last executing test programs: 3.514992182s ago: executing program 1 (id=5521): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x5e302000) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) close(0x3) (async) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800) 3.392268233s ago: executing program 1 (id=5523): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0xec, r4, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbc%\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x80709d2b, 0x25dfdc00, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004844}, 0x30004880) unshare(0x6a040000) unshare(0x8040480) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r7, 0x11}, 0x38) ioctl$sock_ifreq(r0, 0x8925, &(0x7f0000000100)={'pim6reg0\x00', @ifru_ivalue=0x2}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 2.880093572s ago: executing program 3 (id=5528): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00', 0x1}) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x400, 0x7fffffff, 0x8, 0x6, 0x7}) r2 = socket$inet6(0xa, 0xa, 0x9ff) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x00', 0x80040, &(0x7f0000000100)={@align=0x8000, {0x3137, 0xfff7, 0x1, 0x3}}, 0x200, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)}) sendmsg$nl_generic(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x314, 0x41, 0x800, 0x70bd2a, 0x25dfdbfb, {0x20}, [@generic="f8921ad96ceef652f7a26ecd76591f7d58c11d624a18ac0d562a5056629c1360ff0773cf51b0d4c3b95875671ba1c2f45ed29612d3c53e79ccf8aa8a9ec668323509a0a089376667dd18dce28e6e1a1af49c55c555f1f3558e7e2cb70fc204183cfef51242efd6a960e824e39978ebe822cf05e8af82e1339be7e2dfc8d47f62f6c4cf3acbc7568ef68f3b8e2fe28653c4df3af24041df3d0f13a50a4e6e86cc4a7fa32ab2aae4", @nested={0x1c1, 0xfa, 0x0, 0x1, [@generic="24cffa46cdc98996a8ac543238622023435a63a19307aba1a8fee0ee90f9678e1df9d4e84f988cfec507082e2905facc381770ed99f1ff55ce13e7ddd2d141ca008e5453261c17ff11cbdb63f640160c5731023ed8428e7ade324daaafdbd77a72ce028079bf01eb01490edf5333f2beed9eefa9a79060f392e9be9097b5d689dd96043d4271b8ae4b86de0cfbc1b4618814020abeed73ef", @nested={0x4, 0x10c}, @typed={0x8, 0xa3, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x1d}, @typed={0x39, 0x37, 0x0, 0x0, @binary="9e33580b97c7bb96042bb4f1e41bb16077d5902a275b665d55e2a1cdcc7629fa69808d06448b6ff2bb6766bf1eca560f111194d2fb"}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r2}, @generic="4a6986fcb30bdf027dd5413402d718ee026101f8bafa753b25aa3906db507b74cc07cf79c43ea2e4d577835b5c618e32db5f8c19530f1f3ac7c704eebc7a889c45950d3cb40fb67c93dbc6a26a31252f1728fdd3ff2905351e6cfab0686733b9c98a8f80e61af57657503012d449aa749051cf0f52e772", @typed={0x8, 0x1c, 0x0, 0x0, @fd=r1}, @generic="57b63d784131c26d5b846083f8ffa471170a2a4c812604bb902284083d0e07b997a513deb0b03a9b2f1d47922f589c338c29222e6297a4de0974d212d7b27c883d29fd06ee1e6a8cfa10d0235f7c82e11992"]}, @generic="cdc433fb7daf5be444145d1ce3cb9a7d62484ae592772d8d5b284d0f8ae53e09441a37ad58f38a486b05fa2439c36c4031aae65068dc7be05f64749a116ecd9f6f7df9f03d87eaddfc8fea8973f81c915ab1dc1a758312ad28b11ff626860e0c7363c92d827a02a537fdf96029bdb7c15565cf2bb5e90942eedeb3ff0afdced3b936c3c9a5d2e017952f86fa18aa3d50835155"]}, 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x0) listen(r3, 0x1) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x101, 0x18}, 0xc) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ppoll(&(0x7f0000000640)=[{r1, 0x81}, {r0, 0x8000}, {r3, 0x11}, {r4, 0x4404}], 0x4, &(0x7f00000006c0)={r5, r6+60000000}, &(0x7f0000000700)={[0x5]}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r4}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'bridge0\x00', 0x20}) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e20, 0xddc, @remote, 0x3}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000008c0)={'veth0_to_team\x00', &(0x7f0000000800)=@ethtool_regs={0x4, 0x2, 0x7c, "1cf0ceff670f4dc1189c3840da22be3a45f1f240f57fe23898da1f52fa207d8d32d31de70e2e0bbfebccdfc1c90bc0c31fe701e215bcd51a38bc84a0471c3d40688cd66825b11d8a21cf4c942bd41e96ffae79cab97612a4f2a9faae42738d0da822bdcf919c33d79365596cc7c706255e6fb3019864196e9be7da8b"}}) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'veth0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) accept4$packet(r7, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000c80)={0x0, 0x8}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000d00)={r8, 0x5, 0x6, [0x5, 0x6, 0x9af3, 0x2, 0x8, 0x2]}, &(0x7f0000000d40)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{r3}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pi6 \x00'}, 0x20) r9 = socket$tipc(0x1e, 0x5, 0x0) ppoll(&(0x7f0000000e40)=[{r9}], 0x1, &(0x7f0000000e80), &(0x7f0000000ec0)={[0x6]}, 0x8) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r10, 0x40105870, &(0x7f0000000f00)={0x4, 0x50}) r11 = accept4$rose(r3, &(0x7f0000000f40)=@short={0xb, @remote, @rose, 0x1, @null}, &(0x7f0000000f80)=0x1c, 0x80800) recvfrom$rose(r11, &(0x7f0000000fc0)=""/136, 0x88, 0x1bcfa3ddf3301d2, &(0x7f0000001080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) write$tun(0xffffffffffffffff, &(0x7f0000001100)={@void, @void, @mpls={[{0x2}, {0xeed}, {0xc2a, 0x0, 0x1}, {0x1}, {0x401}, {0x3ff}, {0x7}], @ipv4=@gre={{0x12, 0x4, 0x1, 0x2, 0x1ce, 0x64, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x34, 0x18, 0x1, 0x5, [{@rand_addr=0x64010101, 0xdff}, {@empty, 0x5}, {@local, 0x800}, {@broadcast, 0x71}, {@rand_addr=0x64010101}, {@multicast2, 0xd4da}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6, 0x1, [0x6], "1a7f5e6d63fb"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "dcf33a61de3577bfbb15f4c82d1d82c38e4a02e51fde7bbe492c296c26b6f56258d88e18ab4266ed064d2a4fad236f6b6bd333bb02"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0x7], "db62ae540c22e8d486c0c29784cb13939448028eb59de31e07dbc598c51253206e115ec3ea96f9aeec6789da9ff2d6888331817c5168dacfb21e15855f4a69d07ff8e85467aacfa295fa8d9f821df91dfb3edfa60072893f929dcfea9f23f30bdfc0eb4b"}, {0x8, 0x88be, 0x1, {{0x3, 0x1, 0x9, 0x3, 0x0, 0x3, 0x7, 0x5}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x90, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x2, {0xd, 0x1, 0x1, 0xe, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "b1d86e434d7ded3f186edd8da314fb844463cd325f2a401d2ef7ddd7f9e788869fbb5c2f61166a7c99d977dda50c99bb9e3f675861967dae6708ca0a62da59aac1eab5e98370a29fac17acc61f8f7446446d58409ccf244d179ad6b515d3b91b969444931daade1ee832d3ee35575544bd98b65c0efffeac0f86bda56c3dfd6da97af741ecb8fe2fe014414bd9c2affaaca1221b2c2e8323f7d21a9cb8"}}}}}, 0x1ea) 2.526792883s ago: executing program 1 (id=5536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESOCT, @ANYBLOB="01"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.358754641s ago: executing program 1 (id=5540): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xa, 0x80000, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) clock_gettime(0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, 0x0, 0x408c1) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040), 0x0, 0x4008040) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x803, 0x0) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2.212167413s ago: executing program 0 (id=5541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa15d}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0xe, 0x401]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x76}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x130}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x410}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x140}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x102}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r1, &(0x7f0000001b80)={&(0x7f0000000240)=@pppol2tpv3, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/30, 0x1e}], 0x4, &(0x7f0000001b00)=""/78, 0x4e}, 0x20) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa15d}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0xe, 0x401]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x76}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x130}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x410}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x140}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x102}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) recvmsg(r1, &(0x7f0000001b80)={&(0x7f0000000240)=@pppol2tpv3, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/30, 0x1e}], 0x4, &(0x7f0000001b00)=""/78, 0x4e}, 0x20) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) (async) 2.211635199s ago: executing program 2 (id=5542): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200007e3497d15c51f8840a365131250c0400008500000027000000000000f7c818404955f8b118c8bef2580966f041aac05a916bb5367fec71d3f03e770fef565021e20212f0929cb536c7a749dd17d67f399ec1fe4b9a69d73d1ff7e731527c0a53d16662e792d55391ce6ee37a592a5e8f5aaad589a70329458d08e74e3864c010c936a456944dbf1e951c4c7f6d8170edabc7e0f9686619cbd7f47d29a494e1f536bb626faa041dc77638da197a6cd5ceda1e0105809483c2bb510cf42900bd1b971ac70d2a96f778270000e7158924f4a7e71082c752fa6b5dcd0d03471b6b156fa0272998"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$inet6(0xa, 0x1, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r12}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r2}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) 1.982982871s ago: executing program 3 (id=5543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021001e0000080500010004"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021001e0000080500010004"], 0x4c}}, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3e, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x12, 0x2, 0x4, 0x0, 0x10, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x6, 0x10c3}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, 0x0, &(0x7f0000000280), 0x1, r4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, 0x0, &(0x7f0000000280), 0x1, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, 0x0, 0x0, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x3a, 0x8, 0x0, 0x0}}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff", 0x75}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x1, 0x20000044) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff", 0x75}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYRESDEC=r5, @ANYRES16=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x12, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000500000000000000010000009500000000000000ad1bc0fffcffffffb7080000000000007b8af8ff00000000b708000071c800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000800000000b7050000080000007c000000ad00000095000000000000006f2bdcecf875118f7bb52e598d7b2054e11aa6eef76c901a4adefe1887296d98429f4907761077659d5ccedecb5912d453db9bdd42181342f7591ad44fb510cb00da8999ea008611e9723e63677c79653a5853b340fc04069de921d0fa8bed687cf1c6a3daeaea868fc4c4c37cf1a57235f10e7e03582d67167834469ec0e7363478be1c1e"], 0x0, 0x408000, 0x66, &(0x7f0000000480)=""/102, 0x41000, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x8, 0x7, 0xb10e}, 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x12, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000500000000000000010000009500000000000000ad1bc0fffcffffffb7080000000000007b8af8ff00000000b708000071c800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000800000000b7050000080000007c000000ad00000095000000000000006f2bdcecf875118f7bb52e598d7b2054e11aa6eef76c901a4adefe1887296d98429f4907761077659d5ccedecb5912d453db9bdd42181342f7591ad44fb510cb00da8999ea008611e9723e63677c79653a5853b340fc04069de921d0fa8bed687cf1c6a3daeaea868fc4c4c37cf1a57235f10e7e03582d67167834469ec0e7363478be1c1e"], 0x0, 0x408000, 0x66, &(0x7f0000000480)=""/102, 0x41000, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x8, 0x7, 0xb10e}, 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) 1.900450452s ago: executing program 0 (id=5545): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x100, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@initdev, @empty, @remote}, &(0x7f0000000040)=0x8) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000040811) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r3, &(0x7f0000000000)=""/106, 0x6a) 1.877840191s ago: executing program 2 (id=5546): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x100010, r0, 0xad994000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000c80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050029bd7000000000002e00000008000300", @ANYRES32, @ANYBLOB="050034002f000000060066008488000004006701"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x79, r6}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 1.740558851s ago: executing program 3 (id=5547): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r1, &(0x7f0000000080)='\x00', 0x404040, &(0x7f00000000c0)={@align=0x9, {0x6, 0x0, 0x6, 0xf5}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x1}, {[0xa960, 0xc2, 0x2, 0x2]}, 0x4, 0x84, &(0x7f00000002c0)=""/132}) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x200, 0xc58c, 0x8, 0x3}) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0x1}]}, 0x50}, 0x1, 0x7}, 0x20000030) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000f8ff00000008000a40000000000900020073797a31000000000900010073797a30f70000000800054000000021040100"], 0x188}, 0x1, 0x0, 0x0, 0x4000031}, 0x0) 1.724286427s ago: executing program 4 (id=5548): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0xbfa2630954a7d37a, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xca, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) writev(r2, &(0x7f0000000640)=[{&(0x7f00000005c0)="136e330100008000000000", 0xb}, {&(0x7f0000000140)="df282030", 0x4}], 0x2) 1.584211347s ago: executing program 3 (id=5549): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000000, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r5, 0x1) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, 0x0, 0x4000084) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) sendfile(r7, r6, 0x0, 0x10000) 1.575151713s ago: executing program 2 (id=5550): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) epoll_pwait(r0, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x78, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8b}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff98e0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x390}]}, @NFACCT_FILTER={0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x24044010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0xa, 0x3, 0xff) (async) r1 = socket(0xa, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x4}, {0xffffffff, 0x4}]}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x3b}, 0x28) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @empty, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="67332dbc690f6783e83b6bc0153d00000014c2341d0d5d216e90fbe12e18155f1b796339e48a135e", 0x28}], 0x1}, 0xff00) (async) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @empty, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="67332dbc690f6783e83b6bc0153d00000014c2341d0d5d216e90fbe12e18155f1b796339e48a135e", 0x28}], 0x1}, 0xff00) 1.441444913s ago: executing program 4 (id=5551): socket(0x10, 0x803, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) epoll_create(0x7) (async) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}}}}}, 0x2e) socket$vsock_stream(0x28, 0x1, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.215891804s ago: executing program 4 (id=5552): r0 = socket(0x8, 0xa, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x10, 0x23}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x4c104) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008854) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000280)) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x45e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0xc8}}, 0x4000) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x4, 0x2, 0x1, 0xfffffffffffffffc, 0x4, 0x2}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x140a, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x28040080) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000600)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000640)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000006c0), 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r8, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2290f36c5807758ff3f0db0493cc7e16"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x7}, @NL80211_ATTR_SSID={0xe, 0x34, @random="0120ee831977dcb422d1"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb0, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x16, 0x9d}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendto$inet(r4, &(0x7f0000000a40)="c0dc2c32b691e89072b625e563ef372be7602869840af9d36434716089b4cd9be8b6d534c1b3cb05d05bbe6be4f21bbe16c685cec78420b944058e280a7f01d6b8ce2097", 0x44, 0x40004, &(0x7f0000000ac0)={0x2, 0x4e20, @loopback}, 0x10) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r10, 0x103, 0x1, &(0x7f0000000b00)=0x44, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000b40)={r6, 0x420efd84}, 0x8) bind$netrom(r10, &(0x7f0000000b80)={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x40, 0x64, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x80, 0x80, 0x2, 0x7}}) sendmsg$nl_route_sched(r0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@newtclass={0x50, 0x28, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff3, 0x8}, {0xe, 0x2daebc419f86e015}, {0xfffa, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x78, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x181c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e2}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000880}, 0x4030) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000f40)={@mcast1, 0x8, 0x1, 0xff, 0x0, 0x200, 0x6}, 0x20) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x55}, 0x40000) 1.070595935s ago: executing program 0 (id=5553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0xf}, 0x28) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r4, 0x4b9b6000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.051755828s ago: executing program 4 (id=5554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03"], 0xfce) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbc025087c0000080001800400dd80080003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x0) bind$llc(r4, &(0x7f0000000240)={0x1a, 0x325, 0xf, 0x2, 0x3, 0x40, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) 959.991003ms ago: executing program 1 (id=5555): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x22020400) bind$tipc(r1, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001900)={&(0x7f0000000240), 0xc, &(0x7f00000018c0)={&(0x7f0000000580)=@newtaction={0x1308, 0x30, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{0x514, 0x1, [@m_gact={0x148, 0x15, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa9a, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x78f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1279, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x193b, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x8, 0x10000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x4e6, 0xffffffffdffffffd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xd, 0x8, 0x3, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x2, 0xd, 0x7fff, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x93f5, 0x4, 0x2, 0x5, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26dc, 0x7}}]}, {0x72, 0x6, "3b5764b3b735465708273534c2825582803238763e65bda1d81c0d188cee5ca64b0d9bc70a8b6b552ac6600c6df62756b06f37658ef91627fbf60bc80338769ab52761ff5cc4d641bba68e9571d7971cfd0a8e1caf3fd2a41a65f5c0b82f447e31408cab77e10f61af4d911d2914"}, {0xc}, {0xc, 0x8, {0x3, 0x4}}}}, @m_tunnel_key={0x104, 0x13, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3ff}]}, {0xba, 0x6, "f3daa38e2d93e7cf216d21504dbd49c7dd78280e5a9cf11d61a91b5555a186be5bdc856b698daecff78ff775d558b67bb4ef222b39ca9cd4306b4cecd69e15a35fc8e2c937216d7c5c37c8cbb642cd9b39a3984f803a20652df36b49e22600bfaba5a4c106210ed895693356ce02e38ab758bc600232065fe79a9f514fca9604c3a8f8f4abc1605ae00c0d1459e043aba4a82e44b97fe7edb100a27e95b20d4995220070ea8eac80d7367f3d2f033e84ee977b1a519b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x148, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe70}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x1, 0x8, 0x6, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}]}, {0xdc, 0x6, "270bc0bebc5251a1011683785f75cb2ae66a25b8cd7d78c806fcebce6d8ee5fc130f296e043d39bf34cf63648fe26438869614f29e6b597311c260ff13e424ff9ab81c51b0099c068249f798ab39010191eb40ea84a655d301f0e3db30541a9ebd7e69a9ac9652e9915650b8c81c6372c711168a02adcf63797b013c6f3233dbf5d317caea6d3e0d88767d092723431b05398ea9da195edc26be92414090725ac02bb88be37cc8e7eec4bba5b06614261effaba5e48ed3204fa8d589252783b331355abfd512743650b6941481c6077bb02e3520bceb09fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x9c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x74, 0x6, "816d85e7cbab70bbaf3e6dc51c48a8cb67521c9f85d1b133b1f6cf5df26ac779b31003e0c1a82e3a7aa12176782e367406933118ef27a3afd65a4866f4daa6d18e9d9ec414467d40f13dd222c9728f5f890bffd3acef90e819b494ac502d9bfc509d9ae02f2fda7b1602f592c3708f2f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xe0, 0x7, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0xaa, 0x6, "18663e7eefe1d5825ec5fc366b4a0004377feeb324b738055a98f4a61c58852b03ab459f3c46bd1529e212427ee9443f8f3fc9bf6ea5fd25754b16ee90108b8a68fd551d6c015481fc5766a1cc54ace5a65bd2d739e87f3762d404ba5409da9dac4c7ade6613b8c4cfd1bda505188feb8cacb3e22f4c2e9177cb03a8393ef9fe325a2ec28ac43d741bfee930e81c8806628561e032ca7fd7761c17a97764f3cd96417f003371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x498, 0x1, [@m_csum={0x54, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x1, 0x0, 