last executing test programs: 2.896698861s ago: executing program 0 (id=2704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x70bd22, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic=',']}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008094) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40004180}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xc9, 0x6, "b7bb17ae0c49ce6bfa0cacd6ffc1b3a9b34648a3a685b72d5306dbb178768ccbef0958f4eaae2ef0c05b41b88fa6b9e7f2fd749cc0e5cce11640e86a9e782c07ee60885982041fabad40a4cf1236cc53e7b3d9fc571770719e84d982e50216af845c8638afd490041c25a31085643f97ea5463a1033b509a13390a4136eb8e16c3caa0ebffaa60800cf5927d172f43223f81fb06e72c06fec2447afd7f8ef8408a91748774cf316929ae3b5327cfc5bdb487392826df1a8c07acf2d2471239baddd44f2c22"}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xb9, 0x6, "0b9a46680e994013aaf64d7624d51c8f4d778b6779d06c4fcfadd89a4e79e591ad59b504a51962d37dda251835747539be8c5dd5efb0fc51e6f55f04b4c510a3780a839dbec5d367341f27291bd47abaafcdbc02675570cabf5732a45aefef41ed5bcc817e021ad961444afceeb177b9e4cf709ecaa0ceb574cffa1d178788be64ac01de0cfe608758c0113b6dd3a61ab299dd7691b19815968b87c1911e4461268fb6e7690aab40e166898218a5e3e77d05f48a42"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3b, 0x6, "6ddd7c28658392952d4d34cd1eaa35c57df0977abc2b56c3d70fe47403fc96a51bf46cd6a95857864463d9c431f9706b03ca7bef3f1051"}]}], {0x14}}, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.804824843s ago: executing program 0 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x8854) write$nci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xb, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x9, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r8 = socket(0x1e, 0x4, 0x0) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) 2.716367707s ago: executing program 1 (id=2708): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="b8d871efdf4fc591769afae1d871", 0xe, 0xc0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x2}}, 0x24) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xff6c, 0x0, &(0x7f0000000280)="4d6e2c45a2035a5c298ee68876d60934e3b7aaf7c62c98312586dd87", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/1, &(0x7f0000000140)=0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000045}], 0x1, 0x0) 2.505465152s ago: executing program 2 (id=2709): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000140003006261746164765ff3930894052c9d084e736c6176655f30000014001a80100002800c0001800800020000080000", @ANYRES32=0x0, @ANYBLOB="4800000010000304fcffffff0000000000000000", @ANYRESOCT], 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000140003006261746164765ff3930894052c9d084e736c6176655f30000014001a80100002800c0001800800020000080000", @ANYRES32=0x0, @ANYBLOB="4800000010000304fcffffff0000000000000000", @ANYRESOCT], 0x48}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xc}, {0xc, 0x5}, {0x5, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xc}, {0xc, 0x5}, {0x5, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d0500000000060015000500000028001680240001"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdffffff000000000a00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdffffff000000000a00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 2.448735976s ago: executing program 3 (id=2710): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000002a40)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x11d0}}, {{&(0x7f0000003c80)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x4, 0x2, 0x3}}, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=[{0x68, 0x110, 0x30, "b75edb4f1db9d7559ce7f6df2ccf15c20039b6e741e3a302552b574bb67b56ffd7497eb89f48c29cf64d8e157c43f7e0f74486169092f25b8bf4940755b93324e51ee8a83eda48fb92defaa699633ac708ce8edc4cb4c1"}, {0xc0, 0x115, 0xa, "8f5929db4c8a960dd86e16726deb3fc4ff69c5d9e9d15c533c6b8a06c6b09d9cccefe34e2576839c1eb0eae19c56924ef2ea9df8a98f12c325835c2443439da60d09b7bf121f6a051474d933a57fc8e39a5cf8ac19806eed236d4ea4845e003fa5d5743d5b69966e16013c98f28983a5139c6c9830387ba6085b0c6725a77fdcdd0b09a788f7c9159b061a1105d33f70190d81248de44125a4fc60d3f32c0359d3255b17f0a0a97fe6d9"}, {0x50, 0x197, 0x0, "2eb34ca4d005841cd6ced0d8cfb75a6473f759a97679d74048a767769e60dc7d9da05786df6e58db2b2bdad1872e8b63e8a74b57de63676cbabfd0c0"}, {0xa0, 0x108, 0x400, "23f5476f1430aa4e52b25b095887de4d09f17e6530479225ec3a223c9fab899c7d77dd004b9440f4e7235580cc3b7f6fcd7a8940aa50f80608b1ad2c0e72e97ae72ef665f878f18e739e084e8950d9437224b1b8bd9739e3cbe8a83846b9027c370a458e9f1330d416763e0a62275c2b376768a3e9b31c1220ca71e6c7d13145dcb5296724b5aaa8907c"}], 0x218}}, {{&(0x7f0000003f80)=@l2tp6={0xa, 0x0, 0x7ff, @empty, 0x9, 0x2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004000)="9069c8b1ad9c75c0831b6f3d638017a30de699626c5d22ce72141b105963ee912340bf57a9699bc1c2e3720a5a3f94d0d579b7b4b189594cf273e5f0de0fb4ece40666062d0022b99c4f1b8047efbb020f8543c1c3f66910b5b80454b09ffc8f640dce7cc93537ea9f261eb67a41feea6b2f8198d06bfb511a23d59a9806faa92727896a7251b2cf91071491127f32b97eb82513cfcc935a1537114dc72122a3e51801d5978dfae0cfa5f7c2fed70bfff3d8771e1d2d6277649c64da7ffc20ce3004252390e811fe20a2d4d98a46b119a5dae072b2422deeb14c", 0xda}, {&(0x7f0000000980)="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", 0x117}, {&(0x7f0000004200)="cc9e891ea95ac8ed0a6dec3ca9412a2a7a2685e956b2a55558e52c676055f06045cd87bd87bd204bb68b9145599ac104c7330f696d20194e3815306a86d25924529acbce6c3b62ef4d05d325b5d76c", 0x4f}, {&(0x7f00000004c0)="1282d36bfb3b7f987f7422ce9396609c76f6aa2ace584b1b1c007b532b3d06fab499462916ec6e4e6435704d213a8eed48cbc0ac7f01c01e8674a5a1d9646776eeea9ccc2587a52fac69dcd25be1d7d4cc14a9071fb0a5125d9c7e8788df07d6c1aa9940ca534517d0d6183ed8aa7e99d2ab7c57083962ea770c8962f8e5ec632fc820e2c656", 0x86}, {&(0x7f0000004340)="e52ffc8455014bc6d4e80d4c4b8bb7fa8961ecabf22ae3b3cd7043ed7a2f27e615e688", 0x23}, {&(0x7f0000004380)="c83860afc7d6a1701a16d47b40a4f58504892945c810422e0957576c2bdafb957678a00d2b4c3d5b538e548feabf63b1f79c18c59b4e32cae94410fe7ead91d15b8d25a07f6de06f5ab9168388a7f0b24d7b9b7464fd60c75904c6fe2df68ab9b0fd761f37457a379f66af7848f1247e719a96997e03589ffc35c2da5bc5de8034e965e519d8eb7288dc2f86e2f28ff8ea71084681041fdc6de2cf6e92e710ee9a6f1674b29b044982189731898abe10147b7aabf70cad2d925ddcb24550793279bf", 0xc2}, {&(0x7f0000004480)="4675cdc76b0cd6885be02b7827394dc8eebf9b21e5705471a12c6c600997", 0x1e}], 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1a0}}, {{&(0x7f0000004700)=@generic={0x28, "5d771866b1ee067f7f11250b02dae223ece629dfa7807502e8f1edb996b2c5cd5a2f8e1ff4bea1ec95a42842400d0a2d32e89eb53ed6f3dfd76bb9b976eba9d0b892a55f2d42410938ab297590c59d65d8e594773c7ac7e925ba04786f8258e99e5cf51da4a4a8d2ef53fe0c6e34f5bb038c5d4cf81fc18b7d3da16184be"}, 0x80, &(0x7f0000004b40)=[{0x0}, {&(0x7f00000047c0)="75b920644aa26ebb5ebd9a0910d92a675dfb93e5547abfe5698b55873e3e729f13e3ab93cbd401eba356b23a91c7940ae80f611b023b877354bcb16d0905663591dd4fbb1a08382afd2f5007e9b9114cf4a39d15bed0c233127eae9963d2cbdb2128c54fe99f01b3ebc6462a3c4852a4ec995b0365eeb334e05816e7ae3aee5cd0267e47b834e4f825c31c5ff5fecb556a9349d7eb41d87eb91d0e16177fe9a0010665498ac1cb7ed92b8fdba58b17705e6e63b620958d690a9483cd942ab3d2f787d18c2130046364c491b2808e1ebf33da3c1055ae5998df3c2ed5c5c055f42e451adb953e68f6d24e4d35f4e91f0dd018a2ea", 0xf4}, {&(0x7f00000048c0)="37c414ebd78ce9a85b2525c05fb1134bdf9cbf0e146de4c35ac14068ff85e02c80e934c63c645c7f8fa0e0c0a9de301f9702c755d374eb0fb01303bd20be001f44d517b394ee8cc3592f9b5d6694cfae50d823e564a8b0b232965a050cb980f454989adf219b3d1becf98d854ecee3be5bdf7824c6d5aea57a24e75ccc9673af01593206ac3aecd1591860a43dff4c1fc6cbe466ebd88c3c05d904e723c66d7951dcc92194785bb0b95c", 0xaa}, {&(0x7f0000004980)="fdf743b261dd09f440f627691504ef573743587e43a785bf69c480d5124b0308c76c6b4a698a30d75e3d46dba6f00c347d2457e0bc60003d13e73acb3f1f364414136a3cfdcfbb186bd5df0eaeeb4ebbedaa2a118d000000000000", 0x5b}, {&(0x7f0000004a00)="08f6e9756edf2d80187834d8e2c71db0a3fe001297092b247be354e96f2d44ade783c076e4497928f86a4fd61bd68fdead08d76e3d4df9dc3534ccdd42d7fb34222af3c6e7b0d838bd8a366111dd64c91c73d61a74a9751f1d85401da428ecb6bf4fae283c521132a4f0fbc6a579e88c72dac98dc928e735ff6205484eb95dcf7a28a1985e52570b6c9773cff7ba69797ba67887c074837c5270f03fc1cde228bf022c", 0xa3}, {&(0x7f0000004ac0)="802cd10a4d89a7a45df9ffd22bbf2a55300f766dc60bd24992db53d8f638f644458ad1c107bb686d6f6e4e69f69297b6f28a1f76a65aa63ab0431f", 0x3b}], 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES16=r0], 0x1448}}, {{&(0x7f0000006040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, &(0x7f0000006240), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x138}}, {{&(0x7f0000006300)=@isdn={0x22, 0x6, 0x4, 0x3, 0x2}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006380)="7e178bfa552e2e52fc76efd7b66db03a30d7d81c53b8071fd6a471bd3a5d49bc8fbadd31b4b38b8176", 0x29}, {0x0}, {&(0x7f0000006440)="13f558f3d323c9f9737ff1dd616f7219a0522f7aea3d046ae56a3538d9137a0c7d1d567440abb5cf12ef887e79750fb67e5b9a99adef57051dafad9c54483a2ed86d", 0x42}, {&(0x7f0000006500)="094280d1217111c847030a1baf2ea56999e86ca7cb5acfcbb8a745e01b8ec82d1ba302b505679adce8dba4fcad9e9d847c5ef35c469aab11954bc195eb33e4a7ad630fe4801a9ac24e47e30b2415fb9b33d8eeb6f4d8e096105e25cdf1fb75f6756d13bb86776e0b67b4dd0048226b3b73ae82bb704536202f562331a0f4f95f4b6a3884a147958b5beac672587431dcfecbff460c51b9d817521cc4b3c5a421ea5d34", 0xa3}], 0x4}}], 0x6, 0x804) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0707070000002bbd7000fddbdf2505001a00ac1414bb000000000000000000000000fe800000000000000000a3030000000c260014ca"], 0x38}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x5, {{0x27, 0x4, 0x2, 0x1b, 0x9c, 0x68, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0xc, 0x66, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp={0x44, 0x20, 0x3d, 0x0, 0x9, [0x7, 0x7, 0x4, 0x0, 0x6, 0x8, 0x3]}, @timestamp_addr={0x44, 0x4, 0xf4, 0x1, 0xa}, @rr={0x7, 0x7, 0xd6, [@multicast1]}, @noop, @end, @generic={0x86, 0x12, "484cfce182adcfaf7bd92ac00a8595dc"}, @timestamp_addr={0x44, 0x3c, 0xb6, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x37}, 0xdc}, {@local, 0xc970}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x80000001}, {@loopback, 0x7}, {@loopback, 0xe2f7}, {@broadcast, 0x3}]}, @noop]}}}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="440000001000010400080000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000c000000000005000d0001000000"], 0x44}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f0000000ac0)=0x6e) socket(0x10, 0x803, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000090000000000000004000034f4dd28a6f27a471fbcbef096210085000000500000001815000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x5, @remote, 'gre0\x00'}}, 0xfffffcde) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x7ff, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x2000, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00'}) r10 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e25, 0x400, @empty, 0x100007}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) socket$rds(0x15, 0x5, 0x0) 2.445989149s ago: executing program 0 (id=2711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x29, 0x107, 0x70bd25, 0x25dfdbfe, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x8010) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000400007012bbd7000fadbdf25039400000400c2801c0001801800108014000d00ff02000000000000000000000000000104000800ddee"], 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'veth0\x00', 0x600}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000003900010000010000000c000000000000267c5af5a2f19264354ceb42497a195131ea33b681f12b64035ab7af34ea01ca40cd2f2de1de593e9a73be80005d3105b353c294c51b135a845b37b78b4f7e1a8437dbae502184f5820b2bbf9f7912d464750500000000000000000000000000b228b6b8c7c554fd6c3f2baecfee8d5729d4bdc422ea7f08b3b92bc7ad5b2cefab546b65d6dcf8c82a7fcc4661b8f4ca6df00f2ab670b7394646a1e950fed60a77"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x400c884) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @loopback}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="224a010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r6, @ANYBLOB="081800002600010008001c00", @ANYRES32, @ANYBLOB="ff298bb16ec4f0b5676e03f0084842e9bb7c0a9dd7f42857e5337552276056f5ca51cfb4f32ca07b90b48ad62e1e8b1f225c8dbc4ceacd06837a7d7f46899d272b9aefdb12f4209cff657c5a08416eafba2a6ce3fe48af93665d5a93b7e53f9f93e3f42ce61023a87af49e2794f3b900d172af"], 0x50}}, 0x0) 2.204805363s ago: executing program 2 (id=2714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) listen(r3, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x100000000002, 0x4) recvmsg$kcm(r4, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40010002) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a0102000000000000000001000000090001007379e4bedb5100000900030d5e188669bba6140084000000060a010400000000000000000100000008000b40000000005c0004802c0001800900e1ff7766726d000000001c000280080002400000000605000300000000400848a1e790f5a6964000018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000304000000000400000800000000", @ANYRES32=0x0, @ANYBLOB="b57dad88ca0800001c0012800b00010067656e65766500000c00028008000100000024bd"], 0x48}}, 0x0) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, r10, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) 2.204466929s ago: executing program 0 (id=2715): unshare(0x22020400) r0 = epoll_create(0x3ff) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xe373, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="630b008646dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x50) 2.175282899s ago: executing program 3 (id=2716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x8010) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 2.003964405s ago: executing program 2 (id=2719): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c2d6e144362bc4e, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x6, 0x8012, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000033e0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000001980)=0x3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6], 0x4c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)="2a95", 0x2}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000980)="365e371f", 0x4}], 0x1}}], 0x2, 0x5) shutdown(r8, 0x1) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000040)={r10}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.688229016s ago: executing program 2 (id=2722): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000040)=0x9, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000000000000000000000958a8a57d8fa64f4f29f5707e3ed"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r2, &(0x7f0000007b40)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x11, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x4, 0x6, "f5f8021f6e6f1c221b71392c9860dfc0d1f1194fea5a12c8061a01b6a1daca3f7ecf029e9e51ac560eca1b94a9206e3535ddf99659bc1c8e3e063d4b04d38d577933"}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x3, 0x1c, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESDEC=r1, @ANYRESOCT=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r8) write$cgroup_subtree(r8, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x26, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x4, 0x0, 0x9, 0xa, 0x1, 0x88, 0xfffffffffffffff4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x7f, &(0x7f0000000740)=""/127, 0x40f00, 0x1, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xe, 0xc, 0x684c1304}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r9], &(0x7f0000000940)=[{0x4, 0x5, 0xc, 0x4}, {0x1, 0x5, 0x4, 0x5}, {0x3, 0x1, 0x7, 0x2}], 0x10, 0x8000}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@updsa={0x164, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x71, 0x14, {{'xcbc(aes)\x00'}, 0x128, 0x0, "000000000000000000000000000000003fe380589cc8d6d2287e1ad94098733cb609bf729c"}}]}, 0x164}}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000020000000000000d5290f060000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003300"], 0x1fc}}, 0x0) r12 = socket$inet6(0xa, 0x4, 0x7) connect$inet6(r12, &(0x7f0000000140)={0xa, 0x4e26, 0x5, @remote, 0x9}, 0x1c) 1.627735213s ago: executing program 1 (id=2723): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x7d, 0x0, &(0x7f0000000280)) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x3}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.201662892s ago: executing program 0 (id=2725): mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x9, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20044814) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000cdf9f86c2057f5df4b37d9240002000000850000006100000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r6, r7, 0x0, 0xffffffff000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x20010, 0xffffffffffffffff, 0x0) 1.124887536s ago: executing program 3 (id=2726): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 1.122370239s ago: executing program 4 (id=2727): r0 = socket(0x400000000010, 0x3, 0x0) sendto$packet(r0, 0x0, 0x0, 0x24040051, 0x0, 0x0) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0xfffffffffffffffd, &(0x7f00000000c0)=0xfffffecb) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000080204e0000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) shutdown(r4, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000001af40024000000240000000500000000000000000000020200000000000000010000050000080003e8ffff000000000000000000611e2400"], &(0x7f0000001f40)=""/4089, 0x41, 0xff9, 0xa}, 0x28) getsockname$inet6(r1, &(0x7f0000000140), &(0x7f0000000180)=0x1c) 1.041785424s ago: executing program 3 (id=2728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) socketpair(0x18, 0x0, 0x9, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000004}) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000680)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1401, 0x300, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000013}, 0x24008490) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000780)={@broadcast, @empty, 0x0}, &(0x7f0000000740)=0xc) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xfff3, 0x10}, {0x1, 0x2}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}]}, 0x6c}}, 0x40c1) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5}, 0xb}], 0x2, 0x10, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r11, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0) 984.765453ms ago: executing program 4 (id=2729): r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14, 0x1000) recvfrom$packet(r0, &(0x7f0000000500)=""/109, 0x6d, 