last executing test programs: 6m26.463784335s ago: executing program 4 (id=7822): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x1}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) 6m26.346509863s ago: executing program 4 (id=7823): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x40010, r0, 0x1a3f3000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x1, [0x8]}, 0xa) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @mcast2, 0x3}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x400000000010, 0x4, 0xfffffffa) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) r7 = socket(0x2, 0x400000000002, 0x0) setsockopt(r7, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) ioctl$FIOCLEX(r6, 0x5451) 6m26.11498967s ago: executing program 4 (id=7826): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) bind$llc(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) (async) socket(0x1, 0x6, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) (async) recvmmsg(r6, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r7, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 6m23.04763863s ago: executing program 4 (id=7851): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r0, &(0x7f0000000180)="cbd05508ab7edb4a", 0x8, 0x800, &(0x7f0000000100)={0x2, 0x4e23, @multicast1=0xe00001f4}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'tunl0\x00', r4, 0x1, 0x8, 0x2, 0x1, {{0x9, 0x4, 0x3, 0x32, 0x24, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0xb, 0x18, [@multicast1, @multicast2]}, @generic={0x86, 0x2}]}}}}}) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000001740)={&(0x7f00000015c0)=[{0xbd8c, 0x2, 0x7fffffff, 0x8000000000000001, 0x7f}, {0x80, 0x9, 0x6, 0x3, 0xfff}, {0x3ff, 0xfffffffffffffeff, 0x6, 0x80d, 0xfff}, {0x2, 0x800, 0x8, 0x10000, 0xffffffff}, {0x3c0000000000000, 0x4, 0x0, 0x7, 0x1}, {0x10, 0x83, 0x7, 0xc, 0x3}, {0xab, 0x1, 0x0, 0x1, 0x3}, {0x4, 0x10000, 0x4, 0x4, 0x5}, {0xce, 0x9, 0x4, 0x5, 0x4}], 0x9, 0x28, 0x8, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 6m22.888472557s ago: executing program 4 (id=7853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r1, 0x1, 0x1d, 0x0, &(0x7f0000001a40)) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 6m22.768321048s ago: executing program 4 (id=7855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe3}, {0xffe0, 0xb}, {0x9, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) 6m7.738603229s ago: executing program 32 (id=7855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe3}, {0xffe0, 0xb}, {0x9, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) 3m21.272078123s ago: executing program 0 (id=9217): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf", 0x11}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) (fail_nth: 2) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="aae2462bd497e1e3af520f787b5cdcaebcea33db09056580d07cb18495597bb209", 0x21}], 0x1, 0x0, 0x0, 0x440d5}, 0x810) 3m20.574671265s ago: executing program 0 (id=9220): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r2 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000004f08fdff00000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe6, &(0x7f0000000500)=""/230, 0x0, 0x21, '\x00', 0x0, 0x0, r2}, 0x94) 3m20.442899101s ago: executing program 0 (id=9222): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ppoll(&(0x7f0000000740), 0x2000000000000219, &(0x7f0000000900)={0x77359400}, &(0x7f0000000940)={[0x4]}, 0x8) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000a40)=@assoc_value={0x0}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3, 0xb}, 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x603e7f31, 0x79e9, {{0x16, 0x4, 0x1, 0xb, 0x58, 0x66, 0x0, 0x7f, 0x4, 0x0, @private=0xa010101, @multicast1, {[@cipso={0x86, 0x44, 0xfffffffffffffffe, [{0x7, 0xc, "72536d998bb53f69ec35"}, {0x6, 0x5, "a7c21d"}, {0x6, 0xe, "c07ea4217b042cd03469b435"}, {0x7, 0x5, "14c652"}, {0x2, 0xc, "90f8644cdd0c0ae0f81b"}, {0x2, 0xe, "6fd3405ca68dc108e0432027"}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0x4}, {0x9, 0xffff}, {0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x48005) (async) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @private1, 0x6}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="d96fc79306628b58d1988abbaaea657ceadb32cf7b8a9e59f0614b9e7efdf839ea6b902cf2322de9989b2a8f60298b54ddd50227c60f224fce81fbe923871eb77f614e9fec0775501fa9606f44328bfc5b92e714392d464be3b9f817eb65ceb7769af3b4a477ebf953200024cad8075c5721566c96d6fbabe6", 0x79}, {&(0x7f00000001c0)="8780e539a097de", 0x7}, {&(0x7f0000000200)="dfbc36a8fc69d07f675500b1893482fcd45d871a33e7c5f9b323e378dc85efbabc3ab374a381fe2ceaeb04cec2eaf43f72e65e246e683b7c97197978ceb0", 0x3e}], 0x3, &(0x7f0000000400)=[{0xc0, 0x6, 0x5, "4403102854eb291f3593efa12f4992717cbfb10064830e7958625d086dca25285b7b40969d3a8ee3f540ed77cf6bdb7d1621275b457f229a73bc3ee9eb109dd24e864c365276256b117b127c0878d5b37718bdf12562d062372622a3e352ee50eef68c1f50e6a5a239bee6df394689faf3e174447d96b69a9119ddd4c08139d0a5a6465902d72e6ccf0a9dafd1e563ae33a503d931f60891c02f538e7bfd2ac20a6aed87266e580686fbd8c839"}, {0x20, 0x107, 0x4dae, "3f6bfb343dc5cfc49c96"}, {0x38, 0x88, 0x5, "11d781b590410d0b39d188c001b59d328f30f34c46268562a4b44e15fea47b970d2c"}], 0x118}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)="538277996dca2618c6d0a96bb56bbcc81efc429bdc09ff2dcb9adf24c6b1266b4a03b65c2acae2e3b2185aaf90a3462cbefde5446140526957c6ef35c81bed5beb1e5fefd527620a46d7e892ae08b88e68dc9dfe6ee6b655f42d69ec4803de3922cc46f2f0d65b42c51cd61d48a551b3e674667b6420499dd86daa65cbf1a32378a9b6e41ea19f6a52a7e35d1d40753a5aa99839ada8e55aa8c6f68bb488144dcf3ee003208e788be76add5fad5087b4e89552375c20b410", 0xb8}, {&(0x7f0000000680)="165c01538eaf7a5fc1fe6b2ba983906a8455925e227a968b65bbcb11e7529f6a99a127149e44b4f8ebbae3d78cf0c431", 0x30}, {&(0x7f00000006c0)="cf6c13cc82e498c43120d982a5d819ee0501d2b8639951b474dfde55194eeb2153e358eb61", 0x25}, {&(0x7f0000000700)="aae24f6fcd133b34d312c8cf86771dd9de5cb4e6cdc7eac065494ec2df3b4ce5861c9627bbdbadbc8e32318dc0cf38a1b338c77b34577044b307d564ec0fd6d8b3eec9ce3a5e29e4548c3baddfae27c2d1e07529c1598e784c71ab9f8cf7f2545a6abb1d7f3425b66f77db41f0a612025bd780ceae97dd9b5c7ea08fcadd406420c105c66421470851130ca930e46f001f0bc6b9420808bd01e90147579df545f049ed1e91000391a37505d6", 0xac}, {&(0x7f00000007c0)="ac0659b340b317f59547dd89a35cd3057c01e14314aa4759161398f3203cd2bfbea33f5322a90748720c774c7859fcc5ecd9df1eb1f38577ee23f92f1e36706cbe338a275f7e7da053c0ab5d6cf0c0a2aa69834e798824", 0x57}, {&(0x7f0000000840)="88201dbb258895dfa0ec79cbc29bdd1ef6239f513c075fe6e995856e8e", 0x1d}, {&(0x7f0000000880)="97d97fb62c81726be8c14a75d1d95238253f5e479d476d99ef5b0fdfd5c51afc07894cfe5adafcf179bf723aefcae6ac72897d48bcb726ef9d7a544e880ab4e3977461fcb7c2d5370c8216cc0fd86ce32d75c08551e6646bb29e6f0376", 0x5d}], 0x7, &(0x7f0000001180)=ANY=[@ANYBLOB="a8000000000000001401000002000000ed58132aff96b9efaaa79eca255513382fa68a0be6f623b6483a47745187b566c33bdaa5554489ea6b52f100a049dfc75da67e0998b9bf863f887a75a4e654892772c888ce506d418b5aea7ba4184b0649ad5e905dc0dcb52c7c7a8a3d77c14afc10a1d6ffa30c8f8255939020cf3a7e5876da7ef4e17025bc2dee2cce54ec14b9feddb6ec79971eac8377f1997c313f56126ce9af7b63abc8000000000000000b010000ff070000980c71645b634ef1b393446b66238fbfdf530adea3f89852bb4c7744755dcaf719fd55f2eb39fd0684df40e88c8576249df875420ff566959582a383471c38486ffd3259549d489d49f1ce333ef17acc669e14ba3590bef3999d332dd3c773bb67d2cbac8a105478b8913835d34b82f77f8cd266cf58ce609c05ca3dfa8834025858a1c343402c9ccebb43d3e58f767d56487a05a024d75b84f7619015cd20cbda1164f35b78caad75f483196517594f511dc8df9566eb1aee49b9d1d9e25d00000000001010000000000000140100000800000052b51b9147c2230dca71bf7b8764dfdcfc14327974a9e31b61ad40977a827b326f6b6fc6d16a148190336b2daf9800bf0058f4c9846db85b7f423595d9cf53e95e5bdff626c8dc051750f8f9be0a88a14de6d1d7913b909bcbd00d243dbaa4e9e4c3e2808ab077ce639b43bb3f9bf1cc99eb2114a21e72ae11c192e524cbb9b44e215342941b15944bfcc57c7f1829f2d6e4d8a607d6b110811fbb0832b218a910cbcc048cde7202d3d82b8d88f9420ca98d8db86e5c18abe5ea51693250ab6fc31569a4f11550af8b10f5503a801f8b8293e9e6efcc03bffa0301d4db3e5a9ff4cfce734342e1512cf8c95e0d1639b1eca84e10aeb55acdf2226b4efcffd9730174b96893d107be103bf040aee80eacd35e9c11b5fe0a5d553fc24730ed271bb6a26976035f14350c614d897642df22b07904288558a99cfc05d8528238c0738789274437c6f91245fae64ee1df180147eeb8a0d2dcf5587fa28e6fba0807994223e574e321bee62e5cf0dc5fbc121ac363b8c3f0b06da4bd8f6998a85454f0aa4fd89babc1caf625025b0e176422cc2137d1cfa53f37a1a06bdab2522de097d48a7de5186b32155e72d24f4c9d193b38cfab1f0f6a816b9b25947805cd6ea0d7a0a68a0d614751a8eb6e30aa1bdc30e5e7b3611a3425451521a677f3bdc83cc4cb02e7184921a108974cf3a20f7d4b1ac1366c87fe77710f209267913aea0124a70f21dc5a406a226adbfc8632d224f6f8f3453afaa15f8d71d7f50bebe297e1d6b6f4b378414b8af10e7e8b04d21e7c46b83697ce39269a00bcc55424b8d4a5cadf1b82d4a9c664db9b3e3e9d27092c586309a14e3869dd3095962ce6296bb7627fff62f6eac0ca3e1d16d499e403ad749d591dc73d1f936ef36b5fdbee82853329892e0432fed828bd1830a91355489f185d08641c49385a9834de6b4d8027002df79881444ff1996499bddbce2d7da5610e21a806fee56b970f09f187feff1a4f36d08638e506dfe0d413f79a078cf8b449a8800f59133bd193fc64cf2b52392a487d2fc87141da9d25901cb09e209d7209bdca59a3c0c4a07fa6bbb88d17e6c5c24bfa004b493bad1a60d347948eb25f7e7ef405255573d40e4d31a1953a5f9de55b8aa92c7082c211762a77652acabca6c1b7383c4e8cc6e9bce5a4c7ee4ab9fb79781f651f645ecadc8ed5a47cf4db8dd1dda29be9cf29983d1711287ee6c1f7dba80d49a5cd70437f3b93fcc9547435fd6d543fff8d864e03fbb49ba517eba0b832fd4a81e0f86aae3efd9ffc895cafe1d8a02f03b07a4051f01c9bde6fe34f23017762441ea87914f76c946ee0a100d48ddac4f180091ea2c4741150621a4530df8e355ad648f6cb1c0b4b61b7de40e63d2bf6756f77892867e745566494600a7376345b6e4ae9f71e30f1622309d087b5d068dc1c8cf05270b484289d828b75f0e0b8159313ed1dc0f7f15dc206d42dcd659c70deb3b3e7cf731e34353d6cdfc646ae11c4a47f292a62877deec1b71981d0be4e16fab5cf3e663b312db1d5efe35940d49b7f68f83a31be8824b741f9f1ea2f85b1cbef04c78ffa4c8c16b7e71148c406c5ccb0ca103c0721712cfbf17c089bbb7dc37b2f61d374d37f4828ae3fb9de310d0b1152d61a31e15d4e826ff259974a3ea64d8e6613a36adba5df848b9f050b9feeb9dd79fa49f44279859e5b6b5492d9b5d55f3d6224f7eedf03f6be4da4020e96ddb887c72185eebc370c6dfe22a44e42a7d1b99f917e8a410d45193b031e3388a7323cbd30e46fc19cc526bdae8ef4a32855449f57f1901ba151cc04c20240b649cb219d312a89aca3347ceec523aca21cdea4bef70bacf8d65b66b26c7b51b2c7aa82d6ff17e97ee6ecee1f5ae9e357a1e3f955b4c1a7363ee7e1f21199eb3b8bd27fdc87d9a3366fa049861a04741a2624b1c748a44ee7023cfa3c346b33cb2bc34b5b1eacab0a94aced369d38dbd319e16ca67666bf5788869ba9781d7d8e39a6a6c7fd3f90260ae0e67b076bf7f6c8f7f69e097c9b59c7fb8e5878fba80883db640b8f97456876bc262788d534372cd0efa1782fb539542eaba51021021d3410f33a2b786c24dd714bfe4c31895c9ad96d226d39718e756a09b780029db8f0e5ce599b1adb3923e5e6483fb39973da984ed79ba0c8bfe49e3c8901cd376db81fc2d90e389291f02e2c90f5430b5f580d3f32ee9444cfdd82c3b1489c6ca36e39eaef1fafeaeddf14865c28dbf2dada2f91c72d64ab4a885962237bc834cc4ec014eab7d8ca77bdf3b84acf2e26db8efb870404255b2fac5f80019cad176137e61ba2240bab2214d0a296ac121fe6b3fb376a9053e918e95af29c4761dd5afc4343f42365277670095659f78e18325e770de2f82af0b5a4ed39264fa3eb60ef0228b4272d33dd52b9e5bede29c7980c4a6a5e571caefc508704eb2d4da1e5023d0cf6c3ea5cb12ad13746608de47e4d96e3680daac195d21d2a2a305a3d9aae71f49e03cb88f3fd67c3a102bea9ea4756f871c376c0babdaf84eb53dea25251539298cbde194d5d4009901bdb820ccdf581e6d1fd189688af7cd19304d9e917dfd561b8dc507cdc4a81e55696df137428d97b6eaaf0f733f9508a7b5b639a0c17ecc2ab9d25480faf1711b26f6c5c21935f6cdc48f46cc98af87a4d10e470a7af99b82f8dd2ff63284e462548503440dca512aed103827e7b830e11fec4e69035d1368279d2cf05d8794c862bb87e3ef699f8b5cb9b665e52fc68f3e2caa305de5395bb9c615f055f73532bc4be1185a0c97059