last executing test programs: 11m16.10686698s ago: executing program 2 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x31b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x60}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1}}, 0x20) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4000801) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "aefb6783b999c13e99b77e5a47e169926813e97782"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x360d}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdcc}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) 11m15.892769093s ago: executing program 2 (id=532): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18020, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x20400) (async) unshare(0x20400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x15}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x666d}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044001}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000ecc0000f9"], 0x0}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) ioctl$int_out(r0, 0x5462, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4, 0x8, @mcast2, 0x101}, @in6={0xa, 0x4e20, 0x968b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3}, @in6={0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x44}, 0x38d6}, @in6={0xa, 0x4e23, 0xffff6826, @private0, 0xbd}], 0xcc) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4, 0x8, @mcast2, 0x101}, @in6={0xa, 0x4e20, 0x968b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3}, @in6={0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x44}, 0x38d6}, @in6={0xa, 0x4e23, 0xffff6826, @private0, 0xbd}], 0xcc) 11m15.441352618s ago: executing program 2 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x2, 0x4) (async) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async, rerun: 64) r5 = accept(r2, &(0x7f0000000340)=@sco, &(0x7f00000003c0)=0x80) (rerun: 64) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x4, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x2, 0xfff, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}}, 0x20040080) (async) r7 = accept4$llc(r5, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000580)=0x10, 0x80000) sendmsg$inet(r7, &(0x7f0000000b80)={&(0x7f00000005c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000600)="ec1838f6", 0x4}, {&(0x7f0000000640)="e75b19ffecb256715dd2986cf54fe66878e2da1dbc2bfc31816996ee27f36eb51d069bacbd8e5a60ffb58d0cc854a33709bc9c552b4decafbc38d0b1375c0659b00d28ef57b8a52b4c55", 0x4a}, {&(0x7f00000006c0)="2855ccb226a93af3729f9c5f0c916dc6fbbdf14a8261afb7bc73f5ac034c2c4474fddca8135089be7bfa4ddc322b6c6c6230c5be93fb1dad69830b6a20b4f4e61f8a5dd0ae540177b5f2b9522783f071ce3f8a1d6c110c0bdb53592ee93a87cec0c7b4ed4bacfe4092c04f121082c79c2c0ef3208988edcaad2b22f3d2924185e4fb723c2dca9d4adb9dd31ec0aba2475db297cc721a20a8eb860f7d44a3b8b48eb8819149aa4bebb5ca79f578e324f89babeaba13962ad190d5c4606a0335498f19f783cc7d6465889b9c102cac", 0xce}, {&(0x7f00000007c0)="578f7e9f865f7ea879bcc6e1c5ffd70c5aef3747e271f59ba8bbbdb7515d5dceed5d270eefdf536f69538c2ea4c4118de3", 0x31}, {&(0x7f0000000800)="ebdeb287a4bac40070132a47fb7b6b92f4263e6f63683db2093a307ea6b0392e66b00515e0dc8d9d4ccbc17978ed9a70ca689ec11ab7413421871b20032557c4f432ea59f47724fc1c8694c4e2f34e771b92df43c022f05669ea7b71753a54487f172d8a6aaa1b5179846099c8e7d8d1769c985fb4ca7c18663847bf722d226bd46755992aa69e07c266b7a93cfd8cbdeed337b5f2914ef4287d8f45b78d1ff5287d635d93509c6a204daf6bcd254b0ceb601f612440be5b98b917", 0xbb}, {&(0x7f00000008c0)="bffdad69d16fd08ed5893170a7d72852d7ec88eae49941ede6e146f520dc899e20abb0b0b08e6d19f15b262efe2332258880689138304ef7f185feef026fbad090287e9b16e6386e3fa5669bc8f5d7ca567bbad79109f9028c5d6c656311af735d46b0b1513aa1e5d2d3a0302d9e34c4b7d4db243f6076e0921baa152065b181aa36c6f6b68b71d6ef12e559e42279b3327fb44bea8f8441ccd27beaafea90941af7b20f057fe01f2e81c42fe53963c0bcb5f737d3a17f16ae687ebef95d7570fa285a341793ad91fc", 0xc9}, {&(0x7f00000009c0)="9b778530c11e8982d1d9a494c753fca88641060cabe0be6588296e45b8d1e49a4ccfcfd5fa31023359b7b7c139d7f2ee0e7620bb70f70a2bf2dfb03650402334e6261a8e5247eb7816fc92c46167cab755a34a647fa18ad3c6816c60ad91848e52d37355103bcb589b379eea5d9414dabcb6a5c36f33cb534702a94370d4aaf78aad5974e32753502becaa99d843dbaf2ae2ed5b97d3e0205f2ca5092f390ee496bba12e12e3a52e59cbf768c797d2783d878d6c0c9945d0bfe71b3398e47807e40dc3d89099161a6520defe0493d6f7e6c71c", 0xd3}, {&(0x7f0000000ac0)="5e66d38f4a49413ce6a531aa65fc270e1ef07f69e81dd138bbf4ae8ce9", 0x1d}], 0x8}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x8c, r1, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc3b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x310}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7eb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x8104) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r6, 0x209, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r5, &(0x7f0000001400)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000f00)=@deltclass={0x4ac, 0x29, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xd, 0x2}, {0x4, 0xffff}, {0xa41e3c037f089a4e, 0x3}}, [@c_cbq={{0x8}, {0x480, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2e, 0x0, 0x1c, 0x80, 0xd, 0x8, 0x25b, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x6, 0x3, 0x5, 0x9, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x1, 0x100, 0x4, 0x0, 0x7fffffff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0xc, 0x6, 0x8, 0x400000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5, 0xbb0, 0x800, 0xef6a, 0x2, 0x5, 0x2, 0x0, 0x6, 0x9, 0x3, 0x401, 0x9, 0x2, 0x7, 0xe8f, 0x3, 0xfffffd68, 0x800000, 0x6, 0x6, 0x1, 0x2, 0x1, 0x5, 0x2, 0x1, 0x33, 0x1ff, 0xb8, 0x9, 0x9, 0x6, 0x5, 0x5, 0x9, 0x3ff, 0xffffffff, 0xffff, 0x1, 0x4d1c, 0xb9, 0xfffffff4, 0xc9, 0xffff23d6, 0x9, 0x0, 0x9, 0x6, 0x1, 0x1, 0xffffff80, 0x9, 0x5, 0x3, 0x6, 0x1, 0xd2, 0x8, 0x4fe, 0x5, 0x7fff, 0xffffff3d, 0xc, 0x36846e1c, 0x8, 0x6, 0x80, 0x7cd8, 0x5, 0x7ff, 0x6, 0x7, 0x0, 0x8000, 0x1, 0x72, 0x8000, 0x1, 0x3, 0x5, 0xfb4, 0xfffffffe, 0x674c, 0x4, 0x0, 0x10000, 0xef82, 0x7, 0x5, 0x3a4ccb09, 0x7f69, 0x1, 0x8, 0x80, 0x0, 0x5d0, 0x3, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x8, 0xed, 0x80, 0x4360, 0x3, 0x0, 0x2, 0x5, 0xca, 0x4, 0x1, 0xe7, 0x10, 0x5, 0x1000, 0x1, 0x7f, 0x2, 0xa, 0x2, 0x1, 0x0, 0x5, 0x5, 0x2, 0xfffffffa, 0x3, 0x5, 0xe, 0x5000, 0xb, 0x5, 0x6, 0x8, 0x1000, 0x20000, 0x8000, 0x7ff, 0xfff, 0x100, 0xfffffffa, 0x400000, 0x5, 0x101, 0x5, 0x4, 0x9, 0x800, 0xa4db, 0xb70, 0x1000, 0x3, 0x3, 0x7, 0xf, 0xc1, 0x2, 0x4, 0x8, 0x80, 0x3, 0x8, 0x2d, 0x53ff6bff, 0x4, 0x7, 0x2, 0x800, 0x4, 0x0, 0x7ff, 0x7, 0x81, 0x1, 0x6, 0xb4, 0x3, 0x0, 0x8, 0x3, 0x7, 0xfffffff7, 0xfffffff4, 0x7, 0x5, 0x5, 0x4, 0x10000, 0x7, 0x2, 0x2, 0x2, 0x0, 0x80000001, 0x7f, 0x40, 0x401, 0x7, 0x6, 0x7ff, 0x6, 0x184586c2, 0x7, 0x3ff, 0x3, 0x9, 0x9, 0x6, 0xe, 0x6, 0x3, 0x1, 0x10001, 0xd5, 0x4, 0x4, 0x6, 0x5, 0x7, 0x1, 0x101, 0x0, 0x5, 0x3, 0xc, 0x0, 0xff, 0xa693, 0x9, 0x1, 0x3, 0x6, 0x100, 0x4, 0x4, 0x800, 0x4, 0x3, 0x9d8, 0x4, 0xa, 0x6, 0xe, 0x4faa, 0x95, 0x6, 0x7, 0x7, 0x3, 0x7, 0x8, 0x1]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x26, 0x3, 0x4, 0x7f, 0xffffffff, 0xffffffff, 0x2, 0x80}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2c, 0x3, 0x6, 0x6a, 0x9, 0x4, 0x9, 0xff}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000001440), r10) sendmsg$802154_dgram(r5, &(0x7f0000001540)={&(0x7f0000001480)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000001500)={&(0x7f00000014c0)="f1217a87b43c902ee5afb85c7567bd7477b6326d6efbcde61aee6531d6ae0f5e18e70b011894af2c802188700434360970a862f0ae23d464ab63", 0x3a}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) (async) r11 = accept4$alg(r5, 0x0, 0x0, 0x800) (async) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), r5) sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x74, r12, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xbe}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe8ab}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x21c00000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x138, r13, 0xa07, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x4, 0x6, 0x7fff, 0x5, 0x67c8, 0xfdc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x1000, 0x5, 0x3, 0xaf, 0x0, 0x9]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x9, 0x9, 0xd8fc, 0x0, 0x4247, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xd, 0xd4c, 0x2, 0xa8, 0xe, 0x134, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf196, 0x101, 0xe, 0x401, 0x8, 0xfff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x401, 0x9, 0x80, 0x5, 0x9, 0xfffa, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x6, 0x7}, {0x3}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x2}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x5}, {0x4, 0x7}, {0x2}, {0x5, 0x8}, {0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0xa}, {0x7}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x7}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x9}, {0x3}, {}, {0x1, 0x4}, {0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0x3, 0x4, 0x1, 0x2, 0xc, 0x2, 0x36, 0x16, 0x1, 0x18, 0x14, 0xb, 0x3, 0x0, 0x6, 0xc]}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x8001) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001a40)={r11, &(0x7f0000001940)='team0\x00', 0x725001, &(0x7f0000001980)={@align=0x6, {0x5, 0x7, 0x2, 0x3}}, 0xe5, &(0x7f00000019c0), &(0x7f0000001a00)}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r14, 0x0, 0xac, 0x56, &(0x7f0000001a80)="bbd2621417c75b8a0d492f83c6bbd784d3a86d3f0d7496bbc3e546d5af984bf14e502057b4f4216a825a737e7230e55351d26e68c4e14df2be1007b8a17e1712b748f329dcd2f316c966cd946bead0c7d87466a7722f06d8d98f7c9c97c9c682c95c32a0e6b9932e827a3afa55c86042195001a3290fd44d219c86c72438e05fee98bbddb672d0a5832bffacb032cd2791bed89de4622a4b58581913fded7933ba141982af9784ed4c181592", &(0x7f0000001b40)=""/86, 0x200, 0x0, 0x5d, 0x4e, &(0x7f0000001bc0)="01ed226539cd9439603bd2a70c2dffd74d775abd4d7c479c7862ba7a91bc6b255ef13207925f660030eb69cb7319c5d50a67a6b154c092a44cac786955827cb93150e355e3cc51fe42a781357cf90661189f92963b3c53afa9c95ea2b6", &(0x7f0000001c40)="1dbaad5a4c28813c2e42067f21f4f2dd64094418c2b938a7ee9c4791d48f157c5b4d0ac263e5763a03a53d75062b8ba4470bb032eefc73426746bb218dbab4460acb867dc921f8957a84808b69f1", 0x0, 0x0, 0x6}, 0x50) (async) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000001d40)=0xda8, 0x2) 11m15.190125446s ago: executing program 2 (id=539): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x18, 0x10, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xac2bee7485440606}, 0x4000) 11m14.924222211s ago: executing program 2 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0011010900020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 11m14.709718s ago: executing program 2 (id=544): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80001, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x620ee000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000000c0)) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) ioctl$TUNSETVNETLE(r8, 0x400454dc, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 10m59.64444284s ago: executing program 32 (id=544): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80001, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r0, 0x620ee000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000000c0)) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) ioctl$TUNSETVNETLE(r8, 0x400454dc, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 5m59.472287681s ago: executing program 4 (id=3311): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) connect$unix(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000ecc0000f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 5m59.240487271s ago: executing program 4 (id=3315): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000014000000e0ff0000e5e1"], 0x48) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) 5m59.024812984s ago: executing program 4 (id=3316): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x29) 5m58.809613037s ago: executing program 4 (id=3320): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$key(0xf, 0x3, 0x2) close(r4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000001380), 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0x16}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x29, 0x6, 0x0) 5m57.789171318s ago: executing program 4 (id=3324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1cc, r1, 0x1, 0x400000, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_RATE_NODE_NAME={0x17f, 0xa8, @random="53b71ac15298f4630d0b283568d0ba6b1b4fe52348f6c812927ce4345a84c040b137a5547bcb01eb5663e661d6f6b544c66f6fe92471f4111d45b4731bd0ddb2da2905382bca529f9e9278fc1738d85f0a4f13540ee934c76fd1ea56c2190d6ed4dad7c106a9e9bdc3f7672b2d827a27266292de8c745e92f9400cc70048ac914c00832f000000000000bb1f497d9409794e26b87d5681ec9c03f12b1e369b624f41265b2421d57abd23c375e231c0dc4901a52dc60b8ff2b2e08559bf94d4fbb83cf576422bbb04262687bce75c802e8ddabe6289458104a58c4293d895380ee61d6c3995757ad182701d6b8b06081e2b817ae4527be56dd1c457509be51ca9f98104118b8f897cc5def056fc1b908821e1d5817e00ba09763758dd52328bf2bc9e8c0f2a28d84ee9e25af4612457793f10cc8f0cfecf4428b51448a6d47b68a4bbf197f9573a1c32d516c798824c9b3318c1525777c8d1f735d08f8abdf41e047bd9c11ffe94d865ebe3ba359a397fbd88af1aec75b71f9b37b3"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 5m57.493068802s ago: executing program 4 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040081}, 0x4000011) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba350087ff000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 5m42.471770623s ago: executing program 33 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040081}, 0x4000011) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba350087ff000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 15.104538493s ago: executing program 5 (id=6499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x1, 0x4) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xe, 0x0, 0xffffffff, 0x9, r1}, &(0x7f0000000080)=0x10) 14.121016206s ago: executing program 5 (id=6501): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x2, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x480dc}, 0x44840) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000002c0)={r10, 0x7}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc", 0x2aa}, {&(0x7f0000000bc0)="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", 0x18e}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0x11f8, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], &(0x7f0000003140)={0x1, 0x3, [0xf52, 0xea2, 0x77b, 0x147]}) 9.892294892s ago: executing program 5 (id=6504): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f0, 0x1170, 0x1170, 0x1f0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1f0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x1) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) (async) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) 9.592765722s ago: executing program 5 (id=6508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0x5) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x29, 0x14cf5c95fce787b6, 0x7fffe) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x4044894) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8.942059004s ago: executing program 5 (id=6513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x48010) (async, rerun: 32) r1 = getpid() (rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) r2 = getgid() r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000600)=0xe8) (rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000006c0)=0x0) (async) r8 = getuid() (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x20000000) (async, rerun: 64) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000a00}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x19, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0x4, 0xf, 0xfc, 0x0, 0xc8, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8084) (async, rerun: 64) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r14 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r13, @ANYBLOB="089805000750050008001300", @ANYRES32=r14], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$netlink(r11, &(0x7f0000001c00)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)=[{&(0x7f0000002b00)={0x968, 0x27, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0x135}, @generic="debd5871374764113543920aa529316e9ef24c55596b9fda473efdc07ef487", @generic="7da83bcdb7bee77568ecfb551988937d79c683539056c899fd8a6dd2714489800985a4597176723cd608c0ac3924c14cda4609982de03bdc54ffc807233be71fce305caa92f6d2fc062293bce9b64f20df7eb124a77148276841aa9b7a", @generic="86f7bcf31c0a90b3a02bafe9822d72de7e7acf1cda4119f0c7a554d4a3543ced8d8fae44fa966fb1d06a4706cc7fcfb96847652cdf3b65fa20f246c4a0", @typed={0xc, 0x117, 0x0, 0x0, @u64=0xfffffffffffffff8}, @nested={0xc, 0x12d, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x761, 0xe2, 0x0, 0x1, [@generic="2b502203a6845c5c762b0c48e63c7a2eb34db76b40e5abd516e49c2d9c16f51a68d2fcb175b9ce6a74e7efc10fd40a213a891f6522d4f63372824f325185a2af21c64f496113a0537ff894b2e7dfebacf5f17cde7b39c23fb7a4731f14b1381ef4b4ae7916cedaeaeb849fb40eccc3dc0775ed8bfc0389d68e1d511ef1c8185b9315b1eb6795c7227de4a878e95dc9c25130d804bbf58830d3a6bd6affa30862869043e1a0", @nested={0x4b2, 0x99, 0x0, 0x1, [@nested={0x4, 0x17}, @generic="e8b961aeb94b5bab9187d665eb094d0b93db5d8d2ae857d278152193a4e2f44424a6eec8f4d021842e3ec8206482e377fa881872fab9aa8bd8cc80f3946a414f0dbc3b0af876d3c899dc8b4edb163fc030231dd7fb5ec4fcf704b886cfa886eb2dfce01dd5cc384a46b51e46ee7c9b5b262fab75846919e7", @typed={0x2a, 0x91, 0x0, 0x0, @binary="57b413221dba93fee2f77721d2833854a830ee6f4d99af2a3702c537aca1bd2396f33a6afa33"}, @nested={0x3ae, 0x151, 0x0, 0x1, [@generic="23361ccb8175fb2cc88e6be470e81c0521162155070dbb18dbf5", @typed={0x8, 0xb8, 0x0, 0x0, @fd=r13}, @generic="33cf3cab4eb1763bb5a6436e301493841b345aa8f0e97f68d2cbbd2efef7b0f1cf7abd71d044700c2dfeb5b1c2b6a3650a8b745a38e41a7beb093a88f156d3644937acdc9212969ff607773143ddc6802b4c2f2e3413cc7fb580de979a207f8f19acb5729a7ea1d362f11e", @generic="6ab5ea77ff7ca2c3f06ddff200c685ebbd802fe5abea7a265c80a021b2c5b4bde82282629b8ee69156672ea0535b7b31f12c6bd3dadf3a27819f200b7060aeb3ede0462db6e028cbb8068d8cce1fcfc5d45961f5ad80bf2a639ca4cbb8a29133380d08bc694f1ae65e9c3acc9df085718fa0fb0e0853780ba4e33d7436495a654a23dbe56c438f613ab23eb960e840891ace05ae0df2feb2b4d8fb93b554453aa3e5ac960a9e377425b02ece66742442c20d28b9b3ff9c3c26d3cd3822580a59bb65d389f539a7ede94cc52c4de4d5", @nested={0x198, 0x61, 0x0, 0x1, [@typed={0x3e, 0x4b, 0x0, 0x0, @binary="6de9bea7f8009ba4773f3adf3a0b679c75b9fed61a27b98964eed4e3da0e828b4be985da946abc5994d955f0099b0b6cbd0c9af119e5b23982c4"}, @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x148, 0x0, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @fd=r15}, @generic="6fe34f7be7bb20aa29536f9e9fc4885322cb08f4ad43df998e02202a841bcb74407d178a6a0154ebce03d5632a085178d3b520385be6a09cd788ef222c", @generic="5031f8f016756d1af48150c3fd25c172c7c74d08512bfd0fafe36b9fe411631e82785b2efd3e65f829f33b29fac804b53eb1a90b750f7bd287299102f5bfc9df5b0cf29df953c009090d67a7e645a882c68b602eaba6fb46c37719376f1e33b641e8e6704f73be269cf61ea9e85582f9854693edcb93cbdefc48bcbac94ba098bb0f469b0c936fa596e018447e0c95d1bb730bb570ed236e72da52815222a62b6ff4092a276cfb77cdfd918f40c2b0b1d4385e9f3a31fbc038af3fe0641b7d4d2186b1f8683a517e3c14ec81483e0007306fa9d566a43c4f90d43deac4fc442875d590bdb2956561fb2a9106bcda82", @nested={0x4, 0x11c}, @typed={0x4, 0xd5}, @typed={0x8, 0x117, 0x0, 0x0, @uid=r18}]}, @nested={0x4, 0x82}]}, @generic="f31b41a59ea533ed", @generic, @generic="e2b5b75e4584e15edc5b98fa7a53bd4aa3ae2fe86432d497ed86fb68a9677c3a16c30c417a49b4870c21341a74cfd7d7e2fbdca1020346be3b48aedd9b2ef03989f58ac3948adf6ac67f14caf1f963c1005b1f3637fe1733c556578738b82edcc11aad8bff62e7298d058f5dba77db10f495dce66b7f0ddb57a813b6ab1522c051cd993883d795f8217f3fa1d476b4e431477317221a22c708ec43b6a251b6ee1b03aad3e2f478ad64dd9571bb85"]}, @typed={0xb, 0x3d, 0x0, 0x0, @str='ns/ipc\x00'}, @generic="1329576989698df7176dfb7f615343cc7684bdfc16352d05cbc1ebb90ad0d72d1346b95e471d6147acbf5bc8834ce1a24a8a480a7f0bbea06bb30456a5c49d63826ab3aeb89c9dfe99a0"]}, @nested={0x201, 0x16a, 0x0, 0x1, [@typed={0x4, 0xb8}, @typed={0x83, 0x87, 0x0, 0x0, @binary="18c7d42a435e8acc75af65879c9eabd5c7a13fedf852e68ded933e5e841ad681bedeb27e900164b1e177c0409474081241e32f7fda7fe1413fe9bd87a349a505c9476ee51f3c7f2a10b9fe95887df314e8fd7bfa7e46e6b99cb3834c3b8165334a82ebfe345a279ea411e711277305649e4355cddfa6fbc80a9fca53f2f483"}, @generic="3ef594d40fdbf700353e7b43312c9e7781dd6fd6001a9382d021674a89af172f4477af8977acd673ccaa0fdb3780e802b1da540bdb01341f16cf4a0fd4302c9034a6247df687051d745975950dc9d7d6e03b2845509e17455118c14bd3cba7f8a90786d7d8eb88f695a9b775e6ca65ea7d2d1eb9cf4aee87547e9a63c351a179390550eb3d0f1b2560a0e603b87ce2f6063b9141633a618b267439f318c030b511ad79a39e7fa5f34b3d536566579bdc5ac4b5e2ba7b7c351ca5dcb9fe4e2e23e3e1", @generic="cb5ef878c2729d25f109c99ebd20d624b112cb66ee05048137c2adf62ea01b4a6ccea8e613ec0aaf6ef54c40ee03fc313ccf68faec1b8632e737c123cba1b6d2949b747622c1cba3d1195339397dad470994a28b0e0afc37c597e0c68e99abe1f891674b6afef29865c657f0759acd61720a9b6fc3aec86106286feddfd73428b0ce6c", @nested={0x4, 0xbb}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r16}, @typed={0x8, 0x156, 0x0, 0x0, @u32}, @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x1}]}]}, @nested={0x111, 0xd3, 0x0, 0x1, [@nested={0x4, 0x3f}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x106}, @generic="2f12a12eb856ec0fdc21992bf7c37ac639e84fc0dfd0e3d4cf510b0c4c50599e94112f26f6bdd5575edd7a7df2", @generic="485b9f5f52115da6f11771eb7525bbebead9eba9a7677732d1113b28a9b44ae3dcd5d40a6c7b31e160c08c2ba8a68c559e1705703c02e52e0ddb0475e65c5f3199a8b78980c1d64e259aac732317ace80ddb2823fac3fd1ea4a22162c6b414dec8b2064b98435209f5fd43c7dc80fc4874b7dafecd8fb5990dfed2ee8b1c7b6b39dd860d454f71e6ba92bf32f5a020e160192d8c33f770da71d08b2f1bf2693d6646483aa30d5a75096513641d15e1af1be4ec253c73c195ce6928a7f87f34cf", @nested={0x4, 0xbe}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r12}]}]}, 0x968}, {&(0x7f00000006c0)={0x13f8, 0x42, 0x10, 0x70bd27, 0x25dfdbfb, "", [@nested={0xbb, 0x8d, 0x0, 0x1, [@typed={0x14, 0xac, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x3e}, @generic="a0cac7463dd518df8b9985744a1fbbd2b8700eca63c26789a2c60f725fe1701fe2adbca32894fb8e372c1456cdd4c471e9c9f7f1fa14bbfca4ed7e842a74636fa92bbd13358ef945026100a6539653ce05bd94e93c86089dee3f047f468cd514c610a892886dddcc2771ab24d5a07feecb89a0e8bb1175bba18fbd3bb2118e0a9f7c0047b3b882eb8784d4e0a0a948fba25e2e8762a2a01510302d", @nested={0x4, 0x38}]}, @typed={0x6, 0x2e, 0x0, 0x0, @str='\\\x00'}, @nested={0x11cc, 0x131, 0x0, 0x1, [@nested={0x4, 0x11b}, @generic="b5b0f1fe216cce06e88db3db5659fe70d7f98e94b455c6e85c436b6d3845bfd33b43cf8483b9de909b64a5", @nested={0x4, 