last executing test programs: 3.269794374s ago: executing program 3 (id=5466): r0 = socket$inet6_sctp(0xa, 0x3, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80032002) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="750a000000000000611168455351cea4a6d71408000000000000000000000000950000000000000011689f5054b545ffb21f8148ba75a558e04537009345b1daaf180bbdee9e52e62f6275975d55384f61959452457d380ffa8719cb80f09002dcfeda3996a05104a8a2cc5a61a6c810909e170e3696a84b6e27f8a09d895be3831c6b15c345c6188f77fded5074f63cf1f51ecc457576111a93d3043f9c751d8f15d61a0adfdf73505fb1e2708093420142e1429e89b8b6c6aca3cad0ed8876a4fe03cc46fbf7d05b4fed34a2bb"], &(0x7f0000000000)='GPL\x00'}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000000)={r11, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r11, 0x4}, 0x8) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r13, 0x0, 0x20000000002) 2.563184926s ago: executing program 2 (id=5473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x310) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x7, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 2.50688482s ago: executing program 4 (id=5475): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000380)={0x10000, {{0xa, 0x4e23, 0x0, @local, 0xf723}}, {{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}}, 0x108) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x96, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004000f"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x76, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7f, 0x2}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5b18}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0xb620332483925886}, 0x40000) 2.322506077s ago: executing program 2 (id=5478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400040072857365309800000000000000000000080005000200000005166a1bff39219f6a7c00530001000000"], 0x40}}, 0x0) 2.167244759s ago: executing program 3 (id=5480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x4000) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x4, 0xfcf8d278083eddec, 0xa0, 0x0, 0x11}, {0x5, 0x1000, 0x7fff, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d6, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x809, 0x10001, 0x2}}, 0xe8) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async, rerun: 32) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x18, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000140), &(0x7f0000000440)=r3}, 0x20) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x8, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x2, 0x4, 0xf, 0x80000000, [0x4006, 0x6]}}) (async) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.033569443s ago: executing program 2 (id=5482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6erspan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) clock_gettime(0x23eaa8d54bacd65c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r7, 0x209, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffe}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4000840) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 1.801419343s ago: executing program 3 (id=5484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b54300000000f87346bf24"], 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) 1.694467337s ago: executing program 2 (id=5485): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRESOCT=r8, @ANYBLOB="0503020060044e08000500", @ANYRES32=r7, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0xa8, 0x8081}], 0x1, 0x40800) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r9, 0x8b2c, &(0x7f0000000040)) close(r5) sendmsg$kcm(r5, &(0x7f0000001a80)={&(0x7f0000000200)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000600)="fd857d446d1c9b7116a448e0b48f4548c6276a722387c7908a0ca92ea6d5bbbee1894c6a26893911cb37faf326a423f17464feb894776f40a0f6eef27940f42202cf8c3bfe6150f4f97b39f542d292867804f88427a0a3d05bbf921e56bbc32ed083dfc5ace7adda89e58be12d608d68554dc8d022e5871b6290e1775db734be56c2b775350d953268bfa5aa3a78da7590e77e35d3a624f97febf8d64a3f69ed", 0xa0}, {&(0x7f00000006c0)="3b48b9521313683ebfe02468405d5e43ee48446499fa71655a9cfc9b497d585d2fc0fa6b2e4b5f45ff89a36037f527321bfbe560f930e07a2b6eb54c5cb8d51ca599f008bdaa027daa11e4560981d46bc3f85315e3027591be7486c811ececace359ac534a8e82801550450c26b1", 0x6e}, {&(0x7f0000000740)="b790c95d402fe2e19963ffc8fa45ab413b388eb810df0ecd6b9578b7bf8dbbcc8d5350854dd37eda599de6c6a435708abca03ddab4ed1bd1e6486178128f2339df5977c4dd86515661b233dd30e06f72771bd77c5b2899c0720bcfd2a9458022707d687ffc846721b272b5398066faef05be7ec2c76ac68799f920e593dba4822f786eb57583823f76b91a112b5a3ff21ae9d7403e27a017faa8419b633be643044f1eec169c", 0xa6}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="56274bf7c3e3de18f3282979f96076d642c497ce9ad22116648164052cc9b1bfa5b4e0b557c2b1701206287b75b3fa65e86a3a733a90588926577380eddb2e07693555f675d14f24ae6a4d98300b040b1a178cccad55c62d5d1193fde0a6920db5bc3b6c3c67dc82074bafa6b966624a9a0c51a4becfdd28894e876f08c412f7f137df1f248a87965585d6d7aa2f249dee233df019", 0x95}, {&(0x7f00000018c0)="c54d1e4de13c3aa214c7a2fd5f26392cd5f7dd0cf1021ae8953ee0ca43db9e20d840c86a7888d4ac6990c37424774d5ea6079e2cb0e737b5a6c014b1d0cae86272fb1c584cd0d22494618ae53feeaaa37e106fbdadcf3437b77e108fba2548e0ed1804b5c8d0e13be3c85b4da0d3a166837f84d7de2acba217e8b756182bd3c6420aa16989f641a80d204e19a35bac89d0", 0x91}], 0x6, &(0x7f0000001ac0)=ANY=[@ANYBLOB="7000000000000000060000000100000058d7d34c55212e9eb0286cd1c1f6c073489aa54840ffa334223a8bc67e6078ed92c73ae74d0003c8953a66a3349a12420d0d7b9e1bc911eb7b005a879adcfd587982a5fd364ab7ffe367042287516e6f2a22d26a5926e07823c43600000000007f5f800331e5bc3cffb86cb03f23812911f903b022a6c76fb64f2faea9a8dc4c8815db3813bd86bd9e07b13fc85ecaab0764474e2d45f1eded6d1ca12d87f736b17af4d746db5ea404c81a163777cda0089d60277b3b269151b5cb1c0f34c879928a24069f3fae410e"], 0x70}, 0x48041) accept4(r0, 0x0, 0x0, 0x800) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) 1.603047649s ago: executing program 3 (id=5486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r3 = accept$alg(r2, 0x0, 0x0) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1}, 0x3}], 0x1, 0x2100, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'pim6reg\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1.503392346s ago: executing program 2 (id=5488): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.430816779s ago: executing program 4 (id=5489): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x4000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000240)='{+!!1(\x00', 0x20000, &(0x7f0000000280)={@align=0x21, {0x6, 0xffff, 0x7f, 0x1}}, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=0xe8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, 0x0, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000060000000100000005000700000000000800090000000000000a0000000000060002000100000014001f00"/78], 0x5c}, 0x1, 0x620b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x4000) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000240)='{+!!1(\x00', 0x20000, &(0x7f0000000280)={@align=0x21, {0x6, 0xffff, 0x7f, 0x1}}, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=0xe8}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, 0x0, 0x40000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000060000000100000005000700000000000800090000000000000a0000000000060002000100000014001f00"/78], 0x5c}, 0x1, 0x620b}, 0x0) (async) 1.373317514s ago: executing program 2 (id=5490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x9, 0x47e, 0xffffffffffffff2b}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, r6, 0x0, 0x80, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x80000000, 0x8}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='.\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={0x1, 0xffffffffffffffff}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r10, 0x12504000) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x18, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffff80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x4, 0x3, 0x0, 0x1, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x4d}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x1, 0x2, 0x6, 0xe, 0xc, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0x5, 0x9, 0x6, 0x11, 0x8}]}, &(0x7f00000004c0)='GPL\x00', 0x54, 0x7c, &(0x7f0000000500)=""/124, 0x41100, 0x20, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000600)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xf, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001000)=[r7, r8, r9, r10, r11], &(0x7f0000001040)=[{0x3, 0x5, 0x2, 0x8}, {0x4, 0x5, 0xd, 0x6e1bac2b502e9823}], 0x10, 0x7fffffff}, 0x94) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x12, [0x1, 0xfffffffe, 0x3, 0x6]}]}}}}}}}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x0, 0x498, 0x1b0, 0x1b0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x0, 0xc, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0xb10}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r12, &(0x7f0000000000)="b2be7258f747857e72ead7d2322bf36ef1dc2ce575beb708a78c44ce60f0990932fce888bc084487dcc6dd3dda28eb419fc03d314d55856b7519c5a0d193283bd62b6eefebbba99fe962580653a4fdb3f1b2e098c6a4ebd54f04bcdc5a9c32833825fdc4813f1ca42644b8736b315bbecf747e80f4a2d16699a3971065c0ce04d6a3121d6720a88595fee0f617a5e6ff2a7ad3007738ff76ef263e55c4f5b2858f3d0e19316cfb921b7892", &(0x7f00000000c0)=@udp6=r13}, 0x20) 1.244666935s ago: executing program 1 (id=5492): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001000000000000fdffff02"], 0x14}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0xb, 0x12, [@private=0xa010102, @multicast2]}]}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x1, 0x99, {0x1, 0x2011}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x36, 0x1}, {0x6c, 0x1}, {0x4}, {0x48, 0x1}, {0xb}, {0x18}, {0x6c, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0xc, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x18}, {0x2d, 0x1}, {0x30, 0x1}, {0x24, 0x1}, {0x60}, {0x24, 0x1}, {0x36}, {0xb3418603187ec0ab}, {0x2}, {0x24}, {0x30, 0x1}, {0x3, 0x1}, {0x4}, {0x36, 0x1}, {0x60}, {0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 1.239133706s ago: executing program 4 (id=5493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.199597498s ago: executing program 3 (id=5494): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x96, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x60, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, {[@generic={0x5, 0xb, "f5883a223450d53d7f"}, @mss={0x2, 0x4, 0x400}, @md5sig={0x13, 0x12, "9e57aad7866cf5392c44f072cc2aa0a7"}, @mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x7, @local, 0x1, "e6ee5f8f079b6b"}, @timestamp={0x8, 0xa, 0xfffffff7, 0x8001}, @mptcp=@generic={0x44, 0xe, "d03919ee6fd10c23f816ef10"}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x110d1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0x2}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 1.094779447s ago: executing program 0 (id=5495): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) 1.072486503s ago: executing program 1 (id=5496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100), 0x0) listen(r2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f00000000c0)=0x400) r11 = getpid() ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000140)=r11) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) listen(r7, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) 1.00353892s ago: executing program 0 (id=5497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018}, 0xfffffffffffffe30) ioctl$FITHAW(r1, 0xc0045878) 918.847391ms ago: executing program 4 (id=5498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x35305cd73f6d86b1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x598c3, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="059c00b7c92c722700", @ANYRES64=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0676bc0b01e000000100000000e000000100"/74, @ANYRESHEX=r9, @ANYRES32=0x41424344, @ANYBLOB="5c00005290780000"], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000700)="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", 0x1c9) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}], 0x2}, 0x0) write$nci(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x270bd2f, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0xc, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0xc6, 0x3, 0x8, 0x2, 0x1, 0x6, 0x1}}, {0x6, 0x2, [0x7fdc]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_RATE={0x6, 0x5, {0x4e, 0x1}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xb2dd}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5aa3ce0}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x3}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0xc0}}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 917.947096ms ago: executing program 1 (id=5499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0xffffffffffffff91, 0x30, 0x2, 0x0, 0x0, {0x0, 0x0, 0x1be}}, 0x18}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000200)={0x1, 0x8, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff}, {0x100000, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r7, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000140001000000000000000000280011000100a73e2a26c2d174b4380271c1190000000000"], 0x28}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) bind$unix(r8, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r8, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 812.79878ms ago: executing program 0 (id=5500): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x20004000}], 0x1, 0x40800) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) write$cgroup_pid(r8, &(0x7f0000000340)=0xffffffffffffffff, 0x12) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000d0a01f9ffffff00000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 534.043472ms ago: executing program 1 (id=5501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 350.825231ms ago: executing program 0 (id=5502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x24, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8299}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xaa63}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4801}, 0x4840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 350.176771ms ago: executing program 4 (id=5503): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r0, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 291.45904ms ago: executing program 1 (id=5504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x8c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffff306}, {0xc, 0x90, 0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x48800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x0) 229.74102ms ago: executing program 3 (id=5505): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008000000000b020e34b00"/28], 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) close(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c015}, 0x4810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6, 0x54, 0x2, 0x101}]}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x146) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 150.235681ms ago: executing program 4 (id=5506): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000240)={{0x2, 0x4e21, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e20, @multicast1}, 'team0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) ioctl$OCFS2_IOC_UNRESVSP(r4, 0x40305829, &(0x7f0000000680)={0x1, 0x2, 0x6, 0x0, 0x4, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r2, &(0x7f0000003080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003040)={&(0x7f0000002900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xbe487be6f6650eb7}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELSETELEM={0x548, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x52c, 0x3, 0x0, 0x1, [{0x50c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa2, 0x1, "a1d5e57e3e764eb8059b1d696d7f1398bb8aebd3d8af4bcdb5cc220971c326f5688ebdcc7ec5cb5907eb7495ec17c3b23c266d6c8d6250a2fb89bac36a9ef53b7927d446e44962adf6937e645e4dd06c27184ccdb5e7737a6f2e80e0e60c83c8cabb8e4281dad2db7696b138ca0998b0f642ee25362a5b53c4e0435f8c540feb166940cc8410029aa21855edb95485c8094892fdb18cb7611504f20c5bf5"}]}, @NFTA_SET_ELEM_KEY={0x27c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "22233527cb0936f4ee8ba1b7d17505cb698342ad1f6ad354baac5bf790ccb373816b6cd0b6dcef269058a8c24ebb2cf093e8d5170b992291ed2667ffe8b3902ff196dfde521dfa8822eddb9114f7fa9dc2804fd5d2e20f4cf9efcb953aa5b938bb6879f11f22b7c30eecaf815bd96c25f5764e1e5395938a835cce8accce67bb75aab17f96b31bb90c938461724e"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "e76d267dcd52369933d2c580c218e6621444c9e1a626f12007acc77986698ebe2d2c31239e2c14aab14c076cf70fd1eabf917ac23a1cb8a37c3470635116599d7513c72f2e8e0b688f84621447d66d70a2c3158177340bcdce91345f88763466b8c019062bc72d8fa52786014c4497f3038487f6d4cede64fd18ee0e4e6bf8249dd6"}, @NFTA_DATA_VALUE={0x82, 0x1, "47ed403f973c2855e4b7f513f12f16d53afffd2446d33c0c36c8e0dfd11d9f6e4c1fb63a713a5df7d742cde8e004af19b553d865008dac0735ef76018740fcb9e04201eec5ca99402e57b192fc2e6a4c55744a2f239e69c851f7cb91312f9788441c47db29b120efbf51584f46cda2c16e9c7ba201d6030f1725f653145e"}, @NFTA_DATA_VALUE={0x14, 0x1, "39bbb7e010a43aa54399ab3e85a867b1"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x5, 0x1, 'i'}, @NFTA_DATA_VALUE={0x22, 0x1, "e08663b291e84babd288cfad12f1c0b398624acff88c9d162d62cfa7fb14"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "91c7e224d7709ed013f0b78c86f04e2983872feb90379c319fad9e28f07099b03ef45c5776ea3ad12baa7722df40e3c422631c3343a6f429080ed5c31f0206adb5c241c361ccd7e8cf44ac9639fa4c68e4feab00daab1f3ac8b6e4eb9af696698e9274f38020e3c690072b1d84a7ecd770eda4299c179186935a7316aca1ffd17d567b7602773a10ab167a981db3656611e1f7d1f20029d4581c73b173d00e55b51c7e6f7238"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x60, 0x1, "69be4d14d4d0451c09b91818ebb7ba1b6938a9da582f2572bdc964070cfa0af33f13e37ea320957e6b4635effae7077358433f27cc94e1df5a39f01b8f49eb28a39e9f7d09757bc11c9ca6d3081ae34f412d06c89e3626cb82dddc08"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xfc, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x720}, 0x1, 0x0, 0x0, 0xc0}, 0x800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, &(0x7f0000000800)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000900010073797a30000000002c000000030a010100000000000000000500000d0900010073797a30000000000900010073797a310000000068000000060a01040000000000000000240041800b00010074756e6e656c0000140002f7ffffffffffffff01080002400000007570000c00028008000240000000090900010073797a3000000000140000001100010000000000000000000000000a00"/198], 0xdc}}, 0x0) readv(r1, &(0x7f0000002880)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000600)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/18, 0x12}], 0x7) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) (async) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000240)={{0x2, 0x4e21, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e20, @multicast1}, 