751436194df51a2911f5f35c58a5880a032642a93ebea2240820bbc66fe3835d8241e437c67aaf64dd1c1d24f45de1a79dd1cb75b898329528510591a50ffd1a9e244fef8cc03c9dabc72cc5ab62880908df3777e4d60dc18816cf2340f50bc881176d7b08e619b21ef9b71dc030ac5e3d21f507d3adc9021c6074c38401429b296bc5e7e60202e7f34fcff94381759649e314dd1942903e15cf3d325bee8862735c0ae64b3819dee9dc247ce36c6da46fd9e49bf61aedbd586f3d7ee6e2884c745daf8126da96e291ecbe6e2bcbc4c198bfe39705d7abea04d89f1622fdff9b2dc35a2968fcf415baf7073e52e050d18043595a169dcb971abe589f8de357ba17cb0ebf856110014226f6f8a142ee7b05982906bce3a22c48f8a9ee93c235dcf31b109d9bda060401631dff0a6306e984f9b1ee8e20723e7d107a9431d7560c9703e7b9afdfe8d580894007ba59372b4e7c7709d44b9e666443d3763009b9a4b7052fbf7cd0045b626d190c3037b8f52432423fb24f46a6969c474d01283e5720d2f31332fdde2340b70fe5b723040e231d692daa8704c090de9626f2b545ec5704a1c46205966fe0682191c5f4ba667bc1b94befdc53f561f5a91afdca3d6abc05619417c7aef29742871c53489a659df139fa030b312dc1a460e747a63a6eb290f2dde88f53074d9ee5b603e4a89cc175d20a4079ae648216199a9ebfbc99c5ec0de45291eadc7c8a6508394513e58d162e360dcb8658517766d29db3f0c07f8716a48acaf5a0f12f88dfc0ca44afaec321e917e86031bd80a113980319d284eb5704eaf7135409201659e8c692f36ef709462d020aac94920ee1d12ab3ac3f8596c5feef74b05b589f2c1cb814bccbfaae6d7d1ef40c7c1e3488efb3943b36096a08b962b323c2b4c13babe3cfdb28eb48acac649206744549b4f5b43da333730cf6eee725af87bda441887bbe4dcb8e7b869a6fc71e86b08b6286d0bc3b7ee93cc231088e72ee1813694aaa297b8bb20d3542e0caca520b050b1d96e3c4d063d81ffd05f3257c919ea469bc3d8452c76d0c1f78cd68d78bd141a58b461cf9cb5b1e4259589740a692fd070b632b73aa8703fe404f434bb9084cebc19287423d985511a4ae184510e5929e6275897f631e1b7c35b5f9799145abdcbf65727209ec89e50cfe1b29c4bff4f4e9d49915de456ea1b68e2d1361c0a33d3f81aabf7cb78fa83d034cd38a8aaf24c0a6b844698b52a8a11bbda8054633ef519407d8dc974a478422f670991d3eebf69c1934e8f7f8282ba130333d49f31202ef67df0fa4f78b943a138fb54d030e2ce08c20aa7ce1418c4d8af35b33d44b42207653fa4df8569eca298c9fbcbb993ec6e06ec028ef1178af250f366615928802494e7fc53f3220030a8162f1bc2e22a406e13a9183a702c6840313b89059aea89488f48bcf12b5e8aed1f81c973560f2c2ddb2174bfa964eb98de9c090c844762031d53e9ecaad32e685d2d65c94862630797c389c6042d270bca5f72d39d8d12819714006abcf3d03985f484890855c26e845132d0394708031435f5db4b1839a8622c297ff8b920bb8796af9e850250fc1edb3c55b2e9655c43a5c28631580263f5b0e151d9e420ded31e506fd330143cbf9c5af33a8b5df7612adb64204c921048cede2ef3c80aa51499731baa5f55e5fe956d1fa9541cfa59e961e2dc1d92011b6707bd0b63ca9e293874f8d5ffeeb700167cb164bab4748c127ac6f2d79fdead8c9e251c59b72dad07111f862642b35962b71a4c526784fcb17e6716cc6d87aed317f6accb24e41a755400b17fc7423047a263fd9d46e5e5d5aa267f19c71ab1a75495389093dd2a1530b3bf1c002d23e0a807f957785f28adef3f3784af793519c35a253674f015b4a61ea765c24ef877d607f7838148e6aa1edd4d7a255f2446356865b2bb027c441666918ddf6440d26c1d84ecedec4c0c555ba7bd8684c5a42c5690946db65a9ccfa8ad99fff8a5e778a4bd298bb9e32dcc1c663a6734cb883abbb32c3dfa43607a2a0169ede0049fa8e987e69940c12ecd4713c50b4db1678fe0efee21459304dbbdfd47a1d899c08181ceb74e5ae29c676a12267d7c8084baf4f39411be166ff13a30c46aee5e1d0f10ef3f5cfaf23c48413e8c9443bda8eb606dfd8b62d9dce251351f8e783f6ce720bb857a6a9747ca1832b8e4f6e70fcd1c40a02600d1a19f4e12ed20a31d40a87c103ae187338b6e6933d3b0e81987e3ca0839ff9e7e3460d16977f2b3224d5433868d76b62baeba30f920be5187b57901568260a0dab01d64ec7998008098f5decd515b99ae75509abe0380ecb83acf06e0a3554b19a1d59dbe1ab51e484f6a3073c7a03815dd605d35c01b871cb65225a88d5301be77b6d4723898eb960e5863f2bb2f5220393bb5323b02401c2e1f91a2b89210d760bd525964b11a28fdcd32da553a64eb559b1d05ffab97997b226b75ff961169330c4aaa26533d08db77f570419b82d8e1c42176c2e4a3ad3c3c02d8f9d471947557e2a0846292d91ab894c47af7e54c3bcfce7ec71099df3729e2948613a3931c409008117ff50d53b131c70514b2135c788215b2bbde2fab75c4c5c7588e9e549ae48f76870a5ad0a2301c7fbefc4fecab879dd70f91963a44010eab71812b8faf6bb0b062fe993a19669ead68567684e69c8ea38459b7e52e3e7f513e75aedf290fb6be20b4dd5042c86e59027de8f8e10d225d83fa380ba99f66f8b7c5ecbbec07c2f80f140ef2be59b939d649bbcd44f44ea797cd21cb66ce26bdbd9b9636afdd33019f5322783b948e9094de2d2ccc651fdfe986ce55445dd7480b94f1bb0e48a6f5f8518f122fef84f1b9894f355f6275116b1eb543972b11be3bdee3431bc58b64a2e9434615c3e9723a959061cc6ba7abd2240a590ba872e5c08aea17e9bd0610afba6a60c8e"], 0x1180}}], 0x2, 0x80) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000ac0)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x80000001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x61, @loopback, 0x8}], 0x68) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a8000000210001fe26bd7000fbdbdf256401010200ddffffffff05000049000000fc0000000000000000000000000000014e2400004e21ffff0200a0a03a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e000100000008001f00030000005000110000000000000000000000000000000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000032010000023500000a000200"], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async, rerun: 64) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) close(0x3) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000a80), 0x4) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004050) (rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100003052abd54ff010012006c4ae49f805c30000000001003da7d298c9224dd0972c4f3efe7d6b0f86790618d8e597e22495b759f", @ANYRES32=0x0, @ANYBLOB="3a000000a0010200140012800b0001006d616373656300001400028008000500", @ANYRES32=r6, @ANYBLOB="08002900496200000a000200aaaaaaaaaabb0000"], 0x50}}, 0x800) 3m20.186682055s ago: executing program 0 (id=9226): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pim6reg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000200900020073797a310000000008000440000000000900010073797af7ec9aa90a14000000110000e500"/100], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000000802000000011fd0500000000bdfc0f005f0b00"/36], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x1f, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff18180000", @ANYRES32, @ANYBLOB="0000000000000000ff4005005d020000186800000a000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008510000007000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d616328736803"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) 3m18.871377782s ago: executing program 0 (id=9235): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd700000dcdb25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000500", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet6(r8, &(0x7f00000030c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x7, @local, 0x9}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000100)="9860", 0x2}], 0x1}}], 0x1, 0x20004000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000040)={r10, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000180)={r10, @in={{0x2, 0x4e23, @local}}, 0x6, 0x1, 0x4d15, 0xfff, 0x65a9}, &(0x7f0000000280)=0x98) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000026c0)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close(0x4) 3m18.601637058s ago: executing program 0 (id=9237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000314010000000000fddbdf250900020073797a320000000008004100727865001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x200}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="90696bb859f19becf7c2685694571800080009000000000000000300000085000000130100090000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x24080804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa81002f000800450000204000e000070000007f000001ac141441a0014e20000c907801080000"], 0x36) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1e0, 0x2e0, 0x2e0, 0x1e0, 0x2e0, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x20}, [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'dummy0\x00', {}, {0xff}, 0x5c, 0x1, 0x3, 0x52}, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYRES64=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)=r12}, 0x20) 3m3.143587122s ago: executing program 33 (id=9237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000314010000000000fddbdf250900020073797a320000000008004100727865001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x200}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="90696bb859f19becf7c2685694571800080009000000000000000300000085000000130100090000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x24080804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa81002f000800450000204000e000070000007f000001ac141441a0014e20000c907801080000"], 0x36) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1e0, 0x2e0, 0x2e0, 0x1e0, 0x2e0, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x20}, [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'dummy0\x00', {}, {0xff}, 0x5c, 0x1, 0x3, 0x52}, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYRES64=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)=r12}, 0x20) 1m6.627868989s ago: executing program 3 (id=10089): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x26}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8b36, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d8d00"}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, r6, 0xc57dd000) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 1m6.237244697s ago: executing program 3 (id=10093): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843", 0x15}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6d8}, [@generic={0x91, 0x1, 0x1, 0x62}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000680)={r2, &(0x7f0000000300)='+\x1a]^\x00', 0x0, &(0x7f00000003c0)={@align=0x9, {0x8, 0x4, 0x100020, 0x5302594e}}, 0x1, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000640)=0x101}) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000200)={'bond0\x00', 0x8}) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x100000) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x18, 0x32, 0x12f, 0x3f, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f00000004c0)="f441f8afe652d9c969ef8796acb5ffa1956003f3ead5c91d997e6bee293609cf94effdf12803a4d60ab26e6bf331264f0f6fb88855ef8a956894115dc7614f09ea67566d5e9a42f8c782aa63ea69c600572c6dac6e4a5f3347c39c28b014844324118638cb179a6d802b8617ddf6fb352d39b61ca0df55792f4e4f904d2a427d6ecad9e07b21bf613575395f6056fe850a96a1a02dd8ad1e34843a985e81ea4ad3acb24542c6d42ffb1a25339b1fedd893bcef9bfd5ee4ba93064cc0444b5079e760f7be5d16ea9eb964cdf2abcef83bbb6f7e0981727aea8d416030") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3) 1m6.105605785s ago: executing program 3 (id=10095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 1m6.056542112s ago: executing program 3 (id=10097): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x250, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1f0, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'ip6gretap0\x00', {0x6, 0x0, 0x0, 0x338, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x18}, {0x3}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0x6}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'snmp\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) syz_emit_ethernet(0xf4, &(0x7f0000000680)={@random="5ffc27656972", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x1, "53b4", "5654581bee8ba80c6beef1de2d7b559c4e710086f25b2dfa9d2eb855b6f08e59255e97342f88208b97b82f299c27ee831a86e93b2af85c9249f91f8ba637bd1311fd2fd2748cf1613b5f5a6860e6fd0aec2251bf9f0bb51130e073e8d0dd133441457ba55b8ce40863f43294fd4da6ee2ee0aa7a75cc25e77ad4b0d2ddc0f6681030352f26e7fb2478f53b25c5e28617dab0595f44b9be440e8fa5c14fa928b44f83ef2b4245bb2caaf667d51758d4c165a8cc001752cac5b40f85ad97e743527c813c797b145bb8431f981f03bb026b246c0293e19669c7c597f04a9a2d4606251a"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m5.459338578s