last executing test programs: 18.45194168s ago: executing program 4 (id=7849): socket$unix(0x1, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007280)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0xffff}, {}, {0xf, 0x6}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="bda5c0981bfa11510793fbe54eb7446bee8f9d06048ac99116919d", @ANYRES32=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @multicast2}, 0x4000, 0x2, 0x3, 0x1}}, 0x26) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0100001a00010000000000000000007f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a48c07f8a7d0194000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c00140078636263286165732900"/244], 0x13c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r10, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000680)=""/64, 0x40}, {&(0x7f0000001700)=""/4108, 0x100c}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)}, 0x900000}], 0x7, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0xffffff12, 0x1, [@m_skbedit={0x74, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xa3}]}, {0x3d, 0x6, "5284913d689c7712195cdcc368270d536203adc8884cbdbc41a14618d37342e89876d99760d8d10f948da91bc3e460be8426e98f7163198b1d"}, {0xc, 0xa, {0x1}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700002a1400dff38edbae58380000030a0fdb00000000600200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000300)={0x1000003f, 0x2000003, 0x2, 0x3}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 17.943990049s ago: executing program 0 (id=7852): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4008080) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f0000000500)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa8584bfa3214dc965290afb1ddcccfc090db5975e2bc2311c6456c9", 0x40}, {0x0}, {&(0x7f0000001000)="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", 0x232}], 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="0c952bdd19b8d8f3723a0ae3f72dc3a71e3c866a4c5639f7d9a1ab045031fcd23e1e2d5e2a893fff1f852d41aac9b67ccb5b3ffaa0a242c967d0207f4fff06fb663fad53290e8feead5ec5d985ab85e04097d8904c736a2075f8200f8e5355ece76c3e148c57f53f735feaff3a637aa075fb3b6215d5531beeeeeaeb1e769a53264872799c853d6d8e527a2715d9dae7a985fdc56e967ccf5479c54e99", 0x9d}, 0x1, 0x0, 0x0, 0x404c014}, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f0000000300)=""/216}, 0x94) 17.806358487s ago: executing program 0 (id=7854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001040)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc2d}]}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x37, 0x40, 0xb6, 0x4, @empty, @local, 0x40, 0x1, 0x8, 0xffffffff}}) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r8, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010854}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000b3b2000000000000000000008510000001000000950000000000000085000000ad000000950000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304010000400000000000000400", @ANYRES32=0x0, @ANYBLOB="018300001c1e0300140012800900010076657468000000000400028008001f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001040)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc2d}]}]}, 0x4c}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x37, 0x40, 0xb6, 0x4, @empty, @local, 0x40, 0x1, 0x8, 0xffffffff}}) (async) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r8, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010854}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000b3b2000000000000000000008510000001000000950000000000000085000000ad000000950000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) (async) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304010000400000000000000400", @ANYRES32=0x0, @ANYBLOB="018300001c1e0300140012800900010076657468000000000400028008001f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async) 10.619300988s ago: executing program 4 (id=7859): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="c5a500429b3aaaaaaaaaaabb080045380078006600000011907864010100e00000014e1f4e2000649078020000000100000004000000e84db19d67a59f0ec9a8129d4deed4d4abb18a7385125409524ff85f4f50604ac783735fff09cbfc41d0f93701a11e697707420955d5045c84f5a9da49e251230bfe72ff75ec941abebd1db2992275e1"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaa59253a912ebf024dd6008000800083a0000000000000000e10000000000000001000000000000000000000000000000018000907800030031"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000126bd7000fddbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x2004c090) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@deltfilter={0x1520, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2, 0xc}, {0xfff2}, {0xe, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xc5e8}, @TCA_RATE={0x6, 0x5, {0x40, 0xd}}, @TCA_RATE={0x6}, @filter_kind_options=@f_fw={{0x7}, {0x14d4, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x6, 0x4, 0xda3, 0x6, 0x1, 0x100, 0x6d6e, 0x9, 0x0, 0x0, 0x0, 0x3, 0x8, 0x1, 0xcc3d, 0x0, 0x7, 0x6, 0xf, 0xd503, 0x2, 0x0, 0x6, 0xf, 0x10000, 0x80000000, 0x1, 0x0, 0x9, 0x6, 0x9, 0x400, 0x40, 0x1, 0xfffffffb, 0x7, 0x2, 0x5, 0xc56, 0x1000, 0x6, 0x81, 0xd, 0x4, 0x0, 0xfffffff9, 0xf, 0x3, 0x3, 0xdd6, 0x0, 0x0, 0x5, 0x6ad4, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x4, 0xafce, 0x66a, 0x1, 0x4, 0x3, 0xfffffff9, 0x8, 0x8, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x2, 0x31e, 0xffffffff, 0xbdd, 0x2, 0xfa98, 0x4, 0x4, 0x200, 0x4a6d, 0x5, 0x6, 0x4, 0xf, 0x1, 0xf, 0x8, 0x40, 0x3, 0x3, 0xffffff01, 0xf3, 0x0, 0x7fffffff, 0xfff, 0x40, 0x10001, 0x5cdb258d, 0xb5, 0x6, 0x74d, 0x6, 0x8d7, 0x7, 0x1, 0x6, 0xb, 0x9, 0x4, 0x2, 0x0, 0xe, 0x240000, 0x8, 0x675, 0x8, 0x5, 0xc7ed, 0xb9, 0x8, 0x10001, 0x5, 0x6, 0xadee, 0x8, 0x2, 0x8001, 0x7fff, 0x80, 0xc65, 0xf4c, 0xc8, 0xff51, 0xffffffff, 0x4, 0x3, 0x8, 0x9, 0x8000, 0x7f, 0x8, 0x0, 0xd1c, 0x7, 0xae, 0x15, 0xb4f, 0x3, 0x674, 0x0, 0x5a75, 0x7fff, 0x4, 0x9, 0x7, 0x1, 0xff000000, 0x2, 0x11a, 0x6, 0x6, 0x7f, 0x8, 0x3, 0x5, 0xa, 0x4, 0x92, 0xe77, 0x9, 0x0, 0x6, 0xff, 0xb, 0x5, 0x27, 0xc78, 0x4, 0x2, 0x3, 0x8, 0xe, 0x4, 0x800, 0x49, 0x8, 0x2, 0x81, 0x9c, 0x6, 0x1, 0x9, 0x2, 0xd8a2, 0xfff, 0x3, 0x473ecd1e, 0x0, 0x9, 0x1600, 0x7, 0xfffffc00, 0x5, 0x200, 0x9, 0x413d, 0x63, 0x7ff, 0xfffffffc, 0x4, 0x9, 0x5, 0x1, 0x7, 0x1, 0x3, 0x3, 0xc6, 0x0, 0x80000000, 0xc0000, 0x7, 0x6f, 0x8, 0x8001, 0x7f, 0xa6, 0xffffffff, 0xff, 0x4, 0x652a, 0x4, 0x4, 0x8, 0x4, 0x100, 0xb, 0x1, 0x7, 0x2, 0x1, 0x9, 0x6, 0x10, 0x8000, 0x9, 0xaea, 0x45, 0x10001, 0x4, 0x1]}]}, @TCA_FW_INDEV={0x14, 0x3, 'wlan0\x00'}, @TCA_FW_POLICE={0x838, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x36f}, @TCA_POLICE_RATE={0x404, 0x2, [0x4c, 0xc1, 0x6, 0x0, 0x9da5, 0x6, 0x10001, 0x7, 0x3d, 0xffff2abc, 0x8, 0xe2c, 0x0, 0x5, 0x8, 0xc74, 0x7, 0x8, 0x5, 0x40, 0x7, 0xce71, 0x400, 0x4, 0x183d, 0x1ff, 0x7, 0xfffffffc, 0x2, 0x23a9, 0x7, 0x9, 0x800, 0x0, 0x100, 0x267, 0x800000, 0x8000, 0x7fffffff, 0xde000, 0x1, 0x46d9, 0x196, 0x595, 0x5, 0x0, 0x0, 0x6, 0x7, 0x1a1, 0x6, 0x6, 0xa, 0xb, 0x800, 0x7, 0x5, 0x955, 0x7, 0x3, 0x7, 0xd0000000, 0x7ff, 0x401, 0x8, 0x7, 0xfffffe01, 0x81, 0x6, 0x3ff, 0x7, 0x4, 0x7, 0x2, 0x0, 0x10000, 0x4033, 0x9, 0x8, 0x5, 0x8, 0x438, 0x99, 0x4, 0x6, 0x4, 0x4, 0x400, 0x3, 0x6, 0xb738, 0x5, 0x1, 0x3, 0x5, 0xe, 0x30, 0x8b, 0xd2223e5, 0x9, 0x19, 0xd5b4, 0xf9d, 0x0, 0x4f, 0x7, 0x7, 0xfffffffd, 0x7, 0x1, 0x1, 0x8001, 0x6145, 0x3ff, 0x0, 0xb, 0xfb8, 0x7, 0x0, 0x1, 0xaad6, 0x3, 0x1, 0x2, 0x5, 0x7, 0x3, 0xd0c, 0x6ccc828b, 0x9, 0x754, 0xc, 0x0, 0x6, 0x1, 0x9, 0x9, 0x2, 0x2, 0x14, 0x400, 0x0, 0x6, 0x3, 0x100, 0x7ff, 0x7, 0xff, 0x45, 0x2, 0x7, 0x8, 0x46e, 0x0, 0xffff8000, 0x0, 0x3, 0x0, 0x956, 0x2, 0x100, 0x0, 0x9, 0x7, 0x5, 0x4, 0x2, 0xfffffffc, 0x8, 0x8ab, 0x182, 0x10000, 0x2, 0x0, 0x1, 0x10000, 0xb, 0x6, 0x6, 0x6, 0xffff0000, 0xc, 0x7f, 0x1000, 0xff, 0x6, 0x89, 0x6, 0xffffffff, 0x40, 0x3, 0x0, 0x10001, 0x2, 0x41680086, 0xffffffff, 0x862, 0x2, 0x5, 0x7fff, 0x9002, 0x29e5, 0x8, 0xfffffc01, 0x3, 0x8, 0x9, 0xffff, 0x9, 0x5941, 0x5, 0x392e, 0x6ba6, 0xd, 0x69d, 0xff, 0x401, 0x9, 0x7, 0x3, 0x81, 0xda38, 0x3ddc, 0x5, 0x1ff, 0x9, 0x9, 0x1, 0xfffffff8, 0xb0, 0xc3, 0x5, 0x10001, 0x9, 0x100, 0x6, 0x9, 0x5, 0x2, 0x5, 0x200, 0x2, 0xfffffffe, 0xc6a, 0x9, 0x5, 0x3, 0xedba, 0x4, 0x1000, 0x8, 0x8, 0x7, 0x9, 0x8, 0x506b]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x101, 0x7fffffff, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x4, 0x5b11, 0x8, 0xf, 0x20ed, 0x0, 0x9, 0x1, 0x28, 0x4, 0x81, 0xffffffff, 0x1, 0x3ff, 0x0, 0x8001, 0x7fffffff, 0x5, 0xfff, 0xfffff4d6, 0xf, 0x3, 0x0, 0x2, 0x9, 0xa, 0x9428, 0x7, 0xfffffffd, 0x484c, 0x385, 0x400, 0x6, 0x8, 0x6, 0x2ce8, 0xda, 0xfff, 0x2, 0x0, 0x6, 0x3, 0xa, 0x4, 0xfffffff7, 0x3, 0x5, 0x2, 0xb, 0xe, 0x9, 0x80000000, 0xc65b, 0xa4, 0x3ff, 0x3f, 0x7f, 0xabba, 0x40, 0x1, 0x4, 0x6, 0x3c, 0x8f14, 0x3, 0x7, 0x0, 0x3, 0x3, 0x0, 0x1fffe00, 0x3, 0xfffffff6, 0x5, 0x6, 0x7ff, 0xf, 0xb, 0x2, 0x8000, 0x49, 0x9, 0x0, 0x8, 0x1, 0x6, 0x6, 0x1855, 0x2162, 0x3, 0x7f, 0x5, 0x7fff, 0x5, 0x3, 0x2, 0x3, 0xb9, 0x1ff, 0x0, 0x5, 0x200, 0x6, 0x3, 0x1, 0x0, 0xffffffff, 0xc000, 0x0, 0xdd, 0x7ff, 0xffff, 0xe, 0x7, 0x9b66, 0xec, 0x7fff, 0x0, 0x7, 0x4, 0x800, 0x0, 0x10, 0x4, 0x3, 0x3, 0xe, 0x3, 0x5, 0x9, 0x7, 0x2, 0x1, 0x10001, 0x100, 0x3, 0xe5, 0x101, 0x10000, 0x9, 0x0, 0x0, 0x7, 0x40, 0x7, 0x5, 0x1, 0xca5b, 0x3, 0x3da, 0x638a8f78, 0x1, 0x1ff, 0x5, 0x6, 0x1, 0x3, 0x868f, 0x80000001, 0x1, 0xffffffff, 0x0, 0xfff, 0x0, 0x8, 0x4, 0x2, 0x4, 0x401, 0x1, 0x1, 0x5, 0x4, 0xb3, 0x4, 0x101, 0x53d, 0x8, 0xc, 0x2, 0x8100, 0xc722, 0x3, 0x1, 0x2, 0x2d, 0x9d, 0xffffff21, 0x4, 0x4, 0x2, 0x5, 0x7, 0xffffffff, 0x4, 0xdf, 0x8, 0x8000, 0x8, 0x10, 0x0, 0x7, 0x9, 0x1, 0x0, 0x20, 0xd, 0x100, 0x4, 0x6, 0x96, 0x0, 0x5718, 0x80000001, 0x100, 0x29, 0x1, 0xfffffffe, 0xd7, 0x0, 0x1ff, 0x2, 0x2, 0x0, 0x13, 0xbf6, 0x7fff, 0x56, 0x7, 0x200, 0x6, 0x2, 0x0, 0x81, 0x1d5, 0xff, 0x3, 0x984, 0x2, 0x3, 0x0, 0x5, 0x401, 0x7, 0x3, 0x3, 0x7, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_FW_POLICE={0x874, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xbf, 0x5, 0x9, 0x4c, 0x6, 0x5, 0x8a, 0x7fff, 0x9, 0x5, 0xa0e2, 0x5, 0x5, 0xa9, 0x8001, 0xffffffff, 0x6, 0x4, 0x8001, 0x9d78, 0x7, 0x8, 0x1, 0x4, 0x5, 0xffffffff, 0x7, 0xd31, 0x1, 0x5, 0xbe, 0x1, 0x40, 0x4, 0xf, 0x4, 0x1, 0x2, 0x5, 0x5, 0x8001, 0x10, 0x1, 0x6, 0x8, 0x8, 0x4, 0x4c, 0x1, 0x5, 0x9, 0x80000000, 0x6e6ae4c6, 0xe, 0xfffffffa, 0x1000, 0x9, 0xf, 0xe790, 0xf, 0x7, 0x3c, 0x1, 0x25a1, 0x7386, 0x7, 0x5, 0x400, 0x0, 0x8, 0x5, 0x4, 0x2dd, 0x4, 0x164, 0x5, 0x1, 0x2, 0x320, 0x4, 0x81, 0x2e2, 0x7fff, 0x7, 0x5, 0x7ff, 0x7e, 0x0, 0x2, 0x10, 0x3, 0x8, 0x3, 0x1, 0x5, 0x9c7, 0x1, 0x0, 0xbf, 0x1989277f, 0x8, 0x5, 0x7, 0x4733, 0x0, 0xff, 0x72, 0x8, 0x4, 0x4, 0x9, 0x5, 0x1, 0x8, 0x80000001, 0xf, 0x4, 0x8001, 0x5, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x101, 0x4d1, 0x7, 0x5, 0x5, 0x4, 0x6, 0x0, 0x6, 0x5, 0x6, 0x0, 0x4, 0x6, 0x8, 0x8000, 0x8001, 0x3, 0xf, 0xf500, 0x2, 0x8, 0x401, 0x8001, 0xfff, 0x800, 0x7, 0xea1, 0x5, 0x4, 0x9, 0x800000, 0x6, 0x1, 0x8, 0x8, 0x3bf, 0x0, 0x4, 0xff, 0x6, 0x2, 0x4, 0x7, 0x0, 0x5, 0x0, 0x3, 0x8000, 0x0, 0x7, 0x3, 0x3, 0x0, 0x4, 0x4, 0x8000, 0x7f85, 0x5, 0x0, 0x10000, 0x6, 0x6, 0x0, 0xfff, 0x667c, 0x2, 0x9, 0x4, 0x0, 0x85e, 0x0, 0x1, 0x3, 0xa, 0x3, 0x9, 0x7, 0x7fffffff, 0x3, 0xff, 0xfffffffa, 0x7, 0x4, 0x9, 0x8, 0x131d, 0x1, 0xc93, 0x7d7, 0x0, 0x9, 0x2fb6, 0x1000, 0x0, 0x4, 0x2, 0x0, 0xbcb1, 0x4, 0x5, 0x1, 0xffff32b0, 0xfffffffd, 0x7, 0x1, 0x6, 0x6, 0x3, 0x643, 0x6, 0x7fffffff, 0x7, 0x8, 0x33e4, 0x5, 0x9b4, 0x7, 0x9, 0xc, 0x10, 0x2, 0x7fff, 0x3, 0x400, 0x8, 0xfffff308, 0x6, 0x5, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x8, 0xfff, 0x6, {0x3, 0x2, 0x2, 0xf18, 0x3ff, 0x4}, {0x7, 0x2, 0x6ff, 0xd, 0x5, 0x1}, 0x8, 0x2, 0xffffffff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5952}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x7fffffff, 0x7, 0x3, 0x4, 0x80000001, 0x5, 0x7, 0xe98, 0x80, 0xff, 0x7f, 0x10001, 0x2, 0xfffffff7, 0x100, 0xa, 0x6, 0x3, 0x9, 0x4, 0x3, 0x560, 0x80000001, 0x7fff, 0x7, 0x8, 0xa, 0x3, 0x6, 0x7, 0xfffffff7, 0x8, 0x6, 0x7f, 0x6, 0x896, 0x4, 0x5, 0x8, 0x4, 0x10000, 0x24d, 0x2, 0x6, 0x9, 0x8, 0x1, 0xa, 0xfffffffe, 0xf, 0x3, 0x69dc, 0x8, 0x8, 0x7fffffff, 0x4, 0x800, 0x0, 0x9, 0x5, 0x7a, 0x0, 0x3ff, 0xd2, 0x1, 0xa0d3, 0x80000000, 0xe0, 0x9, 0x10001, 0x9, 0x2, 0x9, 0xc, 0xf, 0xfffffff7, 0x1, 0x10001, 0x1c, 0x3f, 0x3, 0xfffffffb, 0x3, 0x7, 0x81, 0x5, 0x0, 0x5, 0x101, 0x2, 0x10000, 0xfffffff9, 0x4, 0x40, 0x1, 0x101, 0x5, 0x1, 0x7, 0x9, 0x2f2, 0x4, 0x6, 0xff, 0x2, 0x50a, 0x696255ea, 0x60e, 0x9, 0x0, 0x1, 0x8, 0xffff, 0x9, 0x4, 0xfffffff9, 0x0, 0xfffffffc, 0x7, 0x6, 0x2, 0x80000000, 0x40, 0x6, 0x2, 0x1, 0x839d, 0xfffffffe, 0x4, 0x4, 0x0, 0x14d5, 0x2, 0x9, 0x8, 0x8, 0xc, 0xbe2, 0x9, 0x40, 0xf, 0x1, 0x10001, 0x80000000, 0x8000, 0x6073, 0x40, 0xe, 0x2, 0x7f, 0x0, 0x7, 0xeb64, 0x0, 0x2, 0x5, 0xffffffff, 0xfffffff9, 0x5, 0x3, 0x0, 0x3, 0x33b, 0x1, 0x7, 0x3, 0x7, 0x2, 0x8, 0x4, 0x80, 0x8001, 0x400, 0x8000, 0xe9, 0x8001, 0x9, 0x1134, 0x60000, 0x9, 0x778, 0x5, 0x2, 0x1, 0x2, 0x552, 0x0, 0x3, 0x1, 0x1, 0x2, 0xe, 0xff, 0x8, 0x2f, 0xb27, 0x9, 0x2, 0x2, 0x101, 0xe5, 0x9, 0x30f, 0x4, 0x3, 0x1ff, 0x80000000, 0x200, 0x6, 0x800, 0xa8, 0xd, 0x2, 0x3, 0x25a5, 0x40, 0x3, 0x7, 0x1, 0x8, 0x0, 0x8001, 0xffffffff, 0x9, 0x2, 0x2, 0xdaf, 0xfffffffa, 0x4, 0x3, 0x80000001, 0x7fff, 0x0, 0xfffffffa, 0x0, 0x0, 0xfe0, 0x800, 0x5, 0x498c6272, 0x14, 0x8, 0x128, 0xc65e, 0x9, 0x54, 0x5, 0x1, 0x3, 0x7, 0x6, 0x7, 0x1b76, 0xe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2db}]}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x1520}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.599870698s ago: executing program 0 (id=7860): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x7) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="68000000300005060000000d00000000000001005400010050000100090001009bc1a7195d6d485ae4866761746500000000400002fe858674b7be38b3eb33a65b9bd3dca55bcc00297dca151206f029aad0c0d8cda4b48f6104d77b9b237fa9ed1c9937ab215e41c1c10a8737d4345470ea64dbfe26b30b79ae3f4152adec242801a1ea361a6b6206e919c83027b8ea1356fdc2a6969bbea5cb9be06f3d6272bc4658135893b4e0993f86c8"], 0x68}, {&(0x7f0000000340)={0x11c, 0x23, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0x42}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x42, 0x0, 0x0, @uid=r3}, @generic="da3460aa4d9c3659223f1d966a60ea92992c8ad30aa6c142f8f43768d90916d21762c4f63f09fa5720e96c2293f516d3ff84bb8f2620268b405f09be1810c7c89c4b30d8ce42f9c18f760dc337d7d2d2f0c6c7785a92766f825e8a3ce1533b09b9c416ba717ca944d064740a6f9819b85bb8b06925ffcd791e5217287d67e392042565f714d8b62c44e68c97fe6a7d36b353f85527cb5f2a8f0894873461a3cfb381dd01cdf4f552ceb50d0794b913bd65b87179ccce74272a995d551900e70fab60b8f1a7ca6ae0d802d38280d328d8e8def640dd36494438df56bc27129723a9b867a871820a8507a17fb4"]}, 0x11c}, {&(0x7f0000000480)={0x224, 0x1e, 0x304, 0x70bd2c, 0x25dfdbfd, "", [@generic="85b3056b745c136ad4ffe754e8339bf4523f578e8a3fa583931b0a9560fd170e4cc0a8739518c803c98fdb50fa593b1abd5824a6ac00f71e417204446d24371e0d7d2a0ef9ea0d4022d53ec8fb7dc0879f46ff4706d1873505d704d3e4f7d65e4e6592daeb05916ffc4244cd6d29461c8c674cb2d9f2cc92597a2a5307bb05c64f2d2f4319332d0054c82623674a0950bbfbbd671dd05ba374f772c3168bf9d9f05a60a8d6eb0e3bd6cd6481c48d1b03fb1d35c49e0b630068460e1d3f52ad3c028995401c2c948f658511df70f27285c597ce50b35c8695be37cb6f23b07d5df77344", @nested={0x14, 0x42, 0x0, 0x1, [@nested={0x4, 0xc3}, @typed={0x8, 0xdd, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x32}]}, @generic="96c97cba4e700cb0a5336e324628142651d076cf24aaaf8aa63e022e1c6a6eb3dee6a3", @nested={0xf6, 0x95, 0x0, 0x1, [@nested={0x4, 0x11e}, @typed={0x8, 0xcd, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x15d, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x11b}, @generic="42ac8dd7f339fb8bab6941f3ef53ebdd959227f0d38f40f0382c9bf8132d1181ab4d712dea7b5a9885c7327c7ddaa1b34a6c03a5793b6019ab6fe61ddd7c3e8428faebaee2f1228c7dcf29a02165b7a551da3fc28403b82c8ed0024892c4ebc7ac91f6f9e0bbf10eca20da9a23a48d7f2bec69965185d7535035050405963f1a9116114e4c1bb16b8587aa2b95c0b0e643e4fdfe20ea2e2c731a425f6f2cfce37e33054fef2b0b2321a0bbba733422f7e28ebb2a3b10b2fa4b9364d04c81b1c1d7caa0b20d9f34ca450cb1b0a51e3ce8da1213ec3693", @nested={0x4, 0x140}]}]}, 0x224}], 0x3, 0x0, 0x0, 0x48851}, 0xc0) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @multicast1}, 0x10) listen(r1, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) recvfrom$inet6(r2, &(0x7f00000001c0)=""/8, 0x8, 0x10000, &(0x7f0000000700)={0xa, 0x4e24, 0x7, @private0, 0xd}, 0x1c) close(0x4) 10.013837141s ago: executing program 0 (id=7863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000e500000000fff9009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8916, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 9.373676408s ago: executing program 0 (id=7866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000010080001000100002b1a82441c95e5a50abc03c372164b086abfe01d48f800391c8cd41dc69f1e8a5957c89035c60087734c443afaf2388c7ebd0a023d70bb5b3d07097e0d2bf661aa6896c5aa8b13fbce0315002104c668205a79b1722dfbe34cedf61c5c0d211939d8c963cf4729ccefe79cfa09388eb826c963cbdf1243456fd3b82da69df31e6107b896261e4cb9", @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x2) r1 = socket(0x840000000002, 0x3, 0x100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2b8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xfff3, 0xffff}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd1, 0x8, 0x8, 0x3, 0x1, 0x1, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x6, 0x1, 0x3ff, 0x1325, 0x2, 0xfffffffe, 0x3d, 0x5}}, {0xe, 0x2, [0x1000, 0x800, 0x3ff, 0x4, 0x1]}}]}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x5, 0x101, 0x1, 0x82, 0x8, 0x3}}, {0xa, 0x2, [0x593, 0x8, 0x80]}}, {{0x1c, 0x1, {0xd, 0x1, 0x9, 0x100, 0x2, 0xea86, 0x1, 0x2}}, {0x8, 0x2, [0x26a, 0x7f]}}, {{0x1c, 0x1, {0x9, 0x2, 0xb, 0x1, 0x1, 0x2, 0xffffe4c9, 0x7}}, {0x12, 0x2, [0x2, 0xce35, 0x0, 0x7, 0xb, 0x3c25, 0x8]}}]}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x8, 0x4, 0x1, 0x100, 0x31a2c741, 0x9}}, {0x16, 0x2, [0x9573, 0xac, 0x8, 0x4, 0x401, 0x8, 0x9, 0x2, 0x2]}}, {{0x1c, 0x1, {0x3, 0x8d, 0x3, 0x91, 0x1, 0x5, 0x3, 0x9}}, {0x16, 0x2, [0x2, 0xfc01, 0xffff, 0x3, 0x40, 0x7ff, 0x9, 0x8, 0x1]}}, {{0x1c, 0x1, {0x0, 0x2, 0xd3, 0x4, 0x2, 0x7f0e, 0x6, 0x4}}, {0xc, 0x2, [0x80, 0x85a9, 0xcb5d, 0xffff]}}, {{0x1c, 0x1, {0x2, 0x7, 0x4b5, 0x6, 0x2, 0x3ff, 0x5b, 0x6}}, {0x10, 0x2, [0xb0, 0xfff5, 0xb, 0x8, 0x0, 0x1]}}, {{0x1c, 0x1, {0xf8, 0x0, 0x81, 0xf, 0x1, 0x1, 0xfffbfffe, 0x3}}, {0xa, 0x2, [0x7, 0x7fff, 0x1]}}, {{0x1c, 0x1, {0x3, 0x0, 0x8000, 0x2, 0x0, 0x2, 0xffffffff, 0x2}}, {0x8, 0x2, [0x1000, 0x2]}}, {{0x1c, 0x1, {0x0, 0x4, 0xf0e4, 0x9, 0x2, 0x76e1, 0xca68, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0x1c, 0x1, {0x1, 0x7, 0x4, 0x2, 0x2, 0x6, 0x8, 0x2}}, {0x8, 0x2, [0x3, 0x7000]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x44, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x101}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7e4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'macvlan0\x00', @random="614e3d1120b1"}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x10010, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1}, 0xffffffffffffff80) sendto$inet6(r7, 0x0, 0x0, 0x60d8080, &(0x7f0000000080)={0xa, 0x4e20, 0x86, @private0, 0xfffffffe}, 0xffffffffffffff20) sendto$inet6(r7, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r7, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r7, &(0x7f0000001a80)=""/4042, 0xfca, 0x40000103, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0xffad) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) close(r0) r9 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES8=r0], 0x1c}}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000000800010001000000e1fda3fe281577ad570091a03ade87fa4bc5f1cc5cf5fd98685a3100f61143ac4b81ad9c22744d5a0023f21ac118980d8f93357f49d7138375cf54c978ba7f854bc4fb2027dcc622d4a6fa768a49ebe12c6f170b80972300fa763c3ba0e3c21f3f53e4a2ab880231cf62bea085295fdc89bfcc29bb726905a22b165d6227217a26805a8d3244fdeff265b5494610c2be5316ae7d3d65ff1f1d796aefae92b22307de963e7fa0a2b354baed79ab429b01fb1233f1183412055e30459623e6f17e2b5b04476cb2671dffb2c9aa049308588e05"], 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.623610089s ago: executing program 4 (id=7867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8.411949757s ago: executing program 2 (id=7871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="ce91bda883e815ca8263224318d2", 0xe, 0x4, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000140)=0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000108050000000000000000000a0000000005000300060000000606004000f5000006000240006000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x408c4}, 0x30000050) 8.231079143s ago: executing program 1 (id=7872): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x38, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x8880) (async) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) shutdown(0xffffffffffffffff, 0x1) 8.1296101s ago: executing program 2 (id=7873): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 7.992165179s ago: executing program 1 (id=7874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.943798631s ago: executing program 2 (id=7875): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r5 = socket(0x8000000010, 0x2, 0x4) write(r5, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.891219341s ago: executing program 1 (id=7876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032bbd70000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001"], 0x30}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032bbd70000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001"], 0x30}, 0x0) (async) 7.707179313s ago: executing program 2 (id=7877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000009c0)={'wg1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd28, 0x25dfdbff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x3, {@in6_addr=@loopback={0xe000000000000000}, 0x800}}}]}, 0x38}}, 0x404a024) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0], 0x0, 0xa8, &(0x7f0000000ac0)=[{}], 0x8, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x1, 0x1600, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x1, 0x8000, 0xfffffffa, 0x6}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000dc0)={0x564, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5f}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',.]