0x10001, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@remote, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) r4 = openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xb080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) close(0x4) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0xa, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @ldst={0x2, 0x0, 0x2, 0xb, 0x0, 0xfffffffffffffff4, 0x10}, @ldst={0x0, 0x1, 0x4, 0x6, 0x3, 0x2, 0x10}], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x6, 0xb783}, 0x10, 0xf51d, r1, 0x0, &(0x7f0000000400), 0x0, 0x10, 0x8}, 0x94) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14, 0x1000) (async) recvfrom$packet(r0, &(0x7f0000000500)=""/109, 0x6d, 0x10001, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@remote}, &(0x7f00000002c0)=0xc) (async) openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xb080, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) (async) close(0x4) (async) close(0x3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0xa, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @ldst={0x2, 0x0, 0x2, 0xb, 0x0, 0xfffffffffffffff4, 0x10}, @ldst={0x0, 0x1, 0x4, 0x6, 0x3, 0x2, 0x10}], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x6, 0xb783}, 0x10, 0xf51d, r1, 0x0, &(0x7f0000000400), 0x0, 0x10, 0x8}, 0x94) (async) 982.178171ms ago: executing program 4 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22c20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) accept4$tipc(r2, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r6 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000f01000/0x4000)=nil, 0x4000, 0x2000002, 0x4000932, r6, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='veth0_to_batadv\x00', 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r3, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r5, r3, 0x26}, 0x10) unshare(0x26020480) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r7}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(arc4-generic)\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180002ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 856.260701ms ago: executing program 4 (id=2731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0xc8, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xff], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 758.751477ms ago: executing program 4 (id=2732): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x81, 0x5, 0x8080, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x3}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/13], 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x2a060400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x1000, 0xf, 0x101, 0x200a, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x7fffffff, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$netlink(r6, &(0x7f0000001100)={0x0, 0x26, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[], 0xe0}], 0x45, 0x0, 0x0, 0x4000040}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0), 0x0, 0x10002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000cc4278e6ea039ba719a53b8a3bcd66e6f48e6b2b1c9df02cf0f94809786e9a55325752c25ee2ca6e449ceead007f111c1e885278441a0a2e7f29d4945fddffad1f04427c2934c317096405b25f1ed73ea5d390eac70001177fa4c9ae15c0f2f480"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000cc4278e6ea039ba719a53b8a3bcd66e6f48e6b2b1c9df02cf0f94809786e9a55325752c25ee2ca6e449ceead007f111c1e885278441a0a2e7f29d4945fddffad1f04427c2934c317096405b25f1ed73ea5d390eac70001177fa4c9ae15c0f2f480"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 640.240688ms ago: executing program 1 (id=2733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005140)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000004d80)=[{&(0x7f0000000040)="2bd60695c04ef0174579b9856d0f9b87e4e0ca4b36111a4f48ab216f17094e89fd5dc75e0d881fba9dd1124e2e108f9cc5bd1adc922e", 0x36}, {&(0x7f0000000140)="4b591d576fceac087e5fb425717cb79a1c7f1ee43d72cb3cab078dfce8b9d4338c9ae9ea88320d86adb822dd022e9463a5012026750fbe5509cf97bc688f3b91ebf7ba6a8efc0d969d573af3a134757d47e64adaef486095844f656b0b094c9fd1f8b54d0f5f4ebaa795408aea88a95a2c026cfcca77b89e2827839064c5f93e26ce25dfd1c17dd001987a99aec26b1f1f64ddd0697cc46122c5788137eb068ca4f5be9656dbe7931b19", 0xaa}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="dd2b8baea51e25f8", 0x8}, {&(0x7f0000003c80)="18beb7c37e7faf61f44a842b59", 0xd}, {&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="cd73b314af7d6db039cf4861c92ab9bded33e28ab336a7b66c0f3aae92239aadf9c86e88f566f5fc11e34f9021f6ac7df688fd236e6a49170cde33d009c55ca8a3328588b7125dd89a5933475fe43fd76ec4fc29c77ff30aafdde6f65954bea5786485ab0a4ee47fcfcfac0ca5ca42fd49614e0a62f65ce585d03403fa4cd694b16fefaf325472bc44406de1676b8108bfd02aa62e8068598b1180c64e7ee5394ddf7bd5281c4f36c046f9f7dd7c835adf621a6ba3d3d9e1880e592c3066", 0xbe}], 0x8, &(0x7f0000004e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}}}}], 0x58}}, {{&(0x7f0000004e80)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000005080)=[{&(0x7f0000004ec0)="54befeefbf2af0fd9714f5a1b35859a5b0f3434ba741853ebd1329544ca92d0071bb70700523da1f08232fab23027e402cff6dbfc4dec8a061980c8fba598847baa509c36fe0bfce6004da1d196fc051dcdeb1aee97aa197406f1534e436e0984d00282da63c751be10a65e9b5966d64ff4daa0d268e47665285b7617984f1679b6dd0054cfff39090529895e1ec7971fd64fc708eab4266d67e381746d2736d0c6ff56362a8902c9cdf4625d37bff774fbcb02a143a571b533ada28220d4cb27c3577d09b5f78123b3c1173de97343a205e04c0f3154eb2fb958a7653ef2db8ae791dbc908fb6520b1eb2c0", 0xec}, {&(0x7f0000004fc0)="5b40da23438dedaaf0ad9e345fb00d0822131ec520919f03882dfdf3653ea5265d9b92493d20855c3da3465285cace7d9a892c3265c3904c85c0a9b5b4e07d127ee53b42e18790d09318a16640373fdf8bba3368b290fa84decc5d47fad11f87f7041ce53f1e358313f571116f369da416c7dcd38ada77f97aecd778e5231d3180b008f0541515916cb13c2d5a337460e292d44d13ff2c720c028bacd478b34f0e1fc51b5a860aaaa047e944039b6994584c4d8371e91bb0b6", 0xb9}], 0x2, &(0x7f00000050c0)=[@ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x3, [{0x1, 0xa, "e0a6f5e854b4e029"}, {0x1, 0xb, "a8d5f958396671072f"}, {0x0, 0x9, "1450a66176a725"}, {0x1, 0xf, "1656381b753e652b2ad1c94669"}, {0x1, 0xa, "c870b848cafeef4f"}]}]}}}], 0x50}}], 0x2, 0x4804) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r0], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES16=0x0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000200)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x50) 637.983935ms ago: executing program 2 (id=2734): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xe, 0x8000, 0x2}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x2fc, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x2a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff407}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%$-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#]}^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&\'\xff.[])\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f29}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "111f839b872ada0e9cbb85c518f372182dc53ff7a71ee93cb8d9ea64bc9707afac06efc8a7d9219faf58ce3226c3e9430749ab40fb62dbb154b66b0c303c2ec8c57e7637f8d615a1d3f614971d61dc39b8404d2009b8bec737eb058afc747968624098990670ddef98f5f6ca23c3560c75ba9b8b3216dd45771c1a390647b2445f67abd4dcd23fbc95291953f91766a792d2b20f4d746f6fe2570f97ada72af1161c8d9dda59fb069f29500580a7de665ef6ef4bda5f8fbc02df227a3e233d9090ddc90635019663bc966c4d73f3284071ba2bc7c4c33a52e182c1dae9e45aa56277246601"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff6c}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xefb8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "d599c1ce3a1abe82fce02dbad84c247776b043f9425e87805b6281c954ff901b1b2d9ed61764baf4347e5c8c85e3865dec44213ee67951ea6f792e5391d25fdc44ea6f5e6555b0280a8bc42e29c2340807f4791a5e460000729797aa259d92ec23656e3fdf30d440a212e3fec532366ff7a43866dccbe7ca1ac59aff288a699e019312cc88ec59b698ce733109bbcf649be39d580ebf0fc9689eb6a167a3c98a85f8322fcdbe3045b81c26c9167a0c281d9b6cbe5aacd79aca09b274a6556c965abc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x85}, 0x10060010) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a00110029bd70000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6755150d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8004}, 0x4004000) 539.03946ms ago: executing program 4 (id=2735): r0 = socket(0x23, 0x1, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r2}, 0x38) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00030008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000020002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0x200, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r7, &(0x7f0000000140), 0xfffffdef) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x70}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}], &(0x7f0000000480)='GPL\x00', 0x60, 0x1b, &(0x7f00000004c0)=""/27, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0xd, 0xb}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r7, r3, 0x33, 0x8, 0x0, @void, @value=r8, @void, @void, r6}, 0x20) 379.626025ms ago: executing program 2 (id=2736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c80)={0x14, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x8010) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 308.806231ms ago: executing program 1 (id=2737): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100020000000000fdffffff85000000b5000000850000008800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 307.775253ms ago: executing program 1 (id=2738): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 236.046839ms ago: executing program 0 (id=2739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x1e, 0x805, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x64, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1100000005000000"], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12122, 0x0) (async) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12122, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) unshare(0x400) (async) unshare(0x400) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x54, 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x18) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x18) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r5, 0xc038586c, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000900)='geneve1\x00', 0x2c0, &(0x7f0000000240)={@_ha_fsid={[0x300, 0x3]}, {0x99f5, 0x1, 0x9, 0xdf6f}}, 0x10001, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0001000000500000240012800b00010067656e65766500001400028005000800000000000500096dd1f279d624aa39bccae57bbbb886120000000000d7972af36868fe37d3ae50ec78d035803770c123e7cf4ac5fd957c09ae181edff16eba9ea12ff1f252e80d59ed0b805d9f3649260d9c9be64455462be1d25f39b7f25fd287ed"], 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x20010) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x4000001}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x4000001}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x29, 0xf, 0x7, 0x2, 0x10, @local, @remote, 0x7, 0x1, 0x9, 0x40}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x29, 0xf, 0x7, 0x2, 0x10, @local, @remote, 0x7, 0x1, 0x9, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000e00)=ANY=[], 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=@deltfilter={0x44, 0x2d, 0x3ff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff1, 0xfff3}, {0x7, 0x7}, {0x5, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x85, 0x36}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xce, 0x9}}, @TCA_CHAIN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x10) sendto$inet6(r7, &(0x7f0000000180)="e796adec762aad77a3bc86e8885a581c969e793843582d492ab810c40491f56db1df576b0097ccb5e9a60e6db41a241cced1018f7f89611314aee8ff45463f", 0x3f, 0x800, &(0x7f0000000200)={0xa, 0x4e24, 0xf246, @loopback, 0x7ff}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) 228.379298ms ago: executing program 1 (id=2740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x5, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@map_fd={0x18, 0x8, 0x1, 0x0, r4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000540)=""/166, &(0x7f0000000600)=0xa6) close(r5) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000300)=0x30) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x9, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 68.17411ms ago: executing program 3 (id=2741): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0xdf}]}]}, 0x18}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x3}}], 0x18}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800a397a2b3c45cc3fe63054c1404000e082df3feb0ba140740280c096a4aab640561e0eb68f834e25770298776770181c09edea9", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf250f0000000c000600010000000200000005000f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 0s ago: executing program 3 (id=2742): bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (fail_nth: 16) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000c300e0ff020000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f00000004c0)=""/216, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) socketpair(0x29, 0x4, 0x17d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x140d, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) kernel console output (not intermixed with test programs): `syz.0.1315'. [ 241.449140][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.043919][T11356] __nla_validate_parse: 4 callbacks suppressed [ 243.043937][T11356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1336'. [ 243.083601][T11357] FAULT_INJECTION: forcing a failure. [ 243.083601][T11357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.111691][T11356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1336'. [ 243.157484][T11357] CPU: 0 UID: 0 PID: 11357 Comm: syz.4.1337 Not tainted syzkaller #0 PREEMPT(full) [ 243.157509][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.157519][T11357] Call Trace: [ 243.157526][T11357] [ 243.157533][T11357] dump_stack_lvl+0xe8/0x150 [ 243.157558][T11357] should_fail_ex+0x40c/0x560 [ 243.157590][T11357] _copy_from_iter+0x1d3/0x1660 [ 243.157613][T11357] ? rcu_is_watching+0x15/0xb0 [ 243.157639][T11357] ? __pfx__copy_from_iter+0x10/0x10 [ 243.157654][T11357] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 243.157693][T11357] ? netlink_sendmsg+0x650/0xb40 [ 243.157712][T11357] ? skb_put+0x112/0x210 [ 243.157731][T11357] netlink_sendmsg+0x6c0/0xb40 [ 243.157758][T11357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.157781][T11357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 243.157806][T11357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.157828][T11357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.157849][T11357] ____sys_sendmsg+0x9b9/0xa20 [ 243.157867][T11357] ? __might_fault+0xaf/0x130 [ 243.157909][T11357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.157937][T11357] ? import_iovec+0x73/0xa0 [ 243.157960][T11357] ___sys_sendmsg+0x2a5/0x360 [ 243.157978][T11357] ? __lock_acquire+0x683/0x2cd0 [ 243.158001][T11357] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.158023][T11357] ? kstrtouint+0x6e/0xe0 [ 243.158073][T11357] ? __fget_files+0x2a/0x420 [ 243.158093][T11357] ? __fget_files+0x3a2/0x420 [ 243.158123][T11357] __sys_sendmmsg+0x27c/0x4e0 [ 243.158147][T11357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 243.158164][T11357] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 243.158207][T11357] ? ksys_write+0x242/0x270 [ 243.158234][T11357] ? __pfx_ksys_write+0x10/0x10 [ 243.158263][T11357] __x64_sys_sendmmsg+0xa0/0xc0 [ 243.158283][T11357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.158301][T11357] do_syscall_64+0x174/0x580 [ 243.158317][T11357] ? trace_irq_disable+0x3b/0x140 [ 243.158342][T11357] ? clear_bhb_loop+0x40/0x90 [ 243.158364][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.158381][T11357] RIP: 0033:0x7fd32dd9ce59 [ 243.158397][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.158412][T11357] RSP: 002b:00007fd32ebc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.158430][T11357] RAX: ffffffffffffffda RBX: 00007fd32e015fa0 RCX: 00007fd32dd9ce59 [ 243.158443][T11357] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 243.158456][T11357] RBP: 00007fd32ebc4090 R08: 0000000000000000 R09: 0000000000000000 [ 243.158466][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.158477][T11357] R13: 00007fd32e016038 R14: 00007fd32e015fa0 R15: 00007ffc4781b4b8 [ 243.158506][T11357] [ 243.680085][T11371] lo speed is unknown, defaulting to 1000 [ 243.686914][T11371] lo speed is unknown, defaulting to 1000 [ 243.693394][T11371] lo speed is unknown, defaulting to 1000 [ 243.701578][T11371] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 243.715778][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1341'. [ 243.728449][T11371] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 243.746748][T11371] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 243.767299][T11371] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 243.793267][T11374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1343'. [ 243.885828][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 243.894905][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 243.936553][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 243.972699][T11371] lo speed is unknown, defaulting to 1000 [ 243.990449][T11371] lo speed is unknown, defaulting to 1000 [ 244.079109][T11371] lo speed is unknown, defaulting to 1000 [ 244.092378][T11371] lo speed is unknown, defaulting to 1000 [ 244.110786][T11371] lo speed is unknown, defaulting to 1000 [ 244.141222][T11389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1349'. [ 244.158743][T11389] block nbd0: not configured, cannot reconfigure [ 244.229270][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 244.257744][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 244.275671][T11399] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 244.282581][T11400] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 244.554752][T11415] netlink: 'syz.0.1355': attribute type 8 has an invalid length. [ 244.876741][T11437] tc_dump_action: action bad kind [ 244.957027][T11442] Bluetooth: MGMT ver 1.23 [ 245.367417][T11461] virt_wifi0 speed is unknown, defaulting to 1000 [ 245.376725][T11468] tipc: Invalid UDP bearer configuration [ 245.376776][T11468] tipc: Enabling of bearer rejected, failed to enable media [ 245.400102][T11461] lo speed is unknown, defaulting to 1000 [ 245.763268][T11488] .`: (slave bond_slave_0): Releasing backup interface [ 245.782369][T11488] .