last executing test programs: 2.413076077s ago: executing program 1 (id=2510): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @private}, &(0x7f0000000100)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x14, 0x5e, 0xe25, 0x1, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x2, 0x28, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xb, 0xb2, [@local, @loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@private2, @local, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1, 0x3ff, 0x7, 0x100, 0x2, 0x2850107, r3}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x30, 0x80001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 2.348104852s ago: executing program 0 (id=2512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000003000)=""/4103, 0x1007}], 0x1}, 0x1}], 0x1, 0x2, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000030000000000000000700000034000100ffffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 2.215387961s ago: executing program 1 (id=2513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2af4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000600)='syzkaller\x00', 0x7f, 0xa9, &(0x7f0000000640)=""/169, 0x41000, 0x50, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r3, r1], &(0x7f0000000800)=[{0x2, 0x1, 0x3, 0x3}, {0x2, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x5, 0x6}, {0x0, 0x3, 0x7, 0x2}, {0x0, 0x3, 0xe, 0x9}, {0x1, 0x5, 0x0, 0x7}, {0x5, 0x3, 0x9, 0x5}], 0x10, 0x6}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1a, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x1000007, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4004a6}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1, &(0x7f0000000300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x9, 0x0, 0x2e, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x7}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0x0, 0x0}, 0x10) sendto$inet6(r6, &(0x7f0000000940)="6e38ced0617704c5e8be091e6832b01ebc2407689f665d031976128b7246e300c0064c041cfaad5b924dec020fc1ce9514b31e7644d5de6e69cb1203f547b0a95dc87b3f665a8e2c6eebf03af322521bb5f7c8d5e6aa3b1bea2dc7378438efbbab457378a930241f97431def199a9de68b41ea1633e06aaccc6e065f1061b07df0afd36c5161efbae67f184c6e6f61c4ec6e962300a8389f847981d2193a75bc551cd20d728f1f116fda80bd01a7a6b80f09b207b23d16fc7c9b533ba139e08aca365594bd", 0xc5, 0x880, &(0x7f0000000a40)={0xa, 0x4e21, 0xffffff00, @mcast1, 0x8080}, 0x1c) 2.056429199s ago: executing program 0 (id=2514): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f0000000ac0)=0x8, r1, 0x0, 0x4, 0xf) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.055502089s ago: executing program 4 (id=2515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x7, 0x7ff, {{0x1f, 0x4, 0x2, 0x5, 0x7c, 0x5, 0x0, 0x71, 0x4, 0x0, @loopback, @remote, {[@cipso={0x86, 0x40, 0x1, [{0x5, 0x9, "24d0f4aae96960"}, {0x2, 0xf, "a3ea3888aabd22ae7cc1f890ae"}, {0x5, 0x11, "cfa334e546c0e08fc622fb39e6ede1"}, {0x2, 0x11, "0cd8a2ba23906c86e138619bbf93ce"}]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0xfc, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @rand_addr=0x64010101, @multicast2]}, @noop]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @private, @local}, &(0x7f0000000580)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1f8, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000840)) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000008c0), r0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x808}, 0xc080) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000e00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x31c, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0xfb, 0x3, "69d53e0493bb40295b49acc3825b36fd18aca2840d62aa4c4a997bab0a7c083d7441bbb93eea3de480036753621f954dedfc29d271bf83608355f2ffcdfccd7e5e83bd6cbfe2211510755ee1a74dcdf4ce1b21b96a78a68d0f01a5d754b61f4f99cb88f70fe48259745f98c32f681415c493bceeef8592bceda05bbf5df7926473b0b4d60c532ee0a4d74950375984d90ad9477febcd3b9835dec12e169cb2a0b08710da9dc45c4c819f5372b9b854b154243863fa4909d6faa8ebcc67e9d868516965ea7f3fe1e24a19c405bbe4823e73c7e6e8e39f9360221ca6d6ceb227cb18f615280b022997955f290b643075149ccc4a90436a97"}, @ETHTOOL_A_WOL_MODES={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "fa6eab005f020a8c6198cce01d63da00cd712f864b5d901f02fbb7398c2fe814195fd951fad9f2516b479533b2581ed0fa26f9011d571a860dbf2e6c909ed93e80ecf8"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5b7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$(\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xea5b}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x360}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-#\\/{/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0xf0, 0x3, "d1d856ccf2c0f9e4efafb1aa8f81b3f6174db658c01d884d2364f12498d55fb56c72a31bd8931f29521902360c7525fa79ddd9a91b5946e22652ed4393d7b211111d64aa498b43180ca475ad661aeb2257e6baa51d21923e027c0ac650a8420d90b5943a01625944a93c062b243c8ff211297340cd510fd52a1a668bf81ddfb43dcd3a7f0a987ff045ce1f661a6b44f21aec57f86318e4520b235d0bba70446ec6b982648490d4aacd3d59097c9dadf745c1347eec63b92cd3a0f0fc1b64c08aa2ca568d719500720768e0c2a128659e7d0c9a4a13920ab84f47943adcd5e090523750c29c3af5bb7e3e0ddf"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40}, 0xc094) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f40)={'syztnl0\x00', &(0x7f0000000e40)={'gretap0\x00', r2, 0x80, 0x700, 0x7, 0x1, {{0x2a, 0x4, 0x3, 0x6, 0xa8, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @local, {[@rr={0x7, 0xb, 0xda, [@loopback, @dev={0xac, 0x14, 0x14, 0x1a}]}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x58, 0x0, [{0x0, 0xd, "fc32b8a20a624fb2065745"}, {0x1, 0xd, "3aa2db9af951c8d7c7f9d2"}, {0x2, 0x10, "c35eb0f28b1a07e4aea17ab15df5"}, {0x7, 0xf, "16a2a780a53852d38797cad681"}, {0x7, 0xe, "c3addd3f997b37de5e5c0ec0"}, {0x0, 0xb, "c65f663783f4fee40b"}]}, @ssrr={0x89, 0x2b, 0x47, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @local, @local, @remote, @rand_addr=0x64010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) r9 = accept(r0, &(0x7f0000000f80)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000001000)=0x80) r10 = gettid() sendmsg$AUDIT_SET(r9, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x111a18}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x3c, 0x3e9, 0x2, 0x70bd25, 0x25dfdbfd, {0x1, 0x1, 0x1, r10, 0x2, 0x3, 0x4, 0xffff, 0x0, 0x8, 0xfffffffd}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r12 = accept$packet(r9, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000027c0)=0x14) r13 = socket$tipc(0x1e, 0x5, 0x0) r14 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002800)='devices.allow\x00', 0x2, 0x0) sendmsg$unix(r11, &(0x7f00000028c0)={&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000001200)="d3431f", 0x3}, {&(0x7f0000001240)="eb6f121a3b96676591aa5684a0569f125ac4e56539d21180e384118b3b4b717ab7c3e5e2b34f144c4fde33f6c2ca65c166ae39f7443936b9076852fd40adbde1ca2f722fdea412aedbf361189b44ce722c30d486f1ad9f2ddcd530977c62f936de7426ef4245184b26e77974f86a9d124fd5cc1b97bd3bcc6b14cf6e331bf798115d3bc9d08966bb0a0194684abb091bfd0cf2b162fa3a6237e7931027188a283664714f19dbf78e75184e3d7b0cd6bf65c7befff319c1e3fb0d58578d2ea5de6cbf87c5f4d8f1d47dfe989608085407f0", 0xd1}, {&(0x7f0000001340)="99571c4fa963d05fde71369ace890c9ab17fec00fcf5e8f2a7d1a3da92f5e46df46e55", 0x23}, {&(0x7f0000001380)="3ba181e23e2c8e09da906b71e55206047e84a1151145ef3e2447e051380ee637e3a95727ed69e9dc794ca426944a17a732eecad4c7a8591620f3a2ddc8ba382feb0ebc22319d445aac1e0383b8e780272a7e1fa154be2d2be8a412b4611237223aae3a11f29b13d03528ab0ed7f76ac72080ed92593378f6d1e892f9958477b3c98139916bacce3a7fbb3ebdbaead022bf434f3e0496b809eb1d3f44709d9ee390faa134edcd66aa94a8144b", 0xac}, {&(0x7f0000001440)="483220074af03fc6432f4337dde193b9f0a6747e8314b30f08791fdd20967f9783c04f7a52c3e0791ee458c86363d14ee2c7fea18c638f15aef2c5b303f8e9012ce3b7cbe618153852ca35f5d33077d6e06baf660465908e7fad426a07d160d5740556bfbcb42698a94e442913ad8075b62202fc4fb32dbb9f476db6a8ca35fa101922274feb1326d187a1f3b0656659d8854657028c22947542b7816da0c2506adc18509eeddcc7e23a02fb71db1beb536b49b7fb72402d4046243a791af3bd8da7da04d9234d5ff8366efabc8fbb7c7b535ccb5e0c11f75ed88438a746e463aaaa", 0xe2}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="d2d0894eaf6f7d59aab3037d10f136c6a207f45cbaf9fc69b67409700b30bb28839f286eeb12e8c6b917feb4809d21443f3f769b4b7d466473723e5141483e9f435d13059c91c73fedb38aa3ad1bb8e0a502eb5caa465673bdb0cd393f0b1a82ea7364219c3342d34d3043cc5e5adb44d2d74efe7a4347cba8191d3018ee4103735d2dabc84ec64db1f6838934a85bcbad4e240d28", 0x95}, {&(0x7f0000002600)="25eba5b8da0309019c857a6cfd7ae0af", 0x10}, {&(0x7f0000002640)="01964210605131a599ffc8d849bfb395e38f4cce3f322d157b67a3a2a5e5af338d11fe789cd8438c2f181cf5de0ae9827e42e14d900f7cf204e6625bacf4db93ece43d8cf1a20135021c638e16caa4dd2896840d", 0x54}], 0x9, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [r12, r9, r0]}}, @rights={{0x28, 0x1, 0x1, [r13, r0, r14, r9, r0, r9]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x60, 0x800}, 0x4004080) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r11, 0x400c6615, &(0x7f0000002900)={0x0, @adiantum, 0x0, @desc1}) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r9) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000029c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x50, r15, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r16}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3ab}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1a, 0xac, "af2aa5ae5f124a54c2de919b6442b5507b4beca273ed"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) recvmmsg(r11, &(0x7f0000005bc0)=[{{&(0x7f0000002b00)=@tipc=@id, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/146, 0x92}, {&(0x7f0000002d40)=""/50, 0x32}, {&(0x7f0000002d80)=""/105, 0x69}], 0x4}, 0x5}, {{&(0x7f0000002e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002ec0)}, {&(0x7f0000002f00)=""/206, 0xce}, {&(0x7f0000003000)=""/254, 0xfe}, {&(0x7f0000003100)=""/42, 0x2a}, {&(0x7f0000003140)=""/152, 0x98}, {&(0x7f0000003200)=""/210, 0xd2}, {&(0x7f0000003300)=""/22, 0x16}, {&(0x7f0000003340)=""/64, 0x40}], 0x8}, 0x7}, {{&(0x7f0000003400)=@x25, 0x80, &(0x7f0000003980)=[{&(0x7f0000003480)=""/235, 0xeb}, {&(0x7f0000003580)=""/157, 0x9d}, {&(0x7f0000003640)=""/83, 0x53}, {&(0x7f00000036c0)=""/35, 0x23}, {&(0x7f0000003700)=""/173, 0xad}, {&(0x7f00000037c0)}, {&(0x7f0000003800)=""/213, 0xd5}, {&(0x7f0000003900)=""/87, 0x57}], 0x8, &(0x7f0000003a00)=""/45, 0x2d}, 0xde}, {{&(0x7f0000003a40)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003ac0)=""/122, 0x7a}], 0x1, &(0x7f0000003b80)=""/111, 0x6f}, 0xfffffff8}, {{&(0x7f0000003c00)=@hci, 0x80, &(0x7f0000005200)=[{&(0x7f0000003c80)=""/177, 0xb1}, {&(0x7f0000003d40)=""/206, 0xce}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/135, 0x87}, {&(0x7f0000004f00)=""/174, 0xae}, {&(0x7f0000004fc0)=""/60, 0x3c}, {&(0x7f0000005000)=""/214, 0xd6}, {&(0x7f0000005100)=""/99, 0x63}, {&(0x7f0000005180)=""/20, 0x14}, {&(0x7f00000051c0)=""/48, 0x30}], 0xa, &(0x7f00000052c0)=""/27, 0x1b}, 0x3}, {{&(0x7f0000005300)=@can, 0x80, &(0x7f0000005740)=[{&(0x7f0000005380)=""/156, 0x9c}, {&(0x7f0000005440)=""/121, 0x79}, {&(0x7f00000054c0)=""/196, 0xc4}, {&(0x7f00000055c0)=""/217, 0xd9}, {&(0x7f00000056c0)=""/59, 0x3b}, {&(0x7f0000005700)}], 0x6, &(0x7f00000057c0)=""/124, 0x7c}}, {{&(0x7f0000005840)=@l2, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000058c0)=""/14, 0xe}, {&(0x7f0000005900)=""/5, 0x5}, {&(0x7f0000005940)=""/214, 0xd6}, {&(0x7f0000005a40)=""/69, 0x45}], 0x4, &(0x7f0000005b00)=""/140, 0x8c}, 0x101}], 0x7, 0x0, &(0x7f0000005d80)={0x77359400}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000005dc0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x820001}, 0xc, &(0x7f00000061c0)={&(0x7f0000005f80)={0x214, 0x24, 0x8, 0x70bd29, 0x25dfdbff, {0x18}, [@nested={0x25, 0x9a, 0x0, 0x1, [@typed={0x8, 0x154, 0x0, 0x0, @uid}, @generic="7b5ec69d826cce9d3ec10a1a328b727075bf1a8fd8", @nested={0x4, 0x5}]}, @nested={0x1d5, 0x7, 0x0, 0x1, [@generic="960c929ce8cb69c0c95c61", @generic="6b2a5f9192a5b3677dd1585fd805150e1dd652ef9ffe5917132edd23f1429e53f88ce56588c99c31e4a260950ad66cfd631f67c293a6071fc21dc474043eb60b09ab946a6f6fdadbe4d3bf3f", @typed={0x8, 0xf5, 0x0, 0x0, @uid}, @nested={0x4, 0x15}, @nested={0x4, 0x10d}, @typed={0x14, 0xeb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="39488d4fd5665c8a03bcb9f38c793ff6d40363896978b4c3cce1b2298fa138c9f36db6788e42d5eae3e3ae0e91062d533708aad32619554141d4d3154bb8a666156e687e56e598e5b70ccf5e1b5334a2121f5a7ea4e2cba793a22aee74c79d05477319fd1b6b7dd8fcb65c2b1551ee3ef68ddb3de37463077bcca2a358d7b2c65cfe455866d1", @typed={0x8, 0x92, 0x0, 0x0, @fd}, @typed={0xc5, 0x109, 0x0, 0x0, @binary="ac0203b2ce93237094f3fdc45e2d443191410aae6b7865ab6fbe3424798b248f3bdc2f774306f012022a7551e8004b0386be36cc57386dd3665f404c3b9ed3f329d08d3a9d3c177d0af6e2df914e84d7be505fa85605e1797fda0855def4b262cc37a817463c62d6adb2b3946d1ad555e319bd65ea281f5a7faece1e64d9396cea967aa93f2c15ee1a34fc0b24d18bfe74010a364a466e04f1b25ab1c877c2f54bb673d8f72617fb3edae614365efdcea1d721ffa11ae957c2487fe9fe919390d0"}]}, @generic]}, 0x214}, 0x1, 0x0, 0x0, 0x4804}, 0x24004001) 1.892167393s ago: executing program 0 (id=2517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="88000000e8ca67aafa593806e6c5ab46ef35f57ae2c16647ef0e25c77774a8a78d47644c56f3d61501102c29fc51ff3e02f641ab8cf925ca982f05ca267fd5e8e4fa41397ce05cb94230024399a8c5b606afd282d5d538f5a654065921855db4b3b801f36cd7bd946a0c486b3f0a51daf71000"/127, @ANYRES16=r1, @ANYBLOB="10002bbd7000ffdbdf25050000002400098008000200000000000800020000003ceb080001000100000008000100030000001400098008000200cca2000008000200080000001400038008000100050000000800010007000000200001801c00028008000300ff000000080002000000000008000400fbffffff"], 0x80}, 0x1, 0x0, 0x0, 0x20004800}, 0x2040000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000100000808000b400065787468647200001c00028008000140000000020800034000311b5a5700020007000042ec50cf19de692def00140000001100010000000000000000000700000a"], 0xc0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$inet6_int(r3, 0x29, 0x34, &(0x7f0000000600)=0x1, 0x4) connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r3, &(0x7f0000000000)='\"', 0x1) recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000000001000003400000000087080205400000ce000900000073797a3000000000000000f6250000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r6 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x40002021, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02000dbd7000ffdbdf2507000000140007800800f1ff010875d6d0b8635fbe29feb0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket(0xf, 0x800, 0x82) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.891662527s ago: executing program 2 (id=2518): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) read(r1, &(0x7f0000000240)=""/176, 0xb0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) 1.646145105s ago: executing program 2 (id=2519): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x64, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xffffffffffff0003}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24048020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900840000000001000000940001000000fc13c40000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44880}, 0x40000) ppoll(&(0x7f0000000080)=[{r2, 0x1}, {r2, 0xc000}, {r2, 0x80}, {r2, 0x86c1}, {r6, 0x2000}, {r2, 0x2000}, {r2, 0x9028}, {r2, 0x1}], 0x8, &(0x7f0000000100)={r7, r8+10000000}, &(0x7f0000000140)={[0x100]}, 0x8) 1.599205368s ago: executing program 3 (id=2520): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfe, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x2, 0x4, 0x401, {0x4, 0x0, 0x9e, 0x96de, 0x4d1, 0x5}, {0x2, 0x1, 0x2, 0x4, 0xd2e, 0x2}, 0x1, 0x6, 0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000110008002abd7000ffdbdf2500000000", @ANYRES32=r0, @ANYBLOB="1040000000340000140203007767300000000000621cb10ba40d4b2291340000000000000000cee4e45b88c3d428b912e8429db6b2ed867d20d262ab1343bba018b74af94eea87e4b1fb8e508a780621780068449a60f0b3bf744956280bada13e27462301e1e7ac259c8877ce59d81e333f"], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.489038791s ago: executing program 3 (id=2521): pselect6(0x40, &(0x7f0000000000)={0x5e8, 0x100, 0x0, 0x9aa2, 0x5, 0xfffffffffffffff7, 0x6, 0x100}, &(0x7f0000000080)={0x9, 0x1, 0x5, 0x7, 0xfffffffffffeffff, 0x22, 0x8000, 0x1400000000}, &(0x7f00000000c0)={0xa, 0x3, 0x832, 0x7fff, 0x15b2ca9e, 0x9, 0x1, 0x10001}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x3]}, 0x8}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffffe}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000007040010025bd7000fbdbdf2507000000", @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x107}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "320e019f0232037d", "192c4caaf37af3d00fa4a95922e05c94", "0222dc88", "c01217caf77d0e49"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000071102dac02ca3d000000000095000005a6adee00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r9, 0x389366ac6fb80697, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x880) 1.485680425s ago: executing program 2 (id=2522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, r2, 0x4, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}}, 0x4044090) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000080000002000859ec2700000000000013597000000000000000000009080dc0b200bcc66b29943d6b8a0b11feba34a395c98c7955a6a9553dd69d7531a72964adb1e44886da7a5876f070589b8252946666f5182c1dfa55e8adb2db80ba422e43d07d329d67b13d1f9c0324d160c4d1ba5231dc4530a53d5f87bff1056b56725aba6f03ee3efe97c214f5a27bb216f261014867d2715123d3bc28e32c9bb8d8787b045e88825c63b382a1b0413d3b7df100a826942ff1411dcff71c1"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.195285336s ago: executing program 2 (id=2523): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 1.190422922s ago: executing program 1 (id=2524): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x800, 0x1ff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x20000000) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) close(0x3) 1.090587681s ago: executing program 4 (id=2525): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETNOCSUM(r1, 0xc040ff0b, 0x200000000013) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000084f00000000000000000000000000000044000500ac141440000000000000000000000000000001033c00000000000000ffffffff0000000000000000000000000000000000030000000000000100000000000000"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x3503, 0xa, 0xa}, {@in=@broadcast, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) accept4$bt_l2cap(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x1000) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000401600002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000100010000000800030000000000140035006d6163766c616e30"], 0x60}}, 0x8000) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r6, 0x25, 0x0, @void}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000c810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 1.071302019s ago: executing program 3 (id=2526): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0xa, 0x0, 0x1, 0xc8, 0x0, 0x1000}, [@RTA_UID={0x8}]}, 0x24}}, 0x24008800) r0 = getgid() r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r3]}}], 0x40, 0x4004c}}], 0x1, 0x805) r7 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000045c0)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f00000046c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004700)={0x0, 0x0, 0x0}, &(0x7f0000004740)=0xc) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f0000000040)='ns/cgroup\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004780)={0x0, 0x0, 0x0}, &(0x7f00000047c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004800)={0x0}, &(0x7f0000004840)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004880)={0x0, 