0x6}, 0x4f}}]}, {0xb, 0x6, "a17305babda39b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_csum={0x1ac, 0x16, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xbc2a, 0xfff, 0x4, 0x4, 0x5}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3ba, 0x3, 0xfffffffc, 0x7}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x1, 0x3, 0x1, 0x6}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x8, 0x20000000, 0x7, 0x3}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x1, 0xd39}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x8, 0x0, 0xe925}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x100, 0x8, 0x2, 0x8}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x80000000, 0x10000000, 0x10000, 0xfffffac3}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0xffffffffffffffff, 0x5, 0x9}, 0x6d}}]}, {0x82, 0x6, "6ba6f9ba3e1ea269649627af69b5d14abf00c8cc4dc2ab9b3a89d8bd3c39232afec086705a02cb99afb2eb9ab5bc7873e5fdfea4eff044bbb72d3c7b91795e36ccb1a59902776da88deb876ca4f5cfb7614adea55832322e12f55fee0098802f8751380741dcdbca28b154dd187761f450b730408b1f7a496c918d365398"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_simple={0x18c, 0x18, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3, 0x3, 0x784, 0x2e}}, @TCA_DEF_PARMS={0x18, 0x2, {0x70f, 0x7e5d7aab, 0x2, 0xb3, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff8, 0x6, 0x8, 0x7a7, 0x7ff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xffff, 0x20000000, 0x80000000, 0x81}}]}, {0xf4, 0x6, "f81c10fe0c15b48123be446952cedb4e75ad4453279c73907495ce98f1905a3417a8104068e1540a7a142d10d615445e910b6e7e2ea5e75af08ed76d0c25fc1ff0eccd7c6d39fb3a6d44a080d19fa5d33af4e4e5a0e90857ff24aea53a5a30315db662339b13f650004eec6b518a5eda751a74d1c2fe34c53684e85c4d3c509ab7209d4f28c09b39cc6503ea746d00d7954edd1db25281f0029d32ecb5aa659cf52ee8eb526c96adc67816fbc72e34463f04f431c09899bb268b18657c7e317dbcb0d0e74e00edf67a953a09b63aa93706af9ce54d736a0b867f01b7891226c571c4a2d2dae2620b44835e4dd9c3824e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x108, 0x1d, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "505bfce3f5d2ec031bdde33751663401"}]}, {0xcc, 0x6, "5599458a4494e5800bf91e94dbbdc128f02977e8d519df086c5779d4f65b524977f3de6cc8a474f2bc7a0f030e9466c926ecafef4f85ec8012b0127d5c50ad8d27e519149c60bd428d08cbf8acbdc9722d2dc602b89bae74cb964926d625c72d98e4d8244fbd4bd3666c053593e7209dada78c75d78e2568853dc75184d116b753e55eeb63db74030d6f73f581f1873c16ff96125bb84ba7c8ddff1c12225856b996da1ac23fab15375310b71f96c659c304f7d2304587b2ef9f5b86fd8af67cbed286a3f3ca1ddf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x630, 0x1, [@m_csum={0x54, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x9f2d, 0x20000000, 0x4, 0x400}, 0x57}}]}, {0x9, 0x6, "bd281ef8c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x118, 0x1e, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8, 0x8000000, 0x3fb, 0xb}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x10, 0x0, 0x3, 0x9}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x7, 0x400, 0x3}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf9, 0x0, 0x4, 0x100, 0xb4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x1, 0x9952, 0xa76}, 0x3, r3}}]}, {0x49, 0x6, "f0f8223c9f11f1201eaef9cf920f87326ff5852a23b619f22f7a9298b7d752433328af34c4a621f246534b2e2ca2b885672991b38012d0563542e8ee248247806293a8abc1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x138, 0x1b, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xe4, 0x6, "84ca524c517db76114e0c30fb10492ff549cf361f9f9c0812821ce75767597d0c27b7e7356bdd053fadc09feba9c936dc0b4724628aa2e1c24d985debb1c15d2e40a2ef8ed00b71c8e4e78d5c3cd997b76d29fcec0575e5160d6706154f79f02f514a8b117a1585af876d0a56603f0114e5614459ee420bd3d868a73c7dc6669447accd2eccc527eb30f87b413bbfe5c519468239909a50b05703f5b58a49ecbe0d36302e194ab1c9405f8b9dee650edb946fbb79995caafa5b829abedfcd6e0d570681dea89b07f039f81249a724b11088b600ea4a71a350ba8738acdc1047a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x134, 0x14, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xfff0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}]}, {0xdd, 0x6, "5cf53faa1982b0c00052d6dc4d4ba74a6f465bc7f0faae0a1ef9009938563e0b645df70f751943dbbb1a6ca2c168ec38edb5e1749ef7d8eac68810ae7efe31ec2731797a513b0a30300e5056bc018b746d642126646df185ea066475b6a6e857b3493d40a1187e3d33892ce8d14c80df07eb7ebc1097c21ee94e62488be7ad26c5688a59899ba1a0214e7af32c82d3447780e638c85e34273b220523849957bed19549314d7410c9bb92cc95e9b05c0e88d9bf72d73592596898aec2eefc0b24ca3b19ab4fd2ee7eee399993dba89ad3e98cb7c666ddd11b99"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x90, 0xe, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x43, 0x6, "54877122d0d9947075310918ba8ad8b4b5e0c91320e4bad408362f29a1ab34de8ba2ba1cb16fa5442cc350e33c1a201e7a326ec959a906d11eef38785e143c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x60, 0x16, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x2b, 0x6, "d56136f188d367ac9b1aefded364a566967baac150792a22d376dedd690815c27470b3e5d769a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x164, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4ac6, 0x3, 0x4, 0x9, 0xca}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x29, 0x7, 0x4, 0x6, 0x7}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x32, 0x20000009, 0x9, 0x6}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x371, 0x8, 0x20000000, 0x5, 0x9}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x6, 0x7f, 0x3}, 0x6b}}]}, {0xab, 0x6, "2c745f1317f65ba73c9fee5d42ff65b6708f88fc83ecffa6c399e55b119246f597e31742af3ffd6ff7dc7b06ff8db33128a61a30f8bd15c3239c93478e573ad56c43eedafc22ac9b9bd8d571eba54a1f4970734e979167d87378253e7ae54c79b304efc2b495fa038b8cbabb2ea682beec7086c260392e9bdf17693da9611784d844d6626f9fac0a8cd7a83c0f113c953df586df65a88d73097a1d8ee0f12ac6b191460889703b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x318, 0x1, [@m_gact={0x1ac, 0x12, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1253, 0xffffffffeffffffe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xfffffffc, 0x3, 0x0, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x3a2, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1968, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xfffffffa, 0x1, 0x4, 0x100}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x4, 0x2, 0xef, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2682, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8, 0xffffffffffffffff, 0x4, 0x7fffffff}}]}, {0xee, 0x6, "850605cf36daf29cc8f608140d0c8edf8f3458d7fa1737a152e3d376acf96ee011e71330ca9727d1782c186b0e9d29c58b07a2c226bd575b1cc2deaf1602c5acccb5548d167b7de22eb7cfc412f37b66f70cd163b50f604e573db0e3274325bc6068b000b2d99880828005ba7bf4195846809ad974b0ec009e06ad3889e9d3602e9240b8fb3f23ca807e424590085e18092c4462eae811c65343e000a5ef0e6d0ef95ce97586a2e6ac863f67dd257066f4c64a8eb286fed95753d2c3130d67614c6e8b88bc797f7eb28566b58ac5304b41e20f631d3f4fab1dddd9d21af362657ea45f534e4d804e0c13"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x78, 0x19, 0x0, 0x0, {{0x7}, {0x4}, {0x4e, 0x6, "63ff5ab903a72814430da447d8854a4e9174484f6f6ba8da9cb7181929006dc817b4febcfa4ce1fb27873c890c40c95b9645b7dd2d0f2836404000d05a5dc0e71be5b6876649c5706964"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xf0, 0xf, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x85aa8}]}, {0xba, 0x6, "d094ffa515b29a509820d7f3cd749375740b6c1be7357a582d90ae9600e5ca64c17ef16ca4af23f9243c979e5fb778d21550fb66ec16228b267fe48ccc9061c98a2fa3309ce7b5682b4510162265c573e9015cfb538e51be8da8c3e51455d26b3a2c1371308651646aa42686f36bdfcc17ade3e19acba2e3b629211ea82f099814367a5fe57f5702abe7480eb83f2f4c70dba6726e51710d79f15f2cd7dd370a2c92da0bf33886d1061302c3af0b3ba9749147cf2acc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1308}, 0x1, 0x0, 0x0, 0x44801}, 0x24004080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000000, 0x1000}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000002d80)=ANY=[@ANYBLOB="1800000000000000008c3c7e300f17598ff345b80bf18e000000000000008500c3226bfd93dad9b333ccd751b8fbe2b271fe76912d2656f2c8e7da17914d4ed381ba53d4156d9e4e6879a214c47b4e37c9c7628f8455c8ba467caea00480b1cf5a5ee5a94834f51719cf009552cd70a78a5d366ac55579f434d3229e06ed1935cb33537bb3e2b8e17579ef48be17ae7537fb5c4bfccba5ddf638ca096c6ad745a6c472951f0fc8e308389f2c1aad2c54934b2f81deedb5cbb15429833662ac69ffc8f7f9ff70213d99"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmmsg$unix(r8, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000002980)=""/225, 0xfeda}], 0x3, &(0x7f0000002a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/245, 0xf5}], 0x1, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}}], 0x3, 0x400122a0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000200)={r6, 0xd, 0x40, 0xbc8}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000002c0)={r11, 0x11, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000080)={r11, 0x11, 0x6, @multicast}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c000000160000032cbd7000fddbdf250a809afe", @ANYRES32=r11, @ANYBLOB="08000900dc7c0000080008008000000008000900070000001400010000000000000000000000ffffac1e00010800080084020000080009000200000014000200fc0000000000000000000000000000001400060080770000feffffff010000004cf9000008400800200000000800080001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40090}, 0x20044042) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a400000", @ANYRES32=r3, @ANYBLOB="14000211c91180ccce07a50000000000000000bb"], 0x2c}}, 0x0) 899.114327ms ago: executing program 0 (id=5556): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) unshare(0x8040480) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x3ff}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001ab89999abf265aeb9c400dd8d0000000000000000000000000000000000000000100009800c00088008000180040015001ca7b0c0a6bb033024a61b68ce885af1674268913cf78b739dbf5077c2e8d6ba0912b3639a0a19d1a43fca0b497534e064990e4da5c30357142cf59062550160224be413662c3ef2cf50c62a21ac23b64461553e92a5deebeae9d7b7b256e1b95e38eb50fcbebae34f9b8f201522a24910711d3d7288ecc154ae1425683991d0d1"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) unshare(0x8040480) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) pwrite64(r1, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x3ff}, &(0x7f00000000c0)=0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001ab89999abf265aeb9c400dd8d0000000000000000000000000000000000000000100009800c00088008000180040015001ca7b0c0a6bb033024a61b68ce885af1674268913cf78b739dbf5077c2e8d6ba0912b3639a0a19d1a43fca0b497534e064990e4da5c30357142cf59062550160224be413662c3ef2cf50c62a21ac23b64461553e92a5deebeae9d7b7b256e1b95e38eb50fcbebae34f9b8f201522a24910711d3d7288ecc154ae1425683991d0d1"], 0x2c}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) 668.109319ms ago: executing program 0 (id=5557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1409, 0x300, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x2000c8d0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r4, {0xd, 0x10}, {0xfff8, 0xa}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40000}, 0x840) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1409, 0x300, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x2000c8d0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r4, {0xd, 0x10}, {0xfff8, 0xa}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40000}, 0x840) (async) 604.328614ms ago: executing program 4 (id=5558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)="00d6", 0x2}, {0x0}], 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) 603.814671ms ago: executing program 2 (id=5559): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ff000100000020020000ca010803000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0xb6}]}, 0x38}}, 0x480d0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x9, 0x4, 0x48, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0xe6, 0x6}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10000, '\x00', r3, r4, 0x4, 0x1, 0x1}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xf8, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x100000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6388}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffff800}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_HASHSIZE={0x4, 0x12, 0x1, 0x0, 0x81}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffe00}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4048018}, 0x20000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "1cc825", 0x0, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @local}}}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r5, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 546.479614ms ago: executing program 3 (id=5560): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4010, r0, 0xdc712000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000180)={{r0, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x801, &(0x7f0000000080)={@_ha_fsid={[0xb, 0x3fe]}, {0x101, 0x400, 0x7fff, 0xfffffffffffffff8}}, 0x7ff, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xb}, {[0x0, 0x1, 0x7]}, 0x3, 0x3d, &(0x7f0000000140)=""/61}) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000280)=0x28) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x0, 0x2d8, 0xffffffff, 0x220, 0x220, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@limit={{0x48}, {0x8, 0x5, 0x8, 0x7, 0x0, 0x1ff, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @icmp_id=0x68, @port=0x4e24}}}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'pimreg0\x00', 'syz_tun\x00', {}, {}, 0x1, 0x0, 0x60}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x5, 0x7}}}, @common=@ah={{0x30}, {[0x7], 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv6=@empty, @ipv4=@loopback, @port=0x4e20, @port=0x4e21}}}, {{@ip={@private=0xa010101, @broadcast, 0xff, 0xffffffff, 'erspan0\x00', 'pimreg1\x00', {}, {0xff}, 0x8, 0x0, 0xd}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e21, @port=0x4e24}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xff28}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000007c0)={0x0, 0x1000}, 0x4) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000840)=@get={0x1, &(0x7f0000000800)=""/48, 0x8}) tee(r0, r2, 0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)={0x0, 0xce, "b1fbd25250c7edb642ec51936a448ea834df0e964f7488fffbb51ba6b2fdb3b5e6df770b77507ca8be45b54313283a05cc7af87c5638b7d67cba776d1b390c44e1a1596b3733585398aea6e253d781076bb6136c7645976d202782913c620814db322447ec624b37ea84c78564d9d70be177b9dd0ec2c9f6cf86da841bdb31ea8f1380046f40272de3c02dc29671ec8b79a2c2e26a5ce8298c931dbe3623686b0ec169891096c13393b56fd13431b02056186d02ed4f5b3644a36d90110404af7ae6e4ba367ab5fdbba2a94d7149"}, &(0x7f0000000980)=0xd6) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000009c0), 0x96200, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000a00)={0x2, 0x2}) getpeername$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a80)=0x14) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000ac0)={r3, 0x4}, 0x8) readv(r5, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/224, 0xe0}, {&(0x7f0000000c00)=""/102, 0x66}], 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x19}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x10) clock_gettime(0x0, &(0x7f0000003900)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/49, 0x31}, {&(0x7f0000001e40)=""/24, 0x18}, {&(0x7f0000001e80)=""/224, 0xe0}, {&(0x7f0000001f80)=""/225, 0xe1}, {&(0x7f0000002080)=""/19, 0x13}], 0x6, &(0x7f0000002140)=""/32, 0x20}, 0x8}, {{&(0x7f0000002180)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002200)=""/139, 0x8b}, {&(0x7f00000022c0)=""/118, 0x76}, {&(0x7f0000002340)=""/84, 0x54}, {&(0x7f00000023c0)=""/190, 0xbe}, {&(0x7f0000002480)=""/58, 0x3a}, {&(0x7f00000024c0)=""/209, 0xd1}, {&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x8, &(0x7f00000036c0)=""/39, 0x27}, 0x7ff}, {{&(0x7f0000003700)=@qipcrtr, 0x80, &(0x7f0000003800)=[{&(0x7f0000003780)=""/122, 0x7a}], 0x1}, 0x3}], 0x3, 0x120, &(0x7f0000003940)={r7, r8+10000000}) recvmmsg(r2, &(0x7f0000008480)=[{{&(0x7f0000003980)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003a00)=""/238, 0xee}, {&(0x7f0000003b00)=""/31, 0x1f}, {&(0x7f0000003b40)=""/213, 0xd5}, {&(0x7f0000003c40)=""/212, 0xd4}, {&(0x7f0000003d40)=""/50, 0x32}], 0x5, &(0x7f0000003e00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000004e00)=@tipc=@id, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004e80)=""/7, 0x7}], 0x1, &(0x7f0000004f00)=""/145, 0x91}}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004fc0)=""/25, 0x19}], 0x1, &(0x7f0000005040)=""/28, 0x1c}, 0xef1}, {{&(0x7f0000005080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005100)=""/5, 0x5}, {&(0x7f0000005140)=""/247, 0xf7}, {&(0x7f0000005240)=""/159, 0x9f}, {&(0x7f0000005300)=""/93, 0x5d}, {&(0x7f0000005380)=""/168, 0xa8}], 0x5, &(0x7f00000054c0)=""/93, 0x5d}, 0x1}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005540)=""/18, 0x12}, {&(0x7f0000005580)=""/252, 0xfc}, {&(0x7f0000005680)=""/125, 0x7d}, {&(0x7f0000005700)=""/69, 0x45}, {&(0x7f0000005780)=""/86, 0x56}, {&(0x7f0000005800)=""/71, 0x47}, {&(0x7f0000005880)=""/233, 0xe9}, {&(0x7f0000005980)=""/60, 0x3c}], 0x8}, 0x1}, {{&(0x7f0000005a40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005ac0)=""/183, 0xb7}], 0x1, &(0x7f0000005bc0)=""/173, 0xad}, 0x1}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005c80)=""/22, 0x16}], 0x1, &(0x7f0000005d00)=""/228, 0xe4}, 0x80000000}, {{&(0x7f0000005e00)=@x25={0x9, @remote}, 0x80, &(0x7f0000008140)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/86, 0x56}, {&(0x7f0000006f00)=""/203, 0xcb}, {&(0x7f0000007000)=""/44, 0x2c}, {&(0x7f0000007040)=""/4096, 0x1000}, {&(0x7f0000008040)=""/217, 0xd9}], 0x6}, 0x6e2}, {{&(0x7f00000081c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000008440)=[{&(0x7f0000008240)=""/176, 0xb0}, {&(0x7f0000008300)=""/204, 0xcc}, {&(0x7f0000008400)=""/10, 0xa}], 0x3}, 0x8}], 0x9, 0x40000000, &(0x7f00000086c0)={0x0, 0x989680}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r10, &(0x7f000000b780)=[{{0x0, 0x0, &(0x7f0000008a80)=[{&(0x7f0000008700)=""/178, 0xb2}, {&(0x7f00000087c0)=""/245, 0xf5}, {&(0x7f00000088c0)=""/93, 0x5d}, {&(0x7f0000008940)=""/186, 0xba}, {&(0x7f0000008a00)=""/115, 0x73}], 0x5, &(0x7f0000008b00)=""/197, 0xc5}, 0x1ff}, {{&(0x7f0000008c00)=@nfc_llcp, 0x80, &(0x7f0000009ec0)=[{&(0x7f0000008c80)=""/128, 0x80}, {&(0x7f0000008d00)=""/17, 0x11}, {&(0x7f0000008d40)=""/4096, 0x1000}, {&(0x7f0000009d40)=""/140, 0x8c}, {&(0x7f0000009e00)=""/123, 0x7b}, {&(0x7f0000009e80)=""/20, 0x14}], 0x6, &(0x7f0000009f40)=""/40, 0x28}, 0x4}, {{&(0x7f0000009f80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f000000b2c0)=[{&(0x7f000000a000)=""/4096, 0x1000}, {&(0x7f000000b000)=""/29, 0x1d}, {&(0x7f000000b040)=""/66, 0x42}, {&(0x7f000000b0c0)=""/187, 0xbb}, {&(0x7f000000b180)=""/31, 0x1f}, {&(0x7f000000b1c0)=""/251, 0xfb}], 0x6, &(0x7f000000b340)=""/218, 0xda}, 0x78}, {{&(0x7f000000b440)=@generic, 0x80, &(0x7f000000b700)=[{&(0x7f000000b4c0)=""/227, 0xe3}, {&(0x7f000000b5c0)=""/195, 0xc3}, {&(0x7f000000b6c0)=""/58, 0x3a}], 0x3, &(0x7f000000b740)=""/16, 0x10}, 0x2}], 0x4, 0x42, &(0x7f000000b880)) r11 = accept4$ax25(r1, &(0x7f000000b8c0)={{0x3, @default}, [@null, @netrom, @netrom, @default, @null, @null, @default, @bcast]}, &(0x7f000000b940)=0x48, 0x80000) ioctl$OCFS2_IOC_RESVSP64(r11, 0x4030582a, &(0x7f000000b980)={0x1, 0x1, 0x5, 0xca, 0x7383e0ce, 0x3ff}) r12 = accept(r9, 0x0, &(0x7f000000b9c0)) sendmsg$IPCTNL_MSG_EXP_GET(r12, &(0x7f000000bac0)={&(0x7f000000ba00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000ba80)={&(0x7f000000ba40)={0x3c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) 304.188038ms ago: executing program 2 (id=5561): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) r2 = socket(0x2a, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000000, 0x1}}, 0x40) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@bcast, @null, 0x8, [@bcast, @bcast, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 188.338785ms ago: executing program 0 (id=5562): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=@deltfilter={0xe8, 0x2d, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff7, 0x3}, {0x6, 0x6}, {0xc, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0x80}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_RATE={0x6, 0x5, {0xa, 0xd}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @filter_kind_options=@f_cgroup={{0xb}, {0x80, 0x2, [@TCA_CGROUP_ACT={0x7c, 0x1, [@m_skbmod={0x78, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf808}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="aaac75eb8bfc"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x36d}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x14, 0x6, "52c911d00c553f5d6bef6094ad7b1acc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x2, 0xfe}}, @TCA_RATE={0x6, 0x5, {0x7b, 0x80}}]}, 0xe8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0xd, 0x81, 0xd, 0x403}]}) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r11, 0x0, 0x6) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r10, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r10, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}}, 0x0) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 187.261873ms ago: executing program 3 (id=5563): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000100)='\xff\xff', 0x28580, &(0x7f0000000140)={@_ha_fsid={[0x5865341b, 0x9fc]}, {0x8, 0x9, 0x9, 0x8}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44804) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)="4f72fb8858", 0x5}], 0x1}}], 0x2, 0xc000) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x0, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r4, 0xe4, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @empty, 