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.840296][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.059795][ T7279] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 141.101128][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.119037][ T7279] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 141.219612][ T7279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.282214][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 141.294808][ T7288] netlink: 56 bytes leftover after parsing attributes in process `syz.4.362'. [ 141.306943][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 141.359761][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 141.386836][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 141.396651][ T7285] syzkaller1: entered promiscuous mode [ 141.402348][ T7285] syzkaller1: entered allmulticast mode [ 141.465824][ T680] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.487117][ T680] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.575610][ T7279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.636776][ T680] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.653840][ T680] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.749108][ T7279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.007081][ T7279] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 142.038543][ T7279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.268768][ T7327] vlan2: entered promiscuous mode [ 142.275541][ T7327] bond_slave_1: entered promiscuous mode [ 142.311818][ T6275] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.368563][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.455386][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.513532][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.694819][ T7337] syzkaller1: entered promiscuous mode [ 142.700862][ T7337] syzkaller1: entered allmulticast mode [ 144.810423][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 144.810445][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.307399][ T7349] syzkaller1: entered promiscuous mode [ 145.346069][ T7349] syzkaller1: entered allmulticast mode [ 146.170721][ T7377] netlink: 'syz.4.384': attribute type 23 has an invalid length. [ 146.411384][ T7383] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 146.465279][ T7385] __nla_validate_parse: 6 callbacks suppressed [ 146.465300][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 146.495131][ T7385] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 146.632676][ T7383] bond2: entered promiscuous mode [ 146.638775][ T7383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.092645][ T7386] bond2: (slave veth5): making interface the new active one [ 147.118631][ T7386] veth5: entered promiscuous mode [ 147.164713][ T7399] netlink: 'syz.1.389': attribute type 13 has an invalid length. [ 147.186779][ T7399] netlink: 152 bytes leftover after parsing attributes in process `syz.1.389'. [ 147.204395][ T7386] bond2: (slave veth5): Enslaving as an active interface with an up link [ 147.457500][ T7399] syz_tun: refused to change device tx_queue_len [ 147.465791][ T7399] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 147.857907][ T7413] netlink: 4412 bytes leftover after parsing attributes in process `syz.3.391'. [ 148.329765][ T7427] netlink: 43 bytes leftover after parsing attributes in process `syz.1.395'. [ 148.731602][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 148.937808][ T7444] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 148.994686][ T7444] netlink: 240 bytes leftover after parsing attributes in process `syz.2.396'. [ 149.718343][ T7456] bridge1: entered promiscuous mode [ 149.744222][ T7456] bridge1: entered allmulticast mode [ 149.777515][ T7456] team0: Port device bridge1 added [ 150.361818][ T7476] netlink: 'syz.1.405': attribute type 29 has an invalid length. [ 150.389591][ T7476] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 150.589663][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 150.734167][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.914378][ T7500] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 151.201593][ T7492] netlink: 116 bytes leftover after parsing attributes in process `syz.2.409'. [ 151.255865][ T7488] netlink: 168 bytes leftover after parsing attributes in process `syz.4.408'. [ 151.365778][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.628358][ T7511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 151.901098][ T7511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 151.964560][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'. [ 152.723101][ T7541] netdevsim netdevsim2: Direct firmware load for .® failed with error -2 [ 152.806695][ T7541] netdevsim netdevsim2: Falling back to sysfs fallback for: .® [ 153.026184][ T7523] lo speed is unknown, defaulting to 1000 [ 153.300249][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.445558][ T7564] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 153.834757][ T7572] sctp: [Deprecated]: syz.3.426 (pid 7572) Use of int in max_burst socket option. [ 153.834757][ T7572] Use struct sctp_assoc_value instead [ 153.982486][ T7574] sctp: [Deprecated]: syz.2.428 (pid 7574) Use of int in max_burst socket option deprecated. [ 153.982486][ T7574] Use struct sctp_assoc_value instead [ 154.149878][ T7576] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 154.315577][ T7576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.394932][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 154.458533][ T7576] bond1: entered promiscuous mode [ 154.466110][ T7576] bond1: entered allmulticast mode [ 154.587780][ T7583] bond1: (slave dummy0): making interface the new active one [ 154.619195][ T7583] dummy0: entered promiscuous mode [ 154.639655][ T7583] dummy0: entered allmulticast mode [ 154.654943][ T7583] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 154.669472][ T7587] syzkaller0: entered promiscuous mode [ 154.676473][ T7587] syzkaller0: entered allmulticast mode [ 154.703491][ T7588] ip6tnl2: entered allmulticast mode [ 154.712849][ T7584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.429'. [ 155.726980][ T7605] lo speed is unknown, defaulting to 1000 [ 156.475332][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 157.374018][ T7628] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 157.664316][ T7613] bond1: Removing last arp target with arp_interval on [ 159.285927][ T7654] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 159.762400][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 160.010263][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 160.120621][ T7661] bond0: (slave bond_slave_1): Releasing backup interface [ 160.209365][ T7673] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 160.225711][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 160.275160][ T7679] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 161.029473][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 161.235015][ T7702] x_tables: duplicate entry at hook 1 [ 161.385383][ T7691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.416912][ T7698] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 161.444561][ T7708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.460'. [ 161.489876][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 161.660366][ T7702] netlink: 72 bytes leftover after parsing attributes in process `syz.4.460'. [ 161.808421][ T7708] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 162.406245][ T7730] block nbd0: Unsupported socket: should be TCP or UNIX. [ 162.464849][ T7728] netlink: 52 bytes leftover after parsing attributes in process `syz.0.463'. [ 163.124811][ T7737] netlink: 92 bytes leftover after parsing attributes in process `syz.4.465'. [ 163.154619][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.465'. [ 164.647067][ T7772] tipc: Enabled bearer , priority 0 [ 164.705594][ T7772] syzkaller0: entered promiscuous mode [ 164.767130][ T7772] syzkaller0: entered allmulticast mode [ 164.990955][ T7772] tipc: Resetting bearer [ 165.158407][ T7770] tipc: Resetting bearer [ 165.569767][ T7770] tipc: Disabling bearer [ 166.138634][ T7801] __nla_validate_parse: 2 callbacks suppressed [ 166.138654][ T7801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.484'. [ 166.268027][ T7799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.484'. [ 166.733716][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.778143][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 167.658978][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'. [ 167.746597][ T7829] netlink: 'syz.4.489': attribute type 15 has an invalid length. [ 167.819580][ T7830] sctp: [Deprecated]: syz.4.489 (pid 7830) Use of int in max_burst socket option. [ 167.819580][ T7830] Use struct sctp_assoc_value instead [ 167.861129][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 168.089759][ T1549] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.140197][ T1549] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.204319][ T1549] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.276109][ T1549] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.692298][ T7840] lo speed is unknown, defaulting to 1000 [ 168.771924][ T7850] netlink: 156 bytes leftover after parsing attributes in process `syz.4.494'. [ 168.903451][ T7842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.494'. [ 168.922867][ T7843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.290232][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.857993][ T7869] tipc: Started in network mode [ 169.889421][ T7869] tipc: Node identity 1ae30d6d78e7, cluster identity 4711 [ 169.939083][ T7869] tipc: Enabled bearer , priority 0 [ 169.997793][ T7869] syzkaller0: entered promiscuous mode [ 170.040531][ T7869] syzkaller0: entered allmulticast mode [ 170.094355][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 170.450997][ T7874] bond0: (slave bond_slave_1): Releasing backup interface [ 170.503589][ T7868] tipc: Resetting bearer [ 170.629089][ T7868] tipc: Disabling bearer [ 170.841412][ T7904] netlink: 'syz.2.506': attribute type 2 has an invalid length. [ 170.894415][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 171.004490][ T7907] netlink: 'syz.3.505': attribute type 1 has an invalid length. [ 171.341519][ T7917] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 171.567776][ T7923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.643590][ T7904] ¿: entered promiscuous mode [ 171.682577][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 171.748826][ T7907] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 171.851937][ T7844] lo speed is unknown, defaulting to 1000 [ 172.431306][ T7918] syzkaller0: entered promiscuous mode [ 172.445311][ T7918] syzkaller0: entered allmulticast mode [ 173.197057][ T7961] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 178.232583][ T7962] bond1: (slave dummy0): Releasing active interface [ 178.276074][ T7962] dummy0: left promiscuous mode [ 178.390415][ T7962] dummy0: left allmulticast mode [ 178.396828][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.515'. [ 178.574214][ T7949] syzkaller0: entered promiscuous mode [ 178.601910][ T7949] syzkaller0: entered allmulticast mode [ 178.967799][ T7986] bond0: (slave bond_slave_1): Releasing backup interface [ 183.982775][ T8007] tipc: Enabled bearer , priority 0 [ 184.005102][ T7994] syzkaller0: entered promiscuous mode [ 184.073137][ T7994] syzkaller0: entered allmulticast mode [ 184.288960][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 184.350381][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 184.379443][ T8012] tipc: Resetting bearer [ 184.514714][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.555028][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.581776][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.644438][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.672489][ T8012] tipc: Disabling bearer [ 184.712989][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.903833][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.911441][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.919145][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.929522][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.945377][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.266343][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 186.286222][ C1] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 186.603397][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 186.970530][ T50] Bluetooth: hci5: command tx timeout [ 187.184076][ T6271] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.464174][ T6271] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.581325][ T8033] lo speed is unknown, defaulting to 1000 [ 187.653588][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.539'. [ 187.665142][ T6271] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.828554][ T6271] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.883930][ T8116] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.944209][ T8116] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 188.336666][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.543'. [ 188.647394][ T6271] bridge_slave_1: left allmulticast mode [ 188.664637][ T6271] bridge_slave_1: left promiscuous mode [ 188.679396][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.723698][ T6271] bridge_slave_0: left allmulticast mode [ 188.736307][ T6271] bridge_slave_0: left promiscuous mode [ 188.747633][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.057042][ T50] Bluetooth: hci5: command tx timeout [ 189.303323][ T6271] bond1 (unregistering): (slave gretap1): Releasing active interface [ 189.318197][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 189.435424][ T6271] bridge0 (unregistering): left promiscuous mode [ 189.537095][ T6271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.582228][ T6271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.628753][ T6271] bond0 (unregistering): Released all slaves [ 189.691455][ T6271] bond1 (unregistering): Released all slaves [ 189.798743][ T6271] bond2 (unregistering): Released all slaves [ 190.133234][ T8136] lo speed is unknown, defaulting to 1000 [ 190.358419][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.573199][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.585587][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.593404][ T8033] bridge_slave_0: entered allmulticast mode [ 190.608900][ T8033] bridge_slave_0: entered promiscuous mode [ 190.769717][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.801646][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.824292][ T8033] bridge_slave_1: entered allmulticast mode [ 190.845834][ T8033] bridge_slave_1: entered promiscuous mode [ 190.922839][ T8196] netlink: 68 bytes leftover after parsing attributes in process `syz.1.549'. [ 191.060465][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.098694][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.130572][ T50] Bluetooth: hci5: command tx timeout [ 191.286435][ T8202] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.312922][ T8195] lo speed is unknown, defaulting to 1000 [ 191.325788][ T8202] netlink: 3 bytes leftover after parsing attributes in process `syz.4.550'. [ 191.416429][ T8033] team0: Port device team_slave_0 added [ 191.443889][ T8202] 0ªX¹¦À: renamed from batadv0 [ 191.464983][ T8202] 0ªX¹¦À: entered allmulticast mode [ 191.481199][ T8202] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 191.497765][ T8202] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 191.584318][ T6271] hsr_slave_0: left promiscuous mode [ 191.608873][ T6271] hsr_slave_1: left promiscuous mode [ 191.625877][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.663274][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.766017][ T6271] veth1_macvtap: left promiscuous mode [ 191.788853][ T6271] veth0_macvtap: left promiscuous mode [ 191.804393][ T6271] veth1_vlan: left promiscuous mode [ 191.816178][ T6271] veth0_vlan: left promiscuous mode [ 192.148772][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 192.181534][ T8231] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 192.295765][ T6271] team0 (unregistering): Port device team_slave_1 removed [ 192.319281][ T6271] team0 (unregistering): Port device team_slave_0 removed [ 192.471276][ T8033] team0: Port device team_slave_1 added [ 192.534116][ T8231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.579515][ T8229] bond3: option tlb_dynamic_lb: invalid value (128) [ 192.587997][ T8229] bond3 (unregistering): Released all slaves [ 192.616249][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.641467][ T8232] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 192.792534][ T8234] batadv0: left promiscuous mode [ 192.869919][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.895131][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.045091][ T8234] bridge1: left promiscuous mode [ 193.063557][ T8234] bridge1: left allmulticast mode [ 193.160818][ T1045] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.184860][ T1045] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.213427][ T50] Bluetooth: hci5: command tx timeout [ 193.389034][ T1045] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.411618][ T1045] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.423985][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.435108][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.438586][ T8250] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 193.464973][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.482907][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.489908][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.517545][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.580315][ T8253] nbd0: detected capacity change from 0 to 127 [ 193.602273][ T8250] bond3: entered promiscuous mode [ 193.613148][ T8250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.673935][ T8254] vlan3: entered allmulticast mode [ 193.679452][ T8254] bond3: entered allmulticast mode [ 193.686099][ T8253] tipc: Enabling of bearer rejected, failed to enable media [ 193.706091][ T50] block nbd0: Receive control failed (result -104) [ 193.748262][ T8257] bond3: (slave bridge0): making interface the new active one [ 193.779025][ T8257] bridge0: entered promiscuous mode [ 193.784844][ T8257] bridge0: entered allmulticast mode [ 193.792644][ T8257] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 193.998015][ T8033] hsr_slave_0: entered promiscuous mode [ 194.028467][ T8033] hsr_slave_1: entered promiscuous mode [ 194.069462][ T8033] debugfs: 'hsr0' already exists in 'hsr' [ 194.100745][ T8033] Cannot create hsr debugfs directory [ 194.157752][ T6271] IPVS: stop unused estimator thread 0... [ 194.197896][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 194.254882][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.263007][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.299489][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 194.921933][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.929909][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.122482][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 195.162235][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.569'. [ 195.261348][ T8297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.296757][ T8297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.485103][ T8297] ip6gre1: left allmulticast mode [ 195.506513][ T8324] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.571'. [ 195.542368][ T5735] lo speed is unknown, defaulting to 1000 [ 195.554482][ T5735] syz2: Port: 1 Link DOWN [ 195.571083][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 195.584695][ T8325] : renamed from bridge_slave_0 [ 195.596539][ T6269] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.626056][ T6269] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.797166][ T6269] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.828755][ T6269] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.844218][ T6269] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.867785][ T6269] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.944739][ T6269] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.978057][ T6269] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.037383][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 196.438843][ T8354] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.538696][ T8033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.583321][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.620627][ T8033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.641013][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.703736][ T8033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.740356][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.785133][ T8033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.814377][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.975634][ T1594] block nbd0: Connection timed out, retrying (0/1 alive) [ 196.988947][ T1594] block nbd0: Connection timed out, retrying (0/1 alive) [ 196.996702][ T1594] block nbd0: Connection timed out, retrying (0/1 alive) [ 197.004462][ T1594] block nbd0: Connection timed out, retrying (0/1 alive) [ 197.012197][ T1594] block nbd0: Dead connection, failed to find a fallback [ 197.020727][ T1594] block nbd0: shutting down sockets [ 197.026340][ T1594] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.038007][ T1594] Buffer I/O error on dev nbd0, logical block 3, async page read [ 197.047703][ T1594] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.056984][ T1594] Buffer I/O error on dev nbd0, logical block 2, async page read [ 197.064863][ T1594] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.074394][ T1594] Buffer I/O error on dev nbd0, logical block 1, async page read [ 197.082289][ T1594] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.091487][ T1594] Buffer I/O error on dev nbd0, logical block 0, async page read [ 197.102347][ T1594] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 197.111967][ T1594] Buffer I/O error on dev nbd0, logical block 0, async page read [ 197.119802][ T1594] Buffer I/O error on dev nbd0, logical block 1, async page read [ 197.127800][ T1594] Buffer I/O error on dev nbd0, logical block 2, async page read [ 197.135927][ T1594] Buffer I/O error on dev nbd0, logical block 3, async page read [ 197.148952][ T1594] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 197.158200][ T1594] Buffer I/O error on dev nbd0, logical block 0, async page read [ 197.166215][ T1594] Buffer I/O error on dev nbd0, logical block 1, async page read [ 197.175892][ T1594] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.186912][ T1594] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 197.196606][ T1594] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 197.206357][ T1594] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 197.218612][ T8026] ldm_validate_partition_table(): Disk read failed. [ 197.238066][ T8026] Dev nbd0: unable to read RDB block 0 [ 197.277561][ T8383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.584'. [ 197.307978][ T8026] nbd0: unable to read partition table [ 197.337117][ T8378] syzkaller0: entered promiscuous mode [ 197.371743][ T8378] syzkaller0: entered allmulticast mode [ 197.385498][ T8026] ldm_validate_partition_table(): Disk read failed. [ 197.402179][ T8026] Dev nbd0: unable to read RDB block 0 [ 197.429509][ T8026] nbd0: unable to read partition table [ 197.450226][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.728544][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 197.752857][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.804383][ T8397] tipc: Enabled bearer , priority 10 [ 197.871867][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.988152][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.995419][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.058723][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.065985][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.482732][ T8430] bridge_slave_1 (unregistering): left allmulticast mode [ 198.505323][ T8430] bridge_slave_1 (unregistering): left promiscuous mode [ 198.520637][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.930664][ T6404] tipc: Node number set to 3376613243 [ 199.027082][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.598'. [ 199.071562][ T8455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.598'. [ 199.115513][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 199.129850][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.598'. [ 199.392128][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.600'. [ 199.580810][ T8470] netlink: 'syz.4.601': attribute type 10 has an invalid length. [ 199.684746][ T8470] macsec2: entered promiscuous mode [ 199.709376][ T8470] veth1_to_bridge: entered promiscuous mode [ 199.736079][ T8470] macsec2: entered allmulticast mode [ 199.755231][ T8470] veth1_to_bridge: entered allmulticast mode [ 199.780601][ T8470] veth1_to_bridge: left allmulticast mode [ 199.794315][ T8470] veth1_to_bridge: left promiscuous mode [ 199.886162][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 199.919913][ T8488] team0: Port device batadv1 added [ 199.975876][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.999011][ T8480] lo speed is unknown, defaulting to 1000 [ 201.307730][ T8539] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 201.332209][ T8535] syzkaller0: entered promiscuous mode [ 201.350064][ T8535] syzkaller0: entered allmulticast mode [ 201.554928][ T8545] vlan0: entered promiscuous mode [ 201.571726][ T8545] bridge0: entered promiscuous mode [ 201.718408][ T8033] veth0_vlan: entered promiscuous mode [ 201.752109][ T8033] veth1_vlan: entered promiscuous mode [ 201.890445][ T8033] veth0_macvtap: entered promiscuous mode [ 201.927171][ T8033] veth1_macvtap: entered promiscuous mode [ 202.007509][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.061773][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.115640][ T1045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.137205][ T1045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.171142][ T1045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.197759][ T1045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.507629][ T6361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.528604][ T8576] __nla_validate_parse: 3 callbacks suppressed [ 202.528623][ T8576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.625'. [ 202.548602][ T6361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.676818][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.713718][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.729005][ T8579] x_tables: duplicate underflow at hook 2 [ 202.748247][ T8582] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 202.748247][ T8582] Please contact the netfilter-devel mailing list or update your nftables rules. [ 202.917006][ T8586] bond2: (slave syz_tun): Removing an active aggregator [ 202.943982][ T8586] bond2: (slave syz_tun): Releasing backup interface [ 203.105262][ T8598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'. [ 203.293918][ T8605] vxcan2: entered allmulticast mode [ 203.448362][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 203.892063][ T8632] netlink: 9 bytes leftover after parsing attributes in process `syz.3.641'. [ 203.921403][ T8632] netlink: 9 bytes leftover after parsing attributes in process `syz.3.641'. [ 204.365792][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 204.461404][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 204.514437][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 204.534910][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.646'. [ 204.629157][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 204.629177][ T6361] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.680601][ T6361] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.702957][ T6361] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.747132][ T6361] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.184562][ T8676] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 205.216819][ T8676] bond1 (unregistering): Released all slaves [ 205.230930][ T8680] nbd: socks must be embedded in a SOCK_ITEM attr [ 205.807855][ T8693] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 205.948596][ T8693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.217838][ T8697] bond2: (slave veth11): Enslaving as an active interface with a down link [ 206.298802][ T8698] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 206.321417][ T8698] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 206.666093][ T8708] xt_hashlimit: size too large, truncated to 1048576 [ 206.729943][ T8711] lo speed is unknown, defaulting to 1000 [ 207.364067][ T8739] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 207.429977][ T8739] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 207.591111][ T8741] bond3: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 207.638654][ T8741] bond3: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 207.689245][ T8741] bond3: entered allmulticast mode [ 207.709485][ T8741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.059776][ T8756] __nla_validate_parse: 3 callbacks suppressed [ 208.059795][ T8756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.674'. [ 208.076637][ T8753] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20002 [ 211.231698][ T8785] netlink: 'syz.4.682': attribute type 14 has an invalid length. [ 212.468128][ T8851] netlink: 'syz.3.696': attribute type 22 has an invalid length. [ 212.497430][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 212.630119][ T1045] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.679876][ T1045] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.713846][ T1045] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.740799][ T1045] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.760356][ T8860] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 212.844609][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 212.998989][ T8860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.078452][ T8866] bond4: (slave geneve2): making interface the new active one [ 213.102585][ T8866] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 213.145941][ T6361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.158527][ T6361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.191871][ T6361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.217036][ T6361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.264404][ T8886] netlink: 'syz.3.702': attribute type 3 has an invalid length. [ 213.689707][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 214.067470][ T8919] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 214.392117][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 214.423961][ T8922] bond2: (slave bridge2): making interface the new active one [ 214.467287][ T8922] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 214.524948][ T8925] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 214.534496][ T8909] netlink: 156 bytes leftover after parsing attributes in process `syz.1.708'. [ 214.650325][ T8947] netlink: 164 bytes leftover after parsing attributes in process `syz.2.715'. [ 214.680918][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.715'. [ 214.724111][ T8948] netlink: 'syz.5.717': attribute type 3 has an invalid length. [ 214.744453][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.717'. [ 214.911754][ T8955] batman_adv: batadv0: Adding interface: gretap1 [ 214.927209][ T8955] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.983142][ T8955] batman_adv: batadv0: Interface activated: gretap1 [ 215.002201][ T8929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.294229][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 215.326397][ T8971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.722'. [ 215.412130][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 215.461696][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.723'. [ 216.424359][ T9002] lo speed is unknown, defaulting to 1000 [ 217.099770][ T9012] netlink: 'syz.5.733': attribute type 6 has an invalid length. [ 217.108796][ T9012] netlink: 'syz.5.733': attribute type 6 has an invalid length. [ 219.622126][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.643928][ T9046] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.677680][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.778868][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.797242][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.822639][ T9046] veth1_macvtap: left promiscuous mode [ 219.829691][ T9046] veth0_macvtap: left promiscuous mode [ 219.840437][ T9046] veth0_macvtap: entered promiscuous mode [ 219.858332][ T9046] veth1_macvtap: entered promiscuous mode [ 219.890695][ T9046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.912433][ T9046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.931708][ T9046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.946478][ T9046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.969308][ T9046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.020786][ T9052] __nla_validate_parse: 5 callbacks suppressed [ 220.020808][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 220.059777][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.067097][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.282823][ T9058] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 220.332199][ T6275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.348593][ T9069] xt_hashlimit: size too large, truncated to 1048576 [ 220.372570][ T6275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.407850][ T6275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.444106][ T96] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.457628][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 220.479820][ T6275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.641560][ T96] bond2: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 220.695347][ T96] bond2: (slave veth11): making interface the new active one [ 220.742670][ T96] bond2: active interface up! [ 220.926158][ T9082] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 220.952657][ T9082] syzkaller1: linktype set to 805 [ 221.059710][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 221.407518][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 221.436950][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.756'. [ 221.437760][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 221.471823][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 221.484256][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 221.598446][ T9110] netlink: 'syz.1.758': attribute type 9 has an invalid length. [ 221.661905][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.687705][ T9114] netlink: 276 bytes leftover after parsing attributes in process `syz.2.760'. [ 221.797771][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.759'. [ 222.241874][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.293500][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.474150][ T6403] IPVS: starting estimator thread 0... [ 222.571378][ T9149] IPVS: using max 27 ests per chain, 64800 per kthread [ 222.596473][ T9115] batadv1: left promiscuous mode [ 222.603986][ T9115] bond1: left promiscuous mode [ 222.609136][ T9115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.625760][ T9115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.634245][ T6403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.682201][ T6426] bridge0: entered promiscuous mode [ 222.722955][ T9139] bridge2: entered promiscuous mode [ 222.728296][ T9139] bridge2: entered allmulticast mode [ 222.737958][ T9139] team0: Port device bridge2 added [ 222.752287][ T6403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.964407][ T9151] vlan2: entered promiscuous mode [ 223.196138][ T9151] 0ªX¹¦À: left allmulticast mode [ 223.652080][ T9151] batadv1: left allmulticast mode [ 223.666100][ T9151] ip6tnl1: left allmulticast mode [ 223.678709][ T9151] bond1: left allmulticast mode [ 223.733959][ T9151] vlan2: left promiscuous mode [ 223.789743][ T1549] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 223.803419][ T1549] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.835016][ T1549] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 223.860265][ T1549] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.907096][ T1549] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 223.917907][ T1549] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.927424][ T1549] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 223.941599][ T1549] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.077320][ T9198] netlink: 'syz.5.778': attribute type 1 has an invalid length. [ 224.087542][ T9197] netlink: 'syz.5.778': attribute type 1 has an invalid length. [ 224.233329][ T9198] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 224.242694][ T9197] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 224.326694][ T9199] gretap2: entered allmulticast mode [ 224.498526][ T9204] batman_adv: batadv0: Adding interface: gretap2 [ 224.529704][ T9204] batman_adv: batadv0: Interface activated: gretap2 [ 224.769644][ T9233] syzkaller1: entered promiscuous mode [ 224.797648][ T9233] syzkaller1: entered allmulticast mode [ 224.810475][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.179113][ T9250] __nla_validate_parse: 3 callbacks suppressed [ 225.179131][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.788'. [ 225.253018][ T9254] netlink: 36 bytes leftover after parsing attributes in process `syz.5.790'. [ 225.403554][ T9266] syzkaller0: entered promiscuous mode [ 225.430205][ T9266] syzkaller0: entered allmulticast mode [ 225.494296][ T9270] erspan0: entered promiscuous mode [ 225.516759][ T9272] netlink: 208 bytes leftover after parsing attributes in process `syz.5.794'. [ 225.554216][ T9267] erspan0: left promiscuous mode [ 225.645763][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.794'. [ 225.692736][ T9277] netlink: 56 bytes leftover after parsing attributes in process `syz.5.794'. [ 225.956327][ T9290] netlink: 165 bytes leftover after parsing attributes in process `syz.4.798'. [ 225.999669][ T9290] netlink: 165 bytes leftover after parsing attributes in process `syz.4.798'. [ 226.035554][ T9290] netlink: 165 bytes leftover after parsing attributes in process `syz.4.798'. [ 226.068482][ T9290] netlink: 165 bytes leftover after parsing attributes in process `syz.4.798'. [ 226.104243][ T9290] netlink: 165 bytes leftover after parsing attributes in process `syz.4.798'. [ 226.199173][ T9296] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 226.329413][ T9299] netlink: 'syz.3.799': attribute type 39 has an invalid length. [ 226.953653][ T1045] tipc: Subscription rejected, illegal request [ 227.347066][ T9346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.545487][ T8026] udevd[8026]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 227.894424][ T9363] syzkaller1: entered promiscuous mode [ 227.928634][ T9363] syzkaller1: entered allmulticast mode [ 228.515983][ T9401] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 228.604912][ T9403] netlink: 'syz.1.824': attribute type 3 has an invalid length. [ 228.657998][ T9406] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 229.154072][ T9425] netlink: 'syz.2.833': attribute type 28 has an invalid length. [ 230.047490][ T9457] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 230.106941][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.114900][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.122231][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.128866][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.137880][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.152760][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.160827][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.167463][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.174303][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.181387][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.188165][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.194801][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.201909][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.208503][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.215319][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.222076][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.228804][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.235483][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.242283][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.248870][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.256023][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.264943][ T9461] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.509602][ T9475] __nla_validate_parse: 43 callbacks suppressed [ 230.509622][ T9475] netlink: 3 bytes leftover after parsing attributes in process `syz.1.846'. [ 230.959875][ T9485] syzkaller0: entered promiscuous mode [ 230.987805][ T9485] syzkaller0: entered allmulticast mode [ 231.030827][ T9491] ipt_ECN: cannot use operation on non-tcp rule [ 231.307543][ T9501] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 231.361083][ T9501] netlink: 'syz.3.857': attribute type 5 has an invalid length. [ 231.646722][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'. [ 232.111308][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 232.194203][ T9540] xt_TCPMSS: Only works on TCP SYN packets [ 232.569467][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.871'. [ 232.856842][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.874'. [ 233.156607][ T9572] netlink: 164 bytes leftover after parsing attributes in process `syz.4.876'. [ 233.174130][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 233.226146][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 233.503046][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 233.620696][ T9601] veth9: entered allmulticast mode [ 233.706819][ T9598] veth9: entered allmulticast mode [ 233.932415][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.971314][ T9617] netlink: 'syz.3.889': attribute type 4 has an invalid length. [ 234.023089][ T9617] netlink: 'syz.3.889': attribute type 4 has an invalid length. [ 234.074452][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 234.655511][ T9629] bond1: entered promiscuous mode [ 234.714448][ T9629] bond1: entered allmulticast mode [ 234.725152][ T9629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.756768][ T9634] pim6reg: entered allmulticast mode [ 234.905329][ T9641] veth1_to_bond: entered allmulticast mode [ 234.927856][ T9641] veth1_to_bond: entered promiscuous mode [ 234.961710][ T9641] veth1_to_bond (unregistering): left allmulticast mode [ 234.984473][ T9641] veth1_to_bond (unregistering): left promiscuous mode [ 235.072855][ T9645] syzkaller0: entered promiscuous mode [ 235.089456][ T9645] syzkaller0: entered allmulticast mode [ 235.514064][ T9671] FAULT_INJECTION: forcing a failure. [ 235.514064][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 235.587763][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.1.905 Not tainted syzkaller #0 PREEMPT(full) [ 235.587793][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 235.587813][ T9671] Call Trace: [ 235.587821][ T9671] [ 235.587830][ T9671] dump_stack_lvl+0xe8/0x150 [ 235.587876][ T9671] should_fail_ex+0x40c/0x560 [ 235.587907][ T9671] _copy_to_user+0x31/0xb0 [ 235.587942][ T9671] bpf_test_finish+0x1cf/0x690 [ 235.587976][ T9671] ? __pfx_bpf_test_finish+0x10/0x10 [ 235.588006][ T9671] ? _copy_from_user+0x94/0xb0 [ 235.588038][ T9671] ? bpf_test_init+0x113/0x150 [ 235.588062][ T9671] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 235.588105][ T9671] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 235.588143][ T9671] ? __fget_files+0x2a/0x420 [ 235.588177][ T9671] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 235.588202][ T9671] bpf_prog_test_run+0x2c5/0x340 [ 235.588237][ T9671] __sys_bpf+0xa22/0xd90 [ 235.588274][ T9671] ? __pfx___sys_bpf+0x10/0x10 [ 235.588314][ T9671] ? __fget_files+0x2a/0x420 [ 235.588364][ T9671] ? ksys_write+0x242/0x270 [ 235.588400][ T9671] ? __pfx_ksys_write+0x10/0x10 [ 235.588440][ T9671] __x64_sys_bpf+0xba/0xd0 [ 235.588465][ T9671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.588489][ T9671] do_syscall_64+0x174/0x580 [ 235.588511][ T9671] ? trace_irq_disable+0x3b/0x140 [ 235.588538][ T9671] ? clear_bhb_loop+0x40/0x90 [ 235.588565][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.588587][ T9671] RIP: 0033:0x7f5ac099de99 [ 235.588614][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.588633][ T9671] RSP: 002b:00007f5ac1894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.588661][ T9671] RAX: ffffffffffffffda RBX: 00007f5ac0c25fa0 RCX: 00007f5ac099de99 [ 235.588676][ T9671] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 235.588689][ T9671] RBP: 00007f5ac1894090 R08: 0000000000000000 R09: 0000000000000000 [ 235.588701][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.588713][ T9671] R13: 00007f5ac0c26038 R14: 00007f5ac0c25fa0 R15: 00007fff674d73a8 [ 235.588745][ T9671] [ 236.073893][ T9678] tipc: Enabling of bearer rejected, failed to enable media [ 236.269183][ T9692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.304564][ T9697] __nla_validate_parse: 15 callbacks suppressed [ 236.304581][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 236.331832][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 236.340976][ T9692] vlan2: entered allmulticast mode [ 236.342437][ T9697] netlink: 'syz.1.913': attribute type 30 has an invalid length. [ 236.349857][ T9692] bridge0: port 3(vlan2) entered blocking state [ 236.373559][ T9692] bridge0: port 3(vlan2) entered disabled state [ 236.391355][ T9699] netlink: 'syz.1.913': attribute type 30 has an invalid length. [ 236.402667][ T9692] vlan2: entered promiscuous mode [ 236.511706][ T9698] vlan2: entered promiscuous mode [ 236.517719][ T9698] bridge0: entered promiscuous mode [ 236.739818][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.747661][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.119158][ T9700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.128759][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 237.144851][ T9700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.226297][ T9731] netlink: 'syz.4.919': attribute type 3 has an invalid length. [ 237.380892][ T9700] batman_adv: batadv0: Interface deactivated: gretap1 [ 237.392017][ T9700] bond1: left promiscuous mode [ 237.396937][ T9700] bond1: left allmulticast mode [ 237.405069][ T9700] vlan2: left promiscuous mode [ 237.409966][ T9700] bridge0: left promiscuous mode [ 237.417281][ T6361] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.453186][ T9708] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.528443][ T9736] FAULT_INJECTION: forcing a failure. [ 237.528443][ T9736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.548372][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.5.920 Not tainted syzkaller #0 PREEMPT(full) [ 237.548400][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 237.548431][ T9736] Call Trace: [ 237.548440][ T9736] [ 237.548448][ T9736] dump_stack_lvl+0xe8/0x150 [ 237.548486][ T9736] should_fail_ex+0x40c/0x560 [ 237.548515][ T9736] _copy_to_user+0x31/0xb0 [ 237.548549][ T9736] bpf_test_finish+0x4ea/0x690 [ 237.548582][ T9736] ? __pfx_bpf_test_finish+0x10/0x10 [ 237.548612][ T9736] ? _copy_from_user+0x94/0xb0 [ 237.548643][ T9736] ? bpf_test_init+0x113/0x150 [ 237.548667][ T9736] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 237.548712][ T9736] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.548742][ T9736] ? __fget_files+0x2a/0x420 [ 237.548776][ T9736] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.548801][ T9736] bpf_prog_test_run+0x2c5/0x340 [ 237.548835][ T9736] __sys_bpf+0xa22/0xd90 [ 237.548872][ T9736] ? __pfx___sys_bpf+0x10/0x10 [ 237.548912][ T9736] ? __fget_files+0x2a/0x420 [ 237.548959][ T9736] ? ksys_write+0x242/0x270 [ 237.548994][ T9736] ? __pfx_ksys_write+0x10/0x10 [ 237.549039][ T9736] __x64_sys_bpf+0xba/0xd0 [ 237.549065][ T9736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.549088][ T9736] do_syscall_64+0x174/0x580 [ 237.549110][ T9736] ? trace_irq_disable+0x3b/0x140 [ 237.549136][ T9736] ? clear_bhb_loop+0x40/0x90 [ 237.549163][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.549184][ T9736] RIP: 0033:0x7f417719de99 [ 237.549204][ T9736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.549223][ T9736] RSP: 002b:00007f417811f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.549247][ T9736] RAX: ffffffffffffffda RBX: 00007f4177425fa0 RCX: 00007f417719de99 [ 237.549263][ T9736] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 237.549277][ T9736] RBP: 00007f417811f090 R08: 0000000000000000 R09: 0000000000000000 [ 237.549290][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.549303][ T9736] R13: 00007f4177426038 R14: 00007f4177425fa0 R15: 00007ffe67192868 [ 237.549338][ T9736] [ 237.807591][ T6361] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.816881][ T6361] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.826095][ T6361] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.837753][ T6361] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.846763][ T6361] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.857554][ T6361] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.866555][ T6361] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.876333][ T6361] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.885318][ T6361] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.894476][ T6361] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.904009][ T6361] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.995780][ T9739] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.151099][ T9738] : option downdelay: invalid value (18446744073709547007) [ 238.163520][ T9738] : option downdelay: allowed values 0 - 2147483647 [ 238.173297][ T9738]  (unregistering): Released all slaves [ 238.192344][ T9751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.924'. [ 238.204451][ T9745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.328595][ T9750] macsec2: entered promiscuous mode [ 238.349641][ T9750] bridge0: entered promiscuous mode [ 238.528735][ T9749] infiniband syz1: set down [ 238.533677][ T9749] infiniband syz1: added bridge_slave_1 [ 238.575763][ T9749] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 238.599647][ T9749] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 238.619283][ T9749] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 238.671876][ T9749] RDS/IB: syz1: added [ 238.685064][ T9749] smc: adding ib device syz1 with port count 1 [ 238.691665][ T9749] smc: ib device syz1 port 1 has no pnetid [ 239.021001][ T9764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.926'. [ 239.031664][ T9764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.926'. [ 239.709441][ T9714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.728178][ T9752] netlink: 'syz.5.923': attribute type 1 has an invalid length. [ 239.736095][ T9752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.923'. [ 240.133883][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.929'. [ 240.816581][ T9817] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 240.835695][ T9817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.937'. [ 240.859438][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.937'. [ 241.021624][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.052312][ T9821] netlink: 'syz.1.938': attribute type 5 has an invalid length. [ 241.243258][ T9831] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 241.305233][ T9831] openvswitch: netlink: ct_state flags 806f0004 unsupported [ 241.384094][ T9839] __nla_validate_parse: 5 callbacks suppressed [ 241.384113][ T9839] netlink: 132 bytes leftover after parsing attributes in process `syz.4.944'. [ 241.459836][ T9840] netlink: 132 bytes leftover after parsing attributes in process `syz.4.944'. [ 241.755675][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 241.793051][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.951'. [ 241.830542][ T9856] tc_dump_action: action bad kind [ 241.836888][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 241.846989][ T9857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.951'. [ 241.859348][ T9857] tc_dump_action: action bad kind [ 242.318274][ T9880] bond3: option arp_interval: invalid value (18446744073709551615) [ 242.329721][ T9880] bond3: option arp_interval: allowed values 0 - 2147483647 [ 242.351539][ T9880] bond3 (unregistering): Released all slaves [ 242.416628][ T9893] ipt_REJECT: ECHOREPLY no longer supported. [ 242.473117][ T9900] netlink: 'syz.2.963': attribute type 29 has an invalid length. [ 242.481222][ T9900] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 242.498142][ T9886] batman_adv: batadv0: Adding interface: ipvlan0 [ 242.510334][ T9886] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 242.533693][ T9899] batman_adv: batadv0: Adding interface: dummy0 [ 242.540344][ T9899] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.566561][ T9899] batman_adv: batadv0: Interface activated: dummy0 [ 242.798141][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 242.941405][ T9908] batadv0: mtu less than device minimum [ 242.964080][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.977529][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.989435][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.001298][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.013230][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.025055][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.036963][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.048873][ T9908] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.481559][ T9939] netlink: 282 bytes leftover after parsing attributes in process `syz.2.974'. [ 243.963212][ T30] audit: type=1800 audit(1784577698.020:2): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.980" name=B702 dev="tmpfs" ino=1043 res=0 errno=0 [ 244.051957][ T30] audit: type=1800 audit(1784577698.070:3): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.980" name=B702 dev="tmpfs" ino=1043 res=0 errno=0 [ 244.219869][ T9969] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 244.386148][ T9977] netlink: 'syz.2.986': attribute type 1 has an invalid length. [ 244.479361][ T9977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.531059][ T9983] bond5: (slave syz_tun): making interface the new active one [ 244.567556][ T9983] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 244.660234][ T9985] netlink: 14 bytes leftover after parsing attributes in process `syz.5.989'. [ 244.768901][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 244.783764][ T9991] bond0: Unable to set down delay as MII monitoring is disabled [ 245.073426][T10003] tipc: Enabling of bearer rejected, failed to enable media [ 245.121035][T10003] tun0: tun_chr_ioctl cmd 21731 [ 246.348569][T10078] netlink: 'syz.4.1014': attribute type 6 has an invalid length. [ 246.359136][T10077] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 246.866079][T10099] __nla_validate_parse: 8 callbacks suppressed [ 246.866100][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 247.489462][T10110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1029'. [ 247.646544][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 247.797125][T10118] lo speed is unknown, defaulting to 1000 [ 247.857193][ T8026] udevd[8026]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 248.060741][T10132] net_ratelimit: 13 callbacks suppressed [ 248.060762][T10132] IPv6: addrconf: prefix option has invalid lifetime [ 248.073998][T10132] IPv6: addrconf: prefix option has invalid lifetime [ 248.096197][T10131] dummy0: entered allmulticast mode [ 248.103873][T10130] dummy0: left allmulticast mode [ 248.227179][T10135] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 248.572870][T10151] netlink: 'syz.4.1039': attribute type 12 has an invalid length. [ 248.600683][T10152] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 248.910811][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1042'. [ 248.923370][T10169] netlink: 356 bytes leftover after parsing attributes in process `syz.5.1042'. [ 248.943000][T10169] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1042'. [ 249.016968][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1042'. [ 249.439406][ T30] audit: type=1800 audit(1784577703.500:4): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1047" name="memory.events" dev="tmpfs" ino=1158 res=0 errno=0 [ 249.774049][T10203] tipc: Enabling of bearer rejected, failed to enable media [ 249.797455][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1053'. [ 249.836487][T10203] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 249.957019][T10212] netlink: 'syz.3.1055': attribute type 25 has an invalid length. [ 250.228886][T10223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.288559][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1059'. [ 