0x0}, &(0x7f00000048c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004900)={0x0, 0x0, 0x0}, &(0x7f0000004940)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r17, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x14, 0x1, 0x1, [r16]}}], 0x38, 0x4004c}}], 0x1, 0x805) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004c00)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc, &(0x7f0000004240)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1b0}, {&(0x7f0000000dc0)={0x3454, 0x24, 0x1, 0x70bd27, 0x25dfdbfe, "", [@generic="251846c2c516f35fde743b7064f15c9ccca5bd1e876c2677bfc0487f02b86c8bcb8b26d91fa5318c95eea588329e1f7b37c9c56035a56b1b5a8fe043de380d569d2b9d4d56221a51c0edd39df22f97d574e866c02cf598da1fa5f9b843962c6cb6be9c8b80a48f01a3b71a6a206c38159b80583009417e7192a72751c0601b6f5d6d3ea8ee4343", @typed={0x4, 0x12f}, @nested={0xc4, 0x118, 0x0, 0x1, [@nested={0x4, 0x7e}, @nested={0x4, 0xab}, @typed={0xa7, 0x153, 0x0, 0x0, @binary="37d0d45421ef356876eee5e87d0dde1aaa0c4d1877e12eda31c5f93fdda784990153fe1e4cc376e495abf9cc642820c7f1a0a7473c35db991568c2578ad5b02d14514bbfae047ad4a69f72b74c0d2f5ae8564d31b60fc2d29fdff43ebe32dda018cd8efa9955ff014222fd2db653f721d6d060ca466fbe0a56ea94646ffa98a1822228718a7f438ceebd199b99fcd189f555ef595802873f760b0c21a0a0a9064145bd"}, @typed={0x8, 0x70, 0x0, 0x0, @pid}, @typed={0x8, 0x15e, 0x0, 0x0, @fd}]}, @generic="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", @typed={0xc, 0x107, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x12, 0x0, 0x0, @fd}, @generic="ad8587f4bfe8c94e8096fce5ff7e4c60dc50bfa7426cad9193720d7977a2818fd1016e7bc1a4de33e1f6c8e4afe69f3d71395cbdd586f7ac", @generic="d922440477138f4013d1915d371ebcb588e4bcdf6414629786e0e3bd87bd00b0ece8c69bce7b57ec6f2ec5a44440453db4c401519188fc3edd817369f0474c3e162c4aa49a4fde1193eb6aa669963645cc380e9446a1a257406fea5e76e1c9ea2b5c83245b8677717c41986e55dd08ab0e0a21b18339059ae02b71837193c53459a324cce42eaa51daa4b480076d853a937dd0d8f7369d", @nested={0x220e, 0xbd, 0x0, 0x1, [@nested={0x4, 0xac}, @generic="5eda26330b0ac015b5a1e799350dbe62a53acc898a6889c8c1bc3a705e1dbcaf65160cedae5ea10d32de48562b5c334f568b3765962973cb0bfb54ddebcb7915b69d7e36750e62ce36c1f4503a6ace15dfbec410340f6a9ca24a8892796e3adda70a362258327f3c7ba82a48df9fc9e6552d1ac467284f863cbd8b1219ca770aaa967255df13997b4be4768b817b27619df7259b9ef7933f7be963db071a210757d54b56c9c07a237744314d34e3e47c8d4915e9e690f913a1b9a50c0454157a0b167111f2aa4b79f9e4ab9dffbe755d13588317504ba0c17c2b3fb2610989e060e22a8031", @generic="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", @nested={0x4, 0x66}, @generic="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", @nested={0x4, 0x104}, @typed={0x8, 0xd3, 0x0, 0x0, @u32=0x5}, @generic="b1aab79360f95b91c55a14e1831845348609d7d4fc1c6daa47bfdf448be1c51c2ab02b503fdae7864b", @generic="95535d1ddab89f7a618bd302514a905b6c925fffd5499e16ddffbf076e", @generic="21af429875e943fdb03293c9e628861b5079e9b57f2b3383c4eebca56c31c822128bd7f1180fa1f632e58dbf667569ff9f97ae631aee38692713075c8a8cd9bc080128fd4933c39dde03977a8ef16f04eb409f7f6ae9bdf4895d245ab54d7cc4ccf385f505786a42ca91fb26e168758c4b4e1f5f50e1ddfc32c91550612c2978e09759b6cfe643bf62e9d1210c5707e8238413a437907c78481464f3c87fe391389117efbf971aa7915282e274b39a1d4666bbb817da0a593ff26824b91504437aa45437ed6407d4f24636"]}]}, 0x3454}], 0x2, &(0x7f0000004ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r20}}}], 0x120}, 0xc0c1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r21 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r22 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r21, @ANYBLOB="0000000000000000b70200000f000000850000008600000018110000", @ANYRES32=r22, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r23 = socket$inet6_sctp(0xa, 0x1, 0x84) r24 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r23, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r24, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.025102665s ago: executing program 2 (id=2527): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000840)={0x9, 0x2000, 0x3, 0x40, 0xc, 0x6, 0xffff, 0x7}, 0x20) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) 1.021443443s ago: executing program 0 (id=2528): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000000000037c0000100003800c00080000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000000f00000095000000000000f930b79a7c50d500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2000c008) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0xfffffffffffffff3) unshare(0x26020480) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7800ffdbdf250900000005000500020000000800040001000014"], 0x24}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff000) socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0100001600010028bd7000fcdbdf25e0016ee7f728d423f6ba633bf4bb8b8c000001000000000000000000000000000000000000000000000000000000004e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d432000000200100000000000000000000000000003a3700000000000004000000000000000200000000000000b80a00000000000008000000000000000100000000000000040000000000000003000000000000002200000000000000d2000000000000000400000000000000030000000000000000000000ce000000070000002cbd700004350000b0e801002c0000000000000001000000020000001c00040001004e224e2000002001000000000000000000000000000008000b0010000000"], 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.004285447s ago: executing program 1 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xf6}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0xfeed}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28db922c628a534fb91191d25f636a589", 0x59}, {&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3531f795bf2f172d6fb23f3549b9734f2eef416b7698a93335a94b8cda61325b62cda1807b03675c6347b431f2d71baa6bc59e9047069153d70ffba20956e58971501c2d9f299fdfa3a38fa73a5da43ba2506d8704592ee5c19ca0d2075ddc9313d8bd2202a89dae6a689d3900818f892f3f17957cd53023399810da5655e0fd0f0f394c9a8bedc", 0xca}, {&(0x7f0000000500)="0f15ce0e2a894e2afb7a77dc4a4ec84b8109b2c95397d40adb9d5e8df8fd9a3167faa56aa764e61ba1a6cc8fd041bb89bee6d17105e169dd8d68d5b79eb5958574299b9035fbed2942a75e731b7571c29a760623e725792c", 0x58}, {&(0x7f0000000580)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae187918e", 0x23}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="be5af0a1b77fdb78379e4aed4f731b0f88920d1b033228f04a8d7f22afacc5c5014861b7715c3de8745083b4869ba515422c01c49a3eea697223ac78b4a3a20fc9364c30aacbebb3c28dedbf525eecad1436bb61f54dd04b7623dd1369e86bcf162595858a39618ac38f8766af0430a83e786a00eb966ffb0cd5a5af2f88781da8c146b566692815d64c86a50d395e6c8c4cea408323066e100694eac314590b63aa97afdfc99a5f3198be8347fe7664ca80f2d586576ece61cf5e334d43a1449f4eb920030e615a06baa50100e3962897b3af4ad468ec87671c0f706bcd47b06ce112f8b19465dbbdff78bea7af7d7bc3cf65b8dd45aeb9e55783bb550679f7ff68e94308492ef12024d7e7677d1a4239cecc3545bfb424fd9f57815a7030041088b74d082f3e0b294951c8d1", 0xfe68}, {&(0x7f00000005c0)="23c8f8e7bb8d0ba65b2d53e1b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff281c807953060a280f32e718b432d2031c73f6ca657519e04cf1b39497f7d785fff277a2a5612abf6c830c8b72579207ac0dda5", 0x83}, {&(0x7f0000000780)="ca3fcea77620b98213d60f78fe2e503ccb6662d189d191886f4fe8db857b07f574782f7bb888b8333220361011eec01501a2772a0392eaa06aca70b89b89f7ffd6ad7838ab27f246f9b78fa61a5ee5", 0x4f}], 0xb, 0x8) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) 845.55426ms ago: executing program 4 (id=2530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008881}, 0x20008004) 769.122227ms ago: executing program 3 (id=2531): shutdown(0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000180)=0x7, 0x4) (async) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000140003800c0000800800034000000001"], 0xc4}}, 0x0) (async) write$6lowpan_control(r3, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r5 = socket(0x2c, 0x3, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x73) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000100)={0x40000006}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000000000)="fc", 0x1) (async) splice(r11, 0x0, r9, 0x0, 0x1, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @private=0xa010100}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x3e, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d24b9149a8c978af6d76f933c1709770146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) 712.920444ms ago: executing program 1 (id=2532): socket$kcm(0x11, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000050000000000007b9db3eaa4b97d96f900fc0000009500000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x3, 0x6, @remote}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0x1d) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x1001a1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) 683.86853ms ago: executing program 3 (id=2533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="a8b939a75e6faba36b7b6597e7e7", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bc2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff3}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000004, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xa, 0x6}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x41c0) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x60c, 0x7, 0xe4, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 605.109086ms ago: executing program 0 (id=2534): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xcc, &(0x7f0000000440)=""/204, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000016"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0xe64fe000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9c028000", @ANYRES16=r11, @ANYRES8=r9], 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r11, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c005}, 0x24000000) 604.593603ms ago: executing program 4 (id=2535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001000070000fff10000000000fe880000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000004d22b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000000000000000000000000000000fcffffff0a000200700000000000000014000e00e000000200"/188], 0x104}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x2a060400) socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000000000000006000", @ANYRES32=0x0, @ANYBLOB="000c002b800800010000000000000000", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000000)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) recvmsg(r6, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x142) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r7, 0x0) (async) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0), 0x0, 0x10002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x2400c800) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) unshare(0x400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 443.697998ms ago: executing program 4 (id=2536): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x5, r2, 0x4}, 0x38) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0x6}, 0xc) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000480)=0x40, 0x4) 336.037156ms ago: executing program 4 (id=2537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x810, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000000000000007f010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000340)=@buf) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000230340000000000000008a0c00fe40000000000000000309000100031677288953de0b0000"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) (async) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000230340000000000000008a0c00fe40000000000000000309000100031677288953de0b0000"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) socket$tipc(0x1e, 0x5, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) r8 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x20000400) shutdown(r8, 0xbea244b5e6e0a076) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 244.42285ms ago: executing program 1 (id=2538): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) (async) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r8 = socket$kcm(0x11, 0x2, 0x300) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000040), 0x10) (async) connect$can_bcm(r9, &(0x7f0000000040), 0x10) sendto(r9, &(0x7f00000009c0)="8301a218320e9a90b7f2a15d17f599426a1b40c1deea261527e2c209ba502366d1be83a3b7c2ec31de0525390246a56dba5087c9733451dd867c1245057a38225e36fe233d35fad7a514f70b11dcfad996d7ef6a61ecd2767b00bb2fb5b19c0a701670da02d3cc642cc3e3df22da7888da58fb19788b07ff3a8f9fe01a468ce6", 0x80, 0x4008001, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x2b8, 0x13, 0x8, 0x70bd2c, 0x25dfdbfc, {0x2c, 0x81, 0xc0, 0x1, {0x4e21, 0x4e20, [0x4, 0x9, 0x0, 0x1], [0x3, 0x3ff, 0x80000000], r7, [0xe, 0x4]}, 0x7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "38e2cc31199ec9646357cd205aafa81e035d4b27f699dc2481c1178ca3da9be931db9c121bbf3de028ce5a28c2f860b747997e08767d2ddfb606e74a6875e0472242ea4f1f1bc4b8753a97557e14a6a6b80e1ae8882f39787795532f12c7f6a55598d87fceb3d75496acebf33dcc68ad1181e5dffa144a32282876fbd925c26a82b8a228ebee9eb9c920105a6a2fc91a2566db11b391d2792667f64ccdada6a7ce73819ce8e02864fcbae17f4aeb61dbbfc84fd987c06bb4e310aa0de7cff057047f1ac3f60fa2f7b92fba02db38858e8decb7d35e1fae51"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "20a83e3aeefe325a4e3b879c05dd4382a10c0c6b1ba2851dada7158fdcd41260dae14aa161c9ae2aee99d209b6627ccfa601f54b1e26aebb5a44f9d241d341c8cfd237a5a8a02825f8f2d83cb5f296bc2651de7c91d7e6adc568ac51505175638c2e364805cea0059b3f657049c6e46b516f7837284228d1"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "848254407a329cbf2fe14c53a5708b0dd6bf24a019f6e523bdbecc5ca1bf1282606ec4f7fcd8bbad6b390b98512e76977fc16f1fd5914ecab8d3a547bfd522e59d5f1b2806db2c1b46fefee4b01e99a627bff4a4aadfa6832803c6e4e91189cd2648e791feefb5ca07613965177547279f092a09386a138787"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "e69d6bdb4e222700c3aae77136dbe3154cb9980d09dc13cfa2d7553623d02090ccea588b34c0e33cce8d8dd44d9557f765b3fc2b7c9637df00f9980e74a6aee3a5ab5b4a4fbba75be2b91a98898f91f72620334ff2c60f79d89460ddab1bfa0d722484494157fde66e0584e845411825ec5390739d438b58ccc6e3a8c04006b34e59a6448952456842e1f235"}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x45}, 0x4024091) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38000d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004480)={0x2c, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@empty}]}]}]}, 0x2c}}, 0x4008030) (async) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004480)={0x2c, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@empty}]}]}]}, 0x2c}}, 0x4008030) 220.454566ms ago: executing program 3 (id=2539): r0 = socket(0x1e, 0x4, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x7e, &(0x7f0000000680)=""/126, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x8, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x5, 0x5, 0x9, 0x6}, {0x1, 0x4, 0x0, 0x2a0bc45be703dbf9}, {0x5, 0x5, 0x7, 0x8}, {0x0, 0x2, 0x1, 0xa}], 0x10, 0x7a}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x20000044) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x8, 0x7800, 0xfffffffd, 0x9, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x64, 0x0, 0xb, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0x43, [@rand_addr=0x64010101, @remote, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp_addr={0x44, 0x1c, 0x5, 0x1, 0x1, [{@rand_addr=0x64010101, 0x2}, {@remote}, {@multicast1, 0x1000}]}, @rr={0x7, 0xf, 0x1d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop]}}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) 132.666263ms ago: executing program 0 (id=2540): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0xf85, 0x12) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r7, &(0x7f0000000300)="5af9", 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000000000007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf98000000000000560800000000000085000000bc000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d100200000000001d400200000000004704000001ed0000620300007e0000001d440000000000007a0a00fe00ffffffc3030000e10000009f000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cdb70f617af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028af0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00672f0814bf895e3a6dfbc711243f58a817895f5c4eaf7de8411a831ef65508f416ae3fd1db8386f6aae40515273adcff6196bb45476ec0a5279ed223f772aee25947b1f0d275c0e495b050f10a0b5d19b578a2b4096b9df527211bb39a29224c34a517dc344a195697b0c158d3519c04fe7621ebeef0bc369a1431a90c4117bdfe358e0e869e9f3e5443813261c1c3c78ab2584603e4468de7d0dc93691491050666f4ea5f083a1b281ed230569921856befe07538fbf33f43fa4ad583867bee301ae1e2566ae7a7afb7fc54895a2fef928d91a162affb4d373c7628a2871d7d19eaf06ed5f58f799c8ff391d3752b115073702ee257ade173dd2f736ed5939f219ba42f7650b9a262f6ee4af52aba3e669a835555ea1674f89d7f98ee1a1c7f977e0a93fdf91606d01c1a9dacfd4328502948bed0bc9514e4f66846bc1f245aa5abad88d56679092fee01007cade7ee72a49a498d51a26ba5cf0896cd9143d457262976f682bf31833ee99b5301f349dd2815e76a8b9a6cec5e000bd6bdafcb9536379b6cd0351cfe345abb1f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={0x0, 0x6cc}, 0x1, 0x0, 0x0, 0x44}, 0x41) syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 0s ago: executing program 2 (id=2541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xfffffffffffffd8a, 0x1, [0xb, 0x9, 0x30, 0xc, 0x9, 0x1b, 0xc, 0x3, 0xc, 0x3, 0x18, 0x3, 0x0, 0x1, 0x30, 0xb, 0x36, 0x5, 0x48, 0x48, 0x16, 0xb, 0x24, 0x36, 0x1b, 0x0]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f0000000080)={r0}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000140)={&(0x7f0000000000)=0x9, 0x10200c, &(0x7f0000000240), &(0x7f0000000180)}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) kernel console output (not intermixed with test programs): 4991][ T8820] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 182.993978][ T8804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.024699][ T8804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.054602][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 183.229502][ T8804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.263442][ T8804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.295329][ T8826] netlink: 'syz.3.770': attribute type 3 has an invalid length. [ 183.315659][ T8826] netlink: 'syz.3.770': attribute type 3 has an invalid length. [ 183.457002][ T8804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.520236][ T8804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.641295][ T8829] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 183.857944][ T8851] openvswitch: netlink: IP tunnel dst address not specified [ 183.931271][ T6348] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.940467][ T8854] netlink: 68 bytes leftover after parsing attributes in process `syz.4.777'. [ 183.950023][ T6348] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.107587][ T6337] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.124102][ T6337] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.240601][ T6327] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.260419][ T6327] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.432605][ T6348] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.445998][ T6348] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.457090][ T8864] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 185.248072][ T8906] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 185.638083][ T8906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.667969][ T8907] bond4: (slave dummy0): making interface the new active one [ 185.691887][ T8907] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 185.764401][ T8918] __nla_validate_parse: 12 callbacks suppressed [ 185.764423][ T8918] netlink: 140 bytes leftover after parsing attributes in process `syz.3.793'. [ 185.848567][ T8918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.793'. [ 