`: (slave bond_slave_1): Releasing backup interface [ 245.795012][T11488] team_slave_0: left allmulticast mode [ 245.801421][T11488] team_slave_0: left promiscuous mode [ 245.812719][T11488] team0: Port device team_slave_0 removed [ 245.820531][T11488] team_slave_1: left allmulticast mode [ 245.827574][T11488] team_slave_1: left promiscuous mode [ 245.836557][T11488] team0: Port device team_slave_1 removed [ 245.843308][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.851082][T11488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.860149][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.889134][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.906983][T11488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.932969][ T7110] lo speed is unknown, defaulting to 1000 [ 246.500379][T11526] netlink: 'syz.3.1386': attribute type 8 has an invalid length. [ 246.567308][T11528] ipt_REJECT: ECHOREPLY no longer supported. [ 246.816293][T11539] x_tables: unsorted entry at hook 3 [ 247.339602][T11573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.491295][T11581] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.500369][T11581] lo speed is unknown, defaulting to 1000 [ 247.623087][T11588] IPVS: set_ctl: invalid protocol: 42 10.1.1.0:20004 [ 247.843929][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.947129][T11608] tipc: New replicast peer: 255.255.255.255 [ 247.991023][T11608] tipc: Enabled bearer , priority 10 [ 248.268999][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.471143][T11625] netlink: 'syz.0.1412': attribute type 1 has an invalid length. [ 248.567895][T11625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.580276][T11625] __nla_validate_parse: 15 callbacks suppressed [ 248.580290][T11625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1412'. [ 248.732568][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 248.741460][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'. [ 249.469522][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'. [ 249.478679][T11662] netlink: 'syz.1.1423': attribute type 7 has an invalid length. [ 249.493118][T11662] netlink: 'syz.1.1423': attribute type 8 has an invalid length. [ 249.500859][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 249.547931][T11662] erspan0: entered promiscuous mode [ 249.554693][T11662] gretap0: entered promiscuous mode [ 249.562233][T11662] erspan0: left promiscuous mode [ 249.570065][T11662] gretap0: left promiscuous mode [ 249.940396][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'. [ 250.379998][T11689] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 250.432191][T11689] bond3: entered promiscuous mode [ 250.463881][T11689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.505790][T11691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.512830][T11691] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 250.522823][T11691] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 250.563546][T11691] bond3: (slave vti0): making interface the new active one [ 250.570784][T11691] vti0: entered promiscuous mode [ 250.577231][T11691] bond3: (slave vti0): Enslaving as an active interface with an up link [ 250.953134][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1436'. [ 251.051286][T11708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1436'. [ 251.052329][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1435'. [ 251.524947][ T5629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 251.726745][T11719] bridge0: left promiscuous mode [ 251.772812][ T5796] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.788035][ T5796] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.917928][ T5796] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 53503 - 0 [ 251.935662][T11723] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 251.937060][T11722] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 251.965767][T11738] FAULT_INJECTION: forcing a failure. [ 251.965767][T11738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.987039][T11738] CPU: 1 UID: 0 PID: 11738 Comm: syz.3.1442 Not tainted syzkaller #0 PREEMPT(full) [ 251.987062][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.987072][T11738] Call Trace: [ 251.987079][T11738] [ 251.987086][T11738] dump_stack_lvl+0xe8/0x150 [ 251.987111][T11738] should_fail_ex+0x40c/0x560 [ 251.987143][T11738] _copy_from_user+0x2d/0xb0 [ 251.987164][T11738] kstrtouint_from_user+0xd6/0x180 [ 251.987193][T11738] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 251.987236][T11738] proc_fail_nth_write+0x8e/0x210 [ 251.987258][T11738] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 251.987288][T11738] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 251.987308][T11738] vfs_write+0x296/0xba0 [ 251.987340][T11738] ? __pfx_vfs_write+0x10/0x10 [ 251.987365][T11738] ? __fget_files+0x2a/0x420 [ 251.987390][T11738] ? __fget_files+0x3a2/0x420 [ 251.987410][T11738] ? __fget_files+0x2a/0x420 [ 251.987439][T11738] ksys_write+0x150/0x270 [ 251.987464][T11738] ? __pfx_ksys_write+0x10/0x10 [ 251.987504][T11738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.987524][T11738] do_syscall_64+0x174/0x580 [ 251.987541][T11738] ? trace_irq_disable+0x3b/0x140 [ 251.987565][T11738] ? clear_bhb_loop+0x40/0x90 [ 251.987587][T11738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.987604][T11738] RIP: 0033:0x7f7c03b5d68e [ 251.987621][T11738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.987636][T11738] RSP: 002b:00007f7c04b32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.987654][T11738] RAX: ffffffffffffffda RBX: 00007f7c04b336c0 RCX: 00007f7c03b5d68e [ 251.987666][T11738] RDX: 0000000000000001 RSI: 00007f7c04b330a0 RDI: 0000000000000004 [ 251.987677][T11738] RBP: 00007f7c04b33090 R08: 0000000000000000 R09: 0000000000000000 [ 251.987687][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.987696][T11738] R13: 00007f7c03e16038 R14: 00007f7c03e15fa0 R15: 00007ffd71875c18 [ 251.987727][T11738] [ 251.988670][ T7907] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.094075][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 252.181910][ T7907] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.244848][ T7907] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 53503 - 0 [ 252.295139][ T7907] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.313646][ T7907] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.336643][ T7907] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 53503 - 0 [ 252.358734][ T7907] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.393965][ T7907] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.424881][ T7907] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 53503 - 0 [ 253.020193][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.067554][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.095984][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.123273][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.440612][T11808] syzkaller0: entered promiscuous mode [ 253.446129][T11808] syzkaller0: entered allmulticast mode [ 253.631364][T11816] ip6tnl0: Caught tx_queue_len zero misconfig [ 253.896031][T11839] sit2: entered promiscuous mode [ 254.173857][T11853] netlink: 'syz.1.1472': attribute type 26 has an invalid length. [ 255.520492][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.318884][T11859] syzkaller0: entered promiscuous mode [ 256.327928][T11859] syzkaller0: entered allmulticast mode [ 256.584718][T11884] xt_l2tp: invalid flags combination: 0 [ 256.597508][T11879] __nla_validate_parse: 9 callbacks suppressed [ 256.597526][T11879] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1480'. [ 256.663261][T11879] netlink: 'syz.1.1480': attribute type 2 has an invalid length. [ 256.878939][T11889] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 256.972321][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1482'. [ 257.069793][T11905] IPv6: Can't replace route, no match found [ 257.086263][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1482'. [ 257.129289][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1482'. [ 258.072438][T11926] nbd: must specify at least one socket [ 258.098851][T11920] tipc: Enabled bearer , priority 0 [ 258.106394][T11920] syzkaller0: entered promiscuous mode [ 258.112006][T11920] syzkaller0: entered allmulticast mode [ 258.251143][T11923] tipc: Resetting bearer [ 258.790819][T11919] tipc: Resetting bearer [ 258.891535][T11919] tipc: Disabling bearer [ 258.903084][T11956] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 259.049215][T11960] bond7 (unregistering): Released all slaves [ 259.389410][T11970] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1505'. [ 259.438804][T11970] bridge0: port 3(team0) entered disabled state [ 259.450531][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.458811][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.477584][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'. [ 259.717924][T11988] tipc: Enabled bearer , priority 0 [ 259.741151][T11988] syzkaller0: entered promiscuous mode [ 259.760205][T11988] syzkaller0: entered allmulticast mode [ 259.839153][T11988] tipc: Resetting bearer [ 259.892930][T11994] bond7 (unregistering): Released all slaves [ 259.978621][T12000] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 260.128783][T12005] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 260.234056][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 260.241174][T11926] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 260.248054][T11926] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 260.324584][T12010] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 260.532056][T11987] tipc: Resetting bearer [ 260.550982][T11987] tipc: Disabling bearer [ 261.015820][T11926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.021765][T11926] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 261.036639][T11926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.042558][T11926] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 261.057102][T11926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.063016][T11926] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 261.410013][T12019] bridge2: entered promiscuous mode [ 261.439271][T12019] bridge2: entered allmulticast mode [ 261.515720][T12019] team0: Port device bridge2 added [ 261.521308][T12029] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 261.545032][T12029] netlink: 'syz.0.1525': attribute type 4 has an invalid length. [ 261.558488][T12030] veth0: entered promiscuous mode [ 261.568684][T12029] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1525'. [ 261.684862][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'. [ 261.763901][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1528'. [ 261.818577][T12038] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 261.933223][T12027] veth0: left promiscuous mode [ 262.128038][T12050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.211276][T12046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.230353][T12062] set match dimension is over the limit! [ 262.251940][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1535'. [ 262.293406][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1535'. [ 262.422909][T12046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.433271][T12046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.446909][T12046] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 262.520872][T12049] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 262.690777][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.697968][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.737363][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.740238][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1538'. [ 262.744568][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.818588][T12078] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1539'. [ 263.506999][T12089] netlink: 'syz.1.1544': attribute type 10 has an invalid length. [ 263.535722][T12089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1544'. [ 263.579060][T12089] team0: Port device geneve1 added [ 263.635808][T12092] x_tables: duplicate underflow at hook 1 [ 263.815661][T12097] 8021q: adding VLAN 0 to HW filter on device .` [ 263.863696][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.872969][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.881940][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.890730][ T7110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.946206][T12097] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 264.056971][T12101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.397209][T12125] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 264.432790][T12125] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 264.480627][T12125] sctp: [Deprecated]: syz.4.1553 (pid 12125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.480627][T12125] Use struct sctp_sack_info instead [ 265.079191][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 265.494904][T12172] tap0: tun_chr_ioctl cmd 1074025677 [ 265.500417][T12172] tap0: linktype set to 787 [ 265.558561][T12176] net_ratelimit: 2 callbacks suppressed [ 265.558579][T12176] IPVS: sh: FWM 3 0x00000003 - no destination available [ 265.625793][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.659955][T12178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.694891][T12177] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 265.719810][T12183] sctp: [Deprecated]: syz.3.1570 (pid 12183) Use of int in max_burst socket option. [ 265.719810][T12183] Use struct sctp_assoc_value instead [ 265.773782][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.853188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.947140][ T7110] lo speed is unknown, defaulting to 1000 [ 266.104221][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'. [ 266.248261][T12204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1578'. [ 266.257236][T12204] openvswitch: netlink: Flow key attr not present in new flow. [ 266.552920][T12221] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 266.663883][T12223] Unsupported ieee802154 address type: 0 [ 266.778245][T12214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.851059][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.057057][ T30] audit: type=1800 audit(1781703956.266:8): pid=12232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1586" name="cgroup.events" dev="tmpfs" ino=1605 res=0 errno=0 [ 267.484540][T12270] __nla_validate_parse: 3 callbacks suppressed [ 267.484556][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 267.588794][ T6968] lo speed is unknown, defaulting to 1000 [ 267.598473][ T6968] syz2: Port: 1 Link DOWN [ 267.640063][T12273] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 267.726156][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 267.826243][T12273] hsr_slave_1 (unregistering): left promiscuous mode [ 267.949977][T12287] erspan2: entered allmulticast mode [ 268.065391][T12293] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1601'. [ 268.113016][T12298] xt_hashlimit: max too large, truncated to 1048576 [ 268.145236][T12298] xt_hashlimit: overflow, try lower: 2/0 [ 268.184547][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.192605][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.245635][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1602'. [ 268.254660][T12297] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1602'. [ 268.831708][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'. [ 268.929043][T12333] ipvlan3: entered allmulticast mode [ 268.934379][T12333] dummy0: entered allmulticast mode [ 269.998123][T12370] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 270.079866][T12370] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.225918][T12370] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 270.264356][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1619'. [ 270.278674][T12374] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 270.306060][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 270.376830][T12377] netlink: 'syz.1.1619': attribute type 4 has an invalid length. [ 270.666514][T12394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'. [ 270.701409][T12397] net_ratelimit: 1045 callbacks suppressed [ 270.701425][T12397] openvswitch: netlink: Multiple metadata blocks provided [ 270.980142][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.988605][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.078516][T12413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1632'. [ 271.176983][T12412] vxcan3: entered allmulticast mode [ 271.454222][T12425] dummy0: entered promiscuous mode [ 271.477677][T12425] dummy0: left promiscuous mode [ 271.533444][T12415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.548685][T12422] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 271.565140][T12432] syzkaller0: renamed from batadv_slave_1 (while UP) [ 271.598396][T12433] bridge0: port 3(vlan1) entered blocking state [ 271.604800][T12433] bridge0: port 3(vlan1) entered disabled state [ 271.611184][T12433] vlan1: entered allmulticast mode [ 271.715281][T12433] geneve0: entered allmulticast mode [ 271.722506][T12433] vlan1: entered promiscuous mode [ 271.785503][T12433] geneve0: entered promiscuous mode [ 271.873942][T12436] virt_wifi0 speed is unknown, defaulting to 1000 [ 271.882097][T12436] lo speed is unknown, defaulting to 1000 [ 272.084797][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.190696][T12457] xt_hashlimit: max too large, truncated to 1048576 [ 272.209722][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.392636][T12463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.406730][T12459] netlink: 'syz.4.1646': attribute type 25 has an invalid length. [ 272.675856][T12475] netlink: 'syz.3.1649': attribute type 362 has an invalid length. [ 272.702709][T12473] bridge0: port 3(team0) entered blocking state [ 272.709092][T12473] bridge0: port 3(team0) entered forwarding state [ 272.715810][T12473] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.734007][T12473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.741464][T12473] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.748588][T12473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.952246][T12473] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.034600][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.097859][T12469] syzkaller1: entered promiscuous mode [ 