0x10a}, @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="5951d26dc30bff8cb68c3f60d5700fb7e2415a21a185d82ef53a0c991da586aaa4f7746ff52d26d5ce90bb0e63e58ae1b78fd8586fd31ccae7dcfdce4f5e38ad8fe63ed67b5d02ceffe61d5575682eaf2a44dd1b85b6c8d8f9f51d8497fe53392b580a54db5e2040c419ae3a952f358c67899c9863d60c5108bd21a268157f37ff664d86e6eb418b4eab532cca297f201159a4e4c43d38cd93ad10c9b22071022225b72126dab43f9112afd1c403c93d646a6da38c63104605a68f5f5b81d20df803617f11e9f80e8ba1be1504633e81b0b60371a00192cdc005a5", @nested={0x4, 0xdb}, @generic="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", @generic="61c86e7473d5422a96b15de6e14075f052ac1b0888e139491ded5353b3da46d53aa7dbe6157923e650320fc0b7cfd1599e4617dc2fbe460ef7905a945e8bc991912c4e8534c8b2325245bf0d1b74b174b42443146c035db2027bb158b0c605abef317ff7bd63ef3204f34325c4f447ed910466c5b5eebd0cbd320f2831bc9be401433008969182c0c05f6e887040b0eeadf22dea5589fdaf79555d65c5f51f7ee284b386ad78d3de4cb1af6babe3"]}, @typed={0xd1, 0x23, 0x0, 0x0, @binary="94937105578bb8178b3e1d10a72e5e990643a44289ffa9ece979c6f5a458d662584c28ff8af1e337e65f90968589c9425e167552dac16980dc9b842a63145e3f74be8798d33c765fb141edb9fd0278516cd37cfbdc23c10fa69d3dcfc37d872be204e1d0e34c663d40f0843901c1203b64600ef9b3045396aa0a83e5d597081d066349143a2811b2d4be1557d13fe550a52e181f5416ba89866d99d9fc6886f14018025a8e77f159dafcb78b7678ea05cbb156c601791525dab0e7da21492a4da002319125c7beb04501e89cbf"}, @generic="50eb9ae37e2f90a3a9e42f8c11c80e09a1de65cdab3fa0c66ae842b603687171b27e9c58c097da2109a234e09b7a451cc00b38d8d6246a3a76b8a5107e2d660051841e1616afa408226d00a690be6803651ddcd5dfafbabc7bca9e5da80d9eaa6c41ec0feb42245eccc3031e809d09c938aee09e99f80976b38f5b4e4e2b2c332031"]}, 0x13f8}], 0x2, &(0x7f0000001b80)=[@rights={{0x2c, 0x1, 0x1, [r10, r9, r10, r10, r9, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r19}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x0) r20 = accept(r0, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000780)=0x80) (async) r21 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$netlink(r0, &(0x7f0000000900)={&(0x7f0000000000), 0xc, &(0x7f0000000200)=[{&(0x7f00000000c0)={0x88, 0x34, 0x400, 0x70bd25, 0x25dfdbfc, "", [@generic="eda4a807dcfb024cf47c6b0cd67d1f43477c635bf210270d110e986c2b60ddeeca72bfb997dcf67f87f33f08cb115587eeb02274dfb9261fa62898602d91f2c626d6deca8171a7941c31697093a3f75086e2d058a6252b16fcfe145600b2c9055efe02948a56f782900b6f0758cad31247e130adb7"]}, 0x88}, {&(0x7f0000000180)={0x18, 0x1a, 0x400, 0x70bd29, 0x25dfdbff, "", [@typed={0x4, 0x13}, @typed={0x4, 0x155}]}, 0x18}, {&(0x7f00000001c0)={0x18, 0x19, 0x4, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x30, 0x0, 0x0, @pid}]}, 0x18}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r19}}}, @rights={{0x2c, 0x1, 0x1, [r20, r0, r0, r21, r0, r0, r0]}}], 0x118, 0x804}, 0x10040044) 8.651740756s ago: executing program 5 (id=6516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf253700000008000300", @ANYRES32=r5, @ANYBLOB="0800570000800000050018011d00000008009f00040000000800a0000100000008002700030000000800270000000000080026008f090000050019010b000000080027000300000008009f00040000000800270000000000050018012400000008005700f9ffffff0800570006000000080057000c000000"], 0x94}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) 4.473777906s ago: executing program 3 (id=6540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000007d99080000", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) 4.105384988s ago: executing program 3 (id=6544): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0xa, [@const={0x8, 0x0, 0x0, 0xa, 0x1}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @fwd={0xf}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x75, 0x0, 0x6d, 0x6}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x55, 0x1}, @struct={0x9, 0xa, 0x0, 0x4, 0x1, 0x0, [{0xf, 0x1, 0x80000001}, {0xe, 0x2, 0x1}, {0x4, 0x3, 0x6}, {0x1, 0x2}, {0x2, 0x2, 0xfffffffc}, {0x3, 0x4, 0xf06}, {0x9, 0x5, 0xf}, {0xc, 0x1, 0x8}, {0x9, 0x3, 0x9}, {0x5, 0x5}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x9}, @struct={0xc, 0x3, 0x0, 0x4, 0x1, 0x5, [{0xf}, {0x2, 0x5, 0x3}, {0x9, 0x2, 0x5}]}, @union={0x10, 0x1, 0x0, 0x5, 0x0, 0xc916, [{0x6, 0x2, 0x4}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x26c0b5c60ab1f23, 0x61, 0x61, 0x30, 0x61]}}, &(0x7f0000000300)=""/175, 0x14e, 0xaf, 0x0, 0x4}, 0x28) 3.988593329s ago: executing program 3 (id=6545): r0 = socket$nl_crypto(0x10, 0x3, 0x15) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000200)={{0x2, 0x9}, 0x100, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) 3.955269877s ago: executing program 3 (id=6546): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.804825995s ago: executing program 6 (id=6548): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async) accept$packet(r1, 0x0, &(0x7f0000000000)) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 2.777002108s ago: executing program 0 (id=6549): socket(0x1e, 0x5, 0x0) (async) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socket(0x1e, 0x805, 0x0) (async) r1 = socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1a000000000000ffffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r1], 0x48) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f00000000c0)=ANY=[], 0x0, 0x3a, 0x0, 0x0, 0x5b8}, 0x28) socket$kcm(0x10, 0xe, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="b6fb4c4ac9bf5996df15a494c721da0002", @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf255100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40004) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="894476234618"}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="894476234618"}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7ffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x8}, 0x2b2, 0x0, 0xc, 0x5, 0x9, 0x8, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa632, 0x81, 0x3, 0x3c, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.648567258s ago: executing program 3 (id=6550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb23ad3e978f65c1071d4f0af9f09", 0x12}, {&(0x7f0000000300)='x;', 0x2}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x20048000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000000)=0x8) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00f800", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf25280000000600060003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x820) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r9) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r10, 0xf81, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xc4, 0x5, 0x10, @loopback, @private0, 0x10, 0x700, 0x5, 0xa58}}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L`J\x00', @ANYBLOB="a80b4475b04aa633782d21f370ef0262fadc56e71cc20a06839050376c5e6bf5d3f37e1c0f65b7fd139ed578c207693dd0345140fd75704166e0752d335e4653646544930685115fc314a0eec8326df61ae5ef7e3cc7", @ANYRES64=r7], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x26048841) 2.5057515s ago: executing program 6 (id=6552): r0 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.384247333s ago: executing program 6 (id=6553): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) 2.201706799s ago: executing program 6 (id=6555): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000ceb524c448dca03b795668de61a6b79d00"/44], 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xe, &(0x7f0000001c40)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000001dc0)='syzkaller\x00'}, 0x90) 2.192671539s ago: executing program 0 (id=6556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 2.113106123s ago: executing program 1 (id=6557): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x3cbf}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) 2.005360562s ago: executing program 0 (id=6558): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe", @ANYRES32=0x0, @ANYRES8=0x0], 0x34}, 0x1, 0x0, 0x0, 0x861}, 0x2000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2801001c88e54769d97563e0aee9d7b63f72f18a4e48b3635f1a0794"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0xffffffffffffff0e) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c47890c390bca4900000000", @ANYRES32, @ANYBLOB="211000000300002308081b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x8, @multicast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x106}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x3, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) listen(r8, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYRES32, @ANYRESDEC=r5], 0x174}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES64=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r13, 0x0, 0x30, 0x12, @val=@netfilter={0x0, 0x0, 0x5, 0x1}}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYRES8=r7, @ANYBLOB="6e2116ec7d3fa3dd572abbb803e7d24a43fa27ef83c638ce61555768613b2dd4bacfb9baf5d31c41ee2a959a04cccd77fdf47b01324b5e7360d997a99e99aa1fe24f42b5edd42a9333df5381d1246b7042710e9c462abedbc2fe45d98dc2abe3a41594b18ce4b5a77fbb47ed0f722bda15f67a90d025db281c7baab8b921752875c219db993f022b59073740f6d1dd2550f66a59a7efade3e53df15773ab41f3fe36eda4039e8f7b802843955349e71ff20f575ee262697ae1479237a148571c8b13165eb8c43dcf7ba8121959814bc414049e6d5970c224d0f7f77a49cc07b97a9406be8e", @ANYRES8=r10, @ANYRESOCT=r1, @ANYRESHEX=r9, @ANYRES32=r13, @ANYRESHEX=r14, @ANYBLOB="ab9713b1a3f6885f5e927811b91c34013fd11e5278d69b39aa51afd997c6c5680ee56f79f3b5228b8042ae2606f68cf72651557a8b5628dd62d913f36a9996cb0f7db909dfb04c971c8c3acd5b3cdb0f007bced677a942028572e1742ebc783f74806cfcf0088323994cedb6c11d6750b4d97c468ffe51c518c6a7cd52e9671579f802", @ANYRESOCT=r12, @ANYBLOB="bcddd43244a9c69589548a930e1ebf9eef326e736ed8382d5b6ffc2e334c6e999124de8b460d57a9a740062770e79915640bb204731e450d3b2f6a1887c7b8cdc5c992c14328ff89e601558a3076ebf6c4fb757e7cc3990e150a1b055f997984e005cb7fa646411d0e072e91752b7c8755b10596d5b6f2d8158f3a98280a2db7752326f34e61f5ea85ee1a52d153ebeaaadf5bdc434a69b8e777840a7a9161fd60cf48b0a4ac02a4"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c051) 1.927448274s ago: executing program 1 (id=6559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "706c2c48b7b19006", "1db65db6f47187f63be7b781288b3d76", "7a3b82fa", "e5cb7203fb2a2a8c"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "706c2c48b7b19006", "1db65db6f47187f63be7b781288b3d76", "7a3b82fa", "e5cb7203fb2a2a8c"}, 0x28) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) 1.856896782s ago: executing program 6 (id=6560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x7, 0x163, 0x0, 0x0, @binary="4bf938"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40009060}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x4b, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000140)="039d08b06b3b8d8ebfe00117b5b41207984942f71086db7543bbd058c72ccb7104a276180e7d816b6d955cc8a5c019a19e435c6189ae9d989df551fe0008e38f422bff17b2e54bfd11cb16b0071f9efe17d6f600b5ca9186a534917d5bdd5ba4f28b13981e3132f58c45fd04f25017052ab4d0b298a506f63ca082ea6775913e1de8fd16ed24d9", 0x87, 0x5c22c968eedc7ed9, &(0x7f0000000200)={0xa, 0x4e23, 0x7fffffff, @mcast2, 0x3}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x7, 0x163, 0x0, 0x0, @binary="4bf938"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40009060}, 0x0) (async) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x4b, 0x0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendto$inet6(r4, &(0x7f0000000140)="039d08b06b3b8d8ebfe00117b5b41207984942f71086db7543bbd058c72ccb7104a276180e7d816b6d955cc8a5c019a19e435c6189ae9d989df551fe0008e38f422bff17b2e54bfd11cb16b0071f9efe17d6f600b5ca9186a534917d5bdd5ba4f28b13981e3132f58c45fd04f25017052ab4d0b298a506f63ca082ea6775913e1de8fd16ed24d9", 0x87, 0x5c22c968eedc7ed9, &(0x7f0000000200)={0xa, 0x4e23, 0x7fffffff, @mcast2, 0x3}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 1.69473005s ago: executing program 1 (id=6561): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0xfffffffffffffdf2) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0xe0) write(r1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x4, 0x100}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r2 = accept4(r0, 0x0, 0x0, 0x800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400968997341d488809bdc650bda769780000713b6d366ab3e288a0df752b9809d2783ef90a32e76eae171934841ccec9f84eac1fe5f118a40131dca72f8a32c26d570d16b9953d4a551715fdb686f8252f802911930e2277e2df2a8ace1be2275c051f75f858c554198db032ae456777ed9ba24e1422fd63890a519a4aaf5e3c57290f33c767a383f2c05da8fadd8356f89b8a132252e5287a438beac98241c0ed20839e33af800560ec4eacf3fe6624082a7b8ab2d08591577d479bdd92c7070b89b86434038208b38c0055f7875d718e8e71e5c18f4b45c540ee163f282a", @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000700010001001800018014000200766574683000"/46], 0x34}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) 1.545293691s ago: executing program 6 (id=6562): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x0, @empty, 0x3}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b00"], 0x110}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db95232"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r4, 0x1000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r7}, 0x14) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/14, 0xf19f355ad947a527, 0x1800, 0x8}, 0x20) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000380)=0x80) (async) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x0, r8}, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x5}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) 1.468745143s ago: executing program 1 (id=6563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@mpls_getnetconf={0x24, 0x52, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20d0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200"], 0x23c}}, 0x4004000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 1.381896388s ago: executing program 3 (id=6564): syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@cipso={0x86, 0x16, 0xffffffffffffffff, [{0x6, 0x10, "8a87445123ab02b209a208bf24c9"}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000980)={{r2, &(0x7f0000000540)='nbd\x00', 0x480902, &(0x7f0000000580)={@_ha_fsid={[0x6, 0x6]}, {0xf, 0x0, 0x5, 0xd91f}}, 0xfff, &(0x7f00000005c0), &(0x7f0000000600)=0x100}, 0x3, &(0x7f0000000900)=[{0x2, 0x9, &(0x7f0000000640)='NLBL_UNLBL\x00', &(0x7f0000000680)="dc1ae2", 0x3, 0x20}, {0x2, 0x0, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="10831d4f8609d713b7bdad86005858e6b3e1d2380aedf888bce0ae1a8dca3ebc39748755a4641875b490869cb2b8ae648f4c3cbde26fd1e564c9d82a097391ef7c01e6a14a3e4937a9f5d14da6f25253087c76dedd4f0ace5f535ab9af25f6aa0a1540da248653340f580640c5ef1024f749ed12aafd6f86dfb6bcbf2576f799276fe247675b8ebbbcd2dbac42bb570ce7981d1a7209e63ec80f264222defbd6aa1840c44f100805d22862f2cb9c0c4730b9c6e4df9edd552617235e3cb5463e414608a7871891bf0e1c1afb30e16978685324ec05402f201945f8473bd8a12eee5898c6ec0a63ff541cd98ed1dcee20b9", 0xf1, 0x3a}, {0x1, 0x4, &(0x7f0000000800)='}*\x00', &(0x7f0000000840)="b4d1aa1063afd03d5d6cad3217b705c4c59f2846f7e2d6f3b209b5778d52b742ba89aee88fef5bd53ef2aa64ad61886efe9fb8ad7452cf4de1c6b7a4286ab9531347a05a4d2d3bddc1af0d9886330308f3ce9219e41c13028213f89f52b469f0b8edaccb1cf832c30767015162c970a29b15dc2737f7176efae6c6dce9e78a90b7d1a908388c5376c6b80deeb417ca0f6321bda4744041d0f7191ad140351a90df07933c", 0xa4}]}) sendto$inet(r3, &(0x7f0000000a00)="931b362b03a47fbe7706a8c6758e00db9a781079784e354621ad34fbef78e24e", 0x20, 0x4000000, &(0x7f0000000a40)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) listen(r6, 0x10040) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000500)={r6, &(0x7f0000000400)='\x10\'\x00', 0x101001, &(0x7f0000000440)={@align=0x3, {0x76, 0x1, 0x0, 0x5}}, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x6}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='f\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002bbd7000fedbdf2505000000080005000000000008000500ac1414bb08000500ac1e010108000500ac1414aa14000300fe8000000000000000000000000000240800040064010101050001000100000014000300fc010000000000000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x20048001}, 0x80) 1.247467001s ago: executing program 1 (id=6565): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0x922bac8576b92dde) sendmmsg$alg(r0, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5e661edf888ed017283652787a622260036455e2b55e0cafd0c6e7975242f5b3547d7e", 0x23}, {&(0x7f0000000140)="cc0f9dfe9d2de92fac02", 0xa}, {&(0x7f0000000180)="d7c9", 0x2}, {&(0x7f0000000280)="c6f703a8e697b25961748a59b88080cb47a7d27eaff91623565b4bdc730e978443a694ad93d1a62084ebf820ade0a3df1208faa16a6e644e5f9640e89555c463cb8d09f2b0606fd8cdccb1739ae4c5e6fadb8d1a5657c8f5ee4c46e6517566fee93faa64d5f86e6585ec9deb1de06bcff6607f3d6f36fad90bc2a948f723ee874fd7f89463c1745d3e6fb3adc781200285746ce721696513ce901df19d3e56d0db61ae993f02a63bf34a838cdefe6d", 0xaf}, {&(0x7f0000000340)="b88b94230b743b7a06657a1f575a7abb7fc590d53a557539847b462b35c11e658321b3fd196c320e7a70680022b8acdad92650ed4f86113d93e01024edea74e376522edf60405a96e0dda6e8c0b5b2cdc8c24e20d0146f38d80c7dfcf2d380e87c67767e4f9782c1f3a2f772f27733db34886af6246ccfbb1c51a3ce52cf612216cfc97ae1712d9dfb74f20127888a1817b1374c5ce8c85af952507965fdadc1b1036b1c49c4a65ee0058c74bf4b20", 0xaf}, {&(0x7f0000000400)="1fcf0b4791bdc4907901f8edc71c35", 0xf}, {&(0x7f0000000440)="1d2036a8c1fb77af0f4b107247256ed8a5e6c3bec1c977f1e42b5d4be8182805d94c7dc1726a2926c8da67a0993eaf291c89eb3c9caa764f79b8f1473711f81e14c0057be0897203", 0x48}, {&(0x7f00000004c0)="72ee7eaa9290a034b16eee246ecf2fd400420a038116e9284dc83c85b2ee770c2519c2c5a7ac9f7fe39c401e06e9d0d5915f22d8df5d55620f16395260381fa0f244d5e41756174e07", 0x49}, {&(0x7f0000000540)="51c7c7d857bfb45362ca58055226ee6d8459f7b5428862d159a2aefea0a17b30c88a1bad8654afeb8d5728d0259ed1", 0x2f}, {&(0x7f0000000580)="239548ba6811be2e35efac09b47ebe11c487284501e0e44eece1ca32c3feda282bf4b06a979a1d75aa3931b798860c3f07f3f283910935f361a2dd99379e10853c935ccac9644068a10c2ec86fdb1b8e22530a14b193d227057c03a6561f3c54b0b9673d997997dea7192e350c4eef0cc3b6f5bbef96781e0ad63122ee", 0x7d}], 0xa, &(0x7f00000006c0)}], 0x1, 0x4800) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 939.938377ms ago: executing program 0 (id=6566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)="e9ce446d163d85fa5b5d777b113b018a3788939eac77d771ff1df6e177801d21a3e25a191c6dd7738f837a1d03b82716e9f8e1f872fcfbd7f24d4633b5f8ad77b55b18c0895755b6df58b24baaf1c4c9ad01e91ceac5a5ebeddb70a5348f4931e6b1ed04aa60f586eca7ab71ab3d41c9f3bd9e73f9d698a5616b9e415ed3e9d2428e521d8a8c082627098a18d725057ac476fa4c86ee1c6473ce5ece85b224cea4d5af36f3291354dad3d056b131ed558f4bde21bf70c124a040311f2e2b329d4bc0e4bf9ab078e53bcdb2744d753de9a3e07078f4785172f66f1977ae3e19e6", 0xe0}, {&(0x7f0000000240)="13ee223a1268b9dfb881d9d1bc0858", 0xf}, {&(0x7f00000003c0)="ff0b0e190483de72e1e475a02032c6c79f9eb7cc267502570d049bf5f878ff6b3a175fe28550742f9277e50baca4c4bb5123cbcaac8177336cea896ea89d21535363d723374f1cd82d8c0bcb5fd61334f39ccd9f1717c27de6a53f2b34933ea326ef86ae80faa7969331593cb69b868733e49531b1cf96326634d1ed6422449f834704c56e19e8a4df696d83e92d4929700158108aab9d9c802c85f2606ba7dfd7ffc2283c5ceb884eb0e47181182aaaaeb5ae9eb0c4c252e374491d700f4ba52e6100b9c307c072", 0xc8}, {&(0x7f00000004c0)="f6cbaf97760f204a235e97ca7163346730fc33abd430d414598586650e4f5c83df248e169dff8f8079bf847255e05f25c48af03f7600b445a66dc7", 0x3b}, {&(0x7f0000000500)="3615fe0870d538504b60b62cf5b53643633df7b32c8450d0b20003412a8819e58d7f8ab99e9450ed353ba8dd33796da9e037f01df43922c7304001f50badc5c2f9b5c150f8c1f5b9d4501e5f2397142de2c7ebf6fa2740449968b2a68fb64bf8", 0x60}, {&(0x7f0000000580)="6fa1aa7c29214be325fc0ce297", 0xd}, {&(0x7f00000005c0)="d05548fe5ea4e3b3289347165088d7b3477e3eb177f6d688408b1ca0ccf6526565e29f462548f3a656be60964af8e1e00a21f5fe348ddf1bda8707dc4d175de55b9d02ef4f99a2890e56f8529b155bfb0a75baab9ab44da76534b2feb31cccf9943ea86d0fb482b6c19ff69d5a3577f6831abd37dd56fb1ee49e5e8b13ca21f9da711505ba63024fd78e092579ae04fb73c1e36989548e1876c4782a40b6c661dc292f46fa74eca1e74c23e169e0aefddb72c735c8b6eecdb6b677fd57cf305ffb32920ca25f2caac155e2b78790ca4bff31e35c5dd999fae0ad8c86977f020e50", 0xe1}], 0x7, &(0x7f0000000cc0)=[{0xb8, 0x101, 0x0, "82e71ebcc2c7defc668e27a8e7c35094bc86866e0de4938803d0349a2c9f597d291585941099212a6f8f359fc6b401daf6805168d291154e1a0dd85d634a2dd7c1b23b781793e2f2e80bbd183b463b8923157449c41ceebb3b5f16811e9b0da7541481e12436d4e5ca5459a4895e876c02c01d4f153df29f7abbc04dd8926720a0b626de68196f68c50c615f3c77c9df28d7622afa9437a07e377ad026ac3cf83ca211"}, {0xb0, 0x104, 0x2, "c3cc750bbf6612ca890e521f3636cc037bac911074a03e6744974a39b2bd8715d011ab308747f709dd1073541bc5c75adaae55ee11cf919c23d9ec2e33aac317ac54553b3fa7e310a38007c1daffedbdad7d0a7e267f100d617d1a4a5775d9dc369a3614a30d9379deffa8b8b0c2cd51cf1f75241abffb1ace30e104ad07d57f916d4709bfb7d8ca622b649be26589adb69c4679135d8b6665"}, {0xc8, 0x10e, 0x8, "ad63b85b2d4aa48e9b7364340dc99792b71ec5ee3d399f605c2364b6b97788246ac9df83dbb798f3e7a1bbd9e65f204a3f5c008c33c928ba47ddeea588b9850698c5248e62620e1bcac2f6866faac033f857292f2216bc59bf82ac74c49ade974014f46b5d5df210090bed7c02f5bed7eac56b01c717317386d234eae9d07441d0b9e2aff3e9fb59ea304f18bc8cc794c5eebf244d04fbf512b2a7d9917bd489c6041789f59e72b17b385824711ca7c8161fa830389fbb"}, {0x1010, 0x11, 