'team0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) (async) ioctl$OCFS2_IOC_UNRESVSP(r4, 0x40305829, &(0x7f0000000680)={0x1, 0x2, 0x6, 0x0, 0x4, 0x4}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000003080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003040)={&(0x7f0000002900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xbe487be6f6650eb7}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELSETELEM={0x548, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x52c, 0x3, 0x0, 0x1, [{0x50c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa2, 0x1, "a1d5e57e3e764eb8059b1d696d7f1398bb8aebd3d8af4bcdb5cc220971c326f5688ebdcc7ec5cb5907eb7495ec17c3b23c266d6c8d6250a2fb89bac36a9ef53b7927d446e44962adf6937e645e4dd06c27184ccdb5e7737a6f2e80e0e60c83c8cabb8e4281dad2db7696b138ca0998b0f642ee25362a5b53c4e0435f8c540feb166940cc8410029aa21855edb95485c8094892fdb18cb7611504f20c5bf5"}]}, @NFTA_SET_ELEM_KEY={0x27c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "22233527cb0936f4ee8ba1b7d17505cb698342ad1f6ad354baac5bf790ccb373816b6cd0b6dcef269058a8c24ebb2cf093e8d5170b992291ed2667ffe8b3902ff196dfde521dfa8822eddb9114f7fa9dc2804fd5d2e20f4cf9efcb953aa5b938bb6879f11f22b7c30eecaf815bd96c25f5764e1e5395938a835cce8accce67bb75aab17f96b31bb90c938461724e"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "e76d267dcd52369933d2c580c218e6621444c9e1a626f12007acc77986698ebe2d2c31239e2c14aab14c076cf70fd1eabf917ac23a1cb8a37c3470635116599d7513c72f2e8e0b688f84621447d66d70a2c3158177340bcdce91345f88763466b8c019062bc72d8fa52786014c4497f3038487f6d4cede64fd18ee0e4e6bf8249dd6"}, @NFTA_DATA_VALUE={0x82, 0x1, "47ed403f973c2855e4b7f513f12f16d53afffd2446d33c0c36c8e0dfd11d9f6e4c1fb63a713a5df7d742cde8e004af19b553d865008dac0735ef76018740fcb9e04201eec5ca99402e57b192fc2e6a4c55744a2f239e69c851f7cb91312f9788441c47db29b120efbf51584f46cda2c16e9c7ba201d6030f1725f653145e"}, @NFTA_DATA_VALUE={0x14, 0x1, "39bbb7e010a43aa54399ab3e85a867b1"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x5, 0x1, 'i'}, @NFTA_DATA_VALUE={0x22, 0x1, "e08663b291e84babd288cfad12f1c0b398624acff88c9d162d62cfa7fb14"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "91c7e224d7709ed013f0b78c86f04e2983872feb90379c319fad9e28f07099b03ef45c5776ea3ad12baa7722df40e3c422631c3343a6f429080ed5c31f0206adb5c241c361ccd7e8cf44ac9639fa4c68e4feab00daab1f3ac8b6e4eb9af696698e9274f38020e3c690072b1d84a7ecd770eda4299c179186935a7316aca1ffd17d567b7602773a10ab167a981db3656611e1f7d1f20029d4581c73b173d00e55b51c7e6f7238"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x60, 0x1, "69be4d14d4d0451c09b91818ebb7ba1b6938a9da582f2572bdc964070cfa0af33f13e37ea320957e6b4635effae7077358433f27cc94e1df5a39f01b8f49eb28a39e9f7d09757bc11c9ca6d3081ae34f412d06c89e3626cb82dddc08"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xfc, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x720}, 0x1, 0x0, 0x0, 0xc0}, 0x800) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, &(0x7f0000000800)) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000900010073797a30000000002c000000030a010100000000000000000500000d0900010073797a30000000000900010073797a310000000068000000060a01040000000000000000240041800b00010074756e6e656c0000140002f7ffffffffffffff01080002400000007570000c00028008000240000000090900010073797a3000000000140000001100010000000000000000000000000a00"/198], 0xdc}}, 0x0) (async) readv(r1, &(0x7f0000002880)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000600)}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/18, 0x12}], 0x7) (async) 142.053683ms ago: executing program 0 (id=5507): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES16=r0, @ANYRES16], 0x54}}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r8 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="08000800030000000000140087da0db3b4d2ff000045adfde10009fdff5f069078ac1e0001ffffffff11f3305280f125"], 0xfdef) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r3], 0x5c}}, 0x800) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000000080)={0x7, [0x8000], 0x7}, 0x10) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) 84.43335ms ago: executing program 1 (id=5508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0x7ffff}, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) syz_emit_ethernet(0x4e, &(0x7f00000007c0)=ANY=[@ANYBLOB="2f5b02cb75dbaaaaaaaaaaaa86dd6001810000181100fe8000000000000000bbfe8000000000000000000000000000aa2c000000000000004e200e220010908f86a4cda93e0a0e96bb569e217802"], 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 0s ago: executing program 0 (id=5509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) nanosleep(0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000d1401022abd7000fbd9df2508000100000000000800038000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000100), 0x6e, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x10021) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xfffffffffffffeff, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newsa={0xfc, 0x10, 0x401, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {}, {0x0, 0x0, 0x2000}, {}, 0x70bd2a, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0xfc}}, 0x4000) kernel console output (not intermixed with test programs): 359][T19329] netlink: 'syz.4.3466': attribute type 1 has an invalid length. [ 476.024110][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 476.086200][T19335] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 476.108246][T19335] bond1 (unregistering): Released all slaves [ 476.331609][T19351] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3470'. [ 476.604726][T19357] netlink: zone id is out of range [ 476.706872][T19357] netlink: set zone limit has 4 unknown bytes [ 476.795542][T19365] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 477.444557][T19403] xt_socket: unknown flags 0x50 [ 477.851293][T19422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.325618][T19431] netlink: 'syz.3.3492': attribute type 5 has an invalid length. [ 478.489124][T19438] macsec1: entered promiscuous mode [ 478.521418][T19438] bridge0: entered promiscuous mode [ 478.539450][T19438] macsec1: entered allmulticast mode [ 478.547174][T19438] bridge0: entered allmulticast mode [ 478.571382][T19438] bridge0: left allmulticast mode [ 478.629473][ T5741] bridge0: left promiscuous mode [ 478.931501][T19468] __nla_validate_parse: 6 callbacks suppressed [ 478.931522][T19468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3501'. [ 478.972273][T19470] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:8197 [ 478.983774][T19471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3501'. [ 479.017569][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3501'. [ 479.229699][T19478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3504'. [ 479.356557][T19486] netlink: 'syz.1.3506': attribute type 39 has an invalid length. [ 479.541573][T19492] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 479.664760][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 479.747152][T19499] netlink: 'syz.4.3509': attribute type 4 has an invalid length. [ 480.117637][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3514'. [ 480.143500][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3514'. [ 480.592916][T19524] netlink: 'syz.0.3517': attribute type 4 has an invalid length. [ 480.634345][T19524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3517'. [ 480.757881][T19552] –: renamed from vxcan1 (while UP) [ 481.313654][T19575] netlink: 'syz.0.3530': attribute type 1 has an invalid length. [ 481.549095][T19575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.584331][T19581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.968046][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'. [ 482.137046][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'. [ 482.175669][T19616] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 482.205304][T19616] netlink: 'syz.4.3540': attribute type 2 has an invalid length. [ 482.440780][T19632] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 482.463947][T19632] syzkaller1: linktype set to 823 [ 482.497955][T19629] netlink: 'syz.0.3543': attribute type 5 has an invalid length. [ 483.219051][T19669] netlink: 'syz.1.3550': attribute type 1 has an invalid length. [ 483.305957][T18769] udevd[18769]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 483.417402][T18769] udevd[18769]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 483.762806][T19688] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 483.936071][T19688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.111565][T19711] __nla_validate_parse: 5 callbacks suppressed [ 484.111587][T19711] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3561'. [ 484.135149][T19710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3562'. [ 484.211692][T19715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.250224][T19707] syzkaller1: entered promiscuous mode [ 484.266061][T19707] syzkaller1: entered allmulticast mode [ 484.284779][T19716] syzkaller0: entered promiscuous mode [ 484.305220][T19716] syzkaller0: entered allmulticast mode [ 484.453323][T19716] Cannot find add_set index 46338 as target [ 484.937028][ T30] audit: type=1107 audit(1781077253.742:17): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¢VÌ‘«}¾óÓFsæ ð' [ 484.989027][T19754] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3572'. [ 485.017370][T19754] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.3572'. [ 485.053121][T19754] openvswitch: netlink: Message has 6 unknown bytes. [ 485.142801][T19756] pim6reg: entered allmulticast mode [ 485.282187][T19767] netlink: 'syz.3.3576': attribute type 1 has an invalid length. [ 485.310192][T19767] netlink: 476 bytes leftover after parsing attributes in process `syz.3.3576'. [ 485.352895][T19767] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3576'. [ 485.366762][T19776] netlink: zone id is out of range [ 485.389307][T19776] netlink: zone id is out of range [ 485.405719][T19776] netlink: zone id is out of range [ 485.430302][T19776] netlink: zone id is out of range [ 485.475053][T19776] netlink: zone id is out of range [ 485.492166][T19776] netlink: zone id is out of range [ 485.556388][T19776] netlink: zone id is out of range [ 485.570153][T19776] netlink: set zone limit has 4 unknown bytes [ 486.499520][T19835] syzkaller0: entered promiscuous mode [ 486.514361][T19835] syzkaller0: entered allmulticast mode [ 486.742215][T19805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.892730][T19796] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 487.212133][T19869] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3595'. [ 487.239290][T19869] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3595'. [ 487.261002][T19869] netlink: 'syz.4.3595': attribute type 6 has an invalid length. [ 487.276258][T19869] netlink: 'syz.4.3595': attribute type 5 has an invalid length. [ 487.285715][T19869] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3595'. [ 487.329260][T19871] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 487.337656][T19871] netlink: 'syz.1.3597': attribute type 2 has an invalid length. [ 487.640343][T19880] netlink: 'syz.4.3601': attribute type 1 has an invalid length. [ 487.916716][T19890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.071711][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3607'. [ 488.607933][ T30] audit: type=1800 audit(1781077257.402:18): pid=19922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3614" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=645 res=0 errno=0 [ 489.073913][T19946] unsupported nlmsg_type 40 [ 489.266472][T19957] __nla_validate_parse: 1 callbacks suppressed [ 489.266496][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 489.381692][T19961] netlink: 'syz.1.3625': attribute type 9 has an invalid length. [ 489.716486][T19983] bond0: (slave bond_slave_1): Releasing backup interface [ 490.145966][T20000] pim6reg: entered allmulticast mode [ 492.207262][T19956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.480956][T20016] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3640'. [ 492.516423][T20016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3640'. [ 492.558466][T20018] sctp: [Deprecated]: syz.1.3640 (pid 20018) Use of int in maxseg socket option. [ 492.558466][T20018] Use struct sctp_assoc_value instead [ 492.639374][T20022] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3642'. [ 492.649586][T20022] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3642'. [ 492.659574][T20022] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3642'. [ 492.857900][T20035] nbd: nbd0 already in use [ 492.874972][T20035] block nbd0: NBD_DISCONNECT [ 492.895845][T20035] block nbd0: Send disconnect failed -32 [ 492.927266][T20035] block nbd0: Send disconnect failed -32 [ 493.165996][ T36] pimreg3: left allmulticast mode [ 493.494159][ T36] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 493.515953][ T36] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 493.536376][ T36] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ee:f4:83:fd:a5:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 493.712070][ T36] erspan0 (unregistering): left promiscuous mode [ 493.780988][ T36] gretap0 (unregistering): left promiscuous mode [ 494.216369][ T36] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 494.224803][ T36] bridge5 (unregistering): left promiscuous mode [ 494.428678][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.451781][ T36] bond_slave_0: left allmulticast mode [ 494.456854][ T13] smbdirect: ib_dev[syz1] removed [ 494.469444][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.479486][ T36] bond_slave_1: left allmulticast mode [ 494.487759][ T36] bond0 (unregistering): Released all slaves [ 494.499100][ T36] bond1 (unregistering): Released all slaves [ 494.516800][ T36] bond2 (unregistering): Released all slaves [ 494.544412][ T36] bond3 (unregistering): Released all slaves [ 494.559156][ T36] bond4 (unregistering): Released all slaves [ 494.577829][ T36] bond5 (unregistering): (slave veth7): Releasing backup interface [ 494.595537][ T36] bond5 (unregistering): Released all slaves [ 494.613643][ T36] bond6 (unregistering): Released all slaves [ 494.631454][ T36] bond7 (unregistering): Released all slaves [ 494.855681][T20095] netlink: 'syz.4.3664': attribute type 11 has an invalid length. [ 494.864555][T20095] netlink: 'syz.4.3664': attribute type 11 has an invalid length. [ 494.874392][T20095] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3664'. [ 494.883850][ T36] tipc: Disabling bearer [ 494.905688][ T36] tipc: Disabling bearer [ 494.923680][ T36] tipc: Left network mode [ 494.987286][T20092] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3662'. [ 495.231537][T20092] vlan3: entered allmulticast mode [ 495.247451][T20092] syz_tun: entered allmulticast mode [ 495.596325][T20117] xfrm1: entered allmulticast mode [ 496.885035][T20173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3684'. [ 497.150687][ T5741] IPVS: starting estimator thread 0... [ 497.273913][T20182] IPVS: using max 26 ests per chain, 62400 per kthread [ 497.358894][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 497.505085][T20194] nbd: nbd1 already in use [ 497.566490][T20198] Cannot find del_set index 0 as target [ 497.648624][T20202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.760948][T20207] vlan1: entered allmulticast mode [ 497.773484][T20207] veth0_vlan: entered allmulticast mode [ 498.002868][T20213] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3696'. [ 498.066361][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3697'. [ 498.084702][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3697'. [ 498.177761][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 498.200352][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 498.238735][T20223] netlink: 'syz.3.3699': attribute type 10 has an invalid length. [ 498.267465][T20223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.307953][T20223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.359807][T20223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.387792][T20226] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3700'. [ 498.402058][T20223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.578639][ T36] hsr_slave_0: left promiscuous mode [ 498.616913][ T36] hsr_slave_1: left promiscuous mode [ 498.653126][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.689581][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.735410][ T36] veth1_macvtap: left promiscuous mode [ 498.756733][ T36] veth0_macvtap: left promiscuous mode [ 498.894808][T20258] openvswitch: netlink: Flow key attr not present in new flow. [ 499.282274][ T36] team0 (unregistering): Port device team_slave_0 removed [ 499.398618][ T36] team0 (unregistering): Port device dummy0 removed [ 499.512733][T20265] syzkaller0: entered promiscuous mode [ 499.523969][T20265] syzkaller0: entered allmulticast mode [ 499.672195][T20271] lo: entered promiscuous mode [ 499.677452][T20271] netlink: 'syz.4.3711': attribute type 2 has an invalid length. [ 499.696986][T20271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.768223][T20272] IPv6: Can't replace route, no match found [ 499.788879][T20272] IPv6: Can't replace route, no match found [ 499.867712][T20284] openvswitch: netlink: Flow key attr not present in new flow. [ 500.247630][ T36] IPVS: stop unused estimator thread 0... [ 500.360111][T20309] netem: incorrect gi model size [ 500.388018][T20309] netem: change failed [ 500.414012][T20302] syzkaller0: entered promiscuous mode [ 500.452572][T20302] syzkaller0: entered allmulticast mode [ 500.752885][T20327] xt_hashlimit: invalid interval [ 500.906842][ T5741] IPVS: starting estimator thread 0... [ 500.976324][T20338] __nla_validate_parse: 1 callbacks suppressed [ 500.976348][T20338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3730'. [ 501.011095][T20336] IPVS: using max 27 ests per chain, 64800 per kthread [ 501.289105][T20357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3736'. [ 501.318509][T20357] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3736'. [ 501.318565][T20353] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3734'. [ 501.366317][T20357] netlink: 'syz.0.3736': attribute type 6 has an invalid length. [ 501.391621][T20357] netlink: 'syz.0.3736': attribute type 5 has an invalid length. [ 501.415282][T20357] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3736'. [ 501.775059][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'. [ 501.843144][T20382] netlink: 'syz.1.3744': attribute type 33 has an invalid length. [ 502.133777][T20397] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3747'. [ 502.162358][T20397] netlink: 'syz.1.3747': attribute type 2 has an invalid length. [ 502.208391][T20397] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 502.550984][ T24] IPVS: starting estimator thread 0... [ 502.558188][T20414] netlink: 4600 bytes leftover after parsing attributes in process `syz.1.3752'. [ 