0x6}, @in6={0xa, 0x4e20, 0xd, @local, 0x400}, @in6={0xa, 0x4e21, 0x3, @private1, 0x7}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x4}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x4, @private0, 0x2}, @in6={0xa, 0x4e24, 0x4, @private2, 0x100}, @in6={0xa, 0x4e23, 0x5, @private0, 0x5}]}, &(0x7f00000002c0)=0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f00000000000000000200"], 0xd8}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000600)={0x30, r7, 0x400, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0xfffffffffffffd8e}, 0x1, 0x0, 0x0, 0x1}, 0x10004090) 181.498577ms ago: executing program 4 (id=5564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x440400e0}, 0x20040441) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x2b4, 0x18, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x20, 0x7ff, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x90}], &(0x7f0000000380)='GPL\x00', 0x43, 0x56, &(0x7f00000003c0)=""/86, 0x40f00, 0x45, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x4, 0xfff, 0xdc}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r3, r3, r3, r3, r3, r3], &(0x7f00000005c0)=[{0x1, 0x5, 0x8, 0x8}, {0x5, 0x4, 0x1, 0x3}, {0x5, 0x4, 0x2, 0x7}, {0x0, 0x2, 0x10000, 0x3}, {0x2, 0x3, 0xd, 0x2}, {0x5, 0x2, 0xc, 0x9}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="cfff1ffe9f267b15d44e09de00", @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf251e0000001c002f800c0002000202aaaaaaaaaaaa0c000380080001000000000008000300", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRES16=r2], 0x36) 73.137547ms ago: executing program 1 (id=5565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x70bd27, 0x25dfdbfc, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x800) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r4, &(0x7f00000001c0)="04961bdf0448dea4246f9a438752c9bbb1bc944b54a09d3654c59f078b5185eba4ce3ed8a9dce819f1c1e4b8d0ae3906273cd7f7285770572bf386288e92af11c0976cb7432a7a594d866e7ef77284e0f808693148af85c33aa6d3f1505742a1d068d3496b5aaeb069ffa55f043d824572f714a5a3fa9882a1a591b7e1c0c65b3f5ce21fbe24", 0x86, 0x400c0, &(0x7f0000000280)=@l2={0x1f, 0x7, @none, 0xfffa, 0x1}, 0x80) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000001680)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x70bd27, 0x25dfdbfc, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x800) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendto(r4, &(0x7f00000001c0)="04961bdf0448dea4246f9a438752c9bbb1bc944b54a09d3654c59f078b5185eba4ce3ed8a9dce819f1c1e4b8d0ae3906273cd7f7285770572bf386288e92af11c0976cb7432a7a594d866e7ef77284e0f808693148af85c33aa6d3f1505742a1d068d3496b5aaeb069ffa55f043d824572f714a5a3fa9882a1a591b7e1c0c65b3f5ce21fbe24", 0x86, 0x400c0, &(0x7f0000000280)=@l2={0x1f, 0x7, @none, 0xfffa, 0x1}, 0x80) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000001680)) (async) 0s ago: executing program 2 (id=5566): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8040}, 0x894) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="14040000100001d2b8ec1900000000000500000a2000000009838ef7c977910ab3d9ea10a7a0010200000000000000000300000604001280080005400000000238000000180a010300000000000000000a0000050c00054000000000000000030900020073797a32000000000c00054000000000000000048c0000000e0a050000000000000000000000000714000380100000800400028008000340000000030900010073797a31000000000900020073797a30000000004c00038018000080140007800c0001006e6f747261636b000400028004000080200000800800034000000001800d000640b665b88e1104a9e19e0000000c0000800800064066af668d6ea2e60011000100"], 0x10c}, 0x1, 0x0, 0x0, 0x8040}, 0x894) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) (async) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r7, 0xe6905000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050300000000000000000700000008000300", @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x24044080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0, 0x8a, 0x0, 0x0, 0x7ff}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="020028bd7000fbdbdf25700000000a00060008021100000000000a005832ace2c19412aaed06"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="6bc1351f65eaebf124f489680253287cb7d644643e15e42b97ad8c7082cb052de628cec2de949f185c80474306ffda3e891e4932eb91934bffd34020919cecf4160a5c86b0fd10d97200d1869fdc80adf5710994cd99ff152ecb35aa22719a5a7c9f437a543312", 0x67}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x388}, 0x800) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="6bc1351f65eaebf124f489680253287cb7d644643e15e42b97ad8c7082cb052de628cec2de949f185c80474306ffda3e891e4932eb91934bffd34020919cecf4160a5c86b0fd10d97200d1869fdc80adf5710994cd99ff152ecb35aa22719a5a7c9f437a543312", 0x67}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x388}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.4.3738'. [ 472.630937][T20867] netlink: 'syz.0.3741': attribute type 61 has an invalid length. [ 472.641999][T20867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3741'. [ 472.856693][T20859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3738'. [ 473.109391][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3749'. [ 473.128630][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 473.167958][T12115] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.180925][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3749'. [ 473.198865][T12115] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.273944][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3749'. [ 473.303947][T12115] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.324906][T12115] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.489211][T20913] syzkaller0: entered promiscuous mode [ 473.494829][T20913] syzkaller0: entered allmulticast mode [ 473.533530][T20916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3756'. [ 474.654555][T20938] netlink: 'syz.2.3761': attribute type 10 has an invalid length. [ 474.702690][T20938] vxcan1: entered promiscuous mode [ 474.708686][T20938] vxcan1: entered allmulticast mode [ 474.714117][T20938] team0: Device vxcan1 is of different type [ 474.757718][T20934] netlink: 'syz.4.3760': attribute type 12 has an invalid length. [ 474.851583][T20948] ip6gretap1: entered promiscuous mode [ 474.858611][T20948] ip6gretap1: entered allmulticast mode [ 474.876232][T20951] ip6tnl1: entered promiscuous mode [ 475.521658][T20975] syzkaller0: entered promiscuous mode [ 475.528306][T20975] syzkaller0: entered allmulticast mode [ 475.625528][T20979] netlink: 'syz.4.3774': attribute type 10 has an invalid length. [ 475.844214][ T7075] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 476.332266][T21003] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 476.470028][ T7075] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 476.689422][T21011] wg1 speed is unknown, defaulting to 1000 [ 476.785896][T21011] lo speed is unknown, defaulting to 1000 [ 477.629433][T21056] __nla_validate_parse: 10 callbacks suppressed [ 477.629458][T21056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3798'. [ 477.904596][T21066] net_ratelimit: 9 callbacks suppressed [ 477.904619][T21066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.024244][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 478.070353][T21074] wg1 speed is unknown, defaulting to 1000 [ 478.071256][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3803'. [ 478.096448][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3803'. [ 478.101993][T21074] lo speed is unknown, defaulting to 1000 [ 478.126682][T21073] xfrm0: entered allmulticast mode [ 478.176331][T21078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3805'. [ 480.491242][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3805'. [ 480.504188][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3805'. [ 480.748301][T21102] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3811'. [ 480.779753][T21104] sit0: entered promiscuous mode [ 480.807116][T21104] netlink: 'syz.2.3812': attribute type 1 has an invalid length. [ 480.824180][T21104] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3812'. [ 481.032517][T21113] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3815'. [ 481.164696][T21117] x_tables: duplicate underflow at hook 3 [ 481.383199][T21119] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3813'. [ 482.090468][T21145] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 482.113561][T21147] pim6reg: entered allmulticast mode [ 482.389889][T21157] netlink: 'syz.3.3829': attribute type 28 has an invalid length. [ 482.414134][T21157] syzkaller1: entered promiscuous mode [ 482.419979][T21157] syzkaller1: entered allmulticast mode [ 482.660498][T21173] xt_TCPMSS: Only works on TCP SYN packets [ 482.679791][T21169] __nla_validate_parse: 3 callbacks suppressed [ 482.679811][T21169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 482.788662][T21177] syzkaller0: entered promiscuous mode [ 482.796707][T21177] syzkaller0: entered allmulticast mode [ 482.902664][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 482.950816][T21173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3834'. [ 483.249961][T21199] bridge0: port 2(vlan2) entered blocking state [ 483.262381][T21199] bridge0: port 2(vlan2) entered disabled state [ 483.284538][T21199] vlan2: entered allmulticast mode [ 483.297908][T21199] bridge0: entered allmulticast mode [ 483.441059][T21199] vlan2: left allmulticast mode [ 483.461786][T21199] bridge0: left allmulticast mode [ 483.657271][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3843'. [ 484.067357][T21234] syzkaller0: entered promiscuous mode [ 484.076080][T21234] syzkaller0: entered allmulticast mode [ 484.108353][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 484.145425][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 484.267422][T21259] netlink: 'syz.4.3852': attribute type 1 has an invalid length. [ 484.302476][T21259] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3852'. [ 484.352689][T21260] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.3851'. [ 486.416852][T21274] syzkaller1: entered promiscuous mode [ 486.424582][T21274] syzkaller1: entered allmulticast mode [ 486.795250][T21310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3860'. [ 486.831163][T21305] netlink: 'syz.3.3861': attribute type 9 has an invalid length. [ 486.840798][T21305] netlink: 'syz.3.3861': attribute type 6 has an invalid length. [ 486.843032][T21310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.871965][T21305] netlink: 'syz.3.3861': attribute type 7 has an invalid length. [ 486.903735][T21305] netlink: 'syz.3.3861': attribute type 8 has an invalid length. [ 487.139019][T21326] can: request_module (can-proto-0) failed. [ 487.266215][T21338] netlink: 'syz.4.3866': attribute type 2 has an invalid length. [ 487.566602][T21304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.583753][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3869'. [ 487.776542][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f33bc00: rx timeout, send abort [ 488.277638][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f33a800: rx timeout, send abort [ 488.286411][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f33bc00: abort rx timeout. Force session deactivation [ 488.420169][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 488.481487][T21374] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.3878'. [ 488.554933][T21382] netlink: 'syz.3.3880': attribute type 21 has an invalid length. [ 488.562872][T21382] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3880'. [ 488.613924][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3880'. [ 488.780134][T21387] No such timeout policy "syz1" [ 488.786373][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f33a800: abort rx timeout. Force session deactivation [ 488.950877][T21393] xt_l2tp: invalid flags combination: 8 [ 488.990435][T21393] vxcan2: entered allmulticast mode [ 489.006185][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3886'. [ 489.266252][T21407] netlink: 'syz.2.3888': attribute type 1 has an invalid length. [ 489.280139][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 489.290426][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 489.542958][T21407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3888'. [ 489.604601][T21411] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.690684][T21411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.710187][T21411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.722473][T21422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3892'. [ 489.850651][T21417] bond3: (slave gretap1): making interface the new active one [ 489.875636][T21417] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 489.953887][T12109] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.971700][T12109] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.019762][T12109] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.030239][T12109] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.051901][T12109] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.071970][T12109] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.112361][T12109] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.139079][T12109] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.305231][T21436] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3897'. [ 490.495418][T21449] netlink: 'syz.1.3899': attribute type 1 has an invalid length. [ 490.544476][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 490.581854][T21454] erspan0: entered promiscuous mode [ 490.591502][T21454] macvtap0: entered promiscuous mode [ 490.601699][T21454] macvtap0: entered allmulticast mode [ 490.612341][T21454] erspan0: entered allmulticast mode [ 490.648005][T21459] erspan0: left allmulticast mode [ 490.655815][T21459] erspan0: left promiscuous mode [ 490.662557][T21462] netlink: 'syz.3.3901': attribute type 21 has an invalid length. [ 490.695708][T21462] IPv6: NLM_F_CREATE should be specified when creating new route [ 490.705710][T21462] netlink: 'syz.3.3901': attribute type 1 has an invalid length. [ 490.727386][T21461] syz_tun: entered promiscuous mode [ 490.734154][T21461] syz_tun: entered allmulticast mode [ 490.891301][T21467] wg1 speed is unknown, defaulting to 1000 [ 490.928221][T21467] lo speed is unknown, defaulting to 1000 [ 490.947390][T21472] syzkaller0: entered promiscuous mode [ 490.955479][T21472] syzkaller0: entered allmulticast mode [ 491.674943][T21500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.682415][T21500] IPv6: NLM_F_CREATE should be set when creating new route [ 491.689721][T21500] IPv6: NLM_F_CREATE should be set when creating new route [ 492.318644][T21514] sctp: [Deprecated]: syz.4.3918 (pid 21514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.318644][T21514] Use struct sctp_sack_info instead [ 492.581484][T21525] netlink: 'syz.3.3921': attribute type 2 has an invalid length. [ 492.594485][T21525] netlink: 'syz.3.3921': attribute type 2 has an invalid length. [ 492.676332][T21529] netlink: 'syz.2.3922': attribute type 1 has an invalid length. [ 493.409097][T21563] xt_hashlimit: size too large, truncated to 1048576 [ 493.887353][T21575] __nla_validate_parse: 9 callbacks suppressed [ 493.887374][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3934'. [ 493.963650][T21581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3936'. [ 494.213449][T21590] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3938'. [ 494.470641][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'. [ 494.482417][T21607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3942'. [ 494.517117][T21611] netlink: 'syz.0.3941': attribute type 13 has an invalid length. [ 494.525170][T21611] netlink: 'syz.0.3941': attribute type 17 has an invalid length. [ 494.552218][T21607] netlink: 'syz.2.3942': attribute type 20 has an invalid length. [ 494.596629][T21602] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.604512][T21602] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.640783][T21618] netlink: 876 bytes leftover after parsing attributes in process `syz.4.3946'. [ 494.655614][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 494.851240][T21602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.869092][T21602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.019281][T21611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.029125][T21611] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.040742][T21611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.102475][T12141] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.121048][T12141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.164138][T12141] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.204270][T12141] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.230379][T21625] wg1 speed is unknown, defaulting to 1000 [ 495.240486][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3948'. [ 495.255428][T21625] lo speed is unknown, defaulting to 1000 [ 495.279626][T21640] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3950'. [ 495.939293][T21670] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3957'. [ 495.979004][T21670] netlink: 'syz.4.3957': attribute type 1 has an invalid length. [ 496.921858][T21706] netlink: 'syz.2.3968': attribute type 2 has an invalid length. [ 496.937845][T21706] d2: entered promiscuous mode [ 496.998356][T21714] xt_hashlimit: size too large, truncated to 1048576 [ 497.074810][T21708] tipc: Started in network mode [ 497.093903][T21708] tipc: Node identity 9aa17bdc08f3, cluster identity 4711 [ 497.101320][T21708] tipc: Enabled bearer , priority 0 [ 497.154880][T21716] syzkaller0: entered promiscuous mode [ 497.160413][T21716] syzkaller0: entered allmulticast mode [ 497.188073][T21708] tipc: Resetting bearer [ 497.245715][T21707] tipc: Resetting bearer [ 497.298159][T21707] tipc: Disabling bearer [ 497.398495][T21732] netlink: 'syz.1.3974': attribute type 1 has an invalid length. [ 497.575098][T21740] syzkaller1: entered promiscuous mode [ 497.582992][T21740] syzkaller1: entered allmulticast mode [ 497.723586][T21740] syzkaller0: entered promiscuous mode [ 497.729440][T21740] syzkaller0: entered allmulticast mode [ 498.655287][ T5830] Bluetooth: hci0: command 0x0401 tx timeout [ 498.658580][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 499.039520][T21820] __nla_validate_parse: 9 callbacks suppressed [ 499.039617][T21820] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3998'. [ 499.240317][T21829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4000'. [ 499.386961][T21829] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.4000'. [ 499.407426][T21829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4000'. [ 499.429947][T21846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4004'. [ 499.906236][T21867] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4010'. [ 500.073511][T21874] x_tables: duplicate underflow at hook 3 [ 500.249146][T21881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4014'. [ 500.260786][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4015'. [ 500.285022][T21884] netlink: 'syz.3.4015': attribute type 1 has an invalid length. [ 500.368064][T21881] macvtap1: entered promiscuous mode [ 500.384416][T21881] veth1_to_hsr: entered promiscuous mode [ 500.392521][T21881] macvtap1: entered allmulticast mode [ 500.398871][T21881] veth1_to_hsr: entered allmulticast mode [ 500.525296][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4017'. [ 500.579356][T21896] netlink: 'syz.3.4017': attribute type 29 has an invalid length. [ 501.254190][T21937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4028'. [ 502.545266][T22012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 502.564647][T22012] syzkaller1: linktype set to 805 [ 503.224475][T22029] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 503.362208][T22045] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 503.437152][T22045] bond2 (unregistering): Released all slaves [ 504.139594][T22079] __nla_validate_parse: 3 callbacks suppressed [ 504.139615][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'. [ 504.245390][T22081] syzkaller0: entered promiscuous mode [ 504.251155][T22081] syzkaller0: entered allmulticast mode [ 504.262240][T22081] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4066'. [ 504.309970][T22087] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 504.419108][T22083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4069'. [ 504.667450][T22095] wg1 speed is unknown, defaulting to 1000 [ 504.686110][T22095] lo speed is unknown, defaulting to 1000 [ 504.736455][T22097] IPv6: NLM_F_REPLACE set, but no existing node found! [ 504.889707][T22108] netlink: 'syz.1.4075': attribute type 4 has an invalid length. [ 505.449985][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4081'. [ 505.794608][T22158] netlink: 'syz.4.4087': attribute type 1 has an invalid length. [ 506.066572][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4092'. [ 506.342042][ T29] audit: type=1107 audit(1776007614.818:12): pid=22185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='…¤v¸Ç×N@ÏçAÇÀQ¶¯:2h'ÚÐx„0Ù Ðû€ð‹&;ByX*¶`!-¶–¨÷ÕþIjJ¥ [ 506.342042][ T29] fÀšôÙªë…Ì”Ú'sÚ.ö6ù‚ެʢ¸ÿKšÃQ" [ 506.342042][ T29] ±~5FÎ ­{•G|ÐðzŒgWŽÏÈT$¤*qíW?0UŠ¿¨îC~?