250.406742][T10231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'. [ 250.436526][ T5622] block nbd2: Receive control failed (result -32) [ 250.445600][ T50] block nbd2: Receive control failed (result -32) [ 250.453267][ T5627] block nbd2: Receive control failed (result -32) [ 251.107922][T10258] netlink: 'syz.4.1067': attribute type 10 has an invalid length. [ 251.178126][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.196476][T10258] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 251.358577][T10261] lo speed is unknown, defaulting to 1000 [ 251.448545][T10273] xt_CT: No such helper "netbios-ns" [ 252.282123][T10319] __nla_validate_parse: 5 callbacks suppressed [ 252.282144][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 252.335237][T10321] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 252.364315][T10322] syzkaller1: entered promiscuous mode [ 252.388306][T10322] syzkaller1: entered allmulticast mode [ 252.448970][T10316] syzkaller0: entered promiscuous mode [ 252.472407][T10316] syzkaller0: entered allmulticast mode [ 252.491823][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.567040][T10318] lo speed is unknown, defaulting to 1000 [ 252.574571][T10320] IPv6: Can't replace route, no match found [ 252.900552][T10338] nftables ruleset with unbound chain [ 252.915785][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 252.999433][T10338] gretap2: entered allmulticast mode [ 253.141177][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 253.219213][T10354] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 253.533297][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1088'. [ 253.608667][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 253.642692][T10370] openvswitch: netlink: Flow key attr not present in new flow. [ 253.705144][T10375] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1088'. [ 254.287605][T10392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.410746][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 254.440130][T10392] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1091'. [ 254.702712][T10405] No such timeout policy "syz0" [ 254.910873][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1097'. [ 255.119401][T10426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.233731][T10438] netlink: 'syz.5.1103': attribute type 1 has an invalid length. [ 255.476679][T10445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 255.548006][T10438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.594356][ T6273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.615991][ T6273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.692762][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.699214][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.789271][T10459] xt_hashlimit: size too large, truncated to 1048576 [ 255.929077][T10465] netlink: 'syz.4.1110': attribute type 2 has an invalid length. [ 255.984549][T10462] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 256.081953][T10470] syzkaller0: entered promiscuous mode [ 256.107492][T10470] syzkaller0: entered allmulticast mode [ 256.733785][T10500] bond0: (slave bond_slave_1): Releasing backup interface [ 256.758030][T10506] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 256.777134][T10506] syzkaller1: linktype set to 825 [ 256.852960][T10511] RDS: rds_bind could not find a transport for 1400::8000:0:20:0, load rds_tcp or rds_rdma? [ 257.418317][T10527] dummy0: entered promiscuous mode [ 257.426706][T10527] __nla_validate_parse: 5 callbacks suppressed [ 257.426726][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 257.461911][T10527] dummy0 (unregistering): left promiscuous mode [ 257.525544][T10513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.560435][T10514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.599891][T10534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 257.778705][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 257.836472][T10539] nbd: device at index 64 is going down [ 258.045879][ T8026] udevd[8026]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 258.255254][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 258.288147][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 258.375853][T10558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 258.731732][T10572] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1143'. [ 258.953330][T10591] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1147'. [ 258.977058][T10591] syzkaller0: entered promiscuous mode [ 258.996635][T10591] syzkaller0: entered allmulticast mode [ 259.282665][T10601] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.359238][T10605] veth0_to_team: entered promiscuous mode [ 260.107247][T10648] syzkaller0: entered promiscuous mode [ 260.114159][T10648] syzkaller0: entered allmulticast mode [ 260.226605][T10655] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1162'. [ 260.281544][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 260.301091][T10657] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1162'. [ 260.378271][T10657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.110530][T10696] netlink: 'syz.2.1174': attribute type 9 has an invalid length. [ 261.213055][T10705] tipc: Started in network mode [ 261.238644][T10705] tipc: Node identity 9af37cf8cdaf, cluster identity 4711 [ 261.291670][T10705] tipc: Enabled bearer , priority 0 [ 261.320413][T10706] syzkaller0: entered promiscuous mode [ 261.326925][T10706] syzkaller0: entered allmulticast mode [ 261.405238][T10707] tipc: Resetting bearer [ 261.474497][T10707] tipc: Disabling bearer [ 262.045380][T10741] netlink: 'syz.5.1184': attribute type 12 has an invalid length. [ 262.089953][T10741] netlink: 'syz.5.1184': attribute type 29 has an invalid length. [ 262.114656][T10741] netlink: 'syz.5.1184': attribute type 7 has an invalid length. [ 262.488399][T10761] netlink: 'syz.4.1191': attribute type 1 has an invalid length. [ 262.508332][T10761] __nla_validate_parse: 8 callbacks suppressed [ 262.508362][T10761] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1191'. [ 262.538462][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 262.544918][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.557263][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.568717][T10747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.617056][T10747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.632345][T10747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.649158][T10747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.660742][T10747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.679461][T10747] veth1_vlan: left promiscuous mode [ 262.686901][T10747] veth0_vlan: left promiscuous mode [ 262.694371][T10747] veth0_vlan: entered promiscuous mode [ 262.703000][T10747] veth1_vlan: entered promiscuous mode [ 262.712808][T10747] batman_adv: batadv0: Interface activated: ipvlan0 [ 262.721850][T10747] veth1_macvtap: left promiscuous mode [ 262.728646][T10747] veth0_macvtap: left promiscuous mode [ 262.735659][T10747] veth0_macvtap: entered promiscuous mode [ 262.742913][T10747] veth1_macvtap: entered promiscuous mode [ 262.756617][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.765392][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.774276][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.783354][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.802759][T10747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.817761][T10747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.014699][ T3299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.032323][ T3299] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 263.049188][ T3299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.082623][ T3299] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 263.174130][ T3299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.193696][ T3299] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 263.205377][ T3299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.215342][ T3299] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 263.338897][ T96] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 263.616658][T10809] syzkaller0: entered promiscuous mode [ 263.646468][T10809] syzkaller0: entered allmulticast mode [ 263.947819][T10821] xt_ipcomp: unknown flags 1D [ 264.243520][T10832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1205'. [ 264.413486][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 264.467222][T10843] netlink: 'syz.2.1208': attribute type 30 has an invalid length. [ 264.581380][T10840] ip6gretap0: entered promiscuous mode [ 264.646523][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.685204][T10840] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.747289][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.827412][T10840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.864420][T10840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.903041][T10840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.946735][T10840] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 264.978842][T10840] veth1_vlan: left promiscuous mode [ 265.014568][T10840] veth1_vlan: entered promiscuous mode [ 265.047837][T10840] veth1_macvtap: left promiscuous mode [ 265.073071][T10840] veth0_macvtap: left promiscuous mode [ 265.095868][T10840] veth0_macvtap: entered promiscuous mode [ 265.103397][T10840] veth1_macvtap: entered promiscuous mode [ 265.119781][T10840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.136595][T10840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.149355][T10840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.161041][T10840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.171300][T10840] batman_adv: batadv0: Interface activated: ip6gretap1 [ 265.192146][T10840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.268388][ T6447] lo speed is unknown, defaulting to 1000 [ 265.282381][ T6447] syz2: Port: 1 Link ACTIVE [ 265.287051][T10843] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 265.289276][T10849] tipc: Enabled bearer , priority 25 [ 265.299951][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1215'. [ 265.326764][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.334068][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.344470][ T1045] bridge0: port 3(vlan2) entered blocking state [ 265.350923][ T1045] bridge0: port 3(vlan2) entered forwarding state [ 265.411856][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.419088][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.534630][ T33] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.733434][ T33] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.761190][ T33] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.842767][T10877] lo speed is unknown, defaulting to 1000 [ 265.982238][ T96] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.000474][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.008314][ T96] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.082196][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.145974][T10901] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1222'. [ 266.451712][ T6447] tipc: Node number set to 1644432749 [ 266.735900][T10928] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1229'. [ 266.877058][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1216'. [ 267.053706][ T6418] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.076940][T10943] macsec1: entered promiscuous mode [ 267.171551][T10949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1231'. [ 267.331393][T10954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.388112][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1233'. [ 267.400710][T10953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.518568][T10954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.610326][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 267.674631][T10964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.869608][T10966] sctp: [Deprecated]: syz.5.1236 (pid 10966) Use of int in max_burst socket option. [ 267.869608][T10966] Use struct sctp_assoc_value instead [ 267.913690][T10966] __nla_validate_parse: 1 callbacks suppressed [ 267.913711][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 268.076801][T10970] netlink: 'syz.4.1238': attribute type 61 has an invalid length. [ 268.325657][T10973] lo speed is unknown, defaulting to 1000 [ 269.383690][T11015] bridge3: entered allmulticast mode [ 269.486066][T11018] syzkaller0: entered promiscuous mode [ 269.496563][T11018] syzkaller0: entered allmulticast mode [ 269.508788][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1252'. [ 269.855036][T11034] team0: entered allmulticast mode [ 269.868899][T11034] team_slave_0: entered allmulticast mode [ 269.875091][T11034] team_slave_1: entered allmulticast mode [ 269.886244][T11034] bridge1: entered allmulticast mode [ 269.891858][T11034] batadv1: entered allmulticast mode [ 269.930706][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.123400][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 270.298619][T11053] netlink: 'syz.4.1261': attribute type 28 has an invalid length. [ 270.320202][T11053] netlink: 'syz.4.1261': attribute type 3 has an invalid length. [ 270.343112][T11053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1261'. [ 270.503535][T11062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 270.788880][T11088] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1268'. [ 270.845668][T11088] openvswitch: netlink: Message has 512 unknown bytes. [ 270.963493][T11092] netlink: 'syz.2.1270': attribute type 1 has an invalid length. [ 270.986988][T11094] tipc: Enabling of bearer rejected, failed to enable media [ 271.040116][T11081] "syz.3.1268" (11081) uses obsolete ecb(arc4) skcipher [ 271.149197][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1270'. [ 271.191882][T11092] bond6: entered promiscuous mode [ 271.211225][T11092] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.246923][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 271.351619][T11099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.374290][T11099] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 271.384956][T11099] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 271.405278][T11099] bond6: (slave gre1): making interface the new active one [ 271.412867][T11099] gre1: entered promiscuous mode [ 271.420318][T11099] bond6: (slave gre1): Enslaving as an active interface with an up link [ 276.170340][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 277.450418][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.331179][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 292.171378][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.452273][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 307.029265][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 307.121275][T11133] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1279'. [ 307.217967][T11146] netlink: 'syz.2.1282': attribute type 3 has an invalid length. [ 307.260372][T11148] veth1_macvtap: left promiscuous mode [ 307.276185][T11148] macsec0: entered allmulticast mode [ 307.302727][T11146] veth1_macvtap: entered promiscuous mode [ 307.317473][T11146] veth1_macvtap: entered allmulticast mode [ 307.341817][T11146] macsec0: left allmulticast mode [ 307.360156][T11146] veth1_macvtap: left allmulticast mode [ 307.362796][T11148] x_tables: unsorted entry at hook 2 [ 307.418383][T11148] xt_hashlimit: size too large, truncated to 1048576 [ 307.442073][T11147] veth9: entered allmulticast mode [ 307.457697][T11147] bond3: (slave veth9): Enslaving as an active interface with an up link [ 307.516589][T11136] bond3 (unregistering): (slave veth9): Releasing backup interface [ 307.581985][T11136] bond3 (unregistering): Released all slaves [ 307.600690][T11158] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1286'. [ 307.622863][T11156] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1286'. [ 307.965345][T11168] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 307.986199][T11168] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1288'. [ 308.026604][T11168] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 308.059753][T11168] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1288'. [ 308.135702][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1290'. [ 308.220787][T11176] netlink: 'syz.3.1291': attribute type 1 has an invalid length. [ 308.393450][T11176] bond4: entered promiscuous mode [ 308.436597][T11176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.516569][T11201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.572990][T11245] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 309.664624][T11247] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 309.697667][T11247] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1307'. [ 309.755569][T11255] openvswitch: netlink: Unknown key attributes 2 [ 309.782432][T11257] netlink: 'syz.3.1310': attribute type 9 has an invalid length. [ 309.799295][T11259] openvswitch: netlink: Unknown key attributes 2 [ 309.819915][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 309.867626][T11248] bond4: entered promiscuous mode [ 309.876884][T11248] bond4: entered allmulticast mode [ 309.890521][T11248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.897735][T11258] dummy0: entered allmulticast mode [ 309.939143][T11258] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 309.962950][T11258] netlink: 'syz.2.1311': attribute type 3 has an invalid length. [ 309.971532][T11258] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1311'. [ 310.213653][T11270] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 310.320922][T11275] lo speed is unknown, defaulting to 1000 [ 310.404628][T11273] lo speed is unknown, defaulting to 1000 [ 310.799613][T11301] lo speed is unknown, defaulting to 1000 [ 310.843107][T11313] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.932903][T11320] tipc: Can't bind to reserved service type 2 [ 311.877366][T11358] tipc: Enabled bearer , priority 0 [ 311.969719][T11365] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 312.132553][T11354] syzkaller0: entered promiscuous mode [ 312.148384][T11354] syzkaller0: entered allmulticast mode [ 312.160874][T11354] tipc: Resetting bearer [ 312.185196][T11363] vti0: entered allmulticast mode [ 312.289696][T11370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.302243][T11366] bond3: option min_links: invalid value (18446744073709551612) [ 312.334962][T11366] bond3: option min_links: allowed values 0 - 2147483647 [ 312.347315][T11366] bond3 (unregistering): Released all slaves [ 312.484783][T11376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.525412][T11353] tipc: Resetting bearer [ 313.206668][T11384] __nla_validate_parse: 8 callbacks suppressed [ 313.206688][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 314.545420][T11353] tipc: Disabling bearer [ 314.576071][T11378] syzkaller0: entered promiscuous mode [ 314.583138][T11378] syzkaller0: entered allmulticast mode [ 314.796321][T11392] openvswitch: netlink: IP tunnel dst address not specified [ 315.157470][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 315.467081][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.498480][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.659241][T11399] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 315.918770][T11399] batman_adv: batadv0: Interface deactivated: gretap2 [ 316.009159][ T3299] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.030332][ T3299] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.039316][ T3299] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 316.052085][ T3299] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.064054][ T3299] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.073996][ T3299] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 316.094645][ T3299] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.116516][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 316.130148][ T3299] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.147047][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 316.158425][ T3299] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 316.303601][ T3299] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.313584][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 316.331468][ T3299] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 316.344188][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 316.356619][ T3299] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.373193][ T3299] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.393704][ T3299] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.613847][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 316.949491][T11446] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1352'. [ 316.992512][T11448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.100852][T11448] team0: Mode "activeaackup" not found [ 317.134761][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.141384][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.419157][T11460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'. [ 317.615518][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 317.806704][T11480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.610446][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.629180][T11490] syzkaller0: entered promiscuous mode [ 355.641594][T11490] syzkaller0: entered allmulticast mode [ 356.767618][T11519] __nla_validate_parse: 3 callbacks suppressed [ 356.767640][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1377'. [ 356.832442][T11521] bond0: entered promiscuous mode [ 356.860461][T11521] bond_slave_0: entered promiscuous mode [ 356.910378][T11521] ipvlan1: entered promiscuous mode [ 356.936066][T11521] ipvlan1: left promiscuous mode [ 356.952054][T11521] bond0: left promiscuous mode [ 356.965336][T11521] bond_slave_0: left promiscuous mode [ 357.027133][T11534] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 357.081953][T11539] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 357.656343][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1391'. [ 357.769763][T11577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1392'. [ 357.781623][T11577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1392'. [ 357.798041][T11577] ip6gre1: entered promiscuous mode [ 357.806798][T11577] ip6gre1: entered allmulticast mode [ 357.938196][T11577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.962091][T11578] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 357.978610][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 358.016717][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'. [ 358.423105][T11605] syzkaller0: entered promiscuous mode [ 358.428681][T11605] syzkaller0: entered allmulticast mode [ 358.563532][T11615] bridge1: entered promiscuous mode [ 358.568851][T11615] bridge1: entered allmulticast mode [ 358.579587][T11615] team0: Port device bridge1 added [ 358.625870][T11618] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1402'. [ 358.731873][T11620] IPVS: Error connecting to the multicast addr [ 358.793354][T11624] bridge0: port 3(macvlan0) entered blocking state [ 358.814797][T11624] bridge0: port 3(macvlan0) entered disabled state [ 358.832424][T11624] macvlan0: entered allmulticast mode [ 358.864958][T11624] macvlan0: entered promiscuous mode [ 358.925376][T11630] veth1_vlan: entered allmulticast mode [ 358.997305][T11636] netlink: 'syz.2.1410': attribute type 12 has an invalid length. [ 359.030177][T11636] netlink: 'syz.2.1410': attribute type 29 has an invalid length. [ 359.045304][T11636] netlink: 'syz.2.1410': attribute type 7 has an invalid length. [ 359.073481][T11636] netlink: 'syz.2.1410': attribute type 37 has an invalid length. [ 359.092027][T11636] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1410'. [ 359.566601][T11659] lo speed is unknown, defaulting to 1000 [ 359.861858][T11684] xt_policy: output policy not valid in PREROUTING and INPUT [ 360.028358][T11656] bridge0: port 3(vlan2) entered disabled state [ 360.034854][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.042355][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.310366][T11656] veth0_to_team: left promiscuous mode [ 360.384214][T11656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.576980][T11656] vlan0: left promiscuous mode [ 360.680721][T11656] bond1: left promiscuous mode [ 360.686540][T11656] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 360.718175][T11656] ip6gre1: left promiscuous mode [ 360.756066][T11656] bond2: left promiscuous mode [ 360.761083][T11656] veth5: left promiscuous mode [ 360.858352][T11656] bond3: left allmulticast mode [ 360.880081][T11656] bridge2: left promiscuous mode [ 360.885133][T11656] bridge2: left allmulticast mode [ 360.898852][T11656] macsec2: left promiscuous mode [ 360.933924][T11656] bridge3: left allmulticast mode [ 360.942291][T11656] bond6: left promiscuous mode [ 360.947183][T11656] gre1: left promiscuous mode [ 360.957290][T11656] vti0: left allmulticast mode [ 360.966560][T11673] syz_tun: entered allmulticast mode [ 360.974899][ T6447] lo speed is unknown, defaulting to 1000 [ 360.994010][ T6447] syz2: Port: 1 Link DOWN [ 361.006261][ T33] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.049043][ T33] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.088413][ T33] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.124539][ T33] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.170439][ T33] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.207117][ T33] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.239665][T11673] syz_tun: left allmulticast mode [ 361.621008][T11718] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 361.829713][T11725] syz.1.1433: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 361.845587][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.1.1433 Not tainted syzkaller #0 PREEMPT(full) [ 361.845617][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 361.845639][T11725] Call Trace: [ 361.845649][T11725] [ 361.845659][T11725] dump_stack_lvl+0xe8/0x150 [ 361.845701][T11725] warn_alloc+0x24c/0x270 [ 361.845734][T11725] ? stack_depot_save_flags+0x33/0x800 [ 361.845764][T11725] ? __pfx_warn_alloc+0x10/0x10 [ 361.845794][T11725] ? kasan_save_track+0x3e/0x80 [ 361.845821][T11725] ? __kasan_kmalloc+0x93/0xb0 [ 361.845851][T11725] ? xsk_setsockopt+0x52a/0x960 [ 361.845882][T11725] ? do_sock_setsockopt+0x17c/0x1b0 [ 361.845915][T11725] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 361.845949][T11725] ? do_syscall_64+0x174/0x580 [ 361.845971][T11725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.846012][T11725] __vmalloc_node_range_noprof+0x12c/0x1730 [ 361.846077][T11725] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 361.846111][T11725] ? __kasan_kmalloc+0x93/0xb0 [ 361.846143][T11725] ? __kmalloc_cache_noprof+0x32d/0x660 [ 361.846172][T11725] ? __kmalloc_cache_noprof+0x150/0x660 [ 361.846204][T11725] vmalloc_user_noprof+0xad/0xe0 [ 361.846232][T11725] ? xskq_create+0xbf/0x170 [ 361.846266][T11725] xskq_create+0xbf/0x170 [ 361.846301][T11725] xsk_init_queue+0x8a/0xe0 [ 361.846338][T11725] xsk_setsockopt+0x52a/0x960 [ 361.846369][T11725] ? __fget_files+0x2a/0x420 [ 361.846400][T11725] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.846433][T11725] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.846472][T11725] ? aa_sock_opt_perm+0xff/0x1a0 [ 361.846498][T11725] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 361.846521][T11725] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.846555][T11725] do_sock_setsockopt+0x17c/0x1b0 [ 361.846595][T11725] __x64_sys_setsockopt+0x13d/0x1b0 [ 361.846635][T11725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.846659][T11725] do_syscall_64+0x174/0x580 [ 361.846681][T11725] ? trace_irq_disable+0x3b/0x140 [ 361.846710][T11725] ? clear_bhb_loop+0x40/0x90 [ 361.846738][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.846761][T11725] RIP: 0033:0x7f5ac099de99 [ 361.846782][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.846802][T11725] RSP: 002b:00007f5ac1894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.846830][T11725] RAX: ffffffffffffffda RBX: 00007f5ac0c25fa0 RCX: 00007f5ac099de99 [ 361.846848][T11725] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 361.846861][T11725] RBP: 00007f5ac0a33eaf R08: 0000000000000004 R09: 0000000000000000 [ 361.846876][T11725] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.846891][T11725] R13: 00007f5ac0c26038 R14: 00007f5ac0c25fa0 R15: 00007fff674d73a8 [ 361.846928][T11725] [ 361.846956][T11725] Mem-Info: [ 362.158715][T11725] active_anon:5738 