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!-*\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&,\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '{#\xf7\xea$!:+-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*:\'\xd3\xb0)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '{#\xf7\xea$!:+-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/}[^^\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x46, 0x5, "a4464723e6c98289b3f5a833d34a2e57b541c6a2ce9ce0fcff639565aae29aa49c24b6a632e5d53c53d9dfd4fc56cd22181717b25df4fbcdd38ea7ad72c910f92c80"}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "b1122fb5927dd24da40c3d8810a81d0a860bab61f9542170f10304ed2e76bf8270f3aa1678f63efaa8fbd9f3beb3a557c16e398e20e515625b8c46e22794fee29581470d1803cf641a04177f626d4a458f589db748b3ce1d78b3cfde198337abb107ef1159f280ffcb54167036a7393502123c136297b4be525484dd50e3fc31ca9b19618eabd1a4efe4fdca7c47a8ef389f348352c06497a89ae74f98ca6cd52e58c7a751bc0a655629c68bf68f8b21e0f6ff1be8cf7acdc80ca2eb5df22239848ad4dd3fb903d77d4f29217ece541259da662f039796c060efbee004c246746481223a59cdf09753e7bee99a78"}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "8df443af069a855d443373ceb45937723759019fb9d6e5b10fbbd79aae50ff0282cd20cc1cbb2220b5c78d2a4a7ab486d11117918f355b593c6ec04e1c55411ef7b4a5e4e57867e136418403706a0ef44dc2944e7a5d1541b2c046132ee62326c658ee41795be8a63424ee7aecbaebd0bad62a3df0a80f3dbe51629a9ff15a37312bf5f2631356af573a8ca39d1ae89f43e6ec518b8513f6478942f7e91230f83334b249c89abef65d729ef819437d4a7009aebfc971c3f7e5177c5cfa4a5ebd93e9f05c1e00a2d889cef2c419"}]}]}, 0x564}, 0x1, 0x0, 0x0, 0xc000}, 0x24000043) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000000500)={{r9, &(0x7f00000002c0)='/dev/net/tun\x00', 0x400, &(0x7f0000000300)={@align=0xb, {0x9, 0x9, 0x7, 0x3}}, 0xfffffff7, &(0x7f0000000340), &(0x7f0000000380)=0x6}, 0x1, &(0x7f00000004c0)=[{0x2, 0xf, &(0x7f00000003c0)='{#\xf7\xea$!:+-\x00', &(0x7f0000000400)="be2a0eea3825d2800c334d09070b9ddf83b8da4ee4b982ee775d322cdef62b7277eafb97fb0e63f584adb36dbaee2bd4456bf6b058ea1041c5c155cb1d04adb56bfcbf02238e184b4404a5f73080a7ee7df88562308c664b564281b71f0eb0e8450844bf7110a375354f31f30d2402c08365501c1e93565cef0662fb367c44586b1c321f5cf4d392ded093ca99e84bcb63efa2a0b34ba535f87a3bd1fa5e63131bfc0f283e95d703d1ff3c3553494572a4f6168b0565837b", 0xb8, 0x8}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="13000000000001000400000002000000442b0000", @ANYRES32=r11, @ANYBLOB="050000000000fe5a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000400"/28], 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r12 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r12, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r12, 0x5) write$tun(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c000080080003400000000214000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000000000ffffffff71108f00f0ffffff9d00000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mmap(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x6, 0x12, r0, 0x353d7000) 7.70686845s ago: executing program 1 (id=7878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0x8, 0x23c4}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) unshare(0x20000600) connect(r4, &(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x970, 0x401, 0xfffffffb, 0x1008, r3, 0x6, '\x00', r2, r1, 0x0, 0x4, 0x4, 0xf}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x34, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, @local, {[@dstopts={0x33}, @hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x80, 0x8}}]}], {{0x4e24, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r5, &(0x7f0000000640), &(0x7f0000000680)=@udp6=r8, 0x1}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x78, 0x0, 0xfffffffffffffe8c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto(r0, &(0x7f00000003c0)="aab2f1745e4cab7d60045e2d5645ef58dd00fb8d87ec6bdd8fb1cb07b2a9a6d30b5653c3c8", 0x25, 0x8010, &(0x7f0000000440)=@isdn={0x22, 0x3, 0x5, 0x1, 0x8}, 0x80) 7.083522867s ago: executing program 3 (id=7881): socket$inet6(0xa, 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (fail_nth: 5) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r3, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x70}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x68, &(0x7f0000000200)}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYRES16=r1], 0xbc}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 1.258076112s ago: executing program 0 (id=7882): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f00000004c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="9a2766a318d3b2000d71e9975c158f06c90021c364c9ffb20ed1e19354c1d7883def159d420c84d296d87018031ac3b5c26d0daf0a25998262da3135e1323525e6f775790171229198fa49d1c155016b5f15917a81f1f1335d60ae58206b2658d7ee5d25c6a031a9a9fb760d0ee3a66cdc", 0x71}, {&(0x7f0000000600)="b500d33f811c5f87fdbb6b3e4b9235a2720098299bdfbde02dbc04b16b45f7a86ec0cc89f300c964c07e4b5225a3c05dd24c0a23ae8b7f78eb4e4187e09aad87d03c591c2dacc70bd000b7d2", 0x4c}, {&(0x7f0000000680)="f5", 0x1}, {&(0x7f00000006c0)="a715fa6f1ab82bfaed91f657e6bece1a71321f330d12ce7f0d8b3391b4dc02f8d0c97e96a41fbbb046c8dc28ff3fbde3465c449e66952c983f532413aa323620c62e959a5901943a9e5ff12ea0fae161e71cd0d7984911a61ab01899c054ae052b12ee486ce2c63851ae845854a5552cd350559d387179c967d1c213a7be08ae1a4949e98e719491c8a59cb6c901ef795d3b3a592a24d8df4dbbc7c1e423", 0x9e}, {0x0}, {&(0x7f0000000880)="60ee34e7d617dce7ac2920e3e0502b7b1eb4588c0641a70ed85a9ae9c32efc8f5b9583ee70c83cb9b3178178c53863e949f99ec7e1285055a64b5ef1a62de333bb601cdb1e750557649b79bbc86b1a48886b98ef82e68d75e705327db1ba867f17e14f349e16c92a9810a6cbd5221ef5", 0x70}, {&(0x7f0000000900)}], 0x7, &(0x7f00000009c0)=[{0xc0, 0x11, 0xfff, "b471aa641aa3541ec6446f268e3a8ec3e6f2dee9c58a11f2e99a0cbd5395c68d9cbc954a710081bf2b51262f55a5d58bd0bd2e4f030c695f3d8c9554767613deb64e7b6d3e9f59491f1730b3db4142c6b7d3d0017c0a18fcbcd53f86724b62ce06884d97995e84afbb7a8569b285f9351e209dfb6fc9be9b6a324964540bd0dca5667e2a17f0d19a0a838ae08aba058d86733bfa2a8619e34ae71176ea847cb2eff6ebf86f4708babb81"}], 0xc0}, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffb}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002100)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000020c0)={&(0x7f0000000ac0)={0x15dc, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x26c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "31a735ac390829aefc890255d06f4818833ba64758d9b0db008ec77fe5106c532dc8687a65056fe547f86632ae25bac8947ce858ad6a4e71bd75f17a3fa982ea52b81c4a454ee3bcd4fbde88ab071cfbf4a49cff7181e3ecec8008dfb02f5cfa4c60a45da7265d13c03164a965ae5b36a92050d6f9f1c625f86cc52b15a0265b58be7a36e3f3553bb2398262bed90902d301c61b4ef546ced73c4fa000e8d8092db18293f65e5db5626fb5d7c4711b"}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "60b1b4c1f4190eb6fc0055aa9f77d33bd69b5bd1b50395f04001cfa5d03dbb37b16ec1986d94a65abacaa97ae2ce0bfd8b518407dd64a2c358fa699ead0bfba5db24d7c999924ffadb7217340bf00ead722136a9e2f581028bafedc6c8eefd08c95b7c8c288c1a85aa64807ff621f50af9c5955a5bb57a33ab7690d079d79a97c5ae2682bb478b4e9d77733d560a90cf3d588d2f2da1ebb85c9b30461fd50baea13195a6424516bbdf"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "e471ceb46da2605afb6873cb2a376022d6498e31de8cac5fb0d8f1e055a79e463c27c51ebda5d3863e3a9f974fcfc05a778797487f357884e646b5682158a4c90071d0d1d02ff3de195aff73a88fa4ec2d6001e5feda9647cb61d8baa4138dd0514c31cef696f057d6e68bf0cbb48204570d9235f14ada9afd5994a026a7bd13f9d68ede32d4605dae1ebc68ea99e29cd2cfa6178819ab1a27f23b18638d737c642eeff58f7d9cbc82d8b005c6bb9f932fc02450de0e72d24daf74d238d871a149229b7477481cb2f9b9da99ac6f135320de1b2751afc2d74e4fd851f81748dd525a3e81ca49055c172bc34027"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\'/(@#%\\!-[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'**:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rxe\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '#]{#$(-.+(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'T\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#+&/%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x774c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff41b}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*<*:)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "8fcbbb19356f4668fc94b771147bbafc2580baa176e8a596615e581b13f3160701756ecd82b584161e1f208269b86d8880973155984094aa303149cdd10d1fedc53727d3fb5cf20410ddbf5196361643ddba6fd364697dff3923f62be99b019f336a5af0bd75fb1ca5f0c24956eb9c844ead916ca6ccac4eecdc1846e671a033412dd2ff0529052d4acfbd823a439f498511c0c4afcf772b4586c42624f43101c2d26004285ff8b711d11e147a3d326ff6c9dc8e098f81a048a1dc60a47ce893fa7dcb37164cb552e67714ffd222c8f92ab703568325"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff5e3}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "5c01ed5ff09f696c2b3fea3983fe876a93b59900fadb8cc084f6d9e2bf09ccbd08f18f726c13fb53fdaa66367bacc40d3cd812c6f8"}]}]}, 0x15dc}, 0x1, 0x0, 0x0, 0x40800}, 0x44) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 1.24934569s ago: executing program 1 (id=7883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c004}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{0x0}], 0x1}, 0xe75}], 0x1, 0x60002000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x70, 0x0, &(0x7f0000000380)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x168, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x138, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}, @TCA_FLOWER_KEY_ENC_OPTS={0x124, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3ff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xaa}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x94}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}]}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}]}}]}, 0x168}}, 0x800) write$tun(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0xfce) 1.092845944s ago: executing program 3 (id=7884): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="560000002a0000000000000000010100010000000000000000000000000000000000000000000000000000000000140000", 0x30) 1.048167396s ago: executing program 4 (id=7885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x74, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4550}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfca2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x4040000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1.040851865s ago: executing program 2 (id=7886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r13) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r14, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) 876.756382ms ago: executing program 3 (id=7887): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xfff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r5 = socket(0x8000000010, 0x2, 0x4) write(r5, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 710.149221ms ago: executing program 4 (id=7888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = epoll_create(0x3ff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x7) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000280)={0x2000000}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @void, @val={0xc, 0x99, {0xb0c, 0x35}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400030000000900020073797a32000000000500010007000000070005000a000000140007800800114000000000080012400000ffff15000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in=@local}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) epoll_create(0x3ff) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) (async) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x7) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)={0xa0000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000280)={0x2000000}) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @void, @val={0xc, 0x99, {0xb0c, 0x35}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400030000000900020073797a32000000000500010007000000070005000a000000140007800800114000000000080012400000ffff15000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in=@local}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) (async) 628.530212ms ago: executing program 1 (id=7889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="1102040000000000000001000000"], 0x14}}, 0x804) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) unshare(0x600) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="aa263bc661aabb0600000000000000000040070000001443f884a8f2eedf"], &(0x7f0000000540)={0x0, 0x1, [0xd3f, 0xfce, 0xb47, 0x69b]}) setsockopt$inet_int(r3, 0x0, 0xc, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r8, 0x1b}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="7a0e", 0x2}], 0x1}, 0x4010) 598.525339ms ago: executing program 3 (id=7890): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 284.209214ms ago: executing program 3 (id=7891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a0ffe40095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 145.22116ms ago: executing program 2 (id=7892): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r4, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000006c0)={0x4, {{0xa, 0x4e23, 0xf173, @empty, 0x5}}, 0x0, 0x8, [{{0xa, 0x4e21, 0xc0, @mcast2, 0x10}}, {{0xa, 0x4e22, 0x9, @private1, 0x4}}, {{0xa, 0x4e24, 0x19, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}}, {{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}, {{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x490) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r4, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400090000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6c}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x3, '\x00', r4}, 0x94) 134.814407ms ago: executing program 4 (id=7893): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x4044) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300ac1414b60800060003"], 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r4, 0x200, 0x70bd2d, 0x737, {}, ["", "", ""]}, 0x14}}, 0x20004000) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0280000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000000100"/28], 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) 0s ago: executing program 3 (id=7894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1804, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0x200, 0x10, 0x633, 0x70bd2a, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0xfffd, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x4}, {@in=@multicast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd, 0x3}, {}, {0x0, 0x4, 0x3}, 0x70bd25, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xc8, 0x1, {{'md5\x00'}, 0x400, "03ff00004137b192fb8e5e7f447874748563bab2c89a19dd1016fe153742ae1eadb71f875a55462594512efa7aa6403aff00afa206c194ec05960e8c34b772a4c07334ff92c58543b783cb4b56919693a638b9f5f5f18a2a8b6a939ae273c1fdd6e1e79d7ed157870f83c5d28b8157b3d0fc069b64e462640bfa8ef34eaf73ab"}}]}, 0x200}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) listen(r1, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000080)=0xa, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r7, r7, 0x0, 0x9) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x3, 0x1, 0x6, 0x87f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0x6e0f}, {0x6, 0x0, 0xff, 0x2000000}]}, 0x10) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x5c, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000002, 0x0, 0x20000000, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0xc, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3f, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x1, 0xc, "df32d6a743bfaf1fb7af"}, {0x5, 0x9, "7fd356cec23675"}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x7, [0x1, 0x1, 0x3, 0x401]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 31][T31868] netlink: zone id is out of range [ 836.467944][T31868] netlink: zone id is out of range [ 836.467952][T31868] netlink: zone id is out of range [ 836.489966][T31870] erspan0: left promiscuous mode [ 836.492565][T31870] ip_vti0: left promiscuous mode [ 836.494441][T31870] ip6_vti0: left promiscuous mode [ 836.505299][T31870] sit0: left promiscuous mode [ 836.516628][T31870] ip6tnl0: left promiscuous mode [ 836.519587][T31870] ip6gre0: left promiscuous mode [ 836.541446][T31870] syz_tun: left promiscuous mode [ 836.553422][T31870] ip6gretap0: left promiscuous mode [ 836.555920][T31870] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.556425][T31870] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.581147][T31870] vcan0: left promiscuous mode [ 836.581892][T31870] bond0: left promiscuous mode [ 836.583690][T31870] team0: left promiscuous mode [ 836.585583][T31870] nlmon0: left promiscuous mode [ 836.586124][T31870] batadv0: left promiscuous mode [ 836.587732][T31870] vxcan0: left promiscuous mode [ 836.588801][T31870] vxcan1: left promiscuous mode [ 836.611789][T31870] veth0: left promiscuous mode [ 836.614001][T31870] veth1: left promiscuous mode [ 836.620314][T31870] wg0: left promiscuous mode [ 836.624115][T31870] wg1: left promiscuous mode [ 836.628828][T31870] wg2: left promiscuous mode [ 836.631304][T31870] veth0_to_bridge: left promiscuous mode [ 836.636604][T31870] veth1_to_bridge: left promiscuous mode [ 836.644541][T31870] veth0_to_bond: left promiscuous mode [ 836.647215][T31870] bond_slave_0: left promiscuous mode [ 836.648166][T31870] veth1_to_bond: left promiscuous mode [ 836.651344][T31870] bond_slave_1: left promiscuous mode [ 836.652370][T31870] veth0_to_team: left promiscuous mode [ 836.655914][T31870] team_slave_0: left promiscuous mode [ 836.665890][T31870] veth1_to_team: left promiscuous mode [ 836.668675][T31870] team_slave_1: left promiscuous mode [ 836.674227][T31870] veth0_to_batadv: left promiscuous mode [ 836.676814][T31870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.677035][T31870] batadv_slave_0: left promiscuous mode [ 836.682700][T31870] veth1_to_batadv: left promiscuous mode [ 836.685683][T31870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.685735][T31870] batadv_slave_1: left promiscuous mode [ 836.688312][T31870] xfrm0: left promiscuous mode [ 836.695288][T31870] veth0_to_hsr: left promiscuous mode [ 836.707989][T31870] veth1_to_hsr: left promiscuous mode [ 836.726336][T31870] hsr0: left promiscuous mode [ 836.728794][T31870] veth1_virt_wifi: left promiscuous mode [ 836.731844][T31870] veth0_virt_wifi: left promiscuous mode [ 836.734460][T31870] virt_wifi0: left promiscuous mode [ 836.734963][T31870] vlan0: left promiscuous mode [ 836.735253][T31870] vlan1: left promiscuous mode [ 836.735646][T31870] macvlan0: left promiscuous mode [ 836.735863][T31870] macvlan1: left promiscuous mode [ 836.736006][T31870] ipvlan0: left promiscuous mode [ 836.736151][T31870] ipvlan1: left promiscuous mode [ 836.736649][T31870] macvtap0: left promiscuous mode [ 836.736792][T31870] geneve0: left promiscuous mode [ 836.737049][T31870] geneve1: left promiscuous mode [ 836.737195][T31870] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 836.737326][T31870] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 836.737438][T31870] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 