188.553510][ T8938] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 188.567214][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 188.625579][ T8941] xfrm2: entered promiscuous mode [ 188.648812][ T8941] xfrm2: entered allmulticast mode [ 188.666321][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 188.925727][ T8978] Bluetooth: MGMT ver 1.23 [ 189.435336][ T8998] nbd: socks must be embedded in a SOCK_ITEM attr [ 189.746832][ T9003] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20001 [ 190.956364][ T9023] syzkaller1: entered promiscuous mode [ 190.973930][ T9023] syzkaller1: entered allmulticast mode [ 191.004016][ T5632] Bluetooth: hci2: command 0x0401 tx timeout [ 191.012129][ T5627] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 191.517711][ T9062] netlink: 'syz.4.830': attribute type 3 has an invalid length. [ 191.573825][ T9062] netlink: 'syz.4.830': attribute type 6 has an invalid length. [ 192.006651][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.038348][ T9094] bridge_slave_0: left allmulticast mode [ 192.076551][ T9094] bridge_slave_0: left promiscuous mode [ 192.099600][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.147655][ T9094] bridge_slave_0: entered promiscuous mode [ 192.158202][ T9094] team0: Port device bridge_slave_0 added [ 192.228153][ T9100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.444384][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 192.461747][ T9106] netlink: 64 bytes leftover after parsing attributes in process `syz.4.840'. [ 193.491147][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 193.521479][ T9135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.848'. [ 193.578693][ T9137] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 193.666182][ T9137] bond3: entered promiscuous mode [ 193.673025][ T9137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.732729][ T9140] netlink: 64 bytes leftover after parsing attributes in process `syz.3.850'. [ 193.808966][ T9147] bond3: (slave veth3): making interface the new active one [ 193.853461][ T9147] veth3: entered promiscuous mode [ 193.864681][ T9147] bond3: (slave veth3): Enslaving as an active interface with an up link [ 193.955754][ T9154] tipc: Enabled bearer , priority 0 [ 194.078182][ T9154] syzkaller0: entered promiscuous mode [ 194.084115][ T9154] syzkaller0: entered allmulticast mode [ 194.096226][ T9154] tipc: Resetting bearer [ 194.136560][ T9153] tipc: Resetting bearer [ 194.335572][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 194.368557][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375857][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.879463][ T9187] netlink: 44 bytes leftover after parsing attributes in process `syz.3.858'. [ 197.026855][ T9153] tipc: Disabling bearer [ 197.067141][ T5792] tipc: Node number set to 1582372863 [ 197.089371][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.283669][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 197.313628][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.861'. [ 197.359546][ T9197] geneve3: entered promiscuous mode [ 197.373518][ T9197] geneve3: entered allmulticast mode [ 197.382084][ T6337] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.407961][ T6337] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.431943][ T6337] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.467529][ T6337] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.668392][ T9213] vlan5: entered promiscuous mode [ 197.688954][ T9213] gretap0: entered promiscuous mode [ 197.861449][ T9228] netlink: 'syz.4.869': attribute type 10 has an invalid length. [ 197.885589][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.308767][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 198.410600][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 198.464290][ T6337] tipc: Subscription rejected, illegal request [ 198.834057][ T9249] pimreg: entered allmulticast mode [ 198.844149][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 90 seconds [ 198.855005][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 90 seconds [ 198.866238][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 90 seconds [ 198.877824][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 90 seconds [ 198.920820][ T9249] pimreg: left allmulticast mode [ 199.029616][ T9254] netlink: 212 bytes leftover after parsing attributes in process `syz.4.875'. [ 199.077568][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 199.115414][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'. [ 199.133834][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'. [ 199.151204][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'. [ 199.182096][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'. [ 199.226067][ T9263] syzkaller1: entered promiscuous mode [ 199.247973][ T9263] syzkaller1: entered allmulticast mode [ 199.286615][ T9256] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.360403][ T9270] netlink: 'syz.4.880': attribute type 12 has an invalid length. [ 199.484118][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.627614][ T6449] udevd[6449]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 199.667945][ T9273] xt_policy: too many policy elements [ 199.709072][ T9273] pim6reg99999999: entered allmulticast mode [ 199.725309][ T9275] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 199.744946][ T9273] tc action pedit 'at' offset 4 out of bounds [ 199.752629][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'. [ 200.066860][ T9280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.884'. [ 200.171335][ T9288] dvmrp1: entered allmulticast mode [ 200.389707][ T9296] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.721561][ T9315] syz_tun: entered allmulticast mode [ 200.735768][ T5747] IPVS: starting estimator thread 0... [ 200.750080][ T9313] syz_tun: left allmulticast mode [ 200.827349][ T9317] veth7: entered allmulticast mode [ 200.834419][ T9318] IPVS: using max 31 ests per chain, 74400 per kthread [ 200.873047][ T9317] bond4: (slave veth7): Enslaving as an active interface with an up link [ 200.879072][ T9322] netlink: 'syz.3.892': attribute type 2 has an invalid length. [ 200.896100][ T9320] bond4 (unregistering): (slave veth7): Releasing backup interface [ 200.919160][ T9320] bond4 (unregistering): Released all slaves [ 201.034955][ T9322] : entered promiscuous mode [ 202.683522][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 203.069419][ T9282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.593638][ T9363] __nla_validate_parse: 2 callbacks suppressed [ 203.593659][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.905'. [ 203.786399][ T9371] netlink: 280 bytes leftover after parsing attributes in process `syz.4.908'. [ 203.977928][ T9377] IPVS: sed: FWM 3 0x00000003 - no destination available [ 204.028468][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 204.086878][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 204.118234][ T9389] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 204.168619][ T9384] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 205.380272][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.922'. [ 205.860495][ T9437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.926'. [ 205.909423][ T9426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'. [ 206.508278][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 206.596260][ T9458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.683468][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 206.683487][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 206.683565][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 206.707495][ T5632] Bluetooth: hci0: command 0x0401 tx timeout [ 206.929457][ T9463] bond2: (slave batadv1): Opening slave failed [ 207.304344][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.938'. [ 207.356128][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.938'. [ 207.705056][ T9507] netlink: 'syz.3.942': attribute type 4 has an invalid length. [ 207.735860][ T9509] netlink: 'syz.0.945': attribute type 2 has an invalid length. [ 208.208549][ T30] audit: type=1107 audit(1784378898.583:2): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{v^W‘bï¯.ËêGØ»ÐÃè5°2­‡Ù+)&a"Œ_§ž®Ñuˆú° ¾ÚÖ©§ EÍø5•'9Ya;w=|§c' [ 208.254968][ T9528] syzkaller0: entered promiscuous mode [ 208.269712][ T9528] syzkaller0: entered allmulticast mode [ 208.572763][ T9536] netlink: 'syz.0.953': attribute type 12 has an invalid length. [ 209.002717][ T9554] tipc: Enabled bearer , priority 0 [ 209.034459][ T9554] syzkaller0: entered promiscuous mode [ 209.055782][ T9554] syzkaller0: entered allmulticast mode [ 209.094389][ T9554] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 209.160609][ T9564] __nla_validate_parse: 2 callbacks suppressed [ 209.160630][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 209.304605][ T9571] tipc: Resetting bearer [ 209.356093][ T9564] bridge3: port 1(dummy0) entered blocking state [ 209.364354][ T9564] bridge3: port 1(dummy0) entered disabled state [ 209.371558][ T9564] dummy0: entered allmulticast mode [ 209.386702][ T9564] dummy0: entered promiscuous mode [ 209.409024][ T9568] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 209.420222][ T9552] tipc: Resetting bearer [ 209.426436][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.961'. [ 209.480029][ T9552] tipc: Disabling bearer [ 209.522277][ T9576] syzkaller0: entered promiscuous mode [ 209.542545][ T9576] syzkaller0: entered allmulticast mode [ 209.556437][ T5747] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 209.579334][ T9568] bridge3: port 1(dummy0) entered blocking state [ 209.582580][ T9586] netlink: 'syz.4.967': attribute type 11 has an invalid length. [ 209.586304][ T9568] bridge3: port 1(dummy0) entered forwarding state [ 209.602456][ T9586] netlink: 'syz.4.967': attribute type 11 has an invalid length. [ 209.612747][ T9586] netlink: 228 bytes leftover after parsing attributes in process `syz.4.967'. [ 209.639013][ T9568] dummy0: left allmulticast mode [ 209.658648][ T9568] bridge3: port 1(dummy0) entered disabled state [ 210.085833][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 210.100305][ T9608] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 210.157095][ T9609] ip6tnl1: entered allmulticast mode [ 210.182524][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.205279][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.214483][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.365462][ T5754] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 210.450576][ T9606] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 210.486625][ T5754] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.511138][ T9606] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 210.564185][ T9606] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 210.661208][ T9606] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.700625][ T9626] veth0: entered promiscuous mode [ 210.735695][ T9606] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 210.774382][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 210.949450][ T9626] bond0: (slave bond_slave_1): Releasing backup interface [ 210.964047][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 211.016550][ T9637] veth0: entered promiscuous mode [ 211.042282][ T9625] veth0: left promiscuous mode [ 211.083712][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.115935][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 211.232103][ T9637] bond0: (slave bond_slave_1): Releasing backup interface [ 211.251614][ T13] smbdirect: ib_dev[syz2] removed [ 211.342900][ T6334] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 211.376859][ T6334] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 211.474549][ T9636] veth0: left promiscuous mode [ 211.848180][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 211.880855][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 211.927878][ T9672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 211.947847][ T9672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.991'. [ 212.355686][ T9694] netlink: 'syz.3.996': attribute type 12 has an invalid length. [ 212.428610][ T9694] macsec0: entered promiscuous mode [ 212.871043][ T9694] macsec0 (unregistering): left promiscuous mode [ 213.275924][ T9726] tipc: Enabling of bearer rejected, failed to enable media [ 213.893473][ T9759] syz_tun: entered allmulticast mode [ 213.906780][ T9758] syz_tun: left allmulticast mode [ 214.095232][ T9762] ip6tnl3: entered allmulticast mode [ 214.374231][ T9771] syzkaller0: entered promiscuous mode [ 214.383125][ T9771] syzkaller0: entered allmulticast mode [ 214.466994][ T9749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.603652][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 214.603670][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.860919][ T9791] __nla_validate_parse: 7 callbacks suppressed [ 214.860948][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 214.876408][ T9797] ip6t_srh: unknown srh invflags 4000 [ 214.887680][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.895937][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.916940][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.926249][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.986967][ T9799] ip6t_srh: unknown srh invflags 4000 [ 215.163636][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 215.353739][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1028'. [ 216.152903][ T9852] pim6reg: entered allmulticast mode [ 216.180678][ T9853] pim6reg: left allmulticast mode [ 216.200523][ T9853] bridge0: left allmulticast mode [ 216.838954][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 217.101567][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 217.127057][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 217.128262][ T9879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.240490][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 217.535671][ T9879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.649304][ T9908] bridge3: entered promiscuous mode [ 217.670499][ T9908] bridge3: entered allmulticast mode [ 217.690512][ T9908] team0: Port device bridge3 added [ 217.712569][ T9909] bridge0: port 3(team0) entered blocking state [ 217.732428][ T9909] bridge0: port 3(team0) entered disabled state [ 217.753125][ T9909] team0: entered allmulticast mode [ 217.768578][ T9909] team_slave_0: entered allmulticast mode [ 217.779839][ T9909] team_slave_1: entered allmulticast mode [ 217.799400][ T9917] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 217.807158][ T9909] team0: entered promiscuous mode [ 217.823625][ T9909] team_slave_0: entered promiscuous mode [ 217.832464][ T9909] team_slave_1: entered promiscuous mode [ 217.939844][ T9917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.010063][ T9879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.102824][ T9924] bond5: (slave geneve4): making interface the new active one [ 218.128154][ T9924] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 218.149883][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 218.303046][ T9879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.429921][ T9940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1058'. [ 218.454332][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1061'. [ 218.642335][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1062'. [ 218.680557][ T6337] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.743187][ T9956] ip6gre1: entered promiscuous mode [ 218.758585][ T9956] ip6gre1: entered allmulticast mode [ 218.780316][ T6346] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.791583][ T6346] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.803760][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.829734][ T6346] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.916049][ T6334] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.929688][ T9966] ipt_ECN: cannot use operation on non-tcp rule [ 219.010026][ T6337] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.347364][ T5826] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.360620][ T9981] ip6tnl1: entered allmulticast mode [ 219.403995][ T5826] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.865585][T10008] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 219.946932][T10008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.033179][T10014] bond4: (slave veth5): Enslaving as an active interface with a down link [ 220.099215][T10021] xt_hashlimit: size too large, truncated to 1048576 [ 220.107277][T10016] bond4: (slave veth7): Enslaving as an active interface with a down link [ 220.131421][T10008] bond4: entered allmulticast mode [ 220.182458][T10024] tipc: Enabling of bearer rejected, failed to enable media [ 220.356673][T10030] xt_ecn: cannot match TCP bits for non-tcp packets [ 220.399529][T10030] __nla_validate_parse: 2 callbacks suppressed [ 220.399551][T10030] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1079'. [ 220.442309][T10030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.456071][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 220.490199][T10030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.505216][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 220.524506][T10030] bond0 (unregistering): Released all slaves [ 220.975477][T10058] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1087'. [ 221.352603][T10069] gretap1: entered promiscuous mode [ 221.360775][T10067] syzkaller1: entered promiscuous mode [ 221.366914][T10067] syzkaller1: entered allmulticast mode [ 221.752457][T10087] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 221.752457][T10087] Please contact the netfilter-devel mailing list or update your nftables rules. [ 222.011001][T10098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.040546][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 222.074890][T10107] Bluetooth: MGMT ver 1.23 [ 222.116486][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 222.193095][T10111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.416225][T10120] x_tables: duplicate underflow at hook 4 [ 222.557809][T10124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1111'. [ 223.022246][T10148] tipc: Enabled bearer , priority 10 [ 223.083451][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.163517][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.163565][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 223.195313][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1119'. [ 223.240085][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1119'. [ 223.283800][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 223.581879][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.605752][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.662417][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.673382][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.174270][T10192] syzkaller1: entered promiscuous mode [ 224.183095][T10195] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 224.192559][T10192] syzkaller1: entered allmulticast mode [ 224.301732][T10195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.332405][T10205] bond3: (slave geneve2): making interface the new active one [ 224.344665][T10205] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 224.396376][T10200] vlan6: entered allmulticast mode [ 224.419210][T10195] netlink: 'syz.3.1131': attribute type 6 has an invalid length. [ 224.438994][T10200] bond3: entered allmulticast mode [ 224.453696][T10200] geneve2: entered allmulticast mode [ 225.795971][T10247] syzkaller0: entered promiscuous mode [ 225.819649][T10250] __nla_validate_parse: 5 callbacks suppressed [ 225.819681][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 