ÞwºZyïŒ(¦¿ù]a;ˆû…L·OûPd÷ù,¨ÖÕàVk)FüßÕ' [ 506.376134][T22187] netlink: 'syz.3.4098': attribute type 39 has an invalid length. [ 506.379625][T22188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4097'. [ 506.450865][T22188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4097'. [ 506.580660][T22201] batadv_slave_1: entered promiscuous mode [ 506.588229][T22200] batadv_slave_1: left promiscuous mode [ 506.711312][T22209] netlink: 'syz.1.4103': attribute type 1 has an invalid length. [ 506.719484][T22209] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4103'. [ 506.755513][T22211] wg1 speed is unknown, defaulting to 1000 [ 506.802374][T22211] lo speed is unknown, defaulting to 1000 [ 506.851235][T22220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.197825][T22234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4109'. [ 507.414164][T22243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4111'. [ 507.454601][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.763300][T22260] macvlan2: entered allmulticast mode [ 507.797931][T22260] hsr0: entered allmulticast mode [ 507.803029][T22260] hsr_slave_0: entered allmulticast mode [ 507.821531][T22260] hsr_slave_1: entered allmulticast mode [ 507.869383][T22262] vlan2: entered promiscuous mode [ 507.936520][ T7077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.572179][T22300] netlink: 'syz.2.4124': attribute type 9 has an invalid length. [ 508.624442][T22303] netlink: 'syz.4.4123': attribute type 39 has an invalid length. [ 508.977992][ T7077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.315956][T22332] __nla_validate_parse: 60 callbacks suppressed [ 509.315977][T22332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4131'. [ 509.374933][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.428608][T22337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4133'. [ 509.480004][T22338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'. [ 509.606710][T22344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4135'. [ 509.649699][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4137'. [ 509.755595][T22353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4138'. [ 510.015832][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.494195][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.548702][T22388] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4144'. [ 510.566466][T22386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.662472][T22386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.765720][T22386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.873318][T22386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.898602][T22399] erspan0: entered promiscuous mode [ 510.974387][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 511.051009][T12141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.060700][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.083425][T12141] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.094291][T22405] netlink: 'syz.3.4152': attribute type 12 has an invalid length. [ 511.102917][T22405] netlink: 'syz.3.4152': attribute type 29 has an invalid length. [ 511.111484][T22405] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4152'. [ 511.124255][T22405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4152'. [ 511.148399][T12123] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.192428][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4153'. [ 511.209442][T12141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.288712][T22407] bond3: entered promiscuous mode [ 511.300323][T22407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.309210][T12141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.351822][T12141] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.368102][T12127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.379076][T12127] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.384798][T22418] netlink: 'syz.1.4155': attribute type 7 has an invalid length. [ 511.432009][T22420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.505234][T22420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.568305][T22429] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 511.658195][T22429] bond4: entered promiscuous mode [ 511.671937][T22429] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.742437][T22435] vlan4: entered allmulticast mode [ 511.747824][T22435] bond4: entered allmulticast mode [ 511.836649][T22429] bond4: (slave bridge2): making interface the new active one [ 511.856737][T22429] bridge2: entered promiscuous mode [ 511.865927][T22429] bridge2: entered allmulticast mode [ 511.895069][T22429] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 512.010717][T22448] vxcan3: entered promiscuous mode [ 512.099955][ T7077] net_ratelimit: 15 callbacks suppressed [ 512.099976][ T7077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.300936][T22458] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.309157][T22458] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.740953][T22458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.787851][T22458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.845390][T22458] tipc: Resetting bearer [ 512.976622][T22458] bond1: left allmulticast mode [ 513.027458][ T165] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.054356][ T165] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.134558][ T7077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.212506][T22494] syzkaller0: entered promiscuous mode [ 513.220393][T22494] syzkaller0: entered allmulticast mode [ 513.247909][ T75] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.292708][ T75] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.534400][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.576088][T22511] nbd1: detected capacity change from 0 to 127 [ 513.591737][ T5827] block nbd1: Receive control failed (result -32) [ 513.591737][ T5829] block nbd1: Receive control failed (result -104) [ 514.177818][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.216269][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.945249][T22556] __nla_validate_parse: 5 callbacks suppressed [ 515.945271][T22556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4181'. [ 516.047474][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4183'. [ 516.112638][T22585] xt_policy: neither incoming nor outgoing policy selected [ 516.144965][T22588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4187'. [ 516.254259][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.356976][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.365506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.477499][T22609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4193'. [ 516.574498][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.598997][T22620] dummy0: entered promiscuous mode [ 516.607424][T22620] vlan0: entered promiscuous mode [ 516.651343][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4195'. [ 517.052173][T22646] bond2: option tlb_dynamic_lb: invalid value (5) [ 517.099321][T22646] bond2 (unregistering): Released all slaves [ 517.240998][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4207'. [ 517.294331][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.303200][T22660] netlink: 'syz.0.4208': attribute type 12 has an invalid length. [ 517.329786][T22660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4208'. [ 517.361942][T22663] dvmrp0: entered allmulticast mode [ 517.459303][T22670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4211'. [ 517.846530][T22699] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 517.882397][T22700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4218'. [ 517.896712][T22702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4217'. [ 517.967728][T22706] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 (while UP) [ 518.013492][T22706] batadv_slave_0: entered promiscuous mode [ 518.074595][T22705] batadv_slave_0: left promiscuous mode [ 518.335302][ T7078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.750870][T22754] netlink: 'syz.4.4231': attribute type 20 has an invalid length. [ 518.920454][T22762] netlink: 'syz.0.4234': attribute type 2 has an invalid length. [ 518.956356][T22761] netlink: 'syz.0.4234': attribute type 3 has an invalid length. [ 518.982162][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.985477][T22761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.143868][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 519.300568][T22780] xt_l2tp: invalid flags combination: 0 [ 519.374327][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.616061][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.187750][T22803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.197503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.414283][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.615627][T22819] wg1 speed is unknown, defaulting to 1000 [ 520.634494][T22819] lo speed is unknown, defaulting to 1000 [ 520.971600][T22841] __nla_validate_parse: 15 callbacks suppressed [ 520.971625][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4252'. [ 521.857493][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 521.922340][T22876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4265'. [ 521.961927][T22883] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4264'. [ 521.982738][T22876] netlink: 'syz.4.4265': attribute type 14 has an invalid length. [ 522.031887][T22880] wg1 speed is unknown, defaulting to 1000 [ 522.071482][T22880] lo speed is unknown, defaulting to 1000 [ 522.494441][ T7075] net_ratelimit: 48 callbacks suppressed [ 522.494464][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.654309][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.730761][T22916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4273'. [ 522.740874][T22916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4273'. [ 523.392161][T22930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4277'. [ 523.534216][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.604767][T22930] syzkaller0: entered promiscuous mode [ 523.610804][T22930] syzkaller0: entered allmulticast mode [ 523.636161][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.643838][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.650621][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.657410][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.664668][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.671445][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.678369][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.685167][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.692067][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.698907][T22930] tc action pedit offset must be on 32 bit boundaries [ 523.705893][T22930] 0: reclassify loop, rule prio 0, protocol 800 [ 524.156194][T22950] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4281'. [ 524.248764][T22952] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4282'. [ 524.259026][T22952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4282'. [ 524.577571][ T7077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.670442][T22972] netlink: 'syz.3.4290': attribute type 1 has an invalid length. [ 524.726735][T22972] bond3: entered promiscuous mode [ 524.732470][T22972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.878801][T22985] openvswitch: netlink: Unknown nsh attribute 0 [ 525.210438][T22998] netlink: 'syz.0.4299': attribute type 1 has an invalid length. [ 525.234200][T22996] tunl0: Caught tx_queue_len zero misconfig [ 525.240618][T22996] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 525.257702][T23000] netlink: 'syz.2.4300': attribute type 1 has an invalid length. [ 525.267587][T23000] netlink: 'syz.2.4300': attribute type 6 has an invalid length. [ 525.276977][T23000] netlink: 'syz.2.4300': attribute type 3 has an invalid length. [ 525.338674][T23002] xt_hashlimit: size too large, truncated to 1048576 [ 525.615290][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.694172][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.179416][T23035] __nla_validate_parse: 3 callbacks suppressed [ 526.179439][T23035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4311'. [ 526.242702][T23035] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4311'. [ 526.252338][T23035] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 526.275042][T23039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4312'. [ 526.314065][T23039] netem: unknown loss type 11 [ 526.319435][T23039] netem: change failed [ 526.654599][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.849103][T23060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4316'. [ 527.152693][T23072] netlink: 'syz.3.4319': attribute type 39 has an invalid length. [ 527.362098][T23081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'. [ 527.439603][T23079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4323'. [ 527.553414][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 527.576748][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4324'. [ 527.608451][T23086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4325'. [ 527.634088][T23086] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4325'. [ 527.695538][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.932787][T23105] sctp: [Deprecated]: syz.2.4329 (pid 23105) Use of int in maxseg socket option. [ 527.932787][T23105] Use struct sctp_assoc_value instead [ 528.270278][T23099] syzkaller0: entered promiscuous mode [ 528.278731][T23099] syzkaller0: entered allmulticast mode [ 528.614047][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.703349][T23119] nftables ruleset with unbound chain [ 528.735336][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.750202][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.996643][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.022376][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.068168][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.100324][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.297829][T23149] netlink: 'syz.0.4343': attribute type 3 has an invalid length. [ 529.324254][T23149] netlink: 'syz.0.4343': attribute type 1 has an invalid length. [ 529.675814][T23154] IPVS: Scheduler module ip_vs_sip not found [ 529.778326][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.860625][T23171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.911884][T23171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.938990][T23171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.996625][T23172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.037301][T23172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.300646][T23199] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 530.728920][T23227] sctp: [Deprecated]: syz.3.4362 (pid 23227) Use of int in max_burst socket option deprecated. [ 530.728920][T23227] Use struct sctp_assoc_value instead [ 531.385285][T23244] netlink: 'syz.4.4364': attribute type 1 has an invalid length. [ 531.452844][T23244] bond2: entered promiscuous mode [ 531.460034][T23244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.524107][T23248] __nla_validate_parse: 9 callbacks suppressed [ 531.524129][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4364'. [ 531.560762][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4364'. [ 531.598664][T23248] bond2: (slave bridge3): making interface the new active one [ 531.606734][T23248] bridge3: entered promiscuous mode [ 531.673181][T23248] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 531.752470][T23258] team0: entered promiscuous mode [ 531.758119][T23258] team_slave_0: entered promiscuous mode [ 531.775968][T23258] team_slave_1: entered promiscuous mode [ 532.006377][T23266] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4368'. [ 532.224683][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 532.270865][T23269] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 532.894253][ T7075] net_ratelimit: 6 callbacks suppressed [ 532.894277][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.263104][T23198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.536503][T23273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4370'. [ 533.601581][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4372'. [ 533.814356][T23282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4374'. [ 533.935766][ T7075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.956863][T23290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.024674][T23294] netlink: 'syz.1.4379': attribute type 1 has an invalid length. [ 534.185734][T23294] bond5: entered promiscuous mode [ 534.228108][T23294] bond5: entered allmulticast mode [ 534.260557][T23294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.287978][T23308] netlink: 'syz.2.4382': attribute type 13 has an invalid length. [ 534.327429][T23297] macvlan2: entered promiscuous mode [ 534.347539][T23297] macvlan2: entered allmulticast mode [ 534.366318][T23297] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 534.591270][T23308] bridge0: port 3(bond0) entered disabled state [ 534.599666][T23308] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.607494][T23308] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.700817][T23316] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 534.904100][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4386'. [ 534.945019][T23308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.976735][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.016902][T23308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.084624][T23344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4386'. [ 535.323273][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 535.425145][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.456031][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.474260][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.517761][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.543733][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.571985][T23348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.607871][T23346] tipc: Started in network mode [ 535.613115][T23346] tipc: Node identity ae8f4987931a, cluster identity 4711 [ 535.633519][T23346] tipc: Enabled bearer , priority 0 [ 535.658315][T23349] syzkaller0: entered promiscuous mode [ 535.674046][T23349] syzkaller0: entered allmulticast mode [ 535.777903][T23346] tipc: Resetting bearer [ 535.784279][T23346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.795619][T23359] wg1 speed is unknown, defaulting to 1000 [ 535.803745][T23359] lo speed is unknown, defaulting to 1000 [ 535.879108][T23360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.923928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.996145][T23366] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 536.014177][ T7077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.418974][T23345] tipc: Resetting bearer [ 536.450461][T23345] tipc: Disabling bearer [ 536.470473][T23374] wg1 speed is unknown, defaulting to 1000 [ 536.574090][T23374] lo speed is unknown, defaulting to 1000 [ 536.752836][T23368] lec:lec_atm_send: lec0: Unknown message type 11 [ 536.776698][T23367] lec:lec_atm_close: lec0: Shut down! [ 536.869135][T23391] __nla_validate_parse: 6 callbacks suppressed [ 536.869158][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4400'. [ 537.471945][T23413] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 537.508400][T23413] syzkaller1: linktype set to 769 [ 537.913297][T23432] ipt_REJECT: ECHOREPLY no longer supported. [ 538.006538][T23435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4408'. [ 538.068338][T23435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4408'. [ 538.099718][ T5984] net_ratelimit: 4 callbacks suppressed [ 538.099740][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.174230][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.328708][T23438] wg1 speed is unknown, defaulting to 1000 [ 538.364155][T23438] lo speed is unknown, defaulting to 1000 [ 538.512316][T23448] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 538.525508][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.836422][ T5984] lec:lec_start_xmit: lec0:No lecd attached [ 538.867426][T23456] netlink: 'syz.3.4415': attribute type 2 has an invalid length. [ 538.879009][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 538.919514][T23456] netlink: 'syz.3.4415': attribute type 1 has an invalid length. [ 538.938377][T23456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.986586][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 539.940609][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.567738][T23500] bond5: option fail_over_mac: invalid value (127) [ 540.614898][T23500] bond5 (unregistering): Released all slaves [ 540.975390][T23510] netlink: 'syz.2.4424': attribute type 1 has an invalid length. [ 541.079983][T23510] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 541.152643][T23520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4425'. [ 541.311750][T23523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4427'. [ 541.640660][T23538] xt_CT: No such helper "snmp_trap" [ 541.665553][T23544] openvswitch: netlink: Key type 127 is out of range max 32 [ 541.678965][T23545] openvswitch: netlink: Key type 127 is out of range max 32 [ 541.770279][T23548] xt_hashlimit: size too large, truncated to 1048576 [ 541.818982][T23549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4433'. [ 541.831613][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4433'. [ 543.284981][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 543.313979][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 543.324018][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4449'. [ 543.406904][T23598] team0: Device macsec0 is already an upper device of the team interface [ 543.430508][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 543.448692][T23604] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4450'. [ 543.460174][T23595] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4448'. [ 