836.737688][T31870] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 836.737881][T31870] mac80211_hwsim hwsim102 wlan0: left promiscuous mode [ 836.738124][T31870] mac80211_hwsim hwsim103 wlan1: left promiscuous mode [ 836.738424][T31870] gtp0: left promiscuous mode [ 836.738564][T31870] bond1: left promiscuous mode [ 836.741605][T31870] veth2: left promiscuous mode [ 836.742879][T31870] veth3: left promiscuous mode [ 836.743016][T31870] veth4: left promiscuous mode [ 836.743158][T31870] veth5: left promiscuous mode [ 836.743950][T31870] ip6gre1: left promiscuous mode [ 836.744124][T31870] geneve2: left promiscuous mode [ 836.744138][T31870] geneve2: left allmulticast mode [ 836.744277][T31870] macvlan2: left promiscuous mode [ 836.744418][T31870] bond2: left promiscuous mode [ 836.744955][T31870] macsec1: left promiscuous mode [ 836.745077][T31870] vrf0: left promiscuous mode [ 836.745214][T31870] gre1: left promiscuous mode [ 836.909997][T31884] bond2: entered promiscuous mode [ 836.911440][T31884] bond2: entered allmulticast mode [ 836.912733][T31884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 837.936867][T31909] ip6_vti0: entered promiscuous mode [ 838.170146][T31909] ip6gre1: entered promiscuous mode [ 838.170304][T31909] mac80211_hwsim hwsim99 wlan2: entered promiscuous mode [ 838.170453][T31909] bond1: entered promiscuous mode [ 838.170577][T31909] erspan1: entered promiscuous mode [ 838.170695][T31909] syztnl1: entered promiscuous mode [ 838.170801][T31909] macvlan2: entered promiscuous mode [ 838.170942][T31909] ip6erspan0: entered promiscuous mode [ 838.171067][T31909] ip6tnl1: entered promiscuous mode [ 838.171200][T31909] vxlan0: entered promiscuous mode [ 838.172908][T31909] bridge1: entered promiscuous mode [ 838.173062][T31909] caif0: entered promiscuous mode [ 838.173189][T31909] macvlan3: entered promiscuous mode [ 838.221611][T31909] gre1: entered promiscuous mode [ 838.232497][T31909] macvlan4: entered promiscuous mode [ 838.232657][T31909] macvlan5: entered promiscuous mode [ 838.232797][T31909] veth1_to_team: entered promiscuous mode [ 838.265184][T31909] syzkaller1: entered promiscuous mode [ 839.099932][ T7803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.099997][ T7803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.100030][ T7803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.100061][ T7803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.748702][T31983] xt_TCPMSS: Only works on TCP SYN packets [ 839.986882][T31990] pimreg: entered allmulticast mode [ 840.024337][T31990] validate_nla: 119 callbacks suppressed [ 840.024370][T31990] netlink: 'syz.1.6808': attribute type 1 has an invalid length. [ 840.024385][T31990] __nla_validate_parse: 201 callbacks suppressed [ 840.024398][T31990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6808'. [ 840.269379][ T7803] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.269471][ T7803] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.269601][ T7803] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.269739][ T7803] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.607224][T32007] netlink: 'syz.1.6813': attribute type 3 has an invalid length. [ 840.871751][T32020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6814'. [ 841.204426][T32028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6816'. [ 841.255901][T32028] ip6gre0: left promiscuous mode [ 841.665819][T32035] bridge0: left promiscuous mode [ 841.680307][T32035] bridge_slave_0: left allmulticast mode [ 841.680338][T32035] bridge_slave_0: left promiscuous mode [ 841.680564][T32035] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.864082][T32050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6821'. [ 841.909980][ T7803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 841.910104][ T7803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 841.910152][ T7803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 841.910183][ T7803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 841.976079][T32052] x_tables: duplicate underflow at hook 1 [ 842.268028][T32071] gre0: Master is either lo or non-ether device [ 842.271752][T32070] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6828'. [ 842.345217][T32074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6829'. [ 842.587812][T32076] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 842.604550][T32078] net_ratelimit: 1004 callbacks suppressed [ 842.604573][T32078] netlink: Conntrack attr has 8 unknown bytes [ 842.604601][T32078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.357751][T32097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6838'. [ 843.452049][T32101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6840'. [ 843.775608][T32113] openvswitch: netlink: Invalid VLAN frame [ 844.368750][T32128] IPv6: Can't replace route, no match found [ 844.377061][T32128] IPv6: Can't replace route, no match found [ 845.194280][T32164] ip_tables: iptables: counters copy to user failed while replacing table [ 845.373268][T32176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.463257][T32178] netlink: 'syz.3.6858': attribute type 1 has an invalid length. [ 845.512313][T32178] bond2: entered promiscuous mode [ 845.515248][T32178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 845.584117][T32178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 845.584393][T32178] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 845.584408][T32178] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 845.599225][T32178] bond2: (slave xfrm1): making interface the new active one [ 845.599254][T32178] xfrm1: entered promiscuous mode [ 845.607726][T32178] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 845.616202][T32185] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 845.871992][T32194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6864'. [ 845.936231][T32196] mac80211_hwsim hwsim105 syzkaller0: Caught tx_queue_len zero misconfig [ 846.072212][T32199] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6867'. [ 846.383330][T32217] netlink: NAT attribute has 4 unknown bytes [ 846.383364][T32217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.904289][T32232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'. [ 846.970314][T11568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.971190][T11568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.971260][T11568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.971826][T11568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.985444][T32234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6872'. [ 846.996094][T32234] netlink: 'syz.3.6872': attribute type 1 has an invalid length. [ 846.996116][T32234] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6872'. [ 846.996751][T32232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6871'. [ 847.310946][T32241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6873'. [ 847.328051][T26937] bridge0: entered promiscuous mode [ 847.418099][T32253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6876'. [ 847.777271][T32263] IPv6: Can't replace route, no match found [ 847.777532][T32263] IPv6: Can't replace route, no match found [ 848.656872][T32279] ip6gre2: entered promiscuous mode [ 848.656898][T32279] ip6gre2: entered allmulticast mode [ 848.747517][T32296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6889'. [ 848.970010][T11568] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 848.970279][T11568] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 849.001179][T26943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 849.067198][T32304] IPv6: Can't replace route, no match found [ 849.067420][T32304] IPv6: Can't replace route, no match found [ 849.446512][T32309] Unsupported ieee802154 address type: 0 [ 849.532901][T26943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 849.620811][T26943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 850.023770][T32328] lo: entered promiscuous mode [ 850.023952][T32328] tunl0: entered promiscuous mode [ 850.024100][T32328] gre0: entered promiscuous mode [ 850.026518][T32328] gretap0: entered promiscuous mode [ 850.026658][T32328] erspan0: entered promiscuous mode [ 850.026775][T32328] ip_vti0: entered promiscuous mode [ 850.026935][T32328] ip6_vti0: entered promiscuous mode [ 850.027048][T32328] sit0: entered promiscuous mode [ 850.031165][T32328] ip6tnl0: entered promiscuous mode [ 850.031293][T32328] ip6gre0: entered promiscuous mode [ 850.031402][T32328] syz_tun: entered promiscuous mode [ 850.031545][T32328] ip6gretap0: entered promiscuous mode [ 850.095855][T32328] vcan0: entered promiscuous mode [ 850.096051][T32328] bond0: entered promiscuous mode [ 850.096067][T32328] bond_slave_0: entered promiscuous mode [ 850.096314][T32328] bond_slave_1: entered promiscuous mode [ 850.097348][T32328] team0: entered promiscuous mode [ 850.097367][T32328] team_slave_0: entered promiscuous mode [ 850.097536][T32328] team_slave_1: entered promiscuous mode [ 850.098638][T32328] nlmon0: entered promiscuous mode [ 850.098787][T32328] batadv0: entered promiscuous mode [ 850.109538][T32328] veth0: entered promiscuous mode [ 850.109689][T32328] veth1: entered promiscuous mode [ 850.109864][T32328] wg0: entered promiscuous mode [ 850.110001][T32328] wg1: entered promiscuous mode [ 850.110136][T32328] wg2: entered promiscuous mode [ 850.110270][T32328] veth0_to_bridge: entered promiscuous mode [ 850.182320][T32328] veth1_to_bridge: entered promiscuous mode [ 850.182605][T32328] veth0_to_bond: entered promiscuous mode [ 850.186530][T32328] veth1_to_bond: entered promiscuous mode [ 850.186812][T32328] veth0_to_team: entered promiscuous mode [ 850.187088][T32328] veth1_to_team: entered promiscuous mode [ 850.194163][T32328] veth0_to_batadv: entered promiscuous mode [ 850.194344][T32328] batadv_slave_0: entered promiscuous mode [ 850.197648][T32328] veth1_to_batadv: entered promiscuous mode [ 850.197817][T32328] batadv_slave_1: entered promiscuous mode [ 850.197956][T32328] xfrm0: entered promiscuous mode [ 850.198098][T32328] veth0_to_hsr: entered promiscuous mode [ 850.199205][T32328] veth1_to_hsr: entered promiscuous mode [ 850.201258][T32328] hsr0: entered promiscuous mode [ 850.201419][T32328] veth1_virt_wifi: entered promiscuous mode [ 850.205479][T32328] veth0_virt_wifi: entered promiscuous mode [ 850.205647][T32328] virt_wifi0: entered promiscuous mode [ 850.206034][T32328] vlan0: entered promiscuous mode [ 850.207602][T32328] vlan1: entered promiscuous mode [ 850.208740][T32328] macvlan0: entered promiscuous mode [ 850.208882][T32328] macvlan1: entered promiscuous mode [ 850.213212][T32328] ipvlan0: entered promiscuous mode [ 850.213372][T32328] ipvlan1: entered promiscuous mode [ 850.213757][T32328] macvtap0: entered promiscuous mode [ 850.215674][T32328] geneve0: entered promiscuous mode [ 850.215820][T32328] geneve1: entered promiscuous mode [ 850.215965][T32328] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 850.217655][T32328] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 850.222520][T32328] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 850.222660][T32328] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 850.222781][T32328] mac80211_hwsim hwsim102 wlan0: entered promiscuous mode [ 850.222936][T32328] mac80211_hwsim hwsim103 wlan1: entered promiscuous mode [ 850.223075][T32328] gtp0: entered promiscuous mode [ 850.225350][T32328] bond1: entered promiscuous mode [ 850.225372][T32328] veth3: entered promiscuous mode [ 850.225986][T32328] veth2: entered promiscuous mode [ 850.232100][T32328] veth4: entered promiscuous mode [ 850.232388][T32328] veth5: entered promiscuous mode [ 850.232549][T32328] ip6gre1: entered promiscuous mode [ 850.232661][T32328] geneve2: entered promiscuous mode [ 850.232802][T32328] macvlan2: entered promiscuous mode [ 850.232938][T32328] bond2: entered promiscuous mode [ 850.233053][T32328] macsec1: entered promiscuous mode [ 850.233162][T32328] vrf0: entered promiscuous mode [ 850.236929][T32328] gre1: entered promiscuous mode [ 850.237078][T32328] veth6: entered promiscuous mode [ 850.237231][T32328] veth7: entered promiscuous mode [ 850.237379][T32328] mac80211_hwsim hwsim113 wlan2: entered promiscuous mode [ 850.237520][T32328] ip6tnl1: entered promiscuous mode [ 850.237630][T32328] ip6tnl2: entered promiscuous mode [ 850.237740][T32328] macvlan3: entered promiscuous mode [ 850.243750][T32328] bridge1: entered promiscuous mode [ 850.249719][T32328] geneve3: entered promiscuous mode [ 850.326686][T32328] syzkaller1: entered promiscuous mode [ 850.490417][T11567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.494704][ T7803] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.494751][ T7803] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.494787][ T7803] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.002879][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6904'. [ 851.017460][T32359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6906'. [ 851.017484][T32359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'. [ 851.505325][T32379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.958391][T32391] ip6gre2: entered promiscuous mode [ 851.958416][T32391] ip6gre2: entered allmulticast mode [ 851.959884][T32362] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 852.286192][ T7803] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 852.286422][ T7803] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 852.309773][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 852.423563][T32409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6916'. [ 852.493243][T32409] syzkaller0: entered promiscuous mode [ 852.493267][T32409] syzkaller0: entered allmulticast mode [ 852.672703][T32423] netlink: 'syz.4.6920': attribute type 7 has an invalid length. [ 852.672728][T32423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6920'. [ 852.672759][T32423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6920'. [ 852.695018][T32425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.719995][T32423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6920'. [ 852.784865][T32423] bond3: entered promiscuous mode [ 852.786823][T32423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 852.909265][T10353] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 853.016523][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6922'. [ 853.126351][T32435] ip_tables: iptables: counters copy to user failed while replacing table [ 853.211845][T32444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6923'. [ 853.244284][T32435] vlan3: entered promiscuous mode [ 853.549636][T32449] IPv6: Can't replace route, no match found [ 853.549853][T32449] IPv6: Can't replace route, no match found [ 853.758786][T32462] netlink: 'syz.0.6931': attribute type 1 has an invalid length. [ 853.758809][T32462] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6931'. [ 853.799935][T32463] netlink: 'syz.4.6932': attribute type 14 has an invalid length. [ 854.066399][T32474] xt_addrtype: ipv6 does not support BROADCAST matching [ 854.178117][T32481] netlink: 'syz.3.6937': attribute type 11 has an invalid length. [ 854.216777][T32482] vlan0: left promiscuous mode [ 854.463437][T32492] openvswitch: netlink: IP tunnel dst address not specified [ 854.463472][T32492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.509151][T32498] x_tables: duplicate underflow at hook 1 [ 854.510988][T32500] openvswitch: netlink: IP tunnel dst address not specified [ 854.511020][T32500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.885622][T32518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.973170][T32520] IPv6: Can't replace route, no match found [ 854.973450][T32520] IPv6: Can't replace route, no match found [ 855.775147][T32564] lo: left promiscuous mode [ 855.802259][T32564] tunl0: left promiscuous mode [ 855.820494][T32564] gre0: left promiscuous mode [ 855.923273][T32564] gretap0: left promiscuous mode [ 855.936999][T32564] erspan0: left promiscuous mode [ 855.948559][T32571] IPv6: Can't replace route, no match found [ 855.955132][T32571] IPv6: Can't replace route, no match found [ 855.958116][T32564] ip_vti0: left promiscuous mode [ 855.968077][T32564] ip6_vti0: left promiscuous mode [ 855.976165][T32564] sit0: left promiscuous mode [ 856.024866][T32564] ip6tnl0: left promiscuous mode [ 856.037193][T32564] syz_tun: left promiscuous mode [ 856.057346][T32564] ip6gretap0: left promiscuous mode [ 856.086052][T32564] vcan0: left promiscuous mode [ 856.094370][T32564] bond0: left promiscuous mode [ 856.105092][T32564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.114097][T32564] team0: left promiscuous mode [ 856.121228][T32564] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.165114][T32564] dummy0: left promiscuous mode [ 856.175569][T32564] nlmon0: left promiscuous mode [ 856.187050][T32564] batadv0: left promiscuous mode [ 856.194722][T32564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.200329][T32564] vxcan0: left promiscuous mode [ 856.218285][T32564] vxcan1: left promiscuous mode [ 856.231210][T32564] veth0: left promiscuous mode [ 856.247414][T32564] veth1: left promiscuous mode [ 856.249222][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 856.249240][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 856.268897][T32564] wg0: left promiscuous mode [ 856.303173][T32564] wg1: left promiscuous mode [ 856.333068][T32564] wg2: left promiscuous mode [ 856.360990][T32564] veth0_to_bridge: left promiscuous mode [ 856.397880][T32564] veth1_to_bridge: left promiscuous mode [ 856.416588][T32564] veth0_to_bond: left promiscuous mode [ 856.426056][T32564] bond_slave_0: left promiscuous mode [ 856.438587][T32564] veth1_to_bond: left promiscuous mode [ 856.456902][T32564] bond_slave_1: left promiscuous mode [ 856.467501][T32564] veth0_to_team: left promiscuous mode [ 856.491851][T32564] team_slave_0: left promiscuous mode [ 856.508856][T32564] veth1_to_team: left promiscuous mode [ 856.546066][T32564] team_slave_1: left promiscuous mode [ 856.558782][T32564] veth0_to_batadv: left promiscuous mode [ 856.599494][T32564] batadv_slave_0: left promiscuous mode [ 856.602230][T32564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.612555][T32564] veth1_to_batadv: left promiscuous mode [ 856.634776][T32564] batadv_slave_1: left promiscuous mode [ 856.648412][T32564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.663354][T32564] xfrm0: left promiscuous mode [ 856.678518][T32564] veth0_to_hsr: left promiscuous mode [ 856.698937][T32564] hsr_slave_0: left promiscuous mode [ 856.708252][T32564] veth1_to_hsr: left promiscuous mode [ 856.717831][T32609] netlink: 'syz.4.6959': attribute type 3 has an invalid length. [ 856.717868][T32609] __nla_validate_parse: 73 callbacks suppressed [ 856.717881][T32609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6959'. [ 856.746462][T32564] hsr_slave_1: left promiscuous mode [ 856.747318][T32564] veth1_virt_wifi: left promiscuous mode [ 856.774025][T32564] veth0_virt_wifi: left promiscuous mode [ 856.783696][T32564] virt_wifi0: left promiscuous mode [ 856.783722][T32564] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 856.817020][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.817123][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.967576][T32616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6959'. [ 857.216784][T32626] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6963'. [ 857.246986][T32629] syzkaller1: entered promiscuous mode [ 857.247026][T32629] syzkaller1: entered allmulticast mode [ 857.599524][T32641] netlink: 'syz.0.6966': attribute type 2 has an invalid length. [ 857.599711][T32641] netlink: 'syz.0.6966': attribute type 2 has an invalid length. [ 857.599879][T32641] netlink: 'syz.0.6966': attribute type 2 has an invalid length. [ 857.600048][T32641] netlink: 'syz.0.6966': attribute type 2 has an invalid length. [ 857.600210][T32641] netlink: 'syz.0.6966': attribute type 2 has an invalid length. [ 857.600369][T32641] netlink: 'syz.0.6966': attribute type 2 has an invalid length. [ 857.705912][T32641] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 857.705940][T32641] mac80211_hwsim hwsim105 syzkaller0: entered allmulticast mode [ 857.730813][T32653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6969'. [ 857.775663][T32654] validate_nla: 11 callbacks suppressed [ 857.775686][T32654] netlink: 'syz.4.6967': attribute type 10 has an invalid length. [ 857.831032][T32654] team0 (unregistering): Port device team_slave_0 removed [ 857.858606][T32654] team0 (unregistering): Port device team_slave_1 removed [ 