225.820954][T10247] syzkaller0: entered allmulticast mode [ 225.994829][T10261] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 226.004634][T10250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.066530][T10257] macvlan3: entered promiscuous mode [ 226.072652][T10257] macvlan3: entered allmulticast mode [ 226.080251][T10257] bond5: entered promiscuous mode [ 226.087719][T10257] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 226.099090][T10257] bond5: left promiscuous mode [ 226.118939][T10261] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 226.433141][T10268] syzkaller0: entered promiscuous mode [ 226.458560][T10268] syzkaller0: entered allmulticast mode [ 226.516593][T10279] netlink: 'syz.4.1150': attribute type 3 has an invalid length. [ 226.554383][T10279] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1150'. [ 228.926962][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 120 seconds [ 228.937907][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 120 seconds [ 228.951875][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 120 seconds [ 228.963715][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 120 seconds [ 229.793805][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 230.431886][T10362] tipc: Enabled bearer , priority 0 [ 230.461569][T10359] syzkaller0: entered promiscuous mode [ 230.476338][T10359] syzkaller0: entered allmulticast mode [ 230.556691][T10359] tipc: Resetting bearer [ 230.594310][T10359] tipc: Disabling bearer [ 230.729119][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 231.111782][T10385] tipc: Enabled bearer , priority 0 [ 231.131701][T10385] syzkaller0: entered promiscuous mode [ 231.147584][T10385] syzkaller0: entered allmulticast mode [ 231.201369][T10385] tipc: Resetting bearer [ 231.232193][T10384] tipc: Resetting bearer [ 231.324125][T10384] tipc: Disabling bearer [ 231.427695][T10399] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 231.461095][T10399] netlink: 'syz.2.1182': attribute type 8 has an invalid length. [ 231.514405][T10405] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 231.618740][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.664442][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.694667][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.734284][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.761226][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 231.784015][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.814419][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.864958][T10419] bridge3: entered promiscuous mode [ 231.875579][T10419] bridge3: entered allmulticast mode [ 231.892251][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.919171][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 231.945446][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 232.121643][T10428] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 232.129754][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.191388][T10433] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 232.250322][T10428] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 232.406181][ T30] audit: type=1804 audit(1784378922.783:3): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1192" name="/newroot/245/cgroup.controllers" dev="tmpfs" ino=1266 res=1 errno=0 [ 232.430124][ T30] audit: type=1800 audit(1784378922.783:4): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1192" name="cgroup.controllers" dev="tmpfs" ino=1266 res=0 errno=0 [ 232.841710][T10458] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 232.965803][T10449] macvlan2: entered promiscuous mode [ 232.986365][T10449] macvlan2: entered allmulticast mode [ 232.999047][T10449] bond4: entered promiscuous mode [ 233.016645][T10449] veth0_to_bond: entered promiscuous mode [ 233.039599][T10449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.064338][T10449] bond4: left promiscuous mode [ 233.083177][T10449] veth0_to_bond: left promiscuous mode [ 234.061021][T10463] ipvlan2: entered promiscuous mode [ 234.277218][T10493] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.366924][T10495] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 234.510238][T10495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.863306][T10497] bond4: (slave veth5): Enslaving as an active interface with a down link [ 234.921987][T10498] bridge0: port 3(team0) entered blocking state [ 234.928763][T10498] bridge0: port 3(team0) entered forwarding state [ 234.935626][T10498] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.942914][T10498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.950544][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.957953][T10498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.025272][T10498] bridge0: entered promiscuous mode [ 235.258632][T10498] macsec1: left promiscuous mode [ 235.278390][T10498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.312320][T10498] vlan3: left promiscuous mode [ 235.328686][T10498] bond0: left promiscuous mode [ 235.357164][T10498] vlan5: left promiscuous mode [ 235.364423][T10498] gretap0: left promiscuous mode [ 235.380176][T10498] ip6gre1: left promiscuous mode [ 235.386221][T10498] ip6gre1: left allmulticast mode [ 235.396508][T10498] vlan6: left allmulticast mode [ 235.401631][T10498] bond3: left allmulticast mode [ 235.409237][T10498] geneve2: left allmulticast mode [ 235.414685][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.429271][T10498] ipvlan2: left promiscuous mode [ 235.459768][T10495] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 235.470461][T10495] bond4: (slave batadv1): making interface the new active one [ 235.480813][T10495] batadv1: entered promiscuous mode [ 235.487307][T10495] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 235.516795][T10520] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 235.705431][T10530] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 235.756438][ T6349] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 235.857805][T10530] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.048340][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.117323][T10551] syzkaller0: entered promiscuous mode [ 236.126330][T10551] syzkaller0: entered allmulticast mode [ 236.243924][T10555] openvswitch: netlink: IP tunnel dst address not specified [ 236.652040][T10569] __nla_validate_parse: 31 callbacks suppressed [ 236.652062][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1227'. [ 236.965510][T10577] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 237.135435][T10577] bond5 (unregistering): Released all slaves [ 237.198167][T10569] team0: Device xfrm0 is of different type [ 237.896548][T10614] xt_ecn: cannot match TCP bits for non-tcp packets [ 238.350089][T10632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1241'. [ 238.391780][T10632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1241'. [ 238.505737][T10640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1244'. [ 238.871300][ T30] audit: type=1804 audit(1784378929.243:5): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1248" name="/newroot/248/cgroup.controllers" dev="tmpfs" ino=1295 res=1 errno=0 [ 238.921705][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 238.959944][ T30] audit: type=1800 audit(1784378929.243:6): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1248" name="cgroup.controllers" dev="tmpfs" ino=1295 res=0 errno=0 [ 239.007271][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 239.007271][ T6347] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.007315][ T6347] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.079764][ T6347] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.114502][ T6347] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.163493][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 239.301796][T10679] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1254'. [ 239.328671][T10680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.366974][T10679] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 239.537873][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 239.567507][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 239.629178][T10695] netlink: 'syz.0.1258': attribute type 25 has an invalid length. [ 239.803433][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.937665][T10709] bond7: option resend_igmp: invalid value (2878) [ 239.947641][T10709] bond7: option resend_igmp: allowed values 0 - 255 [ 239.959422][T10709] bond7 (unregistering): Released all slaves [ 240.378986][T10729] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1266'. [ 240.471646][T10731] xt_l2tp: v2 doesn't support IP mode [ 240.719167][T10735] ip6tnl1: entered allmulticast mode [ 240.740579][ T6347] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.891135][T10746] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 241.180948][T10761] xt_CT: No such helper "snmp_trap" [ 241.217692][T10769] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 241.230640][T10746] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.241807][T10746] bond5: (slave bond6): making interface the new active one [ 241.251942][T10746] bond5: (slave bond6): Enslaving as an active interface with an up link [ 241.396340][T10777] xt_cgroup: invalid path, errno=-2 [ 241.465236][T10769] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.576256][T10772] netlink: 'syz.1.1277': attribute type 10 has an invalid length. [ 241.588382][T10767] syzkaller0: entered promiscuous mode [ 241.611673][T10767] syzkaller0: entered allmulticast mode [ 241.679526][T10777] bond7: (slave veth11): Enslaving as an active interface with a down link [ 241.720651][T10790] __nla_validate_parse: 7 callbacks suppressed [ 241.720665][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 242.165717][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 244.179220][T10807] syz_tun: entered allmulticast mode [ 244.321050][T10820] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 244.328665][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 244.523917][T10826] erspan0: entered promiscuous mode [ 244.822773][T10804] syz_tun: left allmulticast mode [ 244.913120][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 244.931773][T10844] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1296'. [ 245.128171][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1298'. [ 245.163811][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.173525][T10856] syzkaller1: entered promiscuous mode [ 245.186736][T10856] syzkaller1: entered allmulticast mode [ 245.358955][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 245.469621][T10874] xt_cluster: node mask cannot exceed total number of nodes [ 245.628483][T10878] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1305'. [ 245.742039][T10889] netlink: 'syz.2.1309': attribute type 3 has an invalid length. [ 245.754810][T10894] netlink: 'syz.2.1309': attribute type 8 has an invalid length. [ 245.765901][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 245.864537][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.871910][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 246.161406][T10911] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 246.444251][T10913] veth7: entered allmulticast mode [ 246.452407][T10924] sctp: [Deprecated]: syz.0.1317 (pid 10924) Use of int in max_burst socket option. [ 246.452407][T10924] Use struct sctp_assoc_value instead [ 246.471874][T10913] bond0: (slave veth7): Enslaving as an active interface with a down link [ 246.524609][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.553740][T10915] bond2: (slave veth0_to_bond): Releasing backup interface [ 246.589309][T10915] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 246.716379][ T3296] batadv1: left promiscuous mode [ 246.867613][T10942] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 246.893112][T10942] bond6: entered promiscuous mode [ 246.900577][T10942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.002743][T10901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.609648][T10985] bond7: option min_links: invalid value (18446744073709551612) [ 249.618279][T10985] bond7: option min_links: allowed values 0 - 2147483647 [ 249.618402][T10991] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 249.640076][T10985] bond7 (unregistering): Released all slaves [ 249.655087][T10999] __nla_validate_parse: 5 callbacks suppressed [ 249.655106][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 249.681832][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 249.697597][T10993] netlink: 'syz.1.1333': attribute type 4 has an invalid length. [ 249.860048][T11000] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.936471][T11002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.979614][T11002] bond5: (slave geneve3): making interface the new active one [ 250.017968][T11002] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 250.042993][T11017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.043440][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.097425][ T76] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.124587][ T76] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.146025][ T76] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.176052][ T76] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 250.297827][T11024] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 250.327417][T11024] netlink: 'syz.2.1342': attribute type 4 has an invalid length. [ 250.361238][T11024] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1342'. [ 250.399132][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 250.417146][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 250.640865][T11039] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1345'. [ 251.110521][T11052] syzkaller0: entered promiscuous mode [ 251.124264][T11052] syzkaller0: entered allmulticast mode [ 251.522209][T11063] netlink: 'syz.0.1354': attribute type 12 has an invalid length. [ 251.554737][T11063] netlink: 'syz.0.1354': attribute type 29 has an invalid length. [ 251.587511][T11063] netlink: 'syz.0.1354': attribute type 7 has an invalid length. [ 251.619760][T11063] netlink: 'syz.0.1354': attribute type 37 has an invalid length. [ 251.638017][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 251.639656][T11070] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 251.668699][T11063] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1354'. [ 251.696618][T11067] tipc: Failed to remove unknown binding: 66,1,1/1582372863:2228519198/2228519200 [ 251.723872][T11067] tipc: Failed to remove unknown binding: 66,1,1/1582372863:2228519198/2228519200 [ 251.768989][T11070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.779132][T11067] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 251.900081][T11077] FAULT_INJECTION: forcing a failure. [ 251.900081][T11077] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 251.986484][T11077] CPU: 1 UID: 0 PID: 11077 Comm: syz.0.1358 Not tainted syzkaller #0 PREEMPT(full) [ 251.986513][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 251.986524][T11077] Call Trace: [ 251.986532][T11077] [ 251.986541][T11077] dump_stack_lvl+0xe8/0x150 [ 251.986578][T11077] should_fail_ex+0x40c/0x560 [ 251.986608][T11077] _copy_to_user+0x31/0xb0 [ 251.986640][T11077] simple_read_from_buffer+0xe1/0x170 [ 251.986672][T11077] proc_fail_nth_read+0x1bb/0x230 [ 251.986702][T11077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.986734][T11077] ? rw_verify_area+0x24a/0x4c0 [ 251.986766][T11077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.986794][T11077] vfs_read+0x213/0xa80 [ 251.986829][T11077] ? __pfx___mutex_lock+0x10/0x10 [ 251.986861][T11077] ? __pfx_vfs_read+0x10/0x10 [ 251.986893][T11077] ? __fget_files+0x2a/0x420 [ 251.986925][T11077] ? __fget_files+0x3a2/0x420 [ 251.986950][T11077] ? __fget_files+0x2a/0x420 [ 251.986987][T11077] ksys_read+0x150/0x270 [ 251.987021][T11077] ? __pfx_ksys_read+0x10/0x10 [ 251.987061][T11077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.987092][T11077] do_syscall_64+0x174/0x580 [ 251.987121][T11077] ? trace_irq_disable+0x3b/0x140 [ 251.987147][T11077] ? clear_bhb_loop+0x40/0x90 [ 251.987172][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.987193][T11077] RIP: 0033:0x7f23e495e6ce [ 251.987212][T11077] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.987228][T11077] RSP: 002b:00007f23e5833fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.987250][T11077] RAX: ffffffffffffffda RBX: 00007f23e58346c0 RCX: 00007f23e495e6ce [ 251.987264][T11077] RDX: 000000000000000f RSI: 00007f23e58340a0 RDI: 0000000000000005 [ 251.987276][T11077] RBP: 00007f23e5834090 R08: 0000000000000000 R09: 0000000000000000 [ 251.987288][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.987300][T11077] R13: 00007f23e4c26038 R14: 00007f23e4c25fa0 R15: 00007fff1b67b138 [ 251.987336][T11077] [ 252.374753][T11085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1361'. [ 252.501826][T11086] syzkaller0: entered promiscuous mode [ 252.531497][T11086] syzkaller0: entered allmulticast mode [ 252.582157][T11088] tipc: Enabled bearer , priority 0 [ 252.622419][T11091] openvswitch: netlink: IP tunnel dst address not specified [ 252.645199][T11086] tipc: Resetting bearer [ 252.678736][T11091] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1362'. [ 252.883184][T11081] tipc: Resetting bearer [ 252.951162][T11081] tipc: Disabling bearer [ 253.570842][T11126] openvswitch: netlink: Missing valid actions attribute. [ 253.599510][T11126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.721497][T11122] veth13: entered allmulticast mode [ 253.747340][T11128] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 253.883477][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.905936][T11142] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 253.940399][T11142] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 254.089954][T11154] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 254.173170][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.948690][T11187] __nla_validate_parse: 6 callbacks suppressed [ 254.948710][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 255.448003][T11213] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1396'. [ 255.528467][T11211] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.661337][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'. [ 255.777402][T11230] netlink: 'syz.1.1401': attribute type 9 has an invalid length. [ 255.788029][T11226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1400'. [ 255.795022][T11222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.808155][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.814840][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.845317][T11228] smc: net device wlan0 applied user defined pnetid SYZ0 [ 255.866679][T11232] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1401'. [ 256.004306][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1401'. [ 257.963684][ T4939] Bluetooth: hci4: command 0x0405 tx timeout [ 259.009517][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 150 seconds [ 259.021931][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 150 seconds [ 259.033061][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 150 seconds [ 259.044491][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 150 seconds [ 260.923549][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.803493][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 271.803549][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 272.443977][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.613931][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.085083][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 180 seconds [ 289.096064][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 