502.583209][T20414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3752'. [ 502.660823][T20415] IPVS: using max 25 ests per chain, 60000 per kthread [ 502.720402][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'. [ 503.093038][T20441] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 503.423809][T20444] tipc: Started in network mode [ 503.447041][T20444] tipc: Node identity bebc45a298e7, cluster identity 4711 [ 503.509404][T20444] tipc: Enabled bearer , priority 0 [ 503.570779][T20470] syzkaller0: entered promiscuous mode [ 503.595345][T20470] syzkaller0: entered allmulticast mode [ 503.794714][T20474] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 504.008581][T20486] gretap1: entered promiscuous mode [ 504.031566][T20486] gretap1: entered allmulticast mode [ 504.134162][T20443] tipc: Resetting bearer [ 504.505625][T20443] tipc: Disabling bearer [ 504.681499][ T24] tipc: Node number set to 643515810 [ 504.705511][T20519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 505.011281][T20529] nftables ruleset with unbound set [ 505.056435][T20526] gtp2: entered promiscuous mode [ 505.063268][T20536] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 505.073069][T20526] gtp2: entered allmulticast mode [ 505.153886][T20539] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 505.233495][T20544] openvswitch: netlink: Flow key attr not present in new flow. [ 505.248505][T20543] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 505.298644][T20538] 8021q: VLANs not supported on ip6tnl0 [ 505.684336][T20564] netlink: 'syz.0.3792': attribute type 1 has an invalid length. [ 505.861358][T20564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.206168][T20580] xt_hashlimit: size too large, truncated to 1048576 [ 506.885899][T20614] __nla_validate_parse: 7 callbacks suppressed [ 506.885922][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3804'. [ 506.987182][T20621] netlink: 'syz.0.3807': attribute type 2 has an invalid length. [ 507.004518][T20621] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3807'. [ 507.560742][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3814'. [ 507.623178][T20644] netlink: 'syz.4.3814': attribute type 1 has an invalid length. [ 507.915477][T20651] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3816'. [ 508.068739][T20658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3819'. [ 508.474591][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 508.482648][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 508.495776][T20674] Cannot find add_set index 46338 as target [ 508.735498][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3829'. [ 508.782616][T20687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3829'. [ 508.796506][T20689] openvswitch: netlink: Flow actions attr not present in new flow. [ 508.823314][ T5640] Bluetooth: hci2: command tx timeout [ 508.907361][ T5640] Bluetooth: hci5: command 0x0405 tx timeout [ 508.923382][T20697] netlink: 'syz.2.3831': attribute type 1 has an invalid length. [ 509.086453][T20707] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3833'. [ 509.099473][T20697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.120540][T20698] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 509.122688][T20707] xt_policy: neither incoming nor outgoing policy selected [ 509.282980][ T963] IPVS: starting estimator thread 0... [ 509.400133][T20715] IPVS: using max 25 ests per chain, 60000 per kthread [ 509.497299][T20724] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 509.974477][T20749] x_tables: duplicate underflow at hook 1 [ 510.160844][T20763] netlink: 'syz.3.3850': attribute type 1 has an invalid length. [ 510.320553][T20763] bond1: entered promiscuous mode [ 510.326348][T20763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.382848][T20777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.391133][T20777] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 510.402845][T20777] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 510.430097][T20777] bond1: (slave ip6gre1): making interface the new active one [ 510.438188][T20777] ip6gre1: entered promiscuous mode [ 510.446098][T20777] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 510.456611][T20780] veth0_macvtap: left promiscuous mode [ 510.699728][ T30] audit: type=1800 audit(1781077279.502:19): pid=20793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3859" name="memory.events" dev="tmpfs" ino=739 res=0 errno=0 [ 510.762720][ T30] audit: type=1804 audit(1781077279.542:20): pid=20793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3859" name="/newroot/142/memory.events" dev="tmpfs" ino=739 res=1 errno=0 [ 511.279476][T20814] vcan1: entered promiscuous mode [ 511.289066][T20814] vcan1: entered allmulticast mode [ 511.448918][T20828] netlink: 'syz.3.3867': attribute type 1 has an invalid length. [ 511.974551][T20854] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20003 [ 512.064199][T20862] netlink: 'syz.1.3876': attribute type 16 has an invalid length. [ 512.083980][T20862] netlink: 'syz.1.3876': attribute type 3 has an invalid length. [ 512.092955][T20862] __nla_validate_parse: 9 callbacks suppressed [ 512.092977][T20862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3876'. [ 512.302911][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3878'. [ 512.315647][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3878'. [ 512.332268][T20871] lo speed is unknown, defaulting to 1000 [ 512.342409][T20871] lo speed is unknown, defaulting to 1000 [ 512.352733][T20871] lo speed is unknown, defaulting to 1000 [ 512.363136][T20871] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 512.378359][T20871] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 512.407052][T20871] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 512.486350][T20871] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 512.531226][T20871] lo speed is unknown, defaulting to 1000 [ 512.559647][T20871] lo speed is unknown, defaulting to 1000 [ 512.569673][T20871] lo speed is unknown, defaulting to 1000 [ 512.578153][T20871] lo speed is unknown, defaulting to 1000 [ 512.605942][T20871] lo speed is unknown, defaulting to 1000 [ 512.638367][T20871] lo speed is unknown, defaulting to 1000 [ 512.747600][T20887] GUP no longer grows the stack in syz.3.3884 (20887): 200000003000-20000000a000 (200000001000) [ 512.784484][T20887] CPU: 0 UID: 0 PID: 20887 Comm: syz.3.3884 Not tainted syzkaller #0 PREEMPT(full) [ 512.784516][T20887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.784528][T20887] Call Trace: [ 512.784537][T20887] [ 512.784546][T20887] dump_stack_lvl+0xe8/0x150 [ 512.784583][T20887] __get_user_pages+0x2378/0x2730 [ 512.784671][T20887] ? __gup_longterm_locked+0xc4e/0x1630 [ 512.784698][T20887] ? down_read_killable+0x1bb/0x340 [ 512.784783][T20887] __gup_longterm_locked+0xdcf/0x1630 [ 512.784815][T20887] ? lock_acquire+0x106/0x350 [ 512.784873][T20887] gup_fast_fallback+0x1d84/0x20d0 [ 512.784935][T20887] ? __pfx_gup_fast_fallback+0x10/0x10 [ 512.784965][T20887] ? is_valid_gup_args+0x11f/0x200 [ 512.784993][T20887] ? get_user_pages_fast+0x4d/0xb0 [ 512.785019][T20887] __iov_iter_get_pages_alloc+0x370/0xa10 [ 512.785116][T20887] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 512.785171][T20887] iov_iter_get_pages2+0x5e/0xa0 [ 512.785202][T20887] __se_sys_vmsplice+0x7c7/0x1620 [ 512.785253][T20887] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 512.785284][T20887] ? __pfx_futex_wait+0x10/0x10 [ 512.785394][T20887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.785421][T20887] do_syscall_64+0x174/0x580 [ 512.785442][T20887] ? trace_irq_disable+0x3b/0x140 [ 512.785473][T20887] ? clear_bhb_loop+0x40/0x90 [ 512.785499][T20887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.785521][T20887] RIP: 0033:0x7f260a59ce59 [ 512.785543][T20887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.785562][T20887] RSP: 002b:00007f260b4ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 512.785586][T20887] RAX: ffffffffffffffda RBX: 00007f260a815fa0 RCX: 00007f260a59ce59 [ 512.785601][T20887] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 512.785614][T20887] RBP: 00007f260a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 512.785638][T20887] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 512.785651][T20887] R13: 00007f260a816038 R14: 00007f260a815fa0 R15: 00007ffd98423d98 [ 512.785686][T20887] [ 513.132041][T20895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3888'. [ 513.166213][T16383] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.180751][T16383] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.190377][ T963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.242716][T20899] netlink: 'syz.0.3890': attribute type 1 has an invalid length. [ 513.270227][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.301516][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.315740][T20899] bond3: entered promiscuous mode [ 513.321833][T20899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.344078][T20899] x_tables: duplicate underflow at hook 2 [ 514.116063][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 514.158417][T20946] netlink: 'syz.1.3902': attribute type 9 has an invalid length. [ 514.231757][T20948] netlink: 'syz.0.3903': attribute type 15 has an invalid length. [ 514.245861][T20951] x_tables: duplicate underflow at hook 2 [ 514.258070][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 514.337571][T20948] netlink: 'syz.0.3903': attribute type 15 has an invalid length. [ 514.345511][T18516] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 514.345629][T18516] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 514.345670][T18516] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 514.345708][T18516] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 514.441620][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 514.513233][T20963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3908'. [ 514.568935][T20963] block nbd0: Unsupported socket: should be TCP or UNIX. [ 514.789287][T20982] netlink: 'syz.2.3913': attribute type 12 has an invalid length. [ 514.806126][T20982] netlink: 'syz.2.3913': attribute type 29 has an invalid length. [ 514.834829][T20982] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3913'. [ 514.869657][T20985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3914'. [ 515.389117][T21008] syzkaller0: entered promiscuous mode [ 515.397377][T21008] syzkaller0: entered allmulticast mode [ 516.040614][T21033] bond3 (unregistering): Released all slaves [ 516.159527][T21035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.182957][T21106] __nla_validate_parse: 7 callbacks suppressed [ 517.182980][T21106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3949'. [ 517.220818][T21106] netlink: 'syz.0.3949': attribute type 7 has an invalid length. [ 517.243818][T21106] netlink: 'syz.0.3949': attribute type 8 has an invalid length. [ 517.278905][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3949'. [ 517.359722][T21106] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 517.414849][T21106] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 517.443599][T21114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3951'. [ 517.460392][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.483900][T21113] netlink: 'syz.1.3951': attribute type 8 has an invalid length. [ 517.497879][T21113] sch_fq: defrate 0 ignored. [ 517.721854][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'. [ 517.772326][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'. [ 518.001972][T21135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3955'. [ 518.159256][T21117] veth0_to_bond: entered allmulticast mode [ 518.389328][T21140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'. [ 518.444929][T21144] netlink: 'syz.2.3958': attribute type 5 has an invalid length. [ 518.467188][T21144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3958'. [ 518.639797][T21160] netlink: zone id is out of range [ 518.648734][T21160] netlink: zone id is out of range [ 518.654624][T21160] netlink: zone id is out of range [ 518.661404][T21160] netlink: zone id is out of range [ 518.666789][T21160] netlink: zone id is out of range [ 518.673953][T21160] netlink: zone id is out of range [ 518.679752][T21160] netlink: zone id is out of range [ 518.686958][T21160] netlink: zone id is out of range [ 518.693256][T21160] netlink: zone id is out of range [ 521.245973][T21172] netlink: 'syz.0.3966': attribute type 2 has an invalid length. [ 521.271442][T21172] netlink: 'syz.0.3966': attribute type 2 has an invalid length. [ 521.425660][ T30] audit: type=1804 audit(1781077290.232:21): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3969" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=963 res=1 errno=0 [ 521.437069][T21184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 521.463830][ T30] audit: type=1800 audit(1781077290.232:22): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3969" name="cgroup.controllers" dev="tmpfs" ino=963 res=0 errno=0 [ 521.602339][T21190] netlink: 'syz.4.3971': attribute type 7 has an invalid length. [ 521.870239][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 522.363758][T21225] __nla_validate_parse: 1 callbacks suppressed [ 522.363778][T21225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3982'. [ 522.404980][T21225] netlink: 'syz.3.3982': attribute type 7 has an invalid length. [ 522.428981][T21225] netlink: 'syz.3.3982': attribute type 8 has an invalid length. [ 522.444677][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 522.675157][T21246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3988'. [ 522.691981][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 522.896972][T21259] tipc: Enabled bearer , priority 0 [ 522.910925][T21257] syzkaller0: entered promiscuous mode [ 522.920707][T21257] syzkaller0: entered allmulticast mode [ 522.959267][T21259] tipc: Resetting bearer [ 523.014402][T21259] tipc: Disabling bearer [ 523.176786][T21273] net_ratelimit: 820 callbacks suppressed [ 523.176807][T21273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.307828][T21279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3996'. [ 523.759339][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4003'. [ 524.185535][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4008'. [ 524.204970][T21326] vlan2: entered promiscuous mode [ 524.213097][T21327] netlink: 'syz.2.4007': attribute type 10 has an invalid length. [ 524.223159][T21326] gretap0: entered promiscuous mode [ 524.263160][T21327] veth1_virt_wifi: entered promiscuous mode [ 524.630931][T21333] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4009'. [ 524.668857][T21333] 0·: renamed from hsr0 (while UP) [ 524.748756][T21333] 0·: entered allmulticast mode [ 524.760476][T21333] hsr_slave_0: entered allmulticast mode [ 524.766687][T21333] hsr_slave_1: entered allmulticast mode [ 524.777603][T21333] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 525.116152][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'. [ 525.140181][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4018'. [ 525.225152][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.244178][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.276245][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.296353][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.351699][T21424] netlink: 'syz.2.4035': attribute type 9 has an invalid length. [ 526.443940][T21430] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 526.478295][T21429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.516646][T21427] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 526.568309][T21427] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 526.660223][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.669447][T21427] bond4: (slave ip6gre2): making interface the new active one [ 526.709339][T21427] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 527.137843][T21460] openvswitch: netlink: Multiple metadata blocks provided [ 527.264327][T21467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.444035][T21480] __nla_validate_parse: 1 callbacks suppressed [ 527.444057][T21480] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4050'. [ 527.542725][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 527.603503][T21490] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 527.689546][T21493] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4053'. [ 527.788364][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4055'. [ 527.813140][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4055'. [ 528.148517][T21511] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4058'. [ 528.689087][T21525] bond5: option mode: invalid value (36) [ 528.712296][T21525] bond5 (unregistering): Released all slaves [ 529.056792][T21538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4066'. [ 529.094597][T21538] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.101992][T21538] bridge0: port 2(bridge_slave_1) entered listening state [ 529.109610][T21538] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.116896][T21538] bridge0: port 1(bridge_slave_0) entered listening state [ 529.353077][T21554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4071'. [ 529.388165][T21554] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 529.452488][T21548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4068'. [ 529.688774][T21568] IPv6: NLM_F_REPLACE set, but no existing node found! [ 529.758106][T21570] tipc: New replicast peer: 255.255.255.255 [ 529.772836][T21570] tipc: Enabled bearer , priority 10 [ 529.781712][T21570] netlink: 'syz.0.4079': attribute type 1 has an invalid length. [ 529.852313][T21570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.862088][T21577] ip_vti0: entered promiscuous mode [ 529.968104][T21581] netlink: 'syz.1.4083': attribute type 5 has an invalid length. [ 529.981502][T21581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4083'. [ 530.221200][T21591] sch_fq: defrate 0 ignored. [ 530.223138][T21589] netlink: 'syz.2.4086': attribute type 1 has an invalid length. [ 530.321498][T21589] bond2: entered promiscuous mode [ 530.327218][T21589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.351557][T21597] syzkaller0: entered promiscuous mode [ 530.368165][T21597] syzkaller0: entered allmulticast mode [ 530.473665][T21608] Cannot find add_set index 4 as target [ 530.526116][T21589] tipc: MTU too low for tipc bearer [ 530.566425][T21589] bond2: (slave bridge3): making interface the new active one [ 530.588295][T21589] bridge3: entered promiscuous mode [ 530.599326][T21589] bridge3: left promiscuous mode [ 530.710756][T21613] bond5: invalid ARP target 0.0.0.0 specified for addition [ 530.718251][T21613] bond5: option arp_ip_target: invalid value (0) [ 530.727959][T21613] bond5 (unregistering): Released all slaves [ 530.841964][T21618] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 531.072357][T21627] tipc: Trying to set illegal importance