273.107176][T12469] syzkaller1: entered allmulticast mode [ 273.237870][T12487] __nla_validate_parse: 6 callbacks suppressed [ 273.237892][T12487] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1652'. [ 273.333900][T12496] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 273.453083][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 273.520030][T12502] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 273.572751][T12504] batman_adv: batadv0: Adding interface: vlan4 [ 273.578935][T12504] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.620111][T12504] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 273.801062][T12509] bridge0: port 3(batadv0) entered blocking state [ 273.809259][T12509] bridge0: port 3(batadv0) entered disabled state [ 273.815861][T12509] batadv0: entered allmulticast mode [ 273.839463][T12509] batadv0: entered promiscuous mode [ 274.014621][T12518] block nbd0: Unsupported socket: should be TCP or UNIX. [ 274.383791][ T82] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 274.394588][ T82] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 274.758298][T12536] macvlan0: entered allmulticast mode [ 274.793641][T12536] veth1_vlan: entered allmulticast mode [ 275.204326][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1669'. [ 275.349857][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1670'. [ 275.388614][T12553] nbd: must specify at least one socket [ 275.431468][T12557] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1673'. [ 275.455754][T12556] IPVS: Error joining to the multicast group [ 275.495821][T12558] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1670'. [ 275.534873][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 275.913311][T12572] sit0: left promiscuous mode [ 275.979757][T12572] net_ratelimit: 11 callbacks suppressed [ 275.979777][T12572] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 276.074496][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.137946][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.260534][T12583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.796228][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.103674][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1682'. [ 277.312587][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'. [ 277.347564][T12619] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 277.422584][T12619] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.599239][T12619] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 277.619825][T12627] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 277.680074][T12619] netlink: 'syz.4.1682': attribute type 10 has an invalid length. [ 277.688021][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1682'. [ 277.711023][T12619] dummy0: entered promiscuous mode [ 277.730301][T12619] bond7: (slave dummy0): Releasing backup interface [ 277.775999][T12633] veth0: Caught tx_queue_len zero misconfig [ 277.895599][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.903780][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.049040][T12646] netlink: 'syz.4.1692': attribute type 2 has an invalid length. [ 278.275469][T12655] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 278.299591][T12661] openvswitch: netlink: Key 6 has unexpected len 113 expected 2 [ 278.326367][T12659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.360560][T12661] bond9: entered promiscuous mode [ 278.366019][T12661] 8021q: adding VLAN 0 to HW filter on device bond9 [ 279.433027][T12711] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 279.523062][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 279.598083][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 280.038143][T12739] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1716'. [ 280.262065][T12754] netlink: 'syz.1.1721': attribute type 1 has an invalid length. [ 280.382926][T12758] tipc: Started in network mode [ 280.387830][T12758] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 280.442892][T12758] tipc: Enabled bearer , priority 0 [ 280.455875][T12758] syzkaller0: entered promiscuous mode [ 280.461367][T12758] syzkaller0: entered allmulticast mode [ 280.496476][T12758] tipc: Resetting bearer [ 280.656544][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 280.691914][T12773] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1728'. [ 280.722383][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 280.733210][T12775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1729'. [ 280.777105][T12773] bond7: entered promiscuous mode [ 280.782174][T12773] bond7: entered allmulticast mode [ 280.795676][T12775] sctp: [Deprecated]: syz.2.1729 (pid 12775) Use of int in max_burst socket option. [ 280.795676][T12775] Use struct sctp_assoc_value instead [ 280.811810][T12781] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 280.895963][T12781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.928287][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 280.950068][T12786] vlan3: entered allmulticast mode [ 280.955217][T12786] bond4: entered allmulticast mode [ 280.977420][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 281.064191][T12777] bond4: (slave geneve3): making interface the new active one [ 281.089287][T12777] geneve3: entered allmulticast mode [ 281.099917][T12777] net_ratelimit: 1034 callbacks suppressed [ 281.099935][T12777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.126333][T12777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.135069][T12777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.152542][T12777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.160949][T12777] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 281.192814][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.210403][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.235033][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.340842][T12795] syzkaller0: entered promiscuous mode [ 281.346351][T12795] syzkaller0: entered allmulticast mode [ 281.440852][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 281.737025][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.914176][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.154118][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.393657][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.475723][ T7110] tipc: Node number set to 9808554 [ 284.088927][T12864] xt_hashlimit: size too large, truncated to 1048576 [ 284.534846][T12885] __nla_validate_parse: 4 callbacks suppressed [ 284.534865][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 284.818973][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 284.988791][T12882] bond2: left allmulticast mode [ 284.993676][T12882] ip6gretap1: left allmulticast mode [ 284.998972][T12882] bond2: left promiscuous mode [ 285.003723][T12882] ip6gretap1: left promiscuous mode [ 285.161511][T12885] bond8: option broadcast_neighbor: invalid value (30) [ 285.171620][T12885] bond8 (unregistering): Released all slaves [ 285.199308][T12872] batadv0: entered promiscuous mode [ 285.243077][ T146] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.272800][ T146] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.286517][ T146] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.439113][ T146] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.564809][T12913] syzkaller0: left promiscuous mode [ 285.585267][T12913] syzkaller0: left allmulticast mode [ 285.675773][T12916] netlink: 10204 bytes leftover after parsing attributes in process `syz.4.1763'. [ 285.719019][T12916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.757004][T12916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.792283][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'. [ 285.804291][T12916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.829623][T12916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.989992][T12935] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 285.999079][T12935] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1772'. [ 286.009359][T12935] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1772'. [ 286.018460][T12935] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1772'. [ 286.032953][T12935] syzkaller1: entered promiscuous mode [ 286.038491][T12935] syzkaller1: entered allmulticast mode [ 286.410310][T12945] syzkaller1: entered promiscuous mode [ 286.417277][T12945] syzkaller1: entered allmulticast mode [ 286.560747][ T57] net_ratelimit: 24 callbacks suppressed [ 286.561760][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.582535][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.622434][ T7110] virt_wifi0 speed is unknown, defaulting to 1000 [ 286.821229][ T7112] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 287.036686][T12967] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1780'. [ 287.205594][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.229127][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.283558][T12978] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 287.294736][T12978] bridge0: port 4(netdevsim1) entered blocking state [ 287.301615][T12978] bridge0: port 4(netdevsim1) entered disabled state [ 287.308445][T12978] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 287.317316][T12978] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 287.359698][ T82] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 287.433156][T12983] xt_hashlimit: size too large, truncated to 1048576 [ 287.462710][T12986] tipc: Enabling of bearer rejected, already enabled [ 287.532718][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 287.588857][T12980] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 287.653798][T12992] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 287.706627][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.799412][ T7112] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 287.852231][T12992] netlink: 'syz.1.1793': attribute type 7 has an invalid length. [ 287.872485][T12996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1794'. [ 287.914046][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.019077][T12992] netlink: 'syz.1.1793': attribute type 7 has an invalid length. [ 288.169854][T13007] team1: entered promiscuous mode [ 288.175245][T13007] team1: entered allmulticast mode [ 288.180630][T13007] 8021q: adding VLAN 0 to HW filter on device team1 [ 288.266756][ T7110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.357140][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.385020][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.399501][ T146] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.410626][ T146] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.570540][T13018] only policy match revision 0 supported [ 288.570560][T13018] unable to load match [ 288.687108][ T7110] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.710262][T13025] virt_wifi0 speed is unknown, defaulting to 1000 [ 288.724799][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.747462][T13025] lo speed is unknown, defaulting to 1000 [ 289.299265][T13051] netlink: 'syz.0.1809': attribute type 2 has an invalid length. [ 289.800222][T13071] xt_hashlimit: size too large, truncated to 1048576 [ 289.811833][T13069] syzkaller0: entered promiscuous mode [ 289.817569][T13069] syzkaller0: entered allmulticast mode [ 289.961878][T13075] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 289.969672][T13075] __nla_validate_parse: 7 callbacks suppressed [ 289.969687][T13075] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1817'. [ 289.984847][T13075] NCSI netlink: No device for ifindex 0 [ 290.385505][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 290.394422][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 291.717858][ T57] net_ratelimit: 1038 callbacks suppressed [ 291.717892][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.004295][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.039803][T13094] tipc: Enabling of bearer rejected, failed to enable media [ 292.226186][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.273697][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.357708][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 292.388910][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 292.553638][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 292.707745][T13127] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 292.760465][T13128] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 292.772086][T13128] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1831'. [ 292.782633][T13128] netlink: 'syz.3.1831': attribute type 9 has an invalid length. [ 292.791278][T13128] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1831'. [ 292.801666][T13128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1831'. [ 292.835068][ T6968] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.905938][T13141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.937118][ T6968] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 293.042084][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.128608][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 293.207899][T13161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1838'. [ 293.415620][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.440381][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.443787][T13176] netlink: 'syz.0.1846': attribute type 1 has an invalid length. [ 293.481635][T13176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.499134][T13177] bond8: (slave geneve3): making interface the new active one [ 293.507611][T13177] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 293.517915][T13176] netlink: 'syz.0.1846': attribute type 8 has an invalid length. [ 293.526055][T13176] sch_fq: defrate 0 ignored. [ 293.658817][T13184] netlink: 'syz.0.1847': attribute type 10 has an invalid length. [ 293.896072][T13198] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 293.922076][ T6963] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 293.993132][T13196] tipc: Resetting bearer [ 294.061541][T13204] xt_hashlimit: invalid rate [ 294.075215][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.155455][ T7109] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.275083][ T7109] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.658584][T13237] syzkaller1: entered promiscuous mode [ 294.664096][T13237] syzkaller1: entered allmulticast mode [ 295.143236][T13259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.162494][T13259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.174967][T13259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.188452][T13259] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.316629][T13266] x_tables: duplicate underflow at hook 3 [ 295.342417][T13266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.607441][ T6968] bond_slave_0: entered promiscuous mode [ 295.614484][ T6968] bond_slave_1: entered promiscuous mode [ 295.882645][T13286] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 295.906631][T13286] __nla_validate_parse: 6 callbacks suppressed [ 295.906654][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 295.948550][T13291] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 295.956379][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 295.965476][T13291] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 295.973404][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 295.990070][T13291] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 295.995609][T13286] hsr0: entered promiscuous mode [ 295.998036][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 296.023188][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 296.032768][T13291] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 296.040585][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 296.065932][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1881'. [ 296.074882][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1881'. [ 296.083881][T13293] syzkaller1: entered promiscuous mode [ 296.104725][T13293] syzkaller1: entered allmulticast mode [ 296.123209][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 296.180552][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 296.424705][T13310] tipc: Enabling of bearer rejected, failed to enable media [ 296.509432][T13313] block nbd0: not configured, cannot reconfigure [ 297.061615][ T13] net_ratelimit: 19 callbacks suppressed [ 297.061632][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.075590][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.354078][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.383713][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.493405][T13368] sctp: [Deprecated]: syz.4.1905 (pid 13368) Use of int in max_burst socket option. [ 297.493405][T13368] Use struct sctp_assoc_value instead [ 297.541652][T13357] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.741415][T13357] bond6 (unregistering): Released all slaves [ 297.925625][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.303018][T13395] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.311529][T13395] lo speed is unknown, defaulting to 1000 [ 298.394908][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.472486][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.584809][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.593133][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.805309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.108798][T13424] netlink: 'syz.1.1922': attribute type 11 has an invalid length. [ 299.116908][T13423] netlink: 'syz.1.1922': attribute type 11 has an invalid length. [ 299.628413][T13438] block nbd4: not configured, cannot reconfigure [ 299.657593][T13438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.707146][T13446] validate_nla: 28 callbacks suppressed [ 299.707164][T13446] netlink: 'syz.0.1930': attribute type 1 has an invalid length. [ 299.721685][T13446] netlink: 'syz.0.1930': attribute type 32 has an invalid length. [ 300.164524][T13477] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 301.049392][ T7936] udevd[7936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.063355][T13525] tipc: Enabling of bearer rejected, already enabled [ 301.127692][ T7936] udevd[7936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.131797][T13531] __nla_validate_parse: 41 callbacks suppressed [ 301.131813][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 301.198371][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1954'. [ 