543.513980][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 543.572809][T23595] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4448'. [ 543.631446][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 543.726968][T23611] rdma_rxe: rxe_newlink: failed to add lo [ 543.857981][T23618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4452'. [ 543.938187][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 543.948672][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 543.956334][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 543.964132][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 543.972338][ T1705] block nbd1: Dead connection, failed to find a fallback [ 543.982144][ T1705] block nbd1: shutting down sockets [ 543.991711][ T1705] blk_print_req_error: 138 callbacks suppressed [ 543.991731][ T1705] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.010920][ T1705] buffer_io_error: 138 callbacks suppressed [ 544.010943][ T1705] Buffer I/O error on dev nbd1, logical block 3, async page read [ 544.027165][ T1705] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.036778][ T1705] Buffer I/O error on dev nbd1, logical block 2, async page read [ 544.045094][ T1705] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.056563][ T1705] Buffer I/O error on dev nbd1, logical block 1, async page read [ 544.064723][ T1705] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.083887][ T1705] Buffer I/O error on dev nbd1, logical block 0, async page read [ 544.095587][T22536] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.107262][T22536] Buffer I/O error on dev nbd1, logical block 0, async page read [ 544.123928][T22536] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.133462][T22536] Buffer I/O error on dev nbd1, logical block 1, async page read [ 544.192362][T22536] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.243583][T22536] Buffer I/O error on dev nbd1, logical block 2, async page read [ 544.281075][T23627] tc_dump_action: action bad kind [ 544.294032][T22536] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.303743][T22536] Buffer I/O error on dev nbd1, logical block 3, async page read [ 544.321935][T22536] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.343864][T22536] Buffer I/O error on dev nbd1, logical block 0, async page read [ 544.351734][T22536] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.382111][T22536] Buffer I/O error on dev nbd1, logical block 1, async page read [ 544.416747][T22536] ldm_validate_partition_table(): Disk read failed. [ 544.445088][T22536] Dev nbd1: unable to read RDB block 0 [ 544.465352][T22536] nbd1: unable to read partition table [ 544.508112][T22536] ldm_validate_partition_table(): Disk read failed. [ 544.540179][T22536] Dev nbd1: unable to read RDB block 0 [ 544.563439][T22536] nbd1: unable to read partition table [ 544.573899][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 544.582853][ C0] lec:lec_tx_timeout: lec0 [ 544.589901][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 544.720782][T23639] wg1 speed is unknown, defaulting to 1000 [ 544.788267][T23639] lo speed is unknown, defaulting to 1000 [ 545.279567][T23659] netlink: 'syz.3.4464': attribute type 4 has an invalid length. [ 545.280269][T23660] netlink: 'syz.3.4464': attribute type 4 has an invalid length. [ 545.291205][T23656] block nbd0: NBD_DISCONNECT [ 545.333586][T23656] block nbd0: Send disconnect failed -32 [ 545.353323][T23656] block nbd0: shutting down sockets [ 545.631607][T12141] dvmrp1: left allmulticast mode [ 545.718445][T23670] netlink: 'syz.3.4468': attribute type 1 has an invalid length. [ 546.303754][T12141] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 546.314312][T12141] bridge3 (unregistering): left promiscuous mode [ 546.320976][T12141] bridge3 (unregistering): left allmulticast mode [ 546.497536][T12141] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 546.510375][T12141] bond0 (unregistering): Released all slaves [ 546.527834][T12141] bond1 (unregistering): Released all slaves [ 546.550631][T12141] bond2 (unregistering): Released all slaves [ 546.586062][T12141] bond3 (unregistering): Released all slaves [ 546.624319][T12141] bond4 (unregistering): Released all slaves [ 546.657146][T12141] bond5 (unregistering): Released all slaves [ 546.677419][T12141] bond6 (unregistering): Released all slaves [ 546.698223][T23668] tipc: Enabled bearer , priority 0 [ 546.737970][T23670] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 546.738528][T23674] syzkaller0: entered promiscuous mode [ 546.753084][T23674] syzkaller0: entered allmulticast mode [ 546.850768][T23687] netlink: 'syz.2.4470': attribute type 1 has an invalid length. [ 546.861746][T23683] tipc: Resetting bearer [ 546.886315][T23665] tipc: Resetting bearer [ 546.944668][T23665] tipc: Disabling bearer [ 547.010837][T12141] : left promiscuous mode [ 547.042726][T23694] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 547.140314][T12141] tipc: Disabling bearer [ 547.183669][T12141] tipc: Left network mode [ 547.511827][T23718] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 547.618654][T23702] syzkaller1: entered promiscuous mode [ 547.656297][T23702] syzkaller1: entered allmulticast mode [ 547.775844][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 548.602668][T23744] wg1 speed is unknown, defaulting to 1000 [ 548.615150][T23744] lo speed is unknown, defaulting to 1000 [ 549.418148][T23770] __nla_validate_parse: 11 callbacks suppressed [ 549.418172][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 549.520800][T12141] hsr_slave_0: left promiscuous mode [ 549.529194][T12141] hsr_slave_1: left promiscuous mode [ 549.586300][T23781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4495'. [ 550.243596][T23770] gtp0: entered promiscuous mode [ 550.248831][T23770] gtp0: entered allmulticast mode [ 550.333940][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 550.342043][ C0] lec:lec_tx_timeout: lec0 [ 550.347440][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 550.816897][T23807] tap0: tun_chr_ioctl cmd 1074812118 [ 550.905170][T23809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4502'. [ 550.974083][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.482710][T12141] IPVS: stop unused estimator thread 0... [ 551.720173][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4506'. [ 551.779319][T23838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4506'. [ 552.210361][T23868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4512'. [ 552.469299][T23879] netlink: 996 bytes leftover after parsing attributes in process `syz.1.4517'. [ 552.515709][T23878] lo: entered allmulticast mode [ 552.627475][T23885] netlink: zone id is out of range [ 552.632974][T23885] netlink: zone id is out of range [ 552.646229][T23885] netlink: zone id is out of range [ 552.663700][T23885] netlink: zone id is out of range [ 552.685360][T23885] netlink: zone id is out of range [ 552.709381][T23885] netlink: zone id is out of range [ 552.830577][T23898] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4523'. [ 552.998278][T23902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.271417][T23916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 553.420767][T23916] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.670083][T23927] syzkaller0: entered promiscuous mode [ 553.706436][T23927] syzkaller0: entered allmulticast mode [ 553.728618][T23933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4528'. [ 553.738101][T23929] lo speed is unknown, defaulting to 1000 [ 553.940975][T23949] bond0: entered promiscuous mode [ 553.947721][T23949] bond_slave_0: entered promiscuous mode [ 553.975124][T23949] bond_slave_1: entered promiscuous mode [ 553.981232][T23949] dummy0: entered promiscuous mode [ 554.117125][T23960] block nbd0: not configured, cannot reconfigure [ 554.131504][T23950] lo speed is unknown, defaulting to 1000 [ 554.164883][T23949] block nbd0: not configured, cannot reconfigure [ 554.345188][T23951] lo speed is unknown, defaulting to 1000 [ 554.446489][T23971] __nla_validate_parse: 2 callbacks suppressed [ 554.446511][T23971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4537'. [ 556.093837][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 556.101995][ C0] lec:lec_tx_timeout: lec0 [ 556.108370][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 556.191874][T24033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4551'. [ 556.225404][T24036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4552'. [ 556.265297][T24036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4552'. [ 556.378406][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4554'. [ 556.422679][T24039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4552'. [ 556.847947][T24058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.170641][T24070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4558'. [ 557.440029][T24060] lo speed is unknown, defaulting to 1000 [ 558.362530][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4568'. [ 558.523211][T24113] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4569'. [ 558.996680][T24129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4574'. [ 559.225841][T24129] bond4: entered promiscuous mode [ 559.246837][T24129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.305383][T24134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.312743][T24134] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 559.329014][T24134] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 559.522154][T24139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.535427][T24139] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.548352][T24139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.718183][T24139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.977398][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4576'. [ 559.986433][T24151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4576'. [ 559.995952][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4576'. [ 560.037556][T24151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4576'. [ 560.132069][T24165] netlink: 'syz.1.4577': attribute type 1 has an invalid length. [ 560.140101][T24165] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4577'. [ 560.374781][T24169] vlan4: entered allmulticast mode [ 560.392408][T24169] bond0: entered allmulticast mode [ 560.408368][T24169] bond_slave_0: entered allmulticast mode [ 560.425787][T24169] bond_slave_1: entered allmulticast mode [ 560.591709][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4583'. [ 560.672353][T24175] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 560.862548][T24193] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4588'. [ 560.997663][T24193] ip6t_srh: unknown srh match flags 4000 [ 561.143843][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 561.152085][ C0] lec:lec_tx_timeout: lec0 [ 561.157197][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 561.229501][T24214] erspan0: entered promiscuous mode [ 561.368562][T24210] netlink: 'syz.4.4594': attribute type 5 has an invalid length. [ 561.605070][T24239] syzkaller0: entered promiscuous mode [ 561.610727][T24239] syzkaller0: entered allmulticast mode [ 562.038094][T24268] netlink: 'syz.3.4606': attribute type 4 has an invalid length. [ 562.116372][T24275] netlink: 'syz.3.4606': attribute type 4 has an invalid length. [ 562.170029][T24272] lo speed is unknown, defaulting to 1000 [ 563.049158][T24301] ip6gretap0: mtu less than device minimum [ 563.057381][T24301] netlink: 'syz.3.4611': attribute type 1 has an invalid length. [ 563.129703][T24301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.410888][T24308] bond5: (slave geneve3): making interface the new active one [ 563.423253][T24308] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 563.451551][T24318] : entered promiscuous mode [ 563.526197][T24320] lo speed is unknown, defaulting to 1000 [ 563.840338][T24339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4618'. [ 563.852247][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 564.184902][T24337] lo speed is unknown, defaulting to 1000 [ 564.242401][T24345] bridge0: entered promiscuous mode [ 564.252863][T24345] macvlan4: entered allmulticast mode [ 564.258904][T24345] bridge0: entered allmulticast mode [ 564.265819][T24345] bridge0: port 3(macvlan4) entered blocking state [ 564.272692][T24345] bridge0: port 3(macvlan4) entered disabled state [ 564.299786][T24345] bridge0: left allmulticast mode [ 564.325708][T24345] bridge0: left promiscuous mode [ 564.393475][T24352] sctp: [Deprecated]: syz.1.4622 (pid 24352) Use of int in max_burst socket option deprecated. [ 564.393475][T24352] Use struct sctp_assoc_value instead [ 564.416422][T24352] xt_ecn: cannot match TCP bits for non-tcp packets [ 564.960709][T24373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4625'. [ 565.254990][T24380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4626'. [ 565.288550][T24381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4626'. [ 565.318636][T24383] netlink: 'syz.1.4627': attribute type 10 has an invalid length. [ 566.163809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 566.172046][ C0] lec:lec_tx_timeout: lec0 [ 566.178110][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 566.353015][T24412] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4631'. [ 566.364307][T24412] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4631'. [ 567.586940][T24468] lo speed is unknown, defaulting to 1000 [ 567.623556][T24476] macvtap0: entered allmulticast mode [ 567.639522][T24476] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 568.084078][T24478] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 568.167604][T24478] syzkaller0: entered promiscuous mode [ 568.185804][T24478] syzkaller0: entered allmulticast mode [ 568.424122][T24493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4648'. [ 568.433441][T24493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4648'. [ 569.478901][T24539] lo speed is unknown, defaulting to 1000 [ 569.659908][T24548] lo speed is unknown, defaulting to 1000 [ 569.784739][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'. [ 569.832153][T24553] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4662'. [ 570.144663][ T5829] Bluetooth: hci1: link tx timeout [ 570.150641][ T5829] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 570.317782][T24570] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4667'. [ 570.563734][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4668'. [ 570.636757][T24543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4660'. [ 570.724320][T24588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4660'. [ 570.923500][T24595] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4670'. [ 570.936169][T24595] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 570.954967][T24595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4670'. [ 571.203816][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 571.212036][ C0] lec:lec_tx_timeout: lec0 [ 571.217094][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 571.329733][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4672'. [ 572.032452][T24637] sit0: left promiscuous mode [ 572.054364][T24637] geneve2: left allmulticast mode [ 572.068922][T24637] ip6gretap1: left promiscuous mode [ 572.072129][T24647] openvswitch: netlink: Unknown key attributes 2 [ 572.092313][T24637] ip6gretap1: left allmulticast mode [ 572.103630][T24637] macvtap0: left promiscuous mode [ 572.109239][T24637] macvtap0: left allmulticast mode [ 572.115671][T24637] bond4: left promiscuous mode [ 572.120828][T24637] bridge2: left promiscuous mode [ 572.127791][T24637] vlan4: left allmulticast mode [ 572.132938][T24637] bond4: left allmulticast mode [ 572.143246][T24637] bridge2: left allmulticast mode [ 572.150191][T24637] gtp0: left promiscuous mode [ 572.164382][T24637] gtp0: left allmulticast mode [ 572.174087][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 572.439313][T24658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4682'. [ 572.484883][T24658] tipc: Enabled bearer , priority 10 [ 572.775664][T24667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4683'. [ 572.812106][T24673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4687'. [ 572.971991][T24673] lo speed is unknown, defaulting to 1000 [ 573.659388][ T7078] tipc: Node number set to 1033193863 [ 574.771607][T24747] mac80211_hwsim hwsim53 syzkaller0: left promiscuous mode [ 574.779429][T24747] mac80211_hwsim hwsim53 syzkaller0: left allmulticast mode [ 574.919869][T24750] netlink: 'syz.0.4700': attribute type 5 has an invalid length. [ 575.231400][T24767] team0: entered allmulticast mode [ 575.278240][T24767] team_slave_0: entered allmulticast mode [ 575.304417][T24767] team_slave_1: entered allmulticast mode [ 575.347287][T24767] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 575.525236][T24774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.772374][T24785] __nla_validate_parse: 3 callbacks suppressed [ 575.772396][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4707'. [ 575.801767][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4707'. [ 575.815759][T24785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 576.188955][T24804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4712'. [ 576.191606][T24798] syzkaller0: entered promiscuous mode [ 576.223819][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 576.231926][ C0] lec:lec_tx_timeout: lec0 [ 576.236926][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 576.243886][T24798] syzkaller0: entered allmulticast mode [ 576.265413][T24797] delete_channel: no stack [ 576.284449][T24809] Bluetooth: MGMT ver 1.23 [ 576.456427][T24815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4714'. [ 578.298919][T24813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4715'. [ 578.308303][T24813] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 578.401581][T24825] lo speed is unknown, defaulting to 1000 [ 578.596648][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4720'. [ 578.673382][T24834] bridge0: entered promiscuous mode [ 578.689895][T24834] bridge0: port 3(macsec0) entered blocking state [ 578.764035][T24834] bridge0: port 3(macsec0) entered disabled state [ 578.770952][T24834] macsec0: entered allmulticast mode [ 578.814637][T24834] bridge0: entered allmulticast mode [ 578.885264][T24834] macsec0: left allmulticast mode [ 578.890468][T24834] bridge0: left allmulticast mode [ 578.960088][T24834] bridge0: left promiscuous mode [ 579.019475][T24836] vti0: entered promiscuous mode [ 579.045434][T24836] vti0: entered allmulticast mode [ 579.256648][T24860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.627797][T24878] netlink: 'syz.1.4726': attribute type 10 has an invalid length. [ 579.664090][T24841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4721'. [ 579.729985][T24882] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4728'. [ 579.759975][T24882] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4728'. [ 579.901234][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4729'. [ 580.142144][T24907] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 581.243804][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 581.251867][ C0] lec:lec_tx_timeout: lec0 [ 581.260756][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 581.448824][T24960] __nla_validate_parse: 4 callbacks suppressed [ 581.448847][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 581.773371][T24969] x_tables: duplicate underflow at hook 3 [ 582.287659][T24987] veth0: entered promiscuous mode [ 582.295310][T24987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4752'. [ 582.313991][T24986] veth0: left promiscuous mode [ 582.626629][T25006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4755'. [ 582.660103][T24990] bond1: Removing last ns target with arp_interval on [ 583.218837][T25016] netlink: 'syz.3.4758': attribute type 1 has an invalid length. [ 583.361216][T25016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.449708][T25017] veth3: entered promiscuous mode [ 583.487905][T25017] bond6: (slave veth3): Enslaving as an active interface with an up link [ 583.690617][T25040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4763'. [ 583.819310][T25040] bond7: (slave vcan0): refused to change device type [ 583.905757][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4765'. [ 583.955374][T25049] netlink: 'syz.0.4765': attribute type 1 has an invalid length. [ 584.108062][T25049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.150088][ T5489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.239834][T25065] netlink: 'syz.0.4765': attribute type 1 has an invalid length. [ 584.257660][T25055] bond4: (slave veth9): Enslaving as an active interface with a down link [ 584.308461][T25049] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 584.336562][T25049] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 584.377719][T25070] tipc: Resetting bearer [ 584.407606][T25070] netlink: 'syz.4.4769': attribute type 9 has an invalid length. [ 584.557255][T25083] hmó3)óÿ: entered promiscuous mode [ 584.606625][T25087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4774'. [ 584.657674][T25091] netlink: 'syz.0.4775': attribute type 61 has an invalid length. [ 584.677557][T25091] netlink: 'syz.0.4775': attribute type 29 has an invalid length. [ 584.725548][T25091] netlink: 'syz.0.4775': attribute type 62 has an invalid length. [ 584.741840][T25095] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 584.769708][T25095] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 584.784316][T25099] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4777'. [ 