last executing test programs: 6.311061943s ago: executing program 3 (id=5444): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$802154_dgram(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000280)={&(0x7f0000000240)="9db0082fc296f88d736d9be1f83ceddb312ca6e1822eff107652fc6441c789c9f294e9", 0x23}, 0x1, 0x0, 0x0, 0x8040}, 0x10) ppoll(&(0x7f0000000180)=[{r0, 0x1080}, {r0, 0x4}, {r0, 0x4000}, {r1, 0x20}, {r0, 0x90}, {r0, 0x2008}], 0x6, &(0x7f00000001c0), &(0x7f0000000340)={[0x10000]}, 0x8) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) gettid() r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000140)={&(0x7f00000002c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)}, 0x40004) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "09ea050d"}]}], {0x14}}, 0x70}}, 0x40) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x5, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYBLOB="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"]) 3.13692287s ago: executing program 4 (id=5477): r0 = socket$inet6(0xa, 0x3, 0x7) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x3, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4e044}, 0x4010) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x10) close(r1) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async, rerun: 32) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) (rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c000cc00400020208000600030001001400030007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}], 0x2}, 0xc}], 0x1, 0x40010042, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000080000000700000000060000", @ANYRES32, @ANYBLOB='\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000240), &(0x7f0000000140)=r6}, 0x20) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (async, rerun: 64) unshare(0x2c020400) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000002c0)={0x6, 'ip6gre0\x00', {0x200}, 0x8001}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdced680c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) 2.999575003s ago: executing program 4 (id=5481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004ffd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x2090) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000100)="7ab56058645f45546e7076e884c246fa3649df4896b2cbf1487d60e8ce82d50727a14a1d97839ac8c47753ccfc4d3a4aac8702c917c944b80ab073edfbaff1d99840afa0fd9c0e2ed1abc877548d3815b2977402ae7f6752b1557c1f13d10083cf1ecfb186ce6725c0d32267710b4899fb856b985fd31b7ba98cec36dac30175ea80f2dfb558a411071ca299049df3b6e3e1f37fa7443f6ee9dbd0a22cbdcb4987bf33a6932d08fbc69707e7e9d78052c0813d2960a2fd51f8a842a565ac7960de979fc183c1f26ddc4c2d69b6630133342d7b7884c457e786f81ee77e8dc7cce363762ac502c5baa5db2b1278eaffb7a0211f1691dd3f127dde179e3fe5142a44f0c787fe81d6e7b09be83c67fbc229d608fd63400abb013dad32d5aa118321e7aec45131b62ce2b8cdc85556520070a9709812d152c72bbe", 0x139, 0x4c014, &(0x7f0000000080)={0xa, 0x0, 0xfffffff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 2.628541951s ago: executing program 3 (id=5488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30a7000002060101000000000000000000000000010000000a000000090002008d001f106f194eb305000100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={r1, &(0x7f0000000140)='\x00', 0x802, &(0x7f00000001c0)={@align=0x57b, {0x43c7, 0x13, 0x7fff, 0xfffffffffffffffb}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xea}) sendmsg$rds(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000680)=""/24, 0x18}], 0x5, &(0x7f00000007c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7fff, 0x7ff}, &(0x7f0000000740)=0x5, &(0x7f0000000780)=0x81, 0x9, 0x3, 0x6, 0xfffffffffffff1d3, 0x8, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x80000000, 0x1}}], 0x70}, 0x0) 2.471597585s ago: executing program 3 (id=5491): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x308, 0x30, 0x20, 0x0, 0x25dfdbfc, {}, [{0x2f4, 0x1, [@m_simple={0x184, 0x3, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x6, 0x2, 0xada}}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0xd, 0x4, 0x2, 0xdd6}}, @TCA_DEF_DATA={0xc, 0x3, 'skbedit\x00'}, @TCA_DEF_DATA={0x6, 0x3, '#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x54c1cc08, 0xfffffff4, 0x2, 0x4, 0x1}}, @TCA_DEF_DATA={0x9, 0x3, 'csum\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x8, 0x10000000, 0xbc5, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x6}}, @TCA_DEF_DATA={0x9, 0x3, 'csum\x00'}]}, {0xb3, 0x6, "ff5a8187f496b58cc1608e1de867117f43921b54a532bf9ab48e56cc62a0dbbc1ebc601f15c8f226aa604710ce1acd4a84083c3e3ac67d5321f5260964a43eb3e13f0cb55d4d482d18cf8a82b6c2b29c8cbcf061d6a34118b71f6a3fbbc437f3488fd676a8b2201a5026eb11d262866dd1298c9048d086b066e612263cd024fcc9439a2ff5706338369584e29c2eae4299bbb7b8de90cf080759f2980241a54df3662d4e4d80031cf9dddf96cf0ba9"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x16c, 0x20, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x685c06e, 0x4, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0xe6, 0x6, "b21606c1584e87357d3d3321c22173828395c05ea5bc99fba3f06d91ef4648cd763945d17fcb183493d8684392106da381e131f5ea627f93688fd38c3e33a5a0330759989caf06e8567e0cebefeac3240ce4f03eb9930948f29e6a543be0987760b29d2fa39a49cdc76f3dc20a6f7319ca4dd27b98906cdbb100d3026b023b35a364dbb56f81e4036543fefed72832b2e816f6f1b8038f74f3cd950a49903ee54a80d2c247ff279d4a455d27242053cbc6b77874df199964a5f36fb711fee6f9bc0a1e97840b72f2bb66e84e6f8dbc874c685891b1d3986c297850248843822fde4c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) getsockopt(r0, 0x6, 0x4, &(0x7f0000000180)=""/44, &(0x7f00000001c0)=0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x9, 0x8006, 0x6e2, 0x617, 0x101, 0xa5e, 0x6, r12}, &(0x7f00000001c0)=0x20) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r1, &(0x7f0000000000)='simple\x00', 0x400, &(0x7f0000000040)={@_ha_fsid={[0x7fffffff, 0x1000]}, {0xa647, 0xfff, 0x4, 0x7}}, 0x18, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0xb917}) 2.468749475s ago: executing program 4 (id=5492): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@bridge_getneigh={0x334, 0x1e, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x48012, 0x2}, [@IFLA_WEIGHT={0x8, 0xf, 0xfffffff7}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x4}, {0x8, 0x19, 0x0, 0x0, 0x401}, {0x8, 0x1a, 0x0, 0x0, 0x4000000}, {0x8, 0x1f, 0x0, 0x0, 0x9}, {0x8, 0x3}, {0x8, 0x18, 0x0, 0x0, 0xf8000000}, {0x8, 0x11, 0x0, 0x0, 0x8001}, {0x8, 0x16, 0x0, 0x0, 0x2}, {0x8, 0x19, 0x0, 0x0, 0xa}]}}]}, @IFLA_MAP={0x24, 0xe, {0xc, 0x7d4, 0x1, 0x10, 0x3, 0x7}}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_VFINFO_LIST={0x260, 0x16, 0x0, 0x1, [{0x4}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x400, 0x2, 0x2}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xb, 0xe36, 0xdd3, 0x8100}}, {0x14, 0x1, {0x1, 0xe31, 0x10000, 0x88a8}}, {0x14, 0x1, {0x200081, 0x5c9, 0x5, 0x8100}}, {0x14, 0x1, {0x8, 0x9cc, 0x8, 0x8100}}, {0x14, 0x1, {0x1, 0xd1a, 0x4, 0x88a8}}]}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x8}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xb}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x5, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @broadcast}}, @IFLA_VF_TRUST={0xc, 0x9, {0xffffff1f, 0xfffffffe}}, @IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0xe1b}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x7a8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xeba, 0x80000000}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffffff, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xbffffff7}}, @IFLA_VF_MAC={0x28, 0x1, {0x32afe3bd, @local}}, @IFLA_VF_TRUST={0xc, 0x9, {0xc, 0xa5b}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5, 0x2}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x7ff, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0xf7, 0x0, 0x80000001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x0, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffff6, 0x1}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x779, 0x101}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0xff, 0x1a78}}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x20041}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bind$bt_hci(r6, &(0x7f0000000440)={0x1f, 0x4, 0x5}, 0x6) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="00ceaa7000cb8a0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet6(r12, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 2.204648963s ago: executing program 4 (id=5496): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/176, 0xb0, 0x0, &(0x7f00000000c0)=""/206, 0xce}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x90002, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="10c9d6995e927fe7a7247de9fc6ea0b5590a9bdaf55353e8cddc13fe7d1fb06c9113e7d32525aef94ac01ffac55c17eb0f3ff2b153ccf7cf885a802234efb9f2b8040b5f49d43cd89d548f9215dae098a884bd5be6eb8f40b9631beb992d915862b5ef79215671c30f169891a2a1221331e0eb0800b44519fd1cbabc70985d0f5db0dbd1e68225de008ff97d20595e7a1b68edbd3b005d0c3443b6a93671bfdc1004072dba1f92b0b60a06e3a284e9772322eb55b89ec12e83a7fb19aaf7d68b416e2a24ed5d54b59149f2578539aabaf605a9b2", 0xd4, 0x40000, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="10c9d6995e927fe7a7247de9fc6ea0b5590a9bdaf55353e8cddc13fe7d1fb06c9113e7d32525aef94ac01ffac55c17eb0f3ff2b153ccf7cf885a802234efb9f2b8040b5f49d43cd89d548f9215dae098a884bd5be6eb8f40b9631beb992d915862b5ef79215671c30f169891a2a1221331e0eb0800b44519fd1cbabc70985d0f5db0dbd1e68225de008ff97d20595e7a1b68edbd3b005d0c3443b6a93671bfdc1004072dba1f92b0b60a06e3a284e9772322eb55b89ec12e83a7fb19aaf7d68b416e2a24ed5d54b59149f2578539aabaf605a9b2", 0xd4, 0x40000, 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000440)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) r5 = accept4$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14, 0x80800) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000500)={r4, 0x1, 0x6, @broadcast}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r7) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000580)={0x0, 0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x0, 0x8000, r2, 0x5, '\x00', r6, r1, 0x4, 0x5, 0x0, 0xe, @value=r1}, 0x50) unshare(0x0) (async) unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000680)={@private0, r9}, 0x14) (async) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000680)={@private0, r9}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x10, r3, 0x6772f000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000006c0)={0x0, 0x95, "a783438287752fcce51d36427786a16cb273a5528dcfad818c8a399f2d45f409feed21af2541172a5c74fa7a4b12aab5f10dca8ca9f3232b301abee53d697b115dc6daa7116c1c8080ec8a506d75504acd9f9e8cbe8267d17a6a6f8c20e2321e18ae33309f6b8264d314094f3b24c3726b09f7a503e676b4f0152f505be0c646cc1739032be5d99ff24e6de3bb21d9013e49d49171"}, &(0x7f0000000780)=0x9d) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000007c0)={r10, 0x9c}, &(0x7f0000000800)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000007c0)={r10, 0x9c}, &(0x7f0000000800)=0x8) syz_emit_ethernet(0x1021, &(0x7f0000000840)={@random="b452a5117359", @remote, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x5, 0x1}}, {@mpls_uc={0x8847, {[{0xfff}, {0x2}], @llc={@llc={0xfe, 0x4, "dd", "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"}}}}}}, &(0x7f0000001880)={0x1, 0x2, [0x712, 0xb3d, 0x54c, 0x7b0]}) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000018c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000001900), 0x12) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001940)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x950, '\x00', r9, r1, 0x3, 0x3}, 0x50) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000019c0)=r0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@base={0x11, 0x3, 0xfff, 0x4, 0x100, r12, 0x80000000, '\x00', r6, r13, 0x3, 0x2, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@base={0x11, 0x3, 0xfff, 0x4, 0x100, r12, 0x80000000, '\x00', r6, r13, 0x3, 0x2, 0x4}, 0x50) accept$inet(0xffffffffffffffff, &(0x7f0000001a80)={0x2, 0x0, @local}, &(0x7f0000001ac0)=0x10) (async) r14 = accept$inet(0xffffffffffffffff, &(0x7f0000001a80)={0x2, 0x0, @local}, &(0x7f0000001ac0)=0x10) getsockopt$inet_mreqsrc(r14, 0x0, 0x2a, &(0x7f0000001b00)={@multicast2, @local, @initdev}, &(0x7f0000001b40)=0xc) (async) getsockopt$inet_mreqsrc(r14, 0x0, 0x2a, &(0x7f0000001b00)={@multicast2, @local, @initdev}, &(0x7f0000001b40)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r14, 0x84, 0x65, &(0x7f0000001b80)=[@in6={0xa, 0x4e21, 0xfffff801, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e23, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, @in6={0xa, 0x4e21, 0x80000001, @local, 0x1}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e22, 0x4, @private1, 0x43467679}], 0xbc) ioctl$sock_SIOCGIFCONF(r14, 0x8912, &(0x7f0000001c80)=@req={0x28, &(0x7f0000001c40)={'macvlan1\x00', @ifru_flags=0x2000}}) 2.157084521s ago: executing program 4 (id=5497): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0x8401, 0x4) close(0x4) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001a40)=""/127, 0x7f}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002080)={0x1d, r5}, 0x10) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001740)) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/ipc\x00') setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRESDEC=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c0002800800050001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 1.850036141s ago: executing program 2 (id=5501): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x3e}, 0x28) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xfdaa7815294bd12f}, 0x24004804) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, 0x0, 0x0) 1.776847728s ago: executing program 0 (id=5502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES8=r0, @ANYBLOB="0c001a"], 0x48}}, 0x804) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43b"], 0x340a) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000002c0)=0x2, 0x4) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x22020600) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$inet(r5, &(0x7f0000006c80)=[{{&(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) (async, rerun: 64) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) (rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x8001, '\x00', r8, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.776391968s ago: executing program 1 (id=5503): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="bb2db7ee0305851f691fe15fd0993b25", 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000200140000000009000c0000060015000400000014001680100008800c000380070004"], 0x38}}, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x1, 0x40}, 0xc) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1.6694912s ago: executing program 2 (id=5504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x12, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x2}, {0x8, 0x120, 0x0, 0x0, 0x7}]}}]}]}, 0x50}}, 0x40800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) splice(r3, &(0x7f0000000240)=0x75, r1, &(0x7f0000000280)=0xffffffff, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010080000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3100000400140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a31000000001c000380180003801400010001007468315f746fdf626f6e640000000900010073797a30000000000800074000000003"], 0xd8}}, 0x44804) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x463, 0x0, 0x0, 0x0, 0xfffffffa}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xea}]}, &(0x7f0000000340)='syzkaller\x00', 0x96820000, 0xcf, &(0x7f0000000480)=""/207, 0x41100, 0x1, '\x00', r5, @fallback, r1, 0x8, &(0x7f00000005c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x4, &(0x7f0000000640)=[r1, r3, r1, r1], &(0x7f0000000680)=[{0x5, 0x4, 0xb, 0x7}, {0x2, 0x3, 0x5, 0x1}, {0x3, 0x3, 0x8, 0xb}, {0x4, 0xfff, 0x9, 0x4}], 0x10, 0xfffffffc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$sock_int(r2, 0x1, 0x12, 0x0, &(0x7f00000001c0)) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x2}, {0x8, 0x120, 0x0, 0x0, 0x7}]}}]}]}, 0x50}}, 0x40800) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) (async) splice(r3, &(0x7f0000000240)=0x75, r1, &(0x7f0000000280)=0xffffffff, 0x5, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010080000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3100000400140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a31000000001c000380180003801400010001007468315f746fdf626f6e640000000900010073797a30000000000800074000000003"], 0xd8}}, 0x44804) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x463, 0x0, 0x0, 0x0, 0xfffffffa}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xea}]}, &(0x7f0000000340)='syzkaller\x00', 0x96820000, 0xcf, &(0x7f0000000480)=""/207, 0x41100, 0x1, '\x00', r5, @fallback, r1, 0x8, &(0x7f00000005c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x4, &(0x7f0000000640)=[r1, r3, r1, r1], &(0x7f0000000680)=[{0x5, 0x4, 0xb, 0x7}, {0x2, 0x3, 0x5, 0x1}, {0x3, 0x3, 0x8, 0xb}, {0x4, 0xfff, 0x9, 0x4}], 0x10, 0xfffffffc}, 0x94) (async) 1.659836098s ago: executing program 1 (id=5505): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000c80)={0x1, 0x7fff}, 0x8) close(r0) (async) close(r0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000300)=""/229, 0xe5}], 0x5) 1.524842152s ago: executing program 0 (id=5506): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x800, 0xf131) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x44090) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r1, &(0x7f00000001c0)='\x00', 0x10000, &(0x7f0000000200)={@align, {0xa, 0x9, 0x0, 0x7}}, 0x6, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x6}, 0x5, &(0x7f0000000c80)=[{0x3, 0x0, &(0x7f00000002c0)='rpfilter\x00', &(0x7f0000000300), 0x0, 0x2}, {0x3, 0x8, &(0x7f0000000340)='\x00', &(0x7f0000000380)="85a8354124082bf46a5ee45194733d07d484c53b5cb304521cd61180c91b466bb63b9d7259e5743f5dbf5c2bc845b8098c759ef53285940f", 0x38, 0x8}, {0x1, 0x1, &(0x7f00000003c0)='rpfilter\x00', &(0x7f0000000980)="a298133527b957f7d6630f68cbd0456b944fd1434ae8d38592c3e87d7d521dbcd91f9bd287c0da2c6abc88171e80fd3c64282de347cab11952e7a8307bdd010a065a2d9831758614ecea9660faac1ecc593d8da29517c8521a81c066970fee7f10c52f911b46c162a8cf624298dfe422e72c8e49049c8508327eecd02b8533032a74556e41589fd7ae1372729364cda94f916fe2d00a847ab7728710e34f3d193a5db170b53d6b103b0513a8b25575dd674791568deafdac8b5e373952bfb3ca8c2eab4cba525d22af9aff7eb1658775a7", 0xd1, 0x2}, {0x1, 0x80, &(0x7f0000000a80)='limit\x00', &(0x7f0000000ac0)="51250a51dabff0302fa225b2a3e3abdde50a01480b6a83382409c3936fd73d643d1ef8c84e4737932f30a08bf1802f3195d83a5ba2bfd2dbec1b7c7fe430adce52d0c0598603b31a41c4ded785df558f54462620e23f2bf3d3fdb6ad5fab16d57a94d5010fc83f6677f38f1b96be0d44e6b4a597", 0x74, 0x10}, {0x1, 0x1, &(0x7f0000000b40)='SET\x00', &(0x7f0000000b80)="1614cabbb26a47e304570ff20595e4084a0fb4485b65dd41883c432e94d6277a53314ddbd0c044705cdd999e68c1c65c43e8036bfe6ff789eb349671d01c8030bbde8602e402ab95302b9c4b49a5e9692778fa1f694290d507c64925d2362766b48a59ca03ebb9595872c30cc5e25010aa46135a60372872c43d76eff2062200adfcb538b6b9eedc18a684a34b85fb54bc25131251184286f040aba84050fd2df15428d2d87a25cd4d138293463482bd620201f84cdb44f0973f322cc1615bd93f405c75140bd94dcf25f9e5a0d5d3b46f9f122dd67ae940244086569271a41324760f0f8788fc6ad3b161529b9eace7126d221dacb185eb02", 0xf9, 0x30}]}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000dc0)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040026c87000fedb6cf200030000000000001e00000000000000000000007ee509fbf9c602eb63419264ade9457de18fb718572a954e416e71"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @local}, {0x306, @random="0b50c5042825"}, 0x40, {0x2, 0x4e24, @multicast2}, 'vlan1\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 1.521760534s ago: executing program 4 (id=5507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_ADDRESS={0xa, 0x1, @random="baeead4459ac"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.517019224s ago: executing program 1 (id=5508): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "314188a1998d920d6e18ab62"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x56916677aa6853f5, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0xc010) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x56916677aa6853f5, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0xc010) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x4, 0x7, 0x36, 0x6}, {0x5, 0x9, 0x3, 0x1}, {0x1, 0x8, 0xff, 0x80000000}, {0xf94d, 0x2, 0x7, 0x7}, {0x4, 0x8, 0x5, 0x4}]}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="0cf665f6a88160a4778a5d99824788511db0a7c490a57d6c4f341a70b703fe6d71dec8740948b47b8da6b6eb8fa36bc10fb0ee258d8ee389d55e2a77532913e15d90acd3c974755c7824348d28a20b8ee6a9e0fa4115932b4001c66ceac1", 0x5e}, {&(0x7f00000003c0)="9d9be92a9f915fb05490910246b1ab04949d3317558205a3aa1dc742b96e79ee983ffba519", 0x25}, {&(0x7f0000000400)="f1fa74b455e6eacdb57845df07b8f707935e76eb59ba4a4113597eef2d923ac2383539b6e89ecafde52c930ba11027a0249d46501334f6fc308c1648b3d1350066c8b52649ccfb234f6334ddc5fa07027477be55605e89b74805cbb8b89bd907b15b0018052aa6cd16a89d6a2e02436ecb8024d950b5810b109889519233df7ebbc397a256929425394dc70412417539503a8fdb0be922deb0be16dd3b07bde57df656f0713880ffda48df98f41063880f27", 0xb2}, {&(0x7f00000004c0)="2937b446ed8fcf058580ff2b3b9a94f313e8087bb396c737dc56c3e66c7cbb3c8250bcb6d4f1f4afc9719799fd834c420d197a7571b3fbdad0a5d8b2b7797645c875b8df00c5fe2369ce967a2f9fd6d46fad36c8041692d0a0bb75a472bc7d9a60c8d86ed6b120878730456fffca8701fecfec88dd8502cc21cd661e6357d17acf89ab72dfc2920819e3127f", 0x8c}, {&(0x7f0000000580)="12233aaddc957f06187d53572d12da876cac1ac376dd1dc89821ae49549acf440fa9c24dc76495", 0x27}], 0x5, &(0x7f0000000640)=[{0x78, 0x118, 0x6, "c0dd49ac682ba91e4cc9e58d29a0548dc4eb4a2087c14395a429f651831cfd7d26babe54390164292e2f795ea2f329d7263f4e1bd0621a377a3e0a86bcef2740591530c6a43d0a545a9d2c5215927702d8e8b6a9c9845578c16e5b04a55120df6d72"}, {0x90, 0x0, 0x8, "eec4438ea001647b6596711b18a5b209b4874ab07ff743ea7afcb0565d4b8f9e471de206d726a7058d54e1ad3e2dc1f182c9e9b6cd3ee29cce8a072d19e0a9329b5f89284672b86817c6b4b3c8310cdcea8b84ac246d87720825932bd122f7af669e8326d31e49a5f718150ebd8d30478711968c12d3ecd73a98d5c52f4552a2"}, {0x1010, 0x10c, 0x5, "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"}], 0x1118}, 0x4000000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000018c0)={r4, &(0x7f00000017c0)='(\x00', 0x109000, &(0x7f0000001800)={@align=0x3, {0x3, 0x2, 0xba6, 0x6}}, 0x13d, &(0x7f0000001840)={@_ha_fsid}, &(0x7f0000001880)=0x7}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000018c0)={r4, &(0x7f00000017c0)='(\x00', 0x109000, &(0x7f0000001800)={@align=0x3, {0x3, 0x2, 0xba6, 0x6}}, 0x13d, &(0x7f0000001840)={@_ha_fsid}, &(0x7f0000001880)=0x7}) openat$cgroup_procs(r6, &(0x7f0000001900)='cgroup.procs\x00', 0x2, 0x0) sendto(r2, &(0x7f0000001940)="a12e31a136abb8c4284a871181c30f118fc7884060f5cf1a2438d953c31cf8643f2f8a13c88d4c93b00ff469c64d748e2f431e26db5a8e3ade7b2820f4f09f1d1fe734a33067b72e2a50fe2bcec2e46c", 0x50, 0x40488d0, &(0x7f00000019c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xaf5}}}, 0x80) write$cgroup_int(r6, &(0x7f0000001a40)=0x1000, 0x12) (async) write$cgroup_int(r6, &(0x7f0000001a40)=0x1000, 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0xb4, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x5b}}}}, [@NL80211_ATTR_FRAME={0x88, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x7, 