0x0, "7984fa0365666e38deba8b3376a8dbd9d54a68acb55f30ae1a9d812f1aa7b727615b4779f137e6658f654adc6d78ec1b14b1645c0c122769fc08afc4ed8d39d55e5354ba0fb8c6e86b34afdce274702b975793d8cc378337b5c8c9501d01c50359764109d3fa88c2be33e28c0eb97a6301ad4a47cd93ad55bcb4dde072b312ed16da4ed70017aa281c7c496cc17eaf5907804a6ecb340609310f92c0347cbd7417ea5d76d2dbdd1dba1b18af5f79654ac95128b14bb5936a74e905b5db26ff035ea041d3f1c15f649c0a8a869a2038d35117b8f65db926a719f8e46429bfbf83f6c4cc3c75c5395fe3d2cd1ee58ee2c8d1f1f751854c5c26f2e73e91b2877d3173ba46f1db2d030609bb50151fced3ecd3be1c453c1724f54eafcb3664fdf0d2e3b25adb00d125f808f44cd71e2b7749c3843433a825e2a97d3bba9f17ac20d02cb7316b1de6121427a985b942130d49e2c0d06f04662ea0c4a1cfe5f0858103a475563c917df9518884e83f7538c0c01e27a7230d81025d424fa12996ce70522e64d9afe2b0f836027350235985119e547c47c80870893b551040011925370b865125d90a3f993a16fba725785241abb15189bed3f63f93d631a43d192959e92680e91b98ed716c51d40a4ff538268c3727c8fb1acfaf04ed568f901e6044c635b425d4c01fafad16c4b8175d81e8eea50d8026fbf871ad237eb0655ffa834e252ee3085b9139d928e8a5157c78f27ff88aebba78ae62edefd93091e5d9b083dfbcb976306d673cb1db7760fb52bd1420e8ae4feeb379ff8983c8d59e2242003e62f7e6afe17e061b99e382b637545109cb73283857eb52b8aab8dfedf07f86ceddc336d5739f0d5b50d5458ecc5f574d0d220c9cc12b13ee0ab402e72c60211b65a1995af4e691c38c2c0ea283ea850492c0e5c10a1af53fb2373db0925a70f1a8365680ce58f57005ec22758950ce621a29f2108d764e02e04bc4263d569a22f35a5db85bb8fdc7b9beb3f7948c5b9670c8b7ae46422e212eb47c0307263d6685fec813c5f7cb8137c2510eceba4b478023f109c628e0bda984ec931af500d803845301d9152cc83c2d10dec4454c9f4ddf2fbdeefbaec22e9e813b7b7c511f395edd7cd712fef7795fcab11eac029a98b2162f56148034963fa01fbad6b4d9ec24231527125dd157a2ae6380ea14f135b37c320b0770ee592b960a3468c70b50bc4f553b5ef40d08c0d7adc1dd5345eb22004efa68eebc268639437e9f4209a8e822ddc1b933083ae1d32e5e7523a650994abe3d9e64cd7e2c44bbc254163d36fedecbd41f419fc56c7a50bddc3d30c2173bbdaf6f1d963febdda8f68df544b957bb6f0adefed3ea1fc1fde6fd74c2c91668debbb9fb4d68e2558167e7babf6f20aa67a77d45a171520d0114a57ab9ae4e06399d014ddcc238dc7646d9409d6d592d30a2013fdc64cefd3fd5c6a75162c15749416ceb5e6c7a463938ad6bcc8968781c2e5b4d82cc7e93ba6207b478e83578ac2bdc0054870a7e2bf6e5e2b6c06c7335de042b44edae9c2108a87bc15a12201b87d536db82bc01a9e6ce0f43d53d0f0d6ce42f58946fa70ffdb36152f70a35fdb7284ece3d99a5b05e44bc0ffe61526db5371ac93387818c0093bf2ab8f8d7d656c043b7d11080f5715eb3859e37482b3c43b9fdb100e27b0f145de2b05e3636b626d7ec58a45a6ad044ab1bf3f8edae5dbcca6d6b857aaa074ddb0266c5f37c9a1ecc0987ed06ed5d0818da6362715cc54d7d87797785d96cedec4d7f54e1b5829cbcf8d8af039f5c849622ef05cfd591927152c9e4ae66c7143c5ac75f6abaa7f1031f2829f43a956fe89aacbf7ab2023f34a41c1f71dbc69344db954016be5f5d7c7c3649819ae09f6e3a77b1483ea3f75e3716d8194de5422d62d9b1753a5ebfc1d5c9d942b71708817f46ae14f931b39d7208929bc5ee336e5d2304fbfe091aa75df616aa238c4ed39bb0d4870d10b51fc82d084bc45d61de55c21590a982366cb109d4a63c62b46cac4fdb0dfee8b3929b59807400e08550e9391a695432ad321329480b16e3d720ae9f00b47294ab33dfac30521b472389963ef346e8174b79f1f3a5c8f8494a5784eb89a3b536cd2707eb5a1b646281af6973ad21aefa291bfbb3bd32482e822a224b5e20b6d4c33c81645300c17c9ab4593a2bc37e45af29b13da78da5f4bc58f5b182cf7598a6c4ee3ee926db370932b2b1159e356cfd8c9c8772a1d9c28152b3fb40a8be3ba4feeece434b963f5a591d887eeae63ff0d4206ff24f5f2626df9abc06e2183b9d9b26a4c718177dbe5ae4409df856661d110aec4fccd37359fff7c59b202a5a579d74db8ad00d2b40c7bbd02980b2e91009a7d2ac3441a93f179ec1354b6eaeae7b595fa6f6aee4de76c7be70f794d31f8f14585b295bcff0c925274928d6386206c682d15709ca452a17b9d4fd6c9ae279717852e1b15f043388f79061fc1f3215ad787531c98c08750f7cc25ffa757985f8176b508cc216064da0bcd95df2b427ccfb9638425c8b65db818294d7dcabaf9426bfbed00527b5a85128da203b0f1d9536b75194f3cfbebfbba5ff699465af4cdc45d684e450e4961423716383e98506140d4b0dc6aeced208ddf52a5af89cd79dd1e3a71bd67d492257547c78b1439e051e5916746281a6fa27c18a093fbcc34f9901ad87655907a3ba50fa959ac22e295d2a9267b7359437dc597f87d7d3d3bd5d24b0ac9a7a3e6c196724aa48472080ebfa1a83d7a2f1503770a92e6f844532a15d0db7665dbc75d3692948719197a7f321178e3d4dec29234732f1dfbffddc2df4e4579de0dbeb40e10d22baaba779c4163e123e5af59d883ae4328be31e821eb1947df9b4c4eb8ac148ae0815df798c6b3012130040680a100b0b25c8501407ac1c1a7c3a04db36f42982108a5bc478da05f48fbef39c9810f16cb401103affb09adf4a54a9485e5a3537bb6d9aa7f7a9390593ba574335d26c8c9ee439c447557990f0d11a302894c9ed9679012a9d925f42cf2fb874e5d5992ba263814592c34dd3cc583328c99c5930ce2efbad767439b7b9180b1c42f0bcf8223749a0cb37ed14b96b31d5e09a952485c5a21708f3640b06b702bd57ffa7157f69b713cf4b204063715ff8324fab47c996280c4bb9dbcc124a9d5a6d29cf46597b7ee773c794718d3413874a4da1898e539b87ad3a20241e58b1046bf3cb1d2c617d54ae05c07e2add1b2be8f7e892ade543c578cd9672f4c07334e31f95673d1d6d3aa3e73b21db38278a90e0496d11eb4a216c1076624493f3d8d8a28f0bfc8103ada52a3a0a2717b584fe942f24826279866cc83ca2545ad06ca858d0afbcb48505f8846c4f0ce15a141d93c421b36be0cffd89b205f5cb529dc5ff70749d2a9fc0e86e9887f77881e04e0610a9483799399627b61c918c13d8273330bfe01a0a4083fa598a9b4f2c2e8ea574a57d284b57ecd8fd9be38c740fca0bf58dc15d6373fab00e3b884fd95911d37859581d6ed56ce6bf83c2096c86b9bc59ea038de5c10df94041261aee58aa68bf6a0887a5dc12062e4ca6226cefe1cad5795d6111f9ab5de7ba9e5dc5ca6c909e13654ce1694ec88997211b2d539b92255816f317e5228684fccfb035479e0d6706f9d4c4605cbb75786ec8614ad1c3d2282d0ec87816506813421f7f33b9e6c449b6a3fbc7c4e33c78641db53ebfe2c7bb07a1e498370046365718465b2df106d8c49c2d117129977f4f4c496525289ee9e90480e77c1aa32f40f9a78892ee8280fef8ee189bee632745eb1419f04073c5aa597199ea300601703bd471325d6bec2c7bc202eabcffed44f3936201fb31128ab6ed93ac6668ee6cfebd9da393f88c07c28701065af2de6b40c4bf2eabff1abcda620199b9b98cdcf532352313ed2719fe3a5c3647b0f959313730496660e1a152287013ff1be8b8d8f74d8a76ee5b3eff7919ec1068ed72a11a1cca14a51d7d1c60b1b56f09ed09801460a247d9eeee3fff629efe5297466d0aa3706d53c18278bc3828f02c03ad814fac98734d607cc99575b23775866cf424eb268504f0ab34f8a9cd8562665580499d35a87575a04b665c65cd723af6ca4d2a7bc25843f531d6d0f8ac4a73b777d7da466e95b0d53425edf7f27ce7c333d27f2b21fa7e0201a69442d5f98b3ffb6f13ae1f64f52724e0dd6227d35a5c41a87dca030c28a0b180ba86560c0bce9f08b0f6c61ce57d6a85ea1c5f6c5dbabf9b829d130896b6a6836f709ee2ea57ec2012c63f5448515613f92950d64b18efce5a6954d2cd42233fbe568fd14c488660c5d5bd0cdd0aeda91549109afe752ce7c2588004afb8a27374cafb4cf13d4cfa2cef436dfe3aebf2cc9774f3cbf67507cd1dfc32dc7cd4000d5cde3f78b134c6b50b2fd75c492754ce3f573dd3261a7131766decaac28dc241d39af214e431be907bc498693d8d9e4672561c838283d3e52f5a008c68b83089e3eaca42eb2c11eb37e2c95218ba92328b6d25b83b19c2a89e1896c2bf9eac3c3e5f06bf0742678c66f06bb122fec96b777f4d5ea9f4392ff576db6c970cbc17dea85d2b73a39dd66ed1dbd1c4cec2f2e31ed65b5818042dd895af05e9fe510104c08eac5761482e711f94068ea5bf1e5ed3c627d56c0611533904fea1c3effd292f524787ed6100b7d440ff480425297b567c1640dbe861c007d09694f780567bb1ff07fc32c98a55510c0b723fa379cebdd9b732010b29d7ef5d29d89ded8c865101cfc028ab2ae10a234bdbb73036540cd798aae8650f1c6b1079ae719868cd5a3ff5ab1e67fca864c92baa3ba7ae523c8864b5ff4e89a520e215869d3e53b57b43260397e3762d0949efcb681bce87358210b0f6cf82598ba44bcad5f2bb23b871d2398bc55a1ceb79138b54145f73b3e673b32b2d8d116ae017e51aa896f0d9e6a3def2926fd76aeb7cb7fd6922e551e353f5c1cd1898c715d1039a9fbb9f2d918ed22ff34a9b6e46853a0feb49f481a851df29e173506b9d9708353902f4575e0622457fb531b72f2c2281a15124fd8aaf892f6b2b03c4fce0b0c9beac8088614bb6488bdf27dded4e0019e19db6e80fb9c698b5669e5de7c2b2f6af1418b0a730a45314d1682b37af7fec9616dd5c9c19be8e82147fb4d8656f1b7686c625591f1e0aae3bcd28491b665887e1796859b52192e0bf7cac1481cd1eb071aa9e2dc5b0af2b3ecc121f1d01796ad6c8a8463a9b0a6401725fe5c6c3cc7577acc6ae344577acdab231e7ed721ea33112618b97ecabbc3bc809963ba04d96e7fa65c7cba572bca952aad41ea484601aed0d5c6926b2d8c2cad7f65434e7874c0daf93ce7f07ad05fb62192e8b95cd2b28c4e5cca894d8916332300524e64b29a9fb40af9446b54763bb1dc095d1a0b18241b508fa5c74742b0c23c638df997ffa8128fe522705d9fddf95c0af73bca2ca57e3ba64ba756475d7e3d64c521be65d4494671a0fc627863364766871150de7dfd87d9caa64670b6d2ad9736feac0462fa423071f8f3ae8bfb3216a9445f2dc433c99fb076c6f429dbfdd12e7af0293787055e7eb1d361088b786c071987e2f83565fc6bcd8022d2a3cf8baef05f028c97707634635460c96aac17df403c984835f581caa87c846c3aa965f0b87718c525636b554a764a09135417748fce92382c97ccaf3fb61ca35c05abbe3d71695313360000a2905cb14c7c2bc4fb50e818fc044c54f8a0690a0ade3037d50f1e399971f576d"}, {0xa0, 0x10e, 0x44, "6ff3dbc1d4c7b244d303da3d68918b68e594fa8ccc4bdf1788dac4a1017ed0ddd51ebf1f3f9ea012b0985b4e2e5bcf5ce5b6ea570511d2bb5d1de6379c106705967491fb82169324cb6daca274096546e5fbc31b60951e3a994c5b14c10fbed0de2e53724b93fee4a064eb2941c57a3e8ef2e187e6934c30ebc0f7f48465eaa23136ee9d52bc93f84a697d7086b02fd6"}], 0x12e0}}, {{&(0x7f0000001fc0)=@isdn={0x22, 0xe, 0x81, 0x49, 0x8}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002040)="efdda37d63cbe554f18fde11eee6ec00d9e50778c995132310b413035f27baa68851477a2cf531c774e952c1d425ba9fbfdc6bcf6b650b9b64b1da8a8e31c761d530c305bb712a3d38788d2002a7af63526f3184ca14a9b8fe1318e60af1204024a35b1465986a2771866277873b58559ee8d20c46d24f9623d56bbdc24bed0e2e64ac55266c253b00ba403b2e2979571fb5288d4ac3e9694403c081033160450ca8b52abb4643e6d2b0e4613f4c54f64b1b4ee05838908ba24201d22cf494bb91e6cf3055584b4872", 0xc9}, {&(0x7f0000002140)="d7a7cb0c1c5df9f3ad57eb5b6b2f07371213dae1a97f0a4c46b4c4d8f0f86eb3db927e6e90085450a4174198af573d4d2bcf114c12f1e8ea5625204374ae0666ae22e6570c2c769e85cf3a28f2b06d", 0x4f}], 0x2, &(0x7f0000002200)=[{0xe8, 0x102, 0x93ed, "74f7a6e92adeb00d3604f75ef2b0e10cb1d916e26836e3cf15a0ab17320f73587e91fb4be53589e0b042397000e20eed2b89183cb5a8a5e6d87178494933548f2f07da43c2ee20250861f9345c31e11e5b5e51ed86d148d2166fd71aaaea98270d775a6f9eeea972a4b173b5dbae9d44b97f1a5df1b7d580fb3ab8664589bf1ab94af03dd67b9c91ec8f0ef52ba5b3be9ea7dedf5f30af496d24836fa22b1dc6742d73659966058e5094f7ec5a232c009d06039b680213e34ab369be16c84ced6faf2342e740f39b48c8cb57fcbb651a554f9c"}], 0xe8}}], 0x2, 0x4044090) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 925.971875ms ago: executing program 1 (id=6567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 706.994559ms ago: executing program 0 (id=6568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000300)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x4}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xffffff7b}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="57a179ce6eb883c96f1c629b6050b3eece00776dab946a931c89aea4e4fddb87f0c1918e561ee0d2d007594c7239d267bc4f5311650df58d724d66ad1e6efb67fd8df6e8580a9f3d01932eed4bbbd6b7f08d1eb8c5829189c7f657c6729f5213bb294f7d58fac7822a63f65041710a843822a8c242e224ad147ee28db306a7769ee8c125e4a3f259481af97a7a984649c06a7d5e6a7b194673e77a3ba500"/172, @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf251b00000008009a00020000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r8, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x80, 0x6}, {0x9, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x2, 0x2}, {0x7f, 0x6}], "693c5042828ecf1a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x7d}, {0x3, 0x6}, {0x0, 0x4}], "e7ffd0d6e3c92d08"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x4}, {0x5, 0x2}, {0x39, 0x5}, {0x85, 0x2}, {0x3, 0x4}, {0x2, 0x4}, {0xd}, {0xa, 0x1}], "239bccc9634bb143"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x88, 0x6}, {0x0, 0x5}, {0x9, 0x1}, {0x4a, 0x3}, {0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x40, 0x2}, {0x0, 0x5}, {0x8, 0x6}], "19207c4928dcdd6a"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x8, 0x4}, {0x3}, {0x24, 0x2}, {0x80, 0x7}, {0x3}, {0x9, 0x7}, {0x5, 0x2}, {0xfb, 0x6}, {0x85, 0x4}, {}, {0xff, 0x3}, {0xf, 0x7}, {0xc, 0x1}, {0x80, 0x7}, {0x3, 0x4}, {0x3, 0x7}], "a4e64d0c0435dfb3"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "535f5dd9828878da"}}]}, 0xc4}}, 0x1) 0s ago: executing program 0 (id=6569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x13c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc329}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf2}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x480c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21e5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd305}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x4015) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000100), 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYRES8=r0], 0x58}}, 0x240488c4) kernel console output (not intermixed with test programs): 35762][T23532] xfrm0 speed is unknown, defaulting to 1000 [ 607.451547][T23811] 8021q: VLANs not supported on ip6_vti0 [ 607.526206][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.569965][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.590898][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.666886][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.685309][T23532] xfrm0 speed is unknown, defaulting to 1000 [ 607.708316][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.756185][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.774444][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.798494][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 607.826091][T23813] netlink: 'syz.5.4847': attribute type 3 has an invalid length. [ 608.718927][T23862] tipc: MTU too low for tipc bearer [ 608.805045][T23866] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 609.094560][T23881] __nla_validate_parse: 13 callbacks suppressed [ 609.094584][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4864'. [ 609.163582][T23881] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 609.553807][T23907] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4869'. [ 610.089906][T23947] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4877'. [ 610.456386][T23962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.490061][T23962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.506587][T23966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4882'. [ 611.303111][T24016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4896'. [ 612.176313][T24062] validate_nla: 29 callbacks suppressed [ 612.176335][T24062] netlink: 'syz.0.4905': attribute type 1 has an invalid length. [ 612.525936][T24062] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 612.526759][ T5296] veth0_macvtap: left promiscuous mode [ 612.626557][T24081] netlink: 'syz.6.4909': attribute type 1 has an invalid length. [ 612.993689][T24102] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4912'. [ 613.037065][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4913'. [ 613.558525][T24136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4921'. [ 613.573927][T24141] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 613.811263][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4924'. [ 613.879926][T24153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4926'. [ 613.968370][T24158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.037397][T24158] bond4: (slave gre0): Device is not bonding slave [ 614.049184][T24158] bond4: option active_slave: invalid value (gre0) [ 614.067297][T24158] bond4 (unregistering): Released all slaves [ 614.255111][ T1096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.278897][ T1096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.288626][T17150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.294781][T24171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4932'. [ 614.361801][T24169] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 614.400172][ T1096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.420013][ T1096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.428577][T17150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.446999][T17150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.482060][T17150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.558025][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4933'. [ 614.613156][T24179] syzkaller0: entered promiscuous mode [ 614.634609][T24179] syzkaller0: entered allmulticast mode [ 614.672734][T24179] tipc: Enabling of bearer rejected, failed to enable media [ 614.690826][T17150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.734244][T24188] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4934'. [ 615.271854][ T5639] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.322964][T24202] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 615.357113][T24202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 615.460475][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4942'. [ 615.684067][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'. [ 615.731257][T24234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4945'. [ 615.764295][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4944'. [ 615.873635][T24233] erspan0: entered promiscuous mode [ 615.950444][T24239] netlink: 'syz.5.4944': attribute type 1 has an invalid length. [ 616.026289][T24248] bridge0: port 3(gretap0) entered blocking state [ 616.062030][T24248] bridge0: port 3(gretap0) entered disabled state [ 616.085961][T24248] gretap0: entered allmulticast mode [ 616.104559][T24248] gretap0: entered promiscuous mode [ 616.113497][T24248] bridge0: port 3(gretap0) entered blocking state [ 616.120223][T24248] bridge0: port 3(gretap0) entered forwarding state [ 616.591220][T24266] bond11: Unable to set up delay as MII monitoring is disabled [ 616.660008][T24266] bond11 (unregistering): Released all slaves [ 616.813238][T24281] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4955'. [ 616.862635][T24282] netlink: 'syz.6.4954': attribute type 1 has an invalid length. [ 616.892893][T24282] netlink: 'syz.6.4954': attribute type 2 has an invalid length. [ 617.221510][T24305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4960'. [ 617.358086][T24315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4960'. [ 617.523544][T24325] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 617.533301][T24325] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 617.603046][T24328] gretap0: left allmulticast mode [ 617.608493][T24328] gretap0: left promiscuous mode [ 617.616979][T24328] bridge0: port 3(gretap0) entered disabled state [ 617.646994][T24328] bridge_slave_0: left allmulticast mode [ 617.654452][T24328] bridge_slave_0: left promiscuous mode [ 617.662310][T24328] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.679894][T24328] bridge_slave_1: left promiscuous mode [ 617.686479][T24328] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.713142][T24328] .`: (slave bond_slave_0): Releasing backup interface [ 617.753083][T24328] .`: (slave bond_slave_1): Releasing backup interface [ 617.786641][T24328] team0: Port device team_slave_0 removed [ 617.808517][T24328] team0: Port device team_slave_1 removed [ 617.826178][T24328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.839321][T24328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.849399][T24328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.857709][T24328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.867163][T24328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 618.653970][T24358] xt_hashlimit: size too large, truncated to 1048576 [ 620.158571][T24298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.170041][T24338] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 620.727725][T24408] __nla_validate_parse: 1 callbacks suppressed [ 620.727744][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4983'. [ 620.765337][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4983'. [ 620.811577][T24415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4987'. [ 620.833000][T24415] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4987'. [ 621.193747][T24418] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4986'. [ 621.306435][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4991'. [ 621.383401][T24441] only policy match revision 0 supported [ 621.383423][T24441] unable to load match [ 621.668010][T24460] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5001'. [ 621.714491][T24460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5001'. [ 621.724606][T24472] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5001'. [ 622.204549][T24483] netlink: 159784 bytes leftover after parsing attributes in process `syz.6.5006'. [ 622.752749][T24532] tipc: Enabled bearer , priority 0 [ 622.760624][T24534] tipc: Enabling of bearer rejected, already enabled [ 622.998883][T24532] syzkaller0: entered promiscuous mode [ 623.004576][T24532] syzkaller0: entered allmulticast mode [ 623.011935][T24532] tipc: Resetting bearer [ 623.066312][T24543] bond0: entered promiscuous mode [ 623.072114][T24543] bond0: entered allmulticast mode [ 623.078153][T24543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.160055][T24529] tipc: Resetting bearer [ 623.218206][T24569] set match dimension is over the limit! [ 623.226310][T24571] x_tables: duplicate underflow at hook 1 [ 624.318263][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.240320][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 626.240340][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.303425][T24529] tipc: Disabling bearer [ 626.315831][T24565] netlink: 'syz.6.5025': attribute type 29 has an invalid length. [ 626.356762][T17150] tipc: Node number set to 2837649126 [ 626.739939][T24597] pim6reg527: entered allmulticast mode [ 626.836820][T24597] tunl0: entered promiscuous mode [ 626.881619][T24597] netlink: 'syz.5.5034': attribute type 3 has an invalid length. [ 626.913557][T24597] __nla_validate_parse: 6 callbacks suppressed [ 626.913576][T24597] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5034'. [ 627.157474][T24625] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5040'. [ 627.188037][T24625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5040'. [ 627.234704][T24625] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5040'. [ 627.255515][T24631] netlink: 'syz.3.5042': attribute type 8 has an invalid length. [ 627.265607][T24632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5041'. [ 627.466676][T24638] tipc: Enabled bearer , priority 10 [ 627.500613][T24639] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.5043'. [ 627.510521][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 627.557825][T24638] tipc: Enabling of bearer rejected, already enabled [ 627.828305][T24655] openvswitch: netlink: IPv6 tunnel dst address is zero [ 627.988104][T24621] infiniband syz2: set down [ 628.004432][T24621] infiniband syz2: added ipvlan0 [ 628.014539][T24662] netlink: 516 bytes leftover after parsing attributes in process `syz.6.5047'. [ 628.035613][T24621] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 628.039504][T24621] infiniband syz2: Couldn't open port 1 [ 628.059113][T24621] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 628.076503][T24621] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 628.097341][T24621] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 628.150515][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.168647][T24621] RDS/IB: syz2: added [ 628.174300][T24621] smc: adding ib device syz2 with port count 1 [ 628.181576][T24621] smc: ib device syz2 port 1 has no pnetid [ 628.839485][T24669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.989769][T24678] netlink: 'syz.6.5051': attribute type 1 has an invalid length. [ 629.077609][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5051'. [ 629.124766][T24678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5051'. [ 629.446683][T24694] netlink: 'syz.5.5055': attribute type 2 has an invalid length. [ 629.555629][T24696] IPVS: length: 239 != 24 [ 630.165624][T24728] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5065'. [ 630.451578][T24738] xt_hashlimit: size too large, truncated to 1048576 [ 631.193821][T24774] tipc: Enabled bearer , priority 0 [ 631.423306][T24789] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 632.247299][T24792] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 632.283287][T24791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.323757][T22720] tipc: Node number set to 2943744867 [ 632.444009][T24807] __nla_validate_parse: 4 callbacks suppressed [ 632.446059][T24807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5088'. [ 632.492394][T24807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5088'. [ 632.649105][T24819] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5091'. [ 632.693685][T24814] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.701026][T24814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.708706][T24814] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.716006][T24814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.824296][T24827] netlink: 'syz.3.5092': attribute