584.815918][T25099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.238415][T25122] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.4780'. [ 585.915962][T25150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4788'. [ 586.277939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 586.286241][ C0] lec:lec_tx_timeout: lec0 [ 586.290986][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 587.635882][T25155] erspan0: entered promiscuous mode [ 588.106476][T25189] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4798'. [ 588.110884][T25193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4799'. [ 588.125237][T25194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4799'. [ 588.232008][T25200] xt_hashlimit: size too large, truncated to 1048576 [ 588.270638][T25204] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 588.289814][T25206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4800'. [ 588.595947][T25213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4806'. [ 588.599656][T25215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4804'. [ 588.740268][T25226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4808'. [ 588.765313][T25226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4808'. [ 588.771790][T25228] netlink: 'syz.0.4810': attribute type 9 has an invalid length. [ 588.782961][T25228] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4810'. [ 588.783353][T25230] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4809'. [ 588.832765][T25185] delete_channel: no stack [ 588.941044][T25236] tipc: Enabled bearer , priority 0 [ 589.279728][T25245] tipc: Resetting bearer [ 589.373672][T25232] tipc: Disabling bearer [ 589.583300][T25267] syzkaller0: entered promiscuous mode [ 589.658033][T25267] syzkaller0: entered allmulticast mode [ 589.829374][T25285] netlink: 'syz.0.4822': attribute type 2 has an invalid length. [ 590.092807][T25291] lo speed is unknown, defaulting to 1000 [ 590.110949][T25293] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 590.165395][T25298] lo speed is unknown, defaulting to 1000 [ 590.274910][T25309] netlink: 'syz.1.4829': attribute type 4 has an invalid length. [ 591.303814][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 591.312141][ C0] lec:lec_tx_timeout: lec0 [ 591.317183][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 592.055740][T25370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.080658][T25370] netlink: 'syz.3.4845': attribute type 10 has an invalid length. [ 592.090097][T25370] bond0: (slave wlan1): Opening slave failed [ 592.802815][T25394] 8021q: adding VLAN 0 to HW filter on device bond7 [ 592.870276][T25399] macsec2: entered promiscuous mode [ 592.875941][T25399] bond7: entered promiscuous mode [ 592.901719][T25399] bond7: left promiscuous mode [ 592.959385][T25395] tipc: Enabling of bearer rejected, failed to enable media [ 593.216801][T25426] lo speed is unknown, defaulting to 1000 [ 593.235889][T25431] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 593.241957][T25431] syzkaller1: linktype set to 825 [ 593.318551][T25436] __nla_validate_parse: 5 callbacks suppressed [ 593.318575][T25436] netlink: 644 bytes leftover after parsing attributes in process `syz.1.4863'. [ 593.334611][T25434] syzkaller1: tun_chr_ioctl cmd 2150667307 [ 593.369996][T25443] netlink: 'syz.3.4865': attribute type 15 has an invalid length. [ 593.414179][T25443] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4865'. [ 593.484482][T25449] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4866'. [ 593.553273][T25450] tipc: Started in network mode [ 593.603955][T25450] tipc: Node identity 6a71113d5c16, cluster identity 4711 [ 593.628480][T25450] tipc: Enabled bearer , priority 0 [ 593.644370][T25453] syzkaller0: entered promiscuous mode [ 593.662689][T25453] syzkaller0: entered allmulticast mode [ 593.681239][T25457] netlink: 'syz.4.4870': attribute type 3 has an invalid length. [ 593.700388][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4870'. [ 593.713216][T25455] sctp: [Deprecated]: syz.0.4869 (pid 25455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.713216][T25455] Use struct sctp_sack_info instead [ 593.957825][T25466] tipc: Resetting bearer [ 594.047559][T25464] tipc: Enabled bearer , priority 0 [ 594.073688][T25464] syzkaller0: entered promiscuous mode [ 594.094323][T25464] syzkaller0: entered allmulticast mode [ 594.265480][T25475] tipc: Resetting bearer [ 594.283560][T25463] tipc: Resetting bearer [ 594.358573][T25463] tipc: Disabling bearer [ 594.381556][T25478] xt_bpf: check failed: parse error [ 594.728830][T25447] tipc: Resetting bearer [ 594.755949][T25447] tipc: Disabling bearer [ 594.770962][ T7066] tipc: Node number set to 912724285 [ 594.810488][T25493] bridge0: left promiscuous mode [ 594.820710][T25493] team0: Device bridge0 failed to register rx_handler [ 595.131865][T25502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4884'. [ 595.241114][T25508] Bluetooth: MGMT ver 1.23 [ 595.257265][T25508] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 597.070004][T25502] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 597.076278][T25516] tipc: Enabling of bearer rejected, failed to enable media [ 597.408892][T25530] veth1_to_hsr: left allmulticast mode [ 597.423142][T25530] veth1_to_hsr: left promiscuous mode [ 597.432255][T25530] hsr0: left allmulticast mode [ 597.439129][T25530] hsr_slave_0: left allmulticast mode [ 597.447145][T25530] hsr_slave_1: left allmulticast mode [ 597.473452][ T75] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.494473][ T75] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.525008][ T75] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.556226][ T75] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.646787][T25550] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4897'. [ 597.693795][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6380 ms [ 597.701913][ C0] lec:lec_tx_timeout: lec0 [ 597.707480][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 597.754382][T25550] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 598.226628][T25556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.260349][T25581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4903'. [ 598.275522][T25556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.300012][T25578] xt_CT: No such helper "snmp_trap" [ 598.697064][T15037] IPVS: starting estimator thread 0... [ 598.816247][T25595] IPVS: using max 23 ests per chain, 55200 per kthread [ 599.493654][T25556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.511667][T25612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 599.536993][T25556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.624444][T25612] bond5: Invalid ad_actor_system MAC address. [ 599.631146][T25612] bond5: option ad_actor_system: invalid value (7) [ 599.653004][T25612] bond5 (unregistering): Released all slaves [ 599.749500][T25556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.782156][T25556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.884320][T25556] netdevsim netdevsim3 ªªªªª» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.894935][T25556] netdevsim netdevsim3 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.058951][ T165] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.074617][ T165] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.085282][ T165] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.093596][ T165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.126568][T12127] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.128425][T25638] ip6t_srh: unknown srh invflags 4000 [ 600.143364][T12127] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.167468][T25638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4915'. [ 600.183979][ T75] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.200795][ T75] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.457798][T25653] xt_hashlimit: size too large, truncated to 1048576 [ 600.524594][T25658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'. [ 600.527642][T25660] “: renamed from vxcan1 (while UP) [ 600.782228][T25658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.823398][T25671] macsec0: entered allmulticast mode [ 600.835185][T25671] bond5: entered allmulticast mode [ 600.850679][T25676] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4922'. [ 600.870070][T25671] bond5: left allmulticast mode [ 600.912392][T25676] bond0 (unregistering): left allmulticast mode [ 600.933478][T25676] bond_slave_0: left allmulticast mode [ 600.939621][T25676] bond_slave_1: left allmulticast mode [ 600.945667][T25676] team0: left allmulticast mode [ 600.950620][T25676] team_slave_0: left allmulticast mode [ 600.981529][T25676] team_slave_1: left allmulticast mode [ 600.990214][T25676] bond0 (unregistering): left promiscuous mode [ 601.020586][T25676] bond_slave_0: left promiscuous mode [ 601.026804][T25676] bond_slave_1: left promiscuous mode [ 601.045082][T25676] team0: left promiscuous mode [ 601.047859][T25685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.050032][T25676] team_slave_0: left promiscuous mode [ 601.094237][T25676] team_slave_1: left promiscuous mode [ 601.100225][T25676] bridge0: port 3(bond0) entered disabled state [ 601.160728][T25676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.188804][T25676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.206614][T25676] bond0 (unregistering): (slave team0): Releasing backup interface [ 601.221360][T25676] bond0 (unregistering): Released all slaves [ 601.346218][T25679] lo speed is unknown, defaulting to 1000 [ 601.493950][T25694] syzkaller0: entered promiscuous mode [ 601.528544][T25694] syzkaller0: entered allmulticast mode [ 601.698680][T25714] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 601.777272][T25719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4934'. [ 601.858115][T25720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4932'. [ 601.927939][T25732] SET target dimension over the limit! [ 602.512003][T25712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.757531][T25751] lo speed is unknown, defaulting to 1000 [ 602.811586][T25759] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4941'. [ 602.845900][T25759] tun0: tun_chr_ioctl cmd 2148553947 [ 603.188644][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4943'. [ 603.237846][T25769] vlan5: entered promiscuous mode [ 603.244128][T25769] bridge0: entered promiscuous mode [ 603.453790][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 603.461997][ C0] lec:lec_tx_timeout: lec0 [ 603.467071][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 603.505153][T25782] bridge0: Device is already in use. [ 603.723015][T25795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4950'. [ 603.747813][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4951'. [ 603.811769][T25796] netlink: 'syz.0.4950': attribute type 1 has an invalid length. [ 603.831568][T25794] 8021q: VLANs not supported on dvmrp0 [ 604.009687][T25795] bond6 (unregistering): Released all slaves [ 604.561413][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4959'. [ 604.578934][T25814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4957'. [ 604.601475][T25814] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4957'. [ 604.601516][T25824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4958'. [ 604.644620][T25824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4958'. [ 604.690089][T25828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4961'. [ 604.833692][T25833] syzkaller0: entered promiscuous mode [ 604.839393][T25833] syzkaller0: entered allmulticast mode [ 604.916265][T25840] syzkaller1: entered promiscuous mode [ 604.921902][T25840] syzkaller1: entered allmulticast mode [ 604.972723][T25842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4967'. [ 605.016247][T25844] netlink: 'syz.0.4968': attribute type 1 has an invalid length. [ 605.166635][T25853] mac80211_hwsim hwsim53 syzkaller0: left promiscuous mode [ 605.175194][T25853] mac80211_hwsim hwsim53 syzkaller0: left allmulticast mode [ 605.181864][T25844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4968'. [ 605.182765][T25853] macsec1: left allmulticast mode [ 605.230848][T25853] bond2: left promiscuous mode [ 605.235796][T25853] bridge3: left promiscuous mode [ 605.254907][T25860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4968'. [ 605.270772][T25853] vlan4: left allmulticast mode [ 605.276994][T25853] bond0: left allmulticast mode [ 605.282136][T25853] bond_slave_0: left allmulticast mode [ 605.288547][T25853] bond_slave_1: left allmulticast mode [ 605.351397][T25860] bond6: (slave bridge4): making interface the new active one [ 605.362711][T25860] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 605.430051][T25844] macvlan4: entered promiscuous mode [ 605.436007][T25844] macvlan4: entered allmulticast mode [ 605.443049][T25844] bond6: entered promiscuous mode [ 605.448570][T25844] bridge4: entered promiscuous mode [ 605.454924][T25844] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 605.463550][T25844] bond6: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 605.483227][T25844] bond6: left promiscuous mode [ 605.489404][T25844] bridge4: left promiscuous mode [ 605.558189][T25856] syzkaller0: entered promiscuous mode [ 605.563737][T25856] syzkaller0: entered allmulticast mode [ 608.006549][T25848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.020163][T25868] netlink: 'syz.4.4972': attribute type 1 has an invalid length. [ 608.044385][T25868] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4972'. [ 608.239175][T25893] batadv_slave_0: entered promiscuous mode [ 608.267427][T25893] batadv_slave_0: entered allmulticast mode [ 608.344138][T25897] netlink: 'syz.1.4982': attribute type 2 has an invalid length. [ 608.407622][T25897] hmac(sha224): entered promiscuous mode [ 608.673886][T25907] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 608.728175][T25909] ip6t_srh: unknown srh invflags BA61 [ 608.767388][T25907] bond5: (slave lo): Enslaving as an active interface with an up link [ 608.784347][T25907] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 609.177585][T12127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.216929][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 609.225227][ C0] lec:lec_tx_timeout: lec0 [ 609.230964][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 609.272771][T12127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.324574][T12127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.344458][T12127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.360649][T25941] netlink: 'syz.2.4997': attribute type 1 has an invalid length. [ 609.379092][T25941] netlink: 'syz.2.4997': attribute type 3 has an invalid length. [ 609.404294][T12141] team0: left allmulticast mode [ 609.416722][T12141] team_slave_0: left allmulticast mode [ 609.442847][T12141] team_slave_1: left allmulticast mode [ 609.465223][T12141] macvlan2: left allmulticast mode [ 609.480326][T12141] team0: left promiscuous mode [ 609.494807][T12141] team_slave_0: left promiscuous mode [ 609.500459][T12141] team_slave_1: left promiscuous mode [ 609.528788][T12141] macvlan2: left promiscuous mode [ 609.539462][T12141] bridge0: port 1(team0) entered disabled state [ 609.618416][T12141] pimreg9: left allmulticast mode [ 609.802585][T25973] __nla_validate_parse: 5 callbacks suppressed [ 609.802607][T25973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 609.986653][T12141] bond4 (unregistering): (slave bridge1): Releasing active interface [ 610.198225][T12141] bond9 (unregistering): (slave bridge0): Releasing active interface [ 610.259790][T12141] team0: Port device bridge6 removed [ 610.319823][T12141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.330596][T12141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.341490][T12141] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 610.350976][T12141] bond0 (unregistering): Released all slaves [ 610.362748][T12141] bond1 (unregistering): Released all slaves [ 610.380089][T12141] bond2 (unregistering): Released all slaves [ 610.394321][T12141] bond3 (unregistering): Released all slaves [ 610.410395][T12141] bond4 (unregistering): Released all slaves [ 610.429830][T12141] bond5 (unregistering): Released all slaves [ 610.443397][T12141] bond6 (unregistering): Released all slaves [ 610.465090][T12141] bond7 (unregistering): Released all slaves [ 610.479264][T12141] bond8 (unregistering): Released all slaves [ 610.493515][T12141] bond9 (unregistering): Released all slaves [ 610.689610][T25982] netlink: 'syz.2.5008': attribute type 1 has an invalid length. [ 610.736321][T12141] : left promiscuous mode [ 610.808202][ T7077] IPVS: starting estimator thread 0... [ 610.902752][T25999] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 610.910762][T25991] IPVS: using max 25 ests per chain, 60000 per kthread [ 610.984805][T25999] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5010'. [ 611.348370][T26004] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 611.364240][T26004] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 611.383887][T12141] tipc: Left network mode [ 611.393533][T25987] lo speed is unknown, defaulting to 1000 [ 611.404043][T25982] lo speed is unknown, defaulting to 1000 [ 611.441371][T12141] IPVS: stopping master sync thread 8940 ... [ 611.520101][T12141] IPVS: stopping backup sync thread 7169 ... [ 611.665439][T26017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5016'. [ 611.718964][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5016'. [ 611.740013][T26020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5016'. [ 612.427788][T26038] Cannot find del_set index 2 as target [ 613.628516][T12141] hsr_slave_0: left promiscuous mode [ 613.639543][T12141] hsr_slave_1: left promiscuous mode [ 613.715923][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5031'. [ 613.725334][T26090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5031'. [ 613.734596][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5031'. [ 613.743875][T26090] netlink: 'syz.4.5031': attribute type 5 has an invalid length. [ 613.780224][T12141] team0 (unregistering): Port device macvlan2 removed [ 613.842661][T26092] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5032'. [ 613.869544][T26094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'. [ 614.103856][T12141] team0 (unregistering): Port device team_slave_1 removed [ 614.128068][T12141] team0 (unregistering): Port device team_slave_0 removed [ 614.140428][T12115] smc: removing ib device !yz! [ 614.243898][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 614.251953][ C0] lec:lec_tx_timeout: lec0 [ 614.257552][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 614.309007][T26092] gretap0: entered promiscuous mode [ 614.460211][T26104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.185912][T26135] No such timeout policy "syz0" [ 615.411303][T26144] __nla_validate_parse: 2 callbacks suppressed [ 615.411328][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5047'. [ 615.493163][T26144] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5047'. [ 615.502551][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5047'. [ 615.538108][T26144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5047'. [ 615.688176][T26159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5049'. [ 615.982317][T26166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5049'. [ 616.033914][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5049'. [ 616.336847][T26183] vlan2: entered allmulticast mode [ 616.575008][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5060'. [ 616.596867][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5060'. [ 616.697400][T26199] bridge_slave_1: left allmulticast mode [ 616.703213][T26199] bridge_slave_1: left promiscuous mode [ 616.710573][T26199] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.778608][T26193] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 617.089917][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5064'. [ 617.755978][ T7080] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 617.774110][T26243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.895037][T12141] IPVS: stop unused estimator thread 0... [ 618.074049][ T7080] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 618.299701][T26269] netlink: get zone limit has 4 unknown bytes [ 618.326760][T26270] gtp1: entered promiscuous mode [ 618.341250][T26270] gtp1: entered allmulticast mode [ 618.650784][T26274] bond6: entered promiscuous mode [ 618.703572][T26292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.715028][T26284] bridge_slave_1: left allmulticast mode [ 618.720819][T26284] bridge_slave_1: left promiscuous mode [ 618.754785][T26284] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.807049][T26284] bridge_slave_0: left promiscuous mode [ 618.813400][T26284] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.932296][T26299] netlink: 'syz.0.5081': attribute type 5 has an invalid length. [ 619.164552][T26307] syzkaller0: entered promiscuous mode [ 619.172260][T26307] syzkaller0: entered allmulticast mode [ 619.211279][T26313] sctp: [Deprecated]: syz.1.5085 (pid 26313) Use of int in max_burst socket option. [ 619.211279][T26313] Use struct sctp_assoc_value instead [ 619.263789][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 619.271857][ C0] lec:lec_tx_timeout: lec0 [ 619.279987][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 619.507415][T26320] xt_hashlimit: size too large, truncated to 1048576 [ 619.668302][T26327] geneve1: entered promiscuous mode [ 619.689807][T26330] xt_TCPMSS: Only works