0x6}}, @void, @val={0x1, 0x6, [{0x18, 0x1}, {0x30}, {0x16}, {0x4, 0x1}, {0x4}, {0x60, 0x1}]}, @void, @void, @void, [{0xdd, 0x62, "8c0be7afa1b68285d6cf949442ccc5bc8355b8b3dc6d3e62984507eb57c92578e2af835f5f9864e6b8d425935fe1b1b95b24ba677033dbfe8798ccd3f0a2a4ff7af77080876cb1075a5e4f45af6c9726ba248a7d1a0f18eaf21d892c32c854f48a24"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004}, 0x4010050) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001cc0)={'syztnl1\x00', &(0x7f0000001c40)={'ip6tnl0\x00', 0x0, 0x29, 0x9c, 0x4, 0x5, 0x30, @mcast2, @mcast2, 0x7, 0x8, 0x6, 0xd}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001cc0)={'syztnl1\x00', &(0x7f0000001c40)={'ip6tnl0\x00', 0x0, 0x29, 0x9c, 0x4, 0x5, 0x30, @mcast2, @mcast2, 0x7, 0x8, 0x6, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001d80)={'syztnl0\x00', &(0x7f0000001d00)={'ip6gre0\x00', r9, 0x29, 0x8, 0x8, 0x5, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7, 0x5, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001d80)={'syztnl0\x00', &(0x7f0000001d00)={'ip6gre0\x00', r9, 0x29, 0x8, 0x8, 0x5, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7, 0x5, 0x6}}) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000001dc0)={r2}) connect$pppoe(r6, &(0x7f0000001e00)={0x18, 0x0, {0x2, @local, 'bond_slave_0\x00'}}, 0x1e) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002d80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002d40)={&(0x7f0000001e80)=@newtclass={0xe98, 0x28, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x8, 0x3}, {0x7, 0x1}, {0xffeb, 0x2}}, [@c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0x41, 0x3, "91ccd813b5e8e9ff5a5242a7f8c4bcde8b76f328477d4ea4716a2bd274192b098595f9b73e8bcd610fc751bc6f0d96c8a3011568842e960e314cc5afb4"}]}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x0, 0xffe5, 0x101, 0xfff9, 0xfffff49c}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x1f, 0x9000000, 0xfffffff9, 0xfffffffc, 0x5, 0x8001, 0x4, 0xeb5, 0x2, 0x6f, 0x50, 0xa73a, 0x6, 0x0, 0x80000000, 0x5, 0x1, 0x79, 0xffffffff, 0x6, 0x0, 0x7ff, 0x0, 0x5, 0x6, 0xffffffff, 0x2, 0x5, 0x2, 0x0, 0xb, 0x2, 0x3, 0x0, 0x9, 0x2, 0x6, 0xffff, 0x7, 0x2, 0x8, 0x1, 0x6, 0x40, 0x6, 0xfffffffe, 0x3, 0x9, 0x2, 0x68d, 0xffff, 0xe, 0x5, 0x120000, 0x1, 0x7, 0x3, 0x7, 0x200, 0x7, 0xfffffff8, 0x47373cdd, 0x9, 0x7, 0x7, 0x0, 0xc271, 0x7, 0xb29e, 0x200, 0x10000, 0x9, 0x401, 0x0, 0xa56, 0x9, 0xffffff54, 0x5, 0x10001, 0x9, 0x7f, 0x5, 0x2f450000, 0xa5, 0x3f800000, 0x1, 0x4, 0x1, 0x101, 0x2, 0x1, 0x3ff, 0xb59e, 0x8fb, 0x2b3, 0x1, 0x0, 0x4, 0x9, 0x0, 0x7, 0x8, 0xfffffff9, 0xaef, 0x9, 0x1, 0x10001, 0x1, 0x2, 0x5, 0x8, 0x5, 0xb, 0x6, 0xfebc, 0x2, 0x6, 0x3, 0xc000000, 0x394f, 0x2, 0x0, 0x1, 0x4, 0x2, 0xf, 0x4, 0x3, 0xfffffffa, 0x5, 0x5, 0x9, 0x0, 0x2, 0x8, 0x3, 0xbcd, 0x8, 0xc, 0x80000000, 0xf03d, 0x9, 0x9, 0xe, 0x8, 0x80, 0x9, 0xf0, 0x500, 0x9, 0x7, 0x7, 0x742, 0x4f00, 0x1, 0xfffffffa, 0x6, 0x1, 0x3, 0x9, 0x5, 0x1, 0xfffffffe, 0x8000, 0x10001, 0x1, 0x2, 0x7, 0x6, 0x7, 0xff, 0xa, 0xff, 0x2, 0x4, 0xba, 0xb4fb, 0x4, 0xee, 0xffff323d, 0x80000000, 0xffffffff, 0x42, 0x0, 0xf5b, 0x57af, 0x17b, 0x5, 0xffff, 0x26ca2e8b, 0xfffffff7, 0x3, 0x4, 0x8, 0x10000, 0x9, 0x8, 0x400, 0x0, 0x2d4d, 0x3, 0x3ff, 0xe44, 0xfffffc01, 0xe589, 0x8, 0x9fc, 0x6, 0x0, 0x1, 0xba3e, 0x3, 0x9, 0x2e8, 0x6, 0x800, 0xb, 0x7, 0x10001, 0xebe, 0x10000, 0x284, 0x8000, 0x2, 0xeeb, 0x7, 0x0, 0x65, 0x12, 0x1, 0x474, 0x1, 0x36f36ff5, 0x2, 0xfffffff9, 0x9, 0x8, 0x1, 0x3, 0xffffff00, 0x7, 0x3, 0x9, 0x632, 0x100, 0x9, 0x6, 0x7, 0xf, 0xfffffc69, 0x9eeb67eb, 0x3, 0x7a3, 0x6, 0x3e3]}]}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x14, 0x0, 0x1, 0x18, 0xfffff800, 0xfffffffa, 0x1, 0x1}}]}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x0, 0x15, 0x9, 0xb, 0x3f, 0xfffffffc, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0x0, 0x9, 0x6, 0xf9c}}]}}, @c_cbq={{0x8}, {0x8a4, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8001, 0x1ff, 0x1217, 0x6, 0x2, 0x7, 0x6, 0x3, 0x3, 0x7, 0x8, 0x2, 0x8, 0x7f, 0x100, 0x4, 0x7, 0x6, 0x5, 0x1, 0x6, 0x85a, 0x5, 0x7, 0x80000001, 0xc, 0x7, 0xfffffff9, 0x7, 0x3, 0x9, 0x9, 0x8, 0x7, 0x7, 0xfffffff7, 0x4, 0x7, 0x4, 0xc, 0x8000, 0x5, 0xffffffff, 0x100, 0x8, 0x80000001, 0x4, 0xd13f, 0x8001, 0x80000000, 0x3, 0x0, 0x5, 0x8, 0x3, 0x1ff, 0x1, 0x6, 0x7, 0x38e9, 0x4, 0x80000001, 0x5, 0xa69f, 0x9, 0x7, 0x2, 0x18ef, 0x7fffffff, 0x8, 0x4658, 0x18d4, 0x80000000, 0x9, 0xfffffff3, 0x2, 0x100, 0x1, 0x1, 0xfffffff9, 0x1, 0x8, 0x3, 0x3, 0xdb9, 0x2, 0x6, 0xd8c, 0x5, 0x7fff, 0x2, 0xe0000000, 0x3, 0x7fffffff, 0x2, 0x3, 0x5b, 0x400, 0x0, 0x80000000, 0x401, 0xfff, 0x1, 0x4, 0x1, 0xa, 0x7, 0x800, 0x9225, 0x1, 0x99, 0x1, 0x34e, 0x3ff, 0x8000, 0x5, 0x45bb, 0x1, 0x2cfd, 0x9, 0xb096, 0xb, 0x40, 0x3, 0x9, 0x3, 0x0, 0xc, 0xa, 0x3, 0x6, 0x4b, 0xffffffff, 0x0, 0x8, 0x6, 0x10001, 0x1, 0x7, 0x5, 0x101, 0xfffffff6, 0x6, 0x2f4, 0x3, 0x5, 0x3, 0x7ff, 0x1, 0x592, 0x0, 0x3d4, 0xfa6, 0x8, 0x2c, 0x7fff, 0xffff0000, 0x718817ac, 0x39c, 0x6, 0x8, 0xfffffffe, 0x520, 0x2, 0x0, 0xfffffffc, 0x400, 0x4b4, 0x100, 0x1, 0x2, 0x2, 0xaf6f, 0x5, 0x8000, 0x2, 0x0, 0x7, 0xe, 0xfffffffe, 0x3ff, 0x1, 0x16, 0x1, 0xffffffff, 0x5, 0x2, 0x5faf, 0x27, 0x6, 0xfffffffc, 0x7, 0x5, 0x2, 0x6, 0xa7af, 0x1, 0x6, 0x6, 0x3, 0xfffffff7, 0x0, 0x40, 0x8, 0x400, 0x1dd, 0xf2, 0x1, 0x2, 0x9, 0x307, 0xe, 0x401, 0xffff8000, 0x5, 0x9, 0x8, 0x3, 0x1, 0x8, 0x1f27, 0x4, 0x10, 0x4, 0xf, 0x2, 0x4, 0x3ff, 0x9, 0x0, 0x3, 0x4, 0x1ff, 0x8ff, 0x7, 0x10000, 0x5, 0x8, 0x8001, 0xf8, 0xb170, 0x7, 0x2e, 0xf2, 0x4, 0xf, 0x10001, 0x0, 0x4, 0x7, 0x3, 0x2f4, 0x8, 0x6, 0x0, 0x8]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x3, 0x12, 0x4, 0x8, 0x80, 0x3, 0x329f}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0x10}, 0x1, 0x800}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x38000000, 0xfff, 0x8001, 0x7ff, 0x7, 0x9, 0xc0000000, 0x0, 0x3, 0x2, 0x1, 0x82, 0x4, 0x3, 0x7, 0x7, 0x7fff, 0x1f, 0xf, 0x0, 0x1, 0x8, 0x81, 0x9d, 0x0, 0xfe000000, 0x7, 0x7, 0x7, 0x7, 0x9, 0x4, 0x3, 0x3, 0xbd, 0x793, 0x3, 0x4, 0x9, 0x4, 0x3937, 0x1, 0xa04e, 0x3, 0xc, 0xae, 0xd306, 0x6, 0x4, 0x8, 0x1, 0x8, 0x0, 0x5, 0x3, 0x8000, 0x4, 0xd, 0x8, 0xbf, 0x0, 0x3, 0xfe9, 0x6, 0x2, 0x6, 0x7fff, 0xb, 0x3, 0x101, 0x80000001, 0x3, 0x7, 0x5, 0x3d76b9ac, 0xe9, 0xffffffff, 0x1, 0x3, 0x8000, 0x1, 0x7, 0x0, 0x6, 0xf, 0x5, 0x2654, 0xfffffffe, 0x2, 0x872, 0x2b82, 0x7, 0x1, 0x3, 0x200, 0x0, 0x5b9b, 0x9d3, 0x10, 0x1, 0xa, 0x0, 0xa000, 0x6, 0x7, 0x466, 0x9, 0x7, 0x200, 0x235, 0x7f, 0x7d9, 0x9, 0x7f, 0x6ace, 0xfff, 0x4, 0x132, 0xd1, 0xffffffff, 0x3, 0x7, 0x0, 0x3, 0x5, 0x6, 0x4, 0x8, 0x2, 0x7ff, 0x3, 0x80000000, 0x3, 0x200, 0x8, 0x2, 0x6, 0x3, 0xd, 0x1ff, 0x1, 0x3, 0x3, 0x80, 0x80, 0x3, 0xfffffff7, 0x5, 0x4, 0x1b0c, 0x8, 0x2e23, 0x91, 0x2, 0x7, 0x9a, 0x6, 0x1000, 0x7, 0x0, 0x6, 0xa, 0x10001, 0x9, 0x9, 0x0, 0x7, 0x3ff, 0x1, 0x100, 0x8001, 0xffff6f10, 0x6, 0x2b, 0xc, 0x337, 0x7fffffff, 0x80000001, 0x6957, 0x2, 0x5, 0x2, 0x1, 0x8, 0x3c28, 0x54, 0xffffffff, 0x6, 0x8, 0x7, 0xcc, 0x200, 0x5, 0x8001, 0xfffffffa, 0x2, 0x7ff, 0x1, 0x6, 0x2, 0x7, 0x8, 0x5, 0xffffffe8, 0x80000000, 0x0, 0x0, 0x6, 0x2, 0xf, 0x7, 0xff, 0x4, 0x4, 0xb87, 0x1000, 0x4, 0x9, 0xea, 0x229, 0x7, 0x2, 0x1, 0x9, 0x3, 0x10001, 0x5, 0x1, 0x6e, 0x9, 0x8, 0x6, 0x8, 0x9, 0x400, 0x7ff, 0x6, 0x0, 0x7fffffff, 0x5, 0x800, 0x1, 0x10000, 0xc, 0xffffff7b, 0x8, 0x1, 0x3, 0x3, 0x1, 0x1, 0x81, 0xffffe9e4, 0x5533, 0x61c]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2d, 0x3, 0xd, 0x7, 0x86c, 0x6, 0x0, 0x81}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x3, 0x4, 0x9, 0x5, 0x101}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x2, 0x1d, 0xb, 0xda, 0x4, 0x8, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x3, 0x4, 0x4, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x74, 0x1, 0x5, 0x6, 0x3ddd7734, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x2, 0x400, 0x2, 0x2, 0x9}}]}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_HDR={0x3d, 0x3, "309867866a22e8109d4fe6ee99dbb6d7f048dd79d563cb24cd0050d7a4febd08a7e154fc7b7e48f34b38aed19392222b06c41da2235b16914c"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_HDR={0x9, 0x3, "1fd5be95de"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x10}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0xe}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x31, 0x3, "90ad9f68e26580e47e19830d92bc017f866b04e0b314431469544d0154736781c5fd06659441ab5fe257851f7e"}]}}]}, 0xe98}, 0x1, 0x0, 0x0, 0x80}, 0x8080) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002d80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002d40)={&(0x7f0000001e80)=@newtclass={0xe98, 0x28, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x8, 0x3}, {0x7, 0x1}, {0xffeb, 0x2}}, [@c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0x41, 0x3, "91ccd813b5e8e9ff5a5242a7f8c4bcde8b76f328477d4ea4716a2bd274192b098595f9b73e8bcd610fc751bc6f0d96c8a3011568842e960e314cc5afb4"}]}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x0, 0xffe5, 0x101, 0xfff9, 0xfffff49c}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x1f, 0x9000000, 0xfffffff9, 0xfffffffc, 0x5, 0x8001, 0x4, 0xeb5, 0x2, 0x6f, 0x50, 0xa73a, 0x6, 0x0, 0x80000000, 0x5, 0x1, 0x79, 0xffffffff, 0x6, 0x0, 0x7ff, 0x0, 0x5, 0x6, 0xffffffff, 0x2, 0x5, 0x2, 0x0, 0xb, 0x2, 0x3, 0x0, 0x9, 0x2, 0x6, 0xffff, 0x7, 0x2, 0x8, 0x1, 0x6, 0x40, 0x6, 0xfffffffe, 0x3, 0x9, 0x2, 0x68d, 0xffff, 0xe, 0x5, 0x120000, 0x1, 0x7, 0x3, 0x7, 0x200, 0x7, 0xfffffff8, 0x47373cdd, 0x9, 0x7, 0x7, 0x0, 0xc271, 0x7, 0xb29e, 0x200, 0x10000, 0x9, 0x401, 0x0, 0xa56, 0x9, 0xffffff54, 0x5, 0x10001, 0x9, 0x7f, 0x5, 0x2f450000, 0xa5, 0x3f800000, 0x1, 0x4, 0x1, 0x101, 0x2, 0x1, 0x3ff, 0xb59e, 0x8fb, 0x2b3, 0x1, 0x0, 0x4, 0x9, 0x0, 0x7, 0x8, 0xfffffff9, 0xaef, 0x9, 0x1, 0x10001, 0x1, 0x2, 0x5, 0x8, 0x5, 0xb, 0x6, 0xfebc, 0x2, 0x6, 0x3, 0xc000000, 0x394f, 0x2, 0x0, 0x1, 0x4, 0x2, 0xf, 0x4, 0x3, 0xfffffffa, 0x5, 0x5, 0x9, 0x0, 0x2, 0x8, 0x3, 0xbcd, 0x8, 0xc, 0x80000000, 0xf03d, 0x9, 0x9, 0xe, 0x8, 0x80, 0x9, 0xf0, 0x500, 0x9, 0x7, 0x7, 0x742, 0x4f00, 0x1, 0xfffffffa, 0x6, 0x1, 0x3, 0x9, 0x5, 0x1, 0xfffffffe, 0x8000, 0x10001, 0x1, 0x2, 0x7, 0x6, 0x7, 0xff, 0xa, 0xff, 0x2, 0x4, 0xba, 0xb4fb, 0x4, 0xee, 0xffff323d, 0x80000000, 0xffffffff, 0x42, 0x0, 0xf5b, 0x57af, 0x17b, 0x5, 0xffff, 0x26ca2e8b, 0xfffffff7, 0x3, 0x4, 0x8, 0x10000, 0x9, 0x8, 0x400, 0x0, 0x2d4d, 0x3, 0x3ff, 0xe44, 0xfffffc01, 0xe589, 0x8, 0x9fc, 0x6, 0x0, 0x1, 0xba3e, 0x3, 0x9, 0x2e8, 0x6, 0x800, 0xb, 0x7, 0x10001, 0xebe, 0x10000, 0x284, 0x8000, 0x2, 0xeeb, 0x7, 0x0, 0x65, 0x12, 0x1, 0x474, 0x1, 0x36f36ff5, 0x2, 0xfffffff9, 0x9, 0x8, 0x1, 0x3, 0xffffff00, 0x7, 0x3, 0x9, 0x632, 0x100, 0x9, 0x6, 0x7, 0xf, 0xfffffc69, 0x9eeb67eb, 0x3, 0x7a3, 0x6, 0x3e3]}]}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x14, 0x0, 0x1, 0x18, 0xfffff800, 0xfffffffa, 0x1, 0x1}}]}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x0, 0x15, 0x9, 0xb, 0x3f, 0xfffffffc, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0x0, 0x9, 0x6, 0xf9c}}]}}, @c_cbq={{0x8}, {0x8a4, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8001, 0x1ff, 0x1217, 0x6, 0x2, 0x7, 0x6, 0x3, 0x3, 0x7, 0x8, 0x2, 0x8, 0x7f, 0x100, 0x4, 0x7, 0x6, 0x5, 0x1, 0x6, 0x85a, 0x5, 0x7, 0x80000001, 0xc, 0x7, 0xfffffff9, 0x7, 0x3, 0x9, 0x9, 0x8, 0x7, 0x7, 0xfffffff7, 0x4, 0x7, 0x4, 0xc, 0x8000, 0x5, 0xffffffff, 0x100, 0x8, 0x80000001, 0x4, 0xd13f, 0x8001, 0x80000000, 0x3, 0x0, 0x5, 0x8, 0x3, 0x1ff, 0x1, 0x6, 0x7, 0x38e9, 0x4, 0x80000001, 0x5, 0xa69f, 0x9, 0x7, 0x2, 0x18ef, 0x7fffffff, 0x8, 0x4658, 0x18d4, 0x80000000, 0x9, 0xfffffff3, 0x2, 0x100, 0x1, 0x1, 0xfffffff9, 0x1, 0x8, 0x3, 0x3, 0xdb9, 0x2, 0x6, 0xd8c, 0x5, 0x7fff, 0x2, 0xe0000000, 0x3, 0x7fffffff, 0x2, 0x3, 0x5b, 0x400, 0x0, 0x80000000, 0x401, 0xfff, 0x1, 0x4, 0x1, 0xa, 0x7, 0x800, 0x9225, 0x1, 0x99, 0x1, 0x34e, 0x3ff, 0x8000, 0x5, 0x45bb, 0x1, 0x2cfd, 0x9, 0xb096, 0xb, 0x40, 0x3, 0x9, 0x3, 0x0, 0xc, 0xa, 0x3, 0x6, 0x4b, 0xffffffff, 0x0, 0x8, 0x6, 0x10001, 0x1, 0x7, 0x5, 0x101, 0xfffffff6, 0x6, 0x2f4, 0x3, 0x5, 0x3, 0x7ff, 0x1, 0x592, 0x0, 0x3d4, 0xfa6, 0x8, 0x2c, 0x7fff, 0xffff0000, 0x718817ac, 0x39c, 0x6, 0x8, 0xfffffffe, 0x520, 0x2, 0x0, 0xfffffffc, 0x400, 0x4b4, 0x100, 0x1, 0x2, 0x2, 0xaf6f, 0x5, 0x8000, 0x2, 0x0, 0x7, 0xe, 0xfffffffe, 0x3ff, 0x1, 0x16, 0x1, 0xffffffff, 0x5, 0x2, 0x5faf, 0x27, 0x6, 0xfffffffc, 0x7, 0x5, 0x2, 0x6, 0xa7af, 0x1, 0x6, 0x6, 0x3, 0xfffffff7, 0x0, 0x40, 0x8, 0x400, 0x1dd, 0xf2, 0x1, 0x2, 0x9, 0x307, 0xe, 0x401, 0xffff8000, 0x5, 0x9, 0x8, 0x3, 0x1, 0x8, 0x1f27, 0x4, 0x10, 0x4, 0xf, 0x2, 0x4, 0x3ff, 0x9, 0x0, 0x3, 0x4, 0x1ff, 0x8ff, 0x7, 0x10000, 0x5, 0x8, 0x8001, 0xf8, 0xb170, 0x7, 0x2e, 0xf2, 0x4, 0xf, 0x10001, 0x0, 0x4, 0x7, 0x3, 0x2f4, 0x8, 0x6, 0x0, 0x8]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x3, 0x12, 0x4, 0x8, 0x80, 0x3, 0x329f}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0x10}, 0x1, 0x800}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x38000000, 0xfff, 0x8001, 0x7ff, 0x7, 0x9, 0xc0000000, 0x0, 0x3, 0x2, 0x1, 0x82, 0x4, 0x3, 0x7, 0x7, 0x7fff, 0x1f, 0xf, 0x0, 0x1, 0x8, 0x81, 0x9d, 0x0, 0xfe000000, 0x7, 0x7, 0x7, 0x7, 0x9, 0x4, 0x3, 0x3, 0xbd, 0x793, 0x3, 0x4, 0x9, 0x4, 0x3937, 0x1, 0xa04e, 0x3, 0xc, 0xae, 0xd306, 0x6, 0x4, 0x8, 0x1, 0x8, 0x0, 0x5, 0x3, 0x8000, 0x4, 0xd, 0x8, 0xbf, 0x0, 0x3, 0xfe9, 0x6, 0x2, 0x6, 0x7fff, 0xb, 0x3, 0x101, 0x80000001, 0x3, 0x7, 0x5, 0x3d76b9ac, 0xe9, 0xffffffff, 0x1, 0x3, 0x8000, 0x1, 0x7, 0x0, 0x6, 0xf, 0x5, 0x2654, 0xfffffffe, 0x2, 0x872, 0x2b82, 0x7, 0x1, 0x3, 0x200, 0x0, 0x5b9b, 0x9d3, 0x10, 0x1, 0xa, 0x0, 0xa000, 0x6, 0x7, 0x466, 0x9, 0x7, 0x200, 0x235, 0x7f, 0x7d9, 0x9, 0x7f, 0x6ace, 0xfff, 0x4, 0x132, 0xd1, 0xffffffff, 0x3, 0x7, 0x0, 0x3, 0x5, 0x6, 0x4, 0x8, 0x2, 0x7ff, 0x3, 0x80000000, 0x3, 0x200, 0x8, 0x2, 0x6, 0x3, 0xd, 0x1ff, 0x1, 0x3, 0x3, 0x80, 0x80, 0x3, 0xfffffff7, 0x5, 0x4, 0x1b0c, 0x8, 0x2e23, 0x91, 0x2, 0x7, 0x9a, 0x6, 0x1000, 0x7, 0x0, 0x6, 0xa, 0x10001, 0x9, 0x9, 0x0, 0x7, 0x3ff, 0x1, 0x100, 0x8001, 0xffff6f10, 0x6, 0x2b, 0xc, 0x337, 0x7fffffff, 0x80000001, 0x6957, 0x2, 0x5, 0x2, 0x1, 0x8, 0x3c28, 0x54, 0xffffffff, 0x6, 0x8, 0x7, 0xcc, 0x200, 0x5, 0x8001, 0xfffffffa, 0x2, 0x7ff, 0x1, 0x6, 0x2, 0x7, 0x8, 0x5, 0xffffffe8, 0x80000000, 0x0, 0x0, 0x6, 0x2, 0xf, 0x7, 0xff, 0x4, 0x4, 0xb87, 0x1000, 0x4, 0x9, 0xea, 0x229, 0x7, 0x2, 0x1, 0x9, 0x3, 0x10001, 0x5, 0x1, 0x6e, 0x9, 0x8, 0x6, 0x8, 0x9, 0x400, 0x7ff, 0x6, 0x0, 0x7fffffff, 0x5, 0x800, 0x1, 0x10000, 0xc, 0xffffff7b, 0x8, 0x1, 0x3, 0x3, 0x1, 0x1, 0x81, 0xffffe9e4, 0x5533, 0x61c]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2d, 0x3, 0xd, 0x7, 0x86c, 0x6, 0x0, 0x81}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x3, 0x4, 0x9, 0x5, 0x101}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x2, 0x1d, 0xb, 0xda, 0x4, 0x8, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x3, 0x4, 0x4, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x74, 0x1, 0x5, 0x6, 0x3ddd7734, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x2, 0x400, 0x2, 0x2, 0x9}}]}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_HDR={0x3d, 0x3, "309867866a22e8109d4fe6ee99dbb6d7f048dd79d563cb24cd0050d7a4febd08a7e154fc7b7e48f34b38aed19392222b06c41da2235b16914c"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_HDR={0x9, 0x3, "1fd5be95de"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x10}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0xe}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x31, 0x3, "90ad9f68e26580e47e19830d92bc017f866b04e0b314431469544d0154736781c5fd06659441ab5fe257851f7e"}]}}]}, 0xe98}, 0x1, 0x0, 0x0, 0x80}, 0x8080) sendmsg$NFT_BATCH(r6, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}}, 0x80) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000002f00)={0x0, 0x8000000000000001}) accept4$tipc(r6, &(0x7f0000002f40), &(0x7f0000002f80)=0x10, 0x0) (async) accept4$tipc(r6, &(0x7f0000002f40), &(0x7f0000002f80)=0x10, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x0, &(0x7f0000002fc0)={0x9ef, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {{0xa, 0x4e22, 0x1ff, @private0, 0x9}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0xc1) 1.512269951s ago: executing program 2 (id=5509): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x400002, @loopback, 0xfffffffd}}, 0x0, 0x8, 0x300, 0x0, 0x54, 0x4}, 0x9c) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff1d2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000014}, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX, @ANYBLOB="01002dbd7000ffdbdf250500000008000200080000000800030004000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0xa50d9986120083c6) 1.436544521s ago: executing program 3 (id=5510): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r1, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1810020000000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901000000000095000000000000000d0a0600000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a5300008500000006000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x1010, &(0x7f0000003dc0)=""/4112, 0x41100, 0x3}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@initdev, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0x5, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x1, 0xffffffff, 0x682}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0xd372, 0xfffff2c4, 0x7fffffff, 0x4, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x10c, r2, 0x701, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r9, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x14, 0x0, 0x34, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2}}}], 0x20}, 0x400c804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x22, &(0x7f00000018c0), 0x4) 1.310754053s ago: executing program 1 (id=5511): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x1d, @multicast1, 0x4e22, 0x1, 'fo\x00', 0x6, 0x800, 0x18}, 0x2c) r0 = socket(0x0, 0x800, 0x1d) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000100)={0x7e, "fbed3d3e04c36f1e90de650dfd244b053c131ab6d99acc225b284d7adf9bf6a86636ca049a8c67918b1b1f77e5a57d13c9b31419d793f33b96457cc382258a1eb6c6ec9b918ae1c5f2488bdb9efbf363df3387674c97d800a45b65e6c257b4cd4c216a6651f4521bda3b80af604d8314aef1d1712934b80c32082eeab2a14cf3"}) r4 = accept$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x3c, &(0x7f0000000240)=0xf3, 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x50, r3, 0x3779b000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280)) sendmsg(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="36889b79b912bf887b195286c396cd992247186ff606897b9bfeb05a8085b9e212ceedaa8d21e079ebd666bb6dea14009e1a6babaf859dfd4f", 0x39}, {&(0x7f0000001300)="9ff8b483ea8b3f1a4bcb85c2e554c217ec1e0d6433a903507479b3a88b86dc8c7b173d87bf45a792ffc9fcddf083c78faa9b14fb067e9079aa1fa83d0530134d7b1a3b41c8514f576c44a7133a595b4fb0f8da296ff087c0cb17388d526fc567e6143035b9469a0f3211d651f280fe76e93ca8281490e520e60515c0190a6c42d4f84d87fa16b213a9bed6eaf76baa99a0f8e45c217fc661bbf84a180dcf93a51c6358ecb4e19cecf516109abfeb56953951a0282ff73c16c679294de581ec3e7f2a99e7d18ad338271d0f6e91a58733b21d4e", 0xd3}], 0x3, &(0x7f0000001440)=[{0xc8, 0x114, 0x0, "44504bbb30e20903adf2830d6a64b8e4f1140c40a446c2e487c12bfe9033dec92c3851030ca869be42fb35db7bf9b249c9ea792533cdac24f4e5158fcc7c01b641015f15a25be73698d881a6ce1a9ed1aa8c4b2f6c5ed03f2c7a12226eb9f6e993fef5ae5fdb5a647971bb7736e0b5fdcbec4c96160d7ed1050e76be4b605cff8370432a9c6ddfa61d25f2c3eb958471af3866cc65ecf74a52a04a19a0eaf3750371ee2d7aaf8af4d24d1d879b2275159afb8f4095b1808f"}, {0xc0, 0x103, 0x4, "56f7038530bd43b5651e333c0bc2445fc75bbe591e57e1df26ca59a350a8ebb87a60de5d420f754f98a84f3818c38ffd88b05c443f026506506fdb5a3ad26e9f5acda0e121786e3c5fabc2a265f87ebe9ac1b53a1646af152754d3901dfb67f6e967e31d6df59dce95c1c246696e47fd14d229f2c9de4504496c04827bd0d4032101c0ad86bfe47c612fe253409883da23a62d1152edc014748056299b248b8d9e1a1d16ebf120a666e8882926e0"}, {0xe8, 0x115, 0x2, "0980aeb24fd7d8d530584956c8f3cb81634d7b0ce7a4ec2eede15859c6b178a078109bae37f8ac74f8ecc1463091cee02f948e8afe776cbef459a99c10534e9be89e8f50dbc4e08fed1ec43658f0644eb403e094c61e467ec45148f5d008d5e49b2320f37a180ef5cd8c2f2e33d2a6c9d08d8c5113cc0a46fe4348253568a214920d111017f89f626feefed950febc1974fb33b7cbc0d994019d19c2874a2f3f68bec9516a727b5ea12f2c574ad513aa69ca6f9c9025e0a4fae3e61feab417ad01c693072fcf9ea5611ae7edb395eff4373598"}, {0xd8, 0x117, 0x9, "e3cf5dec0b84e8cf9654893615ffdf4421dee40e0e8c3998cd4361dffa73b34ca5f61b67f353195097a9b884c9ccdb36523c0285534a992b740aa682544c2f6c58c04782198f7d6cfd464815247a30db6c80933f4abb28fa66640a4438193c59530087d619288d7fadd7471858d31b58878a2e50e6697c9d71daee0dbe24d3ad163cc5abb38751d8f1bbb35e6a6f6ee794f36a680cd25959467efaed18dfd0784c7290bd4690fd3f4147b9d0f2169542bc04c48aa7a70da0578d51e3fe32b4e442630f012e97"}], 0x348}, 0x100) r5 = accept4$tipc(r3, &(0x7f0000001800)=@id, &(0x7f0000001840)=0x10, 0x80800) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000001880), &(0x7f00000018c0)=0x4) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000001900), &(0x7f0000001940)=0x8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000019c0), r3) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x48, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c010}, 0x24000820) r7 = accept$nfc_llcp(r2, &(0x7f0000001b00), &(0x7f0000001b80)=0x60) ioctl$FICLONE(r7, 0x40049409, r5) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, r8, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x20040081) ioctl$sock_bt_hci(r2, 0xc00ab583, &(0x7f0000001d40)="8ff41675487ef4db4266aba8ffad5ffa271f0c036b01f59c606e9ae228af8340d2b8ba9c6d150b75637569e9a565995d431d00d06854d3474cab9fd3919d1963e1e7f998c42d5d1cca5f9386824586c01ab8a2a42c6c3b0e35cc0fe7a0a19ff373b6362db570b610ffae00ebb86363ce02bc4ed9503d4cf41995e795e7ae73bfa8d3cd9694f4ab6ef43a947be2a1e10e3bcb9a339b4fbb") unshare(0x70200) clock_gettime(0x0, &(0x7f0000002040)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000001e00)=@generic, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/22, 0x16}, {&(0x7f0000001ec0)=""/154, 0x9a}], 0x2, &(0x7f0000001fc0)=""/18, 0x12}, 0xbac}], 0x1, 0x40000021, &(0x7f0000002080)={r10, r11+10000000}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x644355bcf30e0c1b}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, 0x4, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}}, 0x20040084) socket(0x2, 0x80000, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x140}, 0x40) write$tun(r2, &(0x7f0000002340)={@void, @void, @ipv6=@gre_packet={0x0, 0x6, "a4295c", 0x1f8, 0x2f, 0x1, @mcast1, @mcast1, {[@fragment={0xbb, 0x0, 0xe6, 0x0, 0x0, 0xd, 0x64}, @fragment={0x62, 0x0, 0x2, 0x1, 0x0, 0x8, 0x68}, @fragment={0x3a, 0x0, 0xe, 0x1, 0x0, 0x17, 0x66}, @routing={0x0, 0x4, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty]}, @hopopts={0x3a, 0x5, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x80}]}, @routing={0x0, 0x6, 0x1, 0xb, 0x0, [@private2, @mcast1, @rand_addr=' \x01\x00']}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x5a, 0x3, [0x1], "d7c8c2502ecf75b49720fc7695b0a2062b9e5eea4a77c3c9b837a3587f56772d25f1cc0f3f778d481fb2828325e519929161cf826d2c3803f701b2634b8273eec3229c35008e59ec56562410df0467b3d643731a4c3f2b90029d"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7fff, 0x6, 0x95f2], "0b5e48d7b462a4bdbc5bbf17d536f4039cf3037e1330183467596c8490b51b505ff1fe"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x401], "165d7113afa6eaf1486263888ed04cf80df918dbe14ccb545c850fc579991a61cffd"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x9a2}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x1e}, 0x2, {0x9, 