ago: executing program 3 (id=10101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10}]}, @NFT_MSG_DELTABLE={0x24c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "3c013dd31245a13b3cce6aee8285d7d8435bcfe516dd94a9a44603590d601b722c01d2498bdd5c62bd451851f014e6b91b8307d0a59f005e6940cf2b9c3965f17fd9cbc5e4f539e22a8cc3c5b1c6bbca243205ea7605e3156254d6e1f782816792dbeed8d86717112d069d805ade467f7591cddf0bdfde308cb74880b73a9bcf0ae6ec59b0b58aa9a6e63c1c7deb9fb9e7fa8ee56ca5f6e99787e0acfbcd38873181f82722e58cf961f27eb7b7c479bd60cb06ff3a5ef21a784e35a17519d83b461409f6f25abd2d4f66c9e7ab3612c632f977de8d4ad44042b3c5e524de23325a95"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xfb, 0x6, "86dd4c833dc1f2f847bb0cec212e257b99e5ca3e1bbda15e5a92c733ffc06790bf9f63b573f80bf88955449c20fc0893871a7981d61bb3970492540bf2aae6cc708a6d2018ceda076a14ebe9dabcabf9ecbab18889eaff10798e8c44cc45902757337ce25143dbf691635c712cb4bbcabc9f1060855aa3e01844dfbee1c9cd318d2ec953ba7a3b45d912a5bcde13b600851a89bcb64f30a9d10a935cddf2ed7272f8569e84bc093400b6e791bb2ba19c301bb9a36d11abf30f670783f4f888c6df8ea7e5d75fc9465d8811d13c28f1c7f17e4aec2f408f8a424a65d5fefb7cda0ce41a70f655a0b3bbf9acaab6d5a20bcaa7d80f899113"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x2dc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x34, 0x6}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @struct={0xb, 0x0, 0x0, 0x4, 0x1, 0x4}, @enum64={0xd, 0x3, 0x0, 0x13, 0x0, 0x9, [{0x9, 0x0, 0x80000001}, {0xf, 0x9, 0x1}, {0xa, 0x7a, 0x2}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000700)=""/244, 0x88, 0xf4, 0x1, 0x95, 0x10000}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000840)="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", 0x10c}, {&(0x7f0000000340)="2fd2bd7e477c0543d9cfd6b2ce682953286ef29d0eff610db3b8cffd7297d7057cd6c9fae14f40e01b98aeea3d8c0528bcf7ba94f1a223c65f67f03e0a05beac7d864636f85244a61f65fe6efda8760974dddaebebe2337a8efab58911c9d540051a9f10da951095d0730bcfb10858656fa932704ec7840fceacb1e1403a45df332b296f6a35e50bb6b1f4f4027908a76df6f168ba253d40fa40b78484c37c7a3b875585bcec29863ebbc31f356daa517a3aec59b024e3dc8334781e19784201da5041676eeb5b51c7bc7d94540d16bf46446df69d01b55b64a52753fd08c9326a15a3", 0xe3}], 0x2, 0x0, 0xfffffffffffffec9, 0x7400}, 0x400c805) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) r7 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="62a02a3a34097772"], 0xa) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10}]}, @NFT_MSG_DELTABLE={0x24c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "3c013dd31245a13b3cce6aee8285d7d8435bcfe516dd94a9a44603590d601b722c01d2498bdd5c62bd451851f014e6b91b8307d0a59f005e6940cf2b9c3965f17fd9cbc5e4f539e22a8cc3c5b1c6bbca243205ea7605e3156254d6e1f782816792dbeed8d86717112d069d805ade467f7591cddf0bdfde308cb74880b73a9bcf0ae6ec59b0b58aa9a6e63c1c7deb9fb9e7fa8ee56ca5f6e99787e0acfbcd38873181f82722e58cf961f27eb7b7c479bd60cb06ff3a5ef21a784e35a17519d83b461409f6f25abd2d4f66c9e7ab3612c632f977de8d4ad44042b3c5e524de23325a95"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xfb, 0x6, "86dd4c833dc1f2f847bb0cec212e257b99e5ca3e1bbda15e5a92c733ffc06790bf9f63b573f80bf88955449c20fc0893871a7981d61bb3970492540bf2aae6cc708a6d2018ceda076a14ebe9dabcabf9ecbab18889eaff10798e8c44cc45902757337ce25143dbf691635c712cb4bbcabc9f1060855aa3e01844dfbee1c9cd318d2ec953ba7a3b45d912a5bcde13b600851a89bcb64f30a9d10a935cddf2ed7272f8569e84bc093400b6e791bb2ba19c301bb9a36d11abf30f670783f4f888c6df8ea7e5d75fc9465d8811d13c28f1c7f17e4aec2f408f8a424a65d5fefb7cda0ce41a70f655a0b3bbf9acaab6d5a20bcaa7d80f899113"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x2dc}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x34, 0x6}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @struct={0xb, 0x0, 0x0, 0x4, 0x1, 0x4}, @enum64={0xd, 0x3, 0x0, 0x13, 0x0, 0x9, [{0x9, 0x0, 0x80000001}, {0xf, 0x9, 0x1}, {0xa, 0x7a, 0x2}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000700)=""/244, 0x88, 0xf4, 0x1, 0x95, 0x10000}, 0x28) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000840)="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", 0x10c}, {&(0x7f0000000340)="2fd2bd7e477c0543d9cfd6b2ce682953286ef29d0eff610db3b8cffd7297d7057cd6c9fae14f40e01b98aeea3d8c0528bcf7ba94f1a223c65f67f03e0a05beac7d864636f85244a61f65fe6efda8760974dddaebebe2337a8efab58911c9d540051a9f10da951095d0730bcfb10858656fa932704ec7840fceacb1e1403a45df332b296f6a35e50bb6b1f4f4027908a76df6f168ba253d40fa40b78484c37c7a3b875585bcec29863ebbc31f356daa517a3aec59b024e3dc8334781e19784201da5041676eeb5b51c7bc7d94540d16bf46446df69d01b55b64a52753fd08c9326a15a3", 0xe3}], 0x2, 0x0, 0xfffffffffffffec9, 0x7400}, 0x400c805) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) (async) openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="62a02a3a34097772"], 0xa) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) 1m3.268397525s ago: executing program 3 (id=10122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24cf00, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000000)="dbfc", 0x2}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x2, 0x66e03de5, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7800, 0x8, 0x5, 0xfffffb87}}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)="c1142c67b51009e42589497d236f9d8edb8d88c80eebc583b208735b82f4e6917cd89cffedce5346c14f13eecaca34f04d025a687d7f0709dd4ccfa183c7563c01d9ee186da045a57efad0af366b5aac690b8f418408012fd3dabbd9d74428cc2bb6000f7bedbbc79df2724cee66de60770c4dc06b51202c29202651b6a061c14e270e4cd3820460c30196997707877535bcb88d53463aa63ae35527aa27bd53a403301f35c255a6996ae4b12f46765ee77911721ed81d89c2dd1ca701c2b2a16fb21a399e919f77363c23e92b8fa223a8a18270b65a01aa3aa13b971ad6c0bb5184cd", 0x0, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) writev(r7, &(0x7f0000002740), 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'netpci0\x00', @local}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r9, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r6, 0x4}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES16=r10], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$phonet(0x23, 0x2, 0x1) accept4(0xffffffffffffffff, &(0x7f0000000180)=@tipc, &(0x7f0000000240)=0xfffffffffffffe81, 0x0) 47.931515857s ago: executing program 34 (id=10122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24cf00, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000000)="dbfc", 0x2}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x2, 0x66e03de5, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7800, 0x8, 0x5, 0xfffffb87}}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)="c1142c67b51009e42589497d236f9d8edb8d88c80eebc583b208735b82f4e6917cd89cffedce5346c14f13eecaca34f04d025a687d7f0709dd4ccfa183c7563c01d9ee186da045a57efad0af366b5aac690b8f418408012fd3dabbd9d74428cc2bb6000f7bedbbc79df2724cee66de60770c4dc06b51202c29202651b6a061c14e270e4cd3820460c30196997707877535bcb88d53463aa63ae35527aa27bd53a403301f35c255a6996ae4b12f46765ee77911721ed81d89c2dd1ca701c2b2a16fb21a399e919f77363c23e92b8fa223a8a18270b65a01aa3aa13b971ad6c0bb5184cd", 0x0, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) writev(r7, &(0x7f0000002740), 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'netpci0\x00', @local}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r9, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r6, 0x4}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES16=r10], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$phonet(0x23, 0x2, 0x1) accept4(0xffffffffffffffff, &(0x7f0000000180)=@tipc, &(0x7f0000000240)=0xfffffffffffffe81, 0x0) 14.5430922s ago: executing program 6 (id=10442): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa651dcaacace2bde0b647777c6d6d4285576c1ec6885a86791aa30f97fb079ad9a77908515d491eee2fcb704674d2399919978f98eb6b0c6323d0344dbc946bd640c8142c3e0f33199ff5c60cb47e63530eb6838bd27b849d063d8aebd51c0e4e1bffaa913a00c903929d9fd95df49e704bb1686b00b794c274d730db8bc2b98241adfacc9a63fa2f485efc7990d989527bd90e8e980d"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') unshare(0x6a040000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000008f00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="001280ee000100626f6e64000000001c000280050001000400200008002000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 8.384569493s ago: executing program 6 (id=10482): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="05000000010001", 0x7) (async) write(r1, &(0x7f0000000080)="05000000010001", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5.215601663s ago: executing program 6 (id=10486): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000240)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRESHEX=r1, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x20000000000000cc, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000140)='GPL\x00', 0x40000000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0xe}, {0xfff1, 0xffff}, {0xd, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000480)={r0, &(0x7f0000000380)='wlan0\x00', 0x101000, &(0x7f00000003c0)={@_ha_fsid={[0x5c76]}, {0x3, 0x9, 0x4, 0x1}}, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x6}) ioctl$FS_IOC_GETFSUUID(r10, 0x80111500, &(0x7f00000004c0)) 5.098653938s ago: executing program 1 (id=10489): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ed4d00000000fddbdf253100000008000300", @ANYRES32=r3, @ANYBLOB="0800db00", @ANYRES32=r4, @ANYBLOB="4097af8118b7fe1106c63d6e7c0428b3cce11b0f01381b3a9fa6cc7a1748882c8e1b9db350a69205be9a8b93275748289e3a38b8966aa89de3d3c6300c439a35783b83507c12120d6a49ab4e2cd4b4ac58ae42ba31ce3db1667c8f1d6f0602d4d842e0ac1593b275b1933a9f09edd18e6b293a50e28164aecb7fde4b154c2038037c3075782b24f7fb68031d993e71c45bb2e754746e7e840af91c9cc1"], 0x24}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffef81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.695271466s ago: executing program 1 (id=10492): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x6}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x800, 0x80, &(0x7f00000005c0)="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", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6", 0x6, 0x0, 0x5}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x45, &(0x7f00000000c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r4, 0x38f9c000) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) 4.374852989s ago: executing program 1 (id=10496): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0x1df}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x28000600) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @empty, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r2, 0x4, 0x9, 0xcb, 0xfff, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa7, 0x80, 0x66f, 0x1000}}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r5, &(0x7f00000001c0)='\xff\xff', 0x40100, &(0x7f0000000200)={@_ha_fsid={[0x6, 0x2e9]}, {0x0, 0x9, 0xd, 0x8}}, 0xfffffff9, &(0x7f0000000240), &(0x7f00000002c0)=0x6}) 3.451857751s ago: executing program 1 (id=10505): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400010000000000000000000500000a28000000140a010400000000000000000200020708000340000000070c00064000000000000000051400000011000100000000aea605c23626f7e600000000000100000a00000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502"], 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.125366616s ago: executing program 5 (id=10509): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500004f85cb9b9800", @ANYRES32=r1, @ANYRES64, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x48) (async, rerun: 64) r4 = socket(0x8, 