858.213270][T32672] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6974'. [ 858.471608][T32686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6977'. [ 858.618754][T32693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6980'. [ 859.038161][T32717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 859.544573][T32753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6991'. [ 859.673934][T32717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 859.688515][T32749] pim6reg1: entered promiscuous mode [ 859.688536][T32749] pim6reg1: entered allmulticast mode [ 859.766205][ T1997] block nbd5: Possible stuck request ffff888027715080: control (read@0,1024B). Runtime 30 seconds [ 859.767139][ T1997] block nbd5: Possible stuck request ffff888027715240: control (read@1024,1024B). Runtime 30 seconds [ 859.767173][ T1997] block nbd5: Possible stuck request ffff888027715400: control (read@2048,1024B). Runtime 30 seconds [ 859.767199][ T1997] block nbd5: Possible stuck request ffff8880277155c0: control (read@3072,1024B). Runtime 30 seconds [ 859.831101][T32760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6993'. [ 859.913364][T32764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 860.780317][ T359] netlink: 'syz.4.7007': attribute type 30 has an invalid length. [ 860.832538][ T365] netlink: 'syz.4.7007': attribute type 30 has an invalid length. [ 860.869796][ T359] vxlan1: entered promiscuous mode [ 860.869823][ T359] vxlan1: entered allmulticast mode [ 860.920534][ T361] netlink: 'syz.1.7005': attribute type 1 has an invalid length. [ 860.920559][ T361] netlink: 'syz.1.7005': attribute type 1 has an invalid length. [ 860.924173][ T359] netlink: 'syz.4.7007': attribute type 30 has an invalid length. [ 860.924697][ T366] gretap0: entered promiscuous mode [ 860.932643][ T366] vlan2: entered promiscuous mode [ 861.080224][ T365] vxlan2: entered promiscuous mode [ 861.080248][ T365] vxlan2: entered allmulticast mode [ 861.110642][ T7803] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.110690][ T7803] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.110724][ T7803] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.110756][ T7803] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.165651][ T372] set match dimension is over the limit! [ 861.428857][ T379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.754061][ T399] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 861.754091][ T399] mac80211_hwsim hwsim105 syzkaller0: left allmulticast mode [ 861.801941][ T403] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 861.871618][ T408] __nla_validate_parse: 9 callbacks suppressed [ 861.871640][ T408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7021'. [ 862.148251][ T421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7025'. [ 862.523514][ T437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7029'. [ 862.673416][ T441] tipc: Enabling of bearer rejected, failed to enable media [ 862.927706][ T445] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7031'. [ 862.996680][ T464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7034'. [ 863.159244][ T476] openvswitch: netlink: Missing valid actions attribute. [ 863.256809][ T484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7038'. [ 863.455613][ T494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7040'. [ 863.638450][ T502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7041'. [ 864.065066][ T524] netlink: 'syz.0.7047': attribute type 21 has an invalid length. [ 864.065149][ T524] netlink: 'syz.0.7047': attribute type 3 has an invalid length. [ 864.065163][ T524] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7047'. [ 864.270778][ T540] netlink: 'syz.0.7050': attribute type 1 has an invalid length. [ 864.328611][ T540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.463681][ T543] bond1: (slave geneve4): making interface the new active one [ 864.473398][ T551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7052'. [ 864.478357][ T543] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 864.490886][ T1162] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 864.729688][T11567] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 864.731487][T11567] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 864.731534][T11567] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 864.882470][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 864.897807][ T578] ip6t_srh: unknown srh match flags 4000 [ 865.076799][ T584] ip_tables: iptables: counters copy to user failed while replacing table [ 865.155030][ T585] ip_tables: iptables: counters copy to user failed while replacing table [ 865.174605][ T593] syzkaller1: entered promiscuous mode [ 865.174629][ T593] syzkaller1: entered allmulticast mode [ 868.187093][ T719] syzkaller0: entered promiscuous mode [ 868.187118][ T719] syzkaller0: entered allmulticast mode [ 868.638744][ T740] __nla_validate_parse: 5 callbacks suppressed [ 868.638767][ T740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7098'. [ 868.773269][ T746] syzkaller0: entered promiscuous mode [ 868.773295][ T746] syzkaller0: entered allmulticast mode [ 868.811094][ T748] netlink: 'syz.3.7101': attribute type 1 has an invalid length. [ 868.885379][ T751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7101'. [ 868.936380][ T757] netlink: 'syz.3.7101': attribute type 10 has an invalid length. [ 868.936406][ T757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7101'. [ 869.001435][ T759] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7099'. [ 869.113624][ T748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 869.141175][ T764] nbd: must specify an index to disconnect [ 869.258333][ T767] netlink: 'syz.1.7105': attribute type 83 has an invalid length. [ 869.322655][ T774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7107'. [ 869.322691][ T774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7107'. [ 869.830618][ T801] sctp: [Deprecated]: syz.2.7113 (pid 801) Use of int in maxseg socket option. [ 869.830618][ T801] Use struct sctp_assoc_value instead [ 870.444037][ T812] ip6t_srh: unknown srh match flags 4000 [ 870.469095][ T813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7118'. [ 870.470156][ T809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7116'. [ 870.714672][ T817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7119'. [ 870.730398][ T817] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7119'. [ 870.863787][ T829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 870.864474][ T831] bond0: left promiscuous mode [ 870.874964][ T831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.881108][ T831] bond4: (slave bond0): making interface the new active one [ 870.888227][ T831] bond4: (slave bond0): Enslaving as an active interface with an up link [ 871.155572][ T849] ip6t_srh: unknown srh match flags 4000 [ 871.796528][ T883] netlink: 'syz.1.7136': attribute type 1 has an invalid length. [ 871.844695][ T883] bond5: entered promiscuous mode [ 871.845113][ T883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 871.995935][ T883] bond5: (slave bridge2): making interface the new active one [ 871.995965][ T883] bridge2: entered promiscuous mode [ 872.012934][ T883] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 872.015719][ T896] ip6t_srh: unknown srh match flags 4000 [ 872.260193][ T908] syzkaller0: entered promiscuous mode [ 872.260215][ T908] syzkaller0: entered allmulticast mode [ 872.679990][ T948] ip6t_srh: unknown srh match flags 4000 [ 872.890432][ T961] netlink: 'syz.2.7155': attribute type 3 has an invalid length. [ 874.048755][ T995] ip6t_srh: unknown srh match flags 4000 [ 874.425160][ T1013] geneve2: entered promiscuous mode [ 874.425183][ T1013] geneve2: entered allmulticast mode [ 874.430708][ T1013] __nla_validate_parse: 11 callbacks suppressed [ 874.430727][ T1013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7169'. [ 874.472262][ T1014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7169'. [ 874.577788][ T1028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7172'. [ 874.588876][ T1029] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7172'. [ 874.660310][ T1032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7170'. [ 874.660348][ T1032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7170'. [ 874.663171][ T1031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7170'. [ 874.663205][ T1031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7170'. [ 874.720605][ T1031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 874.729628][T11568] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 874.729700][T11568] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 874.732843][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 874.732907][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 875.502121][ T1065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7179'. [ 875.620912][ T1068] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7182'. [ 875.678805][ T1078] netlink: 'syz.0.7183': attribute type 2 has an invalid length. [ 875.735302][ T1083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 875.735330][ T1083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 875.735472][ T1083] hsr0: left promiscuous mode [ 875.751957][ T1068] netlink: 'syz.3.7182': attribute type 1 has an invalid length. [ 875.913416][ T1097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 875.914194][ T1096] tipc: Started in network mode [ 875.914222][ T1096] tipc: Node identity 7ed8fa711823, cluster identity 4711 [ 875.914380][ T1096] tipc: Enabled bearer , priority 0 [ 875.956991][ T1097] openvswitch: netlink: IP tunnel dst address not specified [ 876.311346][ T1113] ip6t_srh: unknown srh match flags 4000 [ 876.817745][ T1130] netlink: 'syz.3.7199': attribute type 4 has an invalid length. [ 877.020913][ T1094] tipc: Disabling bearer [ 877.207699][ T1138] batman_adv: batadv0: Adding interface: macvlan4 [ 877.207720][ T1138] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.207751][ T1138] batman_adv: batadv0: Interface activated: macvlan4 [ 877.518163][ T1151] syzkaller0: entered promiscuous mode [ 877.518186][ T1151] syzkaller0: entered allmulticast mode [ 877.841443][ T1166] GUP no longer grows the stack in syz.0.7212 (1166): 200000003000-20000000a000 (200000001000) [ 877.841479][ T1166] CPU: 0 UID: 0 PID: 1166 Comm: syz.0.7212 Not tainted syzkaller #0 PREEMPT(full) [ 877.841502][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 877.841515][ T1166] Call Trace: [ 877.841523][ T1166] [ 877.841533][ T1166] dump_stack_lvl+0xe8/0x150 [ 877.841568][ T1166] __get_user_pages+0x23b6/0x2750 [ 877.841601][ T1166] ? lock_acquire+0x115/0x350 [ 877.841639][ T1166] ? __gup_longterm_locked+0xc3b/0x15c0 [ 877.841675][ T1166] __gup_longterm_locked+0xd52/0x15c0 [ 877.841706][ T1166] ? lock_acquire+0x115/0x350 [ 877.841744][ T1166] gup_fast_fallback+0x1d92/0x20e0 [ 877.841805][ T1166] ? __pfx_gup_fast_fallback+0x10/0x10 [ 877.841835][ T1166] ? lock_acquire+0x115/0x350 [ 877.841856][ T1166] ? is_valid_gup_args+0x11f/0x200 [ 877.841885][ T1166] ? get_user_pages_fast+0x4d/0xb0 [ 877.841914][ T1166] __iov_iter_get_pages_alloc+0x378/0xa40 [ 877.841948][ T1166] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 877.841974][ T1166] iov_iter_get_pages2+0x5e/0xa0 [ 877.842001][ T1166] __se_sys_vmsplice+0x7b5/0x1660 [ 877.842049][ T1166] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 877.842077][ T1166] ? __pfx_futex_wait+0x10/0x10 [ 877.842179][ T1166] do_syscall_64+0x166/0x520 [ 877.842208][ T1166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.842230][ T1166] ? clear_bhb_loop+0x70/0xc0 [ 877.842255][ T1166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.842276][ T1166] RIP: 0033:0x7f2e3fb9e159 [ 877.842295][ T1166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.842314][ T1166] RSP: 002b:00007f2e40ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 877.842335][ T1166] RAX: ffffffffffffffda RBX: 00007f2e3fe25fa0 RCX: 00007f2e3fb9e159 [ 877.842350][ T1166] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000006f [ 877.842364][ T1166] RBP: 00007f2e3fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 877.842376][ T1166] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 877.842389][ T1166] R13: 00007f2e3fe26038 R14: 00007f2e3fe25fa0 R15: 00007fffcade2868 [ 877.842432][ T1166] [ 878.540142][ T1197] lo: entered promiscuous mode [ 878.565095][ T1197] tunl0: entered promiscuous mode [ 878.583899][ T1197] gre0: entered promiscuous mode [ 878.663120][ T1197] erspan0: entered promiscuous mode [ 878.679938][ T1197] ip_vti0: entered promiscuous mode [ 878.699736][ T1197] ip6_vti0: entered promiscuous mode [ 878.716921][ T1197] sit0: entered promiscuous mode [ 878.751657][ T1197] ip6tnl0: entered promiscuous mode [ 878.775008][ T1197] ip6gre0: entered promiscuous mode [ 878.828246][ T1197] syz_tun: entered promiscuous mode [ 878.838159][ T1197] ip6gretap0: entered promiscuous mode [ 878.850030][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.858807][ T1197] bridge0: entered promiscuous mode [ 878.874457][ T1197] vcan0: entered promiscuous mode [ 878.894686][ T1197] bond0: entered promiscuous mode [ 878.894712][ T1197] bond_slave_0: entered promiscuous mode [ 878.895034][ T1197] bond_slave_1: entered promiscuous mode [ 878.916602][ T1197] team0: entered promiscuous mode [ 878.916629][ T1197] team_slave_0: entered promiscuous mode [ 878.917397][ T1197] team_slave_1: entered promiscuous mode [ 878.926808][ T1209] af_packet: packet size is too long (65369 > 2016) [ 878.938559][ T1197] dummy0: entered promiscuous mode [ 878.957654][ T1197] nlmon0: entered promiscuous mode [ 879.074667][ T1197] batadv0: entered promiscuous mode [ 879.090231][ T1197] vxcan0: entered promiscuous mode [ 879.109204][ T1197] vxcan1: entered promiscuous mode [ 879.117544][ T1197] veth0: entered promiscuous mode [ 879.130377][ T1197] veth1: entered promiscuous mode [ 879.154535][ T1197] wg0: entered promiscuous mode [ 879.171033][ T1197] wg1: entered promiscuous mode [ 879.188205][ T1197] wg2: entered promiscuous mode [ 879.201909][ T1197] veth0_to_bridge: entered promiscuous mode [ 879.223572][ T1197] bridge_slave_0: entered promiscuous mode [ 879.243941][ T1197] veth1_to_bridge: entered promiscuous mode [ 879.279186][ T1197] veth0_to_bond: entered promiscuous mode [ 879.312775][ T1197] veth1_to_bond: entered promiscuous mode [ 879.329941][ T1197] veth0_to_team: entered promiscuous mode [ 879.337475][ T1197] veth1_to_team: entered promiscuous mode [ 879.343229][ T1197] veth0_to_batadv: entered promiscuous mode [ 879.345256][ T1197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.345304][ T1197] batadv_slave_0: entered promiscuous mode [ 879.347729][ T1197] veth1_to_batadv: entered promiscuous mode [ 879.350973][ T1197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.351021][ T1197] batadv_slave_1: entered promiscuous mode [ 879.353016][ T1197] xfrm0: entered promiscuous mode [ 879.357059][ T1197] veth0_to_hsr: entered promiscuous mode [ 879.361340][ T1197] hsr_slave_0: entered promiscuous mode [ 879.363423][ T1197] veth1_to_hsr: entered promiscuous mode [ 879.365521][ T1197] hsr_slave_1: entered promiscuous mode [ 879.367833][ T1197] veth1_virt_wifi: entered promiscuous mode [ 879.371069][ T1197] veth0_virt_wifi: entered promiscuous mode [ 879.373074][ T1197] virt_wifi0: entered promiscuous mode [ 879.373308][ T1197] macvlan0: entered promiscuous mode [ 879.373467][ T1197] macvtap0: entered promiscuous mode [ 879.373638][ T1197] ip6gre1: entered promiscuous mode [ 879.373746][ T1197] geneve2: entered promiscuous mode [ 879.373879][ T1197] gre1: entered promiscuous mode [ 879.373997][ T1197] bridge1: entered promiscuous mode [ 879.374148][ T1197] syztnl2: entered promiscuous mode [ 879.374251][ T1197] macvlan3: entered promiscuous mode [ 879.374463][ T1197] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 879.374614][ T1197] mac80211_hwsim hwsim115 wlan2: entered promiscuous mode [ 879.375312][ T1197] geneve3: entered promiscuous mode [ 879.377566][ T1197] gre2: entered promiscuous mode [ 879.397023][ T1197] veth2: entered promiscuous mode [ 879.397193][ T1197] veth3: entered promiscuous mode [ 879.397417][ T1197] gre3: entered promiscuous mode [ 879.397873][ T1197] ip6tnl2: entered promiscuous mode [ 879.402809][ T1197] bond1: entered promiscuous mode [ 879.402830][ T1197] geneve4: entered promiscuous mode [ 879.405330][ T1197] vlan2: entered promiscuous mode [ 879.419711][ T1197] syzkaller1: entered promiscuous mode [ 879.442088][T11568] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.442122][T11568] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.442165][T11568] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.442190][T11568] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.442224][T11568] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.442249][T11568] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.442283][T11568] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.442308][T11568] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.681597][ T1216] siw: device registration error -23 [ 879.911771][ T1228] __nla_validate_parse: 21 callbacks suppressed [ 879.911791][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7231'. [ 880.145377][ T1244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7234'. [ 880.171462][ T1247] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7234'. [ 880.174029][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7232'. [ 880.201531][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7232'. [ 880.201945][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7232'. [ 880.202326][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7232'. [ 880.204063][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7232'. [ 880.204540][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7232'. [ 880.207051][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7232'. [ 880.336693][ T1253] IPv6: Can't replace route, no match found [ 880.338240][ T1253] IPv6: Can't replace route, no match found [ 880.517107][ T1255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 880.535977][ T1255] netlink: 'syz.3.7236': attribute type 1 has an invalid length. [ 880.616443][ T1258] FAULT_INJECTION: forcing a failure. [ 880.616443][ T1258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.616476][ T1258] CPU: 0 UID: 0 PID: 1258 Comm: syz.2.7237 Not tainted syzkaller #0 PREEMPT(full) [ 880.616497][ T1258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 880.616508][ T1258] Call Trace: [ 880.616516][ T1258] [ 880.616523][ T1258] dump_stack_lvl+0xe8/0x150 [ 880.616555][ T1258] should_fail_ex+0x410/0x560 [ 880.616583][ T1258] _copy_from_user+0x2d/0xb0 [ 880.616612][ T1258] addrconf_del_ifaddr+0xd7/0x180 [ 880.616645][ T1258] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 880.616668][ T1258] ? kasan_quarantine_put+0xbb/0x1f0 [ 880.616700][ T1258] inet6_ioctl+0x11c/0x2e0 [ 880.616720][ T1258] ? __pfx_inet6_ioctl+0x10/0x10 [ 880.616738][ T1258] ? tomoyo_path_number_perm+0x219/0x5f0 [ 880.616765][ T1258] ? do_vfs_ioctl+0x116f/0x1530 [ 880.616788][ T1258] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 880.616815][ T1258] sock_do_ioctl+0x101/0x320 [ 880.616838][ T1258] ? __pfx_sock_do_ioctl+0x10/0x10 [ 880.616858][ T1258] ? hook_file_ioctl+0x1f2/0x600 [ 880.616898][ T1258] sock_ioctl+0x57a/0x7e0 [ 880.616931][ T1258] ? __pfx_sock_ioctl+0x10/0x10 [ 880.616962][ T1258] ? __fget_files+0x2a/0x420 [ 880.616989][ T1258] ? __fget_files+0x3a2/0x420 [ 880.617013][ T1258] ? __fget_files+0x2a/0x420 [ 880.617041][ T1258] ? bpf_lsm_file_ioctl+0x9/0x20 [ 880.617065][ T1258] ? __pfx_sock_ioctl+0x10/0x10 [ 880.617094][ T1258] __se_sys_ioctl+0xfc/0x170 [ 880.617117][ T1258] do_syscall_64+0x166/0x520 [ 880.617147][ T1258] ? trace_irq_disable+0x3b/0x140 [ 880.617167][ T1258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.617188][ T1258] ? clear_bhb_loop+0x70/0xc0 [ 880.617212][ T1258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.617233][ T1258] RIP: 0033:0x7fee6779e159 [ 880.617252][ T1258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.617270][ T1258] RSP: 002b:00007fee68636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.617293][ T1258] RAX: ffffffffffffffda RBX: 00007fee67a25fa0 RCX: 00007fee6779e159 [ 880.617309][ T1258] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 880.617323][ T1258] RBP: 00007fee68636090 R08: 0000000000000000 R09: 0000000000000000 [ 880.617337][ T1258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.617350][ T1258] R13: 00007fee67a26038 R14: 00007fee67a25fa0 R15: 00007ffc22e8ec58 [ 880.617382][ T1258] [ 880.993136][ T1267] netlink: 'syz.2.7241': attribute