0x7ff, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "3ec4580b7a6ee166294b4964fbd60399a4f88e8162cd14876912bc7a6b8ee04a351f097d28c68630c14a22f500aa41a697011e88798e08a1f62f329664fcf679cb1d7dbf47bce2cc26d83694c63f531cac6c24ff14acec81483086"}}}}}, 0x220) 1.309781243s ago: executing program 2 (id=5512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='vegas', 0x5) 1.222360616s ago: executing program 0 (id=5513): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x21}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001100010025bd7000fbdbdf25fc010000000000000000110000000001000004d50a006c000c0015"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0xa) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000040)={{0xff, @private=0xa010102, 0x4e20, 0x3, 'lblc\x00', 0x4, 0x3, 0x41}, {@broadcast, 0x4e23, 0x1, 0x3, 0xcd5d, 0x9}}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x8004745a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.090882276s ago: executing program 3 (id=5515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x5452, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) close(r0) 944.554836ms ago: executing program 3 (id=5516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={0x0, 0x10f0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="200000000000000029000000360000003c0100000000000001000900050200041818000000000000290000003600d7821da7f97494c38922542f00001600000000000000400000000000000029000000360000003304000000000000c910fe800000000000000000000000000041c910200100000000000000000000000000020000d000"], 0x78}}], 0x2, 0x4040005) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) unshare(0x20000400) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x11, 0x3, 0x8) getsockopt$sock_int(r6, 0x1, 0x22, 0x0, &(0x7f0000000240)) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x8504}], 0x1, 0xfffffffb) write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32, @ANYBLOB="0c000b00000000e0020000a015000200010000a0", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08000500fe"], 0x84}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0x0, 0xa3, 0xdf, &(0x7f0000000580)="54c8816a396da3e424d632893f7dea416abd91fce64eb7e6e0314307f663f58669ecf9829a6aa4db3b883728d522b34ecb73edf80f800a18a0d221a1f6525a8f86b7b9fd4f7d4f3a29b1941b51ed5fdbf568a0ec1165bbc340bcc17c36b3565c5d804867655cc3daf1b5d21b62a9e213fa91c2e5dee29d3a40126ebe277ae25e5893095a3d701d1ea277a71add94dedfb25f3f289ec98830ea4be681b2b03894d09bb2", &(0x7f0000000640)=""/223, 0x8, 0x0, 0x8a, 0x99, &(0x7f0000000740)="1564830ac49f3752e4224044ddd3bf1de24840c3bf087acd6c1986256ae870a8a6e218e5bef8cabf4d481e3a942d1de6800bdee56a596be0b77086e5231a9c2c56db52bc227d1f0880ba1ef37b1a52f88ea36fac3573a52c5ddd3046f50b5df45691f7290eb0f53410260bd14c36db24f03c344818b6ad18c30ede195b26ef405da20eb4a9952b813b6d", &(0x7f0000000900)="9961fa88bc340c2fef294dddd1efc9ee0d93583969e3524803705d74faa4476d4f750e20962d41ac692f9caa454b902323fc3df3ff49d466a71d8063ed4ab29389a22201f01e3bfc733f6770be8188a863daa8c9f067c7009f42ec3c28a1e0dd33e6a1b8afe754d85378de4e906a483cd2eeac9abdf18251b69a337306444f0591198f3fdc0002f1be20b30ccdfe59a506b6be53de669e9a8a", 0x0, 0x0, 0x1000000}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x12c, 0x16, 0x1, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffbfffffc, 0x3e, 0x0, 0x8}, {}, {0x8, 0xfffffffc}, 0x0, 0x0, 0xa, 0x0, 0x2}}, [@address_filter={0x28, 0x1a, {@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0xb, 0x7}}, @mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x12c}}, 0x0) 924.628411ms ago: executing program 1 (id=5517): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x404c8c1) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = socket(0x10, 0x3, 0x8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async) socket(0x11, 0x3, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) (async) unshare(0x22020400) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) connect$netlink(r2, &(0x7f0000000240)=@unspec, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) close(0xffffffffffffffff) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 665.914787ms ago: executing program 0 (id=5518): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0xff, 0x1}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getneigh={0x14, 0x1e, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x20044004) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="61b641c820d9", @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x48, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x0, [0x8]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xf000]}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x5, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r9, &(0x7f0000000380)=[{&(0x7f0000000300)="9345280ec088d320d8a6e1d48e72b3ba15c08beb3152d79a6075db1adfa91bcee552c705a93dfe0faf120cc3b77dfa62d10b4e4d6c106948f578aa0a996b3fd67ea10dea7bbe44ca77dd4ae7a1720dd3b4e4f51361b88c2944b38418c56c73ee025f4c6d6b6a84b962788054cb9fd181e816edd182fe6f5f7643fc445412", 0x7e}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x300, 0x70bd31, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x66d}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {0x0, 0x3}, {0xc, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x62}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 288.470166ms ago: executing program 2 (id=5519): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x200f5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x40440c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)=r3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, 0x8) 283.749899ms ago: executing program 0 (id=5520): unshare(0x28000600) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x1c65a, 0x4) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/202, 0xca}], 0x1) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xf, 0x0, &(0x7f0000000140)="259a00a1aac4961708fff74588880a", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x8901, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) unshare(0x28000600) (async) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x1c65a, 0x4) (async) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/202, 0xca}], 0x1) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000080) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xf, 0x0, &(0x7f0000000140)="259a00a1aac4961708fff74588880a", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x8901, &(0x7f0000000080)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) 245.447155ms ago: executing program 1 (id=5521): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf2508000100020000000700"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socketpair(0x1, 0x2, 0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_crypto(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@del={0x118, 0x11, 0x200, 0x70bd26, 0x25dfdbfe, {{'rfc7539(pcbc(aes-aesni),sha1)\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8, 0x1, 0xbbab}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x6}, {0x8}, {0x8, 0x1, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000801}, 0x4000001) (async) r2 = socket(0x8, 0x4, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r3, 0x1, 0x42, &(0x7f0000000440)=""/183, &(0x7f00000001c0)=0xb7) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x40106183, &(0x7f0000001940)={{r0, 0x0, 0x101040, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x10bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xfff}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0xd0) 79.526337ms ago: executing program 2 (id=5522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, &(0x7f0000000180)=0x7fffffffffffffff, r6, 0x0, 0x4, 0xa) close(r3) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffddc, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x4, 0x0, 0x6}}]}}]}, 0x148}}, 0x8040) 0s ago: executing program 0 (id=5523): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='(*\xc2+\x00', 0x2, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x60]}, {0x7, 0x8, 0x7, 0xc}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffff}, {[0x5a7, 0x88e, 0xa, 0xfff]}, 0xfffffff8, 0xf, &(0x7f0000000100)=""/15}) sendmsg$inet_sctp(r0, &(0x7f0000000780)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x0, @empty, 0x1}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000200)="fd1cc18bbb421287b5a6acf29476516be7c38556489cec1322905bff9dd1d16687fcbb5fb075d1c19edec9bedceefaad1e782a13cb71220aaa6e0f29527d805dd7dac7825466fab2bf4f956a64383804c0b354736244ba34f8e5b36a1025394843e835728f4a612966929ea3f5835ea77da62a17812f245af285573043bcf9142fcd4ad08eefa85a46ce1b4f8fe1abad927b78d6c0073414ffe808c269f1d98f1bf6d0398172d43f4418ddf871a037a37a5b25785b8de67f6ad8e55cbc4b0aff07d6069dda", 0xc5}, {&(0x7f0000000300)="b5ed96478de2bc569f2706ed43176da51a1349e52a745d321d0a542851fb3ce29e2ea5a50e112b8c99eeaf7fa24a75dbbdf3e934d1dd3c5ecbba831b2751664d947de3c1b47c5c34a6c53d7bc0e25c9dfc71b25ff11a0df8f0a4ddee27bd4d98addf85fd26c0b17b9fdd0123905af173a1164c28e4f14aeeb5a4540a511247535112564ccc4b7027b8b26fafa3015999298a26a0a0a0253abab173d776bd", 0x9e}, {&(0x7f00000003c0)="6ff1303eb89865a529839e0e418f96c9b5bff57c21a62fb48898a07f4501938f24a352c4ba2cbf5ff8d2c489adab1c5f5a285a12d8afc745f462", 0x3a}, {&(0x7f0000000400)="1905edd4640cca907b9443243cf38241cae4a68bb7d0f00aa52107a31cd60232c314034d76abef846d3a18c54940a464a6c1f418d9ffb7c8d8482d463cf3cbb158250276ec8a2eeca58654343d51a38f3eb23e481c79618e9e6ea7717813a2c7c598bf1e6b7c9d5e283b3849643d3114085079", 0x73}, {&(0x7f0000000480)="42362774cdec54c7952d2a547a0efaf3f6fcb3404307748c46913cdd1b6a97820df37ac097ea2a365c9fc2cd6971474f9de6829967c4f36bfc162c74767e93c688b9106d44793d2af1b6880f40d57dbb17f20c0cfe3f07bc7363d036ae966f8e020f1f206260883313df032e7492749be477cfc4a8de9b6411a250ab029f4ef5cf4517049a277a272b84606b6bf4c58d924bdd707a9968c43fdfa811eaa13e743104d8be7d7996cc3de46a3077452fac534eb222c731bb9d06278cb69a5a7dba67e9989d076296d72f4dbfec8f0f6868e162766bc4a51dfcfaffc6570e0a", 0xde}, {&(0x7f0000000580)="087cc07d256dbfc478ce83cb1c408e1a983118cacdead3a188463070a47b27c7a85e30123fe63faf51b2be3d10561bc0ff8dc69bd3da97de03d24468c3f32468542ed04b9730c5878373db0bc110a694388013ae466acc80d17a80c153a5182dd9444e54eae01abd6263c0f1593f4742e4edb73382f5fd0c4e548480", 0x7c}, {&(0x7f0000000600)="d624ebfcb1db2d2e79c1fb7e163393954fb38bbefe6383198d0453a544c0ba598d2f658469fce9ec7758f5a1be58eb1a41406cd0b709d61e28851d89f59294662db8859721ee70de8254fde281dcd17d2dca697ee70017a40dcc7a33e6363aaccef97e66ab60d23be308bb1cda3d", 0x6e}, {&(0x7f0000000680)="94a8f895da272084db691e46b8697a41912abb5f27a042701405b32c721603e6f79dc0e4ba18f0008e5d750f83ec3099bfb939bce6a4ed06659c4a7de7506bab35e276f65b7f8ba45512a7d717100ee39947ba0dd8c6a5483729d4ba544e22110ddb830488e8d454c636b223283a723532a6288527", 0x75}], 0x8, 0x0, 0x0, 0x20000001}, 0x80) socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000007c0), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000800)=0x3d, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x24048041) r3 = socket$inet6(0xa, 0x80000, 0x7) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r5 = openat$cgroup_ro(r0, &(0x7f0000000b80)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10010, r3, 0xb32e0000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e40)={'ip_vti0\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x10, 0x700, 0x8, 0x5, {{0x3d, 0x4, 0x2, 0x7, 0xf4, 0x68, 0x0, 0x81, 0x29, 0x0, @local, @empty, {[@generic={0x94, 0xa, "01f6d5e03aa6ebf9"}, @end, @cipso={0x86, 0x6c, 0x3, [{0x6, 0x7, "77b8f6c88f"}, {0x7, 0x3, "9c"}, {0x0, 0xd, "4f96ae0d83fc3bb512c943"}, {0x5, 0xd, "361b18c76ba5a7457fbd01"}, {0x2, 0xc, "caac7ad08c4c3da9e8c1"}, {0x1, 0xe, "61fd3d1c0e4f7ca4a51d3e65"}, {0x0, 0x11, "f7d4a721919b678e691fa8cfc5a4e5"}, {0x1, 0x11, "d01795959f1d81df843f692b20e28e"}, {0x1, 0x6, "ff4f78e2"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x47, 0x0, 0x1, [0xffff, 0x10, 0x4, 0x5a6a, 0x100]}, @cipso={0x86, 0x4b, 0x3, [{0x7, 0x3, ','}, {0x0, 0xc, "002fb5188a6676f0c8f1"}, {0x2, 0x12, "f64c89167aebee1b6fbd75cdb89e886f"}, {0x2, 0x10, "fba60c2c87a6581bf3c3884f2e88"}, {0x5, 0xe, "b8704d6bef2cb4a4e0871661"}, {0x2, 0x6, "e396a488"}]}, @noop]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0x9, 0xb, 0x9f0, 0x4aa02, r0, 0x7, '\x00', r7, r5, 0x4, 0x2, 0x5, 0x1, @value=r8}, 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000f40), r8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000f80)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xa8, 0x3}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x41) select(0x40, &(0x7f0000001180)={0x6, 0x50, 0x7, 0x9, 0x3, 0x1, 0xc9e, 0x100}, &(0x7f00000011c0)={0xb, 0x401, 0x1, 0x5, 0xa, 0x18, 0x7f, 0x7fffffff}, &(0x7f0000001200)={0xa, 0x2, 0x7, 0x8, 0xfffffffffffffc01, 0x4, 0x4}, &(0x7f0000001240)={0x0, 0x2710}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f0000001280), &(0x7f00000012c0)=0x4) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x6, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x100010, r9, 0xa99f000) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040c0}, 0xc0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000001540)={0x60d, 0x400, 0x7, 0x2, 0x9, 0x0, 0x9}) kernel console output (not intermixed with test programs): o HW filter on device netdevsim1 [ 605.924623][T22063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.935269][T22063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.943757][T22063] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 605.980205][T20327] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.987375][T20327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.030758][T20327] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.037954][T20327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.102426][ T6069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.111831][ T6069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.122281][ T6069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.172658][ T6069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.211466][T22072] lo speed is unknown, defaulting to 1000 [ 606.269258][T22061] lo speed is unknown, defaulting to 1000 [ 606.383638][T22087] netlink: 'syz.2.3978': attribute type 12 has an invalid length. [ 606.801481][T22108] __nla_validate_parse: 12 callbacks suppressed [ 606.801501][T22108] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3983'. [ 607.053296][T22118] netlink: 'syz.2.3986': attribute type 2 has an invalid length. [ 607.313438][T22130] xt_policy: neither incoming nor outgoing policy selected [ 607.345252][T22130] netlink: 'syz.2.3989': attribute type 33 has an invalid length. [ 607.356353][T22130] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3989'. [ 607.399077][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 607.441360][T22130] `: renamed from team0 (while UP) [ 607.675790][T22151] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3994'. [ 607.690283][T22150] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3994'. [ 608.253849][T22167] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3996'. [ 608.578795][T22185] SET target dimension over the limit! [ 608.786112][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4001'. [ 608.930401][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4001'. [ 608.978896][T22193] 8021q: VLANs not supported on ip6_vti0 [ 609.510841][T22218] mac80211_hwsim hwsim48 ;: renamed from wlan0 [ 609.807664][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 609.834647][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4011'. [ 609.988360][T22239] netlink: 'syz.3.4013': attribute type 10 has an invalid length. [ 610.011999][T22239] dummy0: entered promiscuous mode [ 610.018077][T22239] dummy0: entered allmulticast mode [ 610.024164][T22239] team0: Port device dummy0 added [ 611.405446][T22176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.415663][T22184] netlink: 'syz.2.3998': attribute type 2 has an invalid length. [ 611.424259][T22184] netlink: 'syz.2.3998': attribute type 2 has an invalid length. [ 611.698193][T22258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 611.809865][T22280] tipc: Enabled bearer , priority 0 [ 611.912308][T22258] syzkaller0: entered promiscuous mode [ 611.917978][T22258] syzkaller0: entered allmulticast mode [ 611.924309][T22258] tipc: Resetting bearer [ 611.961084][T22267] lo speed is unknown, defaulting to 1000 [ 612.317322][T22257] tipc: Resetting bearer [ 612.731360][T22288] __nla_validate_parse: 3 callbacks suppressed [ 612.731377][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 614.450670][T22257] tipc: Disabling bearer [ 614.459381][T22283] lo speed is unknown, defaulting to 1000 [ 614.471963][T13322] tipc: Node number set to 4202171812 [ 614.479054][T22281] lo speed is unknown, defaulting to 1000 [ 614.640005][T22295] pimreg: entered allmulticast mode [ 614.784620][T22304] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4027'. [ 615.349018][T22311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4029'. [ 615.427251][T22311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4029'. [ 615.625628][T22330] vlan3: entered promiscuous mode [ 615.631480][T22330] bridge0: entered promiscuous mode [ 615.725952][T22336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 615.777848][T22336] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.785373][T22336] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.892608][T22336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.196140][ T6069] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.205153][ T6069] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.238758][ T6069] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.261550][ T6069] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.485016][T22348] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 617.038856][T22370] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 617.081033][T22380] lo speed is unknown, defaulting to 1000 [ 617.097438][T22386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4047'. [ 617.118684][T22386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'. [ 617.142502][T22386] openvswitch: netlink: Flow actions attr not present in new flow. [ 617.162393][T22387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4049'. [ 617.186743][T22387] nbd: must specify a device to reconfigure [ 617.194611][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 617.233543][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 617.242966][T22391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 617.269153][T22391] syzkaller1: linktype set to 260 [ 617.369341][T22395] batman_adv: batadv0: Adding interface: gretap1 [ 617.388046][T22395] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.424046][T22395] batman_adv: batadv0: Interface activated: gretap1 [ 617.443391][T22397] netlink: 'syz.3.4054': attribute type 4 has an invalid length. [ 617.461706][T22397] netlink: 'syz.3.4054': attribute type 4 has an invalid length. [ 617.593119][T22405] netlink: 'syz.3.4057': attribute type 5 has an invalid length. [ 617.624386][T22408] netlink: 'syz.3.4057': attribute type 5 has an invalid length. [ 618.409129][T22440] lo speed is unknown, defaulting to 1000 [ 618.501107][ T29] audit: type=1800 audit(1777846657.312:14): pid=22449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4067" name="blkio.bfq.time_recursive" dev="tmpfs" ino=940 res=0 errno=0 [ 618.584146][T22454] netlink: 'syz.2.4067': attribute type 13 has an invalid length. [ 618.609253][T22454] netlink: 'syz.2.4067': attribute type 17 has an invalid length. [ 619.543444][T22449] veth0_macvtap: left allmulticast mode [ 619.555652][T22449] veth1_macvtap: left allmulticast mode [ 619.582204][T22449] macsec0: left allmulticast mode [ 619.652025][T22454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.661593][T22454] 8021q: adding VLAN 0 to HW filter on device ` [ 619.674035][T22454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.749588][T22454] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 619.839286][ T6069] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.870078][ T6069] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 619.904005][ T6069] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.923578][ T6069] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 619.956279][T22474] __nla_validate_parse: 4 callbacks suppressed [ 619.956293][T22474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4074'. [ 619.975784][T22478] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 619.985081][ T6069] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.995160][ T6069] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 620.004504][ T6069] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.024199][ T6069] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 620.065789][T22480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.367250][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4079'. [ 620.640487][T22509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4083'. [ 620.696849][T22509] ip6gre1: entered promiscuous mode [ 620.713680][T22509] ip6gre1: entered allmulticast mode [ 620.748240][T20324] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 620.925272][T20327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.934414][T20327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.943755][T20327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.956699][T20327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.049036][T22539] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4091'. [ 622.133394][T22549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4092'. [ 623.584875][T22507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.703681][T22555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4094'. [ 623.804305][T22562] netlink: 'syz.1.4095': attribute type 1 has an invalid length. [ 623.832105][T22562] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4095'. [ 623.837145][T22564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4096'. [ 623.908197][T22571] --map-set only usable from mangle table [ 623.928247][T22571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4099'. [ 624.030299][T22586] netlink: 'syz.1.4102': attribute type 1 has an invalid length. [ 624.032068][T22583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4099'. [ 624.140949][T22586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.193415][T22591] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 624.213518][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.470641][ T6070] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.489362][ T6070] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.521119][ T6070] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.546125][ T6070] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.627961][T22624] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 624.637422][T22624] NCSI netlink: No device for ifindex 0 [ 624.731091][T22622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 624.789143][T22622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 625.139350][T22653] __nla_validate_parse: 7 callbacks suppressed [ 625.139368][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4118'. [ 625.243250][T22653] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4118'. [ 625.458913][T22674] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4125'. [ 625.751283][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4127'. [ 625.958364][T22682] bond1: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 