301.261066][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 301.309415][T13544] netlink: 'syz.0.1953': attribute type 10 has an invalid length. [ 301.334686][T13544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1953'. [ 301.376875][T13551] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1953'. [ 301.421131][T13544] dummy0: entered promiscuous mode [ 301.432148][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 301.469923][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 301.594881][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 301.947694][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'. [ 302.198901][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 302.210771][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 302.246063][T13603] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.254900][T13603] lo speed is unknown, defaulting to 1000 [ 302.335640][ T5796] net_ratelimit: 28 callbacks suppressed [ 302.335656][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.349623][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.662976][T13620] netlink: 'syz.1.1978': attribute type 1 has an invalid length. [ 302.707709][T13617] vlan3: entered promiscuous mode [ 302.865653][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.873802][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.017453][T13626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.087718][ T7112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.151505][T13641] ip6tnl1: entered allmulticast mode [ 303.320115][T13654] netlink: 'syz.2.1986': attribute type 8 has an invalid length. [ 303.441236][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.535081][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.545242][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.643586][ T6968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.881686][T13682] nbd: must specify a device to reconfigure [ 303.887777][T13681] nbd: must specify a device to reconfigure [ 303.973756][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.076983][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.423819][T13705] syzkaller1: entered promiscuous mode [ 304.460932][T13705] syzkaller1: entered allmulticast mode [ 304.543146][T13709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.634173][T13725] syzkaller1: entered promiscuous mode [ 304.645538][T13725] syzkaller1: entered allmulticast mode [ 304.736346][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.756968][T13729] syzkaller1: entered promiscuous mode [ 304.762454][T13729] syzkaller1: entered allmulticast mode [ 305.012421][T13732] syzkaller0: entered promiscuous mode [ 305.021016][T13732] syzkaller0: entered allmulticast mode [ 305.053958][T13731] tipc: Enabled bearer , priority 0 [ 305.179984][T13731] tipc: Resetting bearer [ 305.224968][T13731] tipc: Disabling bearer [ 305.360630][T13747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.694919][T13763] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 305.709631][T13763] batadv1: entered promiscuous mode [ 305.725556][T13763] batadv1: entered allmulticast mode [ 305.735694][T13763] team0: Port device batadv1 added [ 306.036123][T13781] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 306.050027][T13781] geneve1: entered promiscuous mode [ 306.064107][T13781] .`: (slave geneve1): Enslaving as an active interface with an up link [ 306.073028][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.102738][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.115063][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.125289][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.183647][ T5796] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 306.192879][ T5796] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 306.594523][ T7106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.612299][T13810] __nla_validate_parse: 5 callbacks suppressed [ 306.612313][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 306.661927][T13810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 306.821766][T13825] team_slave_1: Caught tx_queue_len zero misconfig [ 307.511972][T13860] bridge_slave_0: left allmulticast mode [ 307.517657][T13860] bridge_slave_0: left promiscuous mode [ 307.523483][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.588293][ T7112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.608823][T13866] netlink: 'syz.0.2042': attribute type 10 has an invalid length. [ 307.616656][T13866] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2042'. [ 307.629619][T13867] xt_HMARK: proto mask must be zero with L3 mode [ 307.640988][T13860] bridge_slave_1: left allmulticast mode [ 307.680440][T13860] bridge_slave_1: left promiscuous mode [ 307.686328][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.695753][T13860] vlan2: left promiscuous mode [ 307.700673][T13860] geneve0: left promiscuous mode [ 307.797559][T13860] bond0: (slave bond_slave_0): Releasing backup interface [ 307.857665][T13860] bond0: (slave bond_slave_1): Releasing backup interface [ 307.893709][ T146] net_ratelimit: 218 callbacks suppressed [ 307.893732][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.939526][T13860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.987840][ T6963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.996912][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.333632][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.423898][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.432895][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.931124][T13909] hsr0: left promiscuous mode [ 308.958287][T13909] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 309.168980][T13910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.207070][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.417261][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.501527][T13932] nbd: socks must be embedded in a SOCK_ITEM attr [ 309.776436][T13938] sctp: [Deprecated]: syz.4.2057 (pid 13938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.776436][T13938] Use struct sctp_sack_info instead [ 309.949671][T13940] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 310.103474][T13940] bond7: entered promiscuous mode [ 310.108884][T13940] 8021q: adding VLAN 0 to HW filter on device bond7 [ 310.136263][T13940] bond7: (slave bridge6): making interface the new active one [ 310.147413][T13940] bridge6: entered promiscuous mode [ 310.153828][T13940] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 310.232425][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 310.358594][T13962] syzkaller0: entered promiscuous mode [ 310.364102][T13962] syzkaller0: entered allmulticast mode [ 310.387416][T13966] netlink: 'syz.3.2065': attribute type 13 has an invalid length. [ 310.450083][T13968] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2062'. [ 310.685348][T13969] bond10: option tlb_dynamic_lb: invalid value (5) [ 310.705084][T13969] bond10 (unregistering): Released all slaves [ 310.761156][T13971] erspan0: entered promiscuous mode [ 310.770260][T13971] hsr1: entered allmulticast mode [ 310.775522][T13971] erspan0: entered allmulticast mode [ 310.940817][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 310.984240][T13982] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2071'. [ 311.008890][T13983] netlink: 'syz.4.2069': attribute type 11 has an invalid length. [ 311.182531][T13989] 8021q: adding VLAN 0 to HW filter on device .` [ 311.263049][T13989] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.301209][T14006] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 311.305851][T13989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.362389][T13989] batman_adv: batadv0: Interface activated: vlan4 [ 311.372622][T13989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.521326][ T7106] lo speed is unknown, defaulting to 1000 [ 311.549312][ T7106] syz2: Port: 1 Link ACTIVE [ 311.805141][ T7109] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 311.984042][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2079'. [ 312.237605][ T7109] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 312.276934][T14022] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 312.520841][ T82] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.567737][ T82] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.666626][T14047] netlink: 'syz.2.2084': attribute type 27 has an invalid length. [ 312.676041][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 312.774522][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 312.775988][T14055] xt_hashlimit: size too large, truncated to 1048576 [ 312.919375][T14063] net_ratelimit: 16 callbacks suppressed [ 312.919394][T14063] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 312.980708][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.061362][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2094'. [ 313.147260][T14065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.380487][T14074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.424019][T14074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.527463][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.544901][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.552959][T14084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2098'. [ 313.582408][T14082] dvmrp0: entered allmulticast mode [ 313.729084][T14074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.752748][T14074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.753221][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.095558][T14074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.119213][T14074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.194144][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.239061][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 314.455751][T14122] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 314.472854][ T7106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.484396][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.528553][T14122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.605319][T14074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.632679][T14074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.734366][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.750592][T14130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2113'. [ 314.788498][T14135] netlink: 'syz.4.2115': attribute type 1 has an invalid length. [ 314.789241][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 314.863396][T14133] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 314.871885][T14133] netlink: 'syz.0.2113': attribute type 3 has an invalid length. [ 314.888666][T14133] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2113'. [ 314.955756][ T82] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.963998][ T82] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.993785][ T82] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.029246][ T82] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.070345][T14142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2116'. [ 315.086529][ T82] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.095919][ T82] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.133594][ T5796] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.141783][ T5796] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.193971][ T7106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.283743][T14149] netlink: 'syz.0.2120': attribute type 13 has an invalid length. [ 315.303212][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.310369][T14149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.342981][T14152] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 316.967367][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.105624][ T7112] net_ratelimit: 17 callbacks suppressed [ 318.105662][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.154110][T14211] syzkaller0: left promiscuous mode [ 318.163573][T14211] syzkaller0: left allmulticast mode [ 318.233716][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 318.323008][T14219] __nla_validate_parse: 4 callbacks suppressed [ 318.323028][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'. [ 318.373940][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.405393][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.658682][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.693801][ T7106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.707542][T14232] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 318.742435][T14237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.813130][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.824694][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.853911][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.889761][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.045067][T14253] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2150'. [ 319.054478][T14238] macsec1: entered promiscuous mode [ 319.061656][T14253] netlink: 'syz.0.2150': attribute type 1 has an invalid length. [ 319.224763][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'. [ 319.293748][ T7109] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.356674][T14262] syzkaller1: entered promiscuous mode [ 319.370364][T14262] syzkaller1: entered allmulticast mode [ 319.395518][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'. [ 319.486591][T14264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2155'. [ 319.505975][T14267] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 319.534143][T14267] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2156'. [ 319.573610][T14267] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2156'. [ 319.600594][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 319.641664][T14270] syzkaller0: entered promiscuous mode [ 319.648234][T14270] syzkaller0: entered allmulticast mode [ 319.924865][T14275] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 322.542206][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 322.679177][T14300] virt_wifi0 speed is unknown, defaulting to 1000 [ 322.691512][T14300] lo speed is unknown, defaulting to 1000 [ 322.699602][T14309] netlink: 'syz.3.2168': attribute type 2 has an invalid length. [ 322.709349][T14305] virt_wifi0 speed is unknown, defaulting to 1000 [ 322.764789][T14305] lo speed is unknown, defaulting to 1000 [ 323.001757][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2169'. [ 323.020321][T14315] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 323.047335][T14315] gretap2: entered allmulticast mode [ 323.495722][ T7909] net_ratelimit: 657 callbacks suppressed [ 323.495739][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.540502][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.607155][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.615964][ T7110] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 323.620625][T14345] netlink: 'syz.2.2180': attribute type 4 has an invalid length. [ 323.636219][T14345] __nla_validate_parse: 4 callbacks suppressed [ 323.636233][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'. [ 323.652175][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'. [ 323.682300][T14346] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 323.785386][T14349] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.804678][T14349] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.957082][T14346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.052621][T14357] netlink: 'syz.4.2185': attribute type 89 has an invalid length. [ 324.108279][T14365] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2187'. [ 324.118096][ T7110] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 324.128646][T14364] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2187'. [ 324.287141][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.483308][T14382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.491620][T14382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.499832][T14382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.508411][T14382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.684785][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 324.705181][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.712687][T14389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.720495][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.728024][T14389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.744795][T14389] batman_adv: batadv0: Interface deactivated: gretap1 [ 324.753784][T14389] batman_adv: batadv0: Removing interface: gretap1 [ 324.871944][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'. [ 324.878989][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 325.039738][T14399] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2199'. [ 325.562332][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2207'. [ 325.699517][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 325.921738][T14439] ipvlan3: entered allmulticast mode [ 325.927070][T14439] dummy0: entered allmulticast mode [ 325.940057][T14442] netlink: 'syz.4.2213': attribute type 2 has an invalid length. [ 326.038892][T14445] xt_cgroup: invalid path, errno=-2 [ 326.230494][T14449] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 326.286463][T14449] 8021q: adding VLAN 0 to HW filter on device bond9 [ 326.302348][T14452] bond9: (slave gretap0): Enslaving as a backup interface with an up link [ 326.383695][ T7106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.463859][ T7106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.527615][T14478] tipc: New replicast peer: 255.255.255.255 [ 326.536425][T14478] tipc: Enabled bearer , priority 10 [ 326.554554][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.742156][T14480] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 326.869543][T14490] netlink: 'syz.3.2226': attribute type 4 has an invalid length. [ 326.886198][ T7106] lo speed is unknown, defaulting to 1000 [ 326.895874][ T7106] syz2: Port: 1 Link DOWN [ 327.056331][T14497] bond10: Unable to set down delay as MII monitoring is disabled [ 327.075701][T14497] bond10 (unregistering): Released all slaves [ 327.136932][T14496] : renamed from bond_slave_0 (while UP) [ 327.529381][ T6963] lo speed is unknown, defaulting to 1000 [ 327.547739][ T6968] tipc: Node number set to 2886997162 [ 327.557099][T14524] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode [ 327.573735][T14524] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode [ 327.583489][ T6963] syz2: Port: 1 Link ACTIVE [ 328.647876][ T82] net_ratelimit: 1043 callbacks suppressed [ 328.647893][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.699103][T14575] __nla_validate_parse: 16 callbacks suppressed [ 328.699121][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 328.714333][ T7110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.732472][T14575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2250'. [ 328.849617][T14575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'. [ 328.978574][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.004855][T14588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.014695][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.092693][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.200984][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.289037][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.306015][T14599] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 329.326036][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.935774][T14617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.995681][T14617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.262190][ T30] audit: type=1804 audit(1781704019.476:9): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2264" name="/newroot/456/cgroup.controllers" dev="tmpfs" ino=2367 res=1 errno=0 [ 330.329827][ T30] audit: type=1800 audit(1781704019.476:10): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2264" name="cgroup.controllers" dev="tmpfs" ino=2367 res=0 errno=0 [ 330.509103][T14617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.577129][T14617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.671676][T14667] netlink: 'syz.3.2271': attribute type 11 has an invalid length. [ 330.755808][T14654] virt_wifi0 speed is unknown, defaulting to 1000 [ 330.763952][T14654] lo speed is unknown, defaulting to 1000 [ 331.058265][T14617] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 331.084015][T14617] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 331.104314][T14617] bridge0: port 4(netdevsim1) entered disabled state [ 331.119125][T14617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.134479][T14617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.194416][ T7109] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.246711][T14677] netlink: 'syz.1.2274': attribute type 4 has an invalid length. [ 331.254000][ T7109] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.372040][ T146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.396179][ T146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.431856][ T146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.458193][ T146] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.490829][T14693] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2277'. [ 331.543627][T14694] syzkaller1: entered promiscuous mode [ 331.553364][T14694] syzkaller1: entered allmulticast mode [ 331.990448][T14694] syzkaller1: left promiscuous mode [ 331.995692][T14694] syzkaller1: left allmulticast mode [ 332.622319][ T146] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.636332][ T146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.763547][ T146] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.800041][ T146] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.025358][ T146] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.036355][T14724] xt_hashlimit: size too large, truncated to 1048576 [ 333.053606][ T146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.077164][ T146] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.112259][ T146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.228865][T14726] C: renamed from veth1_to_team (while UP) [ 333.239013][T14726] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2287'. [ 333.336376][T14732] bond0: (slave bridge0): Releasing backup interface [ 333.389436][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.396809][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.415085][T14732] bridge_slave_0: left allmulticast mode [ 333.420746][T14732] bridge_slave_0: left promiscuous mode [ 333.426488][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.495147][T14732] bridge_slave_1: left allmulticast mode [ 333.500824][T14732] bridge_slave_1: left promiscuous mode [ 333.506568][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.527774][T14732] bond0: (slave bond_slave_0): Releasing backup interface [ 333.536362][T14732] bond_slave_0: left promiscuous mode [ 333.563253][T14732] bond0: (slave bond_slave_1): Releasing backup interface [ 333.573527][T14732] bond_slave_1: left promiscuous mode [ 333.666902][T14732] team0: Port device team_slave_0 removed [ 333.678971][T14732] team0: Port device team_slave_1 removed [ 333.686917][T14732] net_ratelimit: 1044 callbacks suppressed [ 333.686932][T14732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.851295][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.014775][T14748] netlink: 'syz.1.2294': attribute type 11 has an invalid length. [ 334.106023][T14749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2292'. [ 334.271054][T14755] virt_wifi0 speed is unknown, defaulting to 1000 [ 334.298403][T14755] lo speed is unknown, defaulting to 1000 [ 334.360018][T14761] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2298'. [ 334.404208][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.414401][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.606653][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.887896][T14784] netlink: 'syz.3.2303': attribute type 5 has an invalid length. [ 334.945718][T14787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.964814][T14792] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2305'. [ 335.104241][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2306'. [ 335.151610][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2306'. [ 335.169269][T14798] bridge7: entered promiscuous mode [ 335.175044][T14798] bridge7: entered allmulticast mode [ 335.259709][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.276070][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.368122][ T7112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.405912][T14805] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.416972][T14806] lo: Caught tx_queue_len zero misconfig [ 335.627544][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 335.659405][T14802] 8021q: adding VLAN 0 to HW filter on device bond10 [ 335.676216][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2310'. [ 335.701527][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.745946][ T30] audit: type=1800 audit(1781704024.966:11): pid=14821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2316" name="memory.events" dev="tmpfs" ino=2422 res=0 errno=0 [ 335.843918][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.852913][T14831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2317'. [ 335.886164][T14833] netlink: 'syz.4.2318': attribute type 9 has an invalid length. [ 335.908229][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 336.142260][ T6963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 336.421728][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 336.482534][T14864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.511724][T14866] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 336.545854][T14866] bond8 (unregistering): Released all slaves [ 336.582077][T14864] tipc: Invalid UDP bearer configuration [ 336.582123][T14864] tipc: Enabling of bearer rejected, failed to enable media [ 336.602774][T14879] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 336.606294][T14877] x_tables: duplicate underflow at hook 2 [ 336.621758][T14875] vlan3: entered promiscuous mode [ 336.630499][T14875] erspan0: entered promiscuous mode [ 336.857446][T14890] unsupported nlmsg_type 40 [ 336.928599][T14891] netlink: 'syz.4.2335': attribute type 1 has an invalid length. [ 336.988543][T14891] bond9: option mode: invalid value (17) [ 336.993777][T14899] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 337.038572][T14891] bond9 (unregistering): Released all slaves [ 337.138582][T14897] bond8: entered promiscuous mode [ 337.244955][T14899] 8021q: adding VLAN 0 to HW filter on device bond10 [ 337.313590][T14913] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 337.329832][T14916] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode [ 337.349459][T14899] netlink: 'syz.2.2336': attribute type 18 has an invalid length. [ 337.365421][T14899] netlink: 'syz.2.2336': attribute type 18 has an invalid length. [ 337.381674][T14919] netlink: 'syz.4.2340': attribute type 1 has an invalid length. [ 338.570827][T14993] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 338.589085][T14994] batadv_slave_0: entered promiscuous mode [ 338.713859][T14999] bond9: (slave gretap3): making interface the new active one [ 338.722499][T14999] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 338.810763][T14993] macvlan2: entered promiscuous mode [ 338.825589][T15013] net_ratelimit: 43 callbacks suppressed [ 338.825604][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.852961][T14993] macvlan2: entered allmulticast mode [ 338.855809][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.860337][T14993] bond9: entered promiscuous mode [ 338.866738][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.872021][T14993] gretap3: entered promiscuous mode [ 338.891303][T15016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.899290][T14993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.907382][T14993] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 338.907814][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.923399][T14993] bond9: left promiscuous mode [ 338.934754][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.936182][T14993] gretap3: left promiscuous mode [ 338.944604][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.957659][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.966027][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.974502][T15013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.988913][T14999] macvlan2: entered promiscuous mode [ 339.007348][T14999] macvlan2: entered allmulticast mode [ 339.013429][T14999] bond9: entered promiscuous mode [ 339.018466][T14999] gretap3: entered promiscuous mode [ 339.024416][T14999] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 339.031983][T14999] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 339.048009][T14999] bond9: left promiscuous mode [ 339.052781][T14999] gretap3: left promiscuous mode [ 339.264567][T14982] batadv_slave_0: left promiscuous mode [ 339.301655][T15019] sctp: [Deprecated]: syz.0.2364 (pid 15019) Use of int in maxseg socket option. [ 339.301655][T15019] Use struct sctp_assoc_value instead [ 339.395218][T15025] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 339.413698][T15025] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 339.526846][T15031] veth0: entered promiscuous mode [ 339.546185][T15025] tipc: Enabled bearer , priority 0 [ 339.555843][T15026] veth0: left promiscuous mode [ 339.721789][T15040] __nla_validate_parse: 10 callbacks suppressed [ 339.721808][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 339.760383][T15043] bridge0: port 1(batadv0) entered blocking state [ 339.768040][T15043] bridge0: port 1(batadv0) entered disabled state [ 339.774960][T15043] batadv0: entered allmulticast mode [ 339.782936][T15043] batadv0: entered promiscuous mode [ 339.790295][T15043] vlan2: entered promiscuous mode [ 339.801919][T15043] geneve0: entered promiscuous mode [ 339.853361][T15040] bond11: entered promiscuous mode [ 339.859364][T15040] 8021q: adding VLAN 0 to HW filter on device bond11 [ 339.884124][T15045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 339.892314][T15045] bond11: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 339.904734][T15045] bond11: (slave ip6gre3): Error -95 calling set_mac_address [ 339.965546][T15043] IPVS: Scheduler module ip_vs_ not found [ 339.982764][T15054] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 340.001657][T15054] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 340.252227][T15075] FAULT_INJECTION: forcing a failure. [ 340.252227][T15075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.263579][ T7909] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 340.273585][T15075] CPU: 1 UID: 0 PID: 15075 Comm: syz.4.2381 Not tainted syzkaller #0 PREEMPT(full) [ 340.273607][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.273634][T15075] Call Trace: [ 340.273641][T15075] [ 340.273649][T15075] dump_stack_lvl+0xe8/0x150 [ 340.273674][T15075] should_fail_ex+0x40c/0x560 [ 340.273704][T15075] _copy_from_user+0x2d/0xb0 [ 340.273724][T15075] ___sys_recvmsg+0x173/0x590 [ 340.273755][T15075] ? __pfx____sys_recvmsg+0x10/0x10 [ 340.273778][T15075] ? __fget_files+0x2a/0x420 [ 340.273815][T15075] ? __fget_files+0x3a2/0x420 [ 340.273845][T15075] do_recvmmsg+0x329/0x810 [ 340.273871][T15075] ? __pfx_do_recvmmsg+0x10/0x10 [ 340.273900][T15075] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.273935][T15075] __x64_sys_recvmmsg+0x198/0x250 [ 340.273956][T15075] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 340.273984][T15075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.274002][T15075] do_syscall_64+0x174/0x580 [ 340.274018][T15075] ? trace_irq_disable+0x3b/0x140 [ 340.274040][T15075] ? clear_bhb_loop+0x40/0x90 [ 340.274062][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.274079][T15075] RIP: 0033:0x7fd32dd9ce59 [ 340.274095][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.274110][T15075] RSP: 002b:00007fd32ebc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 340.274128][T15075] RAX: ffffffffffffffda RBX: 00007fd32e015fa0 RCX: 00007fd32dd9ce59 [ 340.274141][T15075] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 340.274152][T15075] RBP: 00007fd32ebc4090 R08: 0000000000000000 R09: 0000000000000000 [ 340.274163][T15075] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 340.274173][T15075] R13: 00007fd32e016038 R14: 00007fd32e015fa0 R15: 00007ffc4781b4b8 [ 340.274201][T15075] [ 340.293684][T15075] veth1_vlan: left promiscuous mode [ 340.303312][ T7909] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 340.306786][T15075] veth0_vlan: left promiscuous mode [ 340.572630][T15075] veth0_vlan: entered promiscuous mode [ 340.589311][T15075] veth1_vlan: entered promiscuous mode [ 340.612816][T15075] veth1_macvtap: left promiscuous mode [ 340.627473][T15075] veth0_macvtap: left promiscuous mode [ 340.635940][T15075] veth0_macvtap: entered promiscuous mode [ 340.642952][T15075] veth1_macvtap: entered promiscuous mode [ 340.654501][T15075] bridge0: port 3(vlan1) entered blocking state [ 340.660870][T15075] bridge0: port 3(vlan1) entered forwarding state [ 340.691198][T15075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.699667][T15075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.707878][T15075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.729614][T15075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.739773][T15075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.768643][ T6963] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.795358][ T6963] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 340.804722][ T7909] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 340.818924][ T7909] bond7: active interface up! [ 340.854197][ T6968] tipc: Node number set to 409371955 [ 340.862990][ T1154] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.097124][T15102] x_tables: duplicate underflow at hook 1 [ 341.406126][T15117] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2391'. [ 341.454454][T15119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2392'. [ 341.489529][T15117] bond0: (slave vlan6): Enslaving as a backup interface with an up link [ 341.497994][ T6968] dummy0: entered promiscuous mode [ 341.505421][T15119] netlink: 'syz.4.2392': attribute type 12 has an invalid length. [ 341.513637][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2391'. [ 341.601267][T15117] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.611341][T15117] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.669844][ T6968] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 341.765138][T15122] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 342.002746][T15150] : entered promiscuous mode [ 342.133081][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 342.387881][ T5629] block nbd0: Receive control failed (result -32) [ 342.572720][T15177] netlink: 'syz.3.2401': attribute type 1 has an invalid length. [ 342.632785][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 343.000321][T15195] veth1_vlan: left promiscuous mode [ 343.083585][T15195] veth0_vlan: left promiscuous mode [ 343.159859][T15195] veth0_vlan: entered promiscuous mode [ 343.272932][T15195] veth1_vlan: entered promiscuous mode [ 343.313218][T15195] veth1_macvtap: left promiscuous mode [ 343.375726][T15195] veth1_macvtap: entered promiscuous mode [ 343.431507][T15195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.471216][T15195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.587829][T15195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.665714][T15195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.693870][T15195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.716413][T15195] bond2: entered allmulticast mode [ 343.737127][T15195] ip6gretap1: entered allmulticast mode [ 343.753964][T15195] bond2: entered promiscuous mode [ 343.760532][T15195] ip6gretap1: entered promiscuous mode [ 343.769839][T15195] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 343.785546][T15195] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 343.844724][ T6963] net_ratelimit: 2066 callbacks suppressed [ 343.844742][ T6963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.929302][ T5289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.033726][ T7106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.048422][T15229] veth1_vlan: left promiscuous mode [ 344.059341][T15232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2410'. [ 344.072215][T15229] veth0_vlan: left promiscuous mode [ 344.087395][T15229] veth0_vlan: entered promiscuous mode [ 344.098654][T15229] veth1_vlan: entered promiscuous mode [ 344.112403][T15229] veth1_macvtap: left promiscuous mode [ 344.132210][T15229] veth0_macvtap: left promiscuous mode [ 344.150486][T15229] veth1_macvtap: entered promiscuous mode [ 344.163761][T15229] bridge0: port 