in message [ 533.904795][T21640] __nla_validate_parse: 6 callbacks suppressed [ 533.904816][T21640] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4099'. [ 534.245524][ T5762] tipc: Node number set to 2645056949 [ 534.253079][T21621] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 534.303617][T21650] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4101'. [ 534.495760][T21654] syzkaller0: entered promiscuous mode [ 534.501627][T21654] syzkaller0: entered allmulticast mode [ 534.555557][T21654] netlink: 'syz.2.4102': attribute type 10 has an invalid length. [ 534.574485][T21660] netlink: 'syz.1.4105': attribute type 4 has an invalid length. [ 534.596987][T21654] syz_tun: entered promiscuous mode [ 534.897060][T21676] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 535.128792][T21688] netlink: 'syz.2.4111': attribute type 1 has an invalid length. [ 535.145852][T21688] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4111'. [ 535.228437][T21694] ip6t_srh: unknown srh match flags 4000 [ 535.255170][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 535.281525][T21691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.430796][T21702] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4115'. [ 535.432448][T21704] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.449231][T21704] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.513359][T21707] netlink: 'syz.0.4117': attribute type 3 has an invalid length. [ 535.524350][T21708] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.531592][T21708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.539344][T21708] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.546636][T21708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.569524][T21707] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4117'. [ 535.613129][T21708] bridge0: entered promiscuous mode [ 535.623665][T21708] bridge0: entered allmulticast mode [ 535.818400][T21731] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4122'. [ 536.052772][T21740] tc_dump_action: action bad kind [ 536.228820][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4126'. [ 536.256002][T21745] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4126'. [ 536.285013][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4126'. [ 536.586451][T21758] netlink: 'syz.4.4128': attribute type 2 has an invalid length. [ 537.943955][T21811] bond2: option all_slaves_active: invalid value (222) [ 537.968064][T21811] bond2 (unregistering): Released all slaves [ 538.149713][T21834] netlink: 'syz.2.4147': attribute type 1 has an invalid length. [ 538.492867][T21845] netlink: 'syz.4.4153': attribute type 4 has an invalid length. [ 538.740416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.393776][T21894] __nla_validate_parse: 9 callbacks suppressed [ 539.393798][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4166'. [ 539.418311][T21867] netlink: 'syz.1.4161': attribute type 30 has an invalid length. [ 539.597664][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4167'. [ 539.640112][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 540.079110][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4172'. [ 540.178056][T21911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 540.245639][T21916] netlink: 'syz.1.4173': attribute type 1 has an invalid length. [ 540.294293][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'. [ 541.526728][T21966] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 541.591302][T21966] syzkaller1: entered promiscuous mode [ 541.610253][T21966] syzkaller1: entered allmulticast mode [ 541.742803][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4190'. [ 542.005699][T21978] IPVS: Unknown mcast interface: vcan0 [ 542.067251][T21987] netlink: 'syz.1.4192': attribute type 32 has an invalid length. [ 542.082167][T21985] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4194'. [ 542.374661][T22001] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4198'. [ 542.852601][T22020] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4205'. [ 542.866303][T22020] netlink: 'syz.4.4205': attribute type 9 has an invalid length. [ 543.739071][T22058] netlink: 'syz.1.4216': attribute type 1 has an invalid length. [ 543.776961][T22058] netlink: 'syz.1.4216': attribute type 1 has an invalid length. [ 543.890180][T22056] syzkaller0: entered promiscuous mode [ 543.897795][T22056] syzkaller0: entered allmulticast mode [ 544.367930][T22086] SET target dimension over the limit! [ 544.428504][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4222'. [ 544.486898][T22077] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 544.580321][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.770355][T22099] netlink: 'syz.4.4224': attribute type 1 has an invalid length. [ 544.800173][T22099] netlink: 'syz.4.4224': attribute type 1 has an invalid length. [ 548.224945][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4227'. [ 548.225785][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4229'. [ 548.484680][T22127] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 548.756728][T22138] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 548.780416][T22138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4233'. [ 548.825550][T22138] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4233'. [ 548.869231][T22138] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 548.923961][T22147] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4236'. [ 549.100900][T22154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4239'. [ 549.160713][T22157] netlink: 'syz.0.4240': attribute type 2 has an invalid length. [ 549.218100][T22163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4242'. [ 549.317165][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4243'. [ 549.464230][T22173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.471575][T22173] IPv6: NLM_F_CREATE should be set when creating new route [ 549.478886][T22173] IPv6: NLM_F_CREATE should be set when creating new route [ 549.530340][T22173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.722686][T22192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4247'. [ 549.893211][T22205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.900580][T22205] IPv6: NLM_F_CREATE should be set when creating new route [ 549.908059][T22205] IPv6: NLM_F_CREATE should be set when creating new route [ 550.197834][T22213] sctp: [Deprecated]: syz.2.4251 (pid 22213) Use of int in max_burst socket option deprecated. [ 550.197834][T22213] Use struct sctp_assoc_value instead [ 551.727494][T22236] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4258'. [ 551.737878][T22236] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4258'. [ 551.867237][T22242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4259'. [ 552.458323][T22183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.735774][T22251] netlink: 'syz.2.4262': attribute type 4 has an invalid length. [ 552.861207][T22261] openvswitch: netlink: IP tunnel dst address not specified [ 553.069592][T22266] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4268'. [ 553.737852][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4279'. [ 553.762508][T22306] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4281'. [ 553.773780][T22297] xt_ecn: cannot match TCP bits for non-tcp packets [ 553.818902][T22306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.869772][T22306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.889564][T22316] netlink: 'syz.3.4283': attribute type 21 has an invalid length. [ 553.899285][T22316] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4283'. [ 553.941347][T22306] bond0 (unregistering): Released all slaves [ 554.029612][T22319] vlan0: entered promiscuous mode [ 554.052132][T22322] netlink: 'syz.4.4284': attribute type 1 has an invalid length. [ 554.126000][T22319] team0: Port device vlan0 added [ 554.168748][T22322] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 554.242287][T22329] netlink: 'syz.0.4286': attribute type 1 has an invalid length. [ 554.403304][T22329] 8021q: adding VLAN 0 to HW filter on device bond6 [ 554.444032][T22337] team0: Port device team_slave_0 removed [ 554.455596][T22337] bond6: (slave team_slave_0): Enslaving as a backup interface with an up link [ 554.560610][T22351] netlink: 'syz.4.4290': attribute type 16 has an invalid length. [ 554.598648][T22351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4290'. [ 554.625149][T22354] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 554.632260][T22345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4288'. [ 554.659015][T22343] xt_hashlimit: size too large, truncated to 1048576 [ 554.678127][T22351] veth0_macvtap: entered allmulticast mode [ 554.769544][T22347] syzkaller1: entered promiscuous mode [ 554.793921][T22347] syzkaller1: entered allmulticast mode [ 554.980461][T22262] Bluetooth: hci1: command 0x0406 tx timeout [ 555.229344][T22377] __nla_validate_parse: 2 callbacks suppressed [ 555.229366][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4295'. [ 555.425860][T22380] syzkaller0: entered allmulticast mode [ 555.504042][T22382] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4297'. [ 555.807275][T22408] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 555.893928][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 555.916094][ T9496] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.916234][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 555.945067][ T9496] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.975309][ T9496] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.993071][ T9496] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.637211][T22449] sctp: [Deprecated]: syz.4.4312 (pid 22449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.637211][T22449] Use struct sctp_sack_info instead [ 556.855158][T22467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4312'. [ 556.946151][T16383] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 557.014980][T22468] netlink: 'syz.2.4316': attribute type 11 has an invalid length. [ 557.272129][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4317'. [ 557.347905][T22458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4314'. [ 557.538827][T22483] syzkaller0: entered promiscuous mode [ 557.556312][T22483] syzkaller0: entered allmulticast mode [ 557.586008][T22483] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 558.168562][T22490] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4321'. [ 558.180390][T22490] syzkaller0: entered promiscuous mode [ 558.186394][T22490] syzkaller0: entered allmulticast mode [ 558.599279][T22502] macsec0: entered promiscuous mode [ 558.605655][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4325'. [ 558.616150][T22502] veth1_macvtap: left promiscuous mode [ 558.625662][T22502] macsec0 (unregistering): left promiscuous mode [ 559.300077][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 559.307464][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 559.769398][T22460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.984345][T22508] sctp: [Deprecated]: syz.1.4326 (pid 22508) Use of int in max_burst socket option. [ 559.984345][T22508] Use struct sctp_assoc_value instead [ 560.106851][T22515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.161715][T22504] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4327'. [ 560.172719][T22517] netlink: 'syz.1.4331': attribute type 23 has an invalid length. [ 560.519854][T22538] netlink: 'syz.1.4337': attribute type 3 has an invalid length. [ 561.165791][T22575] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 561.196735][T22581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 561.271558][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 561.318956][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4346'. [ 561.336409][T22582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 561.413132][T22572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.813568][T22614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.955239][T22624] netlink: 'syz.0.4351': attribute type 2 has an invalid length. [ 562.300491][T22637] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 562.754037][T22661] netlink: 'syz.2.4359': attribute type 1 has an invalid length. [ 562.851860][T22661] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4359'. [ 563.011259][T22641] bond0: Unable to set up delay as MII monitoring is disabled [ 563.075238][T22641] bond0 (unregistering): Released all slaves [ 563.853504][T22702] netlink: 'syz.4.4370': attribute type 12 has an invalid length. [ 564.053007][T22707] xt_ecn: cannot match TCP bits for non-tcp packets [ 564.069624][T22710] netlink: 'syz.3.4374': attribute type 1 has an invalid length. [ 564.074223][T22708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4372'. [ 564.164451][T22717] netlink: 'syz.4.4375': attribute type 1 has an invalid length. [ 564.327048][T22730] vxcan0: tx address claim with dest, not broadcast [ 564.350783][T22731] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4374'. [ 564.363070][T22731] netlink: 'syz.3.4374': attribute type 1 has an invalid length. [ 564.371142][T22731] netlink: 'syz.3.4374': attribute type 11 has an invalid length. [ 564.382172][T22731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4374'. [ 564.392952][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4376'. [ 564.416378][T22719] bond2: (slave veth5): Enslaving as an active interface with a down link [ 564.462922][T22710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.517616][T22718] bond2: (slave geneve2): making interface the new active one [ 564.536767][T22718] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 564.559136][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4376'. [ 564.592926][T22730] 8021q: VLANs not supported on sit0 [ 564.827524][T22732] macvtap0: entered promiscuous mode [ 564.850979][T22732] vlan0: entered promiscuous mode [ 564.870005][T22732] macvtap0: entered allmulticast mode [ 564.900474][T22732] vlan0: entered allmulticast mode [ 564.937419][ T1170] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.960453][ T1170] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 565.039131][ T1170] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 565.149628][T22755] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 565.391476][T22765] IPv6: sit1: Disabled Multicast RS [ 565.402730][T22777] netlink: 'syz.0.4387': attribute type 39 has an invalid length. [ 565.423411][T22765] sit1: entered allmulticast mode [ 565.729019][T22791] netlink: 'syz.2.4390': attribute type 1 has an invalid length. [ 565.903197][T22803] netlink: 'syz.1.4392': attribute type 29 has an invalid length. [ 565.917797][T22791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.972363][T22799] bond0: (slave geneve2): making interface the new active one [ 565.997750][T22799] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 566.159816][T22815] bond6: (slave team_slave_0): Removing an active aggregator [ 566.199674][T22815] bond6: (slave team_slave_0): Releasing backup interface [ 566.272189][T22831] netlink: 'syz.2.4397': attribute type 1 has an invalid length. [ 566.449513][T22825] syzkaller0: entered promiscuous mode [ 566.487746][T22825] syzkaller0: entered allmulticast mode [ 566.559614][T22825] __nla_validate_parse: 10 callbacks suppressed [ 566.559637][T22825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4395'. [ 567.033761][T22863] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4404'. [ 567.094754][T22863] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002 [ 567.118284][T22863] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 567.566661][T22843] syzkaller1: entered promiscuous mode [ 567.572864][T22843] syzkaller1: entered allmulticast mode [ 567.858877][T22884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4411'. [ 570.916157][T22884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4411'. [ 570.935692][T22884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4411'. [ 571.038960][T22890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4412'. [ 571.174556][T22894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4413'. [ 571.225788][T22898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4415'. [ 571.452990][T22901] syzkaller0: entered promiscuous mode [ 571.495672][T22901] syzkaller0: entered allmulticast mode [ 571.914298][T22929] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 571.993945][T22929] bond6: (slave lo): Enslaving as an active interface with an up link [ 572.010381][T22929] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 572.077741][T22940] netlink: 'syz.0.4426': attribute type 21 has an invalid length. [ 572.124131][T22940] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4426'. [ 572.163949][T22940] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4426'. [ 572.516464][T22958] bond3: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 572.536966][T22958] bond3 (unregistering): Released all slaves [ 572.692029][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4431'. [ 572.914217][T22966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 572.947164][T22968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4432'. [ 573.317366][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'. [ 573.368708][T22998] openvswitch: netlink: EtherType 50a is less than min 600 [ 573.429309][T23003] nbd: must specify an index to disconnect [ 574.116597][T23033] netlink: 'syz.1.4445': attribute type 4 has an invalid length. [ 574.116971][T23029] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4444'. [ 574.132506][T23033] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4445'. [ 574.192283][T23033] .