626.000433][T22692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 626.017275][T22682] bond1: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 626.137903][T22702] bridge_slave_0 (unregistering): left allmulticast mode [ 626.182759][T22702] bridge_slave_0 (unregistering): left promiscuous mode [ 626.212104][T22702] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.457086][T22723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4139'. [ 626.534480][T22726] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4138'. [ 626.557233][T22732] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 626.585961][T22732] SET target dimension over the limit! [ 626.599977][T22732] tipc: Enabling of bearer rejected, media not registered [ 626.612201][T22732] syzkaller0: entered promiscuous mode [ 626.620592][T22732] syzkaller0: entered allmulticast mode [ 626.833923][T22753] openvswitch: netlink: Flow key attr not present in new flow. [ 626.968332][T22765] netlink: 'syz.3.4150': attribute type 21 has an invalid length. [ 627.204221][T22783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4154'. [ 627.389379][T22791] syzkaller0: entered promiscuous mode [ 627.400678][T22789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4155'. [ 627.415434][T22791] syzkaller0: entered allmulticast mode [ 627.607857][T22798] syzkaller1: entered promiscuous mode [ 627.651945][T22798] syzkaller1: entered allmulticast mode [ 627.688418][T22808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4159'. [ 627.832562][T22816] netlink: 'syz.4.4162': attribute type 10 has an invalid length. [ 627.869635][T22816] team0: Cannot enslave team device to itself [ 627.973340][T22820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4163'. [ 628.185380][T22841] netlink: 'syz.3.4170': attribute type 2 has an invalid length. [ 628.259458][T22840] geneve3: entered promiscuous mode [ 628.278373][T20329] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 53291 - 0 [ 628.304711][T20329] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 53291 - 0 [ 628.342104][T20329] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 53291 - 0 [ 628.368481][T20329] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 53291 - 0 [ 628.738794][T22875] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 628.801822][T22877] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 629.114313][T20326] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.134813][T20326] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.151259][T20326] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.174617][T20326] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.762730][T22911] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 629.771349][T22911] netlink: 'syz.2.4187': attribute type 2 has an invalid length. [ 629.779201][T22911] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 629.904113][T22911] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 629.925777][T22912] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 629.937235][T22912] bond1 (unregistering): Released all slaves [ 631.587842][T22860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.602688][T22917] netlink: 'syz.2.4188': attribute type 1 has an invalid length. [ 631.618942][T22917] __nla_validate_parse: 3 callbacks suppressed [ 631.618960][T22917] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4188'. [ 631.654452][T22917] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4188'. [ 631.677960][T22917] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4188'. [ 631.926783][T22925] bond3: option arp_interval: invalid value (18446744073709551615) [ 631.934799][T22925] bond3: option arp_interval: allowed values 0 - 2147483647 [ 631.944382][T22925] bond3 (unregistering): Released all slaves [ 632.005314][T22928] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 632.012162][T22934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4194'. [ 632.919849][T22996] syzkaller0: entered promiscuous mode [ 632.926021][T22996] syzkaller0: entered allmulticast mode [ 632.934551][T22995] 8021q: VLANs not supported on ip6tnl0 [ 632.978380][T23008] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 633.582332][T23026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4217'. [ 636.351037][T23059] sctp: [Deprecated]: syz.2.4223 (pid 23059) Use of int in maxseg socket option. [ 636.351037][T23059] Use struct sctp_assoc_value instead [ 636.390178][T23048] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.397561][T23048] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.479433][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4224'. [ 636.527443][T23061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4224'. [ 636.719978][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 636.738216][T23048] batman_adv: 60X: Interface deactivated: batadv_slave_0 [ 636.753533][T23048] batman_adv: 60X: Interface deactivated: batadv_slave_1 [ 636.930254][T23066] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 637.018219][T20326] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.049885][T23082] bridge0: port 1(vlan3) entered blocking state [ 637.067803][T23082] bridge0: port 1(vlan3) entered disabled state [ 637.082027][T23082] vlan3: entered allmulticast mode [ 637.088371][T23082] geneve0: entered allmulticast mode [ 637.099185][T23082] vlan3: entered promiscuous mode [ 637.104710][T23082] geneve0: entered promiscuous mode [ 637.241323][T20326] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.254856][T20326] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.263728][T23093] netlink: 'syz.4.4231': attribute type 14 has an invalid length. [ 637.312209][T20326] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.381692][T23096] lo speed is unknown, defaulting to 1000 [ 637.536536][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4238'. [ 637.551999][T23118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4238'. [ 637.562046][T23120] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4239'. [ 637.608255][T23116] xt_hashlimit: size too large, truncated to 1048576 [ 637.683866][T23126] bond0: (slave bond_slave_1): Releasing backup interface [ 637.882432][T23137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4242'. [ 637.894923][T23136] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 638.026113][T23136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4243'. [ 638.057870][T23143] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 638.094895][T23143] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 638.241562][T23155] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 638.275724][T23145] bond6: (slave bridge2): Enslaving as an active interface with a down link [ 638.297682][T23155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4246'. [ 638.298260][T23147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4246'. [ 638.501927][T23163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 638.535670][T23164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4248'. [ 638.553416][T23164] netlink: 'syz.4.4248': attribute type 5 has an invalid length. [ 639.532549][T23212] netlink: 'syz.0.4262': attribute type 62 has an invalid length. [ 639.697742][T23218] bond2 (unregistering): Released all slaves [ 639.844141][T23233] 8021q: VLANs not supported on syzkaller1 [ 639.890429][T23220] netlink: 'syz.4.4266': attribute type 2 has an invalid length. [ 639.910002][T23218] xt_nfacct: accounting object `syz0' does not exist [ 640.167996][T23254] netlink: 'syz.2.4276': attribute type 4 has an invalid length. [ 640.214536][T23254] netlink: 'syz.2.4276': attribute type 4 has an invalid length. [ 640.253515][T23254] netlink: 'syz.2.4276': attribute type 4 has an invalid length. [ 640.300346][T23265] netlink: 'syz.3.4275': attribute type 3 has an invalid length. [ 640.510790][T23267] tipc: Enabling of bearer rejected, media not registered [ 640.838234][T23289] syzkaller0: entered promiscuous mode [ 640.850966][T23289] syzkaller0: entered allmulticast mode [ 641.658018][T23336] lo speed is unknown, defaulting to 1000 [ 641.666985][T23336] lo speed is unknown, defaulting to 1000 [ 641.673682][T23336] lo speed is unknown, defaulting to 1000 [ 641.882727][T23344] __nla_validate_parse: 10 callbacks suppressed [ 641.882745][T23344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4302'. [ 641.967961][T23344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4302'. [ 641.990499][T23350] tipc: Enabled bearer , priority 0 [ 642.018781][T23350] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 642.036903][T23350] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 642.073534][T23350] tipc: Resetting bearer [ 642.108174][T23357] No such timeout policy "syz1" [ 642.171542][T23336] infiniband sqz0: set down [ 642.176152][ T5719] lo speed is unknown, defaulting to 1000 [ 642.193476][T23336] infiniband sqz0: added lo [ 642.211737][T23365] netlink: 'syz.4.4307': attribute type 3 has an invalid length. [ 642.282909][T23336] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 642.309785][T23336] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 642.330382][T23336] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 642.394035][T23336] RDS/IB: sqz0: added [ 642.400197][T23336] smc: adding ib device sqz0 with port count 1 [ 642.407771][T23336] smc: ib device sqz0 port 1 has no pnetid [ 642.415048][ T5719] lo speed is unknown, defaulting to 1000 [ 642.422719][T23336] lo speed is unknown, defaulting to 1000 [ 642.563070][T23384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4313'. [ 642.590035][T23384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.906050][ T8348] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 642.921135][T23336] lo speed is unknown, defaulting to 1000 [ 643.397312][T20327] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 643.492059][T23336] lo speed is unknown, defaulting to 1000 [ 643.699300][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4325'. [ 643.749558][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4325'. [ 643.786358][T23429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.877006][ T8349] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 643.948269][T23437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4328'. [ 643.977884][T23438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4328'. [ 644.041727][T23336] lo speed is unknown, defaulting to 1000 [ 644.301770][T23459] netlink: 732 bytes leftover after parsing attributes in process `syz.3.4333'. [ 644.364194][T23459] netlink: 732 bytes leftover after parsing attributes in process `syz.3.4333'. [ 644.403745][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4333'. [ 644.436994][T20327] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 644.466568][T20327] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 644.513829][T23465] lo speed is unknown, defaulting to 1000 [ 644.590514][T23469] lo speed is unknown, defaulting to 1000 [ 644.616463][ T8349] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 644.861475][T23336] lo speed is unknown, defaulting to 1000 [ 644.943059][T23483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.968178][T23483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.994760][T23483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.015683][T23483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.086942][T23483] batadv0 (unregistering): left promiscuous mode [ 645.093592][T23483] batadv0 (unregistering): left allmulticast mode [ 645.113188][T23483] team0: Port device batadv0 removed [ 645.577548][T23465] lo speed is unknown, defaulting to 1000 [ 646.062476][T23336] lo speed is unknown, defaulting to 1000 [ 646.576905][T23527] netlink: 'syz.3.4344': attribute type 10 has an invalid length. [ 646.664511][T23469] lo speed is unknown, defaulting to 1000 [ 647.008395][T23537] __nla_validate_parse: 3 callbacks suppressed [ 647.008413][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 647.054293][T23336] lo speed is unknown, defaulting to 1000 [ 647.362608][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'. [ 647.445487][T23551] openvswitch: netlink: Missing valid actions attribute. [ 647.461471][T23551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.465001][T23553] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4351'. [ 647.483478][T23551] netlink: 'syz.4.4350': attribute type 1 has an invalid length. [ 647.568431][T23555] bond3: (slave geneve2): making interface the new active one [ 647.580016][T23555] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 647.602073][T20327] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 647.613843][T23553] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4351'. [ 647.625095][T23555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4350'. [ 647.635768][T20327] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 647.647343][T23551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4350'. [ 647.653621][T23336] lo speed is unknown, defaulting to 1000 [ 647.656894][T23553] 0{X: renamed from gretap0 (while UP) [ 647.678516][T23553] 0{X: entered allmulticast mode [ 647.685154][T23553] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 647.730280][T23555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.757243][T20327] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 647.775729][T20327] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 647.789388][T23564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4353'. [ 647.895110][T23569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4355'. [ 648.006431][T23571] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 648.143275][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4357'. [ 648.364949][T23583] netlink: 'syz.1.4359': attribute type 11 has an invalid length. [ 648.379411][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4359'. [ 648.516687][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 648.663782][T23579] lo speed is unknown, defaulting to 1000 [ 649.298951][T23618] sock: sock_set_timeout: `syz.1.4367' (pid 23618) tries to set negative timeout [ 649.807388][T23629] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 649.897192][T23579] lo speed is unknown, defaulting to 1000 [ 651.407783][T23694] lo speed is unknown, defaulting to 1000 [ 651.890165][T23714] xt_hashlimit: size too large, truncated to 1048576 [ 651.920743][T23694] lo speed is unknown, defaulting to 1000 [ 652.009699][T23716] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 652.880474][T23745] __nla_validate_parse: 7 callbacks suppressed [ 652.880493][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4398'. [ 652.919919][T23742] lo speed is unknown, defaulting to 1000 [ 653.226865][T23755] netlink: 'syz.0.4402': attribute type 4 has an invalid length. [ 653.278631][T23755] netlink: 'syz.0.4402': attribute type 4 has an invalid length. [ 653.405392][T23758] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4403'. [ 653.996137][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4408'. [ 654.011411][T23772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4408'. [ 654.020189][T23742] lo speed is unknown, defaulting to 1000 [ 654.071587][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4409'. [ 654.127097][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4410'. [ 654.359229][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4412'. [ 654.663188][T23798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4415'. [ 654.883314][ T4942] block nbd4: Receive control failed (result -32) [ 655.098922][T23813] netlink: 'syz.0.4420': attribute type 1 has an invalid length. [ 655.261132][T23813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.591114][T23817] bond4: (slave veth7): Enslaving as an active interface with a down link [ 655.718275][T23820] bond4: (slave veth9): Enslaving as an active interface with a down link [ 655.912109][T23838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4424'. [ 655.949473][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4425'. [ 656.131126][T23847] hmac(sh: entered promiscuous mode [ 656.164737][T23858] bridge3: entered promiscuous mode [ 656.226138][T23859] bridge4: entered promiscuous mode [ 656.244932][T23857] netlink: 'syz.3.4430': attribute type 1 has an invalid length. [ 656.266032][T23857] netlink: 'syz.3.4430': attribute type 2 has an invalid length. [ 656.337344][T23867] dvmrp0: entered allmulticast mode [ 657.080673][T23893] netlink: 'syz.3.4439': attribute type 7 has an invalid length. [ 657.092899][T23893] netlink: 'syz.3.4439': attribute type 8 has an invalid length. [ 657.102359][T23893] netlink: 'syz.3.4439': attribute type 8 has an invalid length. [ 657.110463][T23893] netlink: 'syz.3.4439': attribute type 4 has an invalid length. [ 657.169671][T23893] netlink: 'syz.3.4439': attribute type 7 has an invalid length. [ 657.194872][T23899] macsec2: entered promiscuous mode [ 657.201200][T23899] ip6gretap0: entered promiscuous mode [ 657.207039][T23899] macsec2: entered allmulticast mode [ 657.212455][T23899] ip6gretap0: entered allmulticast mode [ 657.232402][T23899] ip6gretap0: left allmulticast mode [ 657.240244][T23899] ip6gretap0: left promiscuous mode [ 657.463642][T23914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.476399][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 657.944213][T23948] __nla_validate_parse: 17 callbacks suppressed [ 657.944233][T23948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4446'. [ 658.138672][T23947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4454'. [ 658.155218][T23956] syzkaller1: entered promiscuous mode [ 658.199793][T23956] syzkaller1: entered allmulticast mode [ 658.240516][T23962] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4457'. [ 658.622530][T23978] syzkaller0: entered promiscuous mode [ 658.629187][T23978] syzkaller0: entered allmulticast mode [ 658.679474][T23975] lo speed is unknown, defaulting to 1000 [ 658.931507][T23985] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1500) ! [ 658.950871][T23985] syzkaller0: entered promiscuous mode [ 658.966597][T23985] syzkaller0: entered allmulticast mode [ 659.055248][T23993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4467'. [ 659.086050][T23993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4467'. [ 659.107533][T23975] lo speed is unknown, defaulting to 1000 [ 659.345748][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4472'. [ 659.423360][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 659.435024][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4471'. [ 659.463062][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 659.463073][T20327] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.484921][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4471'. [ 659.504612][T20326] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 659.553832][T20327] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.564769][T20327] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.594187][T20327] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.856525][T24020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.886986][T24020] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.962287][T24020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.124648][ T29] audit: type=1800 audit(1777846698.932:15): pid=24031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4475" name="r" dev="tmpfs" ino=1226 res=0 errno=0 [ 660.139149][T24020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.229777][T24020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.243111][T24020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.254886][T24020] veth1_vlan: left promiscuous mode [ 660.261535][T24020] veth0_vlan: left promiscuous mode [ 660.268370][T24020] veth0_vlan: entered promiscuous mode [ 660.275865][T24020] veth1_vlan: entered promiscuous mode [ 660.284448][T24020] veth1_macvtap: left promiscuous mode [ 660.290760][T24020] veth0_macvtap: left promiscuous mode [ 660.297579][T24020] veth0_macvtap: entered promiscuous mode [ 660.304072][T24020] veth1_macvtap: entered promiscuous mode [ 660.313428][T24020] bridge0: port 1(vlan3) entered blocking state [ 660.319811][T24020] bridge0: port 1(vlan3) entered forwarding state [ 660.330658][T24020] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 660.365496][T20326] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.372716][T20326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.420037][T20327] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.428521][T20327] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.457778][T20327] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.466434][T20324] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.144675][T24049] netlink: 'syz.4.4481': attribute type 16 has an invalid length. [ 662.319243][T24005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.341620][T24022] netlink: 'syz.3.4475': attribute type 1 has an invalid length. [ 662.584966][T24063] syzkaller0: entered promiscuous mode [ 662.606928][T24063] syzkaller0: entered allmulticast mode [ 662.699481][T24071] netem: change failed [ 662.785152][T20329] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 662.817818][T24062] netlink: 'syz.4.4485': attribute type 13 has an invalid length. [ 662.830059][T20329] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 662.832720][T24077] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 662.849736][T20329] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 662.869815][T20329] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 663.172367][T24101] rdma_rxe: rxe_newlink: failed to add lo [ 663.423478][T24115] nbd: nbd0 already in use [ 663.439943][T24115] block nbd0: NBD_DISCONNECT [ 663.452280][T24115] block nbd0: Send disconnect failed -32 [ 663.462633][T24115] block nbd0: Send disconnect failed -32 [ 663.469716][T24115] block nbd0: shutting down sockets [ 663.509813][T24115] __nla_validate_parse: 6 callbacks suppressed [ 663.509838][T24115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4498'. [ 663.888045][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4508'. [ 663.929110][T13322] IPVS: starting estimator thread 0... [ 663.997957][T24158] netlink: 452 bytes leftover after parsing attributes in process `syz.1.4508'. [ 664.039888][T24153] IPVS: using max 29 ests per chain, 69600 per kthread [ 664.354568][T24184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4514'. [ 664.461632][T24184] batman_adv: batadv0: Adding interface: veth11 [ 664.465809][T24188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'. [ 664.470406][T24184] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.510416][T24192] netlink: 'syz.0.4516': attribute type 1 has an invalid length. [ 664.523453][T24192] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4516'. [ 664.534608][T24184] batman_adv: batadv0: Interface activated: veth11 [ 664.857284][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4518'. [ 664.867373][T24201] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4518'. [ 664.877921][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4518'. [ 665.270633][T24199] netlink: 'syz.0.4517': attribute type 6 has an invalid length. [ 665.293439][T24199] netlink: 'syz.0.4517': attribute type 23 has an invalid length. [ 665.304029][T24199] IPv6: NLM_F_CREATE should be specified when creating new route [ 