inactive_anon:0 isolated_anon:0 [ 362.158715][T11725] active_file:0 inactive_file:43372 isolated_file:0 [ 362.158715][T11725] unevictable:768 dirty:130 writeback:0 [ 362.158715][T11725] slab_reclaimable:10556 slab_unreclaimable:104782 [ 362.158715][T11725] mapped:29534 shmem:1292 pagetables:1335 [ 362.158715][T11725] sec_pagetables:0 bounce:0 [ 362.158715][T11725] kernel_misc_reclaimable:0 [ 362.158715][T11725] free:1319922 free_pcp:9941 free_cma:0 [ 362.244356][T11737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1433'. [ 362.383855][T11725] Node 0 active_anon:22852kB inactive_anon:0kB active_file:0kB inactive_file:173280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122236kB dirty:520kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13840kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 362.444143][T11725] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 362.521503][T11725] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.595386][T11725] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 362.613995][T11725] Node 0 DMA32 free:1310588kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22852kB inactive_anon:0kB active_file:0kB inactive_file:173280kB unevictable:1536kB writepending:520kB zspages:0kB present:3129332kB managed:2548700kB mlocked:0kB bounce:0kB free_pcp:39912kB local_pcp:20800kB free_cma:0kB [ 362.648055][T11725] lowmem_reserve[]: 0 0 0 0 0 [ 362.653294][T11725] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.694963][T11725] lowmem_reserve[]: 0 0 0 0 0 [ 362.700136][T11725] Node 1 Normal free:3955276kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.738533][T11725] lowmem_reserve[]: 0 0 0 0 0 [ 362.745692][T11725] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 362.759300][T11725] Node 0 DMA32: 1399*4kB (UME) 1330*8kB (UME) 1275*16kB (UM) 1492*32kB (UME) 385*64kB (UME) 58*128kB (UM) 41*256kB (UM) 28*512kB (UME) 8*1024kB (UM) 9*2048kB (UM) 279*4096kB (UM) = 1310684kB [ 362.779016][T11725] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.791404][T11725] Node 1 Normal: 3*4kB (U) 6*8kB (UM) 7*16kB (UM) 5*32kB (UM) 12*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 964*4096kB (UM) = 3955276kB [ 362.808787][T11725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.820879][T11725] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.830811][T11725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.840981][T11725] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.853049][T11725] 44660 total pagecache pages [ 362.858047][T11725] 0 pages in swap cache [ 362.862864][T11725] Free swap = 124996kB [ 362.867200][T11725] Total swap = 124996kB [ 362.871876][T11725] 2097051 pages RAM [ 362.875922][T11725] 0 pages HighMem/MovableOnly [ 362.881266][T11725] 428195 pages reserved [ 362.885584][T11725] 0 pages cma reserved [ 363.059099][T11759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1440'. [ 363.061414][T11757] batadv_slave_1: entered promiscuous mode [ 363.210897][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.287692][T11770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1441'. [ 363.396422][T11756] batadv_slave_1: left promiscuous mode [ 363.675740][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 363.870934][T11792] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1447'. [ 364.026041][T11798] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1450'. [ 364.039795][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 364.059692][T11798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1450'. [ 364.080640][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1449'. [ 364.102933][T11801] Bluetooth: MGMT ver 1.23 [ 364.249293][T11803] smc: removing ib device syz1 [ 364.376260][T11803] smbdirect: ib_dev[syz1] removed [ 364.521907][T11814] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 364.899220][T11824] lo speed is unknown, defaulting to 1000 [ 365.678701][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1463'. [ 365.891030][T11850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.927580][T11850] batadv0: mtu less than device minimum [ 365.945924][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.959335][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.971183][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.982971][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.994768][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.006565][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.018370][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.031714][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.043502][T11850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.079340][T11850] batadv_slave_0: entered promiscuous mode [ 367.122279][T11864] netlink: 'syz.1.1467': attribute type 4 has an invalid length. [ 367.405564][T11872] syzkaller0: entered promiscuous mode [ 367.429840][T11872] syzkaller0: entered allmulticast mode [ 367.647113][T11880] __nla_validate_parse: 3 callbacks suppressed [ 367.647133][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 367.825639][T11888] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1474'. [ 367.836379][T11887] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1474'. [ 367.860830][T11890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.868249][T11890] IPv6: NLM_F_CREATE should be set when creating new route [ 367.917861][T11890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.142187][T11897] xt_hashlimit: size too large, truncated to 1048576 [ 368.250330][T11905] bridge6: entered promiscuous mode [ 368.262802][T11905] bridge6: entered allmulticast mode [ 368.663274][T11919] syzkaller1: entered promiscuous mode [ 368.700210][T11919] syzkaller1: entered allmulticast mode [ 368.753763][T11931] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 368.770862][T11931] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1483'. [ 369.014691][T11939] lo speed is unknown, defaulting to 1000 [ 369.401202][T11967] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1491'. [ 370.225371][T12003] netlink: 'syz.2.1497': attribute type 13 has an invalid length. [ 370.650809][T12007] lo speed is unknown, defaulting to 1000 [ 370.657250][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1502'. [ 371.148806][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 371.182654][T12029] bond3: option min_links: invalid value (18446744073709551612) [ 371.190843][T12029] bond3: option min_links: allowed values 0 - 2147483647 [ 371.201664][T12029] bond3 (unregistering): Released all slaves [ 372.165315][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 372.328122][T12069] xfrm0: Caught tx_queue_len zero misconfig [ 372.400639][T12070] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1514'. [ 372.447955][T12070] batman_adv: batadv0: Interface deactivated: dummy0 [ 372.496149][T12063] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1514'. [ 372.586246][T12070] batman_adv: batadv0: Removing interface: dummy0 [ 372.683669][T12084] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 373.071930][T12102] can: request_module (can-proto-0) failed. [ 373.079273][T12089] 8021q: adding VLAN 0 to HW filter on device bond8 [ 373.093140][T12089] bond7: (slave bond8): making interface the new active one [ 373.105323][T12089] bond7: (slave bond8): Enslaving as an active interface with an up link [ 373.143331][T12091] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 373.694884][T12130] __nla_validate_parse: 4 callbacks suppressed [ 373.694903][T12130] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1524'. [ 373.804597][T12132] vlan5: entered promiscuous mode [ 373.827427][T12132] hsr0: entered promiscuous mode [ 373.856946][T12132] vlan5: entered allmulticast mode [ 373.873442][T12132] hsr0: entered allmulticast mode [ 373.885789][T12132] hsr_slave_0: entered allmulticast mode [ 373.894212][T12132] hsr_slave_1: entered allmulticast mode [ 373.912842][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 374.067534][T12132] hsr_slave_0: left promiscuous mode [ 374.094314][T12132] hsr_slave_1: left promiscuous mode [ 374.521342][T12170] bridge4: entered promiscuous mode [ 374.534086][T12170] bridge4: entered allmulticast mode [ 374.543169][T12170] team0: Port device bridge4 added [ 375.357406][T12213] batman_adv: batadv0: Adding interface: macvtap1 [ 375.373808][T12213] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.430661][T12213] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 375.468890][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1549'. [ 375.674268][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 375.688386][T12227] vlan3: entered promiscuous mode [ 375.701721][T12227] hsr0: entered promiscuous mode [ 375.716264][T12227] vlan3: entered allmulticast mode [ 375.724963][T12227] hsr0: entered allmulticast mode [ 375.730583][T12227] hsr_slave_0: entered allmulticast mode [ 375.736558][T12227] hsr_slave_1: entered allmulticast mode [ 375.744288][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 376.129374][T12247] tipc: Enabling of bearer rejected, failed to enable media [ 376.204278][T12247] syzkaller0: entered promiscuous mode [ 376.216441][T12247] syzkaller0: entered allmulticast mode [ 376.318502][T12257] IPVS: Error connecting to the multicast addr [ 376.799858][T12276] batman_adv: batadv0: Adding interface: gretap3 [ 376.831459][T12276] batman_adv: batadv0: The MTU of interface gretap3 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.928667][T12276] batman_adv: batadv0: Interface activated: gretap3 [ 376.948697][T12289] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1569'. [ 377.068983][T12293] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1571'. [ 377.151827][T12295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1572'. [ 377.302729][T12300] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 377.354718][T12307] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 378.250791][T12403] netlink: 'syz.1.1578': attribute type 8 has an invalid length. [ 378.306923][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 378.310693][T12410] netlink: 'syz.1.1578': attribute type 8 has an invalid length. [ 378.326388][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1579'. [ 378.406039][T12410] bond0: entered promiscuous mode [ 378.411215][T12410] bond_slave_0: entered promiscuous mode [ 378.424443][T12410] gretap0: entered promiscuous mode [ 378.431229][T12410] hsr_slave_0: entered promiscuous mode [ 378.438153][T12410] hsr0: entered promiscuous mode [ 378.575407][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.581988][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.771864][T12432] nbd: must specify a size in bytes for the device [ 378.907507][T12435] net_ratelimit: 12 callbacks suppressed [ 378.907528][T12435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.090504][T12435] __nla_validate_parse: 3 callbacks suppressed [ 379.090524][T12435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1582'. [ 379.422812][ T5627] Bluetooth: hci5: link tx timeout [ 379.429255][ T5627] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 379.439215][ T50] Bluetooth: hci5: link tx timeout [ 379.447638][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 379.467389][ T50] Bluetooth: hci5: link tx timeout [ 379.476909][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 379.575543][T12450] geneve3: entered promiscuous mode [ 379.801615][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 379.978775][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 380.454321][T12489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'. [ 380.590310][T12495] --map-set only usable from mangle table [ 380.726226][T12494] netlink: 'syz.5.1599': attribute type 2 has an invalid length. [ 380.737861][T12494] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1599'. [ 380.805085][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1600'. [ 381.038906][T12510] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1602'. [ 381.140343][T12484] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 381.530921][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 381.578029][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1605'. [ 381.735566][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 381.783017][T12522] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.804812][T12522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.812165][T12522] IPv6: NLM_F_CREATE should be set when creating new route [ 381.825122][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1608'. [ 381.946633][T12530] syzkaller0: entered promiscuous mode [ 381.961793][T12530] syzkaller0: entered allmulticast mode [ 382.622843][T12554] pim6reg: entered allmulticast mode [ 382.664845][T12558] pim6reg: left allmulticast mode [ 382.807873][T12561] bridge_slave_0: left allmulticast mode [ 382.813995][T12561] bridge_slave_0: left promiscuous mode [ 382.819983][T12561] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.849328][T12561] bridge_slave_1: left promiscuous mode [ 382.870525][T12561] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.924933][T12561] bond0: (slave bond_slave_0): Releasing backup interface [ 382.964464][T12561] team0: Port device team_slave_0 removed [ 382.975501][T12561] team0: Port device team_slave_1 removed [ 382.984118][T12561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.993844][T12561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.285268][T12571] netlink: 'syz.3.1622': attribute type 5 has an invalid length. [ 383.567209][ T5627] block nbd3: Receive control failed (result -107) [ 383.593314][T12585] x_tables: duplicate underflow at hook 2 [ 383.752544][T12591] bridge_slave_1: invalid flags given to default FDB implementation [ 383.842174][T12598] batman_adv: batadv0: Adding interface: ipvlan0 [ 383.878261][T12598] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.936990][T12598] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 384.381923][T12622] lo speed is unknown, defaulting to 1000 [ 384.405661][T12625] __nla_validate_parse: 9 callbacks suppressed [ 384.405681][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 384.672563][T12642] netlink: 'syz.3.1642': attribute type 32 has an invalid length. [ 384.715682][T12642] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1642'. [ 384.855439][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1644'. [ 