3(vlan2) entered blocking state [ 344.170208][T15229] bridge0: port 3(vlan2) entered forwarding state [ 344.178194][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.181332][T15229] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 344.209411][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.218331][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.229087][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.238481][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.260692][T15243] netlink: 'syz.4.2412': attribute type 1 has an invalid length. [ 344.327678][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2413'. [ 344.327711][T15246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2413'. [ 344.351152][T15229] ip6gre1: left promiscuous mode [ 344.362517][T15229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.371949][T15229] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 344.394467][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.457078][ T1154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.473327][T15248] dummy0: left promiscuous mode [ 344.479230][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.512095][T15247] ip6gre1: entered promiscuous mode [ 344.518012][T15247] ip6gre1: entered allmulticast mode [ 344.538239][ T5796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.546787][ T5796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.557279][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.567476][ T7110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.582033][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.591083][ T7110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.611026][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.636004][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.649639][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.803732][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.967302][ T7110] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 345.010098][T15263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2417'. [ 345.025934][T15263] sctp: [Deprecated]: syz.2.2417 (pid 15263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.025934][T15263] Use struct sctp_sack_info instead [ 345.044862][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2417'. [ 345.316020][ T7909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.515687][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.674753][ T57] wlan1: Trigger new scan to find an IBSS to join [ 345.853880][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.954975][T15215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.484644][T15318] tipc: Enabled bearer , priority 0 [ 346.520158][T15312] sit0: entered promiscuous mode [ 346.567295][T15312] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 346.588516][T15312] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2430'. [ 346.610957][T15316] syzkaller0: entered promiscuous mode [ 346.619590][T15319] siw: device registration error -23 [ 346.632954][T15316] syzkaller0: entered allmulticast mode [ 347.286035][T15316] tipc: Resetting bearer [ 347.455876][T15316] tipc: Disabling bearer [ 347.515506][T15319] virt_wifi0 speed is unknown, defaulting to 1000 [ 347.543302][T15345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2434'. [ 347.552908][T15319] lo speed is unknown, defaulting to 1000 [ 347.845201][T15358] netlink: 'syz.1.2437': attribute type 1 has an invalid length. [ 347.868787][T15358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2437'. [ 347.923653][T15372] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2441'. [ 347.932843][T15372] nbd: must specify a size in bytes for the device [ 348.041167][T15379] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2443'. [ 348.076174][T15379] tunl0: Caught tx_queue_len zero misconfig [ 348.102866][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'. [ 348.473617][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 348.473634][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.526818][T15413] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode [ 348.578431][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'. [ 348.634207][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'. [ 348.698272][T15413] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.705834][T15413] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.713976][ T7909] wlan1: Trigger new scan to find an IBSS to join [ 348.804253][ T1154] tipc: Resetting bearer [ 348.922252][T15430] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 349.025711][T15432] syzkaller0: entered promiscuous mode [ 349.050793][ T7112] IPVS: starting estimator thread 0... [ 349.069233][T15432] syzkaller0: entered allmulticast mode [ 349.209163][T15432] bond9: Removing last arp target with arp_interval on [ 349.216276][T15436] IPVS: using max 32 ests per chain, 76800 per kthread [ 349.679247][ T57] wlan1: Trigger new scan to find an IBSS to join [ 349.933439][T15490] net_ratelimit: 13 callbacks suppressed [ 349.933457][T15490] openvswitch: netlink: Key type 769 is out of range max 32 [ 349.986253][T15490] xt_TCPMSS: Only works on TCP SYN packets [ 350.066210][T15501] __nla_validate_parse: 77 callbacks suppressed [ 350.066227][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 350.200341][T15490] batadv0: left allmulticast mode [ 350.228383][T15490] batadv0: left promiscuous mode [ 350.249729][T15490] bridge0: port 3(batadv0) entered disabled state [ 350.290258][T15490] bridge_slave_1: left promiscuous mode [ 350.296023][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.312783][T15490] bridge_slave_0: left allmulticast mode [ 350.319867][T15490] bridge_slave_0: left promiscuous mode [ 350.326578][T15490] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.789013][T15546] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2485'. [ 350.804175][T15548] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2486'. [ 350.835615][T15546] bond12: entered promiscuous mode [ 350.840803][T15546] bond12: entered allmulticast mode [ 350.846366][T15546] 8021q: adding VLAN 0 to HW filter on device bond12 [ 350.873686][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 351.002400][T15553] netlink: 'syz.0.2485': attribute type 1 has an invalid length. [ 351.035327][T15553] netlink: 'syz.0.2485': attribute type 1 has an invalid length. [ 351.059211][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 351.171352][T15565] netlink: 'syz.4.2491': attribute type 30 has an invalid length. [ 351.377715][T15572] sctp: [Deprecated]: syz.4.2494 (pid 15572) Use of int in max_burst socket option. [ 351.377715][T15572] Use struct sctp_assoc_value instead [ 351.524122][T15578] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 351.532653][T15578] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 351.973235][T15592] SET target dimension over the limit! [ 352.028726][T15596] netlink: 'syz.2.2503': attribute type 1 has an invalid length. [ 352.039494][T15595] FAULT_INJECTION: forcing a failure. [ 352.039494][T15595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.105694][T15595] CPU: 1 UID: 0 PID: 15595 Comm: syz.3.2502 Not tainted syzkaller #0 PREEMPT(full) [ 352.105721][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.105731][T15595] Call Trace: [ 352.105738][T15595] [ 352.105746][T15595] dump_stack_lvl+0xe8/0x150 [ 352.105771][T15595] should_fail_ex+0x40c/0x560 [ 352.105803][T15595] _copy_from_user+0x2d/0xb0 [ 352.105824][T15595] ___sys_recvmsg+0x173/0x590 [ 352.105849][T15595] ? __pfx____sys_recvmsg+0x10/0x10 [ 352.105874][T15595] ? __fget_files+0x2a/0x420 [ 352.105927][T15595] do_recvmmsg+0x329/0x810 [ 352.105955][T15595] ? __pfx_do_recvmmsg+0x10/0x10 [ 352.105988][T15595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.106025][T15595] __x64_sys_recvmmsg+0x198/0x250 [ 352.106048][T15595] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 352.106077][T15595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.106096][T15595] do_syscall_64+0x174/0x580 [ 352.106115][T15595] ? clear_bhb_loop+0x40/0x90 [ 352.106137][T15595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.106155][T15595] RIP: 0033:0x7f7c03b9ce59 [ 352.106171][T15595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.106186][T15595] RSP: 002b:00007f7c04b33028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 352.106205][T15595] RAX: ffffffffffffffda RBX: 00007f7c03e15fa0 RCX: 00007f7c03b9ce59 [ 352.106218][T15595] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 352.106229][T15595] RBP: 00007f7c04b33090 R08: 0000000000000000 R09: 0000000000000000 [ 352.106239][T15595] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 352.106249][T15595] R13: 00007f7c03e16038 R14: 00007f7c03e15fa0 R15: 00007ffd71875c18 [ 352.106278][T15595] [ 352.316960][T15598] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 352.392945][T15598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.406669][T15602] netlink: 'syz.0.2504': attribute type 1 has an invalid length. [ 352.714808][ T5796] wlan1: Trigger new scan to find an IBSS to join [ 352.799330][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.823273][T15615] bond14: Unable to set up delay as MII monitoring is disabled [ 352.834346][T15620] FAULT_INJECTION: forcing a failure. [ 352.834346][T15620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.848768][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.849140][T15620] CPU: 0 UID: 0 PID: 15620 Comm: syz.3.2511 Not tainted syzkaller #0 PREEMPT(full) [ 352.849161][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.849171][T15620] Call Trace: [ 352.849178][T15620] [ 352.849184][T15620] dump_stack_lvl+0xe8/0x150 [ 352.849208][T15620] should_fail_ex+0x40c/0x560 [ 352.849239][T15620] _copy_from_user+0x2d/0xb0 [ 352.849259][T15620] ___sys_sendmsg+0x1c6/0x360 [ 352.849277][T15620] ? __lock_acquire+0x683/0x2cd0 [ 352.849299][T15620] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.849349][T15620] ? __fget_files+0x2a/0x420 [ 352.849368][T15620] ? __fget_files+0x3a2/0x420 [ 352.849397][T15620] __x64_sys_sendmsg+0x1bd/0x2a0 [ 352.849418][T15620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.849443][T15620] ? __pfx_ksys_write+0x10/0x10 [ 352.849474][T15620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.849494][T15620] do_syscall_64+0x174/0x580 [ 352.849510][T15620] ? trace_irq_disable+0x3b/0x140 [ 352.849544][T15620] ? clear_bhb_loop+0x40/0x90 [ 352.849564][T15620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.849581][T15620] RIP: 0033:0x7f7c03b9ce59 [ 352.849597][T15620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.849611][T15620] RSP: 002b:00007f7c04b33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.849630][T15620] RAX: ffffffffffffffda RBX: 00007f7c03e15fa0 RCX: 00007f7c03b9ce59 [ 352.849642][T15620] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 0000000000000004 [ 352.849653][T15620] RBP: 00007f7c04b33090 R08: 0000000000000000 R09: 0000000000000000 [ 352.849663][T15620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.849673][T15620] R13: 00007f7c03e16038 R14: 00007f7c03e15fa0 R15: 00007ffd71875c18 [ 352.849701][T15620] [ 353.068054][T15615] bond14 (unregistering): Released all slaves [ 353.151477][T15629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'. [ 353.274105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.284075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.292518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.300986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.318987][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 353.378471][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 353.599648][T15654] syzkaller0: entered promiscuous mode [ 353.605340][T15654] syzkaller0: entered allmulticast mode [ 353.673159][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 353.689164][T15658] ip6tnl0: Caught tx_queue_len zero misconfig [ 353.816316][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 353.825719][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2524'. [ 354.104172][ T36] wlan1: Creating new IBSS network, BSSID c6:a7:82:02:69:09 [ 354.367101][T15702] Unsupported ieee802154 address type: 0 [ 354.781720][T15728] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 354.820244][T15728] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 354.875788][T15728] veth19: entered promiscuous mode [ 354.882868][T15728] bond12: (slave veth19): Enslaving as a backup interface with a down link [ 355.001758][T15745] netlink: 'syz.2.2548': attribute type 1 has an invalid length. [ 355.018932][T15745] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 355.118172][T15750] __nla_validate_parse: 4 callbacks suppressed [ 355.118191][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2550'. [ 355.536298][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 355.548877][T15753] ip6tnl3: entered allmulticast mode [ 355.555511][ T1154] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 355.624232][ T7110] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.703921][ T7110] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.722038][ T7110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.997909][T15776] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 356.044343][T15776] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2555'. [ 356.065301][T15778] block nbd1: NBD_DISCONNECT [ 356.232880][T15795] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2561'. [ 356.318542][T15791] bond9: entered allmulticast mode [ 356.356262][T15791] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.642444][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.673908][ T7110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.748454][T15825] netlink: 'syz.3.2563': attribute type 16 has an invalid length. [ 356.756291][T15825] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2563'. [ 357.058127][T15791] bond10: entered allmulticast mode [ 357.063890][T15791] 8021q: adding VLAN 0 to HW filter on device bond10 [ 357.193879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.202299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.301050][T15829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 357.383021][ T1154] bond9: (slave gretap0): link status up again after 0 ms [ 357.394895][T15852] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2566'. [ 357.485181][ T146] bond9: (slave gretap0): link status up again after 0 ms [ 357.505273][ T146] bond9: (slave gretap0): failed to get link speed/duplex [ 357.547666][T15860] x_tables: duplicate underflow at hook 1 [ 357.675437][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 357.733642][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2570'. [ 357.747688][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 357.760417][T15869] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 357.890088][T15869] 8021q: adding VLAN 0 to HW filter on device bond14 [ 357.948691][T15883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2573'. [ 357.962243][T15883] netlink: 'syz.3.2573': attribute type 32 has an invalid length. [ 357.982659][T15883] bond0: option coupled_control: mode dependency failed, not supported in mode active-backup(1) [ 358.003505][ T146] bond9: (slave gretap0): failed to get link speed/duplex [ 358.147432][ T82] bond9: (slave gretap0): failed to get link speed/duplex [ 358.186277][T15895] 0: renamed from macvlan1 (while UP) [ 358.273597][ T146] bond9: (slave gretap0): failed to get link speed/duplex [ 358.336427][T15909] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2579'. [ 358.550383][T15918] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 358.585950][T15918] bond11: entered promiscuous mode [ 358.591794][T15918] 8021q: adding VLAN 0 to HW filter on device bond11 [ 358.615625][T15918] bond11: (slave bridge0): making interface the new active one [ 358.623316][T15918] bridge0: entered promiscuous mode [ 358.630537][T15918] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 358.650333][T15918] bond11: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 358.663742][T15918] bond11: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 359.200018][T15944] netlink: 'syz.4.2591': attribute type 15 has an invalid length. [ 359.268076][T15949] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode [ 359.273999][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 359.288923][T15949] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode [ 359.382052][T15951] tipc: Enabling of bearer rejected, already enabled [ 359.825136][T15970] tipc: Enabling of bearer rejected, already enabled [ 359.835476][T15970] netlink: 'syz.4.2601': attribute type 41 has an invalid length. [ 360.983365][T16003] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 360.991211][T16003] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 360.998940][T16003] __nla_validate_parse: 3 callbacks suppressed [ 360.998996][T16003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2606'. [ 361.040679][T16003] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2606'. [ 361.067788][T16007] bond15: option updelay: invalid value (18446744073709518847) [ 361.075374][T16007] bond15: option updelay: allowed values 0 - 2147483647 [ 361.083607][T16007] bond15 (unregistering): Released all slaves [ 361.678855][T16034] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2611'. [ 361.715083][T16035] bond6: (slave dummy0): Removing an active aggregator [ 361.762272][T16035] bond6: (slave dummy0): Releasing backup interface [ 362.087949][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'. [ 362.213552][ T1154] net_ratelimit: 27 callbacks suppressed [ 362.213570][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 362.272748][T16079] : renamed from sit0 [ 362.356118][ T146] bond9: (slave gretap0): failed to get link speed/duplex [ 362.497465][T16085] Unsupported ieee802154 address type: 0 [ 362.573389][ T36] bond9: (slave gretap0): failed to get link speed/duplex [ 362.703495][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 362.884507][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 362.995189][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 363.133935][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 363.264615][ T36] bond9: (slave gretap0): failed to get link speed/duplex [ 363.403818][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 363.523588][ T36] bond9: (slave gretap0): failed to get link speed/duplex [ 363.862675][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 363.891672][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 364.458983][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 364.795256][T16154] netlink: 'syz.4.2646': attribute type 1 has an invalid length. [ 364.948450][T16154] bond10: entered promiscuous mode [ 364.988786][T16154] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.012017][T16168] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode [ 365.060449][T16168] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode [ 365.069504][T16167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2647'. [ 365.083760][T16167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2647'. [ 365.141192][T16167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2647'. [ 365.380697][ T7109] lo speed is unknown, defaulting to 1000 [ 365.386915][ T7109] syz2: Port: 1 Link DOWN [ 365.455901][T16181] bond11: option primary_reselect: invalid value (6) [ 365.493151][T16181] bond11 (unregistering): Released all slaves [ 365.570513][T16192] netlink: 'syz.0.2653': attribute type 9 has an invalid length. [ 366.354866][T16208] virt_wifi0 speed is unknown, defaulting to 1000 [ 366.385834][T16208] lo speed is unknown, defaulting to 1000 [ 366.742038][T16232] x_tables: duplicate underflow at hook 2 [ 366.873695][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 366.953064][T16242] __nla_validate_parse: 26 callbacks suppressed [ 366.953080][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 367.179285][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 367.188698][T16242] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 367.266180][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 367.318592][T16245] netlink: 'syz.2.2669': attribute type 4 has an invalid length. [ 367.319454][T16253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.328768][T16245] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2669'. [ 367.342041][T16253] bond13: (slave bond0): making interface the new active one [ 367.349539][T16253] bond13: (slave bond0): Enslaving as an active interface with an up link [ 367.361013][ T82] net_ratelimit: 25 callbacks suppressed [ 367.361029][ T82] bond9: (slave gretap0): failed to get link speed/duplex [ 367.380444][T16245] .