665.391325][T24222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4523'. [ 666.414678][T24259] syzkaller1: entered promiscuous mode [ 666.429070][T24259] syzkaller1: entered allmulticast mode [ 666.563771][T24278] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 666.595986][T24278] 8021q: adding VLAN 0 to HW filter on device bond8 [ 666.617897][T24278] vlan4: entered promiscuous mode [ 666.624035][T24278] bond8: entered promiscuous mode [ 666.629812][T24278] vlan4: entered allmulticast mode [ 666.634978][T24278] bond8: entered allmulticast mode [ 666.678191][T24278] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 666.691057][T24278] bond8: (slave batadv2): making interface the new active one [ 666.699780][T24285] netlink: 'syz.2.4543': attribute type 1 has an invalid length. [ 666.700016][T24278] batadv2: entered promiscuous mode [ 666.713238][T24278] batadv2: entered allmulticast mode [ 666.719659][T24278] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 666.831056][T24284] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 666.848223][T24284] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 666.896107][T24285] bond1: (slave bridge6): Enslaving as an active interface with a down link [ 666.920546][T24295] openvswitch: netlink: Flow actions attr not present in new flow. [ 666.930720][T24290] bond1: (slave bridge7): Enslaving as an active interface with a down link [ 667.028997][T24292] lo speed is unknown, defaulting to 1000 [ 667.813962][T24292] lo speed is unknown, defaulting to 1000 [ 667.816612][T24325] lo speed is unknown, defaulting to 1000 [ 667.850944][T24335] lo speed is unknown, defaulting to 1000 [ 668.041798][T24349] xt_hashlimit: size too large, truncated to 1048576 [ 668.109646][T24346] vxcan0: entered allmulticast mode [ 668.274084][T24353] bond2: option mode: invalid value (12) [ 668.301492][T24353] bond2 (unregistering): Released all slaves [ 668.557162][T24325] lo speed is unknown, defaulting to 1000 [ 669.319234][T24335] lo speed is unknown, defaulting to 1000 [ 669.869720][T24392] netlink: 'syz.2.4566': attribute type 15 has an invalid length. [ 670.834533][T24415] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 670.855430][T24415] bond5 (unregistering): Released all slaves [ 671.084480][T24423] lo speed is unknown, defaulting to 1000 [ 671.255454][T24428] sctp: [Deprecated]: syz.4.4573 (pid 24428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.255454][T24428] Use struct sctp_sack_info instead [ 671.707947][T24448] __nla_validate_parse: 16 callbacks suppressed [ 671.707965][T24448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4578'. [ 671.753917][T24448] netlink: 'syz.0.4578': attribute type 1 has an invalid length. [ 671.770475][T24452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4580'. [ 671.815377][T24454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4581'. [ 671.824913][T24454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4581'. [ 671.964963][T24460] syzkaller0: entered promiscuous mode [ 671.982080][T24460] syzkaller0: entered allmulticast mode [ 672.010211][T24423] lo speed is unknown, defaulting to 1000 [ 672.088141][T24472] netlink: 'syz.1.4585': attribute type 1 has an invalid length. [ 672.351762][T24485] netlink: 'syz.1.4589': attribute type 1 has an invalid length. [ 672.387193][T24485] netlink: 'syz.1.4589': attribute type 1 has an invalid length. [ 672.519110][T24500] netlink: 844 bytes leftover after parsing attributes in process `syz.3.4592'. [ 672.651193][T24507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4593'. [ 672.679875][T24507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4593'. [ 672.704598][T24507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4593'. [ 672.741419][T24507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4593'. [ 672.767383][T24507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4593'. [ 673.445588][T24536] lo speed is unknown, defaulting to 1000 [ 673.477349][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 673.686665][T24551] syzkaller0: entered promiscuous mode [ 673.711761][T24551] syzkaller0: entered allmulticast mode [ 674.017422][T24560] lo speed is unknown, defaulting to 1000 [ 674.233146][T24536] lo speed is unknown, defaulting to 1000 [ 674.457625][T24584] lo speed is unknown, defaulting to 1000 [ 674.826511][T24560] lo speed is unknown, defaulting to 1000 [ 675.471042][T24584] lo speed is unknown, defaulting to 1000 [ 675.686842][ T4942] Bluetooth: hci2: link tx timeout [ 675.699221][ T4942] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 676.128386][T24608] netlink: 'syz.0.4621': attribute type 4 has an invalid length. [ 676.188030][T24612] netlink: 'syz.0.4621': attribute type 4 has an invalid length. [ 676.346301][T24614] netlink: 'syz.0.4621': attribute type 4 has an invalid length. [ 677.084666][T24633] __nla_validate_parse: 62 callbacks suppressed [ 677.084684][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4626'. [ 677.105565][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4627'. [ 677.135507][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4626'. [ 677.282564][T24633] team0: entered promiscuous mode [ 677.298162][T24633] team0: entered allmulticast mode [ 677.322474][T24633] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.338378][T24635] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 677.472133][T24635] team1: entered promiscuous mode [ 677.477667][T24635] team1: entered allmulticast mode [ 677.483901][T24635] 8021q: adding VLAN 0 to HW filter on device team1 [ 677.716651][ T4942] Bluetooth: hci2: command 0x0405 tx timeout [ 677.764512][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'. [ 677.959182][T24669] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 677.992117][T24669] netlink: 'syz.1.4635': attribute type 2 has an invalid length. [ 678.029412][T24669] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 678.067758][T24669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4635'. [ 678.091466][T24681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4637'. [ 678.110863][T24681] netlink: 'syz.3.4637': attribute type 7 has an invalid length. [ 678.119572][T24681] netlink: 'syz.3.4637': attribute type 8 has an invalid length. [ 678.128025][T24681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4637'. [ 678.154439][T24687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4639'. [ 678.192719][T24687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4639'. [ 678.332927][T24699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4639'. [ 678.707691][T24713] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 678.707691][T24715] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 679.384193][T24744] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 679.402443][T24744] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 680.482887][T24803] lo speed is unknown, defaulting to 1000 [ 680.516485][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 680.799805][T24820] bridge4: entered allmulticast mode [ 681.012558][T24803] lo speed is unknown, defaulting to 1000 [ 681.770370][T24841] bond2: (slave vcan1): refused to change device type [ 681.781082][T24851] syz.4.4683: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 681.800960][T24851] CPU: 1 UID: 0 PID: 24851 Comm: syz.4.4683 Not tainted syzkaller #0 PREEMPT(full) [ 681.801005][T24851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.801032][T24851] Call Trace: [ 681.801043][T24851] [ 681.801051][T24851] dump_stack_lvl+0xe8/0x150 [ 681.801080][T24851] warn_alloc+0x249/0x340 [ 681.801110][T24851] ? stack_trace_save+0xa9/0x100 [ 681.801142][T24851] ? __pfx_warn_alloc+0x10/0x10 [ 681.801177][T24851] ? kasan_save_track+0x4f/0x80 [ 681.801199][T24851] ? kasan_save_track+0x3e/0x80 [ 681.801220][T24851] ? __kasan_kmalloc+0x93/0xb0 [ 681.801242][T24851] ? __kmalloc_cache_noprof+0x31c/0x660 [ 681.801265][T24851] ? xskq_create+0x56/0x170 [ 681.801281][T24851] ? xsk_setsockopt+0x54c/0x990 [ 681.801308][T24851] ? do_sock_setsockopt+0x17c/0x1b0 [ 681.801329][T24851] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 681.801350][T24851] ? do_syscall_64+0x15f/0xf80 [ 681.801376][T24851] __vmalloc_node_range_noprof+0x132/0x1750 [ 681.801428][T24851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 681.801462][T24851] ? __kasan_kmalloc+0x93/0xb0 [ 681.801496][T24851] vmalloc_user_noprof+0xad/0xe0 [ 681.801523][T24851] ? xskq_create+0xbf/0x170 [ 681.801545][T24851] xskq_create+0xbf/0x170 [ 681.801566][T24851] xsk_init_queue+0x8a/0xe0 [ 681.801588][T24851] xsk_setsockopt+0x54c/0x990 [ 681.801621][T24851] ? __pfx_xsk_setsockopt+0x10/0x10 [ 681.801652][T24851] ? __pfx_aa_sk_perm+0x10/0x10 [ 681.801678][T24851] ? aa_sock_opt_perm+0xff/0x1a0 [ 681.801707][T24851] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 681.801734][T24851] ? __pfx_xsk_setsockopt+0x10/0x10 [ 681.801766][T24851] do_sock_setsockopt+0x17c/0x1b0 [ 681.801796][T24851] __x64_sys_setsockopt+0x13d/0x1b0 [ 681.801831][T24851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.801854][T24851] do_syscall_64+0x15f/0xf80 [ 681.801876][T24851] ? trace_irq_disable+0x3b/0x140 [ 681.801906][T24851] ? clear_bhb_loop+0x40/0x90 [ 681.801931][T24851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.801950][T24851] RIP: 0033:0x7f8b0379cdd9 [ 681.801969][T24851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.801990][T24851] RSP: 002b:00007f8b046b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 681.802009][T24851] RAX: ffffffffffffffda RBX: 00007f8b03a16180 RCX: 00007f8b0379cdd9 [ 681.802023][T24851] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 681.802033][T24851] RBP: 00007f8b03832d69 R08: 0000000000000004 R09: 0000000000000000 [ 681.802044][T24851] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.802056][T24851] R13: 00007f8b03a16218 R14: 00007f8b03a16180 R15: 00007ffdd28ce938 [ 681.802083][T24851] [ 681.802168][T24851] Mem-Info: [ 681.877252][T24853] sctp: [Deprecated]: syz.1.4684 (pid 24853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.877252][T24853] Use struct sctp_sack_info instead [ 681.879467][T24851] active_anon:5855 inactive_anon:0 isolated_anon:0 [ 681.879467][T24851] active_file:2078 inactive_file:41089 isolated_file:0 [ 681.879467][T24851] unevictable:768 dirty:273 writeback:0 [ 681.879467][T24851] slab_reclaimable:12791 slab_unreclaimable:192147 [ 681.879467][T24851] mapped:30653 shmem:1294 pagetables:1430 [ 681.879467][T24851] sec_pagetables:0 bounce:0 [ 681.879467][T24851] kernel_misc_reclaimable:0 [ 681.879467][T24851] free:1209016 free_pcp:26681 free_cma:0 [ 682.139951][T24851] Node 0 active_anon:23420kB inactive_anon:0kB active_file:8312kB inactive_file:164152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32596kB dirty:1088kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16208kB pagetables:5552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 682.174683][T24851] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90016kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 682.208447][T24851] Node 0 DMA free:11232kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB [ 682.266482][T24851] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 682.276972][T24851] Node 0 DMA32 free:1233580kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23320kB inactive_anon:0kB active_file:8312kB inactive_file:164152kB unevictable:1536kB writepending:1088kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:47392kB local_pcp:21084kB free_cma:0kB [ 682.369024][T24851] lowmem_reserve[]: 0 0 0 0 0 [ 682.387837][T24851] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 682.428851][T24851] lowmem_reserve[]: 0 0 0 0 0 [ 682.433777][T24851] Node 1 Normal free:3591252kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59396kB local_pcp:30248kB free_cma:0kB [ 682.472343][T24851] lowmem_reserve[]: 0 0 0 0 0 [ 682.477561][T24851] Node 0 DMA: 0*4kB 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11232kB [ 682.495667][T24860] __nla_validate_parse: 11 callbacks suppressed [ 682.495682][T24860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4686'. [ 682.511700][T24851] Node 0 DMA32: 6294*4kB (UME) 6998*8kB (UME) 3345*16kB (UM) 530*32kB (UME) 839*64kB (UME) 847*128kB (UM) 737*256kB (UME) 480*512kB (UME) 258*1024kB (UM) 108*2048kB (UM) 0*4096kB = 1233560kB [ 682.542999][T24851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 682.556777][T24851] Node 1 Normal: 4*4kB (U) 9*8kB (UM) 13*16kB (UM) 13*32kB (UM) 9*64kB (UM) 13*128kB (UM) 9*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 5*2048kB (U) 871*4096kB (UM) = 3591304kB [ 682.574383][T24851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.584377][T24851] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 682.605228][T24851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.616757][T24851] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 682.626460][T24851] 44457 total pagecache pages [ 682.631245][T24851] 0 pages in swap cache [ 682.635582][T24851] Free swap = 124996kB [ 682.641152][T24851] Total swap = 124996kB [ 682.645377][T24851] 2097051 pages RAM [ 682.651370][T24851] 0 pages HighMem/MovableOnly [ 682.662763][T24851] 427099 pages reserved [ 682.674634][T24851] 0 pages cma reserved [ 682.821578][T24855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.852726][T24855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.863611][T24855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53291 - 0 [ 682.875842][T24868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4687'. [ 683.115287][T24855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.175785][T24855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.195135][T24855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53291 - 0 [ 683.348347][T24855] bridge0: port 4(netdevsim1) entered disabled state [ 683.392699][T24855] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 683.404670][T24855] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 683.416207][T24855] bridge0: port 4(netdevsim1) entered disabled state [ 683.458748][T24855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.469468][T24855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.481442][T24855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53291 - 0 [ 683.519648][T24879] hm3): entered promiscuous mode [ 683.742048][T24855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.785511][T24855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.807958][T24855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53291 - 0 [ 683.845520][T24893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4697'. [ 683.865652][T24907] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4702'. [ 683.978284][T24907] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4702'. [ 683.995689][T24910] netlink: 'syz.4.4703': attribute type 1 has an invalid length. [ 684.050847][T24910] bond5: entered promiscuous mode [ 684.066484][T24910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 684.089452][T24919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4703'. [ 684.120471][T24915] bond9: option miimon: invalid value (18446744073709551607) [ 684.128036][T24915] bond9: option miimon: allowed values 0 - 2147483647 [ 684.162918][T24915] bond9 (unregistering): Released all slaves [ 684.194234][T24920] pim6reg: entered allmulticast mode [ 684.211217][T20328] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.220329][T20328] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 53291 - 0 [ 684.228883][T20328] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 684.245654][T24919] bond5: entered allmulticast mode [ 684.335388][T24910] bond5: (slave bridge7): making interface the new active one [ 684.343670][T24910] bridge7: entered promiscuous mode [ 684.349239][T24910] bridge7: entered allmulticast mode [ 684.355870][T24910] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 684.378387][T20327] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.388089][T20327] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 53291 - 0 [ 684.398777][T20327] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 684.401259][T24930] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.4707'. [ 684.505915][T24927] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 684.524335][T24929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4708'. [ 684.553654][T20327] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.564052][T20327] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 53291 - 0 [ 684.576776][T20327] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 684.613840][T20327] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.625392][T20327] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 53291 - 0 [ 684.640961][T20327] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 684.715864][T24942] netlink: 'syz.4.4711': attribute type 1 has an invalid length. [ 684.775354][T24946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4712'. [ 684.804066][T24942] bond6: entered promiscuous mode [ 684.810283][T24942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 684.836737][ T5633] Bluetooth: hci2: command 0x0405 tx timeout [ 684.842534][T24942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4711'. [ 684.931687][T24942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.977847][T24942] bond6: (slave batadv0): making interface the new active one [ 684.986955][T24942] batadv0: entered promiscuous mode [ 685.001655][T24942] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 685.028075][T24952] netlink: 'syz.0.4714': attribute type 1 has an invalid length. [ 685.218730][T24960] vlan3: entered promiscuous mode [ 685.229377][T24960] bridge0: entered promiscuous mode [ 685.299634][T24958] raw_sendmsg: syz.3.4715 forgot to set AF_INET. Fix it! [ 685.459001][T24973] netlink: 'syz.0.4717': attribute type 4 has an invalid length. [ 685.514340][T24962] netlink: 'syz.0.4717': attribute type 9 has an invalid length. [ 685.637773][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.762651][T20327] tipc: Subscription rejected, illegal request [ 687.048612][T25049] nbd: socks must be embedded in a SOCK_ITEM attr [ 687.061292][T25052] nbd: socks must be embedded in a SOCK_ITEM attr [ 687.481270][T25085] netlink: 'syz.1.4750': attribute type 3 has an invalid length. [ 687.564881][T25090] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 687.942189][T25116] netlink: 'syz.2.4759': attribute type 27 has an invalid length. [ 687.992638][T25114] syzkaller0: entered promiscuous mode [ 688.000464][T25114] syzkaller0: entered allmulticast mode [ 688.070872][T25128] __nla_validate_parse: 9 callbacks suppressed [ 688.070891][T25128] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4762'. [ 688.193473][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4758'. [ 688.414656][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4763'. [ 688.894124][T25116] ip6erspan0: left promiscuous mode [ 688.905236][T25116] ip6erspan0: left allmulticast mode [ 688.911293][T25116] macsec1: left allmulticast mode [ 688.917275][T25116] veth5: left promiscuous mode [ 688.922219][T25116] vlan3: left allmulticast mode [ 688.927274][T25116] macvtap0: left allmulticast mode [ 688.932497][T25116] geneve2: left promiscuous mode [ 688.937804][T25116] geneve2: left allmulticast mode [ 688.962760][T25116] bridge3: left promiscuous mode [ 688.975954][T25116] bridge4: left promiscuous mode [ 689.002050][T25116] batman_adv: batadv0: Interface deactivated: veth11 [ 689.072921][T25123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.082551][T25123] 8021q: adding VLAN 0 to HW filter on device ` [ 689.092204][T25153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4766'. [ 689.103459][T25123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.145368][T25123] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 689.153487][T25154] xt_hashlimit: size too large, truncated to 1048576 [ 689.530742][T25162] netlink: 'syz.1.4767': attribute type 1 has an invalid length. [ 689.558022][T25162] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4767'. [ 691.366696][T20327] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.375621][T20327] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.384691][ T8335] lo speed is unknown, defaulting to 1000 [ 691.392004][ T8335] sqz0: Port: 1 Link ACTIVE [ 691.419860][T25159] bridge4: entered promiscuous mode [ 691.463697][T20327] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.491801][ T8334] lo speed is unknown, defaulting to 1000 [ 691.492634][T25135] lo speed is unknown, defaulting to 1000 [ 691.505058][T20327] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.616498][T25172] netlink: 'syz.3.4771': attribute type 1 has an invalid length. [ 691.649027][T25172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4771'. [ 691.726810][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4772'. [ 691.760582][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4773'. [ 691.838697][T25178] bond7: entered promiscuous mode [ 691.866478][T25178] bond7: entered allmulticast mode [ 691.873072][T25178] netlink: 'syz.4.4772': attribute type 5 has an invalid length. [ 691.923461][T25187] netlink: 'syz.3.4776': attribute type 4 has an invalid length. [ 692.263785][T25205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4783'. [ 692.283723][T25135] lo speed is unknown, defaulting to 1000 [ 692.392789][T25212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4781'. [ 692.535666][T25219] netlink: 'syz.3.4785': attribute type 1 has an invalid length. [ 692.860986][T25226] netlink: 'syz.1.4787': attribute type 1 has an invalid length. [ 692.887847][T25226] netlink: 'syz.1.4787': attribute type 2 has an invalid length. [ 694.282679][T25275] __nla_validate_parse: 1 callbacks suppressed [ 694.282698][T25275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4803'. [ 694.323304][T25275] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4803'. [ 694.430852][T25281] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4805'. [ 694.501464][T25288] netlink: 'syz.4.4808': attribute type 1 has an invalid length. [ 694.624196][T25296] lo speed is unknown, defaulting to 1000 [ 694.817833][T25292] bond1: option packets_per_slave: invalid value (1048582) [ 694.836322][T25292] bond1: option packets_per_slave: allowed values 0 - 65535 [ 694.864875][T25292] bond1 (unregistering): Released all slaves [ 695.024850][T25321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4814'. [ 695.056522][T25321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4814'. [ 695.077049][T25321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4814'. [ 695.290081][T25327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4815'. [ 695.683059][T25296] lo speed is unknown, defaulting to 1000 [ 695.726534][ T4942] Bluetooth: hci2: command 0x0405 tx timeout [ 695.777306][T25342] netlink: 'syz.4.4820': attribute type 3 has an invalid length. [ 696.035251][T25345] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4821'. [ 696.283827][T25350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4822'. [ 696.732489][T25364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4826'. [ 697.405410][T25403] netlink: 'syz.3.4834': attribute type 1 has an invalid length. [ 697.432897][T25403] netlink: 'syz.3.4834': attribute type 1 has an invalid length. [ 697.618562][T25395] team0: entered promiscuous mode [ 697.629545][T25395] team0: entered allmulticast mode [ 