`: renamed from bond0 (while UP) [ 574.546361][T23040] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4447'. [ 574.562190][T23044] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4449'. [ 574.834293][T23059] syzkaller0: entered promiscuous mode [ 574.865769][T23059] syzkaller0: entered allmulticast mode [ 575.976849][T23092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4458'. [ 577.444249][T23040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.750850][T23103] netlink: 'syz.1.4462': attribute type 7 has an invalid length. [ 577.772226][T23103] netlink: 'syz.1.4462': attribute type 7 has an invalid length. [ 577.806676][T23104] netlink: 'syz.2.4461': attribute type 13 has an invalid length. [ 578.180857][T23132] netlink: 'syz.1.4468': attribute type 1 has an invalid length. [ 578.197996][T23130] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4469'. [ 578.230020][T23132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4468'. [ 578.277386][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abfcc00: rx timeout, send abort [ 578.397505][T23121] syzkaller0: entered promiscuous mode [ 578.403870][T23121] syzkaller0: entered allmulticast mode [ 578.636681][T23148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4474'. [ 578.777611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abfd800: rx timeout, send abort [ 578.786231][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abfcc00: abort rx timeout. Force session deactivation [ 579.022993][T23160] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4477'. [ 579.294683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abfd800: abort rx timeout. Force session deactivation [ 579.780273][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 581.982539][T23156] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4476'. [ 582.228109][T23174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4479'. [ 582.279552][T23172] openvswitch: netlink: Message has 6 unknown bytes. [ 582.291713][T23176] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4481'. [ 582.310237][T23182] sctp: [Deprecated]: syz.3.4483 (pid 23182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.310237][T23182] Use struct sctp_sack_info instead [ 582.338596][T23176] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4481'. [ 582.389867][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4482'. [ 582.435925][T23183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4482'. [ 582.654132][T23172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.702846][T23172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.849745][T23203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.009506][T23172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.039692][T23172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.194912][T23203] syzkaller0: entered promiscuous mode [ 583.204542][T23203] syzkaller0: entered allmulticast mode [ 583.255151][T23216] vlan2: entered promiscuous mode [ 583.271260][T23216] gretap0: entered promiscuous mode [ 586.513005][T23172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.524136][T23172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.547558][T23234] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 586.896552][T23172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.920523][T23172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.099768][T23264] __nla_validate_parse: 1 callbacks suppressed [ 587.099789][T23264] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4498'. [ 587.728069][T23289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.795894][T23292] ip6tnl0: Caught tx_queue_len zero misconfig [ 587.832028][T23294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4505'. [ 587.846578][T23290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4503'. [ 587.866451][T23294] netlink: 'syz.0.4505': attribute type 7 has an invalid length. [ 587.879550][ T9495] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.890644][T23294] netlink: 'syz.0.4505': attribute type 8 has an invalid length. [ 587.905280][ T9495] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.920919][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4505'. [ 588.046816][T23303] lo: left promiscuous mode [ 588.086132][T23303] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.093958][T23303] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.247651][T23303] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 588.265946][ T9495] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.285553][ T9495] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.500824][ T9495] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.534092][ T9495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.565223][T23324] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4512'. [ 588.643466][T18516] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.655864][T23335] xt_ipcomp: unknown flags 1D [ 588.689522][T18516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.961996][T23349] syzkaller0: entered promiscuous mode [ 588.983999][T23349] syzkaller0: entered allmulticast mode [ 589.380053][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.387417][ C1] bridge0: topology change detected, propagating [ 589.394754][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.402104][ C1] bridge0: topology change detected, propagating [ 589.742406][T23364] netlink: 'syz.1.4519': attribute type 1 has an invalid length. [ 589.750387][T23364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4519'. [ 592.644880][T23359] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 592.767118][T23375] tc_dump_action: action bad kind [ 592.786216][T23378] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4520'. [ 592.796706][T23378] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4520'. [ 592.806785][T23378] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4520'. [ 593.067316][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'. [ 593.099829][T23389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4524'. [ 593.321831][T23404] netlink: 'syz.0.4530': attribute type 1 has an invalid length. [ 593.578977][T23421] netlink: 'syz.1.4533': attribute type 1 has an invalid length. [ 593.627073][T23423] IPVS: ip_vs_add_dest(): server weight less than zero [ 593.715738][T23423] : renamed from vlan0 (while UP) [ 593.933841][T23436] netlink: 'syz.0.4539': attribute type 11 has an invalid length. [ 593.942750][T23436] netlink: 'syz.0.4539': attribute type 4 has an invalid length. [ 593.953097][T23436] netlink: 'syz.0.4539': attribute type 6 has an invalid length. [ 593.963049][T23436] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.4539'. [ 593.995757][T23440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4540'. [ 594.567186][T23467] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4549'. [ 594.723413][T23480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4552'. [ 595.428602][T23520] batadv_slave_1: mtu less than device minimum [ 595.478577][T23528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4563'. [ 595.575936][T23528] openvswitch: netlink: Invalid VLAN frame [ 595.935739][T23552] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 596.161689][T23560] block nbd0: not configured, cannot reconfigure [ 596.475148][ T5640] Bluetooth: hci2: link tx timeout [ 596.489615][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 596.514404][T23575] netlink: 'syz.1.4575': attribute type 21 has an invalid length. [ 596.694196][ T5640] Bluetooth: hci2: link tx timeout [ 596.701161][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 596.723100][ T5640] Bluetooth: hci2: link tx timeout [ 596.728472][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 596.796851][T23584] netlink: 'syz.0.4579': attribute type 15 has an invalid length. [ 596.821249][T23584] netlink: 'syz.0.4579': attribute type 15 has an invalid length. [ 596.842221][T23584] netlink: 'syz.0.4579': attribute type 5 has an invalid length. [ 596.995955][T23600] netlink: 'syz.0.4581': attribute type 1 has an invalid length. [ 597.056707][T23606] netlink: 'syz.4.4582': attribute type 5 has an invalid length. [ 597.201490][T23607] bond7: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 597.244359][T23614] block nbd0: not configured, cannot reconfigure [ 597.368932][T23600] veth3: entered promiscuous mode [ 597.409736][T23600] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 597.456669][T23607] 8021q: adding VLAN 0 to HW filter on device bond7 [ 597.473483][T22809] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 597.537598][T23612] geneve2: entered promiscuous mode [ 597.600587][ T48] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 597.615473][ T5640] Bluetooth: hci2: link tx timeout [ 597.621320][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 597.719447][T23638] FAULT_INJECTION: forcing a failure. [ 597.719447][T23638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 597.750435][T23638] CPU: 1 UID: 0 PID: 23638 Comm: syz.4.4589 Not tainted syzkaller #0 PREEMPT(full) [ 597.750464][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.750477][T23638] Call Trace: [ 597.750485][T23638] [ 597.750493][T23638] dump_stack_lvl+0xe8/0x150 [ 597.750543][T23638] should_fail_ex+0x412/0x560 [ 597.750632][T23638] _copy_from_iter+0x1d3/0x1670 [ 597.750660][T23638] ? rcu_is_watching+0x15/0xb0 [ 597.750694][T23638] ? __pfx__copy_from_iter+0x10/0x10 [ 597.750727][T23638] ? netlink_sendmsg+0x650/0xb40 [ 597.750823][T23638] ? skb_put+0x11b/0x210 [ 597.750880][T23638] netlink_sendmsg+0x6c0/0xb40 [ 597.750923][T23638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.750956][T23638] ? aa_sock_msg_perm+0xf1/0x1b0 [ 597.750991][T23638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.751057][T23638] ____sys_sendmsg+0x972/0x9f0 [ 597.751079][T23638] ? __might_fault+0xaf/0x130 [ 597.751116][T23638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.751148][T23638] ? import_iovec+0x73/0xa0 [ 597.751178][T23638] ___sys_sendmsg+0x2a5/0x360 [ 597.751197][T23638] ? __lock_acquire+0x6b5/0x2cf0 [ 597.751224][T23638] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.751283][T23638] ? __fget_files+0x2a/0x420 [ 597.751319][T23638] ? __fget_files+0x3a0/0x420 [ 597.751359][T23638] __x64_sys_sendmsg+0x1bd/0x2a0 [ 597.751384][T23638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.751415][T23638] ? __pfx_ksys_write+0x10/0x10 [ 597.751461][T23638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.751485][T23638] do_syscall_64+0x174/0x580 [ 597.751509][T23638] ? trace_irq_disable+0x3b/0x140 [ 597.751540][T23638] ? clear_bhb_loop+0x40/0x90 [ 597.751565][T23638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.751585][T23638] RIP: 0033:0x7f571479ce59 [ 597.751607][T23638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.751624][T23638] RSP: 002b:00007f57155e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.751646][T23638] RAX: ffffffffffffffda RBX: 00007f5714a15fa0 RCX: 00007f571479ce59 [ 597.751661][T23638] RDX: 0000000000048080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 597.751673][T23638] RBP: 00007f57155e5090 R08: 0000000000000000 R09: 0000000000000000 [ 597.751686][T23638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.751698][T23638] R13: 00007f5714a16038 R14: 00007f5714a15fa0 R15: 00007ffe6d469628 [ 597.751732][T23638] [ 598.142816][ T5640] Bluetooth: hci2: link tx timeout [ 598.148384][ T5640] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 598.176354][T23642] C: Caught tx_queue_len zero misconfig [ 598.331459][T23651] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 598.394521][T23656] nbd: must specify a device to reconfigure [ 598.581845][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 598.664461][T23665] validate_nla: 1 callbacks suppressed [ 598.664483][T23665] netlink: 'syz.4.4598': attribute type 3 has an invalid length. [ 598.711790][T23665] netlink: 'syz.4.4598': attribute type 1 has an invalid length. [ 598.721149][T23665] __nla_validate_parse: 8 callbacks suppressed [ 598.721168][T23665] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4598'. [ 599.056207][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4604'. [ 599.066686][T23687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4604'. [ 599.291301][T23694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.314025][T23704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4608'. [ 599.331835][T23694] bond4 (unregistering): Released all slaves [ 599.354751][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4608'. [ 599.380613][T23706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.477193][T23706] netlink: 'syz.1.4609': attribute type 10 has an invalid length. [ 599.776143][T23727] netlink: 'syz.4.4616': attribute type 1 has an invalid length. [ 600.041213][T23727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.322887][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4619'. [ 600.374992][T23748] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4619'. [ 600.833137][T23773] netlink: 'syz.2.4628': attribute type 2 has an invalid length. [ 600.860128][T23773] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4628'. [ 600.916333][T23776] block nbd0: not configured, cannot reconfigure [ 600.924977][T23779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4630'. [ 601.182297][T23794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4634'. [ 601.845992][T23828] xt_hashlimit: size too large, truncated to 1048576 [ 601.955609][T23832] netlink: 'syz.4.4644': attribute type 1 has an invalid length. [ 602.531175][T23854] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.538690][T23854] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.556051][T23854] bridge0: left allmulticast mode [ 602.603051][T23863] openvswitch: netlink: Key type 30 is not supported [ 602.695530][T23854] gretap0: entered promiscuous mode [ 602.703798][T23854] vlan0: entered promiscuous mode [ 602.897509][T23871] vlan4: entered promiscuous mode [ 602.921123][T23871] bridge0: entered promiscuous mode [ 603.067960][T23884] No such timeout policy "syz1" [ 603.129842][T23888] tipc: Enabling of bearer rejected, already enabled [ 603.865955][T23909] __nla_validate_parse: 6 callbacks suppressed [ 603.865978][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4666'. [ 604.361930][T23929] xt_recent: Unsupported userspace flags (000000b1) [ 605.187996][T23966] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4684'. [ 605.239769][T23971] netlink: 'syz.4.4687': attribute type 11 has an invalid length. [ 605.409527][T23980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4687'. [ 605.520314][T23971] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.527715][T23971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.582322][T23987] Cannot find set identified by id 65534 to match [ 605.584528][T23971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.626403][T23971] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.656568][T23971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.836506][T23998] netlink: 'syz.1.4693': attribute type 21 has an invalid length. [ 605.880812][T23971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.896534][T23971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 605.909302][T23971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 605.918919][ T963] lo speed is unknown, defaulting to 1000 [ 605.926762][ T963] syú2: Port: 1 Link ACTIVE [ 605.947554][T22809] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.954930][T22809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.983241][T23998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4693'. [ 606.279156][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4697'. [ 606.312833][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4697'. [ 606.702468][T24036] veth0: entered promiscuous mode [ 606.784027][T24036] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4703'. [ 606.813602][T24034] veth0: left promiscuous mode [ 606.834330][T24045] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4706'. [ 607.063724][T24052] 8021q: VLANs not supported on xfrm0 [ 607.142262][T24063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4711'. [ 607.205575][T24052] 8021q: VLANs not supported on xfrm0 [ 607.419235][T24077] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 607.428665][T24077] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4715'. [ 608.478825][T18516] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 611.308763][T24128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.554877][T24260] __nla_validate_parse: 5 callbacks suppressed [ 611.554899][T24260] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4735'. [ 611.686491][T24267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.775386][T24267] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 611.937843][T24286] openvswitch: netlink: EtherType 50a is less than min 600 [ 612.676791][T24314] ip6gre0: Caught tx_queue_len zero misconfig [ 612.910693][T24330] netlink: 'syz.3.4747': attribute type 3 has an invalid length. [ 612.939301][T24330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4747'. [ 614.844132][T24282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.398593][T24357] netlink: 'syz.4.4755': attribute type 21 has an invalid length. [ 615.408412][T24357] IPv6: NLM_F_CREATE should be specified when creating new route [ 616.730551][T24351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 616.777738][T24363] IPv6: sit1: Disabled Multicast RS [ 616.852659][T24366] ipt_REJECT: TCP_RESET invalid for non-tcp [ 617.268078][T24398] dvmrp0: entered allmulticast mode [ 617.298977][T24413] bond4: option mode: unable to set because the bond device is up [ 617.743531][T24452] openvswitch: netlink: Unknown key attributes 2 [ 617.751231][T24451] openvswitch: netlink: Unknown key attributes 2 [ 617.758826][T24452] bridge0: entered allmulticast mode [ 617.778343][T24451] pim6reg: entered allmulticast mode [ 617.944992][T24458] nbd2: detected capacity change from 0 to 63 [ 617.960343][T24465] nbd: nbd2 already in use [ 617.985693][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4770'. [ 618.020792][T24455] nbd: must specify an index to disconnect [ 618.159851][T22262] block nbd2: Receive control failed (result -104) [ 618.206186][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4771'. [ 618.256122][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4772'. [ 618.595619][T24507] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 618.864258][T24517] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 618.908519][T24517] sctp: [Deprecated]: syz.1.4778 (pid 24517) Use of int in max_burst socket option deprecated. [ 618.908519][T24517] Use struct sctp_assoc_value instead [ 619.190014][T24531] xt_socket: unknown flags 0x8 [ 619.226852][T24501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.604301][T24550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4788'. [ 620.511980][T24589] netlink: zone id is out of range [ 620.530708][T24589] netlink: zone id is out of range [ 620.537060][T24589] netlink: zone id is out of range [ 620.570391][T24589] netlink: zone id is out of range [ 620.597572][T24589] netlink: zone id is out of range [ 620.630331][T24592] netlink: 'syz.0.4804': attribute type 61 has an invalid length. [ 620.638275][T24589] netlink: zone id is out of range [ 620.654554][T24589] netlink: zone id is out of range [ 620.657570][T24592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4804'. [ 621.151167][T24623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4814'. [ 621.183762][T24623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4814'. [ 621.195797][T24628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4815'. [ 621.209382][T24630] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 621.255017][T24633] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4817'. [ 621.336968][T24636] netlink: 'syz.2.4818': attribute type 268 has an invalid length. [ 621.377586][T24639] netlink: 'syz.3.4819': attribute type 1 has an invalid length. [ 621.441415][T24639] 8021q: adding VLAN 0 to HW filter on device bond4 [ 621.452514][T24640] bridge: RTM_NEWNEIGH with invalid ether address [ 621.501600][T24639] bond4: (slave veth0_to_bond): making interface the new active one [ 