385.393257][T12672] syzkaller0: entered promiscuous mode [ 385.432973][T12672] syzkaller0: entered allmulticast mode [ 385.463414][T12683] bridge0: port 1(macvlan4) entered blocking state [ 385.473572][T12683] bridge0: port 1(macvlan4) entered disabled state [ 385.484202][T12683] macvlan4: entered allmulticast mode [ 385.489903][T12683] gretap0: entered allmulticast mode [ 385.498838][T12683] macvlan4: entered promiscuous mode [ 385.665601][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 385.833126][T12698] [ 385.835529][T12698] ====================================================== [ 385.842584][T12698] WARNING: possible circular locking dependency detected [ 385.849650][T12698] syzkaller #0 Not tainted [ 385.854099][T12698] ------------------------------------------------------ [ 385.861159][T12698] syz.5.1658/12698 is trying to acquire lock: [ 385.867254][T12698] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 385.876550][T12698] [ 385.876550][T12698] but task is already holding lock: [ 385.884130][T12698] ffff888037a47678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 385.893730][T12698] [ 385.893730][T12698] which lock already depends on the new lock. [ 385.893730][T12698] [ 385.904238][T12698] [ 385.904238][T12698] the existing dependency chain (in reverse order) is: [ 385.913288][T12698] [ 385.913288][T12698] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 385.920910][T12698] __might_fault+0xcb/0x130 [ 385.925989][T12698] _copy_from_user+0x28/0xb0 [ 385.931163][T12698] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 385.937722][T12698] ip_generic_getfrag+0x149/0x2d0 [ 385.943322][T12698] __ip6_append_data+0x3b26/0x40c0 [ 385.949017][T12698] ip6_append_data+0x108/0x270 [ 385.954362][T12698] rawv6_sendmsg+0x1298/0x18c0 [ 385.959691][T12698] sock_sendmsg_nosec+0x10e/0x180 [ 385.965271][T12698] ____sys_sendmsg+0x54e/0x850 [ 385.970581][T12698] ___sys_sendmsg+0x2a5/0x360 [ 385.975801][T12698] __x64_sys_sendmsg+0x1b1/0x290 [ 385.981281][T12698] do_syscall_64+0x174/0x580 [ 385.986410][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.992844][T12698] [ 385.992844][T12698] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 386.000607][T12698] lock_sock_nested+0x41/0x100 [ 386.005916][T12698] inet_shutdown+0x6a/0x390 [ 386.010967][T12698] nbd_mark_nsock_dead+0x2cb/0x550 [ 386.016620][T12698] recv_work+0x1cee/0x1e10 [ 386.021574][T12698] process_scheduled_works+0xa8e/0x14e0 [ 386.027672][T12698] worker_thread+0xa47/0xfb0 [ 386.032807][T12698] kthread+0x388/0x470 [ 386.037419][T12698] ret_from_fork+0x514/0xb70 [ 386.042565][T12698] ret_from_fork_asm+0x1a/0x30 [ 386.047871][T12698] [ 386.047871][T12698] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 386.055570][T12698] __mutex_lock+0x19d/0x1550 [ 386.060742][T12698] nbd_queue_rq+0x373/0x1150 [ 386.065883][T12698] blk_mq_dispatch_rq_list+0x499/0x1990 [ 386.072000][T12698] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 386.078879][T12698] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 386.085576][T12698] blk_mq_run_work_fn+0x16c/0x300 [ 386.091141][T12698] process_scheduled_works+0xa8e/0x14e0 [ 386.097231][T12698] worker_thread+0xa47/0xfb0 [ 386.102363][T12698] kthread+0x388/0x470 [ 386.106977][T12698] ret_from_fork+0x514/0xb70 [ 386.112116][T12698] ret_from_fork_asm+0x1a/0x30 [ 386.117423][T12698] [ 386.117423][T12698] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 386.124685][T12698] __mutex_lock+0x19d/0x1550 [ 386.129823][T12698] nbd_queue_rq+0xc1/0x1150 [ 386.134875][T12698] blk_mq_dispatch_rq_list+0x499/0x1990 [ 386.140973][T12698] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 386.147946][T12698] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 386.154477][T12698] blk_mq_run_work_fn+0x16c/0x300 [ 386.160049][T12698] process_scheduled_works+0xa8e/0x14e0 [ 386.166147][T12698] worker_thread+0xa47/0xfb0 [ 386.171286][T12698] kthread+0x388/0x470 [ 386.175904][T12698] ret_from_fork+0x514/0xb70 [ 386.181042][T12698] ret_from_fork_asm+0x1a/0x30 [ 386.186350][T12698] [ 386.186350][T12698] -> #3 (set->srcu){.+.+}-{0:0}: [ 386.193497][T12698] __synchronize_srcu+0xc9/0x2f0 [ 386.198991][T12698] elevator_switch+0x1e8/0x7b0 [ 386.204305][T12698] elevator_change+0x2fa/0x480 [ 386.209614][T12698] elevator_set_default+0x375/0x440 [ 386.215352][T12698] blk_register_queue+0x3f3/0x4e0 [ 386.220928][T12698] __add_disk+0x6cb/0xe30 [ 386.225835][T12698] add_disk_fwnode+0x100/0x3a0 [ 386.231137][T12698] nbd_dev_add+0x733/0xb60 [ 386.236103][T12698] nbd_init+0x15f/0x1e0 [ 386.240809][T12698] do_one_initcall+0x250/0x870 [ 386.246119][T12698] do_initcall_level+0x10a/0x1a0 [ 386.251686][T12698] do_initcalls+0x59/0xa0 [ 386.256558][T12698] kernel_init_freeable+0x29d/0x3e0 [ 386.262307][T12698] kernel_init+0x1d/0x1d0 [ 386.267179][T12698] ret_from_fork+0x514/0xb70 [ 386.272318][T12698] ret_from_fork_asm+0x1a/0x30 [ 386.277632][T12698] [ 386.277632][T12698] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 386.285487][T12698] __mutex_lock+0x19d/0x1550 [ 386.290632][T12698] elevator_change+0x1af/0x480 [ 386.295946][T12698] elevator_set_none+0xb5/0x140 [ 386.301342][T12698] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 386.307700][T12698] nbd_start_device+0x189/0xb30 [ 386.313103][T12698] nbd_genl_connect+0x1597/0x1c10 [ 386.318674][T12698] genl_family_rcv_msg_doit+0x233/0x340 [ 386.324771][T12698] genl_rcv_msg+0x614/0x7a0 [ 386.329821][T12698] netlink_rcv_skb+0x226/0x4a0 [ 386.335125][T12698] genl_rcv+0x28/0x40 [ 386.339657][T12698] netlink_unicast+0x7bb/0x940 [ 386.344979][T12698] netlink_sendmsg+0x813/0xb40 [ 386.350308][T12698] sock_sendmsg_nosec+0x13a/0x180 [ 386.355889][T12698] ____sys_sendmsg+0x54e/0x850 [ 386.361311][T12698] ___sys_sendmsg+0x2a5/0x360 [ 386.366549][T12698] __x64_sys_sendmsg+0x1b1/0x290 [ 386.372031][T12698] do_syscall_64+0x174/0x580 [ 386.377175][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.383622][T12698] [ 386.383622][T12698] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 386.392357][T12698] blk_alloc_queue+0x544/0x690 [ 386.397683][T12698] __blk_mq_alloc_disk+0x194/0x390 [ 386.403426][T12698] nbd_dev_add+0x494/0xb60 [ 386.408427][T12698] nbd_init+0x15f/0x1e0 [ 386.413155][T12698] do_one_initcall+0x250/0x870 [ 386.418487][T12698] do_initcall_level+0x10a/0x1a0 [ 386.423980][T12698] do_initcalls+0x59/0xa0 [ 386.428861][T12698] kernel_init_freeable+0x29d/0x3e0 [ 386.434599][T12698] kernel_init+0x1d/0x1d0 [ 386.439475][T12698] ret_from_fork+0x514/0xb70 [ 386.444610][T12698] ret_from_fork_asm+0x1a/0x30 [ 386.449921][T12698] [ 386.449921][T12698] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 386.457181][T12698] __lock_acquire+0x1520/0x2cf0 [ 386.462609][T12698] lock_acquire+0x106/0x350 [ 386.467668][T12698] fs_reclaim_acquire+0x71/0x100 [ 386.473181][T12698] prepare_alloc_pages+0x15b/0x650 [ 386.478840][T12698] __alloc_frozen_pages_noprof+0x12f/0x380 [ 386.485194][T12698] alloc_pages_mpol+0x212/0x380 [ 386.490600][T12698] folio_alloc_mpol_noprof+0x39/0x160 [ 386.496541][T12698] shmem_alloc_and_add_folio+0x43e/0xf60 [ 386.502728][T12698] shmem_get_folio_gfp+0x5da/0x16d0 [ 386.508478][T12698] shmem_fault+0x179/0x390 [ 386.513456][T12698] __do_fault+0x138/0x2a0 [ 386.518339][T12698] do_pte_missing+0x684/0x34b0 [ 386.523643][T12698] handle_mm_fault+0x1b36/0x3080 [ 386.529135][T12698] do_user_addr_fault+0x744/0x1340 [ 386.534801][T12698] exc_page_fault+0x6a/0xc0 [ 386.539858][T12698] asm_exc_page_fault+0x26/0x30 [ 386.545258][T12698] rep_movs_alternative+0x4a/0xa0 [ 386.550837][T12698] _copy_to_user+0x8a/0xb0 [ 386.555817][T12698] ethtool_get_stats+0x32a/0x3b0 [ 386.561320][T12698] dev_ethtool+0x1130/0x29c0 [ 386.566455][T12698] dev_ioctl+0x392/0x1150 [ 386.571330][T12698] sock_do_ioctl+0x23e/0x320 [ 386.576493][T12698] sock_ioctl+0x57a/0x7e0 [ 386.581363][T12698] __se_sys_ioctl+0xfc/0x170 [ 386.586490][T12698] do_syscall_64+0x174/0x580 [ 386.591616][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.598045][T12698] [ 386.598045][T12698] other info that might help us debug this: [ 386.598045][T12698] [ 386.608281][T12698] Chain exists of: [ 386.608281][T12698] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 386.608281][T12698] [ 386.621020][T12698] Possible unsafe locking scenario: [ 386.621020][T12698] [ 386.628480][T12698] CPU0 CPU1 [ 386.633859][T12698] ---- ---- [ 386.639231][T12698] rlock(&mm->mmap_lock); [ 386.643664][T12698] lock(sk_lock-AF_INET6); [ 386.650709][T12698] lock(&mm->mmap_lock); [ 386.657595][T12698] lock(fs_reclaim); [ 386.661601][T12698] [ 386.661601][T12698] *** DEADLOCK *** [ 386.661601][T12698] [ 386.669756][T12698] 2 locks held by syz.5.1658/12698: [ 386.675009][T12698] #0: ffffffff9002d080 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29c0 [ 386.684018][T12698] #1: ffff888037a47678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 386.693974][T12698] [ 386.693974][T12698] stack backtrace: [ 386.699885][T12698] CPU: 1 UID: 0 PID: 12698 Comm: syz.5.1658 Not tainted syzkaller #0 PREEMPT(full) [ 386.699909][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 386.699920][T12698] Call Trace: [ 386.699931][T12698] [ 386.699940][T12698] dump_stack_lvl+0xe8/0x150 [ 386.699974][T12698] print_circular_bug+0x2e1/0x300 [ 386.699995][T12698] check_noncircular+0x12e/0x150 [ 386.700027][T12698] __lock_acquire+0x1520/0x2cf0 [ 386.700052][T12698] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 386.700083][T12698] ? kasan_save_track+0x4f/0x80 [ 386.700105][T12698] ? kasan_save_track+0x3e/0x80 [ 386.700126][T12698] ? __kasan_kmalloc+0x93/0xb0 [ 386.700149][T12698] ? __kmalloc_cache_noprof+0x32d/0x660 [ 386.700170][T12698] ? __set_page_owner+0x286/0x4c0 [ 386.700191][T12698] ? post_alloc_hook+0x1f9/0x250 [ 386.700210][T12698] ? get_page_from_freelist+0x21fa/0x2270 [ 386.700233][T12698] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 386.700257][T12698] ? __alloc_pages_noprof+0x10/0x100 [ 386.700281][T12698] ? prepare_alloc_pages+0x15b/0x650 [ 386.700302][T12698] lock_acquire+0x106/0x350 [ 386.700325][T12698] ? prepare_alloc_pages+0x15b/0x650 [ 386.700352][T12698] ? __lock_acquire+0x683/0x2cf0 [ 386.700377][T12698] fs_reclaim_acquire+0x71/0x100 [ 386.700398][T12698] ? prepare_alloc_pages+0x15b/0x650 [ 386.700420][T12698] prepare_alloc_pages+0x15b/0x650 [ 386.700447][T12698] __alloc_frozen_pages_noprof+0x12f/0x380 [ 386.700472][T12698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.700499][T12698] ? __pfx_policy_nodemask+0x10/0x10 [ 386.700527][T12698] ? __page_table_check_zero+0x6c/0x430 [ 386.700551][T12698] alloc_pages_mpol+0x212/0x380 [ 386.700579][T12698] folio_alloc_mpol_noprof+0x39/0x160 [ 386.700607][T12698] shmem_alloc_and_add_folio+0x43e/0xf60 [ 386.700626][T12698] ? filemap_get_entry+0xcd/0x3f0 [ 386.700648][T12698] ? __pfx_filemap_get_entry+0x10/0x10 [ 386.700664][T12698] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 386.700684][T12698] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 386.700714][T12698] shmem_get_folio_gfp+0x5da/0x16d0 [ 386.700750][T12698] shmem_fault+0x179/0x390 [ 386.700772][T12698] __do_fault+0x138/0x2a0 [ 386.700795][T12698] do_pte_missing+0x684/0x34b0 [ 386.700822][T12698] ? handle_mm_fault+0xec/0x3080 [ 386.700847][T12698] handle_mm_fault+0x1b36/0x3080 [ 386.700871][T12698] ? handle_mm_fault+0xec/0x3080 [ 386.700893][T12698] ? __pfx_handle_mm_fault+0x10/0x10 [ 386.700919][T12698] ? lock_mm_and_find_vma+0xa7/0x340 [ 386.700941][T12698] do_user_addr_fault+0x744/0x1340 [ 386.700975][T12698] exc_page_fault+0x6a/0xc0 [ 386.700993][T12698] asm_exc_page_fault+0x26/0x30 [ 386.701010][T12698] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 386.701035][T12698] Code: 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 386.701052][T12698] RSP: 0018:ffffc9000357f968 EFLAGS: 00050202 [ 386.701068][T12698] RAX: ffffffff84d32001 RBX: 00000000000000f0 RCX: 0000000000000038 [ 386.701081][T12698] RDX: 0000000000000000 RSI: ffffc90003f730b8 RDI: 0000200000001000 [ 386.701093][T12698] RBP: ffffc9000357fa50 R08: ffffc90003f730ef R09: 1ffff920007ee61d [ 386.701107][T12698] R10: dffffc0000000000 R11: fffff520007ee61e R12: 0000200000001038 [ 386.701120][T12698] R13: 00007ffffffff000 R14: ffffc90003f73000 R15: 0000200000000f48 [ 386.701136][T12698] ? __pfx__copy_to_user+0x1/0x10 [ 386.701166][T12698] _copy_to_user+0x8a/0xb0 [ 386.701193][T12698] ethtool_get_stats+0x32a/0x3b0 [ 386.701219][T12698] ? __pfx_ethtool_get_stats+0x10/0x10 [ 386.701244][T12698] ? lockdep_hardirqs_on+0x7a/0x110 [ 386.701261][T12698] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 386.701289][T12698] dev_ethtool+0x1130/0x29c0 [ 386.701311][T12698] ? __lock_acquire+0x683/0x2cf0 [ 386.701342][T12698] ? __pfx_dev_ethtool+0x10/0x10 [ 386.701364][T12698] ? kasan_quarantine_put+0xbb/0x1f0 [ 386.701388][T12698] ? dev_load+0x21/0x1f0 [ 386.701417][T12698] ? dev_load+0x21/0x1f0 [ 386.701442][T12698] ? dev_load+0x21/0x1f0 [ 386.701467][T12698] dev_ioctl+0x392/0x1150 [ 386.701494][T12698] sock_do_ioctl+0x23e/0x320 [ 386.701517][T12698] ? __pfx_sock_do_ioctl+0x10/0x10 [ 386.701536][T12698] ? hook_file_ioctl+0x1f0/0x5f0 [ 386.701572][T12698] sock_ioctl+0x57a/0x7e0 [ 386.701592][T12698] ? __pfx_sock_ioctl+0x10/0x10 [ 386.701612][T12698] ? __fget_files+0x2a/0x420 [ 386.701635][T12698] ? __fget_files+0x3a2/0x420 [ 386.701656][T12698] ? __fget_files+0x2a/0x420 [ 386.701680][T12698] ? bpf_lsm_file_ioctl+0x9/0x20 [ 386.701700][T12698] ? __pfx_sock_ioctl+0x10/0x10 [ 386.701720][T12698] __se_sys_ioctl+0xfc/0x170 [ 386.701736][T12698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.701754][T12698] do_syscall_64+0x174/0x580 [ 386.701772][T12698] ? trace_irq_disable+0x3b/0x140 [ 386.701794][T12698] ? clear_bhb_loop+0x40/0x90 [ 386.701813][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.701837][T12698] RIP: 0033:0x7f417719de99 [ 386.701854][T12698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.701869][T12698] RSP: 002b:00007f41780dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.701887][T12698] RAX: ffffffffffffffda RBX: 00007f4177426180 RCX: 00007f417719de99 [ 386.701900][T12698] RDX: 0000200000000f80 RSI: 0000000000008946 RDI: 0000000000000009 [ 386.701911][T12698] RBP: 00007f4177233eaf R08: 0000000000000000 R09: 0000000000000000 [ 386.701922][T12698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.701933][T12698] R13: 00007f4177426218 R14: 00007f4177426180 R15: 00007ffe67192868 [ 386.701953][T12698]