type 10 has an invalid length. [ 881.027223][ T1274] vlan4: entered allmulticast mode [ 881.054433][ T1274] bridge0: port 3(vlan4) entered blocking state [ 881.054548][ T1274] bridge0: port 3(vlan4) entered disabled state [ 881.076901][ T1274] vlan4: entered promiscuous mode [ 881.142545][ T1280] netlink: 'syz.0.7244': attribute type 1 has an invalid length. [ 881.181395][ T1280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 881.254078][ T1280] bond3: (slave veth5): Enslaving as an active interface with a down link [ 881.263577][ T1286] dummy0: left promiscuous mode [ 881.283939][ T1286] bond3: (slave dummy0): making interface the new active one [ 881.288528][ T1286] dummy0: entered promiscuous mode [ 881.301899][ T1286] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 881.304606][ T1280] netlink: 'syz.0.7244': attribute type 10 has an invalid length. [ 881.335967][ T1280] bond3: (slave dummy0): Releasing active interface [ 881.718820][ T1325] IPv6: Can't replace route, no match found [ 881.720761][ T1325] IPv6: Can't replace route, no match found [ 881.770321][ T1329] FAULT_INJECTION: forcing a failure. [ 881.770321][ T1329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.770355][ T1329] CPU: 0 UID: 0 PID: 1329 Comm: syz.1.7254 Not tainted syzkaller #0 PREEMPT(full) [ 881.770377][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 881.770390][ T1329] Call Trace: [ 881.770398][ T1329] [ 881.770407][ T1329] dump_stack_lvl+0xe8/0x150 [ 881.770440][ T1329] should_fail_ex+0x410/0x560 [ 881.770468][ T1329] _copy_from_user+0x2d/0xb0 [ 881.770496][ T1329] __sys_bpf+0x2e7/0xd90 [ 881.770536][ T1329] ? __pfx___sys_bpf+0x10/0x10 [ 881.770570][ T1329] ? __fget_files+0x2a/0x420 [ 881.770614][ T1329] ? ksys_write+0x242/0x270 [ 881.770648][ T1329] ? __pfx_ksys_write+0x10/0x10 [ 881.770680][ T1329] __x64_sys_bpf+0xba/0xd0 [ 881.770702][ T1329] do_syscall_64+0x166/0x520 [ 881.770731][ T1329] ? trace_irq_disable+0x3b/0x140 [ 881.770751][ T1329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.770773][ T1329] ? clear_bhb_loop+0x70/0xc0 [ 881.770797][ T1329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.770818][ T1329] RIP: 0033:0x7fca4b79e159 [ 881.770836][ T1329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.770854][ T1329] RSP: 002b:00007fca4c5b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 881.770876][ T1329] RAX: ffffffffffffffda RBX: 00007fca4ba25fa0 RCX: 00007fca4b79e159 [ 881.770891][ T1329] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 881.770904][ T1329] RBP: 00007fca4c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 881.770918][ T1329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.770930][ T1329] R13: 00007fca4ba26038 R14: 00007fca4ba25fa0 R15: 00007ffdc8ffe9a8 [ 881.770962][ T1329] [ 882.119508][ T1340] netlink: 'syz.2.7260': attribute type 1 has an invalid length. [ 882.182511][ T1340] netlink: 'syz.2.7260': attribute type 1 has an invalid length. [ 883.054965][ T1386] sctp: [Deprecated]: syz.1.7270 (pid 1386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 883.054965][ T1386] Use struct sctp_sack_info instead [ 883.056087][ T1386] openvswitch: netlink: Missing key (keys=50, expected=80) [ 883.101868][ T1386] sctp: [Deprecated]: syz.1.7270 (pid 1386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 883.101868][ T1386] Use struct sctp_sack_info instead [ 883.401001][ T1404] sit1: entered promiscuous mode [ 883.829506][ T1426] ip6t_srh: unknown srh match flags 4000 [ 884.055082][ T1435] FAULT_INJECTION: forcing a failure. [ 884.055082][ T1435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.055117][ T1435] CPU: 1 UID: 0 PID: 1435 Comm: syz.2.7287 Not tainted syzkaller #0 PREEMPT(full) [ 884.055139][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 884.055152][ T1435] Call Trace: [ 884.055161][ T1435] [ 884.055170][ T1435] dump_stack_lvl+0xe8/0x150 [ 884.055204][ T1435] should_fail_ex+0x410/0x560 [ 884.055234][ T1435] _copy_to_user+0x31/0xb0 [ 884.055263][ T1435] simple_read_from_buffer+0xe1/0x170 [ 884.055298][ T1435] proc_fail_nth_read+0x1bb/0x230 [ 884.055317][ T1435] ? common_file_perm+0x20e/0x2b0 [ 884.055346][ T1435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.055370][ T1435] ? rw_verify_area+0x24a/0x4c0 [ 884.055401][ T1435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.055421][ T1435] vfs_read+0x213/0xa80 [ 884.055466][ T1435] ? __pfx___mutex_lock+0x10/0x10 [ 884.055497][ T1435] ? __pfx_vfs_read+0x10/0x10 [ 884.055528][ T1435] ? __fget_files+0x2a/0x420 [ 884.055561][ T1435] ? __fget_files+0x3a2/0x420 [ 884.055587][ T1435] ? __fget_files+0x2a/0x420 [ 884.055624][ T1435] ksys_read+0x150/0x270 [ 884.055656][ T1435] ? __pfx_ksys_read+0x10/0x10 [ 884.055698][ T1435] do_syscall_64+0x166/0x520 [ 884.055726][ T1435] ? trace_irq_disable+0x3b/0x140 [ 884.055746][ T1435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.055768][ T1435] ? clear_bhb_loop+0x70/0xc0 [ 884.055793][ T1435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.055813][ T1435] RIP: 0033:0x7fee6775e98e [ 884.055832][ T1435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 884.055850][ T1435] RSP: 002b:00007fee68635fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 884.055870][ T1435] RAX: ffffffffffffffda RBX: 00007fee686366c0 RCX: 00007fee6775e98e [ 884.055885][ T1435] RDX: 000000000000000f RSI: 00007fee686360a0 RDI: 0000000000000005 [ 884.055897][ T1435] RBP: 00007fee68636090 R08: 0000000000000000 R09: 0000000000000000 [ 884.055909][ T1435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.055919][ T1435] R13: 00007fee67a26038 R14: 00007fee67a25fa0 R15: 00007ffc22e8ec58 [ 884.055949][ T1435] [ 884.193420][ T1438] netlink: 'syz.4.7288': attribute type 30 has an invalid length. [ 884.459677][ T1448] netlink: 'syz.2.7290': attribute type 1 has an invalid length. [ 884.460634][ T1448] netlink: 'syz.2.7290': attribute type 1 has an invalid length. [ 884.512139][ T1448] bond5: (slave geneve4): making interface the new active one [ 884.512857][ T1448] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 884.518155][ T1445] netlink: 'syz.2.7290': attribute type 1 has an invalid length. [ 884.520048][ T1445] netlink: 'syz.2.7290': attribute type 1 has an invalid length. [ 884.529792][ T7800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 884.529839][ T7800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 884.529871][ T7800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 884.529903][ T7800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 885.088725][ T1481] ip6t_srh: unknown srh match flags 4000 [ 885.122078][ T1472] __nla_validate_parse: 72 callbacks suppressed [ 885.122101][ T1472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7296'. [ 885.225334][ T1488] xt_hashlimit: max too large, truncated to 1048576 [ 885.394800][ T1495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7303'. [ 885.394839][ T1495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7303'. [ 885.443421][ T1498] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7304'. [ 885.496101][ T1494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7302'. [ 885.538287][ T1494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7302'. [ 885.545033][ T1501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7304'. [ 886.110353][ T1517] IPv6: NLM_F_CREATE should be specified when creating new route [ 886.139454][ T1517] syzkaller1: entered promiscuous mode [ 886.139480][ T1517] syzkaller1: entered allmulticast mode [ 886.265431][ T1519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7309'. [ 886.304767][ T1519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7309'. [ 886.321643][ T1525] ip6t_srh: unknown srh match flags 4000 [ 886.353280][ T1517] validate_nla: 1 callbacks suppressed [ 886.353301][ T1517] netlink: 'syz.2.7309': attribute type 5 has an invalid length. [ 886.353315][ T1517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7309'. [ 886.390075][ T1526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.555869][ T1538] FAULT_INJECTION: forcing a failure. [ 886.555869][ T1538] name failslab, interval 1, probability 0, space 0, times 0 [ 886.555904][ T1538] CPU: 1 UID: 0 PID: 1538 Comm: syz.1.7318 Not tainted syzkaller #0 PREEMPT(full) [ 886.555926][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.555940][ T1538] Call Trace: [ 886.555948][ T1538] [ 886.555957][ T1538] dump_stack_lvl+0xe8/0x150 [ 886.555990][ T1538] should_fail_ex+0x410/0x560 [ 886.556023][ T1538] should_failslab+0xa8/0x100 [ 886.556050][ T1538] __kmalloc_cache_noprof+0xa3/0x600 [ 886.556072][ T1538] ? addr_event+0xc3/0x470 [ 886.556099][ T1538] ? addr_event+0xc3/0x470 [ 886.556142][ T1538] addr_event+0xc3/0x470 [ 886.556174][ T1538] inet6addr_event+0x9f/0xd0 [ 886.556207][ T1538] notifier_call_chain+0x1a5/0x3d0 [ 886.556242][ T1538] ? atomic_notifier_call_chain+0x26/0x180 [ 886.556274][ T1538] atomic_notifier_call_chain+0xda/0x180 [ 886.556307][ T1538] ipv6_del_addr+0x695/0x8b0 [ 886.556329][ T1538] ? __local_bh_enable_ip+0xd6/0x140 [ 886.556359][ T1538] inet6_addr_del+0x619/0x790 [ 886.556393][ T1538] addrconf_del_ifaddr+0x121/0x180 [ 886.556415][ T1538] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 886.556439][ T1538] ? kasan_quarantine_put+0xbb/0x1f0 [ 886.556468][ T1538] inet6_ioctl+0x11c/0x2e0 [ 886.556489][ T1538] ? __pfx_inet6_ioctl+0x10/0x10 [ 886.556507][ T1538] ? tomoyo_path_number_perm+0x219/0x5f0 [ 886.556533][ T1538] ? do_vfs_ioctl+0x116f/0x1530 [ 886.556557][ T1538] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 886.556582][ T1538] sock_do_ioctl+0x101/0x320 [ 886.556603][ T1538] ? __pfx_sock_do_ioctl+0x10/0x10 [ 886.556621][ T1538] ? hook_file_ioctl+0x1f2/0x600 [ 886.556661][ T1538] sock_ioctl+0x57a/0x7e0 [ 886.556693][ T1538] ? __pfx_sock_ioctl+0x10/0x10 [ 886.556722][ T1538] ? __fget_files+0x2a/0x420 [ 886.556748][ T1538] ? __fget_files+0x3a2/0x420 [ 886.556772][ T1538] ? __fget_files+0x2a/0x420 [ 886.556800][ T1538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 886.556825][ T1538] ? __pfx_sock_ioctl+0x10/0x10 [ 886.556854][ T1538] __se_sys_ioctl+0xfc/0x170 [ 886.556878][ T1538] do_syscall_64+0x166/0x520 [ 886.556904][ T1538] ? trace_irq_disable+0x3b/0x140 [ 886.556924][ T1538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.556945][ T1538] ? clear_bhb_loop+0x70/0xc0 [ 886.556968][ T1538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.556986][ T1538] RIP: 0033:0x7fca4b79e159 [ 886.557005][ T1538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.557021][ T1538] RSP: 002b:00007fca4c5b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.557041][ T1538] RAX: ffffffffffffffda RBX: 00007fca4ba25fa0 RCX: 00007fca4b79e159 [ 886.557056][ T1538] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 886.557068][ T1538] RBP: 00007fca4c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 886.557081][ T1538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.557093][ T1538] R13: 00007fca4ba26038 R14: 00007fca4ba25fa0 R15: 00007ffdc8ffe9a8 [ 886.557134][ T1538] [ 886.906865][ T1549] netlink: 'syz.0.7322': attribute type 3 has an invalid length. [ 887.077114][ T1556] netlink: 'syz.2.7319': attribute type 9 has an invalid length. [ 887.157610][ T1561] ip6t_srh: unknown srh match flags 4000 [ 889.842694][ T1997] block nbd5: Possible stuck request ffff888027715080: control (read@0,1024B). Runtime 60 seconds [ 889.842740][ T1997] block nbd5: Possible stuck request ffff888027715240: control (read@1024,1024B). Runtime 60 seconds [ 889.842766][ T1997] block nbd5: Possible stuck request ffff888027715400: control (read@2048,1024B). Runtime 60 seconds [ 889.842791][ T1997] block nbd5: Possible stuck request ffff8880277155c0: control (read@3072,1024B). Runtime 60 seconds [ 890.124122][ T4984] udevd[4984]: worker [31716] /devices/virtual/block/nbd5 is taking a long time [ 892.583379][ T1585] __nla_validate_parse: 7 callbacks suppressed [ 892.583414][ T1585] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7330'. [ 892.584312][ T1588] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 892.770335][ T1603] x_tables: duplicate underflow at hook 2 [ 892.774217][ T1603] netlink: 'syz.3.7338': attribute type 39 has an invalid length. [ 892.846082][ T1607] ip6t_srh: unknown srh match flags 4000 [ 893.215687][ T1623] syzkaller1: entered promiscuous mode [ 893.215712][ T1623] syzkaller1: entered allmulticast mode [ 893.585334][ T1641] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 893.713943][ T1648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7351'. [ 893.887610][ T1654] ip6t_srh: unknown srh match flags 4000 [ 895.206563][ T1675] IPv6: Can't replace route, no match found [ 895.206846][ T1675] IPv6: Can't replace route, no match found [ 899.025443][ T1688] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7360'. [ 899.057748][ T1687] netlink: 'syz.0.7359': attribute type 10 has an invalid length. [ 899.057772][ T1687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7359'. [ 899.126379][ T1691] syzkaller0: entered promiscuous mode [ 899.126402][ T1691] syzkaller0: entered allmulticast mode [ 899.185911][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7362'. [ 899.185990][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7362'. [ 899.203478][ T1696] IPVS: rr: UDP [::1]:8080 - no destination available [ 899.387283][ T1706] lo: left promiscuous mode [ 899.388330][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7368'. [ 899.509492][ T1713] ip6t_srh: unknown srh match flags 4000 [ 899.547653][ T1702] ipvlan2: entered allmulticast mode [ 899.547680][ T1702] erspan0: entered allmulticast mode [ 899.571728][ T1706] vlan2: entered promiscuous mode [ 899.792762][ T1721] syzkaller1: entered promiscuous mode [ 899.792789][ T1721] syzkaller1: entered allmulticast mode [ 899.797079][ T1714] syzkaller1: entered promiscuous mode [ 899.797096][ T1714] syzkaller1: entered allmulticast mode [ 905.836984][ T1789] netlink: 2136 bytes leftover after parsing attributes in process `syz.1.7385'. [ 905.860116][ T1789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7385'. [ 905.860169][ T1789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7385'. [ 905.891681][ T1789] geneve3: entered promiscuous mode [ 905.891707][ T1789] geneve3: entered allmulticast mode [ 906.224208][ T1807] netlink: 'syz.1.7391': attribute type 1 has an invalid length. [ 906.224231][ T1807] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7391'. [ 906.391681][ T1813] netlink: 'syz.0.7392': attribute type 1 has an invalid length. [ 906.552585][ T1823] netlink: 'syz.4.7395': attribute type 2 has an invalid length. [ 906.561012][ T1816] macsec0: entered allmulticast mode [ 906.561032][ T1816] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 906.561313][ T1816] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 906.599661][ T1816] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 906.616805][ T1829] netlink: 'syz.0.7392': attribute type 1 has an invalid length. [ 906.637414][ T1832] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7396'. [ 906.655534][ T1817] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 906.673106][ T1813] macvlan5: entered promiscuous mode [ 906.673129][ T1813] macvlan5: entered allmulticast mode [ 906.735975][ T1827] bond4: (slave bridge3): Enslaving as a backup interface with a down link [ 907.815862][ T1874] netlink: 'syz.0.7412': attribute type 1 has an invalid length. [ 907.918039][ T1874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 907.938668][ T1866] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7408'. [ 907.964188][ T1874] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7412'. [ 907.997452][ T1883] bridge4: entered promiscuous mode [ 908.019152][ T1883] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 908.257587][ T1891] sctp: [Deprecated]: syz.1.7416 (pid 1891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 908.257587][ T1891] Use struct sctp_sack_info instead [ 908.334880][ T1899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7419'. [ 908.515384][ T1905] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7421'. [ 908.528588][ T1905] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7421'. [ 908.738774][ T1910] SET target dimension over the limit! [ 909.028336][ T1927] syzkaller1: entered promiscuous mode [ 909.028520][ T1927] syzkaller1: entered allmulticast mode [ 909.149406][ T1929] xt_addrtype: ipv6 does not support BROADCAST matching [ 909.897839][ T1972] netlink: 'syz.2.7434': attribute type 1 has an invalid length. [ 909.897866][ T1972] netlink: 'syz.2.7434': attribute type 1 has an invalid length. [ 909.897879][ T1972] netlink: 'syz.2.7434': attribute type 2 has an invalid length. [ 911.354331][ T1990] __nla_validate_parse: 1 callbacks suppressed [ 911.354356][ T1990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7437'. [ 911.703607][ T1994] vlan3: entered allmulticast mode [ 911.703633][ T1994] bridge3: entered allmulticast mode [ 912.191958][ T2007] IPv6: Can't replace route, no match found [ 912.192245][ T2007] IPv6: Can't replace route, no match found [ 912.726281][ T2012] netlink: 4704 bytes leftover after parsing attributes in process `syz.2.7442'. [ 912.820052][ T2012] netlink: 'syz.2.7442': attribute type 1 has an invalid length. [ 912.833458][ T2015] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7444'. [ 913.049676][ T2023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7443'. [ 913.278968][ T2027] netlink: 'syz.4.7446': attribute type 39 has an invalid length. [ 913.298435][ T2028] netlink: 'syz.2.7448': attribute type 2 has an invalid length. [ 914.031411][ T2051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7452'. [ 914.031448][ T2051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7452'. [ 914.032624][ T2051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7452'. [ 914.032651][ T2051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7452'. [ 914.293322][ T2056] IPv6: Can't replace route, no match found [ 914.293991][ T2056] IPv6: Can't replace route, no match found [ 914.475538][ T2058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7454'. [ 914.679764][ T2062] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 914.703505][ T2062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7455'. [ 915.766751][ T2088] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 916.386665][ T2106] __nla_validate_parse: 1 callbacks suppressed [ 916.386690][ T2106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7471'. [ 916.532319][ T2112] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7473'. [ 916.560208][ T2124] netlink: 'syz.0.7475': attribute type 4 has an invalid length. [ 916.586995][ T2122] netlink: 'syz.0.7475': attribute type 4 has an invalid length. [ 916.601574][ T2114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7473'. [ 916.601612][ T2114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7473'. [ 916.667624][ T2129] netlink: 'syz.3.7476': attribute type 21 has an invalid length. [ 916.667703][ T2129] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7476'. [ 916.692395][ T2125] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7474'. [ 916.782549][ T2129] netlink: 'syz.3.7476': attribute type 5 has an invalid length. [ 916.782574][ T2129] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7476'. [ 916.820145][ T2113] macvlan5: entered promiscuous mode [ 916.820169][ T2113] macvlan5: entered allmulticast mode [ 916.821351][ T2113] bond6: entered promiscuous mode [ 916.825910][ T2113] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 916.900920][ T2113] bond6: left promiscuous mode [ 917.014664][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.014761][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.014903][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.014989][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.015070][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.015154][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.015265][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.015343][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.015427][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.015522][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.015636][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.141099][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.141173][ T2137] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 917.141299][ T2137] syzkaller1: linktype set to 773 [ 