on TCP SYN packets [ 620.414517][T26365] __nla_validate_parse: 5 callbacks suppressed [ 620.414539][T26365] netlink: 908 bytes leftover after parsing attributes in process `syz.2.5097'. [ 620.538774][T26365] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 620.574598][T26365] bond0 (unregistering): Released all slaves [ 621.212938][T26392] netlink: 'syz.4.5103': attribute type 4 has an invalid length. [ 621.268935][T26394] netlink: 'syz.4.5103': attribute type 4 has an invalid length. [ 621.348649][T26399] dvmrp1: entered allmulticast mode [ 621.388737][T26407] dvmrp0: left allmulticast mode [ 621.428001][T26407] dvmrp1: left allmulticast mode [ 621.461148][T26399] x_tables: duplicate underflow at hook 2 [ 621.737865][T26422] Cannot find del_set index 1 as target [ 621.755612][T26423] syzkaller1: entered promiscuous mode [ 621.762320][T26423] syzkaller1: entered allmulticast mode [ 622.408668][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5115'. [ 622.446538][T26451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5115'. [ 622.724240][ T7080] IPVS: starting estimator thread 0... [ 622.740706][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5118'. [ 622.805946][T26460] bond7: entered promiscuous mode [ 622.811782][T26460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.824214][T26465] IPVS: using max 24 ests per chain, 57600 per kthread [ 623.197679][T26478] netlink: 'syz.4.5122': attribute type 30 has an invalid length. [ 623.449230][T26486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.639256][T26497] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.5128'. [ 623.712361][T26499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5129'. [ 623.745027][T26499] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5129'. [ 624.051238][T26513] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5133'. [ 624.293819][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 624.302099][ C0] lec:lec_tx_timeout: lec0 [ 624.307693][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.650236][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5139'. [ 624.834913][T26548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5139'. [ 624.876054][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.913943][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.932689][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.952935][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.140577][T26560] netlink: 'syz.2.5141': attribute type 11 has an invalid length. [ 625.457232][T26570] netlink: 'syz.2.5144': attribute type 12 has an invalid length. [ 625.581638][T26579] __nla_validate_parse: 3 callbacks suppressed [ 625.581658][T26579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5149'. [ 625.628349][T26576] tun0: tun_chr_ioctl cmd 1074025675 [ 625.633719][T26576] tun0: persist enabled [ 625.805025][T26588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5151'. [ 626.129295][T26600] syzkaller1: entered promiscuous mode [ 626.135379][T26600] syzkaller1: entered allmulticast mode [ 626.154801][T26600] netlink: 'syz.1.5157': attribute type 3 has an invalid length. [ 626.162829][T26600] netlink: 'syz.1.5157': attribute type 1 has an invalid length. [ 626.176837][T26600] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5157'. [ 626.191987][T26600] NCSI netlink: No device for ifindex 346827556 [ 626.604153][T26622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5165'. [ 627.075785][T26647] tipc: Failed to remove unknown binding: 66,0,0/3293432116:1421941062/1421941063 [ 627.098151][T26647] tipc: Failed to remove unknown binding: 66,0,0/3293432116:1421941062/1421941063 [ 627.286939][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5176'. [ 627.386665][T26663] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 627.819102][T26685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5182'. [ 628.206714][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5188'. [ 628.236490][T26706] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5188'. [ 628.396907][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5190'. [ 628.433920][T26712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5190'. [ 629.129744][T26747] FAULT_INJECTION: forcing a failure. [ 629.129744][T26747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.153628][T26747] CPU: 1 UID: 0 PID: 26747 Comm: syz.4.5200 Not tainted syzkaller #0 PREEMPT(full) [ 629.153659][T26747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 629.153671][T26747] Call Trace: [ 629.153679][T26747] [ 629.153688][T26747] dump_stack_lvl+0xe8/0x150 [ 629.153731][T26747] should_fail_ex+0x412/0x560 [ 629.153773][T26747] _copy_from_user+0x2d/0xb0 [ 629.153799][T26747] ___sys_recvmsg+0x175/0x590 [ 629.153836][T26747] ? __pfx____sys_recvmsg+0x10/0x10 [ 629.153894][T26747] ? __fget_files+0x3a0/0x420 [ 629.153926][T26747] do_recvmmsg+0x334/0x800 [ 629.153955][T26747] ? __pfx_do_recvmmsg+0x10/0x10 [ 629.153999][T26747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 629.154039][T26747] __x64_sys_recvmmsg+0x198/0x250 [ 629.154062][T26747] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 629.154095][T26747] do_syscall_64+0x14d/0xf80 [ 629.154114][T26747] ? trace_irq_disable+0x3b/0x150 [ 629.154132][T26747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.154153][T26747] ? clear_bhb_loop+0x40/0x90 [ 629.154178][T26747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.154198][T26747] RIP: 0033:0x7f97a8f9c819 [ 629.154217][T26747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.154254][T26747] RSP: 002b:00007f97a71f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 629.154278][T26747] RAX: ffffffffffffffda RBX: 00007f97a9215fa0 RCX: 00007f97a8f9c819 [ 629.154293][T26747] RDX: 0000000000000001 RSI: 0000200000001d00 RDI: 0000000000000003 [ 629.154306][T26747] RBP: 00007f97a71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 629.154318][T26747] R10: 000000000001822b R11: 0000000000000246 R12: 0000000000000001 [ 629.154329][T26747] R13: 00007f97a9216038 R14: 00007f97a9215fa0 R15: 00007ffd4a83fdc8 [ 629.154362][T26747] [ 629.443057][T26754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.606293][T26755] netlink: 'syz.0.5202': attribute type 10 has an invalid length. [ 629.860999][T26765] netlink: 'syz.4.5207': attribute type 5 has an invalid length. [ 630.093783][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 630.102087][ C0] lec:lec_tx_timeout: lec0 [ 630.108548][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 630.132315][T26772] syzkaller0: entered promiscuous mode [ 630.154535][T26772] syzkaller0: entered allmulticast mode [ 630.208874][T26775] team0: left allmulticast mode [ 630.215687][T26775] team_slave_0: left allmulticast mode [ 630.221374][T26775] team_slave_1: left allmulticast mode [ 630.243422][T26775] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 630.495193][T26790] syzkaller0: entered promiscuous mode [ 630.500820][T26790] syzkaller0: entered allmulticast mode [ 630.574661][T26806] netlink: 'syz.4.5217': attribute type 1 has an invalid length. [ 635.136101][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 635.144292][ C0] lec:lec_tx_timeout: lec0 [ 635.149065][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 635.363663][T26845] __nla_validate_parse: 11 callbacks suppressed [ 635.363687][T26845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5224'. [ 635.416105][T26850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 635.870784][T26879] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5233'. [ 635.919757][T26880] ip6tnl4: entered allmulticast mode [ 635.937186][T26878] netlink: 'syz.0.5232': attribute type 19 has an invalid length. [ 635.984756][T26885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5235'. [ 636.026895][T26887] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5236'. [ 636.028301][T26885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5235'. [ 636.037096][T26887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5236'. [ 636.078696][T26888] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5236'. [ 636.091876][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5236'. [ 636.236097][T26879] infiniband syz1: set active [ 636.257350][T26879] infiniband syz1: added bond0 [ 636.318225][T26898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5239'. [ 636.358508][T26879] RDS/IB: syz1: added [ 636.362813][T26879] smc: adding ib device syz1 with port count 1 [ 636.374144][T26879] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 636.409591][T26902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.504907][T26908] openvswitch: netlink: Flow key attr not present in new flow. [ 638.352955][T26902] tipc: Enabling of bearer rejected, failed to enable media [ 638.362018][T26912] netlink: 'syz.0.5242': attribute type 4 has an invalid length. [ 638.537338][T26923] netlink: 'syz.0.5245': attribute type 1 has an invalid length. [ 638.990303][T26934] bond9 (unregistering): Released all slaves [ 639.343929][T26954] netlink: 'syz.0.5254': attribute type 13 has an invalid length. [ 639.539815][ T165] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.575136][ T165] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.601292][ T165] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.625998][ T165] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.649973][T26958] tipc: Enabling of bearer rejected, failed to enable media [ 639.829148][T26966] netlink: 'syz.1.5258': attribute type 4 has an invalid length. [ 640.017551][T26968] netlink: 'syz.1.5258': attribute type 4 has an invalid length. [ 640.163851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 640.172838][ C0] lec:lec_tx_timeout: lec0 [ 640.177769][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 640.685952][T26977] __nla_validate_parse: 9 callbacks suppressed [ 640.685973][T26977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5261'. [ 640.763124][T26985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 640.864777][T26989] openvswitch: netlink: Flow actions attr not present in new flow. [ 640.898263][T26992] netlink: 'syz.0.5264': attribute type 2 has an invalid length. [ 640.983726][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5266'. [ 641.010003][T26992] !¼Þ: entered promiscuous mode [ 641.047804][T26997] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 641.074147][T26992] netlink: 'syz.0.5264': attribute type 1 has an invalid length. [ 641.081943][T26992] netlink: 'syz.0.5264': attribute type 1 has an invalid length. [ 641.091137][T26992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5264'. [ 641.136153][T26998] ip6tnl5: entered allmulticast mode [ 641.164272][ T7080] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 641.467175][T27016] netlink: 'syz.4.5272': attribute type 21 has an invalid length. [ 641.475259][T27016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5272'. [ 641.569554][T27020] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5274'. [ 641.711595][T27024] netlink: 'syz.0.5276': attribute type 3 has an invalid length. [ 641.784987][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5276'. [ 641.794540][T27024] nbd: must specify an index to disconnect [ 641.803158][T27027] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5277'. [ 641.842783][T27024] erspan0: left promiscuous mode [ 641.908002][T27024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.947578][T27024] team0: left promiscuous mode [ 641.973012][T27024] team_slave_0: left promiscuous mode [ 641.993452][T27024] team_slave_1: left promiscuous mode [ 642.015976][T27024] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.078908][T27024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.127457][T27027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.161873][T27027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.172200][T27027] bond0 (unregistering): Released all slaves [ 642.187897][ T75] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 642.196179][ T7075] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 642.237154][T15035] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 642.566794][T27055] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 642.592227][T27057] netlink: zone id is out of range [ 642.602291][T27057] netlink: zone id is out of range [ 642.613982][T27057] netlink: zone id is out of range [ 642.622494][T27057] netlink: zone id is out of range [ 642.654030][T27057] netlink: zone id is out of range [ 642.669519][T27061] syzkaller0: entered promiscuous mode [ 642.727156][T27061] syzkaller0: entered allmulticast mode [ 642.756362][T27057] netlink: set zone limit has 4 unknown bytes [ 642.849500][T27072] xt_limit: Overflow, try lower: 324382443/0 [ 643.044923][T27074] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 643.081601][T27074] bond0 (unregistering): Released all slaves [ 643.220594][T12123] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 643.234385][T12123] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 643.644054][ T7075] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 643.965969][T27098] syzkaller0: entered promiscuous mode [ 643.973587][T27098] syzkaller0: entered allmulticast mode [ 644.294708][T27106] syzkaller0: entered promiscuous mode [ 644.300262][T27106] syzkaller0: entered allmulticast mode [ 644.590888][T27117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5302'. [ 644.630909][T27117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5302'. [ 645.194008][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 645.202211][ C0] lec:lec_tx_timeout: lec0 [ 645.207300][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 645.392202][T27148] netlink: 'syz.2.5310': attribute type 1 has an invalid length. [ 645.541520][T27153] IPVS: set_ctl: invalid protocol: 67 172.20.20.187:20004 [ 645.754629][T27161] __nla_validate_parse: 3 callbacks suppressed [ 645.754651][T27161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5315'. [ 646.090885][T27164] syzkaller1: entered promiscuous mode [ 646.098120][T27164] syzkaller1: entered allmulticast mode [ 646.112911][T27177] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5318'. [ 646.136725][T27176] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5318'. [ 646.191119][T27183] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5319'. [ 646.245556][T27185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5320'. [ 646.255035][T27177] bridge0: port 2(bond0) entered blocking state [ 646.262384][T27177] bridge0: port 2(bond0) entered disabled state [ 646.276175][T27177] bond0: entered allmulticast mode [ 646.281358][T27177] bond_slave_0: entered allmulticast mode [ 646.287729][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5320'. [ 646.303340][T27177] bond_slave_1: entered allmulticast mode [ 646.338347][T27177] bond0: entered promiscuous mode [ 646.343565][T27177] bond_slave_0: entered promiscuous mode [ 646.355287][T27177] bond_slave_1: entered promiscuous mode [ 646.647591][T27197] syzkaller0: entered promiscuous mode [ 646.653392][T27197] syzkaller0: entered allmulticast mode [ 646.765691][T27201] syzkaller0: entered promiscuous mode [ 646.772826][T27201] syzkaller0: entered allmulticast mode [ 646.946449][T27207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5326'. [ 647.026397][T27190] veth1: entered allmulticast mode [ 647.534163][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 647.824595][T27230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5333'. [ 647.835522][T27232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5334'. [ 648.393595][T27261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5343'. [ 648.649281][T27274] syzkaller1: entered promiscuous mode [ 648.656596][T27274] syzkaller1: entered allmulticast mode [ 648.831869][T27278] IPVS: persistence engine module ip_vs_pe_… not found [ 649.508290][T27313] netlink: 'syz.1.5356': attribute type 1 has an invalid length. [ 649.549294][T27313] 8021q: adding VLAN 0 to HW filter on device bond9 [ 650.191323][T27333] clip:clip_setentry: non-CLIP VCC [ 650.214056][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 650.222539][ C0] lec:lec_tx_timeout: lec0 [ 650.227540][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 650.256041][T27340] netlink: 'syz.2.5363': attribute type 3 has an invalid length. [ 650.689028][T27357] macvlan3: entered promiscuous mode [ 650.704739][T27357] macvlan3: entered allmulticast mode [ 650.726969][T27357] veth1_to_batadv: entered allmulticast mode [ 650.764883][T27357] __nla_validate_parse: 6 callbacks suppressed [ 650.764905][T27357] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5368'. [ 651.069633][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5372'. [ 651.304941][T27383] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 651.353193][T27383] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 651.523194][T27377] macvlan4: entered promiscuous mode [ 651.528818][T27377] macvlan4: entered allmulticast mode [ 651.538233][T27377] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 651.838514][T27413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5378'. [ 652.598810][T27442] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5385'. [ 653.413591][T27469] syzkaller1: entered promiscuous mode [ 653.435340][T27469] syzkaller1: entered allmulticast mode [ 653.642724][T27485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5392'. [ 654.042526][T27493] syzkaller0: entered promiscuous mode [ 654.048229][T27493] syzkaller0: entered allmulticast mode [ 654.068064][T27493] syzkaller1: entered promiscuous mode [ 654.073590][T27493] syzkaller1: entered allmulticast mode [ 654.292698][T27507] sctp: [Deprecated]: syz.4.5401 (pid 27507) Use of int in max_burst socket option. [ 654.292698][T27507] Use struct sctp_assoc_value instead [ 654.506804][ T165] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.537624][ T165] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.585193][ T165] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.593933][ T165] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.835051][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5407'. [ 654.859108][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5409'. [ 655.048718][T27538] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 655.048718][T27538] Please contact the netfilter-devel mailing list or update your nftables rules. [ 655.110132][T27534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.207244][T27506] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5399'. [ 655.234111][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 655.242326][ C0] lec:lec_tx_timeout: lec0 [ 655.247130][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 655.702031][T27558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5416'. [ 655.934036][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 655.949414][T27567] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 655.971637][T27568] sctp: [Deprecated]: syz.3.5418 (pid 27568) Use of int in maxseg socket option. [ 655.971637][T27568] Use struct sctp_assoc_value instead [ 656.010667][T27567] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 656.063943][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.071085][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.076132][T27569] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 656.114636][T27569] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 656.162464][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.195391][T27579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5422'. [ 656.204672][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.204900][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5423'. [ 656.213284][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.222858][T27572] netlink: 'syz.0.5421': attribute type 3 has an invalid length. [ 656.240876][T27572] netlink: 'syz.0.5421': attribute type 1 has an invalid length. [ 656.240966][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.255141][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5423'. [ 656.259480][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.273319][T27572] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5421'. [ 656.281635][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.288071][T27572] NCSI netlink: No device for ifindex 813332851 [ 656.297824][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.307144][T27578] netlink: 'syz.3.5423': attribute type 6 has an invalid length. [ 656.333705][T27580] syzkaller0: entered promiscuous mode [ 656.340944][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.348488][T27580] syzkaller0: entered allmulticast mode [ 656.357169][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.364721][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.365403][T27580] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 656.382058][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.399700][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.424200][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.431411][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.438840][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.448128][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.458611][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.459461][T27585] netlink: 'syz.1.5425': attribute type 1 has an invalid length. [ 656.465851][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.465887][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.465913][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.465938][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.465964][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.465990][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.466016][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.524413][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.532037][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.535073][T27586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5425'. [ 