type 39 has an invalid length. [ 632.945597][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5093'. [ 632.975616][T24831] netlink: 50 bytes leftover after parsing attributes in process `syz.6.5093'. [ 633.012007][T24836] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5093'. [ 633.032490][T24831] netlink: 50 bytes leftover after parsing attributes in process `syz.6.5093'. [ 633.080727][T24838] xt_hashlimit: size too large, truncated to 1048576 [ 634.079927][T24866] netlink: 'syz.6.5098': attribute type 1 has an invalid length. [ 634.132609][T24866] netlink: 'syz.6.5098': attribute type 1 has an invalid length. [ 634.457607][T24879] netlink: 'syz.3.5100': attribute type 11 has an invalid length. [ 634.492533][T24879] netlink: 'syz.3.5100': attribute type 11 has an invalid length. [ 634.513152][T24875] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 634.570331][T24879] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5100'. [ 634.819064][T24894] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 634.886398][T24890] tipc: Resetting bearer [ 635.918141][T24937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5113'. [ 635.924209][T24940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5114'. [ 636.431144][T24959] pim6reg: entered allmulticast mode [ 636.644647][T24969] netlink: 'syz.3.5121': attribute type 1 has an invalid length. [ 636.816956][T24969] 8021q: adding VLAN 0 to HW filter on device bond7 [ 636.899058][T24977] bond7: (slave geneve3): making interface the new active one [ 636.918688][T24977] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 637.092126][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 637.118100][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 637.242584][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 637.282005][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 637.384184][ T6303] IPVS: starting estimator thread 0... [ 637.502952][T25013] IPVS: using max 28 ests per chain, 67200 per kthread [ 637.911968][T25040] netlink: 'syz.5.5135': attribute type 1 has an invalid length. [ 637.940875][T25040] netlink: 'syz.5.5135': attribute type 4 has an invalid length. [ 637.976455][T25040] __nla_validate_parse: 2 callbacks suppressed [ 637.976476][T25040] netlink: 9422 bytes leftover after parsing attributes in process `syz.5.5135'. [ 638.065044][T25042] bridge2: entered promiscuous mode [ 638.145045][T25051] bond0: (slave team0): Releasing backup interface [ 638.205975][T25051] team0: Cannot enslave team device to itself [ 638.255173][T25058] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5139'. [ 638.614255][T25029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5131'. [ 639.054309][T25094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.153045][T25101] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.5142'. [ 639.163848][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5143'. [ 639.193200][T25097] openvswitch: netlink: Missing key (keys=40, expected=80) [ 639.225776][T25106] netlink: 'syz.5.5143': attribute type 1 has an invalid length. [ 639.281999][T25101] 0ªX¹¦Dö»: renamed from gretap0 [ 639.329008][T25101] 0ªX¹¦Dö»: entered allmulticast mode [ 639.442348][T25091] xfrm0 speed is unknown, defaulting to 1000 [ 639.444972][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5146'. [ 639.662490][T25125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5148'. [ 639.731318][T25125] netlink: 6 bytes leftover after parsing attributes in process `syz.6.5148'. [ 639.864713][T25135] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 639.933731][T25141] Unknown options in mask b7f2 [ 639.985520][T25132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.018776][T25132] bridge0: port 1(bond4) entered blocking state [ 640.037356][T25132] bridge0: port 1(bond4) entered disabled state [ 640.053261][T25132] bond4: entered allmulticast mode [ 640.070748][T25132] bond4: entered promiscuous mode [ 640.085038][T25132] bridge0: port 1(bond4) entered blocking state [ 640.091598][T25132] bridge0: port 1(bond4) entered forwarding state [ 640.137602][T25134] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 640.177451][T25139] vlan3: entered promiscuous mode [ 640.239302][ T1128] bridge0: port 1(bond4) entered disabled state [ 640.377179][T25122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.598395][T25159] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5154'. [ 641.065458][T25173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5157'. [ 641.095397][T25176] IPv6: addrconf: prefix option has invalid lifetime [ 641.198674][ T1128] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 641.227469][ T6303] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 641.238077][ T1128] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 641.501147][T22720] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 642.152281][T22720] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 642.230297][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 643.251527][T25256] __nla_validate_parse: 3 callbacks suppressed [ 643.251549][T25256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5175'. [ 643.326269][T25256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5175'. [ 643.397293][T25264] xt_hashlimit: size too large, truncated to 1048576 [ 643.611118][T25276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.819625][T25282] netlink: 'syz.1.5182': attribute type 1 has an invalid length. [ 643.839795][T25282] nbd: error processing sock list [ 643.967504][T25282] IPVS: ip_vs_edit_dest(): server weight less than zero [ 644.907954][T25319] No such timeout policy "syz1" [ 644.965392][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5192'. [ 645.173996][T25337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5195'. [ 645.350368][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 645.440255][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 646.392182][T25382] syzkaller1: entered promiscuous mode [ 646.417355][T25382] syzkaller1: entered allmulticast mode [ 646.454132][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5209'. [ 646.888065][T25405] tipc: Enabled bearer , priority 0 [ 646.942788][T25405] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 646.992155][T25405] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 647.031764][T25414] sch_tbf: burst 255 is lower than device virt_wifi0 mtu (1514) ! [ 647.134975][T25420] netlink: 'syz.0.5217': attribute type 1 has an invalid length. [ 647.148517][T25421] sctp: [Deprecated]: syz.0.5217 (pid 25421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.148517][T25421] Use struct sctp_sack_info instead [ 647.187665][T25417] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.5216'. [ 647.207097][T25420] netlink: 'syz.0.5217': attribute type 2 has an invalid length. [ 647.220829][T25420] netlink: 'syz.0.5217': attribute type 1 has an invalid length. [ 647.256112][T25420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5217'. [ 647.344901][T25418] bond8: Unable to set down delay as MII monitoring is disabled [ 647.409223][T25418] bond8 (unregistering): Released all slaves [ 647.655198][T25407] tipc: Resetting bearer [ 647.678063][T25431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5218'. [ 647.743106][T25431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 647.987354][T25445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5220'. [ 648.183260][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 648.548245][T25470] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.591112][T25470] netlink: 'syz.0.5225': attribute type 1 has an invalid length. [ 649.346241][T25504] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5233'. [ 649.444167][T25504] netlink: 30 bytes leftover after parsing attributes in process `syz.6.5233'. [ 649.459411][T25507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5234'. [ 649.505111][T25507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5234'. [ 649.783211][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5236'. [ 649.810743][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5236'. [ 649.920651][T25523] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 650.037313][T25528] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5241'. [ 650.069832][T25529] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5241'. [ 650.089995][T25531] pim6reg1: entered promiscuous mode [ 650.111725][T25531] pim6reg1: entered allmulticast mode [ 650.303130][T25546] netlink: 'syz.6.5246': attribute type 11 has an invalid length. [ 650.341653][T25546] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5246'. [ 650.516611][T25550] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5247'. [ 651.088767][ T6303] xfrm0 speed is unknown, defaulting to 1000 [ 651.475122][T25597] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 651.551169][T25603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.657805][T25612] syzkaller1: entered promiscuous mode [ 651.665264][T25612] syzkaller1: entered allmulticast mode [ 651.745375][T25616] netem: change failed [ 652.278536][T25648] netlink: 'syz.1.5277': attribute type 1 has an invalid length. [ 652.722624][T25670] xt_hashlimit: size too large, truncated to 1048576 [ 652.966222][T25691] GUP no longer grows the stack in syz.0.5290 (25691): 200000003000-20000000a000 (200000001000) [ 653.010941][T25691] CPU: 0 UID: 0 PID: 25691 Comm: syz.0.5290 Not tainted syzkaller #0 PREEMPT(full) [ 653.010972][T25691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.010986][T25691] Call Trace: [ 653.011083][T25691] [ 653.011148][T25691] dump_stack_lvl+0xe8/0x150 [ 653.011306][T25691] __get_user_pages+0x2378/0x2730 [ 653.011394][T25691] ? __gup_longterm_locked+0xc4e/0x1630 [ 653.011428][T25691] ? down_read_killable+0x1bb/0x340 [ 653.011539][T25691] __gup_longterm_locked+0xdcf/0x1630 [ 653.011572][T25691] ? lock_acquire+0x106/0x350 [ 653.011642][T25691] gup_fast_fallback+0x1d84/0x20d0 [ 653.011714][T25691] ? __pfx_gup_fast_fallback+0x10/0x10 [ 653.011744][T25691] ? is_valid_gup_args+0x11f/0x200 [ 653.011776][T25691] ? get_user_pages_fast+0x4d/0xb0 [ 653.011805][T25691] __iov_iter_get_pages_alloc+0x370/0xa10 [ 653.011905][T25691] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 653.011958][T25691] iov_iter_get_pages2+0x5e/0xa0 [ 653.011990][T25691] __se_sys_vmsplice+0x7c7/0x1620 [ 653.012042][T25691] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 653.012075][T25691] ? __pfx_futex_wake+0x10/0x10 [ 653.012196][T25691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.012236][T25691] do_syscall_64+0x174/0x580 [ 653.012281][T25691] ? trace_irq_disable+0x3b/0x140 [ 653.012319][T25691] ? clear_bhb_loop+0x40/0x90 [ 653.012347][T25691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.012368][T25691] RIP: 0033:0x7f1cbab9ce59 [ 653.012415][T25691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.012460][T25691] RSP: 002b:00007f1cbb9bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 653.012489][T25691] RAX: ffffffffffffffda RBX: 00007f1cbae15fa0 RCX: 00007f1cbab9ce59 [ 653.012505][T25691] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 653.012519][T25691] RBP: 00007f1cbac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 653.012532][T25691] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 653.012546][T25691] R13: 00007f1cbae16038 R14: 00007f1cbae15fa0 R15: 00007ffcbe8870a8 [ 653.012584][T25691] [ 653.750369][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 654.085298][T25750] netlink: 'syz.0.5308': attribute type 13 has an invalid length. [ 654.150026][T25750] gretap0: refused to change device tx_queue_len [ 654.174312][T25750] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 654.395883][T25763] __nla_validate_parse: 27 callbacks suppressed [ 654.395903][T25763] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5311'. [ 654.418880][T25763] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5311'. [ 654.432206][T25763] netlink: 'syz.6.5311': attribute type 7 has an invalid length. [ 654.441081][T25763] netlink: 'syz.6.5311': attribute type 8 has an invalid length. [ 654.449003][T25763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5311'. [ 654.469321][T25763] batadv0: entered promiscuous mode [ 654.477563][T25763] batadv0: left promiscuous mode [ 654.942000][T25792] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5322'. [ 654.960227][T25785] can: request_module (can-proto-0) failed. [ 654.997884][T25797] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5322'. [ 655.077570][T25800] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5324'. [ 655.272374][T25816] netlink: 'syz.3.5328': attribute type 1 has an invalid length. [ 655.581554][T25838] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5336'. [ 655.867123][T25861] netlink: 'syz.0.5342': attribute type 61 has an invalid length. [ 655.989745][T25866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5344'. [ 656.023014][T25866] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5344'. [ 656.076045][T25866] gretap2: entered promiscuous mode [ 656.090769][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5348'. [ 656.107849][T25866] gretap2: entered allmulticast mode [ 656.358513][T25891] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 656.369896][T25887] netlink: 'syz.5.5352': attribute type 1 has an invalid length. [ 656.421925][T25891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 656.623687][T25901] bond5: (slave veth7): Enslaving as an active interface with a down link [ 656.714255][T25910] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 656.745352][T25910] bond5: (slave batadv1): making interface the new active one [ 656.762662][T25910] batadv1: entered promiscuous mode [ 656.772756][T25910] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 656.939390][T25926] netlink: 'syz.5.5361': attribute type 1 has an invalid length. [ 657.084453][T25942] xt_ecn: cannot match TCP bits for non-tcp packets [ 657.474254][T25958] netlink: 'syz.3.5372': attribute type 1 has an invalid length. [ 657.536406][T25958] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 657.794342][T25976] netem: change failed [ 657.925503][T25986] netlink: 'syz.5.5378': attribute type 29 has an invalid length. [ 657.962736][T25986] netlink: 'syz.5.5378': attribute type 29 has an invalid length. [ 658.038891][T25994] netlink: 'syz.5.5378': attribute type 32 has an invalid length. [ 658.108777][T25996] netlink: 'syz.6.5381': attribute type 2 has an invalid length. [ 658.382510][T26014] netlink: 'syz.5.5384': attribute type 9 has an invalid length. [ 659.259591][ T5639] IPVS: starting estimator thread 0... [ 659.373694][T26057] IPVS: using max 37 ests per chain, 88800 per kthread [ 659.567923][T26080] __nla_validate_parse: 16 callbacks suppressed [ 659.567944][T26080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5407'. [ 659.657197][T26072] bond6: entered allmulticast mode [ 659.676536][T26072] 8021q: adding VLAN 0 to HW filter on device bond6 [ 660.008331][T26110] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 660.059482][T26115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5415'. [ 660.124478][T26115] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5415'. [ 660.175376][T26115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5415'. [ 660.189505][T26118] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5415'. [ 660.273397][T26121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.488286][T26132] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5419'. [ 660.516693][T26134] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5422'. [ 660.573743][T26130] syzkaller0: entered promiscuous mode [ 660.579295][T26130] syzkaller0: entered allmulticast mode [ 660.637025][T26134] bond7 (unregistering): Released all slaves [ 660.877855][T26144] No such timeout policy "syz1" [ 660.984605][T26154] netlink: 'syz.1.5425': attribute type 9 has an invalid length. [ 662.000661][ T5645] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 663.676706][T26148] tipc: Invalid UDP bearer configuration [ 663.676763][T26148] tipc: Enabling of bearer rejected, failed to enable media [ 663.965810][T26167] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 664.004211][T26169] netlink: 'syz.5.5432': attribute type 13 has an invalid length. [ 664.059995][T26176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5433'. [ 664.083834][T26174] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 664.110367][T26174] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 664.167831][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.200921][ T6303] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.208760][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.331132][T26190] netlink: 'syz.3.5439': attribute type 1 has an invalid length. [ 664.349728][T26190] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5439'. [ 664.361343][ T6303] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.377926][T26190] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5439'. [ 664.394261][T26192] netlink: 'syz.3.5439': attribute type 1 has an invalid length. [ 664.811056][ T6303] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.090251][T26217] netlink: 'syz.3.5446': attribute type 26 has an invalid length. [ 665.099425][T26217] __nla_validate_parse: 5 callbacks suppressed [ 665.099443][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5446'. [ 665.296650][T26224] netlink: 'syz.6.5448': attribute type 83 has an invalid length. [ 665.471828][T26226] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5449'. [ 667.524780][T22692] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.533926][T22692] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.544045][T26217] netlink: 'syz.3.5446': attribute type 26 has an invalid length. [ 667.551939][T22692] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.552030][T22692] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.573751][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5446'. [ 667.931659][T13435] batadv1: left promiscuous mode [ 667.973342][T26249] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5455'. [ 668.015247][T26247] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5455'. [ 668.042306][T26249] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.049567][T26249] bridge0: port 2(bridge_slave_1) entered listening state [ 668.058313][T26249] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.065606][T26249] bridge0: port 1(bridge_slave_0) entered listening state [ 668.115876][T26255] netlink: 'syz.1.5459': attribute type 1 has an invalid length. [ 668.135706][T26253] netlink: 'syz.6.5458': attribute type 1 has an invalid length. [ 668.227063][ T30] audit: type=1800 audit(1780144403.448:12): pid=26264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5463" name="memory.events" dev="tmpfs" ino=1859 res=0 errno=0 [ 668.260006][ T30] audit: type=1800 audit(1780144403.478:13): pid=26266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5463" name="memory.events" dev="tmpfs" ino=1859 res=0 errno=0 [ 668.293763][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5458'. [ 668.312689][T26266] netlink: 'syz.5.5463': attribute type 1 has an invalid length. [ 668.408702][T26265] netlink: 'syz.1.5462': attribute type 1 has an invalid length. [ 668.426406][T26270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5464'. [ 668.550504][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.625965][T26282] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5467'. [ 669.095370][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'. [ 670.398282][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 671.192731][T26266] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 671.245554][T26280] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.279095][T26280] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.308328][T26280] tipc: Resetting bearer [ 671.332968][T26280] tipc: Resetting bearer [ 671.353011][T26280] tipc: Resetting bearer [ 671.358756][T26280] tipc: Resetting bearer [ 671.422369][ T13] tipc: Resetting bearer [ 671.494187][T26301] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5472'. [ 671.532277][T26301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5472'. [ 671.652301][T26319] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5477'. [ 671.666140][T26319] netlink: 'syz.0.5477': attribute type 1 has an invalid length. [ 671.678851][T26319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5477'. [ 671.792479][T26324] macvlan2: entered promiscuous mode [ 671.806594][T26324] macvlan2: entered allmulticast mode [ 671.848121][T26328] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 671.856048][T26328] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 672.031711][T26338] netlink: 'syz.5.5484': attribute type 3 has an invalid length. [ 672.168715][T26345] netlink: 'syz.1.5487': attribute type 4 has an invalid length. [ 672.180600][T26345] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5487'. [ 672.195232][T26345] .