180 seconds [ 289.107262][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 180 seconds [ 289.120070][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 180 seconds [ 289.667864][ T4990] udevd[4990]: worker [5640] /devices/virtual/block/nbd4 timeout; kill it [ 289.677782][ T4990] udevd[4990]: seq 11050 '/devices/virtual/block/nbd4' killed [ 298.077391][T11257] bond0: entered promiscuous mode [ 298.086617][T11257] ipvlan1: entered promiscuous mode [ 298.096558][T11256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 298.097363][T11257] ipvlan1: left promiscuous mode [ 298.111974][T11257] bond0: left promiscuous mode [ 298.787026][T11295] sctp: [Deprecated]: syz.1.1418 (pid 11295) Use of int in max_burst socket option. [ 298.787026][T11295] Use struct sctp_assoc_value instead [ 299.233550][T11308] syzkaller0: entered promiscuous mode [ 299.247385][T11308] syzkaller0: entered allmulticast mode [ 299.258730][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 299.280679][T11308] tipc: Enabled bearer , priority 0 [ 299.304230][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 299.326988][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 299.360733][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 299.379755][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 299.402377][T11308] tipc: Resetting bearer [ 299.457720][T11307] tipc: Resetting bearer [ 299.499429][T11307] tipc: Disabling bearer [ 299.520303][T11324] tipc: Enabling of bearer rejected, failed to enable media [ 299.595421][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 299.672152][T11328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1425'. [ 299.683922][T11332] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1427'. [ 300.165166][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 300.705005][T11340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.944740][T11376] trusted_key: syz.2.1440 sent an empty control message without MSG_MORE. [ 301.257254][T11385] netlink: 'syz.2.1443': attribute type 13 has an invalid length. [ 302.282851][T11393] netlink: 'syz.2.1445': attribute type 4 has an invalid length. [ 302.333100][ T36] tipc: Subscription rejected, illegal request [ 302.598720][T11404] netlink: 'syz.1.1451': attribute type 3 has an invalid length. [ 302.990394][ T5639] Bluetooth: hci4: link tx timeout [ 302.998336][ T5639] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.028588][ T4939] Bluetooth: hci4: link tx timeout [ 303.034562][ T4939] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.487965][T11436] __nla_validate_parse: 7 callbacks suppressed [ 303.487989][T11436] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1459'. [ 303.516618][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'. [ 303.606934][T11438] syz_tun: entered allmulticast mode [ 303.650895][T11437] syz_tun: left allmulticast mode [ 304.267101][T11457] xt_hashlimit: size too large, truncated to 1048576 [ 304.362633][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 304.780127][T11474] pim6reg1: entered promiscuous mode [ 304.809925][T11474] pim6reg1: entered allmulticast mode [ 305.087240][ T4939] Bluetooth: hci4: command 0x0405 tx timeout [ 305.282352][T11497] žÿ: renamed from team_slave_1 [ 305.499454][T11510] syz_tun: entered allmulticast mode [ 305.678627][T11520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1487'. [ 305.787889][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 305.873043][T11522] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 305.919486][T11522] bond7 (unregistering): Released all slaves [ 306.130229][T11528] bond7: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 306.154827][T11528] bond7: entered allmulticast mode [ 306.160518][T11529] tipc: Started in network mode [ 306.171671][T11529] tipc: Node identity 080211, cluster identity 4711 [ 306.186011][T11529] tipc: Enabled bearer , priority 0 [ 306.221327][T11531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 306.368608][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1494'. [ 306.748797][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 306.792439][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1495'. [ 307.303347][ T5765] tipc: Node number set to 134353152 [ 307.310799][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 307.643610][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.830597][ T6339] syzkaller0: tun_net_xmit 76 [ 309.849700][ T6339] syzkaller0: tun_net_xmit 48 [ 309.856646][ T9] syzkaller0: tun_net_xmit 76 [ 309.985425][T11690] netlink: 'syz.3.1533': attribute type 15 has an invalid length. [ 310.004261][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 310.151925][T11699] SET target dimension over the limit! [ 312.301875][T11690] netlink: 'syz.3.1533': attribute type 15 has an invalid length. [ 312.310133][ T6339] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 312.322032][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 312.351097][ T6339] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 312.365357][ T6339] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 312.385965][ T6339] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 312.894106][T11739] bridge3: entered promiscuous mode [ 312.911846][T11739] bridge3: entered allmulticast mode [ 312.933018][T11739] team0: Port device bridge3 added [ 313.149817][T11752] sock: sock_set_timeout: `syz.3.1549' (pid 11752) tries to set negative timeout [ 313.202364][T11757] netlink: 'syz.2.1550': attribute type 7 has an invalid length. [ 313.235089][T11758] netlink: 'syz.2.1550': attribute type 7 has an invalid length. [ 313.254463][T11757] netlink: 'syz.2.1550': attribute type 3 has an invalid length. [ 313.268229][T11758] netlink: 'syz.2.1550': attribute type 3 has an invalid length. [ 313.309032][T11757] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1550'. [ 313.349702][T11758] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1550'. [ 313.555636][T11767] syzkaller0: entered promiscuous mode [ 313.569343][T11767] syzkaller0: entered allmulticast mode [ 313.612346][T11767] tipc: Enabled bearer , priority 0 [ 313.793523][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 313.855147][T11767] tipc: Resetting bearer [ 313.972809][T11767] tipc: Disabling bearer [ 314.222327][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 314.236928][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1559'. [ 314.383981][T11809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1562'. [ 314.408352][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 314.605933][T11817] bond7: option updelay: invalid value (18446744073709518847) [ 314.613658][T11817] bond7: option updelay: allowed values 0 - 2147483647 [ 314.624653][T11817] bond7 (unregistering): Released all slaves [ 315.079908][T11824] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 315.130785][T11824] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 315.159848][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 315.185384][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 315.197775][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1569'. [ 315.287756][T11833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1568'. [ 316.874863][T11896] xt_hashlimit: size too large, truncated to 1048576 [ 316.903575][T11896] xt_hashlimit: max too large, truncated to 1048576 [ 316.954481][T11890] xt_CT: No such helper "syz1" [ 317.237986][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1582'. [ 317.246456][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.254265][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.290817][T11911] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 317.431044][T11911] bond10: option mode: invalid value (14) [ 317.454654][T11911] bond10 (unregistering): Released all slaves [ 318.089493][T11943] lo: entered allmulticast mode [ 318.110823][T11943] tunl0: entered allmulticast mode [ 318.128576][T11943] gre0: entered allmulticast mode [ 318.166012][T11943] gretap0: entered allmulticast mode [ 318.193044][T11943] ip_vti0: entered allmulticast mode [ 318.216330][T11943] ip6_vti0: entered allmulticast mode [ 318.230450][T11943] sit0: entered allmulticast mode [ 318.245534][T11943] ip6tnl0: entered allmulticast mode [ 318.265753][T11943] ip6gre0: entered allmulticast mode [ 318.304553][T11943] bridge0: entered allmulticast mode [ 318.342666][T11943] vcan0: entered allmulticast mode [ 318.359905][T11943] team0: left promiscuous mode [ 318.378171][T11943] team_slave_0: left promiscuous mode [ 318.396351][T11943] team_slave_1: left promiscuous mode [ 318.419324][T11943] bridge_slave_0: left promiscuous mode [ 318.440054][T11943] team0: entered allmulticast mode [ 318.458392][T11943] team_slave_0: entered allmulticast mode [ 318.476058][T11943] team_slave_1: entered allmulticast mode [ 318.496155][T11943] bridge_slave_0: entered allmulticast mode [ 318.546781][T11943] nlmon0: entered allmulticast mode [ 318.572512][T11943] vxcan0: entered allmulticast mode [ 318.599639][T11943] vxcan1: entered allmulticast mode [ 318.616896][T11943] veth0: entered allmulticast mode [ 318.629832][T11943] veth1: entered allmulticast mode [ 318.639624][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 318.650790][T11943] wg0: entered allmulticast mode [ 318.675586][T11943] wg1: entered allmulticast mode [ 318.688625][T11943] wg2: entered allmulticast mode [ 318.694517][T11965] netlink: 'syz.3.1593': attribute type 3 has an invalid length. [ 318.701521][T11943] veth0_to_bridge: entered allmulticast mode [ 318.722489][T11943] veth1_to_bridge: entered allmulticast mode [ 318.734287][T11965] netlink: 'syz.3.1593': attribute type 3 has an invalid length. [ 318.748290][T11943] : entered allmulticast mode [ 318.772112][T11943] veth1_to_bond: entered allmulticast mode [ 318.800700][T11943] veth0_to_team: entered allmulticast mode [ 318.826479][T11943] veth1_to_team: entered allmulticast mode [ 318.850526][T11943] veth0_to_batadv: entered allmulticast mode [ 318.880275][T11943] batadv_slave_0: entered allmulticast mode [ 318.897897][T11943] veth1_to_batadv: entered allmulticast mode [ 318.919946][T11943] batadv_slave_1: entered allmulticast mode [ 318.938759][T11943] veth0_to_hsr: entered allmulticast mode [ 318.953771][T11943] hsr_slave_0: entered allmulticast mode [ 318.961373][T11943] veth1_to_hsr: entered allmulticast mode [ 318.969591][T11943] hsr_slave_1: entered allmulticast mode [ 318.988355][T11943] hsr0: entered allmulticast mode [ 319.001289][T11943] veth1_virt_wifi: entered allmulticast mode [ 319.021068][T11943] veth0_virt_wifi: entered allmulticast mode [ 319.036572][T11943] virt_wifi0: entered allmulticast mode [ 319.053132][T11943] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 319.173341][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 210 seconds [ 319.184813][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 210 seconds [ 319.196496][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 210 seconds [ 319.207994][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 210 seconds [ 319.786124][T12003] netlink: 'syz.3.1601': attribute type 32 has an invalid length. [ 319.814472][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1601'. [ 319.992960][T12011] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 320.129766][T12017] netlink: 'syz.2.1604': attribute type 11 has an invalid length. [ 320.399801][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 320.450043][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 320.487481][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 323.712458][T12036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.876491][T12106] IPVS: set_ctl: invalid protocol: 143 224.0.0.2:21 [ 323.946738][T12106] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.035306][T12106] bridge_slave_0 (unregistering): left allmulticast mode [ 324.060301][T12106] bridge_slave_0 (unregistering): left promiscuous mode [ 324.071772][T12106] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.152434][T12119] sctp: [Deprecated]: syz.3.1617 (pid 12119) Use of int in maxseg socket option. [ 324.152434][T12119] Use struct sctp_assoc_value instead [ 324.253133][ T76] syzkaller0: tun_net_xmit 76 [ 324.261117][T12117] syzkaller0: create flow: hash 3890956550 index 1 [ 324.278460][ T76] syzkaller0: tun_net_xmit 48 [ 324.283980][ T5765] syzkaller0: tun_net_xmit 76 [ 324.404765][ T5765] syzkaller0: tun_net_xmit 76 [ 324.415496][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 324.681931][T12117] syzkaller0: delete flow: hash 3890956550 index 1 [ 325.154876][T12147] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 325.238219][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 325.265757][T12151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.277377][T12151] IPv6: NLM_F_CREATE should be set when creating new route [ 325.284685][T12151] IPv6: NLM_F_CREATE should be set when creating new route [ 325.292003][T12151] IPv6: NLM_F_CREATE should be set when creating new route [ 325.300835][T12151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.427338][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1622'. [ 327.184727][T12147] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 327.365864][T12157] netlink: 'syz.2.1623': attribute type 26 has an invalid length. [ 327.394182][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 327.440064][T12162] geneve3: entered promiscuous mode [ 327.764854][T12182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1630'. [ 327.835907][T12183] netlink: 30412 bytes leftover after parsing attributes in process `syz.4.1627'. [ 327.912256][T12183] hsr_slave_0: left promiscuous mode [ 327.939539][T12183] hsr_slave_1: left promiscuous mode [ 328.740192][T12219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1640'. [ 329.064979][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1640'. [ 329.116439][T12238] netlink: 'syz.2.1644': attribute type 210 has an invalid length. [ 329.651583][T12261] xt_ipcomp: unknown flags 1D [ 329.669766][T12264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1649'. [ 329.712220][T12259] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.730013][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1652'. [ 329.798099][T12259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.005545][T12259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.025501][T12259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.046687][T12259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.060167][T12259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.112286][T12259] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 330.135153][ T76] bridge0: port 1(1) entered blocking state [ 330.141433][ T76] bridge0: port 1(1) entered forwarding state [ 330.151352][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.158571][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.390565][T12291] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1658'. [ 330.527901][T12292] netlink: 'syz.0.1660': attribute type 2 has an invalid length. [ 330.550363][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1663'. [ 330.919973][T12322] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.975600][T12327] netlink: 'syz.1.1670': attribute type 13 has an invalid length. [ 331.188227][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 331.210800][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 331.238351][T12340] debugfs: '!' already exists in 'ieee80211' [ 331.454533][T12348] tipc: Enabled bearer , priority 0 [ 331.474137][T12348] GUP no longer grows the stack in syz.1.1677 (12348): 200000003000-20000000a000 (200000001000) [ 331.488920][T12350] netlink: 'syz.3.1675': attribute type 13 has an invalid length. [ 331.503708][T12348] CPU: 1 UID: 0 PID: 12348 Comm: syz.1.1677 Not tainted syzkaller #0 PREEMPT(full) [ 331.503738][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 331.503760][T12348] Call Trace: [ 331.503768][T12348] [ 331.503777][T12348] dump_stack_lvl+0xe8/0x150 [ 331.503814][T12348] __get_user_pages+0x238c/0x2720 [ 331.503851][T12348] ? __gup_longterm_locked+0xc3b/0x15c0 [ 331.503906][T12348] __gup_longterm_locked+0xd52/0x15c0 [ 331.503931][T12348] ? lock_acquire+0x106/0x350 [ 331.503979][T12348] gup_fast_fallback+0x1d8c/0x20e0 [ 331.503999][T12348] ? lockdep_hardirqs_on+0x7a/0x110 [ 331.504065][T12348] ? __pfx_gup_fast_fallback+0x10/0x10 [ 331.504090][T12348] ? is_valid_gup_args+0x11f/0x200 [ 331.504114][T12348] ? get_user_pages_fast+0x4d/0xb0 [ 331.504138][T12348] __iov_iter_get_pages_alloc+0x378/0xa40 [ 331.504176][T12348] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 331.504213][T12348] iov_iter_get_pages2+0x5e/0xa0 [ 331.504245][T12348] __se_sys_vmsplice+0x7b5/0x1660 [ 331.504296][T12348] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 331.504329][T12348] ? __pfx_futex_wake+0x10/0x10 [ 331.504427][T12348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.504450][T12348] do_syscall_64+0x174/0x580 [ 331.504479][T12348] ? trace_irq_disable+0x3b/0x140 [ 331.504503][T12348] ? clear_bhb_loop+0x40/0x90 [ 331.504528][T12348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.504548][T12348] RIP: 0033:0x7fcb65b9de99 [ 331.504568][T12348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.504584][T12348] RSP: 002b:00007fcb669c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 331.504605][T12348] RAX: ffffffffffffffda RBX: 00007fcb65e25fa0 RCX: 00007fcb65b9de99 [ 331.504618][T12348] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 331.504630][T12348] RBP: 00007fcb65c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 331.504641][T12348] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 331.504652][T12348] R13: 00007fcb65e26038 R14: 00007fcb65e25fa0 R15: 00007fff588c9e08 [ 331.504686][T12348] [ 331.506440][T12349] netlink: 'syz.3.1675': attribute type 13 has an invalid length. [ 331.551247][T12350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1675'. [ 331.608655][T12349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1675'. [ 331.866291][T12353] tipc: Disabling bearer [ 332.042381][T12365] tipc: Enabling of bearer rejected, already enabled [ 332.121563][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1684'. [ 332.315675][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 332.486107][T12393] netlink: 'syz.1.1689': attribute type 11 has an invalid length. [ 332.650835][T12389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1688'. [ 332.683504][T12403] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1691'. [ 333.546931][T12446] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 333.575363][T12446] sctp: [Deprecated]: syz.4.1701 (pid 12446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.575363][T12446] Use struct sctp_sack_info instead [ 334.403744][T12481] openvswitch: netlink: IP tunnel dst address not specified [ 334.501198][T12487] openvswitch: netlink: Missing valid actions attribute. [ 334.519615][T12487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.640589][T12490] dvmrp8: entered allmulticast mode [ 334.740191][T12494] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 334.800053][T12497] netlink: 'syz.1.1719': attribute type 12 has an invalid length. [ 334.827887][T12500] bond3: (slave geneve3): making interface the new active one [ 334.838600][T12500] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 334.861037][ T76] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.877647][ T76] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.908785][T12494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'. [ 334.931219][T12503] team0: Device vlan7 is already an upper device of the team interface [ 335.052804][ T76] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 335.062504][ T76] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 