917.141515][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.141600][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.141684][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.141764][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.141847][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.141957][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142191][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142296][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142536][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142637][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142721][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142807][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142890][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.142986][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143104][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143182][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143263][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143336][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143415][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143500][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143579][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143657][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143734][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143810][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143884][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.143963][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144050][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144129][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144210][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144289][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144366][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144444][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144526][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144604][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144683][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144767][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144841][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144915][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.144996][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145068][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145141][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145210][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145281][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145353][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145433][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145511][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145581][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145653][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145730][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145804][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145878][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.145949][ T2135] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 917.209472][ T2142] syzkaller1: tun_chr_ioctl cmd 3221517374 [ 917.671376][ T2148] bond0: (slave vlan1): Opening slave failed [ 917.675959][ T2151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7481'. [ 918.061201][ T2160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 918.093444][ T2162] ip6t_srh: unknown srh match flags 4000 [ 918.290540][ T2165] netlink: 284 bytes leftover after parsing attributes in process `syz.2.7488'. [ 918.325119][ T2167] ip_tables: iptables: counters copy to user failed while replacing table [ 918.451686][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7490'. [ 918.554166][ T2172] x_tables: ip_tables: osf match: only valid for protocol 6 [ 918.946552][ T2190] ip_tables: iptables: counters copy to user failed while replacing table [ 919.945047][ T1997] block nbd5: Possible stuck request ffff888027715080: control (read@0,1024B). Runtime 90 seconds [ 919.945098][ T1997] block nbd5: Possible stuck request ffff888027715240: control (read@1024,1024B). Runtime 90 seconds [ 919.945127][ T1997] block nbd5: Possible stuck request ffff888027715400: control (read@2048,1024B). Runtime 90 seconds [ 919.945155][ T1997] block nbd5: Possible stuck request ffff8880277155c0: control (read@3072,1024B). Runtime 90 seconds [ 920.323471][ T2225] netlink: 'syz.2.7505': attribute type 1 has an invalid length. [ 920.490635][ T2222] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 920.510890][ T2222] bond6 (unregistering): Released all slaves [ 920.784068][ T2232] erspan1: entered allmulticast mode [ 922.101904][ T2274] __nla_validate_parse: 11 callbacks suppressed [ 922.101928][ T2274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7513'. [ 922.106596][ T2274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7513'. [ 922.357756][ T2287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.357776][ T2287] IPv6: NLM_F_CREATE should be set when creating new route [ 922.357820][ T2287] IPv6: NLM_F_CREATE should be set when creating new route [ 922.357870][ T2287] IPv6: NLM_F_CREATE should be set when creating new route [ 922.391615][ T2287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.398413][ T2287] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7518'. [ 922.635911][ T2294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 923.859528][ T2334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7527'. [ 924.141079][ T2338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.561025][ T2351] syzkaller1: entered promiscuous mode [ 924.561050][ T2351] syzkaller1: entered allmulticast mode [ 924.601534][ T2350] tunl0: left promiscuous mode [ 924.608673][ T2350] gre0: left promiscuous mode [ 924.618903][ T2350] gretap0: left promiscuous mode [ 924.626022][ T2350] erspan0: left promiscuous mode [ 924.626185][ T2350] ip_vti0: left promiscuous mode [ 924.626379][ T2350] ip6_vti0: left promiscuous mode [ 924.626535][ T2350] sit0: left promiscuous mode [ 924.626688][ T2350] ip6tnl0: left promiscuous mode [ 924.657360][ T2350] ip6gre0: left promiscuous mode [ 924.657561][ T2350] syz_tun: left promiscuous mode [ 924.657753][ T2350] ip6gretap0: left promiscuous mode [ 924.657926][ T2350] bridge0: left promiscuous mode [ 924.657943][ T2350] bridge0: left allmulticast mode [ 924.658114][ T2350] bond0: left promiscuous mode [ 924.658713][ T2350] team0: left promiscuous mode [ 924.698679][ T2350] dummy0: left promiscuous mode [ 924.698889][ T2350] nlmon0: left promiscuous mode [ 924.718793][ T2350] batadv0: left promiscuous mode [ 924.725399][ T2350] vxcan0: left promiscuous mode [ 924.725610][ T2350] vxcan1: left promiscuous mode [ 924.725796][ T2350] veth0: left promiscuous mode [ 924.726026][ T2350] veth1: left promiscuous mode [ 924.726214][ T2350] wg0: left promiscuous mode [ 924.756564][ T2350] wg2: left promiscuous mode [ 924.756768][ T2350] veth0_to_bridge: left promiscuous mode [ 924.758791][ T2350] veth1_to_bridge: left promiscuous mode [ 924.777945][ T2350] veth0_to_bond: left promiscuous mode [ 924.778294][ T2350] bond_slave_0: left promiscuous mode [ 924.778501][ T2350] veth1_to_bond: left promiscuous mode [ 924.778729][ T2350] bond_slave_1: left promiscuous mode [ 924.803746][ T2354] netlink: zone id is out of range [ 924.803763][ T2354] netlink: zone id is out of range [ 924.803773][ T2354] netlink: zone id is out of range [ 924.803781][ T2354] netlink: zone id is out of range [ 924.803789][ T2354] netlink: zone id is out of range [ 924.803798][ T2354] netlink: zone id is out of range [ 924.803811][ T2354] netlink: zone id is out of range [ 924.803819][ T2354] netlink: zone id is out of range [ 924.853353][ T2350] veth0_to_team: left promiscuous mode [ 924.853571][ T2350] team_slave_0: left promiscuous mode [ 924.853737][ T2350] veth1_to_team: left promiscuous mode [ 924.853929][ T2350] team_slave_1: left promiscuous mode [ 924.855813][ T2350] veth0_to_batadv: left promiscuous mode [ 924.856026][ T2350] batadv_slave_0: left promiscuous mode [ 924.856205][ T2350] veth1_to_batadv: left promiscuous mode [ 924.856369][ T2350] batadv_slave_1: left promiscuous mode [ 924.856532][ T2350] xfrm0: left promiscuous mode [ 924.856694][ T2350] veth0_to_hsr: left promiscuous mode [ 924.857032][ T2350] veth1_to_hsr: left promiscuous mode [ 924.944097][ T2350] veth1_virt_wifi: left promiscuous mode [ 924.944325][ T2350] veth0_virt_wifi: left promiscuous mode [ 924.944487][ T2350] virt_wifi0: left promiscuous mode [ 924.945100][ T2350] vlan1: left promiscuous mode [ 924.945491][ T2350] macvlan0: left promiscuous mode [ 924.945657][ T2350] macvlan1: left promiscuous mode [ 924.945818][ T2350] ipvlan0: left promiscuous mode [ 924.946008][ T2350] ipvlan1: left promiscuous mode [ 924.946169][ T2350] geneve0: left promiscuous mode [ 924.946346][ T2350] geneve1: left promiscuous mode [ 924.946518][ T2350] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 924.946673][ T2350] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 924.946816][ T2350] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 924.946989][ T2350] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 924.947299][ T2350] mac80211_hwsim hwsim108 wlan1: left promiscuous mode [ 924.947468][ T2350] macvlan2: left promiscuous mode [ 924.947641][ T2350] mac80211_hwsim hwsim109 wlan2: left promiscuous mode [ 924.947814][ T2350] caif0: left promiscuous mode [ 924.948879][ T2350] batadv1: left promiscuous mode [ 924.948897][ T2350] batadv1: left allmulticast mode [ 925.123748][ T2350] bond2: left promiscuous mode [ 925.123773][ T2350] xfrm1: left promiscuous mode [ 925.124491][ T2350] ip6gre2: left promiscuous mode [ 925.124507][ T2350] ip6gre2: left allmulticast mode [ 925.164206][ T2350] batman_adv: batadv0: Interface deactivated: macvlan4 [ 925.182350][ T2350] sit1: left promiscuous mode [ 925.747760][ T2377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7538'. [ 925.937646][ T2384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7542'. [ 926.021693][ T2387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7541'. [ 926.075599][ T2385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7540'. [ 926.075872][ T2390] netlink: 'syz.4.7543': attribute type 10 has an invalid length. [ 926.207984][ T2391] netlink: 'syz.4.7543': attribute type 10 has an invalid length. [ 926.284865][ T2403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7545'. [ 926.358823][ T2391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.371904][ T2391] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 926.371992][ T2387] team0: entered allmulticast mode [ 926.372009][ T2387] team_slave_0: entered allmulticast mode [ 926.372028][ T2387] team_slave_1: entered allmulticast mode [ 926.372182][ T2387] team0: Cannot enslave team device to itself [ 927.273537][ T2443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7553'. [ 927.550484][ T2454] Bluetooth: MGMT ver 1.23 [ 927.815807][ T2471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7559'. [ 928.048589][ T2485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7560'. [ 928.048627][ T2485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7560'. [ 928.173930][ T2489] netlink: 'syz.1.7563': attribute type 2 has an invalid length. [ 928.173955][ T2489] netlink: 'syz.1.7563': attribute type 1 has an invalid length. [ 928.173968][ T2489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7563'. [ 928.335538][ T2499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7565'. [ 928.335724][ T2499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7565'. [ 928.335896][ T2499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7565'. [ 928.337870][ T2499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7565'. [ 928.338054][ T2499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7565'. [ 928.584426][ T2502] bond5: option lp_interval: invalid value (0) [ 928.584453][ T2502] bond5: option lp_interval: allowed values 1 - 2147483647 [ 929.008587][ T2502] bond5 (unregistering): Released all slaves [ 929.370316][ T2539] netlink: 'syz.3.7570': attribute type 12 has an invalid length. [ 929.370341][ T2539] netlink: 'syz.3.7570': attribute type 29 has an invalid length. [ 929.512884][ T2539] net_ratelimit: 495 callbacks suppressed [ 929.512905][ T2539] openvswitch: netlink: Message has 8 unknown bytes. [ 930.231243][ T2581] netlink: 'syz.0.7582': attribute type 13 has an invalid length. [ 930.231268][ T2581] netlink: 'syz.0.7582': attribute type 12 has an invalid length. [ 930.235878][ T2582] netlink: 'syz.0.7582': attribute type 13 has an invalid length. [ 930.235901][ T2582] netlink: 'syz.0.7582': attribute type 12 has an invalid length. [ 930.943176][ T2579] batman_adv: batadv0: Adding interface: macvlan5 [ 930.943198][ T2579] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.943233][ T2579] batman_adv: batadv0: Interface activated: macvlan5 [ 931.273025][ T2614] openvswitch: netlink: IP tunnel dst address not specified [ 931.399344][ T2616] bond7: entered promiscuous mode [ 931.399410][ T2616] bond7: entered allmulticast mode [ 931.402135][ T2616] 8021q: adding VLAN 0 to HW filter on device bond7 [ 931.492867][ T2620] netlink: 'syz.3.7590': attribute type 2 has an invalid length. [ 931.521604][ T2620] : entered promiscuous mode [ 931.521977][ T2626] syzkaller0: entered promiscuous mode [ 931.521994][ T2626] syzkaller0: entered allmulticast mode [ 931.814946][ T2646] netlink: 'syz.0.7594': attribute type 12 has an invalid length. [ 932.084666][ T2660] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 932.256530][ T2676] netlink: 'syz.3.7600': attribute type 1 has an invalid length. [ 932.370634][ T2675] __nla_validate_parse: 210 callbacks suppressed [ 932.370657][ T2675] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7601'. [ 932.639310][ T2681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7603'. [ 932.801804][ T2684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7602'. [ 932.967322][ T2693] netlink: 'syz.3.7605': attribute type 1 has an invalid length. [ 932.981582][ T2684] 8021q: adding VLAN 0 to HW filter on device bond5 [ 933.044819][ T2696] ip_tables: iptables: counters copy to user failed while replacing table [ 933.045679][ T2696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7605'. [ 933.118103][ T2689] bond5 (unregistering): Released all slaves [ 933.235675][ T2693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 933.551705][ T2711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 933.551736][ T2711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 934.632108][ T2759] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 934.636454][ T2759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7621'. [ 935.002113][ T2774] syzkaller0: entered promiscuous mode [ 935.002137][ T2774] syzkaller0: entered allmulticast mode [ 935.416302][ T2797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 935.635189][ T2806] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 935.635216][ T2806] mac80211_hwsim hwsim105 syzkaller0: entered allmulticast mode [ 935.666801][ T2805] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 935.716450][ T2804] lo: entered promiscuous mode [ 935.732737][ T2804] bond3: entered promiscuous mode [ 935.733923][ T2804] vxlan0: entered promiscuous mode [ 935.735812][ T2804] bond4: entered promiscuous mode [ 935.735982][ T2804] bond5: entered promiscuous mode [ 935.735999][ T2804] geneve4: entered promiscuous mode [ 935.745223][ T2804] bridge2: entered promiscuous mode [ 935.837574][ T2804] macvlan4: entered promiscuous mode [ 935.841243][ T2804] bond6: entered promiscuous mode [ 935.843403][ T2804] vlan2: entered promiscuous mode [ 935.845599][ T2804] bridge3: entered promiscuous mode [ 935.847544][ T2804] bridge4: entered promiscuous mode [ 935.850073][ T2804] batman_adv: batadv0: Interface deactivated: macvlan5 [ 935.864071][ T2804] macvlan5: entered promiscuous mode [ 936.062691][ T1949] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 936.062729][ T1949] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 936.062767][ T1949] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 936.062793][ T1949] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 936.062848][ T1949] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 936.062874][ T1949] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 936.062908][ T1949] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 936.062934][ T1949] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 936.069008][ T2819] netlink: 'syz.3.7635': attribute type 1 has an invalid length. [ 936.069042][ T2819] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7635'. [ 936.069061][ T2819] NCSI netlink: No device for ifindex 0 [ 936.589597][ T2856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7638'. [ 936.774600][ T2862] gre0: entered allmulticast mode [ 936.842003][ T2867] x_tables: duplicate underflow at hook 1 [ 937.131641][ T2890] netlink: 'syz.1.7646': attribute type 2 has an invalid length. [ 937.202407][ T2890] ´: entered promiscuous mode [ 937.227021][ T2890] tipc: Enabling of bearer rejected, failed to enable media [ 937.254655][ T2895] tipc: Started in network mode [ 937.254686][ T2895] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 937.254737][ T2895] tipc: Enabling of bearer rejected, failed to enable media [ 937.285908][ T2895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7647'. [ 937.431505][ T2899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7649'. [ 937.431533][ T2899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7649'. [ 938.100989][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.118717][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.130374][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.130580][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.130751][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.130935][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.133770][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.133964][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7659'. [ 938.232200][ T2927] ip_tables: iptables: counters copy to user failed while replacing table [ 938.295776][ T2938] ip6t_srh: unknown srh match flags 4000 [ 938.675470][ T2958] openvswitch: netlink: Flow key attr not present in new flow. [ 939.055242][ T2974] syzkaller0: entered promiscuous mode [ 939.055268][ T2974] syzkaller0: entered allmulticast mode [ 939.086385][ T2974] tipc: Enabled bearer , priority 0 [ 939.107188][ T2974] tipc: Resetting bearer [ 939.119315][ T2972] tipc: Resetting bearer [ 939.220617][ T2972] tipc: Disabling bearer [ 939.513638][ T2988] ip6t_srh: unknown srh match flags 4000 [ 939.669027][ T2998] netlink: 'syz.4.7676': attribute type 1 has an invalid length. [ 939.669056][ T2998] netlink: 'syz.4.7676': attribute type 2 has an invalid length. [ 940.535656][ T3024] syzkaller0: entered promiscuous mode [ 940.535682][ T3024] syzkaller0: entered allmulticast mode [ 940.649837][ T3030] netlink: 'syz.1.7684': attribute type 2 has an invalid length. [ 940.920656][ T3038] ip6t_srh: unknown srh match flags 4000 [ 941.517303][ T3054] vxcan3: entered promiscuous mode [ 941.631052][ T3061] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 942.353282][ T3089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.353309][ T3089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.397338][ T3089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.397509][ T3089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.703118][ T3088] syzkaller0: entered promiscuous mode [ 942.703295][ T3088] syzkaller0: entered allmulticast mode [ 942.793160][ T3107] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 942.793189][ T3107] mac80211_hwsim hwsim105 syzkaller0: left allmulticast mode [ 942.846596][ T3088] __nla_validate_parse: 39 callbacks suppressed [ 942.846620][ T3088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7699'. [ 943.089189][ T3117] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7703'. [ 943.123674][ T3103] syzkaller0: entered promiscuous mode [ 943.123701][ T3103] syzkaller0: entered allmulticast mode [ 943.448487][ T3124] netlink: 'syz.4.7705': attribute type 5 has an invalid length. [ 943.986362][ T3143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 944.027419][ T3148] netlink: 'syz.0.7711': attribute type 2 has an invalid length. [ 944.066639][ T3145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7711'. [ 944.151276][ T3143] bond5: option lacp_active: invalid value (5) [ 944.153593][ T3143] bond5 (unregistering): Released all slaves [ 944.290175][ T3163] IPv6: Can't replace route, no match found [ 944.290812][ T3163] IPv6: Can't replace route, no match found [ 944.914804][ T3182] tipc: Enabling of bearer rejected, failed to enable media [ 944.937538][ T3183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7717'. [ 945.020654][ T3182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 945.297403][ T3191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7721'. [ 945.341868][ T3198] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 945.491091][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7724'. [ 945.491121][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7724'. [ 945.769713][ T3207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7727'. [ 946.075759][ T3227] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7730'. [ 946.252239][ T3235] IPv6: Can't replace route, no match found [ 946.253745][ T3235] IPv6: Can't replace route, no match found [ 946.973666][ T3245] netlink: 'syz.2.7733': attribute type 1 has an invalid length. [ 947.087333][ T3245] bond8: entered promiscuous mode [ 947.099696][ T3245] 8021q: adding VLAN 0 to HW filter on device bond8 [ 947.209588][ T3254] netlink: 'syz.3.7735': attribute type 1 has an invalid length. [ 947.251463][ T3249] bond8: (slave bridge5): making interface the new active one [ 947.251492][ T3249] bridge5: entered promiscuous mode [ 947.252719][ T3249] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 947.682255][ T3264] syzkaller1: entered promiscuous mode [ 947.682444][ T3264] syzkaller1: entered allmulticast mode [ 947.851031][ T3267] __nla_validate_parse: 8 callbacks suppressed [ 947.851054][ T3267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7738'. [ 947.851085][ T3267] netlink: 'syz.0.7738': attribute type 1 has an invalid length. [ 947.852831][ T3279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7744'. [ 947.924775][ T3267] geneve5: entered promiscuous mode [ 948.151869][ T3291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7747'. [ 948.151897][ T3291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7747'. [ 948.152019][ T3291] FAULT_INJECTION: forcing a failure. [ 948.152019][ T3291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.152047][ T3291] CPU: 0 UID: 0 PID: 3291 Comm: syz.1.7747 Not tainted syzkaller #0 PREEMPT(full) [ 948.152071][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 948.152084][ T3291] Call Trace: [ 948.152093][ T3291] [ 948.152102][ T3291] dump_stack_lvl+0xe8/0x150 [ 948.152136][ T3291] should_fail_ex+0x410/0x560 [ 948.152166][ T3291] _copy_to_user+0x31/0xb0 [ 948.152196][ T3291] simple_read_from_buffer+0xe1/0x170 [ 948.152231][ T3291] proc_fail_nth_read+0x1bb/0x230 [ 948.152250][ T3291] ? common_file_perm+0x20e/0x2b0 [ 948.152279][ T3291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 948.152303][ T3291] ? rw_verify_area+0x24a/0x4c0 [ 948.152335][ T3291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 948.152355][ T3291] vfs_read+0x213/0xa80 [ 948.152390][ T3291] ? __pfx___mutex_lock+0x10/0x10 [ 948.152422][ T3291] ? __pfx_vfs_read+0x10/0x10 [ 948.152454][ T3291] ? __fget_files+0x2a/0x420 [ 948.152486][ T3291] ? __fget_files+0x3a2/0x420 [ 948.152513][ T3291] ? __fget_files+0x2a/0x420 [ 948.152549][ T3291] ksys_read+0x150/0x270 [ 948.152582][ T3291] ? __pfx_ksys_read+0x10/0x10 [ 948.152623][ T3291] do_syscall_64+0x166/0x520 [ 948.152652][ T3291] ? trace_irq_disable+0x3b/0x140 [ 948.152673][ T3291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.152695][ T3291] ? clear_bhb_loop+0x70/0xc0 [ 948.152720][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.152740][ T3291] RIP: 0033:0x7fca4b75e98e [ 948.152759][ T3291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 948.152780][ T3291] RSP: 002b:00007fca4c5b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 948.152810][ T3291] RAX: ffffffffffffffda RBX: 00007fca4c5b26c0 RCX: 00007fca4b75e98e [ 948.152826][ T3291] RDX: 000000000000000f RSI: 00007fca4c5b20a0 RDI: 0000000000000005 [ 948.152839][ T3291] RBP: 00007fca4c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 948.152852][ T3291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.152865][ T3291] R13: 00007fca4ba26038 R14: 00007fca4ba25fa0 R15: 00007ffdc8ffe9a8 [ 948.152898][ T3291] [ 949.314135][ T3308] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 949.314164][ T3308] mac80211_hwsim hwsim105 syzkaller0: entered allmulticast mode [ 949.322442][ T3308] FAULT_INJECTION: forcing a failure. [ 949.322442][ T3308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.322481][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz.0.7752 Not tainted syzkaller #0 PREEMPT(full) [ 949.322504][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 949.322517][ T3308] Call Trace: [ 949.322528][ T3308] [ 949.322538][ T3308] dump_stack_lvl+0xe8/0x150 [ 949.322571][ T3308] should_fail_ex+0x410/0x560 [ 949.322600][ T3308] _copy_from_user+0x2d/0xb0 [ 949.322628][ T3308] kstrtouint_from_user+0xd6/0x180 [ 949.322654][ T3308] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 949.322684][ T3308] ? lock_acquire+0x115/0x350 [ 949.322710][ T3308] proc_fail_nth_write+0x8e/0x210 [ 949.322730][ T3308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 949.322758][ T3308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 949.322777][ T3308] vfs_write+0x296/0xba0 [ 949.322814][ T3308] ? __pfx_vfs_write+0x10/0x10 [ 949.322845][ T3308] ? __fget_files+0x2a/0x420 [ 949.322876][ T3308] ? __fget_files+0x3a2/0x420 [ 949.322902][ T3308] ? __fget_files+0x2a/0x420 [ 949.322937][ T3308] ksys_write+0x150/0x270 [ 949.322969][ T3308] ? __pfx_ksys_write+0x10/0x10 [ 949.323010][ T3308] do_syscall_64+0x166/0x520 [ 949.323038][ T3308] ? trace_irq_disable+0x3b/0x140 [ 949.323058][ T3308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.323078][ T3308] ? clear_bhb_loop+0x70/0xc0 [ 949.323103][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.323123][ T3308] RIP: 0033:0x7f2e3fb5e98e [ 949.323142][ T3308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 949.323161][ T3308] RSP: 002b:00007f2e40ac7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.323183][ T3308] RAX: ffffffffffffffda RBX: 00007f2e40ac86c0 RCX: 00007f2e3fb5e98e [ 949.323198][ T3308] RDX: 0000000000000001 RSI: 00007f2e40ac80a0 RDI: 0000000000000008 [ 949.323211][ T3308] RBP: 00007f2e40ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 949.323224][ T3308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.323236][ T3308] R13: 00007f2e3fe26038 R14: 00007f2e3fe25fa0 R15: 00007fffcade2868 [ 949.323268][ T3308] [ 949.905365][ T3331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7759'. [ 950.000417][ T1997] block nbd5: Possible stuck request ffff888027715080: control (read@0,1024B). Runtime 120 seconds [ 950.000461][ T1997] block nbd5: Possible stuck request ffff888027715240: control (read@1024,1024B). Runtime 120 seconds [ 950.000488][ T1997] block nbd5: Possible stuck request ffff888027715400: control (read@2048,1024B). Runtime 120 seconds [ 950.000515][ T1997] block nbd5: Possible stuck request ffff8880277155c0: control (read@3072,1024B). Runtime 120 seconds [ 951.026534][ T3379] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 951.026628][ T3379] syzkaller0: linktype set to 7 [ 951.128013][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7769'. [ 951.128038][ T3382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7769'. [ 951.128066][ T3382] netlink: 'syz.4.7769': attribute type 14 has an invalid length. [ 951.229986][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7769'. [ 951.230018][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7769'. [ 951.708037][ T3391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7771'. [ 951.824593][ T3391] netlink: 'syz.4.7771': attribute type 5 has an invalid length. [ 953.025216][ T3443] ip_tables: iptables: counters copy to user failed while replacing table [ 953.159928][ T3443] netlink: 'syz.2.7785': attribute type 16 has an invalid length. [ 953.159954][ T3443] netlink: 'syz.2.7785': attribute type 17 has an invalid length. [ 953.160084][ T3443] lo: left promiscuous mode [ 953.166276][ T3443] tunl0: left promiscuous mode [ 953.198206][ T3443] gre0: left promiscuous mode [ 953.198230][ T3443] gre0: left allmulticast mode [ 953.209593][ T3443] gretap0: left promiscuous mode [ 953.211951][ T3443] erspan0: left promiscuous mode [ 953.214938][ T3443] ip_vti0: left promiscuous mode [ 953.216511][ T3443] ip6_vti0: left promiscuous mode [ 953.218358][ T3443] sit0: left promiscuous mode [ 953.252950][ T3443] ip6tnl0: left promiscuous mode [ 953.254688][ T3443] ip6gre0: left promiscuous mode [ 953.256385][ T3443] syz_tun: left promiscuous mode [ 953.258440][ T3443] ip6gretap0: left promiscuous mode [ 953.286314][ T3443] bond0: left promiscuous mode [ 953.287456][ T3443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.321955][ T3443] team0: left promiscuous mode [ 953.328230][ T3443] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.341513][ T3443] nlmon0: left promiscuous mode [ 953.342920][ T3443] batadv0: left promiscuous mode [ 953.343784][ T3443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.345746][ T3443] veth0: left promiscuous mode [ 953.347112][ T3443] veth1: left promiscuous mode [ 953.368956][ T3443] wg0: left promiscuous mode [ 953.407535][ T3443] wg1: left promiscuous mode [ 953.429590][ T3443] wg2: left promiscuous mode [ 953.432666][ T3443] veth0_to_bridge: left promiscuous mode [ 953.438363][ T3443] veth1_to_bridge: left promiscuous mode [ 953.461336][ T3443] veth0_to_bond: left promiscuous mode [ 953.462848][ T3443] bond_slave_0: left promiscuous mode [ 953.463845][ T3443] veth1_to_bond: left promiscuous mode [ 953.465049][ T3443] bond_slave_1: left promiscuous mode [ 953.465974][ T3443] veth0_to_team: left promiscuous mode [ 953.467141][ T3443] team_slave_0: left promiscuous mode [ 953.468098][ T3443] veth1_to_team: left promiscuous mode [ 953.525601][ T3443] team_slave_1: left promiscuous mode [ 953.532345][ T3443] veth0_to_batadv: left promiscuous mode [ 953.538110][ T3443] batadv_slave_0: left promiscuous mode [ 953.544707][ T3443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.547500][ T3443] veth1_to_batadv: left promiscuous mode [ 953.555287][ T3443] batadv_slave_1: left promiscuous mode [ 953.561818][ T3443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.565426][ T3443] xfrm0: left promiscuous mode [ 953.584749][ T3443] veth0_to_hsr: left promiscuous mode [ 953.612646][ T3443] veth1_to_hsr: left promiscuous mode [ 953.617515][ T3443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 953.617544][ T3443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 953.617596][ T3443] hsr0: left promiscuous mode [ 953.654293][ T3443] veth1_virt_wifi: left promiscuous mode [ 953.663686][ T3443] veth0_virt_wifi: left promiscuous mode [ 953.671390][ T3443] virt_wifi0: left promiscuous mode [ 953.671562][ T3443] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 953.766408][ T1964] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.766520][ T1964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.820796][ T1964] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.820886][ T1964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.145466][ T3462] __nla_validate_parse: 5 callbacks suppressed [ 954.145489][ T3462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7789'. [ 954.178396][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7789'. [ 954.199375][ T3462] ip_tables: iptables: counters copy to user failed while replacing table [ 954.530898][ T3477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7792'. [ 955.187486][ T3482] ip6tnl3: entered allmulticast mode [ 955.215504][ T3484] ipvlan0: left promiscuous mode [ 955.221661][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7795'. [ 955.235188][ T1957] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 955.236981][ T1957] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 955.254805][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.254986][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.262233][T32591] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 955.336117][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.336301][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.345436][ T3485] batman_adv: batadv0: Removing interface: macvlan5 [ 955.420602][T32593] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 955.513521][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7799'. [ 955.779330][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7801'. [ 955.841171][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.844668][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.040455][ T3513] tipc: Enabled bearer , priority 10 [ 956.151669][ T3517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7804'. [ 956.176752][ T3508] syzkaller0: entered promiscuous mode [ 956.176782][ T3508] syzkaller0: entered allmulticast mode [ 956.245372][T32592] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 959.599203][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 963.227093][T10353] tipc: Node number set to 4278321153 [ 963.477263][ T3534] bond7: option xmit_hash_policy: invalid value (10) [ 963.488612][ T3534] bond7 (unregistering): Released all slaves [ 963.782958][ T3555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7813'. [ 963.811406][ T3538] bond7: option xmit_hash_policy: invalid value (10) [ 963.823591][ T3538] bond7 (unregistering): Released all slaves [ 963.895222][ T3546] bond0: entered promiscuous mode [ 963.895968][ T3546] geneve2: entered promiscuous mode [ 963.896125][ T3546] ip6tnl2: entered promiscuous mode [ 963.896238][ T3546] pimreg: entered promiscuous mode [ 963.896435][ T3546] syztnl2: entered promiscuous mode [ 963.896540][ T3546] gretap1: entered promiscuous mode [ 963.896980][ T3546] macvlan6: entered promiscuous mode [ 963.897120][ T3546] gtp1: entered promiscuous mode [ 963.897329][ T3546] veth2: entered promiscuous mode [ 963.897481][ T3546] veth3: entered promiscuous mode [ 963.897625][ T3546] vlan3: entered promiscuous mode [ 963.990381][ T3546] bond4: entered promiscuous mode [ 963.991701][ T3546] macvlan7: entered promiscuous mode [ 963.997525][ T3546] bareudp0: entered promiscuous mode [ 964.017735][ T3546] gtp2: entered promiscuous mode [ 964.025659][ T3546] mac80211_hwsim hwsim122 wlan3: entered promiscuous mode [ 964.025893][ T3546] macvlan8: entered promiscuous mode [ 964.026102][ T3546] gre3: entered promiscuous mode [ 964.076396][ T3546] syzkaller1: entered promiscuous mode [ 964.089291][ T1957] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.099692][ T1949] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.099928][ T1949] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.099965][ T1949] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.575144][ T3583] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7818'. [ 964.743303][ T3580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7816'. [ 964.795881][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'. [ 964.852965][ T3577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7816'. [ 964.909490][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7816'. [ 964.909525][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7816'. [ 964.909541][ T3580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7816'. [ 965.249438][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7823'. [ 965.249471][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7823'. [ 965.847079][ T3614] syzkaller0: entered promiscuous mode [ 965.847104][ T3614] syzkaller0: entered allmulticast mode [ 965.860054][ T3619] openvswitch: netlink: Duplicate or invalid key (type 0). [ 967.535264][ T3665] netlink: 'syz.0.7846': attribute type 1 has an invalid length. [ 967.716105][ T3665] bond6: entered promiscuous mode [ 967.716647][ T3665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 967.770710][ T3672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 967.771227][ T3672] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 967.771248][ T3672] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 967.813519][ T3672] bond6: (slave ip6gre2): making interface the new active one [ 967.813548][ T3672] ip6gre2: entered promiscuous mode [ 967.835732][ T3672] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 969.199447][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 975.431563][ T3709] veth9: entered allmulticast mode [ 975.478840][ T3717] veth11: entered allmulticast mode [ 975.642700][ T3742] IPv6: Can't replace route, no match found [ 975.642947][ T3742] IPv6: Can't replace route, no match found [ 975.708037][ T3739] __nla_validate_parse: 4 callbacks suppressed [ 975.708059][ T3739] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7860'. [ 976.327415][ T3772] FAULT_INJECTION: forcing a failure. [ 976.327415][ T3772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 976.327450][ T3772] CPU: 0 UID: 0 PID: 3772 Comm: syz.3.7864 Not tainted syzkaller #0 PREEMPT(full) [ 976.327472][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.327484][ T3772] Call Trace: [ 976.327493][ T3772] [ 976.327501][ T3772] dump_stack_lvl+0xe8/0x150 [ 976.327533][ T3772] should_fail_ex+0x410/0x560 [ 976.327561][ T3772] prepare_alloc_pages+0x223/0x600 [ 976.327588][ T3772] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 976.327617][ T3772] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 976.327640][ T3772] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 976.327666][ T3772] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 976.327693][ T3772] ? __pfx_policy_nodemask+0x10/0x10 [ 976.327717][ T3772] ? __get_vm_area_node+0x155/0x2f0 [ 976.327742][ T3772] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 976.327765][ T3772] ? __vmalloc_noprof+0xd2/0x120 [ 976.327794][ T3772] __alloc_pages_noprof+0x10/0x100 [ 976.327822][ T3772] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 976.327855][ T3772] ? alloc_pages_noprof+0x140/0x2b0 [ 976.327886][ T3772] __kasan_populate_vmalloc+0xb7/0x1c0 [ 976.327915][ T3772] alloc_vmap_area+0xd1a/0x1420 [ 976.327956][ T3772] ? __pfx_alloc_vmap_area+0x10/0x10 [ 976.327981][ T3772] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 976.328003][ T3772] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 976.328024][ T3772] ? __get_vm_area_node+0x155/0x2f0 [ 976.328065][ T3772] __get_vm_area_node+0x200/0x2f0 [ 976.328103][ T3772] __vmalloc_node_range_noprof+0x343/0x1540 [ 976.328135][ T3772] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 976.328161][ T3772] ? __lock_acquire+0x747/0x2de0 [ 976.328204][ T3772] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 976.328242][ T3772] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 976.328265][ T3772] __vmalloc_noprof+0xd2/0x120 [ 976.328292][ T3772] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 976.328319][ T3772] bpf_prog_alloc_no_stats+0x47/0x560 [ 976.328341][ T3772] ? bpf_prog_alloc+0x2a/0x1a0 [ 976.328368][ T3772] bpf_prog_alloc+0x3c/0x1a0 [ 976.328395][ T3772] bpf_prog_load+0x7f8/0x1c20 [ 976.328432][ T3772] ? __pfx_bpf_prog_load+0x10/0x10 [ 976.328476][ T3772] __sys_bpf+0xd0d/0xd90 [ 976.328506][ T3772] ? __pfx___sys_bpf+0x10/0x10 [ 976.328541][ T3772] ? __fget_files+0x2a/0x420 [ 976.328585][ T3772] ? ksys_write+0x242/0x270 [ 976.328618][ T3772] ? __pfx_ksys_write+0x10/0x10 [ 976.328654][ T3772] __x64_sys_bpf+0xba/0xd0 [ 976.328678][ T3772] do_syscall_64+0x166/0x520 [ 976.328708][ T3772] ? trace_irq_disable+0x3b/0x140 [ 976.328728][ T3772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.328750][ T3772] ? clear_bhb_loop+0x70/0xc0 [ 976.328775][ T3772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.328797][ T3772] RIP: 0033:0x7f5a0079e159 [ 976.328817][ T3772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.328836][ T3772] RSP: 002b:00007f5a01637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 976.328859][ T3772] RAX: ffffffffffffffda RBX: 00007f5a00a25fa0 RCX: 00007f5a0079e159 [ 976.328876][ T3772] RDX: 0000000000000090 RSI: 0000200000000140 RDI: 0000000000000005 [ 976.328888][ T3772] RBP: 00007f5a01637090 R08: 0000000000000000 R09: 0000000000000000 [ 976.328900][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.328911][ T3772] R13: 00007f5a00a26038 R14: 00007f5a00a25fa0 R15: 00007fffbc154338 [ 976.328941][ T3772] [ 976.476855][ T3772] warn_alloc: 1 callbacks suppressed [ 976.476874][ T3772] syz.3.7864: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 976.476939][ T3772] CPU: 1 UID: 0 PID: 3772 Comm: syz.3.7864 Not tainted syzkaller #0 PREEMPT(full) [ 976.476961][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.476973][ T3772] Call Trace: [ 976.476981][ T3772] [ 976.476989][ T3772] dump_stack_lvl+0xe8/0x150 [ 976.477021][ T3772] warn_alloc+0x24d/0x270 [ 976.477050][ T3772] ? lockdep_hardirqs_on+0x7b/0x110 [ 976.477081][ T3772] ? __pfx_warn_alloc+0x10/0x10 [ 976.477099][ T3772] ? kfree+0x1c5/0x650 [ 976.477133][ T3772] ? __get_vm_area_node+0x219/0x2f0 [ 976.477168][ T3772] __vmalloc_node_range_noprof+0x36b/0x1540 [ 976.477198][ T3772] ? __lock_acquire+0x747/0x2de0 [ 976.477242][ T3772] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 976.477280][ T3772] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 976.477302][ T3772] __vmalloc_noprof+0xd2/0x120 [ 976.477330][ T3772] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 976.477356][ T3772] bpf_prog_alloc_no_stats+0x47/0x560 [ 976.477377][ T3772] ? bpf_prog_alloc+0x2a/0x1a0 [ 976.477401][ T3772] bpf_prog_alloc+0x3c/0x1a0 [ 976.477425][ T3772] bpf_prog_load+0x7f8/0x1c20 [ 976.477459][ T3772] ? __pfx_bpf_prog_load+0x10/0x10 [ 976.477506][ T3772] __sys_bpf+0xd0d/0xd90 [ 976.477534][ T3772] ? __pfx___sys_bpf+0x10/0x10 [ 976.477567][ T3772] ? __fget_files+0x2a/0x420 [ 976.477611][ T3772] ? ksys_write+0x242/0x270 [ 976.477642][ T3772] ? __pfx_ksys_write+0x10/0x10 [ 976.477675][ T3772] __x64_sys_bpf+0xba/0xd0 [ 976.477698][ T3772] do_syscall_64+0x166/0x520 [ 976.477725][ T3772] ? trace_irq_disable+0x3b/0x140 [ 976.477744][ T3772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.477764][ T3772] ? clear_bhb_loop+0x70/0xc0 [ 976.477787][ T3772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.477807][ T3772] RIP: 0033:0x7f5a0079e159 [ 976.477826][ T3772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.477844][ T3772] RSP: 002b:00007f5a01637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 976.477864][ T3772] RAX: ffffffffffffffda RBX: 00007f5a00a25fa0 RCX: 00007f5a0079e159 [ 976.477879][ T3772] RDX: 0000000000000090 RSI: 0000200000000140 RDI: 0000000000000005 [ 976.477892][ T3772] RBP: 00007f5a01637090 R08: 0000000000000000 R09: 0000000000000000 [ 976.477904][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.477917][ T3772] R13: 00007f5a00a26038 R14: 00007f5a00a25fa0 R15: 00007fffbc154338 [ 976.477948][ T3772] [ 976.477956][ T3772] Mem-Info: [ 976.477966][ T3772] active_anon:5908 inactive_anon:0 isolated_anon:0 [ 976.477966][ T3772] active_file:57 inactive_file:43841 isolated_file:0 [ 976.477966][ T3772] unevictable:0 dirty:224 writeback:0 [ 976.477966][ T3772] slab_reclaimable:13209 slab_unreclaimable:144472 [ 976.477966][ T3772] mapped:31995 shmem:526 pagetables:1852 [ 976.477966][ T3772] sec_pagetables:0 bounce:0 [ 976.477966][ T3772] kernel_misc_reclaimable:0 [ 976.477966][ T3772] free:1271201 free_pcp:10489 free_cma:0 [ 976.478018][ T3772] Node 0 active_anon:23632kB inactive_anon:0kB active_file:228kB inactive_file:175156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127980kB dirty:896kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18188kB pagetables:7280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 976.492204][ T3772] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 976.492264][ T3772] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 976.492507][ T3772] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 976.492543][ T3772] Node 0 DMA32 free:1123040kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23632kB inactive_anon:0kB active_file:228kB inactive_file:175156kB unevictable:0kB writepending:896kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:41888kB local_pcp:21016kB free_cma:0kB [ 976.492601][ T3772] lowmem_reserve[]: 0 0 0 0 0 [ 976.492633][ T3772] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 976.492686][ T3772] lowmem_reserve[]: 0 0 0 0 0 [ 976.492895][ T3772] Node 1 Normal free:3946404kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 976.492951][ T3772] lowmem_reserve[]: 0 0 0 0 0 [ 976.492983][ T3772] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 976.493100][ T3772] Node 0 DMA32: 2177*4kB (UME) 2068*8kB (UME) 853*16kB (UME) 1494*32kB (UM) 1823*64kB (UME) 887*128kB (UM) 497*256kB (UM) 312*512kB (UME) 191*1024kB (UME) 6*2048kB (UM) 76*4096kB (UM) = 1123060kB [ 976.493250][ T3772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 976.493342][ T3772] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 5*16kB (UM) 4*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3946404kB [ 976.493494][ T3772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 976.493510][ T3772] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 976.493526][ T3772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 976.493542][ T3772] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 976.493558][ T3772] 44420 total pagecache pages [ 976.493566][ T3772] 0 pages in swap cache [ 976.493573][ T3772] Free swap = 124996kB [ 976.493581][ T3772] Total swap = 124996kB [ 976.493589][ T3772] 2097051 pages RAM [ 976.493597][ T3772] 0 pages HighMem/MovableOnly [ 976.493604][ T3772] 428661 pages reserved [ 976.493611][ T3772] 0 pages cma reserved [ 977.843437][ T3796] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 977.843586][ T3796] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 977.909311][ T3796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7871'. [ 978.298142][ T3810] IPv6: Can't replace route, no match found [ 978.299374][ T3810] IPv6: Can't replace route, no match found [ 978.716945][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 978.716979][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 979.115507][ T3834] FAULT_INJECTION: forcing a failure. [ 979.115507][ T3834] name failslab, interval 1, probability 0, space 0, times 0 [ 979.115541][ T3834] CPU: 1 UID: 0 PID: 3834 Comm: syz.3.7881 Not tainted syzkaller #0 PREEMPT(full) [ 979.115564][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 979.115576][ T3834] Call Trace: [ 979.115584][ T3834] [ 979.115598][ T3834] dump_stack_lvl+0xe8/0x150 [ 979.115631][ T3834] should_fail_ex+0x410/0x560 [ 979.115659][ T3834] should_failslab+0xa8/0x100 [ 979.115708][ T3834] __kmalloc_node_noprof+0x100/0x720 [ 979.115726][ T3834] ? __get_vm_area_node+0x200/0x2f0 [ 979.115752][ T3834] ? __get_vm_area_node+0x283/0x2f0 [ 979.115787][ T3834] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 979.115815][ T3834] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 979.115849][ T3834] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 979.115879][ T3834] ? __lock_acquire+0x747/0x2de0 [ 979.115921][ T3834] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 979.115956][ T3834] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 979.115975][ T3834] __vmalloc_noprof+0xd2/0x120 [ 979.115998][ T3834] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 979.116020][ T3834] bpf_prog_alloc_no_stats+0x47/0x560 [ 979.116037][ T3834] ? bpf_prog_alloc+0x2a/0x1a0 [ 979.116057][ T3834] bpf_prog_alloc+0x3c/0x1a0 [ 979.116078][ T3834] bpf_prog_load+0x7f8/0x1c20 [ 979.116107][ T3834] ? __pfx_bpf_prog_load+0x10/0x10 [ 979.116148][ T3834] __sys_bpf+0xd0d/0xd90 [ 979.116173][ T3834] ? __pfx___sys_bpf+0x10/0x10 [ 979.116201][ T3834] ? __fget_files+0x2a/0x420 [ 979.116238][ T3834] ? ksys_write+0x242/0x270 [ 979.116264][ T3834] ? __pfx_ksys_write+0x10/0x10 [ 979.116293][ T3834] __x64_sys_bpf+0xba/0xd0 [ 979.116313][ T3834] do_syscall_64+0x166/0x520 [ 979.116336][ T3834] ? trace_irq_disable+0x3b/0x140 [ 979.116352][ T3834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.116368][ T3834] ? clear_bhb_loop+0x70/0xc0 [ 979.116388][ T3834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.116405][ T3834] RIP: 0033:0x7f5a0079e159 [ 979.116422][ T3834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.116437][ T3834] RSP: 002b:00007f5a01637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.116456][ T3834] RAX: ffffffffffffffda RBX: 00007f5a00a25fa0 RCX: 00007f5a0079e159 [ 979.116469][ T3834] RDX: 0000000000000090 RSI: 0000200000000140 RDI: 0000000000000005 [ 979.116480][ T3834] RBP: 00007f5a01637090 R08: 0000000000000000 R09: 0000000000000000 [ 979.116490][ T3834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.116500][ T3834] R13: 00007f5a00a26038 R14: 00007f5a00a25fa0 R15: 00007fffbc154338 [ 979.116527][ T3834] [ 980.091029][ T1997] block nbd5: Possible stuck request ffff888027715080: control (read@0,1024B). Runtime 150 seconds [ 980.091075][ T1997] block nbd5: Possible stuck request ffff888027715240: control (read@1024,1024B). Runtime 150 seconds [ 980.091099][ T1997] block nbd5: Possible stuck request ffff888027715400: control (read@2048,1024B). Runtime 150 seconds [ 980.091124][ T1997] block nbd5: Possible stuck request ffff8880277155c0: control (read@3072,1024B). Runtime 150 seconds [ 985.324683][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7886'. [ 985.381763][ T3851] IPv6: Can't replace route, no match found [ 985.382531][ T3851] IPv6: Can't replace route, no match found [ 985.532362][ T3852] vlan3: entered allmulticast mode [ 985.532386][ T3852] ip6gretap0: entered allmulticast mode [ 985.618868][ T3856] netlink: 'syz.4.7888': attribute type 5 has an invalid length. [ 985.675106][ T3848] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.675386][ T3865] netlink: 'syz.4.7888': attribute type 5 has an invalid length. [ 985.684913][ T3848] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.149313][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7892'. [ 986.232944][T10353] [ 986.235337][T10353] ====================================================== [ 986.242417][T10353] WARNING: possible circular locking dependency detected [ 986.249467][T10353] syzkaller #0 Not tainted [ 986.253894][T10353] ------------------------------------------------------ [ 986.261010][T10353] kworker/0:11/10353 is trying to acquire lock: [ 986.267264][T10353] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 986.277130][T10353] [ 986.277130][T10353] but task is already holding lock: [ 986.284502][T10353] ffffffff905f2d40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 986.295058][T10353] [ 986.295058][T10353] which lock already depends on the new lock. [ 986.295058][T10353] [ 986.305478][T10353] [ 986.305478][T10353] the existing dependency chain (in reverse order) is: [ 986.314510][T10353] [ 986.314510][T10353] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 986.322360][T10353] __mutex_lock+0x19d/0x1550 [ 986.327529][T10353] kobject_uevent_net_broadcast+0x27e/0x560 [ 986.334496][T10353] kobject_uevent_env+0x566/0x9e0 [ 986.340080][T10353] device_add+0x544/0xb80 [ 986.344998][T10353] device_create+0x269/0x300 [ 986.350397][T10353] msr_device_create+0x33/0x50 [ 986.356457][T10353] cpuhp_invoke_callback+0x434/0x810 [ 986.362295][T10353] cpuhp_thread_fun+0x362/0x780 [ 986.367697][T10353] smpboot_thread_fn+0x565/0xa70 [ 986.373181][T10353] kthread+0x38b/0x480 [ 986.377793][T10353] ret_from_fork+0x514/0xb70 [ 986.382935][T10353] ret_from_fork_asm+0x1a/0x30 [ 986.388377][T10353] [ 986.388377][T10353] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 986.395963][T10353] cpuhp_thread_fun+0x127/0x780 [ 986.401365][T10353] smpboot_thread_fn+0x565/0xa70 [ 986.406852][T10353] kthread+0x38b/0x480 [ 986.411455][T10353] ret_from_fork+0x514/0xb70 [ 986.416589][T10353] ret_from_fork_asm+0x1a/0x30 [ 986.421903][T10353] [ 986.421903][T10353] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 986.429653][T10353] cpus_read_lock+0x42/0x160 [ 986.434812][T10353] static_key_slow_inc+0x12/0x30 [ 986.440290][T10353] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 986.446552][T10353] nbd_genl_foreach_sock+0x265/0x450 [ 986.452403][T10353] nbd_genl_reconfigure+0xbbb/0x1040 [ 986.458228][T10353] genl_family_rcv_msg_doit+0x233/0x340 [ 986.464316][T10353] genl_rcv_msg+0x614/0x7a0 [ 986.469357][T10353] netlink_rcv_skb+0x226/0x4a0 [ 986.474649][T10353] genl_rcv+0x28/0x40 [ 986.479074][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 986.486610][T10353] netlink_unicast+0x7bd/0x940 [ 986.491930][T10353] netlink_sendmsg+0x813/0xb40 [ 986.497230][T10353] sock_sendmsg_nosec+0x14e/0x190 [ 986.502793][T10353] ____sys_sendmsg+0x54e/0x850 [ 986.508123][T10353] ___sys_sendmsg+0x2a5/0x360 [ 986.513345][T10353] __x64_sys_sendmsg+0x1b1/0x290 [ 986.518826][T10353] do_syscall_64+0x166/0x520 [ 986.523963][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.530501][T10353] [ 986.530501][T10353] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 986.538166][T10353] __mutex_lock+0x19d/0x1550 [ 986.543304][T10353] nbd_queue_rq+0x373/0xff0 [ 986.548344][T10353] blk_mq_dispatch_rq_list+0x499/0x1990 [ 986.554427][T10353] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 986.561297][T10353] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 986.567909][T10353] blk_mq_run_work_fn+0x16c/0x300 [ 986.573656][T10353] process_scheduled_works+0xc3d/0x1630 [ 986.579744][T10353] worker_thread+0xa47/0xfb0 [ 986.584886][T10353] kthread+0x38b/0x480 [ 986.589489][T10353] ret_from_fork+0x514/0xb70 [ 986.594620][T10353] ret_from_fork_asm+0x1a/0x30 [ 986.599933][T10353] [ 986.599933][T10353] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 986.607170][T10353] __mutex_lock+0x19d/0x1550 [ 986.612304][T10353] nbd_queue_rq+0xc1/0xff0 [ 986.617257][T10353] blk_mq_dispatch_rq_list+0x499/0x1990 [ 986.623337][T10353] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 986.630206][T10353] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 986.636730][T10353] blk_mq_run_work_fn+0x16c/0x300 [ 986.642303][T10353] process_scheduled_works+0xc3d/0x1630 [ 986.648392][T10353] worker_thread+0xa47/0xfb0 [ 986.653523][T10353] kthread+0x38b/0x480 [ 986.658125][T10353] ret_from_fork+0x514/0xb70 [ 986.663264][T10353] ret_from_fork_asm+0x1a/0x30 [ 986.668573][T10353] [ 986.668573][T10353] -> #3 (set->srcu){.+.+}-{0:0}: [ 986.675719][T10353] __synchronize_srcu+0xc9/0x2f0 [ 986.681191][T10353] elevator_switch+0x1e8/0x7b0 [ 986.686498][T10353] elevator_change+0x2fa/0x480 [ 986.691815][T10353] elevator_set_default+0x375/0x440 [ 986.699044][T10353] blk_register_queue+0x3f3/0x4e0 [ 986.704626][T10353] __add_disk+0x6b8/0xdb0 [ 986.709508][T10353] add_disk_fwnode+0x100/0x3a0 [ 986.714815][T10353] nbd_dev_add+0x733/0xb60 [ 986.719767][T10353] nbd_init+0x168/0x1f0 [ 986.724464][T10353] do_one_initcall+0x250/0x870 [ 986.730295][T10353] do_initcall_level+0x10a/0x1a0 [ 986.735788][T10353] do_initcalls+0x59/0xa0 [ 986.740670][T10353] kernel_init_freeable+0x29d/0x3e0 [ 986.746414][T10353] kernel_init+0x22/0x1d0 [ 986.751302][T10353] ret_from_fork+0x514/0xb70 [ 986.756442][T10353] ret_from_fork_asm+0x1a/0x30 [ 986.761752][T10353] [ 986.761752][T10353] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 986.769587][T10353] __mutex_lock+0x19d/0x1550 [ 986.774721][T10353] elevator_change+0x1af/0x480 [ 986.780023][T10353] elevator_set_none+0xb5/0x140 [ 986.785420][T10353] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 986.791778][T10353] nbd_start_device+0x189/0xb30 [ 986.797174][T10353] nbd_genl_connect+0x167d/0x1cd0 [ 986.802742][T10353] genl_family_rcv_msg_doit+0x233/0x340 [ 986.808820][T10353] genl_rcv_msg+0x614/0x7a0 [ 986.813862][T10353] netlink_rcv_skb+0x226/0x4a0 [ 986.819156][T10353] genl_rcv+0x28/0x40 [ 986.823694][T10353] netlink_unicast+0x7bd/0x940 [ 986.829002][T10353] netlink_sendmsg+0x813/0xb40 [ 986.834297][T10353] sock_sendmsg_nosec+0x14e/0x190 [ 986.839857][T10353] ____sys_sendmsg+0x54e/0x850 [ 986.845160][T10353] ___sys_sendmsg+0x2a5/0x360 [ 986.850363][T10353] __x64_sys_sendmsg+0x1b1/0x290 [ 986.855856][T10353] do_syscall_64+0x166/0x520 [ 986.861015][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.867429][T10353] [ 986.867429][T10353] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 986.876089][T10353] blk_alloc_queue+0x544/0x690 [ 986.881402][T10353] __blk_mq_alloc_disk+0x194/0x390 [ 986.887058][T10353] nbd_dev_add+0x494/0xb60 [ 986.892013][T10353] nbd_init+0x168/0x1f0 [ 986.896705][T10353] do_one_initcall+0x250/0x870 [ 986.902009][T10353] do_initcall_level+0x10a/0x1a0 [ 986.907585][T10353] do_initcalls+0x59/0xa0 [ 986.912474][T10353] kernel_init_freeable+0x29d/0x3e0 [ 986.918216][T10353] kernel_init+0x22/0x1d0 [ 986.923081][T10353] ret_from_fork+0x514/0xb70 [ 986.928215][T10353] ret_from_fork_asm+0x1a/0x30 [ 986.933519][T10353] [ 986.933519][T10353] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 986.940770][T10353] __lock_acquire+0x164c/0x2de0 [ 986.946338][T10353] lock_acquire+0x115/0x350 [ 986.951385][T10353] fs_reclaim_acquire+0x71/0x100 [ 986.956855][T10353] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 986.963206][T10353] __alloc_skb+0x1db/0x7a0 [ 986.968152][T10353] alloc_uevent_skb+0x7d/0x230 [ 986.973452][T10353] kobject_uevent_net_broadcast+0x2fa/0x560 [ 986.979885][T10353] kobject_uevent_env+0x566/0x9e0 [ 986.985447][T10353] rfkill_uevent_work+0x64/0x190 [ 986.990909][T10353] process_scheduled_works+0xc3d/0x1630 [ 986.996998][T10353] worker_thread+0xa47/0xfb0 [ 987.002132][T10353] kthread+0x38b/0x480 [ 987.006729][T10353] ret_from_fork+0x514/0xb70 [ 987.011842][T10353] ret_from_fork_asm+0x1a/0x30 [ 987.017148][T10353] [ 987.017148][T10353] other info that might help us debug this: [ 987.017148][T10353] [ 987.027384][T10353] Chain exists of: [ 987.027384][T10353] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 987.027384][T10353] [ 987.040085][T10353] Possible unsafe locking scenario: [ 987.040085][T10353] [ 987.047542][T10353] CPU0 CPU1 [ 987.052916][T10353] ---- ---- [ 987.058290][T10353] lock(uevent_sock_mutex); [ 987.062882][T10353] lock(cpuhp_state-up); [ 987.069833][T10353] lock(uevent_sock_mutex); [ 987.076957][T10353] lock(fs_reclaim); [ 987.080951][T10353] [ 987.080951][T10353] *** DEADLOCK *** [ 987.080951][T10353] [ 987.089091][T10353] locks held by kworker/0:11/10353: 4, last CPU#0: [ 987.095600][T10353] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 987.107978][T10353] #1: ffffc9000504fc40 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 987.120634][T10353] #2: ffffffff9055b320 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x2e/0x190 [ 987.130877][T10353] #3: ffffffff905f2d40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 987.141889][T10353] [ 987.141889][T10353] stack backtrace: [ 987.147793][T10353] CPU: 0 UID: 0 PID: 10353 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 987.157336][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 987.167400][T10353] Workqueue: events rfkill_uevent_work [ 987.172889][T10353] Call Trace: [ 987.176176][T10353] [ 987.179115][T10353] dump_stack_lvl+0xe8/0x150 [ 987.183813][T10353] print_circular_bug+0x2e2/0x300 [ 987.188858][T10353] check_noncircular+0x12f/0x150 [ 987.193809][T10353] __lock_acquire+0x164c/0x2de0 [ 987.198682][T10353] ? irqentry_exit+0x218/0x910 [ 987.203460][T10353] lock_acquire+0x115/0x350 [ 987.207983][T10353] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 987.213976][T10353] ? __pfx_hlock_conflict+0x10/0x10 [ 987.219185][T10353] ? __alloc_skb+0x1db/0x7a0 [ 987.223797][T10353] fs_reclaim_acquire+0x71/0x100 [ 987.228750][T10353] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 987.234765][T10353] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 987.240600][T10353] ? __alloc_skb+0x18d/0x7a0 [ 987.245194][T10353] ? preempt_schedule_thunk+0x16/0x40 [ 987.250580][T10353] ? __alloc_skb+0x1db/0x7a0 [ 987.255191][T10353] __alloc_skb+0x1db/0x7a0 [ 987.259618][T10353] alloc_uevent_skb+0x7d/0x230 [ 987.264424][T10353] kobject_uevent_net_broadcast+0x2fa/0x560 [ 987.270338][T10353] kobject_uevent_env+0x566/0x9e0 [ 987.275383][T10353] ? process_scheduled_works+0x97a/0x1630 [ 987.281133][T10353] rfkill_uevent_work+0x64/0x190 [ 987.286091][T10353] ? process_scheduled_works+0x97a/0x1630 [ 987.291816][T10353] process_scheduled_works+0xc3d/0x1630 [ 987.297387][T10353] ? __pfx_process_scheduled_works+0x10/0x10 [ 987.303389][T10353] ? assign_work+0x3cf/0x5d0 [ 987.307996][T10353] worker_thread+0xa47/0xfb0 [ 987.312597][T10353] ? __kthread_parkme+0x71/0x1f0 [ 987.317562][T10353] kthread+0x38b/0x480 [ 987.321666][T10353] ? __pfx_worker_thread+0x10/0x10 [ 987.326789][T10353] ? __pfx_kthread+0x10/0x10 [ 987.331562][T10353] ret_from_fork+0x514/0xb70 [ 987.336178][T10353] ? __pfx_ret_from_fork+0x10/0x10 [ 987.341388][T10353] ? __switch_to+0xc89/0x1420 [ 987.346088][T10353] ? __pfx_kthread+0x10/0x10 [ 987.350701][T10353] ret_from_fork_asm+0x1a/0x30 [ 987.355498][T10353] [ 987.390417][ T3840] infiniband syz0: set down [ 987.390450][ T3840] infiniband syz0: added bond_slave_1 [ 987.391862][ T3840] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 987.393480][ T3840] infiniband syz0: Couldn't open port 1 [ 987.393636][ T3840] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 987.393667][ T3840] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 987.393708][ T3840] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 987.502500][ T3840] RDS/IB: syz0: added [ 987.502537][ T3840] smc: adding ib device syz0 with port count 1 [ 987.502555][ T3840] smc: ib device syz0 port 1 has no pnetid [ 987.529597][ T3875] xt_CT: No such helper "snmp" [ 987.595585][ T3878] gre0: entered promiscuous mode [ 987.595613][ T3878] gre0: entered allmulticast mode