`: renamed from bond0 [ 672.365844][T26357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5489'. [ 672.387259][T26357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5489'. [ 672.404138][T26359] netlink: 'syz.3.5488': attribute type 16 has an invalid length. [ 672.432686][T26359] netlink: 'syz.3.5488': attribute type 17 has an invalid length. [ 672.645808][T26359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.685368][T26359] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.728491][T26359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.855546][T26359] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 672.950386][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.182205][T26393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.225526][T26398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5498'. [ 673.303365][T26393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.312376][T26393] bridge0: port 3(bond0) entered blocking state [ 673.318878][T26393] bridge0: port 3(bond0) entered disabled state [ 673.329183][T26393] bond0: entered allmulticast mode [ 673.338712][T26393] bond0: entered promiscuous mode [ 673.404497][T26402] bond8: invalid ARP target 0.0.0.0 specified for addition [ 673.412237][T26402] bond8: option arp_ip_target: invalid value (0) [ 673.422876][T26402] bond8 (unregistering): Released all slaves [ 673.512081][T26412] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5503'. [ 673.521460][T26412] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5503'. [ 673.534742][T26412] netlink: 'syz.6.5503': attribute type 10 has an invalid length. [ 674.632475][T26446] netlink: 'syz.0.5516': attribute type 4 has an invalid length. [ 674.783786][T26449] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 674.876168][T26457] netlink: 'syz.0.5518': attribute type 1 has an invalid length. [ 674.914308][T26457] bond7: entered promiscuous mode [ 674.927614][T26457] 8021q: adding VLAN 0 to HW filter on device bond7 [ 675.014570][T26461] bond7: (slave bridge6): making interface the new active one [ 675.054990][T26461] bridge6: entered promiscuous mode [ 675.086576][T26461] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 675.144162][T26457] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 675.178942][T26457] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 675.644788][T26496] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 675.648611][T26494] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 675.666341][T26494] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 675.908804][T26520] tipc: Enabling of bearer rejected, already enabled [ 676.024651][T26510] gre4: entered promiscuous mode [ 676.036920][T26510] gre4: entered allmulticast mode [ 676.389548][T26539] netlink: 'syz.1.5542': attribute type 21 has an invalid length. [ 676.415852][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.425610][T26539] netlink: 'syz.1.5542': attribute type 21 has an invalid length. [ 676.436885][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.463374][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.498143][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.530635][T26542] netlink: 'syz.3.5543': attribute type 1 has an invalid length. [ 676.624207][T26542] 8021q: adding VLAN 0 to HW filter on device bond8 [ 676.650764][T26548] __nla_validate_parse: 13 callbacks suppressed [ 676.650784][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5544'. [ 676.738527][T26548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5544'. [ 676.797512][T26553] bond9: option lp_interval: invalid value (0) [ 676.806492][T26553] bond9: option lp_interval: allowed values 1 - 2147483647 [ 676.829781][T26553] bond9 (unregistering): Released all slaves [ 676.972655][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5544'. [ 677.010827][T26548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5544'. [ 677.070635][T26563] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5549'. [ 677.087091][T26562] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.192728][T26566] openvswitch: netlink: IP tunnel TTL not specified. [ 677.251502][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5553'. [ 677.430287][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.758335][T26585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5558'. [ 677.775492][T26590] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5559'. [ 677.844734][T26598] netlink: 'syz.5.5558': attribute type 1 has an invalid length. [ 677.859411][T26585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.885383][T26598] netlink: 'syz.5.5558': attribute type 7 has an invalid length. [ 677.899788][T26598] netlink: 'syz.5.5558': attribute type 8 has an invalid length. [ 677.908640][T26598] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5558'. [ 677.939865][T26598] NCSI netlink: No device for ifindex 65584 [ 677.994577][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5558'. [ 678.101714][T26585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.111460][T26585] bond3: (slave bond4): Enslaving as an active interface with an up link [ 678.144205][T26598] bond3 (unregistering): (slave bond4): Releasing backup interface [ 678.149987][T26614] sctp: [Deprecated]: syz.6.5565 (pid 26614) Use of int in maxseg socket option. [ 678.149987][T26614] Use struct sctp_assoc_value instead [ 678.177953][T26598] bond3 (unregistering): Released all slaves [ 678.251131][T26609] netlink: 'syz.1.5563': attribute type 2 has an invalid length. [ 678.550013][T26631] bond11: entered promiscuous mode [ 678.588035][T26631] bond11: entered allmulticast mode [ 678.609078][T26631] 8021q: adding VLAN 0 to HW filter on device bond11 [ 678.710615][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 678.744466][T26643] netlink: 'syz.5.5573': attribute type 1 has an invalid length. [ 678.805179][T26647] netlink: 'syz.1.5575': attribute type 83 has an invalid length. [ 678.952096][ T62] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.985304][ T62] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.994178][T22720] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 679.132240][T22720] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 679.355745][T26679] mac80211_hwsim hwsim41 ÿ: renamed from wlan1 [ 679.437380][T26681] xt_hashlimit: size too large, truncated to 1048576 [ 679.612123][ T6303] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 679.787508][T26697] 8021q: adding VLAN 0 to HW filter on device .` [ 679.814132][T26703] netlink: 'syz.3.5590': attribute type 1 has an invalid length. [ 679.834110][T26697] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.846661][T26703] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 679.857492][T26706] netlink: 'syz.0.5591': attribute type 1 has an invalid length. [ 679.894711][T26697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.036649][T26697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.058917][T26697] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 680.101664][T26688] ip6tnl1: entered allmulticast mode [ 680.127997][T26706] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 680.137508][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.153060][ T36] bridge0: port 1(bridge_slave_0) entered listening state [ 680.216329][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.223575][ T36] bridge0: port 2(bridge_slave_1) entered listening state [ 680.499743][T26731] netlink: 'syz.0.5597': attribute type 2 has an invalid length. [ 680.509679][T26731] netlink: 'syz.0.5597': attribute type 1 has an invalid length. [ 680.849036][T26756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.452217][T26784] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 681.482620][T26784] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 681.505148][T26790] netlink: 'syz.3.5614': attribute type 1 has an invalid length. [ 681.564794][T26790] netlink: 'syz.3.5614': attribute type 3 has an invalid length. [ 681.961573][T26800] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 682.018759][T26802] bond9: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 682.044189][T26802] bond9 (unregistering): Released all slaves [ 682.107926][T26810] __nla_validate_parse: 9 callbacks suppressed [ 682.107947][T26810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5620'. [ 682.188710][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5620'. [ 682.224950][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5621'. [ 682.276079][T26816] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 682.371668][T26816] team1: entered promiscuous mode [ 682.388032][T26816] team1: entered allmulticast mode [ 682.548925][T26824] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5623'. [ 682.710683][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.137178][T26849] netlink: 'syz.3.5633': attribute type 1 has an invalid length. [ 683.219374][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5633'. [ 683.277225][T26858] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5635'. [ 683.293080][T26855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5633'. [ 683.309877][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5633'. [ 683.332944][T26849] 8021q: adding VLAN 0 to HW filter on device bond9 [ 683.692807][T26880] netlink: zone id is out of range [ 683.698247][T26880] netlink: zone id is out of range [ 683.706424][T26882] rdma_op ffff88802d36e9f0 conn xmit_rdma 0000000000000000 [ 683.828027][T26890] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5643'. [ 683.996589][T26897] netlink: 'syz.3.5645': attribute type 2 has an invalid length. [ 684.013208][T26897] netlink: 'syz.3.5645': attribute type 2 has an invalid length. [ 684.118542][T26899] netlink: 'syz.5.5646': attribute type 1 has an invalid length. [ 684.166338][T26902] netlink: 'syz.5.5646': attribute type 1 has an invalid length. [ 684.169268][T26899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.181588][T26899] IPv6: NLM_F_CREATE should be set when creating new route [ 684.199650][T26902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.212606][T26905] nbd: must specify a size in bytes for the device [ 684.322108][T26908] netlink: 'syz.1.5649': attribute type 11 has an invalid length. [ 684.535435][T26915] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5652'. [ 684.673837][T26908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.834004][T26932] netlink: 'syz.3.5654': attribute type 29 has an invalid length. [ 684.865043][T26932] netlink: 'syz.3.5654': attribute type 29 has an invalid length. [ 685.365774][T26957] netlink: 'syz.5.5663': attribute type 3 has an invalid length. [ 685.701152][T26979] syzkaller1: entered promiscuous mode [ 685.707113][T26979] syzkaller1: entered allmulticast mode [ 685.879529][T26985] netlink: 'syz.5.5674': attribute type 13 has an invalid length. [ 685.911731][T26985] netlink: 'syz.5.5674': attribute type 58 has an invalid length. [ 686.116363][T27000] netlink: 'syz.0.5679': attribute type 2 has an invalid length. [ 686.313966][T27011] x_tables: duplicate underflow at hook 2 [ 686.324764][T27012] xt_ecn: cannot match TCP bits for non-tcp packets [ 687.008997][T27036] bond3: option fail_over_mac: invalid value (16) [ 687.046337][T27036] bond3 (unregistering): Released all slaves [ 687.412913][T27046] 8021q: VLANs not supported on lo [ 687.495173][T27024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.523782][T27041] netlink: 'syz.6.5692': attribute type 11 has an invalid length. [ 687.611820][T27041] __nla_validate_parse: 13 callbacks suppressed [ 687.611843][T27041] netlink: 180760 bytes leftover after parsing attributes in process `syz.6.5692'. [ 687.667099][T27055] openvswitch: netlink: IP tunnel dst address not specified [ 687.695175][T27055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.892357][T27059] IPv6: sit1: Disabled Multicast RS [ 688.025142][T27068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5702'. [ 688.137693][T27063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.260350][T27070] bond3: (slave geneve3): making interface the new active one [ 688.284638][T27070] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 688.434454][T27076] 8021q: adding VLAN 0 to HW filter on device bond12 [ 688.457162][T27089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5706'. [ 688.628314][T27085] bond12: (slave ip6gretap1): making interface the new active one [ 688.654337][T27085] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 688.753392][T27097] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5710'. [ 688.792827][T27097] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5710'. [ 688.913407][T27101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.983384][T27102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.342094][T27111] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5715'. [ 689.822266][T27133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5720'. [ 689.922640][T27139] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5723'. [ 689.951345][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5723'. [ 690.281310][T27155] netem: change failed [ 690.338623][T27159] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5728'. [ 690.419175][T27161] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 690.549448][T27166] validate_nla: 8 callbacks suppressed [ 690.549474][T27166] netlink: 'syz.0.5730': attribute type 9 has an invalid length. [ 690.865373][ T5740] IPVS: starting estimator thread 0... [ 690.872050][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 690.873917][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 691.050959][T27176] IPVS: using max 24 ests per chain, 57600 per kthread [ 691.915499][T27222] IPv6: sit3: Disabled Multicast RS [ 691.978136][T27225] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 692.183053][T27233] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 692.202823][T27239] netlink: 'syz.5.5749': attribute type 11 has an invalid length. [ 692.939344][T27270] __nla_validate_parse: 6 callbacks suppressed [ 692.939368][T27270] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5761'. [ 693.187619][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.240890][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.274054][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.294137][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.352154][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.373518][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.406571][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.439273][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.495897][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.535183][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.566789][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.613876][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.648059][T27285] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.5766'. [ 693.653907][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.718626][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5766'. [ 693.722617][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.741525][T27290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5768'. [ 693.782111][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.817492][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.864318][T27277] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 693.893308][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.923798][T27277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.038414][T27285] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5766'. [ 694.128552][T27285] vlan1: entered allmulticast mode [ 694.164206][T27306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5772'. [ 694.178835][T27285] syz_tun: entered allmulticast mode [ 694.404156][T27311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5773'. [ 694.437519][T27311] IPv6: NLM_F_CREATE should be specified when creating new route [ 694.711349][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.249214][T27350] xt_hashlimit: size too large, truncated to 1048576 [ 695.279876][T27352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5787'. [ 695.295881][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5788'. [ 695.313519][T27355] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5788'. [ 696.329496][T27396] validate_nla: 27 callbacks suppressed [ 696.329519][T27396] netlink: 'syz.5.5800': attribute type 1 has an invalid length. [ 697.167389][T27429] netlink: 'syz.3.5812': attribute type 4 has an invalid length. [ 697.189552][T27430] netlink: 'syz.3.5812': attribute type 4 has an invalid length. [ 697.944173][T27465] __nla_validate_parse: 7 callbacks suppressed [ 697.944197][T27465] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.5823'. [ 698.136552][T27470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5825'. [ 698.509619][T27482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5830'. [ 698.541215][T27482] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5830'. [ 698.556448][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 698.557556][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 698.845477][T27492] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5834'. [ 698.855575][T27489] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5832'. [ 699.327925][T27507] netlink: 'syz.3.5837': attribute type 5 has an invalid length. [ 699.351674][T27506] netlink: 252 bytes leftover after parsing attributes in process `syz.6.5838'. [ 699.552570][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5839'. [ 699.608921][T27512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5839'. [ 699.747552][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5839'. [ 699.789301][T27527] netlink: 'syz.1.5840': attribute type 33 has an invalid length. [ 699.885917][T27532] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 700.022491][T27527] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 700.113739][T27527] bond13 (unregistering): Released all slaves [ 700.196117][T27542] net_ratelimit: 24 callbacks suppressed [ 700.196144][T27542] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 700.244343][T27532] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 700.283465][T27542] netlink: 'syz.6.5845': attribute type 4 has an invalid length. [ 700.866049][T27562] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 701.048912][T27578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.166892][T27582] Bluetooth: hci1: too big key_count value 32778 [ 701.282965][T27582] netlink: 'syz.6.5855': attribute type 1 has an invalid length. [ 701.842184][T27606] SET target dimension over the limit! [ 702.566179][T27629] smc: removing ib device syz1 [ 702.633972][T27643] macvtap1: entered promiscuous mode [ 702.668299][T27643] team0: entered promiscuous mode [ 702.693788][T27643] team_slave_0: entered promiscuous mode [ 702.727475][T27643] team_slave_1: entered promiscuous mode [ 702.755479][T27643] macvtap1: entered allmulticast mode [ 702.793812][T27643] team0: entered allmulticast mode [ 702.820305][T27643] team_slave_0: entered allmulticast mode [ 702.855506][T27643] team_slave_1: entered allmulticast mode [ 702.893485][T27643] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 702.960331][T27629] smbdirect: ib_dev[syz1] removed [ 703.021497][T27646] macvtap2: entered promiscuous mode [ 703.037757][T27646] macvtap2: entered allmulticast mode [ 704.108735][T27691] __nla_validate_parse: 6 callbacks suppressed [ 704.108762][T27691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5885'. [ 704.173499][T27696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5885'. [ 704.310583][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 705.052394][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5890'. [ 705.069492][T27725] netlink: 'syz.5.5890': attribute type 5 has an invalid length. [ 705.082104][T27725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5890'. [ 706.097926][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5898'. [ 706.117020][T27762] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5899'. [ 706.232162][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 706.310682][T27767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5901'. [ 706.348510][T27760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'. [ 706.392794][T27768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5901'. [ 706.416358][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5898'. [ 706.761372][T27780] IPVS: length: 1152 != 8 [ 707.505804][T27809] netlink: 'syz.6.5915': attribute type 58 has an invalid length. [ 708.571199][T27835] netlink: 'syz.3.5923': attribute type 1 has an invalid length. [ 708.622730][T27835] netlink: 'syz.3.5923': attribute type 1 has an invalid length. [ 708.642970][T26108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 708.664318][T26108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 708.677535][T26108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 708.697753][T26108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 708.716086][T26108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 710.034252][T27881] xt_hashlimit: size too large, truncated to 1048576 [ 710.098946][T27884] __nla_validate_parse: 7 callbacks suppressed [ 710.098967][T27884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5933'. [ 710.673291][T27903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5939'. [ 710.716783][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 710.730337][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 710.739201][T27903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5939'. [ 710.804779][ T5645] Bluetooth: hci5: command tx timeout [ 711.214175][T27920] tipc: Can't bind to reserved service type 0 [ 711.276782][T27922] netlink: 'syz.5.5946': attribute type 1 has an invalid length. [ 711.453493][T27926] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 711.502026][T27926] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 711.537929][T27926] bond6: (slave ip6gre3): making interface the new active one [ 711.577253][T27926] bond6: (slave ip6gre3): Enslaving as an active interface with an up link [ 711.596831][T27939] netlink: 'syz.3.5951': attribute type 1 has an invalid length. [ 711.625790][T27939] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5951'. [ 711.654190][T27936] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 711.918209][T27952] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 712.229422][T27964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.428130][T27972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.436047][T27972] IPv6: NLM_F_CREATE should be set when creating new route [ 712.454651][T27972] netlink: 'syz.3.5961': attribute type 3 has an invalid length. [ 712.479554][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5961'. [ 712.573492][T27980] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 712.804775][T27989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5966'. [ 712.871584][ T5645] Bluetooth: hci5: command tx timeout [ 713.077881][T27995] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 713.120653][T27995] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 713.254080][T28007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5973'. [ 713.282674][T27833] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.292080][T27833] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.303022][T27833] bridge_slave_0: entered allmulticast mode [ 713.312290][T27833] bridge_slave_0: entered promiscuous mode [ 713.322713][T27995] syzkaller1: entered promiscuous mode [ 713.329275][T27995] syzkaller1: entered allmulticast mode [ 713.339257][T27833] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.368631][T27833] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.393456][T27833] bridge_slave_1: entered allmulticast mode [ 713.423110][T27833] bridge_slave_1: entered promiscuous mode [ 713.617464][T27833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.617480][T28014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5977'. [ 713.617508][T28014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5977'. [ 713.656230][T27833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.782333][T27833] team0: Port device team_slave_0 added [ 713.807555][T27833] team0: Port device team_slave_1 added [ 713.999035][T27833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.008312][T27833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.048973][T27833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.067870][T27833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.087431][T27833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.119183][T27833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.335145][T27833] hsr_slave_0: entered promiscuous mode [ 714.349346][T27833] hsr_slave_1: entered promiscuous mode [ 714.359527][T27833] debugfs: 'hsr0' already exists in 'hsr' [ 714.367959][T27833] Cannot create hsr debugfs directory [ 714.742436][T28055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5988'. [ 714.951818][ T5645] Bluetooth: hci5: command tx timeout [ 715.305893][T27833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.322335][T27833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.363296][T28085] xt_hashlimit: size too large, truncated to 1048576 [ 715.704173][T27833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.751385][T27833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.077860][T27833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.124307][T27833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.437048][T27833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.469428][T27833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.032190][ T5645] Bluetooth: hci5: command tx timeout [ 717.387527][T27833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 717.426345][T27833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.508935][T27833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 717.554521][T27833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.583280][T27833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 717.617065][T27833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.665198][T28149] 8021q: adding VLAN 0 to HW filter on device .