335.076066][T12494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.824486][T12538] __nla_validate_parse: 3 callbacks suppressed [ 335.824506][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'. [ 335.977951][T12553] tipc: Resetting bearer [ 336.101202][T12561] FAULT_INJECTION: forcing a failure. [ 336.101202][T12561] name failslab, interval 1, probability 0, space 0, times 0 [ 336.156275][T12561] CPU: 1 UID: 0 PID: 12561 Comm: syz.0.1734 Not tainted syzkaller #0 PREEMPT(full) [ 336.156307][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 336.156319][T12561] Call Trace: [ 336.156328][T12561] [ 336.156338][T12561] dump_stack_lvl+0xe8/0x150 [ 336.156374][T12561] should_fail_ex+0x40c/0x560 [ 336.156403][T12561] should_failslab+0xa8/0x100 [ 336.156436][T12561] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 336.156460][T12561] ? local_lock_release+0x9c/0x160 [ 336.156490][T12561] ? __alloc_skb+0x1d7/0x7a0 [ 336.156516][T12561] ? __alloc_skb+0x1d7/0x7a0 [ 336.156551][T12561] __alloc_skb+0x1d7/0x7a0 [ 336.156583][T12561] alloc_skb_with_frags+0xc6/0x760 [ 336.156622][T12561] ? __lock_acquire+0x683/0x2cf0 [ 336.156653][T12561] sock_alloc_send_pskb+0x878/0x990 [ 336.156696][T12561] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 336.156737][T12561] tun_get_user+0x9a6/0x4370 [ 336.156782][T12561] ? aa_file_perm+0x18b/0x15f0 [ 336.156809][T12561] ? aa_file_perm+0x4ed/0x15f0 [ 336.156829][T12561] ? __pfx_tun_get_user+0x10/0x10 [ 336.156866][T12561] ? __lock_acquire+0x683/0x2cf0 [ 336.156897][T12561] ? kstrtoull+0x12f/0x1d0 [ 336.156925][T12561] ? ref_tracker_alloc+0x341/0x4b0 [ 336.156946][T12561] ? get_pid_task+0x20/0x1f0 [ 336.156975][T12561] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 336.157000][T12561] ? tun_get+0x1c/0x2f0 [ 336.157027][T12561] ? tun_get+0x1c/0x2f0 [ 336.157059][T12561] ? tun_get+0x1c/0x2f0 [ 336.157085][T12561] ? tun_get+0x1c/0x2f0 [ 336.157116][T12561] tun_chr_write_iter+0x113/0x200 [ 336.157146][T12561] vfs_write+0x612/0xba0 [ 336.157186][T12561] ? __pfx_vfs_write+0x10/0x10 [ 336.157226][T12561] ? __fget_files+0x2a/0x420 [ 336.157259][T12561] ksys_write+0x150/0x270 [ 336.157295][T12561] ? __pfx_ksys_write+0x10/0x10 [ 336.157334][T12561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.157356][T12561] do_syscall_64+0x174/0x580 [ 336.157385][T12561] ? trace_irq_disable+0x3b/0x140 [ 336.157410][T12561] ? clear_bhb_loop+0x40/0x90 [ 336.157433][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.157454][T12561] RIP: 0033:0x7f23e495e6ce [ 336.157474][T12561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.157491][T12561] RSP: 002b:00007f23e5833fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.157514][T12561] RAX: ffffffffffffffda RBX: 00007f23e58346c0 RCX: 00007f23e495e6ce [ 336.157528][T12561] RDX: 0000000000087a2f RSI: 0000000000000000 RDI: 00000000000000c8 [ 336.157541][T12561] RBP: 00007f23e5834090 R08: 0000000000000000 R09: 0000000000000000 [ 336.157554][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.157565][T12561] R13: 00007f23e4c26038 R14: 00007f23e4c25fa0 R15: 00007fff1b67b138 [ 336.157599][T12561] [ 336.190228][T12563] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1735'. [ 336.400650][T12571] pimreg: entered allmulticast mode [ 336.486944][T12563] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1735'. [ 336.565294][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 336.601840][T12580] nftables ruleset with unbound chain [ 336.812270][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 336.846081][T12596] netlink: 'syz.3.1744': attribute type 11 has an invalid length. [ 336.858809][T12596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1744'. [ 336.878877][T12571] pimreg: left allmulticast mode [ 337.134848][T12602] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1746'. [ 337.142219][T12613] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 337.157643][T12602] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 337.370459][T12613] bond8: entered promiscuous mode [ 337.390682][T12613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 337.435944][T12624] ipvlan1: entered promiscuous mode [ 337.451027][T12624] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 337.452482][T12632] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 337.477561][T12632] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 337.480341][T12624] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 337.499158][T12624] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 337.517090][T12623] ipvlan3: entered allmulticast mode [ 337.522628][T12623] bond8: entered allmulticast mode [ 337.541053][T12617] bond8: (slave bridge6): making interface the new active one [ 337.550174][T12617] bridge6: entered promiscuous mode [ 337.556345][T12617] bridge6: entered allmulticast mode [ 337.564150][T12617] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 337.598323][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 337.648073][T12613] ipvlan4: entered allmulticast mode [ 337.702996][T12633] gretap2: entered allmulticast mode [ 337.714094][T12633] bond10: (slave gretap2): making interface the new active one [ 337.724721][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 337.733461][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.755089][T12633] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 337.877169][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1757'. [ 338.163715][T12662] netlink: 'syz.3.1761': attribute type 12 has an invalid length. [ 338.376973][T12670] netlink: 'syz.0.1764': attribute type 7 has an invalid length. [ 338.499400][T12675] syzkaller0: entered promiscuous mode [ 338.514642][T12675] syzkaller0: entered allmulticast mode [ 338.532734][T12680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1768'. [ 338.585706][T12681] syzkaller1: entered promiscuous mode [ 338.591498][T12681] syzkaller1: entered allmulticast mode [ 338.991580][T12705] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 339.690817][T12733] netlink: zone id is out of range [ 339.829561][T12745] vcan0: tx drop: invalid da for name 0x0000000200000000 [ 340.266221][T12765] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 340.289850][T12763] dvmrp1: left allmulticast mode [ 340.302381][T12765] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 340.410228][T12766] bond11 (unregistering): Released all slaves [ 340.916826][T12799] __nla_validate_parse: 3 callbacks suppressed [ 340.916850][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 340.983830][T12802] syzkaller0: entered promiscuous mode [ 341.001930][T12802] syzkaller0: entered allmulticast mode [ 341.520808][T12831] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 341.528749][T12831] syzkaller1: linktype set to 805 [ 341.741061][T12844] netlink: 'syz.0.1814': attribute type 13 has an invalid length. [ 341.789650][T12844] gretap0: refused to change device tx_queue_len [ 341.793880][T12850] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1817'. [ 341.811163][T12844] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 341.860948][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 341.901867][T12850] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1817'. [ 341.933657][T12850] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1817'. [ 341.962707][T12850] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1817'. [ 342.164307][T12869] bridge0: port 1(vlan2) entered blocking state [ 342.193653][T12869] bridge0: port 1(vlan2) entered disabled state [ 342.221154][T12869] vlan2: entered allmulticast mode [ 342.239686][T12869] geneve0: entered allmulticast mode [ 342.265580][T12869] vlan2: entered promiscuous mode [ 342.293527][T12869] geneve0: entered promiscuous mode [ 342.948464][T12918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1830'. [ 343.029544][T12918] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 343.035549][T12909] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 343.326431][T12909] bond11 (unregistering): Released all slaves [ 343.723714][T12942] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 343.968153][T12942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.988161][T12951] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1838'. [ 344.075975][T12945] bond7 (unregistering): Released all slaves [ 344.737504][T12947] syzkaller1: entered promiscuous mode [ 344.749583][T12947] syzkaller1: entered allmulticast mode [ 344.768916][T12967] netlink: 'syz.2.1840': attribute type 12 has an invalid length. [ 344.783778][T12952] syzkaller1: entered promiscuous mode [ 344.803139][T12952] syzkaller1: entered allmulticast mode [ 345.081734][T13012] netlink: 'syz.3.1845': attribute type 3 has an invalid length. [ 345.150286][T13000] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 345.198175][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1846'. [ 345.221878][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 345.559032][T13033] ÿ: renamed from bond_slave_0 (while UP) [ 345.847011][T13053] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 345.980988][T13053] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.091946][T13054] bond7: (slave gretap2): making interface the new active one [ 346.126544][T13054] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 346.248546][T13060] bond7 (unregistering): (slave gretap2): Releasing active interface [ 346.277850][T13060] bond7 (unregistering): Released all slaves [ 347.007661][T13106] bond7: option lacp_rate: invalid value (3) [ 347.023646][T13106] bond7 (unregistering): Released all slaves [ 347.788639][T13143] netlink: 5168 bytes leftover after parsing attributes in process `syz.1.1884'. [ 347.814318][T13143] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1884'. [ 347.836880][T13143] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1884'. [ 348.652064][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1894'. [ 348.713087][T13175] ip6gre2: entered promiscuous mode [ 348.737380][T13175] ip6gre2: entered allmulticast mode [ 348.808505][ T6339] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.833717][ T6339] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.841539][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.245255][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 240 seconds [ 349.256605][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 240 seconds [ 349.267925][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 240 seconds [ 349.279887][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 240 seconds [ 349.334443][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.418252][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1903'. [ 349.808815][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1912'. [ 349.822839][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1912'. [ 349.836293][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 349.856353][T13237] block nbd3: Unsupported socket: should be TCP or UNIX. [ 349.886416][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.976665][T13246] syz_tun: entered allmulticast mode [ 350.164035][T13256] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 350.184467][T13256] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1916'. [ 350.198736][T13256] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 350.207062][T13256] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.1916'. [ 350.540258][T13273] syz_tun: entered allmulticast mode [ 350.607605][T13272] syz_tun: left allmulticast mode [ 351.372253][T13318] netlink: 'syz.3.1934': attribute type 4 has an invalid length. [ 351.412379][T13318] netlink: 'syz.3.1934': attribute type 4 has an invalid length. [ 351.483055][T13318] netlink: 'syz.3.1934': attribute type 4 has an invalid length. [ 352.310957][T13372] netlink: 'syz.2.1949': attribute type 4 has an invalid length. [ 352.563239][T13384] netlink: 'syz.4.1952': attribute type 9 has an invalid length. [ 352.844461][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.271678][T13407] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 353.448807][T13407] bond11: option mode: invalid value (7) [ 353.499736][T13417] __nla_validate_parse: 4 callbacks suppressed [ 353.499778][T13417] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1962'. [ 353.507388][T13418] netlink: 'syz.1.1960': attribute type 30 has an invalid length. [ 353.518786][T13407] bond11 (unregistering): Released all slaves [ 353.642350][ T1174] tipc: Subscription rejected, illegal request [ 353.678687][T13422] netlink: 'syz.4.1963': attribute type 13 has an invalid length. [ 353.790172][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1963'. [ 353.860090][T13418] bond11: option arp_missed_max: invalid value (0) [ 353.871116][T13418] bond11: option arp_missed_max: allowed values 1 - 255 [ 353.884980][T13418] bond11 (unregistering): Released all slaves [ 353.998904][T13426] bond0: (slave bond_slave_0): Releasing backup interface [ 354.009814][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1964'. [ 354.111068][T13426] bond_slave_0: entered promiscuous mode [ 354.130959][T13426] bond_slave_0: entered allmulticast mode [ 354.612888][ T5792] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 354.850920][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 354.871827][T13442] macsec1: entered promiscuous mode [ 355.405717][ T811] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 355.523677][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 355.548443][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 356.007452][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 356.037225][T13501] tunl0: Caught tx_queue_len zero misconfig [ 356.056151][T13501] veth0: entered promiscuous mode [ 356.138332][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1981'. [ 356.292767][T13499] veth0: left promiscuous mode [ 356.433000][T13520] bridge6: entered allmulticast mode [ 357.032810][T13549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1991'. [ 357.153525][T13551] validate_nla: 1 callbacks suppressed [ 357.153568][T13551] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 357.549033][T13578] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 357.640713][T13586] syz_tun: entered allmulticast mode [ 357.652987][T13585] syz_tun: left allmulticast mode [ 357.841488][T13595] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 357.847950][T13595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1999'. [ 357.872177][T13595] netlink: 'syz.2.1999': attribute type 30 has an invalid length. [ 357.982357][T13561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.205930][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.479620][T13619] syzkaller0: entered promiscuous mode [ 358.487293][T13619] syzkaller0: entered allmulticast mode [ 358.599308][T13619] __nla_validate_parse: 4 callbacks suppressed [ 358.599330][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 358.757482][T13619] bond0: (slave bond_slave_1): Releasing backup interface [ 359.645440][T13672] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 360.763367][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.568747][T13672] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 364.748497][T13689] netlink: 'syz.0.2021': attribute type 4 has an invalid length. [ 365.070589][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.237651][T13674] bridge_slave_1: left allmulticast mode [ 365.250117][T13674] bridge_slave_1: left promiscuous mode [ 365.261357][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.287410][T13674] team0: Port device team_slave_0 removed [ 365.316036][T13674] team0: Port device team_slave_1 removed [ 365.725283][T13674] bond1: (slave veth3): Releasing active interface [ 365.769347][T13674] team0: Port device bridge1 removed [ 365.816784][T13674] bond3: (slave geneve3): Releasing active interface [ 365.825916][T13674] vlan2: left allmulticast mode [ 365.830939][T13674] geneve0: left allmulticast mode [ 365.836772][T13674] vlan2: left promiscuous mode [ 365.841606][T13674] geneve0: left promiscuous mode [ 365.847361][T13674] bridge0: port 1(vlan2) entered disabled state [ 365.916109][ T6349] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.953638][ T6349] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 365.984524][ T6349] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.006641][ T6349] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.075344][ T6349] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.086247][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 366.101827][ T6349] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.137199][ T6349] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.159995][ T6349] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.240435][T13746] netlink: 'syz.2.2027': attribute type 6 has an invalid length. [ 366.296114][T13754] bridge_slave_1: Caught tx_queue_len zero misconfig [ 366.315055][T13754] sch_fq: defrate 8 ignored. [ 366.426811][T13761] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2031'. [ 366.487404][T13767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2033'. [ 366.514328][T13767] sit0: left promiscuous mode [ 366.763677][ T5639] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 367.199422][T13804] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 367.285210][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 367.344881][T13804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.427959][T13816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.593035][T13816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.965417][T13835] netlink: 'syz.3.2044': attribute type 3 has an invalid length. [ 367.984924][T13835] netlink: 'syz.3.2044': attribute type 16 has an invalid length. [ 368.003258][T13835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2044'. [ 368.300869][T13841] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 368.590383][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 368.619091][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 368.890640][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 368.958178][T13885] netlink: 'syz.1.2053': attribute type 1 has an invalid length. [ 368.968949][T13869] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 369.109046][T13868] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 369.126302][T13868] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.138984][T13868] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 369.162055][T13885] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 369.371424][T13868] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 369.442988][T13868] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.457323][T13868] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 369.518426][T13903] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 369.532725][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'. [ 369.717418][T13912] bond7: (slave gretap3): making interface the new active one [ 369.747060][T13912] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 369.812384][T13868] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 369.825104][T13868] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.842326][T13868] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.039411][T13868] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 370.055968][T13868] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.067782][T13868] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 370.092456][T13931] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2064'. [ 370.285342][T13935] syz_tun: entered allmulticast mode [ 370.360362][T13932] syz_tun: left allmulticast mode [ 370.376982][ T6351] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.403399][ T6351] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.433919][ T6351] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.496428][ T6351] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.518761][ T6351] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.548870][ T6351] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.589046][T13950] netlink: 'syz.4.2070': attribute type 4 has an invalid length. [ 370.637305][T13959] veth11: entered promiscuous mode [ 370.645783][T13961] netlink: 'syz.4.2070': attribute type 4 has an invalid length. [ 370.659031][ T6323] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.668434][ T6323] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.677510][ T6323] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.687478][T13959] batadv_slave_0: Caught tx_queue_len zero misconfig [ 370.739414][ T6323] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.766351][ T6323] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.796406][ T6323] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.798973][T13964] netlink: 'syz.2.2073': attribute type 62 has an invalid length. [ 370.952945][T13970] xt_hashlimit: invalid rate [ 370.987766][T13970] syzkaller1: entered promiscuous mode [ 371.001767][T13970] syzkaller1: entered allmulticast mode [ 371.212259][T13984] __nla_validate_parse: 3 callbacks suppressed [ 371.212283][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 371.233082][T13984] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 371.292773][T13984] bond11: entered promiscuous mode [ 371.298856][T13984] 8021q: adding VLAN 0 to HW filter on device bond11 [ 371.323606][T13984] bond11: (slave bridge8): making interface the new active one [ 371.331355][T13984] bridge8: entered promiscuous mode [ 371.338008][T13984] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 371.367554][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 371.427621][T13991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2081'. [ 371.463680][T13994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2083'. [ 371.491610][T13998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2083'. [ 371.760027][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 371.858107][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 372.281155][T14032] syz_tun: entered allmulticast mode [ 372.297549][T14035] netlink: 'syz.0.2095': attribute type 1 has an invalid length. [ 372.310792][T14030] syz_tun: left allmulticast mode [ 372.342711][T14033] netlink: 'syz.3.2094': attribute type 1 has an invalid length. [ 372.516042][T14033] bond12: entered promiscuous mode [ 372.525139][T14033] bond12: entered allmulticast mode [ 372.566244][T14033] 8021q: adding VLAN 0 to HW filter on device bond12 [ 372.596208][T14037] dummy0: left promiscuous mode [ 372.650658][T14037] bond8: (slave dummy0): making interface the new active one [ 372.681085][T14037] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 372.807939][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.815746][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.840785][T14035] bond3: (slave team0): Releasing backup interface [ 372.862251][T14035] team0: left promiscuous mode [ 372.873715][T14035] team_slave_0: left promiscuous mode [ 372.879705][T14035] team_slave_1: left promiscuous mode [ 372.887765][T14035] team0: left allmulticast mode [ 372.892759][T14035] team_slave_0: left allmulticast mode [ 372.900285][T14035] team_slave_1: left allmulticast mode [ 372.914556][T14035] bond8: (slave dummy0): Releasing active interface [ 372.956687][T14035] bridge_slave_0: left allmulticast mode [ 372.964419][T14035] bridge_slave_0: left promiscuous mode [ 372.970332][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.985960][T14035] bridge_slave_1: left allmulticast mode [ 372.991736][T14035] bridge_slave_1: left promiscuous mode [ 372.999984][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.014418][T14035] bond4: (slave veth0_to_bond): Releasing backup interface [ 373.028039][T14035] bond0: (slave bond_slave_0): Releasing backup interface [ 373.048610][T14035] team0: Port device team_slave_0 removed [ 373.067371][T14035] team0: Port device team_slave_1 removed [ 373.101921][T14035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.118995][T14049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.638854][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 373.668911][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 373.787124][T14106] bond9: Removing last arp target with arp_interval on [ 374.209628][T14143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2117'. [ 374.595501][T14159] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 374.908740][T14160] bond12: (slave bridge5): making interface the new active one [ 374.930786][T14160] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 375.144384][T14199] x_tables: unsorted entry at hook 2 [ 375.357988][T14211] gre0: entered promiscuous mode [ 375.369703][T14211] gre0: entered allmulticast mode [ 376.763847][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 377.571576][T14178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.831072][T14248] __nla_validate_parse: 2 callbacks suppressed [ 377.831103][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 377.896057][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 377.927784][T14255] netlink: 'syz.4.2137': attribute type 13 has an invalid length. [ 378.457109][ T137] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 378.491159][T14269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.550601][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2143'. [ 378.703366][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.715109][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.724224][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.757542][T14294] sctp: [Deprecated]: syz.2.2149 (pid 14294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.757542][T14294] Use struct sctp_sack_info instead [ 378.792379][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 378.883123][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'. [ 379.040090][T14313] bridge0: port 1(macvlan0) entered blocking state [ 379.066233][T14314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'. [ 379.091663][T14313] bridge0: port 1(macvlan0) entered disabled state [ 379.105272][T14313] macvlan0: entered allmulticast mode [ 379.111586][T14313] veth1_vlan: entered allmulticast mode [ 379.140324][T14313] macvlan0: entered promiscuous mode [ 379.219945][T14313] bridge0: port 1(macvlan0) entered blocking state [ 379.228587][T14313] bridge0: port 1(macvlan0) entered forwarding state [ 379.328170][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 270 seconds [ 379.339527][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 270 seconds [ 379.350714][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 270 seconds [ 379.362136][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 270 seconds [ 379.530928][T14329] netlink: 'syz.0.2157': attribute type 11 has an invalid length. [ 379.546485][T14329] netlink: 'syz.0.2157': attribute type 4 has an invalid length. [ 379.585089][T14329] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2157'. [ 379.611254][T14339] netlink: 'syz.0.2157': attribute type 11 has an invalid length. [ 379.641187][T14339] netlink: 'syz.0.2157': attribute type 4 has an invalid length. [ 379.663477][T14339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2157'. [ 380.693534][T14379] gre0: left promiscuous mode [ 380.714067][T14379] gre0: left allmulticast mode [ 381.111214][T14379] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.118652][T14379] bridge0: port 1(1) entered disabled state [ 381.392544][T14379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.415773][T14379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.519524][T14379] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 381.534273][T14379] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 381.550433][T14379] gtp0: left allmulticast mode [ 381.564213][T14379] ip6gre1: left promiscuous mode [ 381.572037][T14379] ip6gre1: left allmulticast mode [ 381.610559][T14379] geneve3: left promiscuous mode [ 381.622035][T14379] geneve3: left allmulticast mode [ 381.659514][T14379] ip6tnl1: left allmulticast mode [ 381.680009][T14379] veth7: left allmulticast mode [ 381.688581][T14379] bond6: left promiscuous mode [ 381.716812][T14379] bridge3: left promiscuous mode [ 381.723641][T14379] bridge3: left allmulticast mode [ 381.835156][T14395] syzkaller0: entered promiscuous mode [ 381.856537][T14395] syzkaller0: entered allmulticast mode [ 381.977288][ T6339] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.003646][ T6339] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 382.019105][ T6339] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 382.035374][ T6339] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.061801][ T6339] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 382.080020][ T6339] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 382.106306][T14414] lo: Caught tx_queue_len zero misconfig [ 382.198014][ T6339] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.223770][ T6339] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 382.243040][ T6339] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 382.263757][ T6339] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.282955][ T6339] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 382.299508][ T6339] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 382.334775][T14422] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 382.367278][T14425] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2175'. [ 382.578014][T14437] netlink: 'syz.1.2178': attribute type 1 has an invalid length. [ 382.608016][T14437] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2178'. [ 382.838465][T14446] __nla_validate_parse: 2 callbacks suppressed [ 382.838485][T14446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2179'. [ 385.793029][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.087588][T14472] veth1_to_bridge: entered allmulticast mode [ 386.140628][T14481] vlan3: entered promiscuous mode [ 386.150191][T14481] bridge0: entered promiscuous mode [ 386.390283][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'. [ 386.412624][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'. [ 386.485335][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'. [ 386.530040][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'. [ 386.583756][T14498] netlink: 'syz.0.2197': attribute type 3 has an invalid length. [ 386.709073][T14505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2199'. [ 387.005888][T14516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2203'. [ 387.028664][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2203'. [ 387.053334][T14516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2203'. [ 387.169634][T14513] bond10: Unable to set up delay as MII monitoring is disabled [ 387.208523][T14513] bond10 (unregistering): Released all slaves [ 387.280153][T14529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2204'. [ 387.475819][T14527] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 387.500333][T14527] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 387.530681][T14529] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 387.726272][T14553] netlink: 'syz.2.2210': attribute type 1 has an invalid length. [ 387.790159][T14553] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 387.995307][T14567] syzkaller0: entered promiscuous mode [ 388.018240][T14567] syzkaller0: entered allmulticast mode [ 388.141344][T14569] __nla_validate_parse: 4 callbacks suppressed [ 388.141369][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 388.271166][T14584] syzkaller1: entered promiscuous mode [ 388.277888][T14584] syzkaller1: entered allmulticast mode [ 388.290903][T14584] netlink: 'syz.3.2218': attribute type 1 has an invalid length. [ 388.300056][T14584] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2218'. [ 388.500863][T14592] netlink: 'syz.1.2220': attribute type 2 has an invalid length. [ 388.524282][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 388.567534][T14594] netlink: 'syz.3.2222': attribute type 15 has an invalid length. [ 388.581932][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2222'. [ 389.011365][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 391.311483][T14608] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 391.355689][T14615] bridge_slave_1: left allmulticast mode [ 391.373261][T14615] bridge_slave_1: left promiscuous mode [ 391.380674][T14615] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.399076][T14615] : left allmulticast mode [ 391.408174][T14615] : left promiscuous mode [ 391.415772][T14615] bridge0: port 1(1) entered disabled state [ 391.710284][T14634] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2232'. [ 391.734101][T14633] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2232'. [ 391.787450][T14638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2234'. [ 392.048889][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 392.206255][T14656] netlink: 'syz.2.2241': attribute type 10 has an invalid length. [ 392.219026][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'. [ 392.321911][T14655] bond13: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 392.349336][T14655] bond13 (unregistering): Released all slaves [ 392.442751][T14656] ipvlan0: entered allmulticast mode [ 392.451903][T14656] veth0_vlan: entered allmulticast mode [ 392.474741][T14656] team0: Device ipvlan0 failed to register rx_handler [ 393.195834][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'. [ 393.208558][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 393.221553][T14703] lo: entered allmulticast mode [ 393.245094][T14703] lo: left allmulticast mode [ 393.380779][T14710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.479089][T14712] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 393.649057][T14712] 8021q: adding VLAN 0 to HW filter on device bond13 [ 393.738710][T14714] vlan7: entered promiscuous mode [ 393.757700][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'. [ 393.758568][T14714] bond13: entered promiscuous mode [ 393.816878][T14714] vlan7: entered allmulticast mode [ 393.834843][T14714] bond13: entered allmulticast mode [ 394.078213][T14745] nbd: must specify an index to disconnect [ 394.719697][T14776] team0: Device vxcan1 is of different type [ 394.828263][T14776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.862409][T14790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2285'. [ 394.896336][T14790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2285'. [ 395.338366][T14812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.369383][T14820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2287'. [ 395.680747][T14829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2293'. [ 395.696724][T14827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2292'. [ 395.852230][T14827] syzkaller0: entered promiscuous mode [ 395.852407][T14832] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 395.864981][T14827] syzkaller0: entered allmulticast mode [ 396.038479][T13724] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 396.120158][T14831] netlink: 'syz.1.2294': attribute type 46 has an invalid length. [ 396.187347][T13724] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 396.215610][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2298'. [ 396.908522][T14869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2306'. [ 399.039499][T14873] netlink: 'syz.4.2305': attribute type 1 has an invalid length. [ 399.239039][T14897] __nla_validate_parse: 1 callbacks suppressed [ 399.239060][T14897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2311'. [ 399.638307][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 400.508734][T14938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2321'. [ 400.628980][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 402.132057][T14889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.406109][T14959] netlink: 'syz.0.2328': attribute type 21 has an invalid length. [ 402.430218][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 402.462910][T14959] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 403.231899][T15005] netlink: 1327 bytes leftover after parsing attributes in process `syz.0.2341'. [ 403.260875][T15005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2341'. [ 403.439122][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2341'. [ 403.494100][T15011] tc_dump_action: action bad kind [ 403.542130][T14994] netlink: 'syz.3.2337': attribute type 9 has an invalid length. [ 403.734809][T15026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2345'. [ 403.775162][T15024] dvmrp8: entered allmulticast mode [ 403.854449][T15026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.941882][T15030] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2348'. [ 404.036919][T15031] veth14: entered allmulticast mode [ 404.332361][T15059] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 404.418332][T15059] bond9: entered promiscuous mode [ 404.435756][T15059] 8021q: adding VLAN 0 to HW filter on device bond9 [ 404.519893][T15059] 8021q: adding VLAN 0 to HW filter on device bond9 [ 404.538515][T15059] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 404.567114][T15059] bond9: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 404.598480][T15059] bond9: (slave gre2): making interface the new active one [ 404.606381][T15059] gre2: entered promiscuous mode [ 404.616059][T15059] bond9: (slave gre2): Enslaving as an active interface with an up link [ 404.660657][T15075] syzkaller0: entered promiscuous mode [ 404.675683][T15075] syzkaller0: entered allmulticast mode [ 405.178606][T15107] __nla_validate_parse: 1 callbacks suppressed [ 405.178629][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2365'. [ 405.200758][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2365'. [ 405.397323][T15121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2366'. [ 405.429911][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2366'. [ 405.500528][T15128] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 405.594789][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 405.598521][T15134] netlink: 'syz.1.2373': attribute type 13 has an invalid length. [ 405.611961][T15134] netlink: 'syz.1.2373': attribute type 27 has an invalid length. [ 405.646355][T15128] bond10: entered promiscuous mode [ 405.652066][T15128] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.670001][T15131] bond10: entered allmulticast mode [ 405.785857][T15125] bond10: (slave bridge6): making interface the new active one [ 405.801553][T15137] sctp: [Deprecated]: syz.1.2374 (pid 15137) Use of int in max_burst socket option. [ 405.801553][T15137] Use struct sctp_assoc_value instead [ 405.827759][T15125] bridge6: entered promiscuous mode [ 405.844498][T15125] bridge6: entered allmulticast mode [ 405.857273][T15125] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 406.330645][T15156] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2381'. [ 406.369512][T15153] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2380'. [ 406.422730][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 406.771669][T15173] batadv_slave_1: entered promiscuous mode [ 406.796638][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'. [ 406.952807][T15184] nbd: nbd2 already in use [ 407.010349][T15173] batadv_slave_1 (unregistering): left promiscuous mode [ 407.534394][T15178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2387'. [ 407.664859][T15203] syzkaller0: entered promiscuous mode [ 407.677065][T15203] syzkaller0: entered allmulticast mode [ 408.763411][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 409.050869][T15264] lo: Caught tx_queue_len zero misconfig [ 409.407414][ T1638] block nbd4: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 