0x4, 0x3) (rerun: 64) getpeername$packet(r4, &(0x7f0000000300), &(0x7f0000000340)=0x14) (async) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x17a, 0x0) (async, rerun: 32) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bind$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) (async, rerun: 32) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x400) (async, rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async, rerun: 64) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x8000003, 0xc, 0x8009bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) (rerun: 64) 2.739377727s ago: executing program 1 (id=10510): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req={0x2, 0x2, 0xb, 0x8}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xa, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000040) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000016c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB="32bd3bdb", @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf2501000000080001007e0000000c009900010400004f000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000562020000002dbb700009dbdf25"], 0x33fe0}}, 0x4000004) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000000)='wlan1\x00', 0x12a00, &(0x7f0000000040)={@align=0x80, {0xa251, 0x3ff, 0xb4a5, 0x2}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x973}, {[0x0, 0x5, 0x9, 0x7]}, 0x62, 0xdc, &(0x7f0000000200)=""/220}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000015c0)={'gretap0\x00', &(0x7f0000001540)={'sit0\x00', 0x0, 0x40, 0x10, 0xb, 0x2, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @loopback, @multicast1}}}}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x9, 0x7, 0xfffffff8}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) sendto$packet(r6, &(0x7f0000000540)="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", 0x1000, 0x0, &(0x7f0000001600)={0x11, 0x16, r7, 0x1, 0x4, 0x6, @random="6f782a19c805"}, 0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x8c50, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf002100", '\x00', "ffffffffffffffff"}, 0x38) writev(r10, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 2.726629816s ago: executing program 5 (id=10512): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0xc0) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x80}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x1, 0x8, 0x400000004271, 0x4, 0x0, 0x3}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x33}, 0x2, @in=@local, 0x0, 0x4, 0x0, 0xb7, 0x0, 0x7fbfffd}}, 0xe8) (async, rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500243209880bd320d98a61a90057e9bf", 0x0, 0x6, 0x0, 0x327, 0xa6, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x23) 2.509581453s ago: executing program 5 (id=10514): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, &(0x7f0000000280)={0x3, 0x6}, 0x2) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="180000006a4b0ea020b900000000000018ffff00", @ANYRESDEC=r10, @ANYRES16=r11], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff82, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x518}, 0x94) 2.143673452s ago: executing program 6 (id=10516): r0 = socket(0x26, 0x80805, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_256={{0x303}, "c37e4c233b523996", "12fe3d5434763ca587aff4a24634fa7c43e7ae2b017d28f53f2dc513e83dd138", "6ad94c3e", "ad3e4a31a0cc7036"}, 0x38) writev(r2, &(0x7f00000005c0)=[{&(0x7f00000008c0)="581a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "71d7cad9ce65227e", "fdc81b393808bf519d34fdc431d727bc3eaa90d1f574cb786da155253062c8a7", "d735033c", "cb2b7df64280cd4f"}, 0x38) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100260000000000000000e01801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900ffff850000000600000095"], &(0x7f0000000440)='GPL\x00', 0xa, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0xc}, 0x94) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 1.765859588s ago: executing program 1 (id=10518): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/102, 0x66}], 0x1}, 0x1000}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/79, 0x4f}], 0x1, &(0x7f0000000240)=""/25, 0x19}, 0x9}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)=""/4096, 0xffffffffffffff95}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/139, 0x8b}], 0x6, &(0x7f0000000780)=""/113, 0x71}, 0x9}], 0x3, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e00)={0x13f0, 0x13, 0x0, 0x5, 0x70bc27, 0x21dfdbfa, {0x7}, [@typed={0x77, 0x43, 0x0, 0x0, @binary="4d107a899163b0553eebf19a58011b94db8de06a489849243fd6e5c923c451b68dad3895fbe16e4302d04b33c3d6ac6bd1d979591b4c7188217088f7c9351d48e943b4df1913bafb4ee56f7699c191b890ef128cd7bb029f601182458cf55b2793d9abd1d0e6bcea1f11c4ac5c64efc74fae0e"}, @typed={0x8, 0x11a, 0x0, 0x0, @uid=r2}, @nested={0x134e, 0x101, 0x0, 0x1, [@generic="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", @typed={0x8, 0x5, 0x0, 0x0, @pid=r3}, @nested={0x1a8, 0x11c, 0x0, 0x1, [@generic="e24a502ddc5b71884c9daea07f30bc5907b53f57c681e60ed275c9565e698b39d1cd82b0b649699ac6f9fe4f3c48aa02cd57763f0c39f34ad98abfe754ffbd950ad94d4007338bcfacffb083c140678ac14371299a2fa11a9bce8d0a7f0b8a83cfeac9cdaac334185bf4ad153264ed2e21c374851adc8398ea63d8cd949a4c139c4259a65519ed01e6e066dcf5865232cb30416129b831bb24d07439480efd5646831f1c5a82128b7442694687c331ddb4f6971e7f1219b58be8b952c92329903c05584cea5560c9e36fd3ff085f4e3719b3765f7ed4d4eeb373f9988482ef07cd0fe40c89857b7cc5873d", @generic="65d7dd7714265d9afb65a3c887b518f222d96c42adc6dccaaff707ff4b7473e28f9b2067fa51b84c3cca5d4534487361c14da2ddce251b4f19be0b97d35bec5c80f0ee4a2476bdfe9c8924e386287d6b711b788b16d57a0292004952377fb469a7cb8def68279a948f8f7d6a59ae613157ce806a4770c71f644336071a1ec62fef6e87fc91682d5e6489d94e639ce57e2dd68c9f429c9116a665a6bed967980f30f92f9d9a8f8cfdaa616720618b60dbc4eaca1041c81a9cfe"]}, @generic="beb87dadaceb567e033e51426d06a7b7c8c3c2bd4be4516700e8a24d3630fd0133407acf27958dea4cbf0e99918248dff58823ae1d97ae70c78589e69405a1d86cac1f862bff28eefa276917dee858bb06922b7ff652d8968b311d37c2b3789f0e234683c25903a695b2cbf580ab717fcacc42dfd6", @generic="20247038538ff4d7af7ed0e952010e94f7981575a1a44a7c9a0b2a5e8c97c49d77b36ceacc2dd7c5f5ea43e0661d1e974ad2f7089cdaca109bd61ec48100962d2b560f48d8ada9ec8382e46ff1dbf72cc252d36005a4b0fa71b7ef1b5b727a", @generic="e747d2e984e97daa6d1b293137b07bb401167866b8196a08890315f2f72fb2320452a39c4d9b692bd32565fedebf113b2644fe09578936317f044e974de7fb8162e8218f05b1ccd6884549d87b7b74ef770e78269155a5ccc4dd2068b8a69963d0247ecaff5d95389bd3f0bf3be0870ed61640163ef2e3ba737634e1d8859887a33a2162d43b0657bf08da67da243439d29d687f0c80554e7a0c05a968d61b5e092a5e0ce5424c4d7df8293fd789591e74ad81fd92c12f26bddd22454be71fb6806a755f3a54"]}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0xfffffffffffffffd}]}, 0x13f0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.622888391s ago: executing program 7 (id=10519): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x682}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff90}, 0x94) 1.494214293s ago: executing program 7 (id=10520): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14, 0x1d, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d00000000000000950000000000000055e7d5d720f9ee2b3aa350e692e44d5f98e7e7e58bd3e88b1553396f381ae48a287f6710465f9319dec584f884dbbf3545cf615c475052771905b7f941db5e5df74f4acb0735ace6dc491acbd1de22049a87116c6cbe0e493686e1"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x77c6) 1.281702337s ago: executing program 5 (id=10522): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000800850e0000000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x0, 0x0, 0x1014}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x0, 0x0, 0x1014}, 0x50) socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r1, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) close(r4) (async) close(r4) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) listen(r8, 0x1) accept4(r8, 0x0, 0x0, 0x80800) (async) r9 = accept4(r8, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r8, 0x0, 0xffffffff000) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000840000000000000008140000000000ec"], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_buf(r7, 0x0, 0x30, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) 1.110682332s ago: executing program 2 (id=10524): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001680)) (async) close(0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f000000b8c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) 971.50405ms ago: executing program 7 (id=10525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e1ef2fa1467e4acbc06f0bff9bff36b5122aac9416fcddb5fa5a9826bb08b47ba97a0c7b2b788e208d729dfe32e5815f23ba6fe6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0xd27}}}}}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r4, 0x8004b707, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x52}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 875.336784ms ago: executing program 2 (id=10526): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004805) 874.979689ms ago: executing program 5 (id=10527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netdevsim0\x00', 0x800}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000100)="051a0000", 0x4}, {&(0x7f0000000200)="73ec500447db", 0x6}], 0x3) 696.56346ms ago: executing program 6 (id=10528): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0a000300029002000c00168008000008001b00"/28], 0x34}}, 0x20008000) 638.014211ms ago: executing program 2 (id=10529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x98}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x8, 0x0, &(0x7f0000006a80)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES64=r1, @ANYBLOB="00000000000000208510000003000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff2c00000008000000b50afdffffffeffe85000000060000009500e7ffffff0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 544.214094ms ago: executing program 7 (id=10530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x14, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r3, 0x0, 0x24000840) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r5, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000200)={r6, &(0x7f0000000100)='syzkaller\x00', 0x10a00, &(0x7f0000000140)={@_ha_fsid={[0xc3a, 0xc897]}, {0x3ff, 0xf99, 0x9, 0x40000000000}}, 0x100, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r9, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=[0x0], 0x0, 0xb3, &(0x7f0000000300)=[{}], 0x8, 0xfffffffffffffd60, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r13 = accept$unix(r8, &(0x7f0000000580), &(0x7f0000000600)=0x6e) recvfrom$unix(r13, &(0x7f0000000640)=""/54, 0x36, 0x1, &(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYRESOCT=r7, @ANYRES16=r0, @ANYRES8=r10], &(0x7f0000001b80)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', r11, @fallback=0x1, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) 535.543284ms ago: executing program 2 (id=10531): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x682}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffc3}, 0x94) 456.756962ms ago: executing program 2 (id=10532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x600, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r4, 0x29, 0x0, 0xa, 0x5, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x20, 0x20, 0x4, 0x6}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @mcast1, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) 391.206141ms ago: executing program 6 (id=10533): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 