` [ 717.706857][T28149] tipc: Resetting bearer [ 717.746294][T28153] xt_connbytes: Forcing CT accounting to be enabled [ 717.761632][T28149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 717.827339][T28149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.897320][T28149] tipc: Resetting bearer [ 717.932406][T28149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.997265][T28149] veth0_to_team: entered promiscuous mode [ 718.048548][T28149] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 718.101705][T27833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 718.138166][T27833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.222278][T28168] x_tables: duplicate entry at hook 1 [ 718.501405][ T13] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 718.537354][ T13] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 718.781156][T27833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.849016][T27833] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.886262][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.895190][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.996381][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.004408][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.502856][T28227] __nla_validate_parse: 1 callbacks suppressed [ 719.502879][T28227] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6036'. [ 719.621997][T28234] netlink: 'syz.5.6038': attribute type 1 has an invalid length. [ 719.669874][T28234] 8021q: adding VLAN 0 to HW filter on device bond7 [ 719.691203][T28237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6038'. [ 719.811815][T28234] bond7: (slave ip6gretap1): making interface the new active one [ 719.839090][T28234] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 719.856446][T28237] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 719.875705][T28237] bond7: entered allmulticast mode [ 719.882928][T28237] ip6gretap1: entered allmulticast mode [ 719.932740][T28244] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 719.953773][T28239] syzkaller0: entered promiscuous mode [ 719.967289][T28239] syzkaller0: entered allmulticast mode [ 719.986567][T28239] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 720.103493][T28243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6039'. [ 720.239678][T28256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6043'. [ 720.574461][T28266] IPv6: sit1: Disabled Multicast RS [ 720.583388][T28266] sit1: entered allmulticast mode [ 720.736128][ T30] audit: type=1804 audit(1780144455.958:14): pid=28274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6048" name="/newroot/516/cgroup.controllers" dev="tmpfs" ino=2659 res=1 errno=0 [ 720.847574][ T30] audit: type=1800 audit(1780144455.958:15): pid=28274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6048" name="cgroup.controllers" dev="tmpfs" ino=2659 res=0 errno=0 [ 720.967769][T27833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.981505][T28273] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 720.993174][T28273] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 721.013013][T28273] tipc: Resetting bearer [ 721.199075][T27833] veth0_vlan: entered promiscuous mode [ 721.242408][T28290] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 721.257530][T27833] veth1_vlan: entered promiscuous mode [ 721.476506][T27833] veth0_macvtap: entered promiscuous mode [ 721.554235][T27833] veth1_macvtap: entered promiscuous mode [ 721.787202][T28306] bond6: entered promiscuous mode [ 721.800993][T27833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.013229][T27833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.086543][T22696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.125094][T22696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.154327][T22696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.184820][T22696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.609120][T22691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.634660][T22691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.905589][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6063'. [ 723.044418][T28329] smc: removing net device team0 with user defined pnetid SYZ2 [ 723.128125][T28329] team0 (unregistering): Port device team_slave_1 removed [ 723.225369][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.238213][T28325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.286520][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.421387][T28347] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6068'. [ 723.781355][T28360] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6073'. [ 724.421787][T26108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 724.441831][T26108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 724.462822][T26108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 724.499261][T26108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 724.522502][T26108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 724.655381][T28382] netlink: 'syz.6.6080': attribute type 5 has an invalid length. [ 725.008850][T28389] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6083'. [ 725.164804][T28399] Cannot find set identified by id 65534 to match [ 725.207548][T28397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6086'. [ 725.997912][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.017128][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.034218][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 726.083119][T28428] bridge_slave_0: default FDB implementation only supports local addresses [ 726.400479][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.464333][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.494554][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 726.633147][T26108] Bluetooth: hci6: command tx timeout [ 726.949034][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.980782][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.008764][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.216821][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.245744][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.270009][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.389399][T28463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6102'. [ 727.432401][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6102'. [ 727.471562][T28463] openvswitch: netlink: Flow actions attr not present in new flow. [ 727.500773][T28465] openvswitch: netlink: Flow actions attr not present in new flow. [ 727.559805][T28469] openvswitch: netlink: IP tunnel TTL not specified. [ 727.987597][T28477] netlink: 'syz.1.6107': attribute type 21 has an invalid length. [ 728.017753][T28476] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6106'. [ 728.271705][T28477] bond13: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 728.296761][T28477] bond13 (unregistering): Released all slaves [ 728.630541][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.639242][ C1] bridge0: topology change detected, propagating [ 728.647231][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.654649][ C1] bridge0: topology change detected, propagating [ 728.718171][T26108] Bluetooth: hci6: command tx timeout [ 729.255131][T28510] netlink: 'syz.6.6113': attribute type 2 has an invalid length. [ 729.823332][ T13] bond7 (unregistering): (slave geneve3): Releasing active interface [ 730.469127][ T13] bond0 (unregistering): Released all slaves [ 730.484637][ T13] bond1 (unregistering): Released all slaves [ 730.506776][ T13] bond2 (unregistering): Released all slaves [ 730.533884][ T13] bond3 (unregistering): Released all slaves [ 730.550872][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 730.566844][ T13] bond4 (unregistering): Released all slaves [ 730.594455][ T13] bond5 (unregistering): Released all slaves [ 730.614862][ T13] bond6 (unregistering): Released all slaves [ 730.642072][ T13] bond7 (unregistering): Released all slaves [ 730.669849][ T13] bond8 (unregistering): Released all slaves [ 730.693229][ T13] bond9 (unregistering): Released all slaves [ 730.741084][T28524] syzkaller1: entered promiscuous mode [ 730.761094][T28524] syzkaller1: entered allmulticast mode [ 730.782623][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 730.794834][T26108] Bluetooth: hci6: command tx timeout [ 730.949368][ T13] : left promiscuous mode [ 731.044411][T28529] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6116'. [ 731.073014][T28530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6117'. [ 731.236539][ T13] : left promiscuous mode [ 731.381942][T28535] tipc: Enabling of bearer rejected, already enabled [ 731.422864][T28538] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 731.447985][T28538] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 731.460698][T28538] tipc: Resetting bearer [ 731.484043][ T13] tipc: Left network mode [ 731.499127][T28544] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 731.661286][T28535] tipc: Resetting bearer [ 731.755405][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6122'. [ 731.919216][T28559] netlink: 'syz.0.6123': attribute type 10 has an invalid length. [ 732.025713][T28559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.044966][T28559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.131343][T28559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.155559][T28559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.166929][T28563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6124'. [ 732.738507][T28587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6128'. [ 732.801645][T28591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6129'. [ 732.815607][T28587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6128'. [ 732.870379][T26108] Bluetooth: hci6: command tx timeout [ 733.403303][T28375] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.443284][T28375] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.457076][T28619] netlink: 'syz.1.6134': attribute type 1 has an invalid length. [ 733.485422][T28375] bridge_slave_0: entered allmulticast mode [ 733.523874][T28375] bridge_slave_0: entered promiscuous mode [ 733.555929][T28619] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 733.559255][T28375] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.614561][T28375] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.641340][T28375] bridge_slave_1: entered allmulticast mode [ 733.669299][T28375] bridge_slave_1: entered promiscuous mode [ 733.719421][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 733.997196][T28375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.185410][T28645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6141'. [ 734.217873][ T13] veth1_macvtap: left promiscuous mode [ 734.241912][ T13] veth0_macvtap: left promiscuous mode [ 734.248054][ T13] veth1_vlan: left promiscuous mode [ 734.260567][ T13] veth0_vlan: left promiscuous mode [ 734.643556][T28662] netlink: 1116 bytes leftover after parsing attributes in process `syz.1.6144'. [ 734.950355][T26108] Bluetooth: hci6: command tx timeout [ 735.186872][T28375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.393229][T28675] netlink: 'syz.5.6148': attribute type 1 has an invalid length. [ 735.433465][T28375] team0: Port device team_slave_0 added [ 735.443033][T28675] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6148'. [ 735.468857][T28375] team0: Port device team_slave_1 added [ 735.514737][T28674] netlink: 'syz.5.6148': attribute type 1 has an invalid length. [ 735.590751][T28375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.602389][T28375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.659305][T28375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.686373][T28375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.698204][T28375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.764005][T28375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.978796][T28375] hsr_slave_0: entered promiscuous mode [ 735.998175][T28693] openvswitch: netlink: Duplicate key (type 32). [ 736.034773][T28375] hsr_slave_1: entered promiscuous mode [ 736.053941][T28375] debugfs: 'hsr0' already exists in 'hsr' [ 736.071571][T28375] Cannot create hsr debugfs directory [ 736.115479][T28693] __nla_validate_parse: 4 callbacks suppressed [ 736.115502][T28693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6152'. [ 736.238539][T28693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6152'. [ 736.925127][ T13] IPVS: stop unused estimator thread 0... [ 736.949326][T28724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6159'. [ 736.956967][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 736.961118][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.491081][T28727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6159'. [ 738.199780][ T1096] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 738.423245][ T1096] bond2 (unregistering): (slave gretap1): Releasing active interface [ 738.473545][ T1096] batman_adv: batadv0: Removing interface: gretap2 [ 738.637521][ T1096] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 738.648100][ T1096] bridge3 (unregistering): left promiscuous mode [ 738.798386][ T1096] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 738.982027][ T1096] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.995043][ T1096] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.008672][ T1096] .` (unregistering): Released all slaves [ 739.025889][ T1096] bond1 (unregistering): Released all slaves [ 739.054816][ T1096] bond2 (unregistering): Released all slaves [ 739.087509][ T1096] bond3 (unregistering): Released all slaves [ 739.118571][ T1096] bond0 (unregistering): Released all slaves [ 739.137421][ T1096] bond4 (unregistering): Released all slaves [ 739.159876][ T1096] bond5 (unregistering): Released all slaves [ 739.189024][ T1096] bond6 (unregistering): Released all slaves [ 739.221876][ T1096] bond7 (unregistering): Released all slaves [ 739.241883][ T1096] bond8 (unregistering): Released all slaves [ 739.265708][ T1096] bond9 (unregistering): Released all slaves [ 739.289067][ T1096] bond11 (unregistering): Released all slaves [ 740.046544][ T1096] : left promiscuous mode [ 740.211061][ T1096] tipc: Disabling bearer [ 740.245000][ T1096] tipc: Left network mode [ 740.271705][T28787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6174'. [ 740.334912][T28796] netlink: 'syz.1.6176': attribute type 4 has an invalid length. [ 740.473417][T28801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6177'. [ 740.790240][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.799056][ C1] bridge0: topology change detected, propagating [ 740.807650][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.817347][ C1] bridge0: topology change detected, propagating [ 741.731644][T28833] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6183'. [ 741.808036][T28833] openvswitch: netlink: Flow key attr not present in new flow. [ 742.828805][T28869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6190'. [ 742.968765][T28868] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6190'. [ 743.057561][T28375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 743.079559][T28874] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 743.136117][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.138601][T28874] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 743.157135][T28375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 743.205845][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.458462][T28375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 743.519714][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.647015][T28375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 743.702302][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.228669][T28375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.248890][T28918] netlink: 'syz.6.6201': attribute type 21 has an invalid length. [ 744.294452][T28918] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6201'. [ 744.357681][T28375] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.437585][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.445831][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.585011][ T1096] hsr_slave_0: left promiscuous mode [ 744.607591][ T1096] hsr_slave_1: left promiscuous mode [ 744.618580][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.628336][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.646896][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.682596][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.748830][ T1096] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 744.777651][ T1096] batman_adv: batadv0: Removing interface: ipvlan2 [ 744.835088][ T1096] veth1_vlan: left allmulticast mode [ 744.850759][ T1096] veth1_macvtap: left promiscuous mode [ 744.862889][ T1096] veth1_vlan: left promiscuous mode [ 744.883147][ T1096] vet: left promiscuous mode [ 745.172423][ T1096] pim6reg (unregistering): left allmulticast mode [ 745.634707][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 745.664027][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 745.978871][T28927] lo speed is unknown, defaulting to 1000 [ 745.997729][T13435] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.005091][T13435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.038713][T28927] lo speed is unknown, defaulting to 1000 [ 746.073771][T28927] lo speed is unknown, defaulting to 1000 [ 746.095752][T28927] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 746.166810][T28927] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 746.248832][T28927] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 746.339345][T28967] netlink: 'syz.6.6208': attribute type 3 has an invalid length. [ 746.535487][T28927] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 746.538026][T28966] syzkaller0: entered promiscuous mode [ 746.592681][T28966] syzkaller0: entered allmulticast mode [ 746.722899][T28927] lo speed is unknown, defaulting to 1000 [ 746.838325][T28927] lo speed is unknown, defaulting to 1000 [ 746.918893][T28927] lo speed is unknown, defaulting to 1000 [ 746.945484][ T1096] IPVS: stop unused estimator thread 0... [ 746.959809][T28927] lo speed is unknown, defaulting to 1000 [ 747.002883][T28927] lo speed is unknown, defaulting to 1000 [ 747.036401][T28927] lo speed is unknown, defaulting to 1000 [ 747.069826][T28927] lo speed is unknown, defaulting to 1000 [ 747.153797][T28998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6212'. [ 747.223609][T28998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6212'. [ 747.239752][T28927] lo speed is unknown, defaulting to 1000 [ 747.286892][T28998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6212'. [ 747.731726][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6218'. [ 747.755260][T29024] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6218'. [ 747.805594][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 747.883839][T29029] netlink: 'syz.0.6219': attribute type 12 has an invalid length. [ 747.921347][T29032] netlink: 'syz.0.6219': attribute type 12 has an invalid length. [ 747.959856][T29036] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6220'. [ 748.026675][T29039] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 748.106145][T29032] netlink: 'syz.0.6219': attribute type 2 has an invalid length. [ 748.164670][T29032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6219'. [ 748.207562][T29044] netlink: 'syz.1.6222': attribute type 1 has an invalid length. [ 748.303082][T29044] bond13: entered promiscuous mode [ 748.316419][T29044] 8021q: adding VLAN 0 to HW filter on device bond13 [ 748.489257][T29047] bond13: (slave bridge7): making interface the new active one [ 748.541986][T29047] bridge7: entered promiscuous mode [ 748.568427][T29047] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 749.079934][T28375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.666381][T28375] veth0_vlan: entered promiscuous mode [ 749.744552][T28375] veth1_vlan: entered promiscuous mode [ 749.877972][T28375] veth0_macvtap: entered promiscuous mode [ 749.912407][T28375] veth1_macvtap: entered promiscuous mode [ 749.929217][T29105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6234'. [ 749.969353][T29105] openvswitch: netlink: nsh attr 12336 is out of range max 3 [ 749.988203][T28375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.035654][T28375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.106639][T22696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.123526][T29108] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.6235'. [ 750.161797][T22696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.189731][T22696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.237978][T22696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.594857][T13435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.619591][T13435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.755836][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.786795][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.664541][T29207] syzkaller1: left promiscuous mode [ 752.689039][T29207] syzkaller1: left allmulticast mode [ 752.741651][T29212] __nla_validate_parse: 4 callbacks suppressed [ 752.741673][T29212] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6264'. [ 752.771253][T29213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6265'. [ 752.813197][T29212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6264'. [ 752.903581][T29212] batadv_slave_1: entered promiscuous mode [ 752.931774][T29212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6264'. [ 753.016016][T29212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.095850][T29212] batadv_slave_1 (unregistering): left promiscuous mode [ 753.154919][T29212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.425558][T29239] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6269'. [ 753.476729][T29253] netlink: 'syz.5.6272': attribute type 1 has an invalid length. [ 753.498197][T29253] netlink: 'syz.5.6272': attribute type 2 has an invalid length. [ 753.946266][T29276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 753.954835][T29276] IPv6: NLM_F_CREATE should be set when creating new route [ 753.963254][T29276] IPv6: NLM_F_CREATE should be set when creating new route [ 753.970739][T29276] IPv6: NLM_F_CREATE should be set when creating new route [ 755.278459][T29315] veth0_to_bond: entered allmulticast mode [ 755.679281][T29337] netlink: 'syz.5.6289': attribute type 8 has an invalid length. [ 756.196141][T29355] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6294'. [ 756.206820][T29355] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6294'. [ 756.446015][T29355] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6294'. [ 756.461457][T29355] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6294'. [ 756.718933][T29355] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6294'. [ 756.962512][T29379] netlink: 'syz.0.6299': attribute type 1 has an invalid length. [ 757.406236][T29395] netlink: 'syz.0.6303': attribute type 1 has an invalid length. [ 757.446246][T29394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 757.505773][T29395] netlink: 'syz.0.6303': attribute type 1 has an invalid length. [ 757.562827][T29395] netlink: 'syz.0.6303': attribute type 8 has an invalid length. [ 758.059514][T29412] bridge_slave_0: default FDB implementation only supports local addresses [ 758.175503][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.186471][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.196272][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.205705][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.216170][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.226090][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.237906][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.249162][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.258879][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.267961][T29415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 758.298245][T29416] __nla_validate_parse: 5 callbacks suppressed [ 758.298266][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6309'. [ 758.357345][T29416] netlink: 'syz.0.6309': attribute type 30 has an invalid length. [ 758.454513][T13431] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.472013][T13431] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.507346][T13431] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.541902][T13431] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.936267][T29445] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 758.979807][T29445] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 759.063133][T29451] netlink: 'syz.6.6320': attribute type 2 has an invalid length. [ 759.114656][T29455] bridge_slave_0: default FDB implementation only supports local addresses [ 759.236991][T29461] netlink: 'syz.5.6323': attribute type 1 has an invalid length. [ 759.425817][T29473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6323'. [ 759.510669][T29464] 8021q: adding VLAN 0 to HW filter on device bond9 [ 759.541749][T29464] bond8: (slave bond9): making interface the new active one [ 759.556650][T29464] bond8: (slave bond9): Enslaving as an active interface with an up link [ 759.606114][T29469] bond8: (slave gretap3): Enslaving as a backup interface with an up link [ 759.617917][T29471] bond0: entered allmulticast mode [ 759.628515][T29471] bond_slave_0: entered allmulticast mode [ 759.637060][T29471] bond_slave_1: entered allmulticast mode [ 759.655858][T29473] 8021q: adding VLAN 0 to HW filter on device bond8 [ 777.911962][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 785.412515][T29496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6332'. [ 785.639471][T29504] bond14: option all_slaves_active: invalid value (222) [ 785.652763][T29504] bond14 (unregistering): Released all slaves [ 785.669992][T29512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6334'. [ 785.769631][T29513] pim6reg1: entered promiscuous mode [ 785.805065][T29513] pim6reg1: entered allmulticast mode [ 785.824482][T29522] bridge_slave_0: default FDB implementation only supports local addresses [ 786.019106][T29527] netlink: 'syz.5.6339': attribute type 9 has an invalid length. [ 786.174704][T29530] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6340'. [ 786.190318][T29535] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 786.203525][T29534] tipc: Enabling of bearer rejected, already enabled [ 786.402241][T29541] netlink: 'syz.1.6343': attribute type 29 has an invalid length. [ 786.430761][T29541] netlink: 'syz.1.6343': attribute type 29 has an invalid length. [ 786.445847][T29541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6343'. [ 786.462114][T29545] net_ratelimit: 44 callbacks suppressed [ 786.462138][T29545] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 786.487760][T29541] openvswitch: netlink: Unknown nsh attribute 0 [ 786.503881][T29548] netlink: 'syz.1.6343': attribute type 32 has an invalid length. [ 786.521901][T29548] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6343'. [ 786.569958][T29549] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 786.779589][T29564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6351'. [ 786.962875][T29578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6354'. [ 786.974142][T29578] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 787.012760][T29578] sctp: [Deprecated]: syz.0.6354 (pid 29578) Use of int in max_burst socket option deprecated. [ 787.012760][T29578] Use struct sctp_assoc_value instead [ 787.094448][T29581] vlan1: entered promiscuous mode [ 787.109738][T29581] vlan1: entered allmulticast mode [ 787.126096][T29581] vet: entered allmulticast mode [ 787.212875][ T6297] IPVS: starting estimator thread 0... [ 787.306109][T29596] netlink: 'syz.6.6358': attribute type 1 has an invalid length. [ 787.320286][T29591] IPVS: using max 26 ests per chain, 62400 per kthread [ 787.586660][T29611] netlink: 'syz.5.6363': attribute type 10 has an invalid length. [ 787.664199][T29615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6364'. [ 787.705094][T29619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.917675][T29637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.162852][T29650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6374'. [ 788.343589][T29659] syzkaller1: entered promiscuous mode [ 788.365501][T29659] syzkaller1: entered allmulticast mode [ 788.940361][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.956020][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.965219][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 788.976897][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 788.985065][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.581925][T29705] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6387'. [ 790.033817][T29729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.291220][T29737] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 790.505734][T29682] lo speed is unknown, defaulting to 1000 [ 790.536456][T29746] __nla_validate_parse: 1 callbacks suppressed [ 790.536477][T29746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6398'. [ 790.730645][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6401'. [ 790.825841][T29762] bridge0: port 4(veth1_to_bridge) entered blocking state [ 790.839428][T29762] bridge0: port 4(veth1_to_bridge) entered disabled state [ 790.851978][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6405'. [ 790.861619][T29762] veth1_to_bridge: entered allmulticast mode [ 790.869552][T29762] veth1_to_bridge: entered promiscuous mode [ 790.880613][T29762] bridge0: port 4(veth1_to_bridge) entered blocking state [ 790.887899][T29762] bridge0: port 4(veth1_to_bridge) entered listening state [ 791.023548][T29763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 791.037705][ T5645] Bluetooth: hci3: command tx timeout [ 791.308166][T29786] lo: entered promiscuous mode [ 791.339390][T29790] xt_l2tp: v2 doesn't support IP mode [ 791.362580][T29786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.387857][T29794] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 791.409073][T29794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6410'. [ 791.415312][ T1096] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.438143][ T1096] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.446813][ T6297] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.462435][T29794] hsr_slave_0: left promiscuous mode [ 791.479394][T29795] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6410'. [ 791.492805][T29794] hsr_slave_1: left promiscuous mode [ 791.623359][T29801] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 791.735017][T29808] net_ratelimit: 1 callbacks suppressed [ 791.735037][T29808] openvswitch: netlink: Missing valid actions attribute. [ 791.756724][T29808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.832487][ C0] bridge0: port 4(veth1_to_bridge) entered blocking state [ 791.959654][T29682] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.983953][T29682] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.009464][T29682] bridge_slave_0: entered allmulticast mode [ 792.038477][T29682] bridge_slave_0: entered promiscuous mode [ 792.090842][T29682] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.118688][T29682] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.146833][T29682] bridge_slave_1: entered allmulticast mode [ 792.162672][T29682] bridge_slave_1: entered promiscuous mode [ 792.248699][T29836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 792.251929][ T6296] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 792.281060][T29682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.298104][T29682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.310587][ T6296] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 792.369097][T29840] netlink: 'syz.5.6424': attribute type 4 has an invalid length. [ 792.388976][T29682] team0: Port device team_slave_0 added [ 792.403458][T29840] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6424'. [ 792.411552][T29682] team0: Port device team_slave_1 added [ 792.489674][T29682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.496952][T29682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.530806][T29682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.543470][T29840] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6424'. [ 792.617160][T29847] bond14: Unable to set down delay as MII monitoring is disabled [ 792.639539][T29847] bond14 (unregistering): Released all slaves [ 792.677684][T29682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.688808][T29682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.738680][T29682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.753275][T29852] tc_dump_action: action bad kind [ 792.852357][T29682] hsr_slave_0: entered promiscuous mode [ 792.859624][T29682] hsr_slave_1: entered promiscuous mode [ 792.877188][T29682] debugfs: 'hsr0' already exists in 'hsr' [ 792.884190][T29682] Cannot create hsr debugfs directory [ 792.934314][T29860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6430'. [ 792.951911][T29860] block nbd2: Unsupported socket: should be TCP or UNIX. [ 792.970344][T29861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6431'. [ 793.112353][ T5645] Bluetooth: hci3: command 0x041b tx timeout [ 793.165301][T29869] netlink: 'syz.1.6435': attribute type 1 has an invalid length. [ 793.301019][T29869] 8021q: adding VLAN 0 to HW filter on device bond14 [ 793.314007][T29879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 793.343490][T29878] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 793.379117][T29878] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 793.390979][T29879] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 793.402759][T29878] netlink: 'syz.0.6437': attribute type 2 has an invalid length. [ 793.412354][T29879] bond14: entered allmulticast mode [ 793.522882][T29869] bond14: (slave ip6gretap2): Enslaving as an active interface with an up link [ 793.543422][T29883] tipc: Started in network mode [ 793.561519][T29883] tipc: Node identity 22fb41f1dac4, cluster identity 4711 [ 793.584215][T29883] tipc: Enabled bearer , priority 0 [ 793.622820][T29882] syzkaller0: entered promiscuous mode [ 793.637572][T29882] syzkaller0: entered allmulticast mode [ 793.824751][T29682] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.843531][T29682] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.860604][T29682] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 793.914700][T29905] netlink: 'syz.0.6443': attribute type 4 has an invalid length. [ 794.115819][T29882] tipc: Resetting bearer [ 794.139868][T29881] tipc: Resetting bearer [ 794.204603][T29881] tipc: Disabling bearer [ 794.411651][T29917] x_tables: duplicate underflow at hook 3 [ 794.428377][T29682] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.435084][T29918] x_tables: duplicate underflow at hook 3 [ 794.469255][T29682] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.500319][T29682] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 794.766288][T29682] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.788152][T29682] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.823092][T29682] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 795.106829][T29682] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.137967][T29682] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.170469][T29682] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 795.190667][T26108] Bluetooth: hci3: command 0x041b tx timeout [ 795.269490][T29946] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 795.280489][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 795.300480][T29946] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 795.525279][T29933] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 795.766396][T29682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 795.787701][T29682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.803194][T29682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 795.842213][T29682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 795.861719][T29682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 795.883707][T29682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 795.901831][T29682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 795.960845][T29682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.028467][ T30] audit: type=1804 audit(1780144531.248:16): pid=29964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6461" name="/newroot/614/cgroup.controllers" dev="tmpfs" ino=3153 res=1 errno=0 [ 796.056851][ T30] audit: type=1800 audit(1780144531.248:17): pid=29964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6461" name="cgroup.controllers" dev="tmpfs" ino=3153 res=0 errno=0 [ 796.110706][T29963] geneve2: entered promiscuous mode [ 796.157019][T22692] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 57538 - 0 [ 796.185672][T22692] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 57538 - 0 [ 796.206809][T22692] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 57538 - 0 [ 796.216878][T22692] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 57538 - 0 [ 796.359139][T29983] netlink: 'syz.5.6467': attribute type 6 has an invalid length. [ 796.439797][T29682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.526601][T29682] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.612891][T29997] netlink: 'syz.1.6468': attribute type 27 has an invalid length. [ 796.629929][T29997] netlink: 'syz.1.6468': attribute type 4 has an invalid length. [ 796.702735][T29997] __nla_validate_parse: 3 callbacks suppressed [ 796.702753][T29997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6468'. [ 796.739780][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.748777][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.801955][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.810179][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.207789][T30023] netlink: 'syz.1.6477': attribute type 1 has an invalid length. [ 797.229637][T30023] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.6477'. [ 797.270397][T26108] Bluetooth: hci3: command 0x041b tx timeout [ 797.469408][T30031] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6481'. [ 798.390294][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.486638][T29682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.526410][T30047] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6483'. [ 798.914486][T30089] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6492'. [ 798.957122][T30089] netlink: 'syz.1.6492': attribute type 2 has an invalid length. [ 799.333024][T29682] veth0_vlan: entered promiscuous mode [ 799.348080][T30096] tipc: Enabled bearer , priority 0 [ 799.360747][T26108] Bluetooth: hci3: command 0x041b tx timeout [ 799.481508][T30103] syzkaller0: entered promiscuous mode [ 799.487984][T30103] syzkaller0: entered allmulticast mode [ 799.497116][T30103] tipc: Resetting bearer [ 799.504893][T30114] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.6498'. [ 799.585883][T22692] tipc: Resetting bearer [ 799.609216][T30114] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 799.619365][T30114] 0ªX¹¦Dö»: entered allmulticast mode [ 799.627465][T29682] veth1_vlan: entered promiscuous mode [ 799.639709][T30095] tipc: Resetting bearer [ 803.510817][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 803.535640][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 804.368635][T30095] tipc: Disabling bearer [ 804.386817][ T6296] tipc: Node number set to 4164895217 [ 804.503297][T29682] veth0_macvtap: entered promiscuous mode [ 804.547138][T29682] veth1_macvtap: entered promiscuous mode [ 804.655062][T30130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 804.665821][T29682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.745575][T29682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.798727][T30135] netlink: 'syz.1.6506': attribute type 1 has an invalid length. [ 804.819948][T22696] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.842767][T22696] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.852535][T30137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6505'. [ 804.905830][T30137] bond2: Unable to set up delay as MII monitoring is disabled [ 804.931109][T30137] bond2 (unregistering): Released all slaves [ 804.979548][T22696] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.992912][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.234683][T30152] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 805.558441][T22696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.608044][T22696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.666467][T30168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6514'. [ 805.749505][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.771456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.885169][T30176] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6516'. [ 805.975114][T30180] x_tables: unsorted underflow at hook 2 [ 806.255258][T30193] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6520'. [ 806.395332][ T1096] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 806.454038][T30191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6522'. [ 806.465618][T30191] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6522'. [ 806.477004][T30191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6522'. [ 806.586868][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 806.615126][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 806.626125][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 806.640613][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 806.653410][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 807.514682][T30200] lo speed is unknown, defaulting to 1000 [ 807.836213][T30200] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.843802][T30200] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.853085][T30200] bridge_slave_0: entered allmulticast mode [ 807.861046][T30200] bridge_slave_0: entered promiscuous mode [ 807.869815][T30200] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.878351][T30200] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.887040][T30200] bridge_slave_1: entered allmulticast mode [ 807.901988][T30200] bridge_slave_1: entered promiscuous mode [ 807.944638][T30200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.958599][T30200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.033902][T30200] team0: Port device team_slave_0 added [ 808.045439][T30200] team0: Port device team_slave_1 added [ 808.119606][T30200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.127509][T30200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.184510][T30200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.214507][T30200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.222575][T30200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.254475][T30200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.341066][T30200] hsr_slave_0: entered promiscuous mode [ 808.348603][T30200] hsr_slave_1: entered promiscuous mode [ 808.356573][T30200] debugfs: 'hsr0' already exists in 'hsr' [ 808.363009][T30200] Cannot create hsr debugfs directory [ 808.605752][T30200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.620282][T30200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.731922][ T5645] Bluetooth: hci2: command tx timeout [ 808.733614][T30200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.753362][T30200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.865050][T30200] bond0: (slave netdevsim1): Releasing backup interface [ 808.875978][T30200] netdevsim netdevsim5 netdevsim1 (unregistering): left allmulticast mode [ 808.892768][T30200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.905673][T30200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.024298][T30200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.036401][T30200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.217409][T30194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.246708][T30200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 809.331758][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.377009][T30200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 809.444805][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.478414][T30200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 809.527529][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.655740][T30200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 809.693824][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.718946][T30259] team0: entered promiscuous mode [ 809.733287][T30259] team_slave_0: entered promiscuous mode [ 809.755327][T30259] team_slave_1: entered promiscuous mode [ 810.032026][T30200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.084093][T30200] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.163547][T30283] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 810.223979][T30283] bond1: (slave lo): Enslaving as an active interface with an up link [ 810.248933][T30283] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 810.276230][ T36] bridge_slave_1: left allmulticast mode [ 810.290089][ T36] bridge_slave_1: left promiscuous mode [ 810.301909][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.328656][ T36] bridge_slave_0: left allmulticast mode [ 810.345236][ T36] bridge_slave_0: left promiscuous mode [ 810.375434][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.812505][ T5645] Bluetooth: hci2: command tx timeout [ 811.088203][ T36] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.097539][ T36] bond_slave_0: left allmulticast mode [ 811.113249][ T36] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.124019][ T36] bond_slave_1: left allmulticast mode [ 811.132892][ T36] .