697.635445][T25395] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.022143][T25439] sch_tbf: burst 0 is lower than device sit0 mtu (32769) ! [ 698.064377][T25441] 8021q: VLANs not supported on lo [ 698.606997][T25476] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 698.663529][T25476] bond9: (slave geneve2): making interface the new active one [ 698.672906][T25476] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 698.704795][T20329] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 698.713232][T20329] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 698.732578][T20329] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 698.747672][T20329] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 699.035408][T25502] bridge0: port 3(erspan0) entered blocking state [ 699.043052][T25502] bridge0: port 3(erspan0) entered disabled state [ 699.049779][T25502] erspan0: entered allmulticast mode [ 699.056262][T25502] erspan0: entered promiscuous mode [ 699.062814][T25502] bridge0: port 3(erspan0) entered blocking state [ 699.069337][T25502] bridge0: port 3(erspan0) entered forwarding state [ 699.080173][T25502] erspan0: left allmulticast mode [ 699.085276][T25502] erspan0: left promiscuous mode [ 699.092243][T25502] bridge0: port 3(erspan0) entered disabled state [ 699.770168][T25528] __nla_validate_parse: 12 callbacks suppressed [ 699.770185][T25528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4873'. [ 699.827294][T25530] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4874'. [ 700.017340][T25544] netlink: 'syz.4.4876': attribute type 11 has an invalid length. [ 700.053105][T25544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4876'. [ 700.108966][T25547] lo speed is unknown, defaulting to 1000 [ 700.650661][T25547] lo speed is unknown, defaulting to 1000 [ 700.866980][T25582] lo speed is unknown, defaulting to 1000 [ 700.938181][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4886'. [ 701.259811][T25594] bond10: option packets_per_slave: invalid value (1048582) [ 701.282059][T25594] bond10: option packets_per_slave: allowed values 0 - 65535 [ 701.310064][T25594] bond10 (unregistering): Released all slaves [ 701.540461][T25597] netlink: 'syz.2.4887': attribute type 16 has an invalid length. [ 701.675684][T25606] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4891'. [ 701.719639][T25582] lo speed is unknown, defaulting to 1000 [ 701.750716][T25604] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4890'. [ 702.042076][T25621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4895'. [ 702.215667][T25629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4899'. [ 702.224862][T25629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4899'. [ 702.442147][T25638] netlink: 'syz.1.4901': attribute type 30 has an invalid length. [ 702.466701][T25638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4901'. [ 702.761696][T25638] bond10: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 702.784184][ T5633] block nbd0: Receive control failed (result -1) [ 702.827905][T25638] bond10 (unregistering): Released all slaves [ 702.981493][T25641] syz_tun: entered allmulticast mode [ 703.050135][T25644] syz_tun (unregistering): left allmulticast mode [ 703.386875][T25661] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 703.573132][T25663] lo speed is unknown, defaulting to 1000 [ 703.773986][T25682] openvswitch: netlink: Flow actions attr not present in new flow. [ 704.084461][T25690] netlink: 'syz.2.4913': attribute type 29 has an invalid length. [ 704.113849][T25690] netlink: 'syz.2.4913': attribute type 29 has an invalid length. [ 704.125433][T25697] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 704.205990][T25692] lo speed is unknown, defaulting to 1000 [ 704.291440][T25700] tcf_pedit_act: 7 callbacks suppressed [ 704.292892][T25700] tc action pedit offset must be on 32 bit boundaries [ 704.371133][T25663] lo speed is unknown, defaulting to 1000 [ 704.914118][T25721] __nla_validate_parse: 8 callbacks suppressed [ 704.914135][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4923'. [ 704.942405][T25724] xt_hashlimit: size too large, truncated to 1048576 [ 704.955292][T25692] lo speed is unknown, defaulting to 1000 [ 704.964624][T25724] xt_hashlimit: max too large, truncated to 1048576 [ 705.253901][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4928'. [ 705.293065][T25742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4928'. [ 705.630309][T25759] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4933'. [ 705.936787][T25765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.295720][T25781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4939'. [ 706.331444][T25785] netlink: 826 bytes leftover after parsing attributes in process `syz.0.4940'. [ 706.371015][T25785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4940'. [ 706.410036][T25785] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.4940'. [ 706.441896][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4940'. [ 706.473573][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4940'. [ 706.595849][T25792] sock: sock_set_timeout: `syz.4.4943' (pid 25792) tries to set negative timeout [ 706.678058][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 706.714836][T25794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.726871][T25794] 8021q: adding VLAN 0 to HW filter on device ` [ 706.758624][T25794] bridge0: port 3(dummy0) entered blocking state [ 706.766094][T25794] bridge0: port 3(dummy0) entered forwarding state [ 706.767073][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 706.798341][T25794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.849179][T25794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.862475][T25794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 706.878527][T25794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.890033][T25794] veth1_vlan: left promiscuous mode [ 706.896003][T25794] veth0_vlan: left promiscuous mode [ 706.902388][T25794] veth0_vlan: entered promiscuous mode [ 706.910479][T25794] veth1_vlan: entered promiscuous mode [ 706.920113][T25794] veth1_macvtap: left promiscuous mode [ 706.927722][T25794] veth1_macvtap: entered promiscuous mode [ 706.935993][T25794] bridge0: port 4(vlan2) entered blocking state [ 706.942374][T25794] bridge0: port 4(vlan2) entered forwarding state [ 706.951111][T25794] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 706.985795][T20328] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.993082][T20328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.035192][T20328] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.042452][T20328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.232174][T25813] netlink: 'syz.0.4949': attribute type 1 has an invalid length. [ 707.308598][T25813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 707.494910][T25826] ..@: renamed from bond_slave_0 (while UP) [ 707.552803][T25832] lo speed is unknown, defaulting to 1000 [ 707.708994][T25840] netlink: 'syz.3.4957': attribute type 4 has an invalid length. [ 707.753212][T25840] netlink: 'syz.3.4957': attribute type 4 has an invalid length. [ 708.010915][T25848] dvmrp6: entered allmulticast mode [ 708.041902][T25848] xt_connbytes: Forcing CT accounting to be enabled [ 708.170903][T25854] sock: sock_timestamping_bind_phc: sock not bind to device [ 708.201976][T25832] lo speed is unknown, defaulting to 1000 [ 708.604153][T25868] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.614784][T25868] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53291 - 0 [ 708.626015][T25868] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 708.722318][T25868] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.734252][T25868] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53291 - 0 [ 708.745569][T25868] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 708.817883][T25868] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.828122][T25868] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53291 - 0 [ 708.847920][T25868] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 708.961894][T25868] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.976437][T25868] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53291 - 0 [ 708.988195][T25868] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 709.012753][T25882] netlink: 'syz.1.4968': attribute type 1 has an invalid length. [ 709.220404][T25882] 8021q: adding VLAN 0 to HW filter on device bond10 [ 709.294780][T25885] vlan1: entered promiscuous mode [ 709.301229][T25885] bond10: entered promiscuous mode [ 709.309749][T25885] vlan1: entered allmulticast mode [ 709.315102][T25885] bond10: entered allmulticast mode [ 709.679210][ T6070] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.696985][ T6070] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 53291 - 0 [ 709.710647][ T6070] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 709.736835][ T6070] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.745221][ T6070] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 53291 - 0 [ 709.753635][ T6070] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 709.804474][T20324] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.813096][T20324] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 53291 - 0 [ 709.821798][T20324] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 709.841968][ T6070] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.850401][ T6070] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 53291 - 0 [ 709.859081][ T6070] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 709.874538][T25911] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 709.920867][T25911] gretap2: entered allmulticast mode [ 709.932852][T25911] bond8: (slave gretap2): making interface the new active one [ 709.941733][T25911] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 710.149133][T25924] pim6reg: entered allmulticast mode [ 710.379760][T25937] __nla_validate_parse: 10 callbacks suppressed [ 710.379776][T25937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4983'. [ 710.405084][T25940] netlink: 'syz.3.4982': attribute type 1 has an invalid length. [ 710.405631][T25939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4983'. [ 710.446318][T25940] netlink: 'syz.3.4982': attribute type 1 has an invalid length. [ 710.467339][T25940] netlink: 'syz.3.4982': attribute type 2 has an invalid length. [ 710.480347][T25940] netlink: 'syz.3.4982': attribute type 2 has an invalid length. [ 710.489377][T25940] netlink: 'syz.3.4982': attribute type 2 has an invalid length. [ 710.525478][T25940] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 710.539067][T25946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4984'. [ 710.638787][T25953] sctp: [Deprecated]: syz.0.4986 (pid 25953) Use of int in max_burst socket option. [ 710.638787][T25953] Use struct sctp_assoc_value instead [ 710.708653][T25946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 710.781724][T25946] bond4 (unregistering): Released all slaves [ 711.004279][T25963] xt_hashlimit: size too large, truncated to 1048576 [ 711.071590][T25974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4988'. [ 711.300219][T25987] ip6t_srh: unknown srh invflags BA61 [ 711.329261][T25990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'. [ 711.645471][T26003] bridge0: port 3(dummy0) entered disabled state [ 711.707347][T26003] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.727174][T26003] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.740199][T26014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5002'. [ 711.856819][T26003] bridge0: port 4(vlan2) entered disabled state [ 711.950798][T26011] bridge0: port 3(dummy0) entered blocking state [ 711.957500][T26011] bridge0: port 3(dummy0) entered forwarding state [ 711.993226][T26011] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.000534][T26011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.012686][T26011] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.019957][T26011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.065481][T26011] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 712.158352][T20329] bridge0: port 4(vlan2) entered blocking state [ 712.164797][T20329] bridge0: port 4(vlan2) entered forwarding state [ 712.312798][T26034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5006'. [ 712.434828][T26039] syzkaller0: entered promiscuous mode [ 712.452282][T26039] syzkaller0: entered allmulticast mode [ 712.480414][T26037] syzkaller0: entered promiscuous mode [ 712.489236][T26037] syzkaller0: entered allmulticast mode [ 712.681363][T26045] tc_dump_action: action bad kind [ 712.686895][T26053] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5010'. [ 712.697592][T26052] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5010'. [ 712.723937][T26055] veth14: entered allmulticast mode [ 712.796389][T26051] tipc: Enabling of bearer rejected, failed to enable media [ 712.804771][T26052] tipc: Enabling of bearer rejected, failed to enable media [ 713.002408][T26063] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5012'. [ 713.041685][T26062] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.099731][T26062] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.174782][T26067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.203369][T26067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.214640][T26067] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 713.224414][T26067] bond0 (unregistering): Released all slaves [ 713.248537][T26080] validate_nla: 4 callbacks suppressed [ 713.248554][T26080] netlink: 'syz.1.5015': attribute type 10 has an invalid length. [ 713.264219][T26062] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.285805][T26062] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.366748][T26084] bridge0: port 3(team0) entered disabled state [ 713.385221][T26084] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.404545][T26080] netlink: 'syz.1.5015': attribute type 27 has an invalid length. [ 713.463071][T26062] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.488115][T26062] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.607250][T26092] netlink: 'syz.2.5019': attribute type 8 has an invalid length. [ 713.608246][T26095] xt_l2tp: v2 sid > 0xffff: 8388608 [ 713.860126][T26062] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.878494][T26062] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.231278][T20329] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.245741][T20329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.306032][T26121] syzkaller0: entered promiscuous mode [ 714.323403][T26121] syzkaller0: entered allmulticast mode [ 714.344428][T20329] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.365216][T20329] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.447562][T18016] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.469853][T18016] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.805211][T18016] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.825093][T18016] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.153857][T26149] gretap0: entered promiscuous mode [ 717.167186][T26155] 0{X: renamed from gretap0 [ 717.173062][T26155] 0{X: left promiscuous mode [ 717.178833][T26155] 0{X: entered allmulticast mode [ 717.184785][T26155] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 717.393220][T18016] bridge0: port 3(dummy0) entered disabled state [ 717.418779][T18016] bridge_slave_1: left allmulticast mode [ 717.438662][T18016] bridge_slave_1: left promiscuous mode [ 717.438995][T26170] __nla_validate_parse: 9 callbacks suppressed [ 717.439010][T26170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5033'. [ 717.458262][T18016] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.511869][T18016] bridge_slave_0: left allmulticast mode [ 717.525502][T18016] bridge_slave_0: left promiscuous mode [ 717.532521][T26174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5037'. [ 717.537129][T18016] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.844843][T18016] batman_adv: batadv0: Removing interface: ip6gretap1 [ 718.285792][T18016] bond2 (unregistering): (slave bridge6): Releasing backup interface [ 718.303289][T18016] bridge6 (unregistering): left promiscuous mode [ 718.341605][T18016] bond0 (unregistering): (slave 45): Releasing backup interface [ 718.351827][T18016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.366451][T18016] bond0 (unregistering): Released all slaves [ 718.380885][T18016] bond1 (unregistering): Released all slaves [ 718.400899][T18016] bond2 (unregistering): Released all slaves [ 718.429615][T18016] bond3 (unregistering): Released all slaves [ 718.449330][T18016] bond4 (unregistering): Released all slaves [ 718.463748][T18016] bond6 (unregistering): Released all slaves [ 718.480751][T18016] bond5 (unregistering): Released all slaves [ 718.604473][T26195] bridge0: port 3(vlan2) entered blocking state [ 718.613225][T26195] bridge0: port 3(vlan2) entered disabled state [ 718.624836][T26195] vlan2: entered allmulticast mode [ 718.657447][T26195] geneve0: entered allmulticast mode [ 718.676926][T26195] vlan2: entered promiscuous mode [ 718.683149][T26195] geneve0: entered promiscuous mode [ 718.712678][T18016] tipc: Left network mode [ 718.836648][T26216] netlink: 'syz.0.5047': attribute type 1 has an invalid length. [ 718.874054][T26216] netlink: 'syz.0.5047': attribute type 2 has an invalid length. [ 718.993958][T26224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'. [ 719.502030][T26246] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 719.565244][T26246] bond11 (unregistering): Released all slaves [ 719.876826][T26263] netlink: 'syz.3.5061': attribute type 1 has an invalid length. [ 719.894793][T26263] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5061'. [ 720.037937][T26278] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 720.037937][T26278] Please contact the netfilter-devel mailing list or update your nftables rules. [ 720.174481][T26284] xt_hashlimit: size too large, truncated to 1048576 [ 720.223897][T26286] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 720.970650][T26309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.064244][T26309] ip6tnl3: entered allmulticast mode [ 721.090628][T26315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.105279][T26305] lo speed is unknown, defaulting to 1000 [ 721.244708][T26321] netlink: 'syz.4.5074': attribute type 1 has an invalid length. [ 721.282772][T20327] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 721.293237][T26321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5074'. [ 721.334191][T18016] hsr_slave_0: left promiscuous mode [ 721.376398][T18016] hsr_slave_1: left promiscuous mode [ 721.387291][T18016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.401235][T18016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.791032][T18016] team0 (unregistering): Port device team_slave_1 removed [ 721.804927][T18016] team0 (unregistering): Port device team_slave_0 removed [ 721.909436][T18016] dummy0 (unregistering): left allmulticast mode [ 721.971191][T26305] lo speed is unknown, defaulting to 1000 [ 721.992777][T26321] lo speed is unknown, defaulting to 1000 [ 722.151018][T26338] netlink: 'syz.1.5079': attribute type 83 has an invalid length. [ 722.356099][T26340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5080'. [ 722.553989][T26352] openvswitch: netlink: Message has 218 unknown bytes. [ 722.601383][T26352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5082'. [ 722.631403][T26354] netlink: 'syz.0.5083': attribute type 3 has an invalid length. [ 722.639724][T26352] netlink: 'syz.1.5082': attribute type 1 has an invalid length. [ 722.647987][T26354] netlink: 'syz.0.5083': attribute type 3 has an invalid length. [ 722.661630][T26354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5083'. [ 722.664477][T18016] IPVS: stop unused estimator thread 0... [ 722.787796][T26321] lo speed is unknown, defaulting to 1000 [ 722.951994][T26366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5087'. [ 722.967634][T26366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5087'. [ 722.998804][T26362] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 723.163204][T26372] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 723.171455][T26372] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 723.283206][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 723.394659][T26381] vlan5: entered allmulticast mode [ 723.416264][T26381] bond0: entered allmulticast mode [ 723.421451][T26381] ..