340.121578ms ago: executing program 5 (id=10534): r0 = socket(0xa, 0x3, 0xff) unshare(0x6a040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x440c0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000402}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x24}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2af0aed3fe7ebbd352f9af8fa5"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "82924ac0db88b6fb8f2d4263d2a5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2851f982b"}]}, 0x68}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x24020400) socket(0x1d, 0x2, 0x6) unshare(0x24020400) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000000140)={0x6, 0x5, 0x200}) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefd", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008", @ANYRES32, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32], 0x38}}, 0x10) ioctl$sock_ifreq(r7, 0x891c, &(0x7f00000001c0)={'xfrm0\x00', @ifru_data=&(0x7f0000000180)="3abfd98a5a0d92741440a17f55211ba392bc21670c8c8ad498d745d9567fe75d"}) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0x4}], 0x1, 0x40000022, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 339.5568ms ago: executing program 7 (id=10535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x80000001}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x260, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) (async) r8 = socket(0x25, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@newtaction={0x1a8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x194, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_PARMS={0x2, 0x2, {0x300}}]}, {0x4, 0x6, "9294c48078440a5b991a1436f1c7b7965582000000000000000000000000f4ffffff38f77bf966e7e9dd1d260a681726f9b872d91cb3c263c8506e1527f6e3a9df5b99b34b6eb6e92f65d5277166882436cae2fa9b7eded73a2c2b0a69a028427a6c4f247644fed91f6b95ebff9639f5ab5ad90738ab0166e17b86523bc9f6b8dc3df6bb9c57a8ba67a8ae36cbb1559dddf37b73d7e721a269745b40c6bad48787608bfa984a684efa318c2125d933c96a50ec800a2451caca74096ae9a364e221510269c4b59c"}, {0xc}, {0xc, 0x4}}}, @m_mpls={0x140, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2a}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9000}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15.354991ms ago: executing program 7 (id=10536): unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10002}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0xe, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000480)=0xfffffffc, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, r1, 0xc57dd000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x18) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000abaff9)={0x77359400}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xfa65d2de9e0703e5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x103e, &(0x7f0000001d00)=ANY=[], 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2b, 'devices'}, {0x2d, 'perf_event'}, {0x2b, 'net'}, {0x2d, 'memory'}, {0x19b96eb9e08cc222, 'cpu'}, {0x2d, 'pids'}, {0x2d, 'net_prio'}]}, 0x49) 0s ago: executing program 2 (id=10537): socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000002000010000000000000000000a142000000000070014000200fe8000000000000000000000200000bb09000100fc0100000000000000000800004e428b24f7fccc0f00000007000000b9610c80e7e25f22e1e21bfb03315b"], 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, 0x0) listen(0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) accept4$alg(r6, 0x0, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x2, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728", @ANYRESDEC=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ? trace_irq_disable+0x3b/0x140 [ 1292.270626][T11112] ? clear_bhb_loop+0x40/0x90 [ 1292.270653][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.270675][T11112] RIP: 0033:0x7f3fccf9ce59 [ 1292.270696][T11112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.270714][T11112] RSP: 002b:00007f3fcdd88028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1292.270738][T11112] RAX: ffffffffffffffda RBX: 00007f3fcd215fa0 RCX: 00007f3fccf9ce59 [ 1292.270753][T11112] RDX: 0000000000000001 RSI: 000020000000a040 RDI: 0000000000000004 [ 1292.270767][T11112] RBP: 00007f3fcdd88090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.270779][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.270792][T11112] R13: 00007f3fcd216038 R14: 00007f3fcd215fa0 R15: 00007ffc0b6359d8 [ 1292.270827][T11112] [ 1293.224947][T11145] nbd: must specify a size in bytes for the device [ 1293.427601][T11163] __nla_validate_parse: 3 callbacks suppressed [ 1293.427631][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9226'. [ 1293.449382][T11161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9228'. [ 1293.675769][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9226'. [ 1294.481866][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1294.502075][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1294.530171][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1294.540052][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1294.569068][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1294.587943][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1294.600437][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1295.635531][T11259] netlink: 'syz.5.9245': attribute type 1 has an invalid length. [ 1295.648265][T11264] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1295.673758][T11259] syzkaller0: entered promiscuous mode [ 1295.688830][T11259] syzkaller0: entered allmulticast mode [ 1296.055283][T11223] infiniband syz2: set down [ 1296.062666][T11223] infiniband syz2: added syzkaller0 [ 1296.099057][T11223] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1296.117861][T11223] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1296.136896][T11223] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1296.172462][T11223] RDS/IB: syz2: added [ 1296.177548][T11223] smc: adding ib device syz2 with port count 1 [ 1296.184300][T11223] smc: ib device syz2 port 1 has no pnetid [ 1296.209170][T11273] syzkaller0: entered promiscuous mode [ 1296.215288][T11273] syzkaller0: entered allmulticast mode [ 1296.617774][T11296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1299.780130][T11325] __nla_validate_parse: 78 callbacks suppressed [ 1299.780151][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1299.841028][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1299.934264][T11325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1300.133325][T11338] bond1: option arp_all_targets: invalid value (1959745015) [ 1300.153225][T11338] bond1 (unregistering): Released all slaves [ 1300.283098][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.687917][T11357] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1300.694869][ T5764] IPVS: starting estimator thread 0... [ 1300.702266][T11358] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1300.782940][T11360] IPVS: using max 25 ests per chain, 60000 per kthread [ 1300.885441][T11366] netlink: 'syz.3.9273': attribute type 1 has an invalid length. [ 1300.963299][T11366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1301.070074][T11368] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1301.125779][T11363] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1301.148567][T11363] bond3: (slave batadv1): making interface the new active one [ 1301.172760][T11363] batadv1: entered promiscuous mode [ 1301.185115][T11363] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1301.415611][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9275'. [ 1301.663752][T11378] team0: Port device team_slave_0 removed [ 1302.310839][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9281'. [ 1302.352850][T11396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1302.416300][T11398] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1302.428799][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9280'. [ 1302.524371][T11398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9281'. [ 1302.557371][T11398] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1302.848037][ T8149] smc: removing ib device syz2 [ 1302.869021][ T8149] smbdirect: ib_dev[syz2] removed [ 1303.192863][T11407] tipc: Started in network mode [ 1303.223228][T11407] tipc: Node identity ff, cluster identity 4711 [ 1303.245027][T11407] tipc: Enabling of bearer rejected, failed to enable media [ 1303.264605][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9284'. [ 1303.531950][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9286'. [ 1303.544708][T11428] netlink: 'syz.1.9285': attribute type 1 has an invalid length. [ 1304.098467][T11439] netlink: 'syz.5.9291': attribute type 3 has an invalid length. [ 1304.122182][T11439] netlink: 666 bytes leftover after parsing attributes in process `syz.5.9291'. [ 1304.139252][T11439] xt_policy: neither incoming nor outgoing policy selected [ 1304.154154][T11439] syzkaller0: entered promiscuous mode [ 1304.159967][T11439] syzkaller0: entered allmulticast mode [ 1304.340661][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9294'. [ 1304.452793][T11453] netlink: 'syz.3.9295': attribute type 14 has an invalid length. [ 1304.468677][T11454] netlink: 'syz.3.9295': attribute type 14 has an invalid length. [ 1305.157341][T11487] __nla_validate_parse: 3 callbacks suppressed [ 1305.157364][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9304'. [ 1305.247834][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9304'. [ 1305.368003][T11497] netlink: 'syz.1.9306': attribute type 3 has an invalid length. [ 1305.408557][T11497] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9306'. [ 1305.834730][T11511] netlink: 'syz.2.9309': attribute type 13 has an invalid length. [ 1305.857223][T11511] netlink: 'syz.2.9309': attribute type 12 has an invalid length. [ 1310.343432][T11562] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9322'. [ 1310.357478][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1310.392876][T11561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1310.516417][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1310.518399][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1310.743965][T11571] netlink: 'syz.5.9325': attribute type 1 has an invalid length. [ 1310.796122][T16235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.817964][T16235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.828541][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1310.847217][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1310.857161][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1310.867445][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1310.880467][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1311.829674][ T9265] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1311.907404][ T9265] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1312.293215][ T9263] batadv1: left promiscuous mode [ 1312.591352][T11566] Bluetooth: hci3: command 0x0405 tx timeout [ 1312.991581][ T1119] Bluetooth: hci0: command tx timeout [ 1313.116607][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.124197][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.132298][T11575] bridge_slave_0: entered allmulticast mode [ 1313.140891][T11575] bridge_slave_0: entered promiscuous mode [ 1313.150355][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.158051][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.166186][T11575] bridge_slave_1: entered allmulticast mode [ 