656.539528][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.555637][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.562800][T27567] IPVS: set_ctl: invalid protocol: 159 172.20.20.11:8197 [ 656.665294][T27589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.750989][T27592] netlink: 'syz.1.5427': attribute type 1 has an invalid length. [ 656.771476][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5427'. [ 656.799150][T27595] netlink: 'syz.3.5429': attribute type 1 has an invalid length. [ 656.809253][T27592] netlink: 'syz.1.5427': attribute type 1 has an invalid length. [ 656.862186][T27595] bond8: entered promiscuous mode [ 656.869817][T27595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 656.893196][T27598] macvtap1: entered allmulticast mode [ 656.948953][T27595] bond8: (slave bridge6): making interface the new active one [ 656.957729][T27595] bridge6: entered promiscuous mode [ 656.965842][T27595] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 657.039035][T27606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5431'. [ 657.049423][T27606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5431'. [ 657.101222][T27613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5434'. [ 657.445764][T27629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.500058][T27635] ip6tnl0: entered promiscuous mode [ 657.534154][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5440'. [ 657.842033][T27648] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 657.861757][ T5829] block nbd0: Receive control failed (result -1) [ 658.177836][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 658.472989][T27673] netlink: 'syz.0.5453': attribute type 39 has an invalid length. [ 658.564719][T27676] netlink: 'syz.2.5455': attribute type 6 has an invalid length. [ 659.436541][T27718] 8021q: adding VLAN 0 to HW filter on device bond8 [ 659.470442][T27718] bond8: (slave batadv1): Opening slave failed [ 659.745250][T27733] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 659.945674][T27737] netlink: 'syz.3.5470': attribute type 39 has an invalid length. [ 659.959647][T27737] veth0_macvtap: left promiscuous mode [ 660.254121][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 660.262281][ C0] lec:lec_tx_timeout: lec0 [ 660.266886][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 660.528962][T27752] macvtap2: entered promiscuous mode [ 660.544024][T27752] macvtap2: entered allmulticast mode [ 660.554232][T27752] veth1_vlan: entered allmulticast mode [ 660.586910][T27754] macvtap3: entered promiscuous mode [ 660.602040][T27754] macvtap3: entered allmulticast mode [ 660.791316][T27752] macvtap3: entered promiscuous mode [ 660.813955][T27752] macvtap3: entered allmulticast mode [ 660.944852][T27765] bond10: entered promiscuous mode [ 660.950557][T27765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 660.958623][T27765] bridge0: port 2(bond10) entered blocking state [ 660.965607][T27765] bridge0: port 2(bond10) entered disabled state [ 660.972358][T27765] bond10: entered allmulticast mode [ 665.293849][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 665.301927][ C0] lec:lec_tx_timeout: lec0 [ 665.306844][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 666.316755][T27817] __nla_validate_parse: 11 callbacks suppressed [ 666.316776][T27817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5489'. [ 666.371259][T27825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5489'. [ 666.583426][T27832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'. [ 666.702725][T27832] team1: entered promiscuous mode [ 666.730564][T27832] team1: entered allmulticast mode [ 666.764439][T27832] 8021q: adding VLAN 0 to HW filter on device team1 [ 666.824281][T27843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5497'. [ 666.859122][T27844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5497'. [ 667.451564][T27861] sock: sock_set_timeout: `syz.1.5503' (pid 27861) tries to set negative timeout [ 667.492368][T27845] veth1_vlan: left allmulticast mode [ 667.915450][T27884] dummy0: entered allmulticast mode [ 667.937935][T27883] dummy0: left allmulticast mode [ 668.057275][T27891] sctp: [Deprecated]: syz.3.5511 (pid 27891) Use of int in maxseg socket option. [ 668.057275][T27891] Use struct sctp_assoc_value instead [ 668.199363][T27903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5514'. [ 668.208730][T27903] validate_nla: 1 callbacks suppressed [ 668.208750][T27903] netlink: 'syz.1.5514': attribute type 4 has an invalid length. [ 668.347340][T27914] syz1: rxe_newlink: already configured on bond0 [ 668.361941][T27913] syz1: rxe_newlink: already configured on bond0 [ 668.696144][T27931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5522'. [ 668.720357][T27932] syzkaller0: entered promiscuous mode [ 668.730852][T27932] syzkaller0: entered allmulticast mode [ 668.739153][T27936] netlink: 'syz.0.5525': attribute type 11 has an invalid length. [ 668.749796][T27936] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.5525'. [ 668.762093][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 668.771456][T27931] openvswitch: netlink: EtherType 0 is less than min 600 [ 668.781093][T27932] tipc: Enabled bearer , priority 0 [ 668.798904][T27932] netlink: 'syz.2.5524': attribute type 28 has an invalid length. [ 668.838120][T27932] netlink: 'syz.2.5524': attribute type 3 has an invalid length. [ 668.877743][T27939] tipc: Resetting bearer [ 668.892366][T27932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5524'. [ 668.942094][T27939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.986608][T27941] kthread_run failed with err -4 [ 669.034187][T27930] tipc: Resetting bearer [ 669.094466][T27930] tipc: Disabling bearer [ 670.153985][T28004] bond9: option broadcast_neighbor: invalid value (30) [ 670.174065][T28004] bond9 (unregistering): Released all slaves [ 670.210032][T28005] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 670.523017][T28031] netlink: 'syz.3.5549': attribute type 3 has an invalid length. [ 671.133935][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 671.142386][ C0] lec:lec_tx_timeout: lec0 [ 671.147386][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 671.447139][T28061] __nla_validate_parse: 8 callbacks suppressed [ 671.447160][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5557'. [ 671.704511][T28067] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5558'. [ 671.754106][T28051] batadv_slave_1: entered promiscuous mode [ 671.814713][T28051] batadv_slave_1: left promiscuous mode [ 671.925130][T28085] xt_hashlimit: size too large, truncated to 1048576 [ 671.934315][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 672.088375][T28093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5562'. [ 672.154675][T28096] [ 672.157071][T28096] ====================================================== [ 672.164112][T28096] WARNING: possible circular locking dependency detected [ 672.171161][T28096] syzkaller #0 Not tainted [ 672.175609][T28096] ------------------------------------------------------ [ 672.182738][T28096] syz.1.5565/28096 is trying to acquire lock: [ 672.188903][T28096] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 672.198186][T28096] [ 672.198186][T28096] but task is already holding lock: [ 672.205566][T28096] ffff88802aba8f80 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 672.215106][T28096] [ 672.215106][T28096] which lock already depends on the new lock. [ 672.215106][T28096] [ 672.225788][T28096] [ 672.225788][T28096] the existing dependency chain (in reverse order) is: [ 672.234813][T28096] [ 672.234813][T28096] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 672.242382][T28096] __might_fault+0xcb/0x130 [ 672.247414][T28096] _copy_from_user+0x28/0xb0 [ 672.252539][T28096] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 672.259311][T28096] ip_generic_getfrag+0x149/0x2d0 [ 672.264968][T28096] __ip6_append_data+0x39e4/0x3f70 [ 672.270631][T28096] ip6_append_data+0x10f/0x280 [ 672.275931][T28096] rawv6_sendmsg+0x12d3/0x18e0 [ 672.281239][T28096] ____sys_sendmsg+0x80a/0x9f0 [ 672.286559][T28096] ___sys_sendmsg+0x2a5/0x360 [ 672.291768][T28096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.297334][T28096] do_syscall_64+0x14d/0xf80 [ 672.302453][T28096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.308955][T28096] [ 672.308955][T28096] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 672.316901][T28096] lock_sock_nested+0x41/0x100 [ 672.322200][T28096] inet_shutdown+0x6a/0x390 [ 672.327242][T28096] nbd_mark_nsock_dead+0x2e9/0x560 [ 672.332910][T28096] recv_work+0x1c7f/0x1d90 [ 672.337860][T28096] process_scheduled_works+0xb6e/0x18c0 [ 672.343942][T28096] worker_thread+0xa53/0xfc0 [ 672.349068][T28096] kthread+0x388/0x470 [ 672.353672][T28096] ret_from_fork+0x51e/0xb90 [ 672.358816][T28096] ret_from_fork_asm+0x1a/0x30 [ 672.364119][T28096] [ 672.364119][T28096] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 672.371774][T28096] __mutex_lock+0x19f/0x1300 [ 672.376905][T28096] nbd_queue_rq+0x37b/0x1100 [ 672.382035][T28096] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 672.388125][T28096] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 672.395094][T28096] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 672.401648][T28096] blk_mq_run_hw_queue+0x348/0x4f0 [ 672.407294][T28096] blk_mq_dispatch_list+0xd16/0xe10 [ 672.413022][T28096] blk_mq_flush_plug_list+0x48d/0x570 [ 672.418922][T28096] __blk_flush_plug+0x3ed/0x4d0 [ 672.424318][T28096] __submit_bio+0x28d/0x580 [ 672.429353][T28096] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 672.435515][T28096] block_read_full_folio+0x599/0x830 [ 672.441682][T28096] filemap_read_folio+0x137/0x3b0 [ 672.447242][T28096] do_read_cache_folio+0x358/0x590 [ 672.452879][T28096] read_part_sector+0xb6/0x2b0 [ 672.458168][T28096] adfspart_check_ICS+0xa5/0xa40 [ 672.463642][T28096] bdev_disk_changed+0x7ba/0x1550 [ 672.469196][T28096] blkdev_get_whole+0x380/0x510 [ 672.474755][T28096] bdev_open+0x31e/0xd30 [ 672.479613][T28096] blkdev_open+0x470/0x610 [ 672.484558][T28096] do_dentry_open+0x785/0x14e0 [ 672.489942][T28096] vfs_open+0x3b/0x340 [ 672.494547][T28096] path_openat+0x2e08/0x3860 [ 672.499662][T28096] do_file_open+0x23e/0x4a0 [ 672.504695][T28096] do_sys_openat2+0x113/0x200 [ 672.509903][T28096] __x64_sys_openat+0x138/0x170 [ 672.515302][T28096] do_syscall_64+0x14d/0xf80 [ 672.520443][T28096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.526964][T28096] [ 672.526964][T28096] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 672.534230][T28096] __mutex_lock+0x19f/0x1300 [ 672.539451][T28096] nbd_queue_rq+0xc6/0x1100 [ 672.544481][T28096] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 672.550737][T28096] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 672.557598][T28096] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 672.564117][T28096] blk_mq_run_hw_queue+0x348/0x4f0 [ 672.569767][T28096] blk_mq_dispatch_list+0xd16/0xe10 [ 672.575511][T28096] blk_mq_flush_plug_list+0x48d/0x570 [ 672.581413][T28096] __blk_flush_plug+0x3ed/0x4d0 [ 672.586799][T28096] __submit_bio+0x28d/0x580 [ 672.591830][T28096] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 672.597990][T28096] block_read_full_folio+0x599/0x830 [ 672.603809][T28096] filemap_read_folio+0x137/0x3b0 [ 672.609363][T28096] do_read_cache_folio+0x358/0x590 [ 672.615007][T28096] read_part_sector+0xb6/0x2b0 [ 672.620344][T28096] adfspart_check_ICS+0xa5/0xa40 [ 672.625835][T28096] bdev_disk_changed+0x7ba/0x1550 [ 672.631397][T28096] blkdev_get_whole+0x380/0x510 [ 672.636778][T28096] bdev_open+0x31e/0xd30 [ 672.641603][T28096] blkdev_open+0x470/0x610 [ 672.646574][T28096] do_dentry_open+0x785/0x14e0 [ 672.651879][T28096] vfs_open+0x3b/0x340 [ 672.656491][T28096] path_openat+0x2e08/0x3860 [ 672.661611][T28096] do_file_open+0x23e/0x4a0 [ 672.666638][T28096] do_sys_openat2+0x113/0x200 [ 672.671852][T28096] __x64_sys_openat+0x138/0x170 [ 672.677236][T28096] do_syscall_64+0x14d/0xf80 [ 672.682360][T28096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.688864][T28096] [ 672.688864][T28096] -> #3 (set->srcu){.+.+}-{0:0}: [ 672.696000][T28096] __synchronize_srcu+0xca/0x300 [ 672.701483][T28096] elevator_switch+0x1e8/0x7a0 [ 672.706777][T28096] elevator_change+0x2cc/0x450 [ 672.712068][T28096] elevator_set_default+0x36c/0x430 [ 672.717792][T28096] blk_register_queue+0x366/0x430 [ 672.723346][T28096] __add_disk+0x677/0xd50 [ 672.728207][T28096] add_disk_fwnode+0xfb/0x480 [ 672.733425][T28096] nbd_dev_add+0x72c/0xb50 [ 672.738368][T28096] nbd_init+0x168/0x1f0 [ 672.743137][T28096] do_one_initcall+0x250/0x8d0 [ 672.748528][T28096] do_initcall_level+0x104/0x190 [ 672.754009][T28096] do_initcalls+0x59/0xa0 [ 672.758871][T28096] kernel_init_freeable+0x2a6/0x3e0 [ 672.764601][T28096] kernel_init+0x1d/0x1d0 [ 672.769462][T28096] ret_from_fork+0x51e/0xb90 [ 672.775128][T28096] ret_from_fork_asm+0x1a/0x30 [ 672.780446][T28096] [ 672.780446][T28096] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 672.788289][T28096] __mutex_lock+0x19f/0x1300 [ 672.793510][T28096] elevator_change+0x1b3/0x450 [ 672.798819][T28096] elevator_set_none+0xb5/0x140 [ 672.804198][T28096] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 672.810560][T28096] nbd_start_device+0x17f/0xb10 [ 672.815972][T28096] nbd_genl_connect+0x165b/0x1cf0 [ 672.821649][T28096] genl_family_rcv_msg_doit+0x22a/0x330 [ 672.827884][T28096] genl_rcv_msg+0x61c/0x7a0 [ 672.832918][T28096] netlink_rcv_skb+0x232/0x4b0 [ 672.838302][T28096] genl_rcv+0x28/0x40 [ 672.843096][T28096] netlink_unicast+0x80f/0x9b0 [ 672.848476][T28096] netlink_sendmsg+0x813/0xb40 [ 672.853772][T28096] ____sys_sendmsg+0x972/0x9f0 [ 672.859079][T28096] ___sys_sendmsg+0x2a5/0x360 [ 672.864387][T28096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.869877][T28096] do_syscall_64+0x14d/0xf80 [ 672.874999][T28096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.881439][T28096] [ 672.881439][T28096] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 672.890187][T28096] blk_alloc_queue+0x546/0x680 [ 672.895492][T28096] __blk_mq_alloc_disk+0x197/0x390 [ 672.901229][T28096] nbd_dev_add+0x499/0xb50 [ 672.906261][T28096] nbd_init+0x168/0x1f0 [ 672.910954][T28096] do_one_initcall+0x250/0x8d0 [ 672.916247][T28096] do_initcall_level+0x104/0x190 [ 672.921719][T28096] do_initcalls+0x59/0xa0 [ 672.926580][T28096] kernel_init_freeable+0x2a6/0x3e0 [ 672.932317][T28096] kernel_init+0x1d/0x1d0 [ 672.937190][T28096] ret_from_fork+0x51e/0xb90 [ 672.942476][T28096] ret_from_fork_asm+0x1a/0x30 [ 672.947788][T28096] [ 672.947788][T28096] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 672.955015][T28096] __lock_acquire+0x15a5/0x2cf0 [ 672.960400][T28096] lock_acquire+0xf0/0x2e0 [ 672.965351][T28096] fs_reclaim_acquire+0x71/0x100 [ 672.971101][T28096] prepare_alloc_pages+0x152/0x650 [ 672.976748][T28096] __alloc_frozen_pages_noprof+0x12f/0x380 [ 672.983175][T28096] alloc_pages_mpol+0x232/0x4a0 [ 672.988555][T28096] vma_alloc_folio_noprof+0xea/0x210 [ 672.994370][T28096] do_pte_missing+0x1656/0x3490 [ 672.999747][T28096] handle_mm_fault+0x1bec/0x3310 [ 673.005208][T28096] do_user_addr_fault+0x75b/0x1340 [ 673.010862][T28096] exc_page_fault+0x6a/0xc0 [ 673.015888][T28096] asm_exc_page_fault+0x26/0x30 [ 673.021276][T28096] __put_user_4+0xd/0x20 [ 673.026071][T28096] qrtr_ioctl+0x362/0x460 [ 673.030927][T28096] sock_do_ioctl+0x101/0x320 [ 673.036044][T28096] sock_ioctl+0x5c6/0x7f0 [ 673.040908][T28096] do_vfs_ioctl+0xf5b/0x1530 [ 673.046026][T28096] __se_sys_ioctl+0x82/0x170 [ 673.051143][T28096] do_syscall_64+0x14d/0xf80 [ 673.056258][T28096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.062787][T28096] [ 673.062787][T28096] other info that might help us debug this: [ 673.062787][T28096] [ 673.073046][T28096] Chain exists of: [ 673.073046][T28096] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 673.073046][T28096] [ 673.085743][T28096] Possible unsafe locking scenario: [ 673.085743][T28096] [ 673.093205][T28096] CPU0 CPU1 [ 673.098572][T28096] ---- ---- [ 673.103937][T28096] rlock(&mm->mmap_lock); [ 673.108426][T28096] lock(sk_lock-AF_INET6); [ 673.115453][T28096] lock(&mm->mmap_lock); [ 673.122308][T28096] lock(fs_reclaim); [ 673.126301][T28096] [ 673.126301][T28096] *** DEADLOCK *** [ 673.126301][T28096] [ 673.134462][T28096] 2 locks held by syz.1.5565/28096: [ 673.139662][T28096] #0: ffff88802be28ee0 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_ioctl+0xd1/0x460 [ 673.149159][T28096] #1: ffff88802aba8f80 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 673.159262][T28096] [ 673.159262][T28096] stack backtrace: [ 673.165520][T28096] CPU: 0 UID: 0 PID: 28096 Comm: syz.1.5565 Not tainted syzkaller #0 PREEMPT(full) [ 673.165540][T28096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 673.165549][T28096] Call Trace: [ 673.165557][T28096] [ 673.165564][T28096] dump_stack_lvl+0xe8/0x150 [ 673.165587][T28096] print_circular_bug+0x2e1/0x300 [ 673.165614][T28096] check_noncircular+0x12e/0x150 [ 673.165639][T28096] __lock_acquire+0x15a5/0x2cf0 [ 673.165662][T28096] ? __lock_acquire+0x6b5/0x2cf0 [ 673.165683][T28096] ? __lock_acquire+0x6b5/0x2cf0 [ 673.165704][T28096] lock_acquire+0xf0/0x2e0 [ 673.165723][T28096] ? prepare_alloc_pages+0x152/0x650 [ 673.165742][T28096] ? __lock_acquire+0x6b5/0x2cf0 [ 673.165763][T28096] fs_reclaim_acquire+0x71/0x100 [ 673.165781][T28096] ? prepare_alloc_pages+0x152/0x650 [ 673.165800][T28096] prepare_alloc_pages+0x152/0x650 [ 673.165821][T28096] __alloc_frozen_pages_noprof+0x12f/0x380 [ 673.165843][T28096] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.165864][T28096] ? __pfx_policy_nodemask+0x10/0x10 [ 673.165884][T28096] ? is_bpf_text_address+0x26/0x2b0 [ 673.165902][T28096] ? __lock_acquire+0x6b5/0x2cf0 [ 673.165922][T28096] alloc_pages_mpol+0x232/0x4a0 [ 673.165943][T28096] vma_alloc_folio_noprof+0xea/0x210 [ 673.165965][T28096] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 673.165989][T28096] do_pte_missing+0x1656/0x3490 [ 673.166013][T28096] handle_mm_fault+0x1bec/0x3310 [ 673.166032][T28096] ? handle_mm_fault+0xee/0x3310 [ 673.166049][T28096] ? __pfx_handle_mm_fault+0x10/0x10 [ 673.166069][T28096] ? lock_mm_and_find_vma+0xa7/0x340 [ 673.166087][T28096] do_user_addr_fault+0x75b/0x1340 [ 673.166113][T28096] exc_page_fault+0x6a/0xc0 [ 673.166128][T28096] asm_exc_page_fault+0x26/0x30 [ 673.166143][T28096] RIP: 0010:__put_user_4+0xd/0x20 [ 673.166159][T28096] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 673.166173][T28096] RSP: 0018:ffffc90004b37918 EFLAGS: 00050202 [ 673.166188][T28096] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000001680 [ 673.166199][T28096] RDX: 0000000000000001 RSI: ffffffff8e19e94d RDI: ffffffff8c27d500 [ 673.166210][T28096] RBP: ffffc90004b37a10 R08: ffffffff8216755f R09: ffff88802aba8f80 [ 673.166221][T28096] R10: 000000000000891c R11: 0000000000000000 R12: 1ffff92000966f28 [ 673.166232][T28096] R13: dffffc0000000000 R14: ffff88802be28c80 R15: 0000000000000000 [ 673.166245][T28096] ? __might_fault+0xaf/0x130 [ 673.166263][T28096] qrtr_ioctl+0x362/0x460 [ 673.166286][T28096] ? kasan_save_track+0x4f/0x80 [ 673.166303][T28096] ? kasan_save_track+0x3e/0x80 [ 673.166319][T28096] ? __pfx_qrtr_ioctl+0x10/0x10 [ 673.166335][T28096] ? security_file_ioctl+0xc3/0x2a0 [ 673.166361][T28096] sock_do_ioctl+0x101/0x320 [ 673.166380][T28096] ? __pfx_sock_do_ioctl+0x10/0x10 [ 673.166401][T28096] sock_ioctl+0x5c6/0x7f0 [ 673.166416][T28096] ? kasan_quarantine_put+0xbb/0x1f0 [ 673.166433][T28096] ? __pfx_sock_ioctl+0x10/0x10 [ 673.166450][T28096] ? tomoyo_path_number_perm+0x219/0x630 [ 673.166471][T28096] ? tomoyo_path_number_perm+0x219/0x630 [ 673.166492][T28096] ? __pfx_sock_ioctl+0x10/0x10 [ 673.166507][T28096] do_vfs_ioctl+0xf5b/0x1530 [ 673.166527][T28096] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 673.166549][T28096] ? do_futex+0x395/0x420 [ 673.166574][T28096] ? __fget_files+0x2a/0x420 [ 673.166588][T28096] ? __fget_files+0x2a/0x420 [ 673.166601][T28096] ? __fget_files+0x3a0/0x420 [ 673.166613][T28096] ? __fget_files+0x2a/0x420 [ 673.166627][T28096] ? bpf_lsm_file_ioctl+0x9/0x20 [ 673.166648][T28096] __se_sys_ioctl+0x82/0x170 [ 673.166667][T28096] do_syscall_64+0x14d/0xf80 [ 673.166681][T28096] ? trace_irq_disable+0x3b/0x150 [ 673.166694][T28096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.166710][T28096] ? clear_bhb_loop+0x40/0x90 [ 673.166726][T28096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.166742][T28096] RIP: 0033:0x7fb5a2b9c819 [ 673.166756][T28096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.166768][T28096] RSP: 002b:00007fb5a3b17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.166784][T28096] RAX: ffffffffffffffda RBX: 00007fb5a2e15fa0 RCX: 00007fb5a2b9c819 [ 673.166795][T28096] RDX: 0000200000001680 RSI: 000000000000541b RDI: 0000000000000003 [ 673.166805][T28096] RBP: 00007fb5a2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 673.166815][T28096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.166824][T28096] R13: 00007fb5a2e16038 R14: 00007fb5a2e15fa0 R15: 00007ffee17b9a18 [ 673.166842][T28096] [ 676.153818][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 676.161859][ C0] lec:lec_tx_timeout: lec0 [ 676.166440][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 681.173846][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 681.182208][ C0] lec:lec_tx_timeout: lec0 [ 681.187264][ C0] lec:lec_start_xmit: lec0:No lecd attached