@: entered allmulticast mode [ 723.454319][T26381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'. [ 723.945249][T26391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5093'. [ 724.363678][T26404] vxcan2: entered promiscuous mode [ 724.457711][T26398] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5095'. [ 724.531950][T26405] ip6tnl4: entered allmulticast mode [ 724.570660][T20329] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 724.598564][ T5719] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 724.606883][T20329] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 724.690891][T26415] netlink: 'syz.0.5100': attribute type 1 has an invalid length. [ 724.718533][ T8339] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 724.908057][T26427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5102'. [ 725.067612][T26434] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 725.083946][T26427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5102'. [ 725.236353][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 725.352743][T26440] syzkaller0: entered promiscuous mode [ 725.365850][T26447] netlink: 'syz.0.5111': attribute type 11 has an invalid length. [ 725.386617][T26440] syzkaller0: entered allmulticast mode [ 725.398504][ T8339] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 726.174034][T26462] netlink: 'syz.3.5115': attribute type 4 has an invalid length. [ 726.359233][T26469] bridge_slave_0 (unregistering): left allmulticast mode [ 726.377857][T26469] bridge_slave_0 (unregistering): left promiscuous mode [ 726.395107][T26469] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.431444][T26472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.144706][T26499] netlink: 'syz.1.5126': attribute type 1 has an invalid length. [ 727.188567][T26499] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 727.288935][T26509] pim6reg99999991: entered allmulticast mode [ 727.382862][T26514] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 727.493564][T26523] netlink: 'syz.4.5132': attribute type 1 has an invalid length. [ 727.597935][T26511] netlink: 'syz.1.5130': attribute type 1 has an invalid length. [ 727.645407][T26514] lo speed is unknown, defaulting to 1000 [ 727.770350][T26529] bridge0: port 3(dummy0) entered disabled state [ 727.806674][T26529] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.818521][T26529] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.883149][T26529] bond1: left promiscuous mode [ 727.891264][T26529] ip6gre1: left promiscuous mode [ 727.901890][T26529] bridge0: port 4(vlan2) entered disabled state [ 727.921434][T26529] team0: left promiscuous mode [ 727.929520][T26529] team1: left promiscuous mode [ 728.026334][T26514] lo speed is unknown, defaulting to 1000 [ 728.258082][T26554] __nla_validate_parse: 10 callbacks suppressed [ 728.258099][T26554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5141'. [ 728.996454][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 729.551632][T26600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5155'. [ 729.805105][T26616] netlink: 'syz.3.5158': attribute type 3 has an invalid length. [ 729.871760][T26605] lo speed is unknown, defaulting to 1000 [ 730.384425][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5161'. [ 730.490287][T26628] netlink: 'syz.1.5162': attribute type 1 has an invalid length. [ 730.498303][T26628] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5162'. [ 730.508714][T26628] netlink: 'syz.1.5162': attribute type 1 has an invalid length. [ 730.516940][T26628] netlink: 'syz.1.5162': attribute type 8 has an invalid length. [ 730.524838][T26628] netlink: 606 bytes leftover after parsing attributes in process `syz.1.5162'. [ 730.562536][T26630] netlink: 'syz.0.5163': attribute type 15 has an invalid length. [ 730.570729][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5163'. [ 730.611013][T26630] netlink: 'syz.0.5163': attribute type 15 has an invalid length. [ 730.646569][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5163'. [ 730.672068][T20329] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 730.680965][T20329] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 730.710828][T20329] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 730.742217][T20329] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 730.755172][T26605] lo speed is unknown, defaulting to 1000 [ 730.877032][T26643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5166'. [ 730.906353][T26643] netlink: 'syz.0.5166': attribute type 30 has an invalid length. [ 730.944174][T26643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5166'. [ 731.191033][T26658] tipc: Enabling of bearer rejected, already enabled [ 731.288184][T26668] netlink: 67 bytes leftover after parsing attributes in process `syz.2.5172'. [ 731.362044][T26673] netlink: 'syz.3.5173': attribute type 13 has an invalid length. [ 731.388693][T26673] netlink: 'syz.3.5173': attribute type 17 has an invalid length. [ 731.547504][T26684] ip6t_REJECT: ECHOREPLY is not supported [ 731.708787][T26673] 0{X: left allmulticast mode [ 731.742342][T26673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.752573][T26673] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.793117][T26673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 731.804823][T26673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.818799][T26673] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 731.837869][T20327] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.845037][T20327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.872908][T20324] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.881859][T20324] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 53291 - 0 [ 731.899247][T20324] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 731.958376][T20327] bridge0: port 3(team0) entered blocking state [ 731.964761][T20327] bridge0: port 3(team0) entered forwarding state [ 732.005200][T20324] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.023096][T20324] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 53291 - 0 [ 732.046741][T20324] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 732.071919][T20324] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.095297][T20324] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 53291 - 0 [ 732.115886][T20324] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 732.239807][T20324] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.269776][T20324] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 53291 - 0 [ 732.279337][T20324] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 732.996423][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 733.270784][T26748] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.278966][T26748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.286239][T26748] IPv6: NLM_F_CREATE should be set when creating new route [ 733.293514][T26748] IPv6: NLM_F_CREATE should be set when creating new route [ 733.300898][T26748] IPv6: NLM_F_CREATE should be set when creating new route [ 733.329900][T26748] __nla_validate_parse: 8 callbacks suppressed [ 733.329916][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'. [ 734.548620][T26792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5206'. [ 734.579131][T26792] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5206'. [ 734.615676][T26793] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5206'. [ 734.641930][T26792] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5206'. [ 734.664104][T26793] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5206'. [ 734.685965][T26795] erspan0: entered promiscuous mode [ 734.691539][T26795] macsec1: entered promiscuous mode [ 734.774161][T26795] erspan0: left promiscuous mode [ 734.791411][T26792] bridge0: port 1(vlan3) entered disabled state [ 734.797953][T26792] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.924965][T26805] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5209'. [ 735.003977][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5207'. [ 735.308215][T26815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5213'. [ 735.388141][T26820] syzkaller1: entered allmulticast mode [ 735.633469][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5220'. [ 735.784562][T26846] lo speed is unknown, defaulting to 1000 [ 736.161206][T26846] lo speed is unknown, defaulting to 1000 [ 736.441266][T26879] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 736.685621][T26888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 736.718924][T26879] lo speed is unknown, defaulting to 1000 [ 736.761848][T26894] bridge_slave_0: default FDB implementation only supports local addresses [ 736.855621][T26898] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 736.876999][T26898] CPU: 1 UID: 0 PID: 26898 Comm: syz.0.5232 Not tainted syzkaller #0 PREEMPT(full) [ 736.877025][T26898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.877038][T26898] Call Trace: [ 736.877046][T26898] [ 736.877055][T26898] dump_stack_lvl+0xe8/0x150 [ 736.877084][T26898] sysfs_warn_dup+0x8e/0xa0 [ 736.877110][T26898] sysfs_do_create_link_sd+0xc0/0x110 [ 736.877138][T26898] device_add_class_symlinks+0x1cf/0x240 [ 736.877165][T26898] device_add+0x475/0xbb0 [ 736.877192][T26898] wiphy_register+0x21e8/0x32e0 [ 736.877236][T26898] ? __pfx_wiphy_register+0x10/0x10 [ 736.877261][T26898] ? __pfx_netdev_run_todo+0x10/0x10 [ 736.877289][T26898] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 736.877327][T26898] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 736.877358][T26898] ieee80211_register_hw+0x3d82/0x4a70 [ 736.877401][T26898] ? ieee80211_register_hw+0x1981/0x4a70 [ 736.877454][T26898] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 736.877486][T26898] ? __asan_memset+0x22/0x50 [ 736.877511][T26898] ? __hrtimer_setup+0x1b7/0x260 [ 736.877535][T26898] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 736.877564][T26898] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 736.877624][T26898] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 736.877645][T26898] ? kstrndup+0xbf/0x160 [ 736.877676][T26898] hwsim_new_radio_nl+0xf6a/0x1c00 [ 736.877729][T26898] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 736.877763][T26898] ? rcu_is_watching+0x15/0xb0 [ 736.877789][T26898] ? trace_kmalloc+0x2a/0xf0 [ 736.877823][T26898] ? __nla_parse+0x40/0x60 [ 736.877856][T26898] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 736.877888][T26898] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 736.877930][T26898] genl_family_rcv_msg_doit+0x22a/0x330 [ 736.877969][T26898] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 736.878015][T26898] ? bpf_lsm_capable+0x9/0x20 [ 736.878034][T26898] ? security_capable+0x7e/0x2c0 [ 736.878065][T26898] genl_rcv_msg+0x61c/0x7a0 [ 736.878103][T26898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.878131][T26898] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 736.878166][T26898] netlink_rcv_skb+0x232/0x4b0 [ 736.878192][T26898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.878222][T26898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.878265][T26898] ? down_read+0x270/0x2e0 [ 736.878290][T26898] ? genl_rcv+0xd/0x40 [ 736.878321][T26898] genl_rcv+0x28/0x40 [ 736.878348][T26898] netlink_unicast+0x75c/0x8e0 [ 736.878379][T26898] netlink_sendmsg+0x813/0xb40 [ 736.878413][T26898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.878442][T26898] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.878470][T26898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.878502][T26898] ____sys_sendmsg+0x972/0x9f0 [ 736.878527][T26898] ? __might_fault+0xaf/0x130 [ 736.878561][T26898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.878595][T26898] ? import_iovec+0x73/0xa0 [ 736.878628][T26898] ___sys_sendmsg+0x2a5/0x360 [ 736.878651][T26898] ? __lock_acquire+0x6b5/0x2cf0 [ 736.878679][T26898] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.878721][T26898] ? futex_wait+0x2a2/0x390 [ 736.878779][T26898] ? __fget_files+0x2a/0x420 [ 736.878802][T26898] ? __fget_files+0x3a0/0x420 [ 736.878837][T26898] __x64_sys_sendmsg+0x1bd/0x2a0 [ 736.878867][T26898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.878902][T26898] ? rcu_is_watching+0x15/0xb0 [ 736.878939][T26898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.878960][T26898] do_syscall_64+0x15f/0xf80 [ 736.878982][T26898] ? trace_irq_disable+0x3b/0x140 [ 736.879012][T26898] ? clear_bhb_loop+0x40/0x90 [ 736.879037][T26898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.879057][T26898] RIP: 0033:0x7fd79af9cdd9 [ 736.879077][T26898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.879095][T26898] RSP: 002b:00007fd7991f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.879117][T26898] RAX: ffffffffffffffda RBX: 00007fd79b215fa0 RCX: 00007fd79af9cdd9 [ 736.879131][T26898] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 736.879145][T26898] RBP: 00007fd79b032d69 R08: 0000000000000000 R09: 0000000000000000 [ 736.879157][T26898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.879169][T26898] R13: 00007fd79b216038 R14: 00007fd79b215fa0 R15: 00007ffec115f3e8 [ 736.879205][T26898] [ 737.347970][T26904] x_tables: duplicate underflow at hook 1 [ 737.364800][T26903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.917237][T26879] lo speed is unknown, defaulting to 1000 [ 738.005905][T26938] tipc: Started in network mode [ 738.011324][T26938] tipc: Node identity 42b38a38e33, cluster identity 4711 [ 738.028268][T26938] tipc: Enabled bearer , priority 0 [ 738.047602][T26938] syzkaller0: entered promiscuous mode [ 738.061808][T26938] syzkaller0: entered allmulticast mode [ 738.098812][T26938] tipc: Resetting bearer [ 738.116336][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 738.126017][T26937] tipc: Resetting bearer [ 738.171994][T26937] tipc: Disabling bearer [ 738.217699][T26943] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 738.820734][T26952] __nla_validate_parse: 2 callbacks suppressed [ 738.820751][T26952] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5246'. [ 739.221736][T26968] x_tables: duplicate underflow at hook 1 [ 739.224870][T26970] x_tables: duplicate underflow at hook 1 [ 739.690268][T26997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5257'. [ 740.128494][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 740.148971][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 740.169507][T27023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5264'. [ 740.179867][T27023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5264'. [ 740.198586][T27027] dvmrp6: entered allmulticast mode [ 740.229827][T27032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5267'. [ 740.238958][T27032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5267'. [ 740.249224][T27032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5267'. [ 740.258269][T27032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5267'. [ 740.738606][T27056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.205700][T27074] netlink: 'syz.0.5278': attribute type 8 has an invalid length. [ 743.206773][T27180] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1 [ 743.294725][T27187] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 743.614516][T27204] macsec1: entered promiscuous mode [ 743.635016][T27204] macsec1: entered allmulticast mode [ 743.961494][T27221] __nla_validate_parse: 12 callbacks suppressed [ 743.961512][T27221] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5316'. [ 743.973176][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'. [ 743.989016][T27221] netlink: 'syz.4.5316': attribute type 1 has an invalid length. [ 744.005829][T27100] IPVS: starting estimator thread 0... [ 744.006743][T27221] pim6reg: left allmulticast mode [ 744.106238][T27222] IPVS: using max 30 ests per chain, 72000 per kthread [ 744.458827][T27248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.077697][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.335295][T27253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5323'. [ 747.533746][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5326'. [ 747.557703][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5326'. [ 747.889304][T27286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5332'. [ 747.939643][T20329] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.949906][T27286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5332'. [ 747.963085][T20329] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.995546][T20329] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.080907][T20329] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.350892][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5339'. [ 748.356512][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 748.383763][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5339'. [ 748.401592][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5339'. [ 748.456753][T27306] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 748.495736][T27313] tipc: Enabling of bearer rejected, already enabled [ 748.590322][T27321] netlink: 'syz.3.5344': attribute type 1 has an invalid length. [ 748.620691][T27321] netlink: 'syz.3.5344': attribute type 1 has an invalid length. [ 748.958984][T27338] netlink: 'syz.4.5350': attribute type 2 has an invalid length. [ 748.968536][T27343] netlink: 'syz.1.5352': attribute type 4 has an invalid length. [ 748.981301][T27343] __nla_validate_parse: 57 callbacks suppressed [ 748.981317][T27343] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5352'. [ 749.048982][T27347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5351'. [ 749.059892][T27100] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 749.157148][T27353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5355'. [ 749.411948][T27359] FAULT_INJECTION: forcing a failure. [ 749.411948][T27359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.442250][T27359] CPU: 0 UID: 0 PID: 27359 Comm: syz.0.5357 Not tainted syzkaller #0 PREEMPT(full) [ 749.442275][T27359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.442287][T27359] Call Trace: [ 749.442294][T27359] [ 749.442302][T27359] dump_stack_lvl+0xe8/0x150 [ 749.442327][T27359] should_fail_ex+0x412/0x560 [ 749.442360][T27359] _copy_from_iter+0x1d3/0x1670 [ 749.442382][T27359] ? unwind_next_frame+0xa6/0x2550 [ 749.442412][T27359] ? __lock_acquire+0x6b5/0x2cf0 [ 749.442433][T27359] ? __pfx__copy_from_iter+0x10/0x10 [ 749.442471][T27359] tun_get_user+0x6cf/0x43e0 [ 749.442509][T27359] ? aa_file_perm+0x192/0x15e0 [ 749.442537][T27359] ? aa_file_perm+0x50e/0x15e0 [ 749.442560][T27359] ? __pfx_tun_get_user+0x10/0x10 [ 749.442584][T27359] ? __lock_acquire+0x6b5/0x2cf0 [ 749.442605][T27359] ? kstrtoull+0x12f/0x1d0 [ 749.442633][T27359] ? ref_tracker_alloc+0x35c/0x4c0 [ 749.442658][T27359] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 749.442683][T27359] ? tun_get+0x1c/0x2f0 [ 749.442704][T27359] ? tun_get+0x1c/0x2f0 [ 749.442730][T27359] ? tun_get+0x1c/0x2f0 [ 749.442748][T27359] ? tun_get+0x1c/0x2f0 [ 749.442771][T27359] tun_chr_write_iter+0x113/0x200 [ 749.442795][T27359] vfs_write+0x61d/0xb90 [ 749.442825][T27359] ? __pfx_vfs_write+0x10/0x10 [ 749.442857][T27359] ? __fget_files+0x2a/0x420 [ 749.442884][T27359] ksys_write+0x150/0x270 [ 749.442910][T27359] ? __pfx_ksys_write+0x10/0x10 [ 749.442941][T27359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.442961][T27359] do_syscall_64+0x15f/0xf80 [ 749.442982][T27359] ? trace_irq_disable+0x3b/0x140 [ 749.443007][T27359] ? clear_bhb_loop+0x40/0x90 [ 749.443029][T27359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.443047][T27359] RIP: 0033:0x7fd79af9cdd9 [ 749.443064][T27359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.443086][T27359] RSP: 002b:00007fd7991f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 749.443105][T27359] RAX: ffffffffffffffda RBX: 00007fd79b215fa0 RCX: 00007fd79af9cdd9 [ 749.443118][T27359] RDX: 000000000000008e RSI: 0000200000000040 RDI: 0000000000000003 [ 749.443129][T27359] RBP: 00007fd7991f6090 R08: 0000000000000000 R09: 0000000000000000 [ 749.443140][T27359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.443151][T27359] R13: 00007fd79b216038 R14: 00007fd79b215fa0 R15: 00007ffec115f3e8 [ 749.443181][T27359] [ 749.474598][T27361] openvswitch: netlink: Actions may not be safe on all matching packets [ 749.526521][T20327] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 749.877096][T27103] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 750.132480][T27381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5363'. [ 750.455598][T27388] syzkaller1: entered promiscuous mode [ 750.461287][T27388] syzkaller1: entered allmulticast mode [ 750.528539][T27391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 750.589968][T27395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 750.604132][T27395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5368'. [ 750.613665][T20324] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 750.625330][T20324] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 750.828967][T27402] lo speed is unknown, defaulting to 1000 [ 750.882321][T27409] FAULT_INJECTION: forcing a failure. [ 750.882321][T27409] name failslab, interval 1, probability 0, space 0, times 1 [ 750.894126][T27405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5370'. [ 750.909438][T27409] CPU: 0 UID: 0 PID: 27409 Comm: syz.1.5372 Not tainted syzkaller #0 PREEMPT(full) [ 750.909463][T27409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.909473][T27409] Call Trace: [ 750.909480][T27409] [ 750.909488][T27409] dump_stack_lvl+0xe8/0x150 [ 750.909513][T27409] should_fail_ex+0x412/0x560 [ 750.909540][T27409] should_failslab+0xa8/0x100 [ 750.909568][T27409] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 750.909592][T27409] ? __alloc_skb+0x186/0x7d0 [ 750.909611][T27409] ? __alloc_skb+0x1d0/0x7d0 [ 750.909628][T27409] ? __local_bh_enable_ip+0xd0/0x130 [ 750.909652][T27409] __alloc_skb+0x1d0/0x7d0 [ 750.909671][T27409] ? __might_fault+0xaf/0x130 [ 750.909694][T27409] alloc_skb_with_frags+0xc8/0x760 [ 750.909728][T27409] sock_alloc_send_pskb+0x878/0x990 [ 750.909770][T27409] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 750.909804][T27409] ? iov_iter_advance+0x8b/0x1c0 [ 750.909829][T27409] tun_get_user+0x5df/0x43e0 [ 750.909865][T27409] ? aa_file_perm+0x192/0x15e0 [ 750.909894][T27409] ? aa_file_perm+0x50e/0x15e0 [ 750.909917][T27409] ? __pfx_tun_get_user+0x10/0x10 [ 750.909947][T27409] ? __lock_acquire+0x6b5/0x2cf0 [ 750.909970][T27409] ? kstrtoull+0x12f/0x1d0 [ 750.909997][T27409] ? ref_tracker_alloc+0x35c/0x4c0 [ 750.910022][T27409] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 750.910047][T27409] ? tun_get+0x1c/0x2f0 [ 750.910068][T27409] ? tun_get+0x1c/0x2f0 [ 750.910093][T27409] ? tun_get+0x1c/0x2f0 [ 750.910113][T27409] ? tun_get+0x1c/0x2f0 [ 750.910137][T27409] tun_chr_write_iter+0x113/0x200 [ 750.910162][T27409] vfs_write+0x61d/0xb90 [ 750.910193][T27409] ? __pfx_vfs_write+0x10/0x10 [ 750.910227][T27409] ? __fget_files+0x2a/0x420 [ 750.910257][T27409] ksys_write+0x150/0x270 [ 750.910283][T27409] ? __pfx_ksys_write+0x10/0x10 [ 750.910315][T27409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.910335][T27409] do_syscall_64+0x15f/0xf80 [ 750.910354][T27409] ? trace_irq_disable+0x3b/0x140 [ 750.910379][T27409] ? clear_bhb_loop+0x40/0x90 [ 750.910401][T27409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.910419][T27409] RIP: 0033:0x7f20c379cdd9 [ 750.910435][T27409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.910450][T27409] RSP: 002b:00007f20c470a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 750.910469][T27409] RAX: ffffffffffffffda RBX: 00007f20c3a15fa0 RCX: 00007f20c379cdd9 [ 750.910482][T27409] RDX: 000000000000008e RSI: 0000200000000040 RDI: 0000000000000003 [ 750.910493][T27409] RBP: 00007f20c470a090 R08: 0000000000000000 R09: 0000000000000000 [ 750.910503][T27409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.910514][T27409] R13: 00007f20c3a16038 R14: 00007f20c3a15fa0 R15: 00007ffdc44fa808 [ 750.910543][T27409] [ 751.201488][T27405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5370'. [ 751.238888][T27103] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 751.351514][T27405] bridge0: entered promiscuous mode [ 751.373023][T27405] vlan2: entered promiscuous mode [ 751.404727][T27405] geneve0: entered promiscuous mode [ 751.420797][T27405] bridge0: left promiscuous mode [ 751.425895][T27405] vlan2: left promiscuous mode [ 751.431096][T27405] geneve0: left promiscuous mode [ 751.469691][T27424] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5377'. [ 751.492578][T27419] netlink: 'syz.3.5377': attribute type 29 has an invalid length. [ 751.753132][T27402] lo speed is unknown, defaulting to 1000 [ 751.847218][T27448] netlink: 'syz.3.5384': attribute type 4 has an invalid length. [ 752.706285][T27450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.937417][T27493] netlink: 'syz.4.5395': attribute type 3 has an invalid length. [ 752.973448][T27493] nbd: nbd4 already in use [ 752.989891][T27493] block nbd4: NBD_DISCONNECT [ 753.009064][T27493] block nbd4: Send disconnect failed -32 [ 753.027270][T27493] block nbd4: shutting down sockets [ 753.306290][T27518] netlink: 'syz.1.5402': attribute type 11 has an invalid length. [ 753.338800][T27520] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 753.372399][T27522] netlink: 'syz.1.5404': attribute type 1 has an invalid length. [ 753.608428][T27533] batman_adv: 60X: Removing interface: batadv_slave_1 [ 753.654331][T27531] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 753.665229][T27538] netlink: 'syz.1.5410': attribute type 10 has an invalid length. [ 753.770033][T27538] dummy0: entered allmulticast mode [ 753.818489][T27538] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 753.983792][T27560] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 754.184563][T27575] openvswitch: netlink: IP tunnel TTL not specified. [ 754.335224][T27576] nicvf0: tun_chr_ioctl cmd 2148553947 [ 754.361456][T27583] __nla_validate_parse: 13 callbacks suppressed [ 754.361472][T27583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5421'. [ 