1313.174740][T11575] bridge_slave_1: entered promiscuous mode [ 1313.241063][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.279012][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.348821][T11575] team0: Port device team_slave_0 added [ 1313.358262][T11575] team0: Port device team_slave_1 added [ 1313.389582][T11642] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1313.454332][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.471866][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.536756][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.574088][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.581553][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.608806][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.735795][T11575] hsr_slave_0: entered promiscuous mode [ 1313.748147][T11575] hsr_slave_1: entered promiscuous mode [ 1313.755679][T11575] debugfs: 'hsr0' already exists in 'hsr' [ 1313.764554][T11575] Cannot create hsr debugfs directory [ 1313.862496][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1314.269394][T11653] batadv0: entered promiscuous mode [ 1314.280014][T11653] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1314.510319][T11657] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9340'. [ 1314.554308][T11657] netlink: 'syz.1.9340': attribute type 1 has an invalid length. [ 1314.584344][T11657] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9340'. [ 1314.635610][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9341'. [ 1314.874452][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9343'. [ 1315.072377][ T1119] Bluetooth: hci0: command tx timeout [ 1315.643234][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1316.190115][T11575] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1316.206730][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1316.226565][ T8149] bond3: left allmulticast mode [ 1316.245609][ T8149] bond3: left promiscuous mode [ 1316.273388][ T8149] bridge0: port 4(bond3) entered disabled state [ 1316.307043][ T8149] bond2: left allmulticast mode [ 1316.322016][ T8149] bond2: left promiscuous mode [ 1316.332313][ T8149] bridge0: port 3(bond2) entered disabled state [ 1316.356587][ T8149] bridge_slave_1: left allmulticast mode [ 1316.358372][T11679] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9347'. [ 1316.362736][ T8149] bridge_slave_1: left promiscuous mode [ 1316.363039][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.388636][ T8149] bridge_slave_0: left allmulticast mode [ 1316.395677][ T8149] bridge_slave_0: left promiscuous mode [ 1316.402662][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.882407][T16235] smc: removing ib device syz1 [ 1316.889013][ T8149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.900458][ T8149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.924168][ T8149] bond0 (unregistering): Released all slaves [ 1316.940892][ T8149] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1316.952054][ T8149] bond1 (unregistering): Released all slaves [ 1316.975391][ T8149] bond2 (unregistering): Released all slaves [ 1316.999334][ T8149] bond3 (unregistering): Released all slaves [ 1317.030029][ T8149] bond4 (unregistering): Released all slaves [ 1317.051380][T11575] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1317.068249][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1317.104674][T11575] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1317.129936][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1317.152900][ T1119] Bluetooth: hci0: command tx timeout [ 1317.206639][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1317.240295][T16235] smbdirect: ib_dev[syz1] removed [ 1317.246468][T11575] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1317.260539][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1317.669607][T11724] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1317.783435][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.899561][T11716] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9349'. [ 1318.509350][T11719] pim6reg: entered allmulticast mode [ 1318.701041][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.744729][T11757] netlink: 'syz.3.9353': attribute type 39 has an invalid length. [ 1318.800002][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9355'. [ 1318.847145][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.854458][ T9260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.987455][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1319.009248][T11758] netlink: 'syz.5.9355': attribute type 4 has an invalid length. [ 1319.037179][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.044397][ T9269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.059443][T11766] netlink: 'syz.5.9355': attribute type 4 has an invalid length. [ 1319.231330][ T1119] Bluetooth: hci0: command tx timeout [ 1319.390147][T11772] sock: sock_set_timeout: `syz.3.9358' (pid 11772) tries to set negative timeout [ 1319.969154][T11795] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9361'. [ 1320.239103][T11804] netlink: 'syz.3.9363': attribute type 1 has an invalid length. [ 1320.286833][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9363'. [ 1320.326903][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9363'. [ 1320.447368][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9363'. [ 1320.616612][T11824] netlink: 'syz.1.9366': attribute type 1 has an invalid length. [ 1320.748730][T11821] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1321.156295][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1321.257562][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.506219][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.063031][T11869] netlink: 'syz.2.9372': attribute type 62 has an invalid length. [ 1322.154218][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9371'. [ 1322.545316][T11575] veth0_vlan: entered promiscuous mode [ 1322.579213][T11575] veth1_vlan: entered promiscuous mode [ 1322.739347][T11575] veth0_macvtap: entered promiscuous mode [ 1322.843470][T11575] veth1_macvtap: entered promiscuous mode [ 1322.905416][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9375'. [ 1322.927946][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.983704][T11892] vlan0: entered promiscuous mode [ 1322.988945][T11892] syz_tun: entered promiscuous mode [ 1323.089831][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.165169][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1323.216774][ T9261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.248843][ T9261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.294126][ T9261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.337399][ T9261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.647412][ T9266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.679917][ T9266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.818768][T11902] netlink: 'syz.2.9379': attribute type 1 has an invalid length. [ 1323.844810][ T9260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.854637][T11902] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1323.867076][ T9260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.883229][T11902] netlink: 658 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1323.910717][T11902] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1324.023900][ T8149] IPVS: stopping master sync thread 9631 ... [ 1324.386045][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9383'. [ 1324.426001][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9383'. [ 1324.666621][T11925] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9384'. [ 1324.834255][T11933] netlink: 'syz.1.9386': attribute type 1 has an invalid length. [ 1324.849986][T11932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1325.035324][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9389'. [ 1325.045093][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9389'. [ 1325.202723][T11949] nbd: nbd6 already in use [ 1325.225344][T11949] block nbd6: NBD_DISCONNECT [ 1325.254678][T11949] block nbd6: Send disconnect failed -32 [ 1325.265511][T11949] block nbd6: shutting down sockets [ 1325.281033][T11952] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1327.062362][ T8149] hsr_slave_0: left promiscuous mode [ 1327.100599][ T8149] hsr_slave_1: left promiscuous mode [ 1327.363049][T12010] __nla_validate_parse: 6 callbacks suppressed [ 1327.363070][T12010] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9403'. [ 1327.379042][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9403'. [ 1327.635170][ T8149] team_slave_1 (unregistering): left promiscuous mode [ 1327.644354][ T8149] team0 (unregistering): Port device team_slave_1 removed [ 1327.678519][ T8149] team_slave_0 (unregistering): left promiscuous mode [ 1327.686618][ T8149] team0 (unregistering): Port device team_slave_0 removed [ 1329.299816][ T1119] Bluetooth: hci2: link tx timeout [ 1329.311763][ T1119] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1329.329197][ T1119] Bluetooth: hci2: link tx timeout [ 1329.336182][ T1119] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1331.391931][ T1119] Bluetooth: hci2: command 0x0406 tx timeout [ 1333.472444][ T1119] Bluetooth: hci2: command 0x0406 tx timeout [ 1341.754187][T12248] netlink: 284 bytes leftover after parsing attributes in process `syz.6.9406'. [ 1341.967821][T12270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1342.118571][T12274] xt_CT: No such helper "snmp_trap" [ 1342.171958][T12280] syzkaller0: entered promiscuous mode [ 1342.182890][T12280] syzkaller0: entered allmulticast mode [ 1342.284318][T12283] nbd: socks must be embedded in a SOCK_ITEM attr [ 1342.419652][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1342.443282][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1342.465656][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1342.489559][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1342.723155][T12295] syzkaller0: entered allmulticast mode [ 1343.863501][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9428'. [ 1343.885062][T12351] sock: sock_set_timeout: `syz.3.9427' (pid 12351) tries to set negative timeout [ 1343.908081][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9428'. [ 1343.960992][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9428'. [ 1344.003235][T12351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1344.027494][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9428'. [ 1344.087507][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9431'. [ 1344.171475][T12358] netlink: 'syz.1.9431': attribute type 4 has an invalid length. [ 1344.202886][T12358] netlink: 'syz.1.9431': attribute type 4 has an invalid length. [ 1344.813192][T12387] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1344.942966][T12387] veth3: entered promiscuous mode [ 1345.259667][T12373] pim6reg1: entered promiscuous mode [ 1345.273802][T12373] pim6reg1: entered allmulticast mode [ 1345.428847][T12399] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1346.036801][T12417] tipc: Failed to obtain node identity [ 1346.059823][T12417] tipc: Enabling of bearer rejected, failed to enable media [ 1346.308191][T12425] syzkaller1: entered promiscuous mode [ 1346.330548][T12425] syzkaller1: entered allmulticast mode [ 1346.572222][T12442] netlink: 'syz.2.9453': attribute type 2 has an invalid length. [ 1346.834295][T12453] tipc: Resetting bearer [ 1347.027815][T12467] netlink: 'syz.2.9460': attribute type 5 has an invalid length. [ 