621.522115][T24639] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 621.529198][T24641] netlink: 'syz.0.4820': attribute type 21 has an invalid length. [ 621.538331][T24639] netlink: 'syz.3.4819': attribute type 1 has an invalid length. [ 621.547845][T24639] netlink: 'syz.3.4819': attribute type 2 has an invalid length. [ 621.589455][T24651] netlink: 'syz.0.4820': attribute type 21 has an invalid length. [ 621.614262][T24640] bridge: RTM_NEWNEIGH with invalid ether address [ 621.659851][T24641] netlink: 'syz.0.4820': attribute type 4 has an invalid length. [ 621.681212][T24641] netlink: 'syz.0.4820': attribute type 5 has an invalid length. [ 621.713085][T24651] netlink: 'syz.0.4820': attribute type 4 has an invalid length. [ 621.744029][T24651] __nla_validate_parse: 5 callbacks suppressed [ 621.744049][T24651] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4820'. [ 621.839279][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4824'. [ 622.428852][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4834'. [ 622.873007][T24722] xt_hashlimit: size too large, truncated to 1048576 [ 622.897710][T24723] xt_hashlimit: size too large, truncated to 1048576 [ 622.962477][T24731] net_ratelimit: 1 callbacks suppressed [ 622.962497][T24731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.982795][T24731] –: renamed from vxcan1 (while UP) [ 623.338685][T24745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4846'. [ 623.363940][T24745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4846'. [ 623.412291][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4848'. [ 623.769258][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4853'. [ 624.139162][T24792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4858'. [ 624.295575][T24792] syzkaller0: entered promiscuous mode [ 624.314824][T24792] syzkaller0: entered allmulticast mode [ 624.374247][T24801] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4861'. [ 624.508720][T24809] batadv_slave_0: mtu less than device minimum [ 624.608500][T24812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4864'. [ 625.249028][T24849] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 625.405845][T24857] netlink: zone id is out of range [ 625.439458][T24857] netlink: del zone limit has 4 unknown bytes [ 625.705178][T24876] validate_nla: 4 callbacks suppressed [ 625.705201][T24876] netlink: 'syz.3.4879': attribute type 1 has an invalid length. [ 625.825273][T24877] netlink: 'syz.3.4879': attribute type 1 has an invalid length. [ 625.867818][T24881] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 626.052458][T24898] nbd: couldn't find device at index 2958377 [ 626.155463][T24903] netlink: 'syz.2.4886': attribute type 12 has an invalid length. [ 626.178850][T24903] netlink: 'syz.2.4886': attribute type 29 has an invalid length. [ 626.372881][T24914] netlink: 'syz.0.4891': attribute type 1 has an invalid length. [ 626.407940][T24914] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 626.562124][T24931] netlink: 'syz.3.4893': attribute type 1 has an invalid length. [ 626.584507][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 626.608020][T24931] netlink: 'syz.3.4893': attribute type 2 has an invalid length. [ 626.864501][T24951] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 626.878210][T24955] __nla_validate_parse: 10 callbacks suppressed [ 626.878233][T24955] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4898'. [ 626.878912][T24951] bond9 (unregistering): Released all slaves [ 627.164991][T24963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4902'. [ 627.174903][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4902'. [ 627.188355][T24963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4902'. [ 629.384244][T24921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.708611][T24983] syzkaller0: entered promiscuous mode [ 629.733410][T24983] syzkaller0: entered allmulticast mode [ 630.131798][T25006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4916'. [ 630.161012][T25010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4916'. [ 630.206505][T25013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4913'. [ 630.218007][T24995] vlan0 (unregistering): left allmulticast mode [ 630.227536][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4913'. [ 630.235159][T24995] vlan0 (unregistering): left promiscuous mode [ 631.226552][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4922'. [ 631.234281][T25034] x_tables: duplicate underflow at hook 2 [ 631.565515][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4925'. [ 631.678739][T25050] netem: change failed [ 631.880917][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 632.003091][T25077] netlink: 'syz.1.4931': attribute type 1 has an invalid length. [ 632.017161][T25077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4931'. [ 632.186419][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4933'. [ 632.307602][T25094] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 632.367295][T25096] syzkaller0: entered promiscuous mode [ 632.373785][T25096] syzkaller0: entered allmulticast mode [ 632.571569][T25101] syzkaller0: entered promiscuous mode [ 632.577197][T25101] syzkaller0: entered allmulticast mode [ 634.534024][T25050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.545318][T25062] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4926'. [ 634.562703][T25067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4928'. [ 634.863671][T25109] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.892769][T25109] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.945306][T25120] xt_cgroup: xt_cgroup: no path or classid specified [ 635.021781][T25122] syzkaller1: entered promiscuous mode [ 635.038753][T25122] syzkaller1: entered allmulticast mode [ 635.090489][ T13] bond7: (slave ip6gretap0): link status up again after 0 ms [ 635.160393][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 635.273613][T25135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4948'. [ 635.300280][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 635.420812][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 635.438288][T25140] erspan0: entered promiscuous mode [ 635.446951][T25140] erspan0: entered allmulticast mode [ 635.451409][T25145] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4952'. [ 635.560012][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 635.730945][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 635.827486][T25161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4960'. [ 635.843587][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 635.980056][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 636.171920][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 636.208987][T25172] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4962'. [ 636.310636][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 636.561854][T25195] netlink: 'syz.4.4969': attribute type 1 has an invalid length. [ 636.573275][T25194] netlink: 'syz.1.4968': attribute type 1 has an invalid length. [ 636.582920][T25195] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4969'. [ 636.597230][T25195] netlink: 'syz.4.4969': attribute type 1 has an invalid length. [ 636.607360][T25195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4969'. [ 636.623512][T25196] 8021q: VLANs not supported on sit0 [ 636.640120][T25197] 8021q: VLANs not supported on sit0 [ 636.767223][T25195] tipc: Started in network mode [ 636.773603][T25195] tipc: Node identity 52ed130605b7, cluster identity 4711 [ 636.783522][T25195] tipc: Enabled bearer , priority 0 [ 636.918506][T25195] syzkaller0: entered promiscuous mode [ 636.938834][T25195] syzkaller0: entered allmulticast mode [ 636.958851][T25195] tipc: Resetting bearer [ 637.058287][T25217] bond8: option fail_over_mac: invalid value (16) [ 637.075712][T25217] bond8 (unregistering): Released all slaves [ 637.108767][T25222] __nla_validate_parse: 2 callbacks suppressed [ 637.108784][T25222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4974'. [ 637.152697][T25193] tipc: Resetting bearer [ 640.486865][T25193] tipc: Disabling bearer [ 640.496202][T25220] batadv_slave_1: entered allmulticast mode [ 640.503000][T25220] batadv_slave_1: left allmulticast mode [ 640.611360][ T9495] net_ratelimit: 3 callbacks suppressed [ 640.611384][ T9495] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 640.652949][T25230] syzkaller1: entered promiscuous mode [ 640.666158][T25230] syzkaller1: entered allmulticast mode [ 640.678184][ T5762] tipc: Node number set to 1465520902 [ 640.731352][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.746587][T25244] veth1_to_team: mtu less than device minimum [ 640.755040][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.847171][T25249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4982'. [ 640.890670][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 640.926560][T25254] netlink: 'syz.0.4983': attribute type 1 has an invalid length. [ 641.087774][T25254] 8021q: adding VLAN 0 to HW filter on device bond9 [ 641.217076][T25262] bond9: (slave geneve3): making interface the new active one [ 641.260970][T25262] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 641.349437][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.386888][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 641.398724][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.438925][T25267] syzkaller1: entered promiscuous mode [ 641.450864][T25267] syzkaller1: entered allmulticast mode [ 641.562800][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.572073][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 641.578066][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.841650][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 641.952478][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 641.970232][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 642.029458][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 642.128727][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 642.142606][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 642.351528][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 642.490159][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 642.626098][T25348] bond8: (slave gretap0): Device is not bonding slave [ 642.633194][T25348] bond8: option active_slave: invalid value (gretap0) [ 642.963342][T25348] bond8 (unregistering): Released all slaves [ 643.169689][T25347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5003'. [ 643.250062][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 643.381645][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 643.389799][T25371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5009'. [ 643.491022][T25373] netlink: 'syz.3.5010': attribute type 2 has an invalid length. [ 643.504713][T25373] netlink: 'syz.3.5010': attribute type 2 has an invalid length. [ 643.510142][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 643.617972][T25377] netlink: 'syz.1.5011': attribute type 1 has an invalid length. [ 643.634973][T25378] netlink: 'syz.1.5011': attribute type 1 has an invalid length. [ 643.677714][T25377] 8021q: adding VLAN 0 to HW filter on device bond8 [ 643.686493][T25378] netlink: 'syz.1.5011': attribute type 9 has an invalid length. [ 643.871838][T25391] pim6reg: left allmulticast mode [ 643.877486][T25391] bridge0: left allmulticast mode [ 644.021690][T22262] Bluetooth: hci5: command 0x0405 tx timeout [ 644.029199][T25307] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 644.046943][T25307] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 644.197636][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5021'. [ 644.225550][T25406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.289846][T25406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.367956][T25412] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5022'. [ 644.476702][T25419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5024'. [ 644.839669][T25307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 644.867212][T25307] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 644.925135][T25307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 644.940535][T25307] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 644.971011][ T36] tipc: Subscription rejected, illegal request [ 644.997339][T25444] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5030'. [ 645.045319][T25307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 645.051938][T25307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 645.175398][T25451] netlink: 'syz.3.5031': attribute type 24 has an invalid length. [ 645.465700][T25464] netlink: 'syz.3.5033': attribute type 2 has an invalid length. [ 645.489470][T25463] netlink: 'syz.3.5033': attribute type 2 has an invalid length. [ 645.691095][ T5796] net_ratelimit: 14 callbacks suppressed [ 645.691136][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 645.818056][T25481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5037'. [ 645.891814][T25485] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 645.940916][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 646.070032][ T134] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 646.115971][T25500] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5039'. [ 646.244891][T25505] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5043'. [ 646.600097][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 646.901989][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 646.975633][T25533] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 647.433344][T25563] __nla_validate_parse: 1 callbacks suppressed [ 647.433363][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5055'. [ 647.606055][T25575] x_tables: duplicate underflow at hook 2 [ 647.798416][T25581] xt_hashlimit: size too large, truncated to 1048576 [ 648.287176][ T1669] block nbd2: Possible stuck request ffff88809a610000: control (read@0,1024B). Runtime 30 seconds [ 648.301122][ T1669] block nbd2: Possible stuck request ffff88809a6101c0: control (read@1024,1024B). Runtime 30 seconds [ 648.314358][ T1669] block nbd2: Possible stuck request ffff88809a610380: control (read@2048,1024B). Runtime 30 seconds [ 648.326026][ T1669] block nbd2: Possible stuck request ffff88809a610540: control (read@3072,1024B). Runtime 30 seconds [ 650.192049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.402732][ T134] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 651.541144][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 651.563508][T25624] SET target dimension over the limit! [ 651.580785][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.700948][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 651.852846][T25642] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 651.874643][T25642] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5068'. [ 651.911014][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 652.020335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.031176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.039801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.051219][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 652.204650][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 652.252410][T25660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5073'. [ 652.304755][T25660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5073'. [ 652.365552][T25660] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5073'. [ 652.497182][T25681] netlink: 'syz.4.5079': attribute type 1 has an invalid length. [ 652.505447][T25681] netlink: 'syz.4.5079': attribute type 2 has an invalid length. [ 652.572279][T25681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5079'. [ 652.882629][T25694] netlink: 'syz.0.5082': attribute type 1 has an invalid length. [ 652.976227][T25698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5082'. [ 653.130672][T25711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5086'. [ 653.184879][T25694] 8021q: adding VLAN 0 to HW filter on device bond10 [ 653.718540][T25734] netlink: 'syz.0.5089': attribute type 3 has an invalid length. [ 653.932119][T25746] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5092'. [ 654.292881][T25766] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5098'. [ 654.427562][T25766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5098'. [ 654.455775][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5099'. [ 654.467561][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5099'. [ 654.737362][T25791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5100'. [ 654.763623][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5100'. [ 654.826191][T25791] netlink: 'syz.1.5100': attribute type 10 has an invalid length. [ 654.906471][T25794] netlink: 'syz.0.5103': attribute type 1 has an invalid length. [ 655.544666][T25834] xt_limit: Overflow, try lower: 604147548/4200216962 [ 656.511590][ T5796] net_ratelimit: 39 callbacks suppressed [ 656.511614][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 656.670769][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 656.811976][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 656.874797][T25902] netlink: 'syz.3.5121': attribute type 3 has an invalid length. [ 656.910981][T25900] netlink: 'syz.0.5120': attribute type 1 has an invalid length. [ 656.952404][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 656.966444][T25900] netlink: 'syz.0.5120': attribute type 1 has an invalid length. [ 657.061931][T25907] IPVS: set_ctl: invalid protocol: 34061 51.164.43.134:61578 [ 657.130114][T22793] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 657.140179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.148861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.157455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.181120][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.280926][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 657.307834][T25922] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.341812][T25922] netlink: 'syz.1.5127': attribute type 1 has an invalid length. [ 658.216324][T25970] bond9: entered promiscuous mode [ 658.269394][T25970] __nla_validate_parse: 5 callbacks suppressed [ 658.269417][T25970] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5139'. [ 658.377466][T25979] veth0_to_bond: Caught tx_queue_len zero misconfig [ 658.730113][T25989] netlink: 'syz.2.5143': attribute type 3 has an invalid length. [ 659.274102][T26015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5152'. [ 659.338501][T26020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5154'. [ 659.344091][T26015] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 659.392799][T26023] netlink: 'syz.1.5152': attribute type 39 has an invalid length. [ 659.403644][T26015] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 659.471243][T26015] gretap2: entered promiscuous mode [ 659.516417][T26015] gretap2: entered allmulticast mode [ 659.755087][T26041] tunl0: entered promiscuous mode [ 659.796273][T26041] netlink: 'syz.0.5158': attribute type 4 has an invalid length. [ 659.819809][T26041] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5158'. [ 659.938154][T26033] ipvlan3: entered promiscuous mode [ 660.017171][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5162'. [ 660.027966][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5162'. [ 660.170778][T26067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5164'. [ 660.466423][T26077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5167'. [ 660.489760][T26077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5167'. [ 660.537418][T26077] team0: entered promiscuous mode [ 660.555887][T26077] team_slave_0: entered promiscuous mode [ 660.597446][T26077] team_slave_1: entered promiscuous mode [ 660.631803][T26077] bond0: entered promiscuous mode [ 660.637027][T26077] bond_slave_0: entered promiscuous mode [ 660.647674][T26077] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 660.672326][T26088] netlink: 'syz.1.5170': attribute type 7 has an invalid length. [ 660.679639][T26090] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5171'. [ 660.910272][T26092] netlink: 'syz.0.5172': attribute type 2 has an invalid length. [ 660.988913][T26110] Bluetooth: MGMT ver 1.23 [ 661.125671][T26113] xt_policy: output policy not valid in PREROUTING and INPUT [ 661.615616][T22809] net_ratelimit: 34 callbacks suppressed [ 661.615641][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 661.654844][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.702279][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.713989][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.729142][T22809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.739822][T22809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.769318][T26144] netlink: 'syz.3.5185': attribute type 30 has an invalid length. [ 661.830021][T22793] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 661.940901][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 661.968990][T26154] Cannot find del_set index 3 as target [ 661.971445][T26156] netlink: 'syz.0.5189': attribute type 6 has an invalid length. [ 661.993372][T26156] netlink: 'syz.0.5189': attribute type 5 has an invalid length. [ 662.070028][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 662.091966][T26164] netlink: 'syz.3.5190': attribute type 29 has an invalid length. [ 662.129524][T26164] netlink: 'syz.3.5190': attribute type 29 has an invalid length. [ 662.165487][T26164] xt_ecn: cannot match TCP bits for non-tcp packets [ 662.200508][T22793] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 663.043137][T26226] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 663.246312][T26229] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 663.271224][T26229] syzkaller1: Refused to change device type [ 663.298302][T26234] syzkaller0: entered promiscuous mode [ 663.320339][ T29] syzkaller1: tun_net_xmit 90 [ 663.320705][T26234] syzkaller0: entered allmulticast mode [ 663.331256][ T29] syzkaller1: tun_net_xmit 90 [ 663.345557][T22809] syzkaller1: tun_net_xmit 86 [ 663.438514][T26240] wireguard: wg0: Could not create IPv4 socket [ 663.443687][T26243] __nla_validate_parse: 64 callbacks suppressed [ 663.443709][T26243] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5213'. [ 663.603422][T26247] bridge0: port 3(veth1_to_bridge) entered blocking state [ 663.613363][T26247] bridge0: port 3(veth1_to_bridge) entered disabled state [ 663.622672][T26247] veth1_to_bridge: entered allmulticast mode [ 663.641558][T26247] veth1_to_bridge: entered promiscuous mode [ 663.877718][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5220'. [ 663.969235][T26271] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5220'. [ 664.022488][T26276] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5223'. [ 664.103188][T26284] validate_nla: 2 callbacks suppressed [ 664.103211][T26284] netlink: 'syz.1.5225': attribute type 1 has an invalid length. [ 664.156255][T26287] x_tables: duplicate underflow at hook 3 [ 664.164161][T26284] 8021q: adding VLAN 0 to HW filter on device bond10 [ 664.177515][T26280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5224'. [ 664.210249][T26284] vlan2: entered promiscuous mode [ 664.215376][T26284] bond10: entered promiscuous mode [ 664.221827][T26284] vlan2: entered allmulticast mode [ 664.227474][T26284] bond10: entered allmulticast mode [ 664.301153][T26284] bond10: (slave bridge5): making interface the new active one [ 664.308969][T26284] bridge5: entered promiscuous mode [ 664.316136][T26284] bridge5: entered allmulticast mode [ 664.324287][T26284] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 664.342016][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5228'. [ 664.373272][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5228'. [ 664.818850][T26322] IPv6: sit2: Disabled Multicast RS [ 664.832392][T26322] sit2: entered allmulticast mode [ 664.853123][T26324] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5236'. [ 664.862935][T26324] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5236'. [ 664.875758][T26326] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 664.886533][T26326] ÿÿ: renamed from gretap0 (while UP) [ 664.917833][T26322] IPv6: sit2: Disabled Multicast RS [ 664.931765][T26322] sit2: entered allmulticast mode [ 665.028785][T26322] IPv6: sit2: Disabled Multicast RS [ 665.052747][T26322] sit2: entered allmulticast mode [ 665.058421][T26334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5241'. [ 665.101981][T26334] netlink: 'syz.1.5241': attribute type 1 has an invalid length. [ 665.119416][T26334] netlink: 'syz.1.5241': attribute type 2 has an invalid length. [ 665.152121][T26322] IPv6: sit2: Disabled Multicast RS [ 665.167178][T26322] sit2: entered allmulticast mode [ 665.255314][T26322] IPv6: sit2: Disabled Multicast RS [ 665.284574][T26322] sit2: entered allmulticast mode [ 665.342957][T26341] netdevsim netdevsim4: Direct firmware load for 1 failed with error -2 [ 665.353748][T26341] netdevsim netdevsim4: Falling back to sysfs fallback for: 1 [ 665.388965][T26322] IPv6: sit2: Disabled Multicast RS [ 665.411969][T26322] sit2: entered allmulticast mode [ 665.574638][T26322] IPv6: sit2: Disabled Multicast RS [ 665.581718][T26322] sit2: entered allmulticast mode [ 665.631352][T26355] netlink: 'syz.1.5247': attribute type 4 has an invalid length. [ 666.456828][T26405] syzkaller1: entered promiscuous mode [ 666.518953][T26405] syzkaller1: entered allmulticast mode [ 666.861273][T18516] net_ratelimit: 40 callbacks suppressed [ 666.861295][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 667.011351][T26414] netlink: 'syz.2.5263': attribute type 1 has an invalid length. [ 667.020332][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 667.175863][T26414] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.190312][ T1170] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 667.229830][T26428] netlink: 'syz.4.5265': attribute type 1 has an invalid length. [ 667.240507][T26421] bond4: (slave geneve3): making interface the new active one [ 667.248534][T26421] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 667.264995][T26427] netlink: 'syz.0.5267': attribute type 5 has an invalid length. [ 667.519978][ T1170] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 667.547304][T26423] xt_ipcomp: unknown flags 1D [ 667.811162][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 668.066114][T26447] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 668.130788][T26467] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 668.203091][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 668.225149][T26460] netlink: 'syz.0.5275': attribute type 8 has an invalid length. [ 668.340522][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 668.470324][T22793] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 668.539453][T26486] netlink: 'syz.1.5284': attribute type 4 has an invalid length. [ 668.593643][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 668.987798][T26508] bond11: (slave bridge2): Enslaving as an active interface with an up link [ 669.585561][T26543] __nla_validate_parse: 8 callbacks suppressed [ 669.585585][T26543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5298'. [ 669.632571][T26543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5298'. [ 669.642789][T26546] netlink: 'syz.2.5299': attribute type 10 has an invalid length. [ 669.803468][T26553] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 669.826753][T26554] IPVS: set_ctl: invalid protocol: 38 115.104.0.0:0 [ 670.233234][T26578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5306'. [ 670.316275][T26580] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5306'. [ 670.673277][T26591] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5312'. [ 670.719714][T26594] tipc: Enabled bearer , priority 0 [ 670.734936][T26591] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5312'. [ 670.921429][T26589] syzkaller0: entered promiscuous mode [ 670.935205][T26589] syzkaller0: entered allmulticast mode [ 670.945452][T26589] tipc: Resetting bearer [ 670.952003][T26594] tipc: Enabling of bearer rejected, already enabled [ 670.965741][T26596] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5314'. [ 670.971504][T26598] ip6gre2: entered allmulticast mode [ 670.991409][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.003573][T26607] xt_hashlimit: size too large, truncated to 1048576 [ 671.014135][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.032142][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.059709][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.085056][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.129493][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.169603][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.204895][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.243142][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.264170][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.328565][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.341091][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.372057][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.428634][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.440849][T26594] tipc: Enabling of bearer rejected, already enabled [ 671.625497][T26624] IPVS: set_ctl: invalid protocol: 12 172.20.20.46:20001 [ 671.769335][T22804] tipc: Resetting bearer [ 671.779785][T26588] tipc: Resetting bearer [ 671.875206][T26638] net_ratelimit: 18 callbacks suppressed [ 671.875228][T26638] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 675.205956][T26588] tipc: Disabling bearer [ 675.221678][T26635] netlink: 'syz.3.5325': attribute type 1 has an invalid length. [ 675.262052][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 675.387285][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 675.467976][T26643] netlink: 'syz.3.5327': attribute type 27 has an invalid length. [ 675.491212][T26643] netlink: 'syz.3.5327': attribute type 4 has an invalid length. [ 675.506173][T26643] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5327'. [ 675.519649][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 675.673293][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 675.788506][T26654] bond12: entered promiscuous mode [ 675.821655][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 675.970015][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 676.103183][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 676.279778][T26687] xt_connbytes: Forcing CT accounting to be enabled [ 676.282019][T26689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5344'. [ 676.300137][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 676.418485][T26701] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 676.426280][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 676.468120][T26687] syzkaller0: entered promiscuous mode [ 676.474303][T26687] syzkaller0: entered allmulticast mode [ 676.511650][T26692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5344'. [ 676.546144][T26692] nbd: nbd64 already in use [ 676.915894][T23406] udevd[23406]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 677.000128][T22807] net_ratelimit: 2 callbacks suppressed [ 677.000150][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 677.015931][T26726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5352'. [ 677.137756][ T1170] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 677.183973][T26731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5354'. [ 677.270199][ T1170] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 677.391380][T22809] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 677.501176][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 677.630660][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 677.750167][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 677.972777][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 678.240170][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 678.340921][ T1669] block nbd2: Possible stuck request ffff88809a610000: control (read@0,1024B). Runtime 60 seconds [ 678.351764][ T1669] block nbd2: Possible stuck request ffff88809a6101c0: control (read@1024,1024B). Runtime 60 seconds [ 678.362887][ T1669] block nbd2: Possible stuck request ffff88809a610380: control (read@2048,1024B). Runtime 60 seconds [ 678.373914][ T1669] block nbd2: Possible stuck request ffff88809a610540: control (read@3072,1024B). Runtime 60 seconds [ 679.800560][ T5796] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 680.015035][ T1170] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 680.140133][ T1170] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 680.229319][T26785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5370'. [ 680.271387][T26785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5370'. [ 680.336579][T26794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5371'. [ 680.750753][T26804] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5374'. [ 681.083518][T26827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5374'. [ 681.826971][T26861] netlink: 45 bytes leftover after parsing attributes in process `syz.1.5384'. [ 681.943073][T26863] netlink: 'syz.2.5385': attribute type 1 has an invalid length. [ 681.971855][T26863] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5385'. [ 682.002048][T26863] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5385'. [ 682.040915][T26863] netlink: 'syz.2.5385': attribute type 1 has an invalid length. [ 682.086679][T26863] netlink: 'syz.2.5385': attribute type 8 has an invalid length. [ 682.102848][T22804] net_ratelimit: 16 callbacks suppressed [ 682.102870][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 682.118424][T26863] netlink: 582 bytes leftover after parsing attributes in process `syz.2.5385'. [ 682.247252][T26872] lo: entered promiscuous mode [ 682.255070][T26872] netlink: 'syz.4.5389': attribute type 2 has an invalid length. [ 682.263464][T26872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.285816][ T5763] lo speed is unknown, defaulting to 1000 [ 682.293308][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 682.303870][ T5763] syú2: Port: 1 Link DOWN [ 682.425889][T26876] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 682.521188][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 682.744193][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 682.890120][T22804] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 683.021139][T22793] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 683.065710][T26880] siw: device registration error -23 [ 683.160334][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 683.290254][T18516] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 683.431057][T26920] veth1_to_bond: entered allmulticast mode [ 683.437404][T26917] veth1_to_bond: left allmulticast mode [ 683.592371][T26934] tipc: Enabling of bearer rejected, failed to enable media [ 683.730555][T26940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5405'. [ 683.763570][T26930] can: request_module (can-proto-0) failed. [ 684.532436][T26972] siw: device registration error -23 [ 685.181788][T27003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5424'. [ 688.169539][ T4998] udevd[4998]: worker [24026] /devices/virtual/block/nbd2 is taking a long time [ 688.833792][T26995] netlink: 'syz.2.5423': attribute type 2 has an invalid length. [ 688.940527][T22807] net_ratelimit: 12 callbacks suppressed [ 688.940560][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 689.001541][T27022] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 689.121640][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 689.129384][T27033] sctp: [Deprecated]: syz.2.5430 (pid 27033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.129384][T27033] Use struct sctp_sack_info instead [ 689.185432][T27031] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5432'. [ 689.196111][T27032] sctp: [Deprecated]: syz.2.5430 (pid 27032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.196111][T27032] Use struct sctp_sack_info instead [ 689.241104][T27036] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5431'. [ 689.241842][T27034] xt_hashlimit: size too large, truncated to 1048576 [ 689.267438][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 689.390007][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 689.570331][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 689.647759][ T30] audit: type=1804 audit(1781077458.452:23): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5434" name="/newroot/489/cgroup.controllers" dev="tmpfs" ino=2513 res=1 errno=0 [ 689.716225][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 689.744713][ T30] audit: type=1800 audit(1781077458.452:24): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5434" name="cgroup.controllers" dev="tmpfs" ino=2513 res=0 errno=0 [ 689.900322][ T48] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 690.070647][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 690.111898][T27077] netlink: 'syz.0.5440': attribute type 26 has an invalid length. [ 690.200274][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 690.321053][T27087] ipt_ECN: cannot use operation on non-tcp rule [ 690.370740][T27087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.424817][T27089] ipt_ECN: cannot use operation on non-tcp rule [ 690.709318][T27100] netlink: 'syz.0.5445': attribute type 1 has an invalid length. [ 690.799768][T27100] 8021q: adding VLAN 0 to HW filter on device bond12 [ 690.881961][T27104] bond12: (slave gretap2): making interface the new active one [ 690.910552][T27104] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 691.370657][T27134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5453'. [ 691.927533][ T36] bond0: (slave bond_slave_0): interface is now down [ 691.993103][ T36] bond0: (slave bond_slave_1): interface is now down [ 692.029523][ T36] bond0: (slave team0): interface