` (unregistering): Released all slaves [ 811.145430][ T36] bond1 (unregistering): Released all slaves [ 811.169186][ T36] bond2 (unregistering): (slave veth5): Releasing active interface [ 811.180405][ T36] veth0_to_bond: entered promiscuous mode [ 811.198413][ T36] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 811.214807][ T36] bond2 (unregistering): (slave veth7): Releasing active interface [ 811.225807][ T36] bond2 (unregistering): Released all slaves [ 811.247105][ T36] bond3 (unregistering): Released all slaves [ 811.281317][ T36] bond0 (unregistering): Released all slaves [ 811.305184][ T36] bond4 (unregistering): Released all slaves [ 811.324460][ T36] bond5 (unregistering): Released all slaves [ 811.347271][ T36] bond6 (unregistering): Released all slaves [ 811.384433][T30287] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 811.451218][T30291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.513481][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.521116][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.667156][T22696] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.674770][T22696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.734380][ T36] tipc: Disabling bearer [ 811.791133][ T36] tipc: Disabling bearer [ 811.816054][ T36] tipc: Disabling bearer [ 811.847786][ T36] tipc: Left network mode [ 812.144280][T30330] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6554'. [ 812.582659][T30345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6558'. [ 812.714562][T30349] macsec1: entered promiscuous mode [ 812.870604][ T5645] Bluetooth: hci2: command tx timeout [ 813.068182][T30370] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6562'. [ 813.267321][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6565'. [ 813.567596][T30385] xt_policy: too many policy elements [ 813.607690][T30386] xt_policy: too many policy elements [ 813.677581][T30200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.751276][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 814.153542][ T5645] block nbd2: Receive control failed (result -32) [ 814.165395][T26108] block nbd2: Receive control failed (result -32) [ 814.215397][T30376] nbd2: detected capacity change from 0 to 63 [ 814.275366][T30123] block nbd2: Dead connection, failed to find a fallback [ 814.302089][T30123] block nbd2: shutting down sockets [ 814.315120][T30123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 814.329024][T30123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 814.367153][T30123] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 814.403721][T30123] Buffer I/O error on dev nbd2, logical block 1, async page read [ 814.414525][ T36] [ 814.416927][ T36] ====================================================== [ 814.424671][ T36] WARNING: possible circular locking dependency detected [ 814.432798][ T36] syzkaller #0 Not tainted [ 814.437332][ T36] ------------------------------------------------------ [ 814.437845][T30123] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 814.445770][ T36] kworker/u8:2/36 is trying to acquire lock: [ 814.445792][ T36] ffff88801be85210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 814.446211][ T36] [ 814.446211][ T36] but task is already holding lock: [ 814.446221][ T36] ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 814.446280][ T36] [ 814.446280][ T36] which lock already depends on the new lock. [ 814.446280][ T36] [ 814.446289][ T36] [ 814.446289][ T36] the existing dependency chain (in reverse order) is: [ 814.446299][ T36] [ 814.446299][ T36] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 814.446397][ T36] down_write+0x96/0x200 [ 814.446443][ T36] kernfs_add_one+0x41/0x5c0 [ 814.446471][ T36] kernfs_create_dir_ns+0xde/0x130 [ 814.446499][ T36] internal_create_group+0x425/0x1190 [ 814.446526][ T36] cpuhp_invoke_callback+0x445/0x860 [ 814.446570][ T36] cpuhp_issue_call+0x430/0x7a0 [ 814.446592][ T36] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 814.446615][ T36] __cpuhp_setup_state+0x3f/0x60 [ 814.446636][ T36] do_one_initcall+0x250/0x870 [ 814.446660][ T36] do_initcall_level+0x104/0x190 [ 814.505862][T30123] Buffer I/O error on dev nbd2, logical block 2, async page read [ 814.507924][ T36] do_initcalls+0x59/0xa0 [ 814.507954][ T36] kernel_init_freeable+0x2a6/0x3e0 [ 814.607455][ T36] kernel_init+0x1d/0x1d0 [ 814.612639][ T36] ret_from_fork+0x514/0xb70 [ 814.618611][ T36] ret_from_fork_asm+0x1a/0x30 [ 814.625105][ T36] [ 814.625105][ T36] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 814.635265][ T36] [ 814.635265][ T36] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 814.646782][ T36] cpus_read_lock+0x42/0x160 [ 814.652561][ T36] static_key_disable+0x12/0x20 [ 814.658991][ T36] __inet_hash_connect+0x25bb/0x25c0 [ 814.667430][ T36] tcp_v4_connect+0xd5f/0x19b0 [ 814.674863][ T36] __inet_stream_connect+0x25a/0xdd0 [ 814.681920][ T36] inet_stream_connect+0x66/0xa0 [ 814.688247][ T36] __sys_connect+0x312/0x450 [ 814.693881][ T36] __x64_sys_connect+0x7a/0x90 [ 814.700263][ T36] do_syscall_64+0x174/0x580 [ 814.707809][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.715571][ T36] [ 814.715571][ T36] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 814.723355][ T36] lock_sock_nested+0x41/0x100 [ 814.728794][ T36] inet_shutdown+0x6a/0x390 [ 814.734127][ T36] nbd_mark_nsock_dead+0x2e9/0x560 [ 814.740372][ T36] recv_work+0x1c2e/0x1d40 [ 814.745367][ T36] process_scheduled_works+0xb5d/0x1860 [ 814.751592][ T36] worker_thread+0xa53/0xfc0 [ 814.756830][ T36] kthread+0x389/0x470 [ 814.761465][ T36] ret_from_fork+0x514/0xb70 [ 814.766644][ T36] ret_from_fork_asm+0x1a/0x30 [ 814.771999][ T36] [ 814.771999][ T36] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 814.779793][ T36] __mutex_lock+0x1a3/0x1550 [ 814.784942][ T36] nbd_queue_rq+0x37b/0x1100 [ 814.791230][ T36] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 814.797743][ T36] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 814.804781][ T36] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 814.812211][ T36] blk_mq_run_hw_queue+0x348/0x4f0 [ 814.817908][ T36] blk_mq_dispatch_list+0xd16/0xe10 [ 814.823915][ T36] blk_mq_flush_plug_list+0x48d/0x570 [ 814.829840][ T36] __blk_flush_plug+0x3ed/0x4d0 [ 814.835345][ T36] __submit_bio+0x28d/0x580 [ 814.840401][ T36] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 814.851894][ T36] block_read_full_folio+0x599/0x830 [ 814.865678][ T36] filemap_read_folio+0x137/0x3b0 [ 814.871272][ T36] do_read_cache_folio+0x358/0x590 [ 814.876992][ T36] read_part_sector+0xb6/0x2b0 [ 814.882773][ T36] adfspart_check_ICS+0xb1/0x960 [ 814.888812][ T36] bdev_disk_changed+0x817/0x1770 [ 814.894681][ T36] blkdev_get_whole+0x380/0x510 [ 814.901153][ T36] bdev_open+0x31e/0xd30 [ 814.907105][ T36] blkdev_open+0x470/0x610 [ 814.912149][ T36] do_dentry_open+0x822/0x13a0 [ 814.917661][ T36] vfs_open+0x3b/0x340 [ 814.922301][ T36] path_openat+0x2e08/0x3860 [ 814.927716][ T36] do_file_open+0x23e/0x4a0 [ 814.933055][ T36] do_sys_openat2+0x113/0x200 [ 814.938399][ T36] __x64_sys_openat+0x138/0x170 [ 814.943829][ T36] do_syscall_64+0x174/0x580 [ 814.949068][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.955600][ T36] [ 814.955600][ T36] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 814.962946][ T36] __mutex_lock+0x1a3/0x1550 [ 814.968099][ T36] nbd_queue_rq+0xc6/0x1100 [ 814.973258][ T36] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 814.979723][ T36] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 814.986619][ T36] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 814.993345][ T36] blk_mq_run_hw_queue+0x348/0x4f0 [ 814.999155][ T36] blk_mq_dispatch_list+0xd16/0xe10 [ 815.004988][ T36] blk_mq_flush_plug_list+0x48d/0x570 [ 815.011263][ T36] __blk_flush_plug+0x3ed/0x4d0 [ 815.016756][ T36] __submit_bio+0x28d/0x580 [ 815.021804][ T36] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 815.028589][ T36] block_read_full_folio+0x599/0x830 [ 815.034417][ T36] filemap_read_folio+0x137/0x3b0 [ 815.040355][ T36] do_read_cache_folio+0x358/0x590 [ 815.046046][ T36] read_part_sector+0xb6/0x2b0 [ 815.051456][ T36] adfspart_check_ICS+0xb1/0x960 [ 815.057042][ T36] bdev_disk_changed+0x817/0x1770 [ 815.062892][ T36] blkdev_get_whole+0x380/0x510 [ 815.068489][ T36] bdev_open+0x31e/0xd30 [ 815.073387][ T36] blkdev_open+0x470/0x610 [ 815.079770][ T36] do_dentry_open+0x822/0x13a0 [ 815.085283][ T36] vfs_open+0x3b/0x340 [ 815.089910][ T36] path_openat+0x2e08/0x3860 [ 815.095567][ T36] do_file_open+0x23e/0x4a0 [ 815.100638][ T36] do_sys_openat2+0x113/0x200 [ 815.105883][ T36] __x64_sys_openat+0x138/0x170 [ 815.111371][ T36] do_syscall_64+0x174/0x580 [ 815.117065][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.124122][ T36] [ 815.124122][ T36] -> #4 (set->srcu){.+.+}-{0:0}: [ 815.131478][ T36] __synchronize_srcu+0xca/0x300 [ 815.137021][ T36] elevator_switch+0x1e8/0x7a0 [ 815.142532][ T36] elevator_change+0x2cc/0x450 [ 815.148039][ T36] elevator_set_default+0x36c/0x430 [ 815.154013][ T36] blk_register_queue+0x3e9/0x4e0 [ 815.161478][ T36] __add_disk+0x677/0xd50 [ 815.166381][ T36] add_disk_fwnode+0xfb/0x480 [ 815.172838][ T36] nbd_dev_add+0x72c/0xb50 [ 815.178177][ T36] nbd_init+0x168/0x1f0 [ 815.184658][ T36] do_one_initcall+0x250/0x870 [ 815.190158][ T36] do_initcall_level+0x104/0x190 [ 815.195997][ T36] do_initcalls+0x59/0xa0 [ 815.201070][ T36] kernel_init_freeable+0x2a6/0x3e0 [ 815.207016][ T36] kernel_init+0x1d/0x1d0 [ 815.211985][ T36] ret_from_fork+0x514/0xb70 [ 815.217120][ T36] ret_from_fork_asm+0x1a/0x30 [ 815.222431][ T36] [ 815.222431][ T36] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 815.231069][ T36] __mutex_lock+0x1a3/0x1550 [ 815.236282][ T36] elevator_change+0x1b3/0x450 [ 815.241625][ T36] elevator_set_none+0xb5/0x140 [ 815.247226][ T36] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 815.253595][ T36] nbd_start_device+0x17f/0xb10 [ 815.259099][ T36] nbd_genl_connect+0x165b/0x1cf0 [ 815.264699][ T36] genl_family_rcv_msg_doit+0x22a/0x330 [ 815.270916][ T36] genl_rcv_msg+0x61c/0x7a0 [ 815.275971][ T36] netlink_rcv_skb+0x232/0x4b0 [ 815.281345][ T36] genl_rcv+0x28/0x40 [ 815.285868][ T36] netlink_unicast+0x75c/0x8e0 [ 815.291283][ T36] netlink_sendmsg+0x813/0xb40 [ 815.297000][ T36] ____sys_sendmsg+0x972/0x9f0 [ 815.303321][ T36] ___sys_sendmsg+0x2a5/0x360 [ 815.308658][ T36] __x64_sys_sendmsg+0x1bd/0x2a0 [ 815.314776][ T36] do_syscall_64+0x174/0x580 [ 815.320024][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.326474][ T36] [ 815.326474][ T36] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 815.335820][ T36] blk_alloc_queue+0x546/0x680 [ 815.341261][ T36] __blk_mq_alloc_disk+0x197/0x390 [ 815.347218][ T36] nbd_dev_add+0x499/0xb50 [ 815.352485][ T36] nbd_init+0x168/0x1f0 [ 815.357217][ T36] do_one_initcall+0x250/0x870 [ 815.362725][ T36] do_initcall_level+0x104/0x190 [ 815.368235][ T36] do_initcalls+0x59/0xa0 [ 815.373761][ T36] kernel_init_freeable+0x2a6/0x3e0 [ 815.379576][ T36] kernel_init+0x1d/0x1d0 [ 815.385682][ T36] ret_from_fork+0x514/0xb70 [ 815.391332][ T36] ret_from_fork_asm+0x1a/0x30 [ 815.397833][ T36] [ 815.397833][ T36] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 815.405551][ T36] fs_reclaim_acquire+0x71/0x100 [ 815.411514][ T36] kmem_cache_alloc_noprof+0x40/0x650 [ 815.417547][ T36] __kernfs_iattrs+0xdf/0x320 [ 815.422778][ T36] kernfs_iop_setattr+0xea/0x3f0 [ 815.428421][ T36] notify_change+0xc1a/0xf40 [ 815.434816][ T36] do_truncate+0x1c2/0x250 [ 815.439835][ T36] path_openat+0x2f89/0x3860 [ 815.445854][ T36] do_file_open+0x23e/0x4a0 [ 815.452182][ T36] do_sys_openat2+0x113/0x200 [ 815.457868][ T36] __x64_sys_openat+0x138/0x170 [ 815.463712][ T36] do_syscall_64+0x174/0x580 [ 815.469562][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.476016][ T36] [ 815.476016][ T36] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 815.484647][ T36] __lock_acquire+0x15a5/0x2cf0 [ 815.490329][ T36] lock_acquire+0x106/0x350 [ 815.495405][ T36] down_write+0x96/0x200 [ 815.500486][ T36] kernfs_unlink_sibling+0x71/0x180 [ 815.507481][ T36] kernfs_rename_ns+0x4a6/0x830 [ 815.513202][ T36] sysfs_rename_link_ns+0x16e/0x1b0 [ 815.520239][ T36] device_rename+0x110/0x210 [ 815.527113][ T36] __dev_change_net_namespace+0x15d3/0x20a0 [ 815.534104][ T36] cfg802154_switch_netns+0xbf/0x3d0 [ 815.540467][ T36] cfg802154_pernet_exit+0x75/0xe0 [ 815.546137][ T36] ops_undo_list+0x49f/0x940 [ 815.551731][ T36] cleanup_net+0x56b/0x800 [ 815.556806][ T36] process_scheduled_works+0xb5d/0x1860 [ 815.564733][ T36] worker_thread+0xa53/0xfc0 [ 815.569888][ T36] kthread+0x389/0x470 [ 815.574853][ T36] ret_from_fork+0x514/0xb70 [ 815.580272][ T36] ret_from_fork_asm+0x1a/0x30 [ 815.585631][ T36] [ 815.585631][ T36] other info that might help us debug this: [ 815.585631][ T36] [ 815.596668][ T36] Chain exists of: [ 815.596668][ T36] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 815.596668][ T36] [ 815.612223][ T36] Possible unsafe locking scenario: [ 815.612223][ T36] [ 815.620064][ T36] CPU0 CPU1 [ 815.625518][ T36] ---- ---- [ 815.631119][ T36] lock(&root->kernfs_rwsem); [ 815.635961][ T36] lock(cpuhp_state_mutex); [ 815.644496][ T36] lock(&root->kernfs_rwsem); [ 815.652611][ T36] lock(&root->kernfs_iattr_rwsem); [ 815.658625][ T36] [ 815.658625][ T36] *** DEADLOCK *** [ 815.658625][ T36] [ 815.666792][ T36] 5 locks held by kworker/u8:2/36: [ 815.671928][ T36] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 815.684142][ T36] #1: ffffc90000ac7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 815.694714][ T36] #2: ffffffff8fdb9128 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 815.704185][ T36] #3: ffffffff8fdc7e00 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 815.713914][ T36] #4: ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 815.725040][ T36] [ 815.725040][ T36] stack backtrace: [ 815.731475][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 815.731503][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.731519][ T36] Workqueue: netns cleanup_net [ 815.731554][ T36] Call Trace: [ 815.731561][ T36] [ 815.731569][ T36] dump_stack_lvl+0xe8/0x150 [ 815.731591][ T36] print_circular_bug+0x2e1/0x300 [ 815.731616][ T36] check_noncircular+0x12e/0x150 [ 815.731640][ T36] __lock_acquire+0x15a5/0x2cf0 [ 815.731662][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 815.731681][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 815.731701][ T36] ? kernfs_unlink_sibling+0x71/0x180 [ 815.731727][ T36] lock_acquire+0x106/0x350 [ 815.731744][ T36] ? kernfs_unlink_sibling+0x71/0x180 [ 815.731776][ T36] down_write+0x96/0x200 [ 815.731795][ T36] ? kernfs_unlink_sibling+0x71/0x180 [ 815.731827][ T36] ? __pfx_down_write+0x10/0x10 [ 815.731846][ T36] ? kernfs_root+0x1c/0x230 [ 815.731867][ T36] ? kernfs_root+0x1c/0x230 [ 815.731888][ T36] ? kernfs_root+0x1c/0x230 [ 815.731909][ T36] ? kernfs_root+0x1ea/0x230 [ 815.731931][ T36] kernfs_unlink_sibling+0x71/0x180 [ 815.731959][ T36] kernfs_rename_ns+0x4a6/0x830 [ 815.731989][ T36] sysfs_rename_link_ns+0x16e/0x1b0 [ 815.732013][ T36] device_rename+0x110/0x210 [ 815.732034][ T36] __dev_change_net_namespace+0x15d3/0x20a0 [ 815.732063][ T36] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 815.732089][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 815.732110][ T36] ? __mutex_trylock_common+0x158/0x260 [ 815.732134][ T36] ? __pfx___mutex_trylock_common+0x10/0x10 [ 815.732158][ T36] ? rcu_is_watching+0x15/0xb0 [ 815.732191][ T36] ? trace_contention_end+0x3d/0x140 [ 815.732215][ T36] ? __mutex_lock+0x319/0x1550 [ 815.732235][ T36] ? do_raw_spin_unlock+0xf5/0x210 [ 815.732261][ T36] ? _raw_spin_unlock+0x28/0x50 [ 815.732362][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 815.732382][ T36] ? __pfx_netdev_run_todo+0x10/0x10 [ 815.732402][ T36] cfg802154_switch_netns+0xbf/0x3d0 [ 815.732428][ T36] cfg802154_pernet_exit+0x75/0xe0 [ 815.732451][ T36] ops_undo_list+0x49f/0x940 [ 815.732478][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 815.732503][ T36] ? idr_destroy+0x227/0x290 [ 815.732583][ T36] cleanup_net+0x56b/0x800 [ 815.732607][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 815.732634][ T36] ? process_scheduled_works+0xa70/0x1860 [ 815.732651][ T36] ? process_scheduled_works+0xa70/0x1860 [ 815.732669][ T36] process_scheduled_works+0xb5d/0x1860 [ 815.732698][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 815.732718][ T36] ? assign_work+0x3d5/0x5e0 [ 815.732736][ T36] worker_thread+0xa53/0xfc0 [ 815.732776][ T36] kthread+0x389/0x470 [ 815.732796][ T36] ? __pfx_worker_thread+0x10/0x10 [ 815.732817][ T36] ? __pfx_kthread+0x10/0x10 [ 815.732838][ T36] ret_from_fork+0x514/0xb70 [ 815.732858][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 815.732874][ T36] ? __switch_to+0xc79/0x1410 [ 815.732898][ T36] ? __pfx_kthread+0x10/0x10 [ 815.732919][ T36] ret_from_fork_asm+0x1a/0x30 [ 815.732944][ T36] [ 815.745667][T30123] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.811389][ T5645] Bluetooth: hci2: command tx timeout [ 816.084429][T30123] Buffer I/O error on dev nbd2, logical block 3, async page read [ 816.092811][T30123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.105896][T30123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 816.116994][T30123] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.128106][T30123] Buffer I/O error on dev nbd2, logical block 1, async page read [ 816.136857][T30123] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.146672][T30123] Buffer I/O error on dev nbd2, logical block 2, async page read [ 816.157113][T30123] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.166853][T30123] Buffer I/O error on dev nbd2, logical block 3, async page read [ 816.176068][T30123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.187374][T30123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 816.195541][T30123] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.204796][T30123] Buffer I/O error on dev nbd2, logical block 1, async page read [ 816.215806][T30398] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6569'. [ 816.229620][ T36] hsr_slave_0: left promiscuous mode [ 816.232475][T30123] ldm_validate_partition_table(): Disk read failed. [ 816.260546][T30123] Dev nbd2: unable to read RDB block 0 [ 816.276752][ T36] hsr_slave_1: left promiscuous mode [ 816.285407][T30123] nbd2: unable to read partition table [ 816.293774][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.303882][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.313981][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.322036][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.345275][T30123] ldm_validate_partition_table(): Disk read failed. [ 816.356000][ T36] veth0_to_team: left promiscuous mode [ 816.364268][ T36] veth1_macvtap: left promiscuous mode [ 816.374170][ T36] veth0_macvtap: left promiscuous mode [ 816.382929][T30123] Dev nbd2: unable to read RDB block 0 [ 816.389745][ T36] veth1_vlan: left promiscuous mode [ 816.403763][ T36] veth0_vlan: left promiscuous mode [ 816.420980][T30123] nbd2: unable to read partition table [ 816.561776][ T36] pim6reg (unregistering): left allmulticast mode [ 816.768651][ T36] team0 (unregistering): Port device team_slave_1 removed [ 816.786781][ T36] team0 (unregistering): Port device team_slave_0 removed [ 816.891581][ T36] team0 (unregistering): Port device dummy0 removed [ 817.152695][T30200] veth0_vlan: entered promiscuous mode [ 817.189272][T30200] veth1_vlan: entered promiscuous mode [ 817.259757][T30200] veth0_macvtap: entered promiscuous mode [ 817.277054][T30200] veth1_macvtap: entered promiscuous mode [ 817.288300][ T36] IPVS: stop unused estimator thread 0... [ 817.305948][T30200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.318451][T30200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.353997][ T1096] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.364158][ T1096] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.396690][ T1096] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.427157][ T1096] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.447363][T30200] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 817.490659][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.502475][T30200] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 817.511455][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.550669][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.570378][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.510500][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!