1347.571008][T12461] tipc: Enabled bearer , priority 0 [ 1347.642421][T12472] syzkaller0: entered promiscuous mode [ 1347.683257][T12472] syzkaller0: entered allmulticast mode [ 1347.756189][T12484] __nla_validate_parse: 10 callbacks suppressed [ 1347.756209][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9462'. [ 1347.806879][T12484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9462'. [ 1347.842817][T12445] tipc: Resetting bearer [ 1347.966584][T12445] tipc: Disabling bearer [ 1349.040035][T12527] syzkaller1: entered promiscuous mode [ 1349.081328][T12527] syzkaller1: entered allmulticast mode [ 1349.191351][T12531] sctp: [Deprecated]: syz.1.9474 (pid 12531) Use of int in max_burst socket option. [ 1349.191351][T12531] Use struct sctp_assoc_value instead [ 1349.470173][T12527] xt_hashlimit: size too large, truncated to 1048576 [ 1350.025352][T12554] netlink: 'syz.1.9479': attribute type 1 has an invalid length. [ 1350.650214][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1350.754909][T12590] Bluetooth: MGMT ver 1.23 [ 1350.800065][T12591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1351.845523][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9492'. [ 1351.971664][T12637] netlink: 'syz.3.9494': attribute type 32 has an invalid length. [ 1352.708336][T12660] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1352.737872][T12683] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.9501'. [ 1352.798712][T12683] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1352.875567][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9501'. [ 1353.032886][T12664] syzkaller0: entered promiscuous mode [ 1353.049743][T12664] syzkaller0: entered allmulticast mode [ 1353.182746][T12683] veth0_to_bridge: entered promiscuous mode [ 1353.206747][T12683] macvtap1: entered allmulticast mode [ 1353.224924][T12683] veth0_to_bridge: entered allmulticast mode [ 1353.400906][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1353.540710][T12702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1356.645736][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1356.655214][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1356.664754][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1356.681932][T12707] ip6gre1: entered promiscuous mode [ 1356.687206][T12707] ip6gre1: entered allmulticast mode [ 1357.494603][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9509'. [ 1357.556436][T12720] dvmrp0: entered allmulticast mode [ 1358.153026][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1358.165568][T12742] netlink: 'syz.3.9514': attribute type 1 has an invalid length. [ 1358.173393][T12742] netlink: 'syz.3.9514': attribute type 2 has an invalid length. [ 1358.181170][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1358.291823][T12742] netlink: 'syz.3.9514': attribute type 1 has an invalid length. [ 1358.935362][T12762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9518'. [ 1359.297033][T12771] netlink: 'syz.3.9521': attribute type 3 has an invalid length. [ 1359.612204][T12780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9526'. [ 1359.758281][T12776] block nbd3: NBD_DISCONNECT [ 1359.802392][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1359.836093][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1359.845386][T12785] tun0: tun_chr_ioctl cmd 1074812118 [ 1359.979780][T12795] netlink: 340 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1360.273290][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9532'. [ 1360.769751][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9537'. [ 1360.808853][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9537'. [ 1360.845670][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.928459][T12815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.321664][T12840] netlink: 'syz.6.9547': attribute type 6 has an invalid length. [ 1361.723915][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.865207][T12862] gretap0: entered promiscuous mode [ 1361.977525][T12873] netlink: 'syz.3.9557': attribute type 1 has an invalid length. [ 1362.249932][T12877] veth0: entered promiscuous mode [ 1362.405328][T12890] netlink: 'syz.5.9565': attribute type 4 has an invalid length. [ 1362.750554][T12904] netlink: 'syz.6.9571': attribute type 1 has an invalid length. [ 1362.826622][T12907] netlink: 'syz.6.9572': attribute type 10 has an invalid length. [ 1362.922158][T12899] block nbd3: server does not support multiple connections per device. [ 1362.931744][T12899] block nbd3: shutting down sockets [ 1363.186625][T12912] __nla_validate_parse: 9 callbacks suppressed [ 1363.186648][T12912] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9573'. [ 1363.648100][T12935] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9579'. [ 1363.664219][T12935] vlan3: entered promiscuous mode [ 1363.741283][T12935] geneve1: entered promiscuous mode [ 1363.747359][T12935] vlan3: entered allmulticast mode [ 1363.753523][T12935] geneve1: entered allmulticast mode [ 1363.789917][T12942] team_slave_1: mtu less than device minimum [ 1363.826753][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1363.836073][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1364.101726][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9584'. [ 1364.111181][T12957] netlink: 'syz.1.9584': attribute type 5 has an invalid length. [ 1364.196824][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9584'. [ 1364.214293][T12957] geneve2: entered promiscuous mode [ 1364.219567][T12957] geneve2: entered allmulticast mode [ 1364.318587][ T9259] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1364.334826][ T9259] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1364.356868][ T9259] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1364.375319][ T9259] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1364.447858][T12972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9582'. [ 1364.494996][T12971] netlink: 'syz.1.9586': attribute type 1 has an invalid length. [ 1364.532620][T12971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1364.579997][T12971] bond3: entered allmulticast mode [ 1364.644828][T12971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9586'. [ 1365.584274][T13001] netlink: 'syz.5.9594': attribute type 16 has an invalid length. [ 1365.601702][T13001] netlink: 'syz.5.9594': attribute type 17 has an invalid length. [ 1365.645474][T13001] bridge_slave_0: left promiscuous mode [ 1365.681071][T13001] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1365.956960][ T30] audit: type=1107 audit(1780425663.553:25): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_õd”{ ¾±' [ 1366.028315][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9602'. [ 1366.041772][T13027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9602'. [ 1366.810110][T13057] syzkaller0: entered promiscuous mode [ 1366.815911][T13057] syzkaller0: entered allmulticast mode [ 1366.907078][T16235] batadv1: left allmulticast mode [ 1366.945907][T16235] batadv1: left promiscuous mode [ 1366.958206][T16235] bridge0: port 3(batadv1) entered disabled state [ 1366.970868][T16235] bridge_slave_1: left allmulticast mode [ 1366.978836][T16235] bridge_slave_1: left promiscuous mode [ 1366.985297][T16235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.997263][T16235] bridge_slave_0: left allmulticast mode [ 1367.003818][T16235] bridge_slave_0: left promiscuous mode [ 1367.009877][T16235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.329084][T13059] openvswitch: netlink: Message has 4096 unknown bytes. [ 1367.577674][T16235] bond6 (unregistering): (slave erspan1): Releasing active interface [ 1367.585849][T16235] erspan1 (unregistering): left promiscuous mode [ 1367.698806][T16235] team0: Port device geneve1 removed [ 1367.757993][T13081] nbd: illegal input index -1113835520 [ 1367.890956][T16235] team0: Port device bridge9 removed [ 1367.901403][T16235] team0: Port device bridge10 removed [ 1367.929534][T16235] bond0 (unregistering): Released all slaves [ 1367.946221][T16235] bond1 (unregistering): Released all slaves [ 1367.979217][T16235] bond2 (unregistering): Released all slaves [ 1367.999792][T16235] bond3 (unregistering): Released all slaves [ 1368.015500][T16235] bond4 (unregistering): Released all slaves [ 1368.033171][T16235] bond5 (unregistering): Released all slaves [ 1368.052649][T16235] bond6 (unregistering): Released all slaves [ 1368.109310][T16235] bond7 (unregistering): Released all slaves [ 1368.127529][T16235] bond8 (unregistering): (slave veth11): Releasing backup interface [ 1368.137401][T16235] bond8 (unregistering): Released all slaves [ 1368.154601][T16235] bond9 (unregistering): (slave veth15): Releasing backup interface [ 1368.165442][T16235] bond9 (unregistering): Released all slaves [ 1368.200724][T16235] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1368.209461][T16235] veth0_to_bond: left promiscuous mode [ 1368.215079][T16235] veth0_to_bond: left allmulticast mode [ 1368.222851][T16235] bond10 (unregistering): Released all slaves [ 1368.374102][T13083] __nla_validate_parse: 6 callbacks suppressed [ 1368.374122][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.390555][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.430450][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.503354][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.533245][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.554756][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.608732][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9619'. [ 1368.650824][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.693445][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.719206][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1368.825810][T13083] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1369.064207][T13089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1369.156574][T16235] tipc: Left network mode [ 1369.287574][T13097] netlink: 'syz.5.9621': attribute type 13 has an invalid length. [ 1369.343831][T13091] syzkaller1: entered promiscuous mode [ 1369.349340][T13091] syzkaller1: entered allmulticast mode [ 1369.513854][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.598965][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1369.830377][T13106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1369.904956][ T9261] netdevsim netdevsim5 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.932972][ T9261] netdevsim netdevsim5 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.949910][T13121] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1370.022877][ T9261] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1370.042962][ T9261] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.056975][ T9261] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1370.065897][ T9261] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.099520][ T9261] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1370.108455][ T9261] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.766197][T13130] block nbd3: server does not support multiple connections per device. [ 1370.779749][T13130] block nbd3: shutting down sockets [ 1370.903581][T13149] netlink: 'syz.1.9632': attribute type 2 has an invalid length. [ 1371.782241][T13184] batadv0: entered promiscuous mode [ 1371.793597][T13184] batadv0: left promiscuous mode [ 1372.455767][T13212] xt_ecn: cannot match TCP bits for non-tcp packets [ 1373.370329][T13240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.918496][T13260] __nla_validate_parse: 