is now down [ 692.237857][ T36] bond0: now running without any active interface! [ 692.359718][T27184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5464'. [ 692.383579][T27184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5464'. [ 692.436731][T27184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5464'. [ 692.462190][T27184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5464'. [ 692.528175][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5467'. [ 692.607282][T27193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5466'. [ 692.774862][T27201] netlink: 'syz.1.5468': attribute type 1 has an invalid length. [ 692.892384][T27208] netlink: 'syz.1.5468': attribute type 2 has an invalid length. [ 692.955054][T22262] block nbd0: Receive control failed (result -1) [ 692.992746][T27201] bond13: entered promiscuous mode [ 692.999086][T27201] 8021q: adding VLAN 0 to HW filter on device bond13 [ 693.011962][T27214] netlink: 'syz.2.5472': attribute type 1 has an invalid length. [ 693.030205][T27210] netlink: 51 bytes leftover after parsing attributes in process `syz.4.5470'. [ 693.052532][T27214] netlink: 'syz.2.5472': attribute type 1 has an invalid length. [ 693.061619][T27214] netlink: 'syz.2.5472': attribute type 8 has an invalid length. [ 693.990112][T16382] net_ratelimit: 23 callbacks suppressed [ 693.990134][T16382] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 694.130411][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 694.339675][T27281] __nla_validate_parse: 11 callbacks suppressed [ 694.339696][T27281] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5489'. [ 694.410874][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 694.463742][T27288] xt_l2tp: v2 sid > 0xffff: 1114112 [ 694.531958][T16380] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 694.621680][T27295] Cannot find del_set index 4 as target [ 694.650615][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 694.791265][T16380] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 694.921295][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 694.988700][T27313] netlink: 'syz.1.5499': attribute type 3 has an invalid length. [ 695.047179][T27316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5500'. [ 695.063050][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 695.203439][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 695.344261][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 695.437723][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5502'. [ 695.460645][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5502'. [ 695.590484][T27334] netlink: 'syz.4.5506': attribute type 6 has an invalid length. [ 695.625598][T27332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5505'. [ 695.632329][T27334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5506'. [ 695.699433][T27334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5506'. [ 695.718077][T27332] [ 695.720465][T27332] ====================================================== [ 695.727596][T27332] WARNING: possible circular locking dependency detected [ 695.734631][T27332] syzkaller #0 Not tainted [ 695.739056][T27332] ------------------------------------------------------ [ 695.746247][T27332] syz.3.5505/27332 is trying to acquire lock: [ 695.752312][T27332] ffff8880286ee518 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 695.761295][T27332] [ 695.761295][T27332] but task is already holding lock: [ 695.768659][T27332] ffff88802a053418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 695.778330][T27332] [ 695.778330][T27332] which lock already depends on the new lock. [ 695.778330][T27332] [ 695.788741][T27332] [ 695.788741][T27332] the existing dependency chain (in reverse order) is: [ 695.797763][T27332] [ 695.797763][T27332] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 695.805622][T27332] __mutex_lock+0x1a3/0x1550 [ 695.810757][T27332] elevator_change+0x1b3/0x450 [ 695.816235][T27332] elevator_set_none+0xb5/0x140 [ 695.821620][T27332] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 695.828691][T27332] nbd_start_device+0x17f/0xb10 [ 695.834156][T27332] nbd_genl_connect+0x165b/0x1cf0 [ 695.839805][T27332] genl_family_rcv_msg_doit+0x22a/0x330 [ 695.845880][T27332] genl_rcv_msg+0x61c/0x7a0 [ 695.850910][T27332] netlink_rcv_skb+0x232/0x4b0 [ 695.856204][T27332] genl_rcv+0x28/0x40 [ 695.860711][T27332] netlink_unicast+0x75c/0x8e0 [ 695.866027][T27332] netlink_sendmsg+0x813/0xb40 [ 695.871325][T27332] ____sys_sendmsg+0x972/0x9f0 [ 695.876616][T27332] ___sys_sendmsg+0x2a5/0x360 [ 695.881823][T27332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 695.887281][T27332] do_syscall_64+0x174/0x580 [ 695.892400][T27332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.898997][T27332] [ 695.898997][T27332] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 695.907785][T27332] blk_alloc_queue+0x546/0x680 [ 695.913212][T27332] __blk_mq_alloc_disk+0x197/0x390 [ 695.918875][T27332] nbd_dev_add+0x499/0xb50 [ 695.923915][T27332] nbd_init+0x168/0x1f0 [ 695.928855][T27332] do_one_initcall+0x250/0x870 [ 695.934356][T27332] do_initcall_level+0x104/0x190 [ 695.939920][T27332] do_initcalls+0x59/0xa0 [ 695.944812][T27332] kernel_init_freeable+0x2a6/0x3e0 [ 695.950566][T27332] kernel_init+0x1d/0x1d0 [ 695.955480][T27332] ret_from_fork+0x514/0xb70 [ 695.960697][T27332] ret_from_fork_asm+0x1a/0x30 [ 695.965990][T27332] [ 695.965990][T27332] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 695.973209][T27332] fs_reclaim_acquire+0x71/0x100 [ 695.978677][T27332] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 695.985097][T27332] __alloc_skb+0x1d0/0x7d0 [ 695.990073][T27332] __ip6_append_data+0x2d3c/0x3f60 [ 695.995881][T27332] ip6_append_data+0x10f/0x280 [ 696.001211][T27332] rawv6_sendmsg+0x12d3/0x18e0 [ 696.006633][T27332] ____sys_sendmsg+0x80a/0x9f0 [ 696.011940][T27332] ___sys_sendmsg+0x2a5/0x360 [ 696.017288][T27332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 696.022849][T27332] do_syscall_64+0x174/0x580 [ 696.027981][T27332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.034589][T27332] [ 696.034589][T27332] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 696.042482][T27332] lock_sock_nested+0x41/0x100 [ 696.048039][T27332] inet_shutdown+0x6a/0x390 [ 696.053220][T27332] nbd_mark_nsock_dead+0x2e9/0x560 [ 696.058967][T27332] recv_work+0x1c2e/0x1d40 [ 696.063918][T27332] process_scheduled_works+0xb5d/0x1860 [ 696.070037][T27332] worker_thread+0xa53/0xfc0 [ 696.075238][T27332] kthread+0x389/0x470 [ 696.079835][T27332] ret_from_fork+0x514/0xb70 [ 696.084967][T27332] ret_from_fork_asm+0x1a/0x30 [ 696.090261][T27332] [ 696.090261][T27332] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 696.097917][T27332] __mutex_lock+0x1a3/0x1550 [ 696.103311][T27332] nbd_queue_rq+0x37b/0x1100 [ 696.108463][T27332] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 696.114573][T27332] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 696.121580][T27332] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 696.128106][T27332] blk_mq_run_hw_queue+0x348/0x4f0 [ 696.133863][T27332] blk_mq_dispatch_list+0xd16/0xe10 [ 696.139867][T27332] blk_mq_flush_plug_list+0x48d/0x570 [ 696.145873][T27332] __blk_flush_plug+0x3ed/0x4d0 [ 696.151283][T27332] __submit_bio+0x28d/0x580 [ 696.156327][T27332] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 696.162491][T27332] block_read_full_folio+0x599/0x830 [ 696.168402][T27332] filemap_read_folio+0x137/0x3b0 [ 696.174110][T27332] do_read_cache_folio+0x358/0x590 [ 696.179849][T27332] read_part_sector+0xb6/0x2b0 [ 696.185218][T27332] adfspart_check_ICS+0xb1/0x960 [ 696.191203][T27332] bdev_disk_changed+0x817/0x1770 [ 696.196763][T27332] blkdev_get_whole+0x380/0x510 [ 696.202144][T27332] bdev_open+0x31e/0xd30 [ 696.206926][T27332] blkdev_open+0x470/0x610 [ 696.211872][T27332] do_dentry_open+0x822/0x13a0 [ 696.217166][T27332] vfs_open+0x3b/0x340 [ 696.221759][T27332] path_openat+0x2e08/0x3860 [ 696.226902][T27332] do_file_open+0x23e/0x4a0 [ 696.231931][T27332] do_sys_openat2+0x113/0x200 [ 696.237222][T27332] __x64_sys_openat+0x138/0x170 [ 696.242707][T27332] do_syscall_64+0x174/0x580 [ 696.247832][T27332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.254252][T27332] [ 696.254252][T27332] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 696.261557][T27332] __mutex_lock+0x1a3/0x1550 [ 696.266708][T27332] nbd_queue_rq+0xc6/0x1100 [ 696.271745][T27332] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 696.277820][T27332] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 696.284676][T27332] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 696.291189][T27332] blk_mq_run_hw_queue+0x348/0x4f0 [ 696.296826][T27332] blk_mq_dispatch_list+0xd16/0xe10 [ 696.302834][T27332] blk_mq_flush_plug_list+0x48d/0x570 [ 696.308791][T27332] __blk_flush_plug+0x3ed/0x4d0 [ 696.314348][T27332] __submit_bio+0x28d/0x580 [ 696.319386][T27332] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 696.325545][T27332] block_read_full_folio+0x599/0x830 [ 696.331359][T27332] filemap_read_folio+0x137/0x3b0 [ 696.337008][T27332] do_read_cache_folio+0x358/0x590 [ 696.342736][T27332] read_part_sector+0xb6/0x2b0 [ 696.348068][T27332] adfspart_check_ICS+0xb1/0x960 [ 696.353800][T27332] bdev_disk_changed+0x817/0x1770 [ 696.359445][T27332] blkdev_get_whole+0x380/0x510 [ 696.364841][T27332] bdev_open+0x31e/0xd30 [ 696.369616][T27332] blkdev_open+0x470/0x610 [ 696.374560][T27332] do_dentry_open+0x822/0x13a0 [ 696.379857][T27332] vfs_open+0x3b/0x340 [ 696.384666][T27332] path_openat+0x2e08/0x3860 [ 696.389813][T27332] do_file_open+0x23e/0x4a0 [ 696.394861][T27332] do_sys_openat2+0x113/0x200 [ 696.400072][T27332] __x64_sys_openat+0x138/0x170 [ 696.405448][T27332] do_syscall_64+0x174/0x580 [ 696.410564][T27332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.416991][T27332] [ 696.416991][T27332] -> #0 (set->srcu){.+.+}-{0:0}: [ 696.424121][T27332] __lock_acquire+0x15a5/0x2cf0 [ 696.429583][T27332] lock_sync+0x9d/0x120 [ 696.434261][T27332] __synchronize_srcu+0xca/0x300 [ 696.439722][T27332] elevator_switch+0x1e8/0x7a0 [ 696.445183][T27332] elevator_change+0x2cc/0x450 [ 696.450486][T27332] elevator_set_default+0x36c/0x430 [ 696.456218][T27332] blk_register_queue+0x3e9/0x4e0 [ 696.461801][T27332] __add_disk+0x677/0xd50 [ 696.466658][T27332] add_disk_fwnode+0xfb/0x480 [ 696.471864][T27332] nbd_dev_add+0x72c/0xb50 [ 696.476828][T27332] nbd_genl_connect+0x962/0x1cf0 [ 696.482306][T27332] genl_family_rcv_msg_doit+0x22a/0x330 [ 696.488385][T27332] genl_rcv_msg+0x61c/0x7a0 [ 696.493409][T27332] netlink_rcv_skb+0x232/0x4b0 [ 696.498698][T27332] genl_rcv+0x28/0x40 [ 696.503204][T27332] netlink_unicast+0x75c/0x8e0 [ 696.508509][T27332] netlink_sendmsg+0x813/0xb40 [ 696.513901][T27332] ____sys_sendmsg+0x972/0x9f0 [ 696.519290][T27332] ___sys_sendmsg+0x2a5/0x360 [ 696.524572][T27332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 696.530028][T27332] do_syscall_64+0x174/0x580 [ 696.535234][T27332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.541844][T27332] [ 696.541844][T27332] other info that might help us debug this: [ 696.541844][T27332] [ 696.552082][T27332] Chain exists of: [ 696.552082][T27332] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 696.552082][T27332] [ 696.565993][T27332] Possible unsafe locking scenario: [ 696.565993][T27332] [ 696.573527][T27332] CPU0 CPU1 [ 696.578894][T27332] ---- ---- [ 696.584429][T27332] lock(&q->elevator_lock); [ 696.589025][T27332] lock(&q->q_usage_counter(io)#49); [ 696.596925][T27332] lock(&q->elevator_lock); [ 696.604125][T27332] sync(set->srcu); [ 696.608023][T27332] [ 696.608023][T27332] *** DEADLOCK *** [ 696.608023][T27332] [ 696.616196][T27332] 6 locks held by syz.3.5505/27332: [ 696.621495][T27332] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.629717][T27332] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 696.638786][T27332] #2: ffff888061ea21c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 696.649332][T27332] #3: ffff88802a0534a0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0 [ 696.659187][T27332] #4: ffff88802a052f28 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 696.670175][T27332] #5: ffff88802a053418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 696.680051][T27332] [ 696.680051][T27332] stack backtrace: [ 696.685960][T27332] CPU: 1 UID: 0 PID: 27332 Comm: syz.3.5505 Not tainted syzkaller #0 PREEMPT(full) [ 696.685981][T27332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 696.685992][T27332] Call Trace: [ 696.686001][T27332] [ 696.686009][T27332] dump_stack_lvl+0xe8/0x150 [ 696.686032][T27332] print_circular_bug+0x2e1/0x300 [ 696.686056][T27332] check_noncircular+0x12e/0x150 [ 696.686079][T27332] __lock_acquire+0x15a5/0x2cf0 [ 696.686101][T27332] ? lockdep_unlock+0x5d/0xd0 [ 696.686115][T27332] ? __lock_acquire+0x146e/0x2cf0 [ 696.686133][T27332] ? __lock_acquire+0x146e/0x2cf0 [ 696.686150][T27332] ? __synchronize_srcu+0xb6/0x300 [ 696.686165][T27332] lock_sync+0x9d/0x120 [ 696.686181][T27332] ? __synchronize_srcu+0xb6/0x300 [ 696.686198][T27332] __synchronize_srcu+0xca/0x300 [ 696.686214][T27332] ? do_raw_spin_lock+0x12b/0x2f0 [ 696.686236][T27332] ? __pfx___synchronize_srcu+0x10/0x10 [ 696.686256][T27332] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 696.686281][T27332] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 696.686306][T27332] ? synchronize_srcu+0x20d/0x270 [ 696.686322][T27332] elevator_switch+0x1e8/0x7a0 [ 696.686342][T27332] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 696.686367][T27332] elevator_change+0x2cc/0x450 [ 696.686386][T27332] ? do_raw_spin_unlock+0xf5/0x210 [ 696.686410][T27332] elevator_set_default+0x36c/0x430 [ 696.686430][T27332] ? __pfx_elevator_set_default+0x10/0x10 [ 696.686453][T27332] ? disk_register_independent_access_ranges+0x2db/0x380 [ 696.686472][T27332] ? blk_crypto_sysfs_register+0x11c/0x170 [ 696.686545][T27332] blk_register_queue+0x3e9/0x4e0 [ 696.686570][T27332] __add_disk+0x677/0xd50 [ 696.686596][T27332] ? down_read+0x270/0x2e0 [ 696.686615][T27332] add_disk_fwnode+0xfb/0x480 [ 696.686640][T27332] nbd_dev_add+0x72c/0xb50 [ 696.686666][T27332] ? __pfx_nbd_dev_add+0x10/0x10 [ 696.686696][T27332] ? bpf_lsm_capable+0x9/0x20 [ 696.686713][T27332] ? security_capable+0x7e/0x2c0 [ 696.686773][T27332] ? radix_tree_lookup+0x25c/0x290 [ 696.686841][T27332] nbd_genl_connect+0x962/0x1cf0 [ 696.686871][T27332] ? __pfx___nla_validate_parse+0x10/0x10 [ 696.686916][T27332] ? __pfx_nbd_genl_connect+0x10/0x10 [ 696.686942][T27332] ? rcu_is_watching+0x15/0xb0 [ 696.686960][T27332] ? trace_kmalloc+0x2a/0xf0 [ 696.686984][T27332] ? __nla_parse+0x40/0x60 [ 696.687005][T27332] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 696.687026][T27332] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 696.687048][T27332] genl_family_rcv_msg_doit+0x22a/0x330 [ 696.687071][T27332] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 696.687093][T27332] ? __lock_acquire+0x6b5/0x2cf0 [ 696.687113][T27332] genl_rcv_msg+0x61c/0x7a0 [ 696.687133][T27332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.687151][T27332] ? __pfx_nbd_genl_connect+0x10/0x10 [ 696.687179][T27332] netlink_rcv_skb+0x232/0x4b0 [ 696.687203][T27332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.687222][T27332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.687251][T27332] ? down_read+0x270/0x2e0 [ 696.687267][T27332] ? genl_rcv+0xd/0x40 [ 696.687285][T27332] genl_rcv+0x28/0x40 [ 696.687302][T27332] netlink_unicast+0x75c/0x8e0 [ 696.687327][T27332] netlink_sendmsg+0x813/0xb40 [ 696.687356][T27332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.687382][T27332] ? aa_sock_msg_perm+0xf1/0x1b0 [ 696.687414][T27332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.687437][T27332] ____sys_sendmsg+0x972/0x9f0 [ 696.687453][T27332] ? __might_fault+0xaf/0x130 [ 696.687475][T27332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.687494][T27332] ? import_iovec+0x73/0xa0 [ 696.687515][T27332] ___sys_sendmsg+0x2a5/0x360 [ 696.687529][T27332] ? __lock_acquire+0x6b5/0x2cf0 [ 696.687547][T27332] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.687564][T27332] ? futex_wake+0x4ac/0x580 [ 696.687595][T27332] ? __fget_files+0x2a/0x420 [ 696.687615][T27332] ? __fget_files+0x3a0/0x420 [ 696.687637][T27332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 696.687653][T27332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.687672][T27332] ? rcu_is_watching+0x15/0xb0 [ 696.687694][T27332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.687711][T27332] do_syscall_64+0x174/0x580 [ 696.687727][T27332] ? trace_irq_disable+0x3b/0x140 [ 696.687751][T27332] ? clear_bhb_loop+0x40/0x90 [ 696.687769][T27332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.687785][T27332] RIP: 0033:0x7f260a59ce59 [ 696.687802][T27332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.687817][T27332] RSP: 002b:00007f260b4ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.687837][T27332] RAX: ffffffffffffffda RBX: 00007f260a815fa0 RCX: 00007f260a59ce59 [ 696.687855][T27332] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 696.687866][T27332] RBP: 00007f260a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 696.687876][T27332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.687886][T27332] R13: 00007f260a816038 R14: 00007f260a815fa0 R15: 00007ffd98423d98 [ 696.687904][T27332] [ 697.334084][T23373] udevd[23373]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 697.352242][T23373] udevd[23373]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 699.090106][T16382] net_ratelimit: 20 callbacks suppressed [ 699.090129][T16382] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 699.220283][T16382] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 699.330021][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 699.440049][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 699.560082][ T12] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 699.670046][T16382] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 699.780081][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 699.890076][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 700.000075][ T13] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 700.109994][T16382] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.140203][T22807] net_ratelimit: 35 callbacks suppressed [ 704.140228][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.260246][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.370278][T16382] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.480261][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.590168][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.700083][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.810152][T22807] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 704.920271][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 705.030211][ T36] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 705.140350][T16382] bond7: (slave ip6gretap0): failed to get link speed/duplex