`: renamed from bond0 (while UP) [ 367.534783][ T57] bond9: (slave gretap0): failed to get link speed/duplex [ 367.572043][T16263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2674'. [ 367.607508][ T30] audit: type=1800 audit(1781704056.806:12): pid=16253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2669" name="memory.events" dev="tmpfs" ino=2796 res=0 errno=0 [ 367.663557][ T57] bond9: (slave gretap0): failed to get link speed/duplex [ 367.740739][T16290] FAULT_INJECTION: forcing a failure. [ 367.740739][T16290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.769149][T16290] CPU: 1 UID: 0 PID: 16290 Comm: syz.4.2678 Not tainted syzkaller #0 PREEMPT(full) [ 367.769172][T16290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.769186][T16290] Call Trace: [ 367.769193][T16290] [ 367.769204][T16290] dump_stack_lvl+0xe8/0x150 [ 367.769227][T16290] should_fail_ex+0x40c/0x560 [ 367.769259][T16290] _copy_from_user+0x2d/0xb0 [ 367.769281][T16290] ___sys_recvmsg+0x173/0x590 [ 367.769305][T16290] ? __pfx____sys_recvmsg+0x10/0x10 [ 367.769329][T16290] ? __fget_files+0x2a/0x420 [ 367.769377][T16290] do_recvmmsg+0x329/0x810 [ 367.769404][T16290] ? __pfx_do_recvmmsg+0x10/0x10 [ 367.769433][T16290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.769467][T16290] __x64_sys_recvmmsg+0x198/0x250 [ 367.769488][T16290] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 367.769514][T16290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.769532][T16290] do_syscall_64+0x174/0x580 [ 367.769549][T16290] ? clear_bhb_loop+0x40/0x90 [ 367.769570][T16290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.769586][T16290] RIP: 0033:0x7fd32dd9ce59 [ 367.769603][T16290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.769616][T16290] RSP: 002b:00007fd32ebc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 367.769634][T16290] RAX: ffffffffffffffda RBX: 00007fd32e015fa0 RCX: 00007fd32dd9ce59 [ 367.769654][T16290] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 367.769665][T16290] RBP: 00007fd32ebc4090 R08: 0000000000000000 R09: 0000000000000000 [ 367.769675][T16290] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 367.769685][T16290] R13: 00007fd32e016038 R14: 00007fd32e015fa0 R15: 00007ffc4781b4b8 [ 367.769713][T16290] [ 367.783901][ T7909] bond9: (slave gretap0): failed to get link speed/duplex [ 367.987464][T16291] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 368.003262][T16299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.175019][T16290] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 368.187128][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.194035][ T7110] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 368.207721][ T146] bond9: (slave gretap0): failed to get link speed/duplex [ 368.214962][T16301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2681'. [ 368.226772][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 368.436075][ T7909] bond9: (slave gretap0): failed to get link speed/duplex [ 368.635948][ T1154] bond9: (slave gretap0): failed to get link speed/duplex [ 368.713942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.823257][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'. [ 368.873784][ T7109] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 368.940798][T16344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 368.941776][T16345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 368.985997][T16342] virt_wifi0 speed is unknown, defaulting to 1000 [ 369.009851][T16342] lo speed is unknown, defaulting to 1000 [ 369.663945][T16367] netlink: 'syz.0.2701': attribute type 4 has an invalid length. [ 369.688964][T16364] can: request_module (can-proto-0) failed. [ 370.351402][T16397] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 370.450246][ T7109] lo speed is unknown, defaulting to 1000 [ 370.463762][ T7109] syz2: Port: 1 Link ACTIVE [ 370.673195][T16421] ieee802154 phy0 wpan0: encryption failed: -22 [ 370.815648][T16430] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 371.163837][T16440] xt_hashlimit: size too large, truncated to 1048576 [ 371.949631][T16472] ip6t_rpfilter: unknown options [ 371.994160][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.159495][T16478] __nla_validate_parse: 6 callbacks suppressed [ 372.159512][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2734'. [ 372.182082][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2733'. [ 372.194085][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2733'. [ 372.310374][T16487] netlink: 'syz.4.2735': attribute type 3 has an invalid length. [ 372.318914][T16487] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 372.327369][T16487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2735'. [ 372.394799][ T146] net_ratelimit: 26 callbacks suppressed [ 372.394816][ T146] bond9: (slave gretap0): failed to get link speed/duplex [ 372.588108][ T5796] bond9: (slave gretap0): failed to get link speed/duplex [ 372.630203][T16503] tipc: Enabling of bearer rejected, already enabled [ 372.686489][T16503] syzkaller0: entered promiscuous mode [ 372.732887][T16503] syzkaller0: entered allmulticast mode [ 372.738822][T16503] tipc: Resetting bearer [ 372.814654][T16512] FAULT_INJECTION: forcing a failure. [ 372.814654][T16512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.814905][ T5796] bond9: (slave gretap0): failed to get link speed/duplex [ 372.827697][T16512] CPU: 1 UID: 0 PID: 16512 Comm: syz.3.2742 Not tainted syzkaller #0 PREEMPT(full) [ 372.827718][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.827727][T16512] Call Trace: [ 372.827735][T16512] [ 372.827741][T16512] dump_stack_lvl+0xe8/0x150 [ 372.827766][T16512] should_fail_ex+0x40c/0x560 [ 372.827795][T16512] _copy_from_user+0x2d/0xb0 [ 372.827814][T16512] ___sys_recvmsg+0x173/0x590 [ 372.827838][T16512] ? __pfx____sys_recvmsg+0x10/0x10 [ 372.827861][T16512] ? __fget_files+0x2a/0x420 [ 372.827910][T16512] do_recvmmsg+0x329/0x810 [ 372.827937][T16512] ? __pfx_do_recvmmsg+0x10/0x10 [ 372.827967][T16512] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 372.828013][T16512] __x64_sys_recvmmsg+0x198/0x250 [ 372.828034][T16512] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 372.828062][T16512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.828081][T16512] do_syscall_64+0x174/0x580 [ 372.828096][T16512] ? trace_irq_disable+0x3b/0x140 [ 372.828119][T16512] ? clear_bhb_loop+0x40/0x90 [ 372.828141][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.828157][T16512] RIP: 0033:0x7f7c03b9ce59 [ 372.828174][T16512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.828188][T16512] RSP: 002b:00007f7c04b33028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 372.828206][T16512] RAX: ffffffffffffffda RBX: 00007f7c03e15fa0 RCX: 00007f7c03b9ce59 [ 372.828218][T16512] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 372.828230][T16512] RBP: 00007f7c04b33090 R08: 0000000000000000 R09: 0000000000000000 [ 372.828241][T16512] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 372.828251][T16512] R13: 00007f7c03e16038 R14: 00007f7c03e15fa0 R15: 00007ffd71875c18 [ 372.828280][T16512] [ 373.035778][T16512] [ 373.038121][T16512] ============================================ [ 373.044263][T16512] WARNING: possible recursive locking detected [ 373.050420][T16512] syzkaller #0 Not tainted [ 373.054829][T16512] -------------------------------------------- [ 373.060966][T16512] syz.3.2742/16512 is trying to acquire lock: [ 373.067021][T16512] ffff88807d13ce60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 373.078167][T16512] [ 373.078167][T16512] but task is already holding lock: [ 373.085521][T16512] ffff88807d13ce60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 373.095168][T16512] and the lock comparison function returns 0: [ 373.101207][T16512] [ 373.101207][T16512] other info that might help us debug this: [ 373.109244][T16512] Possible unsafe locking scenario: [ 373.109244][T16512] [ 373.116677][T16512] CPU0 [ 373.119939][T16512] ---- [ 373.123197][T16512] lock(&dev_instance_lock_key#3); [ 373.128380][T16512] lock(&dev_instance_lock_key#3); [ 373.133564][T16512] [ 373.133564][T16512] *** DEADLOCK *** [ 373.133564][T16512] [ 373.141686][T16512] May be due to missing lock nesting notation [ 373.141686][T16512] [ 373.149980][T16512] 2 locks held by syz.3.2742/16512: [ 373.155155][T16512] #0: ffffffff8fdbd640 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 373.164191][T16512] #1: ffff88807d13ce60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 373.174278][T16512] [ 373.174278][T16512] stack backtrace: [ 373.180164][T16512] CPU: 1 UID: 0 PID: 16512 Comm: syz.3.2742 Not tainted syzkaller #0 PREEMPT(full) [ 373.180182][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.180191][T16512] Call Trace: [ 373.180197][T16512] [ 373.180202][T16512] dump_stack_lvl+0xe8/0x150 [ 373.180220][T16512] print_deadlock_bug+0x279/0x290 [ 373.180244][T16512] __lock_acquire+0x24bf/0x2cd0 [ 373.180258][T16512] ? __lock_acquire+0x683/0x2cd0 [ 373.180271][T16512] ? rtnl_newlink+0x148e/0x1bd0 [ 373.180290][T16512] ? rtnetlink_rcv_msg+0x802/0xc00 [ 373.180308][T16512] ? netlink_rcv_skb+0x226/0x4a0 [ 373.180321][T16512] ? netlink_unicast+0x7bb/0x940 [ 373.180338][T16512] ? netlink_sendmsg+0x813/0xb40 [ 373.180351][T16512] ? ____sys_sendmsg+0x9b9/0xa20 [ 373.180363][T16512] ? ___sys_sendmsg+0x2a5/0x360 [ 373.180374][T16512] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.180386][T16512] ? do_syscall_64+0x174/0x580 [ 373.180398][T16512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.180414][T16512] ? __ethtool_get_link_ksettings+0x109/0x250 [ 373.180431][T16512] lock_acquire+0x106/0x350 [ 373.180442][T16512] ? __ethtool_get_link_ksettings+0x109/0x250 [ 373.180464][T16512] __mutex_lock+0x19d/0x1590 [ 373.180476][T16512] ? __ethtool_get_link_ksettings+0x109/0x250 [ 373.180493][T16512] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.180504][T16512] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 373.180523][T16512] ? __wake_up_common_lock+0x195/0x1f0 [ 373.180542][T16512] ? __ethtool_get_link_ksettings+0x109/0x250 [ 373.180560][T16512] ? __pfx___mutex_lock+0x10/0x10 [ 373.180575][T16512] ? igmp_group_added+0x238/0x910 [ 373.180589][T16512] ? igmpv3_del_delrec+0x204/0x710 [ 373.180603][T16512] __ethtool_get_link_ksettings+0x109/0x250 [ 373.180621][T16512] bond_netdev_event+0x643/0xf80 [ 373.180641][T16512] ? __pfx_bond_netdev_event+0x10/0x10 [ 373.180663][T16512] ? ipmr_device_event+0x1f6/0x220 [ 373.180682][T16512] notifier_call_chain+0x1a5/0x3d0 [ 373.180701][T16512] __dev_notify_flags+0x1aa/0x310 [ 373.180715][T16512] ? __pfx___dev_notify_flags+0x10/0x10 [ 373.180726][T16512] ? __dev_change_flags+0x5f1/0x820 [ 373.180741][T16512] ? __pfx___dev_change_flags+0x10/0x10 [ 373.180756][T16512] netif_change_flags+0xde/0x1b0 [ 373.180770][T16512] dev_change_flags+0x128/0x260 [ 373.180790][T16512] vlan_device_event+0x1b4e/0x1f00 [ 373.180811][T16512] ? packet_notifier+0xf1b/0xf70 [ 373.180825][T16512] ? br_device_event+0x282/0x9c0 [ 373.180837][T16512] ? __pfx_phonet_device_notify+0x10/0x10 [ 373.180857][T16512] ? __pfx_vlan_device_event+0x10/0x10 [ 373.180876][T16512] ? bcm_notifier+0xa9/0x890 [ 373.180887][T16512] ? raw_notifier+0x9d/0x7d0 [ 373.180905][T16512] ? cgw_notifier+0x314/0x380 [ 373.180918][T16512] notifier_call_chain+0x1a5/0x3d0 [ 373.180935][T16512] __dev_notify_flags+0x1aa/0x310 [ 373.180949][T16512] ? __pfx___dev_notify_flags+0x10/0x10 [ 373.180959][T16512] ? __dev_change_flags+0x5f1/0x820 [ 373.180973][T16512] ? __pfx___dev_change_flags+0x10/0x10 [ 373.180986][T16512] ? __local_bh_enable_ip+0xd0/0x130 [ 373.181000][T16512] netif_change_flags+0xde/0x1b0 [ 373.181013][T16512] do_setlink+0xdd6/0x4670 [ 373.181029][T16512] ? __lock_acquire+0x683/0x2cd0 [ 373.181042][T16512] ? __pfx_do_setlink+0x10/0x10 [ 373.181054][T16512] ? __lock_acquire+0x683/0x2cd0 [ 373.181067][T16512] ? irqentry_exit+0x218/0x8e0 [ 373.181079][T16512] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.181090][T16512] ? irqentry_exit+0x218/0x8e0 [ 373.181104][T16512] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.181126][T16512] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.181144][T16512] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.181156][T16512] ? __mutex_lock+0x10ab/0x1590 [ 373.181169][T16512] ? __mutex_lock+0x5c5/0x1590 [ 373.181183][T16512] ? rtnl_newlink+0x8a3/0x1bd0 [ 373.181201][T16512] ? __pfx___mutex_lock+0x10/0x10 [ 373.181217][T16512] ? ns_capable+0x89/0xe0 [ 373.181229][T16512] ? rtnl_link_get_net_capable+0xd3/0x310 [ 373.181248][T16512] rtnl_newlink+0x148e/0x1bd0 [ 373.181271][T16512] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.181289][T16512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.181313][T16512] ? kasan_quarantine_put+0xbb/0x1f0 [ 373.181330][T16512] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.181342][T16512] ? nlmon_xmit+0xb0/0x100 [ 373.181353][T16512] ? kmem_cache_free+0x182/0x650 [ 373.181375][T16512] ? __lock_acquire+0x683/0x2cd0 [ 373.181389][T16512] ? __dev_queue_xmit+0x29b/0x37f0 [ 373.181404][T16512] ? __local_bh_enable_ip+0xd0/0x130 [ 373.181416][T16512] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.181427][T16512] ? __dev_queue_xmit+0x29b/0x37f0 [ 373.181440][T16512] ? __local_bh_enable_ip+0xd0/0x130 [ 373.181452][T16512] ? __dev_queue_xmit+0x29b/0x37f0 [ 373.181468][T16512] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 373.181487][T16512] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.181509][T16512] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.181527][T16512] rtnetlink_rcv_msg+0x802/0xc00 [ 373.181548][T16512] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 373.181566][T16512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.181584][T16512] ? ref_tracker_free+0x689/0x830 [ 373.181598][T16512] ? __pfx_ref_tracker_free+0x10/0x10 [ 373.181614][T16512] netlink_rcv_skb+0x226/0x4a0 [ 373.181627][T16512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.181647][T16512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.181664][T16512] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.181677][T16512] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.181691][T16512] netlink_unicast+0x7bb/0x940 [ 373.181713][T16512] netlink_sendmsg+0x813/0xb40 [ 373.181730][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.181746][T16512] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.181764][T16512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.181780][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.181794][T16512] ____sys_sendmsg+0x9b9/0xa20 [ 373.181806][T16512] ? __might_fault+0xaf/0x130 [ 373.181824][T16512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.181840][T16512] ? import_iovec+0x73/0xa0 [ 373.181855][T16512] ___sys_sendmsg+0x2a5/0x360 [ 373.181867][T16512] ? __lock_acquire+0x683/0x2cd0 [ 373.181881][T16512] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.181896][T16512] ? futex_wake+0x4d7/0x5b0 [ 373.181921][T16512] ? __fget_files+0x2a/0x420 [ 373.181936][T16512] ? __fget_files+0x3a2/0x420 [ 373.181953][T16512] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.181967][T16512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.181983][T16512] ? rcu_is_watching+0x15/0xb0 [ 373.182000][T16512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.182013][T16512] do_syscall_64+0x174/0x580 [ 373.182025][T16512] ? trace_irq_disable+0x3b/0x140 [ 373.182043][T16512] ? clear_bhb_loop+0x40/0x90 [ 373.182057][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.182070][T16512] RIP: 0033:0x7f7c03b9ce59 [ 373.182083][T16512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.182095][T16512] RSP: 002b:00007f7c04b33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.182109][T16512] RAX: ffffffffffffffda RBX: 00007f7c03e15fa0 RCX: 00007f7c03b9ce59 [ 373.182119][T16512] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 373.182128][T16512] RBP: 00007f7c03c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 373.182136][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.182144][T16512] R13: 00007f7c03e16038 R14: 00007f7c03e15fa0 R15: 00007ffd71875c18 [ 373.182160][T16512] [ 373.965138][T16515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.404420][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.953606][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!