300 seconds [ 409.418661][ T1638] block nbd4: Possible stuck request ffff8880270601c0: control (read@1024,1024B). Runtime 300 seconds [ 409.430626][ T1638] block nbd4: Possible stuck request ffff888027060380: control (read@2048,1024B). Runtime 300 seconds [ 409.443424][ T1638] block nbd4: Possible stuck request ffff888027060540: control (read@3072,1024B). Runtime 300 seconds [ 409.627755][T15284] can: request_module (can-proto-3) failed. [ 409.745281][T15298] syzkaller0: entered promiscuous mode [ 409.785302][T15298] syzkaller0: entered allmulticast mode [ 409.871976][T15297] tipc: Enabling of bearer rejected, already enabled [ 410.425261][T15320] __nla_validate_parse: 6 callbacks suppressed [ 410.425281][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 410.638757][T13722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.894904][T13722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.074886][T15318] syzkaller0: entered promiscuous mode [ 411.091082][T15318] syzkaller0: entered allmulticast mode [ 411.352124][T15358] x_tables: duplicate underflow at hook 1 [ 411.510934][T15365] netlink: 'syz.3.2425': attribute type 2 has an invalid length. [ 411.817489][T13724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.249387][T15379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2429'. [ 414.338512][T15379] gretap1: entered allmulticast mode [ 414.522859][T15399] netlink: 'syz.1.2435': attribute type 3 has an invalid length. [ 414.805407][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2439'. [ 414.851037][T15415] netlink: 'syz.4.2439': attribute type 4 has an invalid length. [ 414.901203][T15422] block nbd0: reconnected socket [ 414.920803][T15422] nbd: socks must be embedded in a SOCK_ITEM attr [ 414.961511][T15423] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 414.961922][ T4939] block nbd0: Receive control failed (result -32) [ 415.083042][T15428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.203463][T15438] sctp: [Deprecated]: syz.3.2448 (pid 15438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.203463][T15438] Use struct sctp_sack_info instead [ 415.394432][T15446] tipc: Enabled bearer , priority 25 [ 415.460195][T15454] netlink: 'syz.0.2455': attribute type 13 has an invalid length. [ 415.478799][T15454] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2455'. [ 415.508607][T15454] syz_tun: refused to change device tx_queue_len [ 415.527424][T15454] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 416.009192][T15492] Cannot find add_set index 1 as target [ 416.056622][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2464'. [ 416.543042][T15510] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 416.577991][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 416.803710][T15519] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 417.040584][T15525] ÿ: renamed from bond_slave_0 [ 417.392737][T15535] netlink: 'syz.2.2476': attribute type 1 has an invalid length. [ 417.518034][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 417.549258][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2476'. [ 417.585652][T15539] bond10: (slave geneve5): making interface the new active one [ 417.601947][T15539] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 417.637611][T15535] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.677451][ T6351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 417.714837][ T6351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 417.789658][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 417.800193][T15556] xt_TCPMSS: Only works on TCP SYN packets [ 417.908994][ T6351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 417.918398][ T6351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 417.975895][T15560] syzkaller0: entered promiscuous mode [ 417.981689][T15560] syzkaller0: entered allmulticast mode [ 417.989200][T15555] macvlan0: left allmulticast mode [ 417.999001][T15555] veth1_vlan: left allmulticast mode [ 418.005950][T15555] bridge0: port 1(macvlan0) entered disabled state [ 418.027353][T15555] bridge_slave_1: left promiscuous mode [ 418.037573][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.015420][T15583] netlink: 'syz.3.2486': attribute type 1 has an invalid length. [ 421.031772][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 421.033775][T15583] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2486'. [ 421.042976][T15588] ip6tnl0: Caught tx_queue_len zero misconfig [ 421.091937][T15591] netlink: 'syz.0.2489': attribute type 4 has an invalid length. [ 421.110731][T15591] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2489'. [ 421.166383][T15593] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2488'. [ 421.177321][T15591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.402628][T15606] netlink: 'syz.1.2494': attribute type 4 has an invalid length. [ 421.538749][T15611] netlink: 'syz.2.2496': attribute type 19 has an invalid length. [ 421.547401][T15611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2496'. [ 421.710132][T15619] can: request_module (can-proto-0) failed. [ 421.716992][T15622] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 421.847883][T15622] 8021q: adding VLAN 0 to HW filter on device bond11 [ 421.885820][T15629] bond4: (slave dummy0): Releasing active interface [ 421.951240][T15629] bond11: (slave dummy0): making interface the new active one [ 421.960831][T15629] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 422.186858][T15644] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2506'. [ 422.385896][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 422.409735][T15660] tipc: Enabled bearer , priority 0 [ 422.439114][T15660] syzkaller0: entered promiscuous mode [ 422.453338][T15660] syzkaller0: entered allmulticast mode [ 422.621843][T15671] netlink: 'syz.4.2511': attribute type 4 has an invalid length. [ 422.756531][ T4939] Bluetooth: hci4: link tx timeout [ 422.767840][ T4939] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 422.930855][T15690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2517'. [ 422.962943][T15691] bond0: entered promiscuous mode [ 422.969765][T15691] batadv0: entered promiscuous mode [ 422.976573][T15691] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 422.987209][T15691] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 423.000800][T15691] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 423.012919][T15691] bond0: left promiscuous mode [ 423.019625][T15691] batadv0: left promiscuous mode [ 423.041812][T15692] bond0: entered promiscuous mode [ 423.048106][T15692] batadv0: entered promiscuous mode [ 423.055319][T15692] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 423.066463][T15692] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 423.086179][T15692] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 423.094439][T15692] bond0: left promiscuous mode [ 423.100207][T15692] batadv0: left promiscuous mode [ 423.119626][T15650] tipc: Resetting bearer [ 423.139058][T15650] tipc: Disabling bearer [ 423.189412][T15653] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 423.351256][T15699] bridge0: port 4(syz_tun) entered blocking state [ 423.359402][T15699] bridge0: port 4(syz_tun) entered disabled state [ 423.369227][T15699] syz_tun: entered promiscuous mode [ 423.378062][T15699] bridge0: port 4(syz_tun) entered blocking state [ 423.384633][T15699] bridge0: port 4(syz_tun) entered forwarding state [ 423.892726][T15726] netlink: 'syz.0.2528': attribute type 2 has an invalid length. [ 423.927528][T15726] netlink: 'syz.0.2528': attribute type 8 has an invalid length. [ 423.941285][T15724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.962076][T15726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2528'. [ 423.991633][T15729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.038708][T15726] netlink: 'syz.0.2528': attribute type 2 has an invalid length. [ 424.060284][T15726] netlink: 'syz.0.2528': attribute type 8 has an invalid length. [ 424.073530][T15726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2528'. [ 424.262029][T15741] veth0: entered promiscuous mode [ 424.844130][ T4939] Bluetooth: hci4: command 0x0405 tx timeout [ 424.867448][ T5639] [ 424.869846][ T5639] ====================================================== [ 424.876915][ T5639] WARNING: possible circular locking dependency detected [ 424.884023][ T5639] syzkaller #0 Not tainted [ 424.888891][ T5639] ------------------------------------------------------ [ 424.895981][ T5639] kworker/u9:7/5639 is trying to acquire lock: [ 424.902234][ T5639] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 424.911279][ T5639] [ 424.911279][ T5639] but task is already holding lock: [ 424.918659][ T5639] ffffffff8f5f5880 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 424.927330][ T5639] [ 424.927330][ T5639] which lock already depends on the new lock. [ 424.927330][ T5639] [ 424.937741][ T5639] [ 424.937741][ T5639] the existing dependency chain (in reverse order) is: [ 424.946929][ T5639] [ 424.946929][ T5639] -> #8 (dpm_list_mtx){+.+.}-{4:4}: [ 424.954384][ T5639] __mutex_lock+0x19d/0x1550 [ 424.959649][ T5639] device_pm_add+0x7d/0x350 [ 424.964789][ T5639] device_add+0x4eb/0xb80 [ 424.969764][ T5639] device_create+0x269/0x300 [ 424.974877][ T5639] msr_device_create+0x33/0x50 [ 424.980200][ T5639] cpuhp_invoke_callback+0x434/0x810 [ 424.986113][ T5639] cpuhp_thread_fun+0x362/0x780 [ 424.991485][ T5639] smpboot_thread_fn+0x57c/0xa80 [ 424.996946][ T5639] kthread+0x388/0x470 [ 425.001541][ T5639] ret_from_fork+0x514/0xb70 [ 425.006688][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.011990][ T5639] [ 425.011990][ T5639] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 425.019567][ T5639] cpuhp_thread_fun+0x127/0x780 [ 425.025051][ T5639] smpboot_thread_fn+0x57c/0xa80 [ 425.030526][ T5639] kthread+0x388/0x470 [ 425.035127][ T5639] ret_from_fork+0x514/0xb70 [ 425.040361][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.045645][ T5639] [ 425.045645][ T5639] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 425.053381][ T5639] cpus_read_lock+0x42/0x160 [ 425.058491][ T5639] static_key_slow_inc+0x12/0x30 [ 425.063984][ T5639] nbd_genl_reconfigure+0x1301/0x1e80 [ 425.069955][ T5639] genl_family_rcv_msg_doit+0x233/0x340 [ 425.076132][ T5639] genl_rcv_msg+0x614/0x7a0 [ 425.081256][ T5639] netlink_rcv_skb+0x226/0x4a0 [ 425.086562][ T5639] genl_rcv+0x28/0x40 [ 425.091069][ T5639] netlink_unicast+0x7bb/0x940 [ 425.096536][ T5639] netlink_sendmsg+0x813/0xb40 [ 425.101822][ T5639] sock_sendmsg_nosec+0x13a/0x180 [ 425.107531][ T5639] ____sys_sendmsg+0x54e/0x850 [ 425.113022][ T5639] ___sys_sendmsg+0x2a5/0x360 [ 425.118226][ T5639] __x64_sys_sendmsg+0x1b1/0x290 [ 425.123694][ T5639] do_syscall_64+0x174/0x580 [ 425.128848][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.135289][ T5639] [ 425.135289][ T5639] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 425.142951][ T5639] __mutex_lock+0x19d/0x1550 [ 425.148094][ T5639] nbd_queue_rq+0x373/0x1150 [ 425.153225][ T5639] blk_mq_dispatch_rq_list+0x499/0x1990 [ 425.159395][ T5639] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 425.166303][ T5639] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 425.172845][ T5639] blk_mq_run_work_fn+0x16c/0x300 [ 425.178425][ T5639] process_scheduled_works+0xa8e/0x14e0 [ 425.184509][ T5639] worker_thread+0xa47/0xfb0 [ 425.189624][ T5639] kthread+0x388/0x470 [ 425.194254][ T5639] ret_from_fork+0x514/0xb70 [ 425.199393][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.204695][ T5639] [ 425.204695][ T5639] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 425.211919][ T5639] __mutex_lock+0x19d/0x1550 [ 425.217045][ T5639] nbd_queue_rq+0xc1/0x1150 [ 425.222080][ T5639] blk_mq_dispatch_rq_list+0x499/0x1990 [ 425.228153][ T5639] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 425.235082][ T5639] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 425.241587][ T5639] blk_mq_run_work_fn+0x16c/0x300 [ 425.247148][ T5639] process_scheduled_works+0xa8e/0x14e0 [ 425.253215][ T5639] worker_thread+0xa47/0xfb0 [ 425.258325][ T5639] kthread+0x388/0x470 [ 425.263004][ T5639] ret_from_fork+0x514/0xb70 [ 425.268145][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.273450][ T5639] [ 425.273450][ T5639] -> #3 (set->srcu){.+.+}-{0:0}: [ 425.280607][ T5639] __synchronize_srcu+0xc9/0x2f0 [ 425.286106][ T5639] elevator_switch+0x1e8/0x7b0 [ 425.291439][ T5639] elevator_change+0x2fa/0x480 [ 425.296730][ T5639] elevator_set_default+0x375/0x440 [ 425.302624][ T5639] blk_register_queue+0x3f3/0x4e0 [ 425.308209][ T5639] __add_disk+0x6cb/0xe30 [ 425.313084][ T5639] add_disk_fwnode+0xfb/0x4b0 [ 425.318290][ T5639] nbd_dev_add+0x733/0xb60 [ 425.323240][ T5639] nbd_init+0x15f/0x1e0 [ 425.328038][ T5639] do_one_initcall+0x250/0x870 [ 425.333335][ T5639] do_initcall_level+0x10a/0x1a0 [ 425.338837][ T5639] do_initcalls+0x59/0xa0 [ 425.343778][ T5639] kernel_init_freeable+0x29d/0x3e0 [ 425.349509][ T5639] kernel_init+0x1d/0x1d0 [ 425.354360][ T5639] ret_from_fork+0x514/0xb70 [ 425.359480][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.365767][ T5639] [ 425.365767][ T5639] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 425.373593][ T5639] __mutex_lock+0x19d/0x1550 [ 425.378732][ T5639] elevator_change+0x1af/0x480 [ 425.384047][ T5639] elevator_set_none+0xb5/0x140 [ 425.389515][ T5639] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 425.395880][ T5639] nbd_start_device+0x189/0xb30 [ 425.401269][ T5639] nbd_genl_connect+0x1597/0x1c10 [ 425.406917][ T5639] genl_family_rcv_msg_doit+0x233/0x340 [ 425.413108][ T5639] genl_rcv_msg+0x614/0x7a0 [ 425.418152][ T5639] netlink_rcv_skb+0x226/0x4a0 [ 425.423463][ T5639] genl_rcv+0x28/0x40 [ 425.427990][ T5639] netlink_unicast+0x7bb/0x940 [ 425.433319][ T5639] netlink_sendmsg+0x813/0xb40 [ 425.438633][ T5639] sock_sendmsg_nosec+0x13a/0x180 [ 425.444188][ T5639] ____sys_sendmsg+0x54e/0x850 [ 425.449578][ T5639] ___sys_sendmsg+0x2a5/0x360 [ 425.454790][ T5639] __x64_sys_sendmsg+0x1b1/0x290 [ 425.460264][ T5639] do_syscall_64+0x174/0x580 [ 425.465392][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.471815][ T5639] [ 425.471815][ T5639] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 425.480481][ T5639] blk_alloc_queue+0x544/0x690 [ 425.485796][ T5639] __blk_mq_alloc_disk+0x194/0x390 [ 425.491437][ T5639] nbd_dev_add+0x494/0xb60 [ 425.496387][ T5639] nbd_init+0x15f/0x1e0 [ 425.501067][ T5639] do_one_initcall+0x250/0x870 [ 425.506361][ T5639] do_initcall_level+0x10a/0x1a0 [ 425.511834][ T5639] do_initcalls+0x59/0xa0 [ 425.516788][ T5639] kernel_init_freeable+0x29d/0x3e0 [ 425.522537][ T5639] kernel_init+0x1d/0x1d0 [ 425.527394][ T5639] ret_from_fork+0x514/0xb70 [ 425.532516][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.537981][ T5639] [ 425.537981][ T5639] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 425.545294][ T5639] __lock_acquire+0x1520/0x2cf0 [ 425.550690][ T5639] lock_acquire+0x106/0x350 [ 425.555719][ T5639] fs_reclaim_acquire+0x71/0x100 [ 425.561193][ T5639] __kmalloc_noprof+0xbc/0x720 [ 425.566482][ T5639] kobject_get_path+0xc5/0x2f0 [ 425.572030][ T5639] kobject_move+0x2fa/0x720 [ 425.577088][ T5639] device_move+0xe0/0x720 [ 425.582058][ T5639] hci_conn_del_sysfs+0xb8/0x1a0 [ 425.587707][ T5639] hci_conn_del+0xc3d/0x1200 [ 425.592849][ T5639] hci_abort_conn_sync+0xdd0/0x1190 [ 425.598620][ T5639] hci_cmd_sync_work+0x20b/0x3f0 [ 425.604200][ T5639] process_scheduled_works+0xa8e/0x14e0 [ 425.610367][ T5639] worker_thread+0xa47/0xfb0 [ 425.615479][ T5639] kthread+0x388/0x470 [ 425.620074][ T5639] ret_from_fork+0x514/0xb70 [ 425.625277][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.630563][ T5639] [ 425.630563][ T5639] other info that might help us debug this: [ 425.630563][ T5639] [ 425.640898][ T5639] Chain exists of: [ 425.640898][ T5639] fs_reclaim --> cpuhp_state-up --> dpm_list_mtx [ 425.640898][ T5639] [ 425.653269][ T5639] Possible unsafe locking scenario: [ 425.653269][ T5639] [ 425.660794][ T5639] CPU0 CPU1 [ 425.666282][ T5639] ---- ---- [ 425.671744][ T5639] lock(dpm_list_mtx); [ 425.676038][ T5639] lock(cpuhp_state-up); [ 425.683000][ T5639] lock(dpm_list_mtx); [ 425.689725][ T5639] lock(fs_reclaim); [ 425.693713][ T5639] [ 425.693713][ T5639] *** DEADLOCK *** [ 425.693713][ T5639] [ 425.702023][ T5639] 5 locks held by kworker/u9:7/5639: [ 425.707315][ T5639] #0: ffff88807e9b6140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 425.718151][ T5639] #1: ffffc90003aafc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 425.730679][ T5639] #2: ffff8880289fcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 425.740529][ T5639] #3: ffff8880289fc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 425.750280][ T5639] #4: ffffffff8f5f5880 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 425.759256][ T5639] [ 425.759256][ T5639] stack backtrace: [ 425.765939][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 425.765964][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 425.765976][ T5639] Workqueue: hci4 hci_cmd_sync_work [ 425.766008][ T5639] Call Trace: [ 425.766017][ T5639] [ 425.766101][ T5639] dump_stack_lvl+0xe8/0x150 [ 425.766165][ T5639] print_circular_bug+0x2e1/0x300 [ 425.766182][ T5639] check_noncircular+0x12e/0x150 [ 425.766208][ T5639] __lock_acquire+0x1520/0x2cf0 [ 425.766232][ T5639] ? __bfs+0x153/0x290 [ 425.766269][ T5639] ? __pfx_hlock_conflict+0x10/0x10 [ 425.766285][ T5639] ? __kmalloc_noprof+0xbc/0x720 [ 425.766303][ T5639] lock_acquire+0x106/0x350 [ 425.766321][ T5639] ? __kmalloc_noprof+0xbc/0x720 [ 425.766340][ T5639] ? lockdep_unlock+0x5d/0xd0 [ 425.766356][ T5639] ? __lock_acquire+0x13e8/0x2cf0 [ 425.766378][ T5639] fs_reclaim_acquire+0x71/0x100 [ 425.766396][ T5639] ? __kmalloc_noprof+0xbc/0x720 [ 425.766413][ T5639] __kmalloc_noprof+0xbc/0x720 [ 425.766431][ T5639] ? get_device_parent+0x20d/0x3a0 [ 425.766454][ T5639] ? kobject_get_path+0xc5/0x2f0 [ 425.766477][ T5639] ? kobject_get_path+0xc5/0x2f0 [ 425.766494][ T5639] kobject_get_path+0xc5/0x2f0 [ 425.766511][ T5639] kobject_move+0x2fa/0x720 [ 425.766527][ T5639] ? __pfx_kobject_move+0x10/0x10 [ 425.766541][ T5639] ? do_raw_spin_unlock+0xf5/0x210 [ 425.766558][ T5639] ? get_device_parent+0x366/0x3a0 [ 425.766582][ T5639] device_move+0xe0/0x720 [ 425.766598][ T5639] hci_conn_del_sysfs+0xb8/0x1a0 [ 425.766621][ T5639] hci_conn_del+0xc3d/0x1200 [ 425.766640][ T5639] ? hci_abort_conn_sync+0xa7b/0x1190 [ 425.766658][ T5639] hci_abort_conn_sync+0xdd0/0x1190 [ 425.766679][ T5639] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 425.766698][ T5639] ? abort_conn_sync+0x26/0x210 [ 425.766720][ T5639] ? abort_conn_sync+0x26/0x210 [ 425.766739][ T5639] ? abort_conn_sync+0x19c/0x210 [ 425.766758][ T5639] ? __pfx_abort_conn_sync+0x10/0x10 [ 425.766779][ T5639] hci_cmd_sync_work+0x20b/0x3f0 [ 425.766804][ T5639] ? process_scheduled_works+0xa20/0x14e0 [ 425.766820][ T5639] process_scheduled_works+0xa8e/0x14e0 [ 425.766846][ T5639] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.766864][ T5639] ? assign_work+0x3cf/0x5d0 [ 425.766881][ T5639] worker_thread+0xa47/0xfb0 [ 425.766908][ T5639] kthread+0x388/0x470 [ 425.766928][ T5639] ? __pfx_worker_thread+0x10/0x10 [ 425.766944][ T5639] ? __pfx_kthread+0x10/0x10 [ 425.766964][ T5639] ret_from_fork+0x514/0xb70 [ 425.766987][ T5639] ? __pfx_ret_from_fork+0x10/0x10 [ 425.767008][ T5639] ? __switch_to+0xc89/0x1420 [ 425.767026][ T5639] ? __pfx_kthread+0x10/0x10 [ 425.767046][ T5639] ret_from_fork_asm+0x1a/0x30 [ 425.767065][ T5639] [ 426.172418][T15772] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 426.215588][T15772] __nla_validate_parse: 8 callbacks suppressed [ 426.215610][T15772] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2540'. [ 426.278369][T15785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2541'.