754.382125][T27578] netlink: 'syz.4.5418': attribute type 6 has an invalid length. [ 754.401012][T27578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5418'. [ 754.506450][T27592] hsr0: entered promiscuous mode [ 754.515875][T27592] hsr_slave_0: left promiscuous mode [ 754.530186][T27592] hsr_slave_1: left promiscuous mode [ 754.542193][T27592] hsr0 (unregistering): left promiscuous mode [ 754.651384][T27594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5425'. [ 754.666008][T27604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5427'. [ 754.701759][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5427'. [ 754.767504][T27607] netlink: 'syz.4.5425': attribute type 83 has an invalid length. [ 755.076318][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 755.499121][T27650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5438'. [ 755.655837][T20324] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.666793][T27659] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5442'. [ 755.686250][T20324] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.705206][T20324] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.728518][T20324] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.776938][T27657] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5441'. [ 755.783740][T27654] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5440'. [ 755.802867][T27654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5440'. [ 755.953635][T27670] pim6reg1: entered promiscuous mode [ 755.959700][T27670] pim6reg1: entered allmulticast mode [ 756.021984][T27667] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 756.032720][T27670] lo speed is unknown, defaulting to 1000 [ 756.036629][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 756.042817][T27671] lo speed is unknown, defaulting to 1000 [ 756.421802][T27670] lo speed is unknown, defaulting to 1000 [ 757.191906][T27671] lo speed is unknown, defaulting to 1000 [ 757.541954][T27740] ip6t_REJECT: ECHOREPLY is not supported [ 757.919125][T27747] netlink: 'syz.4.5468': attribute type 13 has an invalid length. [ 758.240105][T27754] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 758.277459][T27748] hmac(sha224: entered promiscuous mode [ 758.298552][T18016] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.320001][T18016] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.329948][T18016] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.340460][T18016] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.373345][T27757] netlink: 'syz.4.5471': attribute type 1 has an invalid length. [ 758.615878][T27757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.644224][T27757] netlink: 'syz.4.5471': attribute type 2 has an invalid length. [ 758.653711][T27757] netlink: 'syz.4.5471': attribute type 3 has an invalid length. [ 758.757366][T27760] bond0: (slave veth7): Enslaving as an active interface with a down link [ 758.824279][T27761] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 758.850831][T27761] bond0: (slave batadv1): making interface the new active one [ 758.860238][T27761] batadv1: entered promiscuous mode [ 758.865957][T27761] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 759.772274][T27831] __nla_validate_parse: 8 callbacks suppressed [ 759.772292][T27831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5492'. [ 759.851694][T27104] IPVS: starting estimator thread 0... [ 759.900585][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5491'. [ 759.947670][T27840] IPVS: using max 28 ests per chain, 67200 per kthread [ 760.239540][T27866] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5500'. [ 760.255992][T27866] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5500'. [ 760.452609][T27879] netlink: 'syz.1.5503': attribute type 4 has an invalid length. [ 760.677161][T27889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5506'. [ 760.700582][T27889] netlink: 'syz.0.5506': attribute type 7 has an invalid length. [ 760.726244][T27889] netlink: 'syz.0.5506': attribute type 8 has an invalid length. [ 760.754401][T27889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5506'. [ 760.811983][T27897] vlan3: entered promiscuous mode [ 760.832294][T27897] bridge0: entered promiscuous mode [ 760.844754][T27903] --map-set only usable from mangle table [ 761.034430][T27916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5513'. [ 761.071532][T27916] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20000 [ 761.169730][T27923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5513'. [ 761.245835][ T4942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 761.263705][ T4942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 761.271986][ T4942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 761.280221][ T4942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 761.287937][ T4942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 761.452521][T27937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5516'. [ 761.529356][T27930] nbd1: detected capacity change from 0 to 63 [ 761.537197][T27931] block nbd1: NBD_DISCONNECT [ 761.580047][T27931] block nbd1: Disconnected due to user request. [ 761.600947][T27931] block nbd1: shutting down sockets [ 761.605146][T27351] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.645098][T27351] Buffer I/O error on dev nbd1, logical block 1, async page read [ 761.699774][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.708914][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 761.731493][ T2343] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 761.741347][ T2343] Buffer I/O error on dev nbd1, logical block 2, async page read [ 761.749613][ T2343] Buffer I/O error on dev nbd1, logical block 3, async page read [ 761.764769][T27351] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.784304][T27351] Buffer I/O error on dev nbd1, logical block 0, async page read [ 761.795228][T27351] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.805117][T27351] Buffer I/O error on dev nbd1, logical block 1, async page read [ 761.813914][T27351] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.833926][T27351] Buffer I/O error on dev nbd1, logical block 2, async page read [ 761.853937][T27351] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.872358][T27351] Buffer I/O error on dev nbd1, logical block 3, async page read [ 761.884860][T27351] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.910741][T27351] Buffer I/O error on dev nbd1, logical block 0, async page read [ 761.936041][T27351] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.975809][T27351] Buffer I/O error on dev nbd1, logical block 1, async page read [ 762.002442][T27351] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.037426][T27351] ldm_validate_partition_table(): Disk read failed. [ 762.073238][T27351] Dev nbd1: unable to read RDB block 0 [ 762.099616][T27955] lo speed is unknown, defaulting to 1000 [ 762.109104][T27351] nbd1: unable to read partition table [ 762.159897][T27351] ldm_validate_partition_table(): Disk read failed. [ 762.176996][T27924] lo speed is unknown, defaulting to 1000 [ 762.201623][T27351] Dev nbd1: unable to read RDB block 0 [ 762.215256][T27351] nbd1: unable to read partition table [ 762.241201][T27351] [ 762.243546][T27351] ====================================================== [ 762.250558][T27351] WARNING: possible circular locking dependency detected [ 762.257585][T27351] syzkaller #0 Not tainted [ 762.261990][T27351] ------------------------------------------------------ [ 762.268999][T27351] udevd/27351 is trying to acquire lock: [ 762.274628][T27351] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 762.284481][T27351] [ 762.284481][T27351] but task is already holding lock: [ 762.291830][T27351] ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 762.302371][T27351] [ 762.302371][T27351] which lock already depends on the new lock. [ 762.302371][T27351] [ 762.312756][T27351] [ 762.312756][T27351] the existing dependency chain (in reverse order) is: [ 762.321753][T27351] [ 762.321753][T27351] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 762.329565][T27351] __mutex_lock+0x1a3/0x1550 [ 762.334672][T27351] kobject_uevent_net_broadcast+0x27e/0x560 [ 762.341076][T27351] kobject_uevent_env+0x55c/0x9e0 [ 762.346613][T27351] device_add+0x557/0xbb0 [ 762.351454][T27351] device_create+0x269/0x300 [ 762.356550][T27351] msr_device_create+0x33/0x50 [ 762.361819][T27351] cpuhp_invoke_callback+0x445/0x860 [ 762.367610][T27351] cpuhp_thread_fun+0x36b/0x780 [ 762.372972][T27351] smpboot_thread_fn+0x541/0xa50 [ 762.378412][T27351] kthread+0x388/0x470 [ 762.382995][T27351] ret_from_fork+0x514/0xb70 [ 762.388088][T27351] ret_from_fork_asm+0x1a/0x30 [ 762.393358][T27351] [ 762.393358][T27351] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 762.400899][T27351] cpuhp_thread_fun+0x127/0x780 [ 762.406257][T27351] smpboot_thread_fn+0x541/0xa50 [ 762.411699][T27351] kthread+0x388/0x470 [ 762.416275][T27351] ret_from_fork+0x514/0xb70 [ 762.421367][T27351] ret_from_fork_asm+0x1a/0x30 [ 762.426638][T27351] [ 762.426638][T27351] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 762.434363][T27351] cpus_read_lock+0x42/0x160 [ 762.439455][T27351] static_key_slow_inc+0x12/0x30 [ 762.444897][T27351] ipv6_flowlabel_opt+0x1b94/0x28e0 [ 762.450602][T27351] do_ipv6_setsockopt+0xd9f/0x3150 [ 762.456239][T27351] ipv6_setsockopt+0x59/0x170 [ 762.461435][T27351] rawv6_setsockopt+0x276/0x5f0 [ 762.466803][T27351] do_sock_setsockopt+0x17c/0x1b0 [ 762.472334][T27351] __x64_sys_setsockopt+0x13d/0x1b0 [ 762.478037][T27351] do_syscall_64+0x15f/0xf80 [ 762.483132][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.489527][T27351] [ 762.489527][T27351] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 762.497241][T27351] lock_sock_nested+0x41/0x100 [ 762.502506][T27351] inet_shutdown+0x6a/0x390 [ 762.507526][T27351] nbd_mark_nsock_dead+0x2e9/0x560 [ 762.513144][T27351] recv_work+0x1c2e/0x1d40 [ 762.518063][T27351] process_scheduled_works+0xb5d/0x1860 [ 762.524111][T27351] worker_thread+0xa53/0xfc0 [ 762.529203][T27351] kthread+0x388/0x470 [ 762.533778][T27351] ret_from_fork+0x514/0xb70 [ 762.538870][T27351] ret_from_fork_asm+0x1a/0x30 [ 762.544141][T27351] [ 762.544141][T27351] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 762.551767][T27351] __mutex_lock+0x1a3/0x1550 [ 762.556868][T27351] nbd_queue_rq+0x37b/0x1100 [ 762.561963][T27351] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 762.568020][T27351] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 762.574856][T27351] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 762.581344][T27351] blk_mq_run_hw_queue+0x348/0x4f0 [ 762.586962][T27351] blk_mq_dispatch_list+0xd16/0xe10 [ 762.592670][T27351] blk_mq_flush_plug_list+0x48d/0x570 [ 762.598567][T27351] __blk_flush_plug+0x3ed/0x4d0 [ 762.603926][T27351] __submit_bio+0x28d/0x580 [ 762.608941][T27351] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 762.615081][T27351] block_read_full_folio+0x599/0x830 [ 762.620883][T27351] filemap_read_folio+0x137/0x3b0 [ 762.626416][T27351] do_read_cache_folio+0x358/0x590 [ 762.632035][T27351] read_part_sector+0xb6/0x2b0 [ 762.637309][T27351] adfspart_check_ICS+0xb1/0x960 [ 762.642755][T27351] bdev_disk_changed+0x817/0x1770 [ 762.648296][T27351] blkdev_get_whole+0x380/0x510 [ 762.653655][T27351] bdev_open+0x31e/0xd30 [ 762.658404][T27351] blkdev_open+0x470/0x610 [ 762.663323][T27351] do_dentry_open+0x785/0x14e0 [ 762.668590][T27351] vfs_open+0x3b/0x340 [ 762.673164][T27351] path_openat+0x2e08/0x3860 [ 762.678265][T27351] do_file_open+0x23e/0x4a0 [ 762.683285][T27351] do_sys_openat2+0x113/0x200 [ 762.688477][T27351] __x64_sys_openat+0x138/0x170 [ 762.693849][T27351] do_syscall_64+0x15f/0xf80 [ 762.698949][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.705345][T27351] [ 762.705345][T27351] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 762.712538][T27351] __mutex_lock+0x1a3/0x1550 [ 762.717635][T27351] nbd_queue_rq+0xc6/0x1100 [ 762.722639][T27351] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 762.728691][T27351] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 762.735526][T27351] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 762.742016][T27351] blk_mq_run_hw_queue+0x348/0x4f0 [ 762.747634][T27351] blk_mq_dispatch_list+0xd16/0xe10 [ 762.753339][T27351] blk_mq_flush_plug_list+0x48d/0x570 [ 762.759229][T27351] __blk_flush_plug+0x3ed/0x4d0 [ 762.764591][T27351] __submit_bio+0x28d/0x580 [ 762.769612][T27351] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 762.775754][T27351] block_read_full_folio+0x599/0x830 [ 762.781541][T27351] filemap_read_folio+0x137/0x3b0 [ 762.787073][T27351] do_read_cache_folio+0x358/0x590 [ 762.792691][T27351] read_part_sector+0xb6/0x2b0 [ 762.797962][T27351] adfspart_check_ICS+0xb1/0x960 [ 762.803407][T27351] bdev_disk_changed+0x817/0x1770 [ 762.808938][T27351] blkdev_get_whole+0x380/0x510 [ 762.814298][T27351] bdev_open+0x31e/0xd30 [ 762.819048][T27351] blkdev_open+0x470/0x610 [ 762.823966][T27351] do_dentry_open+0x785/0x14e0 [ 762.829234][T27351] vfs_open+0x3b/0x340 [ 762.833806][T27351] path_openat+0x2e08/0x3860 [ 762.838914][T27351] do_file_open+0x23e/0x4a0 [ 762.843927][T27351] do_sys_openat2+0x113/0x200 [ 762.849109][T27351] __x64_sys_openat+0x138/0x170 [ 762.854461][T27351] do_syscall_64+0x15f/0xf80 [ 762.859554][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.865950][T27351] [ 762.865950][T27351] -> #3 (set->srcu){.+.+}-{0:0}: [ 762.873055][T27351] __synchronize_srcu+0xca/0x300 [ 762.878495][T27351] elevator_switch+0x1e8/0x7a0 [ 762.883765][T27351] elevator_change+0x2cc/0x450 [ 762.889035][T27351] elevator_set_default+0x36c/0x430 [ 762.894744][T27351] blk_register_queue+0x3e9/0x4e0 [ 762.900275][T27351] __add_disk+0x677/0xd50 [ 762.905105][T27351] add_disk_fwnode+0xfb/0x480 [ 762.910284][T27351] nbd_dev_add+0x72c/0xb50 [ 762.915202][T27351] nbd_init+0x168/0x1f0 [ 762.919928][T27351] do_one_initcall+0x250/0x870 [ 762.925200][T27351] do_initcall_level+0x104/0x190 [ 762.930664][T27351] do_initcalls+0x59/0xa0 [ 762.935501][T27351] kernel_init_freeable+0x2a6/0x3e0 [ 762.941207][T27351] kernel_init+0x1d/0x1d0 [ 762.946044][T27351] ret_from_fork+0x514/0xb70 [ 762.951137][T27351] ret_from_fork_asm+0x1a/0x30 [ 762.956405][T27351] [ 762.956405][T27351] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 762.964208][T27351] __mutex_lock+0x1a3/0x1550 [ 762.969306][T27351] elevator_change+0x1b3/0x450 [ 762.974577][T27351] elevator_set_none+0xb5/0x140 [ 762.979940][T27351] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 762.986252][T27351] nbd_start_device+0x17f/0xb10 [ 762.991603][T27351] nbd_genl_connect+0x165b/0x1cf0 [ 762.997128][T27351] genl_family_rcv_msg_doit+0x22a/0x330 [ 763.003188][T27351] genl_rcv_msg+0x61c/0x7a0 [ 763.008198][T27351] netlink_rcv_skb+0x232/0x4b0 [ 763.013467][T27351] genl_rcv+0x28/0x40 [ 763.017953][T27351] netlink_unicast+0x75c/0x8e0 [ 763.023218][T27351] netlink_sendmsg+0x813/0xb40 [ 763.028489][T27351] ____sys_sendmsg+0x972/0x9f0 [ 763.033762][T27351] ___sys_sendmsg+0x2a5/0x360 [ 763.038946][T27351] __x64_sys_sendmsg+0x1bd/0x2a0 [ 763.044389][T27351] do_syscall_64+0x15f/0xf80 [ 763.049483][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.055882][T27351] [ 763.055882][T27351] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 763.064470][T27351] blk_alloc_queue+0x546/0x680 [ 763.069742][T27351] __blk_mq_alloc_disk+0x197/0x390 [ 763.075362][T27351] nbd_dev_add+0x499/0xb50 [ 763.080279][T27351] nbd_init+0x168/0x1f0 [ 763.084946][T27351] do_one_initcall+0x250/0x870 [ 763.090214][T27351] do_initcall_level+0x104/0x190 [ 763.095659][T27351] do_initcalls+0x59/0xa0 [ 763.100496][T27351] kernel_init_freeable+0x2a6/0x3e0 [ 763.106213][T27351] kernel_init+0x1d/0x1d0 [ 763.111051][T27351] ret_from_fork+0x514/0xb70 [ 763.116146][T27351] ret_from_fork_asm+0x1a/0x30 [ 763.121413][T27351] [ 763.121413][T27351] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 763.128605][T27351] __lock_acquire+0x15a5/0x2cf0 [ 763.133964][T27351] lock_acquire+0x106/0x350 [ 763.138967][T27351] fs_reclaim_acquire+0x71/0x100 [ 763.144413][T27351] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 763.150727][T27351] __alloc_skb+0x1d0/0x7d0 [ 763.155648][T27351] alloc_uevent_skb+0x7d/0x230 [ 763.160924][T27351] kobject_uevent_net_broadcast+0x2fa/0x560 [ 763.167326][T27351] kobject_uevent_env+0x55c/0x9e0 [ 763.172864][T27351] nbd_config_put+0x14c/0x580 [ 763.178042][T27351] nbd_release+0xfe/0x140 [ 763.182875][T27351] bdev_release+0x536/0x650 [ 763.187888][T27351] blkdev_release+0x15/0x20 [ 763.192893][T27351] __fput+0x44f/0xa60 [ 763.197381][T27351] fput_close_sync+0x11f/0x240 [ 763.202653][T27351] __x64_sys_close+0x7e/0x110 [ 763.207838][T27351] do_syscall_64+0x15f/0xf80 [ 763.212936][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.219334][T27351] [ 763.219334][T27351] other info that might help us debug this: [ 763.219334][T27351] [ 763.229544][T27351] Chain exists of: [ 763.229544][T27351] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 763.229544][T27351] [ 763.242222][T27351] Possible unsafe locking scenario: [ 763.242222][T27351] [ 763.249653][T27351] CPU0 CPU1 [ 763.255004][T27351] ---- ---- [ 763.260347][T27351] lock(uevent_sock_mutex); [ 763.264925][T27351] lock(cpuhp_state-up); [ 763.271760][T27351] lock(uevent_sock_mutex); [ 763.278858][T27351] lock(fs_reclaim); [ 763.282824][T27351] [ 763.282824][T27351] *** DEADLOCK *** [ 763.282824][T27351] [ 763.290948][T27351] 3 locks held by udevd/27351: [ 763.295689][T27351] #0: ffff888032d24350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 763.305251][T27351] #1: ffff88807b821260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 763.315949][T27351] #2: ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 763.326897][T27351] [ 763.326897][T27351] stack backtrace: [ 763.332770][T27351] CPU: 1 UID: 0 PID: 27351 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 763.332786][T27351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.332795][T27351] Call Trace: [ 763.332802][T27351] [ 763.332809][T27351] dump_stack_lvl+0xe8/0x150 [ 763.332826][T27351] print_circular_bug+0x2e1/0x300 [ 763.332846][T27351] check_noncircular+0x12e/0x150 [ 763.332866][T27351] __lock_acquire+0x15a5/0x2cf0 [ 763.332882][T27351] ? lockdep_unlock+0x5d/0xd0 [ 763.332895][T27351] ? __lock_acquire+0x146e/0x2cf0 [ 763.332915][T27351] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 763.332933][T27351] lock_acquire+0x106/0x350 [ 763.332947][T27351] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 763.332966][T27351] ? lock_acquire+0x106/0x350 [ 763.332983][T27351] fs_reclaim_acquire+0x71/0x100 [ 763.333002][T27351] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 763.333020][T27351] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 763.333038][T27351] ? __alloc_skb+0x1d0/0x7d0 [ 763.333053][T27351] ? __local_bh_enable_ip+0xd0/0x130 [ 763.333070][T27351] __alloc_skb+0x1d0/0x7d0 [ 763.333087][T27351] alloc_uevent_skb+0x7d/0x230 [ 763.333109][T27351] kobject_uevent_net_broadcast+0x2fa/0x560 [ 763.333131][T27351] kobject_uevent_env+0x55c/0x9e0 [ 763.333154][T27351] nbd_config_put+0x14c/0x580 [ 763.333172][T27351] nbd_release+0xfe/0x140 [ 763.333186][T27351] ? __pfx_nbd_release+0x10/0x10 [ 763.333199][T27351] bdev_release+0x536/0x650 [ 763.333222][T27351] ? __pfx_blkdev_release+0x10/0x10 [ 763.333235][T27351] blkdev_release+0x15/0x20 [ 763.333247][T27351] __fput+0x44f/0xa60 [ 763.333267][T27351] fput_close_sync+0x11f/0x240 [ 763.333284][T27351] ? __pfx_fput_close_sync+0x10/0x10 [ 763.333301][T27351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.333317][T27351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.333331][T27351] __x64_sys_close+0x7e/0x110 [ 763.333348][T27351] do_syscall_64+0x15f/0xf80 [ 763.333364][T27351] ? trace_irq_disable+0x3b/0x140 [ 763.333385][T27351] ? clear_bhb_loop+0x40/0x90 [ 763.333401][T27351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.333415][T27351] RIP: 0033:0x7fcb3a4a7407 [ 763.333429][T27351] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 763.333442][T27351] RSP: 002b:00007ffe3e3aefb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 763.333456][T27351] RAX: ffffffffffffffda RBX: 00007fcb3ab40880 RCX: 00007fcb3a4a7407 [ 763.333467][T27351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 763.333476][T27351] RBP: 00007fcb3ab406e8 R08: 0000000000000000 R09: 0000000000000000 [ 763.333485][T27351] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 763.333493][T27351] R13: 000056367939f190 R14: 0000000000000008 R15: 00005636793a9e00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 763.333509][T27351] [ 763.666300][T27955] lo speed is unknown, defaulting to 1000 [ 763.716249][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 763.758369][ T5633] Bluetooth: hci1: command tx timeout [ 764.017147][T27924] lo speed is unknown, defaulting to 1000 [ 764.859794][T27955] bond5: (slave syz_tun): Removing an active aggregator [ 764.867195][T27955] bond5: (slave syz_tun): Releasing backup interface [ 765.194510][ T6066] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 765.208337][T18016] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 765.220946][T18016] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 765.235277][T18016] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 765.244920][ T13] team0: left allmulticast mode [ 765.249848][ T13] team_slave_0: left allmulticast mode [ 765.255322][ T13] team_slave_1: left allmulticast mode [ 765.261253][ T13] dummy0: left allmulticast mode [ 765.266776][ T13] team0: left promiscuous mode [ 765.271557][ T13] team_slave_0: left promiscuous mode [ 765.277215][ T13] team_slave_1: left promiscuous mode [ 765.282671][ T13] dummy0: left promiscuous mode [ 765.287848][ T13] bridge0: port 3(team0) entered disabled state [ 765.294973][ T13] bridge_slave_1: left allmulticast mode [ 765.300672][ T13] bridge_slave_1: left promiscuous mode [ 765.306546][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.318595][ T13] dvmrp0: left allmulticast mode [ 765.323572][ T13] dvmrp6: left allmulticast mode [ 765.809103][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.819131][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.828625][ T13] bond0 (unregistering): Released all slaves [ 765.836349][ T13] bond1 (unregistering): Released all slaves [ 765.847252][ T13] bond2 (unregistering): Released all slaves [ 765.918162][ T13] hm3): left promiscuous mode [ 765.948637][ T13] hmac(sha224: left promiscuous mode [ 766.029616][ T13] tipc: Left network mode [ 766.046798][ T13] IPVS: stopping master sync thread 21837 ... [ 766.053470][ T13] IPVS: stopping backup sync thread 23629 ... [ 766.088486][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 766.392212][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 766.502688][ T13] pim6reg (unregistering): left allmulticast mode [ 766.647995][ T13] team0 (unregistering): Port device team_slave_1 removed [ 766.660782][ T13] team0 (unregistering): Port device team_slave_0 removed [ 766.722042][ T13] team0 (unregistering): Port device dummy0 removed [ 766.747757][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 766.927399][ T13] IPVS: stop unused estimator thread 0... [ 767.025645][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 771.176274][ T6066] batadv1: left promiscuous mode