53 callbacks suppressed [ 1373.918518][T13260] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9662'. [ 1374.051774][T13256] netlink: 'syz.2.9660': attribute type 1 has an invalid length. [ 1374.132807][T13258] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9659'. [ 1374.607919][ T6051] IPVS: starting estimator thread 0... [ 1374.905412][T13293] IPVS: using max 26 ests per chain, 62400 per kthread [ 1375.029996][T13306] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1375.292541][T13314] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9670'. [ 1375.469522][T16235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.477046][T16235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.489510][T16235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.497017][T16235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.511651][T16235] veth1_macvtap: left promiscuous mode [ 1375.517350][T16235] veth0_macvtap: left promiscuous mode [ 1375.522912][T16235] veth1_vlan: left promiscuous mode [ 1375.528152][T16235] veth0_vlan: left promiscuous mode [ 1375.939482][T16235] team0 (unregistering): Port device team_slave_1 removed [ 1376.091504][T13306] IPv6: sit1: Disabled Multicast RS [ 1376.300057][T13323] sctp: [Deprecated]: syz.2.9674 (pid 13323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1376.300057][T13323] Use struct sctp_sack_info instead [ 1376.461333][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9675'. [ 1376.489172][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9675'. [ 1376.520942][T13334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1376.616600][T13334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1376.623774][T13334] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 1376.635090][T13334] bond1: (slave ipip1): Error -95 calling set_mac_address [ 1377.063817][T13341] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1377.747136][T13368] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1377.828246][T16235] IPVS: stop unused estimator thread 0... [ 1378.068302][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9684'. [ 1378.077659][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9684'. [ 1378.431934][T13398] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.9688'. [ 1379.103141][T13428] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1379.160067][ T1119] Bluetooth: hci5: command 0x0406 tx timeout [ 1379.167653][T13436] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1379.187414][T13437] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1379.547349][T13451] Bluetooth: MGMT ver 1.23 [ 1379.723221][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1379.773441][T13464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.894412][T13473] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9711'. [ 1380.497499][T13503] netlink: 'syz.6.9719': attribute type 4 has an invalid length. [ 1380.541443][T13503] netlink: 'syz.6.9719': attribute type 4 has an invalid length. [ 1380.558787][T13503] netlink: 'syz.6.9719': attribute type 4 has an invalid length. [ 1380.648670][T13503] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9719'. [ 1380.662225][T13511] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9722'. [ 1380.691522][T13512] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9722'. [ 1380.830391][T13520] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1381.086921][T13531] netlink: 'syz.6.9729': attribute type 12 has an invalid length. [ 1381.112832][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9728'. [ 1381.496948][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9734'. [ 1381.516748][T13552] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1381.773912][T13570] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9736'. [ 1382.274802][T13591] netlink: 'syz.1.9740': attribute type 1 has an invalid length. [ 1382.300425][T13594] netlink: 'syz.2.9741': attribute type 32 has an invalid length. [ 1382.310914][T13594] xt_recent: Unsupported userspace flags (000000b1) [ 1382.554548][T13591] RDS: rds_bind could not find a transport for 0:b3:0:1:1801:0:2020:7825, load rds_tcp or rds_rdma? [ 1383.588464][T13655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1384.329465][T13692] __nla_validate_parse: 4 callbacks suppressed [ 1384.329485][T13692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9761'. [ 1384.435999][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9762'. [ 1384.467248][T13697] netlink: 'syz.3.9762': attribute type 5 has an invalid length. [ 1384.481327][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9762'. [ 1384.546702][ T30] audit: type=1107 audit(1780425682.143:26): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1384.610935][T13697] geneve3: entered promiscuous mode [ 1384.627826][T13697] geneve3: entered allmulticast mode [ 1384.699786][T17741] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1384.708481][T17741] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1384.761352][T17741] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1384.770153][T17741] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1384.895214][T13709] syzkaller1: entered promiscuous mode [ 1384.974082][T13709] syzkaller1: entered allmulticast mode [ 1385.007572][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9769'. [ 1385.263798][T13728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9772'. [ 1385.272850][T13728] netlink: 'syz.6.9772': attribute type 1 has an invalid length. [ 1385.280600][T13728] netlink: 'syz.6.9772': attribute type 2 has an invalid length. [ 1385.291765][T13728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9772'. [ 1385.366342][T13729] syzkaller0: entered promiscuous mode [ 1385.419577][T13729] syzkaller0: entered allmulticast mode [ 1388.502165][T13735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1388.900552][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9782'. [ 1388.946878][T13777] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9782'. [ 1388.955955][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9782'. [ 1388.964956][T13777] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9782'. [ 1388.982798][T13777] mac80211_hwsim hwsim118 wlan0: entered promiscuous mode [ 1389.021300][T13777] mac80211_hwsim hwsim118 wlan0: entered allmulticast mode [ 1389.396146][T13815] __nla_validate_parse: 2 callbacks suppressed [ 1389.396167][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9792'. [ 1389.412739][T13813] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9791'. [ 1389.451802][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9792'. [ 1389.456283][T13813] ksmbd: Unknown IPC event: 1, ignore. [ 1389.463299][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9792'. [ 1389.475527][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9792'. [ 1389.795482][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9797'. [ 1389.826211][T13832] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1389.919486][T13832] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1389.949226][T13834] netlink: 'syz.5.9799': attribute type 1 has an invalid length. [ 1389.957016][T13834] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9799'. [ 1389.977855][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9797'. [ 1389.986780][T13832] IPv6: NLM_F_CREATE should be specified when creating new route [ 1390.013853][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9799'. [ 1390.065322][T13843] netlink: 'syz.1.9803': attribute type 2 has an invalid length. [ 1390.087541][T13841] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.9802'. [ 1390.494974][T13861] netlink: 'syz.1.9808': attribute type 5 has an invalid length. [ 1391.615692][T13910] netlink: 'syz.2.9823': attribute type 5 has an invalid length. [ 1391.643250][T13910] geneve2: entered promiscuous mode [ 1391.648536][T13910] geneve2: entered allmulticast mode [ 1391.732089][ T9265] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1391.740794][ T9265] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1391.749523][ T9265] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1391.758272][ T9265] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1393.197008][T13939] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 1393.223915][T13943] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1393.271590][T13943] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1393.327937][T13943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1393.686674][T13960] netlink: 'syz.1.9836': attribute type 5 has an invalid length. [ 1394.564320][T13994] __nla_validate_parse: 12 callbacks suppressed [ 1394.564344][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9845'. [ 1395.476546][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9849'. [ 1396.027255][T14022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1396.100163][T14026] netlink: 'syz.3.9852': attribute type 1 has an invalid length. [ 1396.107970][T14026] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9852'. [ 1396.585427][T14053] netlink: 'syz.6.9862': attribute type 1 has an invalid length. [ 1396.756181][T14064] openvswitch: netlink: IP tunnel dst address not specified [ 1396.860799][T14066] netlink: 'syz.6.9865': attribute type 1 has an invalid length. [ 1396.955437][T14069] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.9866'. [ 1397.271586][T14090] netlink: 'syz.2.9870': attribute type 1 has an invalid length. [ 1397.414788][T14093] netlink: 'syz.6.9872': attribute type 1 has an invalid length. [ 1397.604661][T14091] block nbd1: not configured, cannot reconfigure [ 1397.797734][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9874'. [ 1398.146461][T13070] udevd[13070]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 1398.182439][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.190249][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.855952][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.916863][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.532325][T14085] veth3: left promiscuous mode [ 1399.539486][T14085] geneve2: left promiscuous mode [ 1399.544814][T14085] geneve2: left allmulticast mode [ 1399.565013][T14090] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1399.579390][T14094] gretap1: entered allmulticast mode [ 1399.597793][T14093] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1399.615641][T14108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1399.664344][ T9262] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.683849][ T9262] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.693091][ T9262] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.703278][ T9262] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.712813][ T1119] Bluetooth: hci1: command 0x0406 tx timeout [ 1399.718984][ T9262] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.728067][ T9262] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.737121][ T9262] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.747415][ T9262] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1399.772046][ T9261] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1399.780823][ T9261] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1399.789548][ T9261] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1399.821704][ T9261] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.414611][T14147] batman_adv: batadv0: Adding interface: dummy0 [ 1400.421040][T14147] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.459230][T14147] batman_adv: batadv0: Interface activated: dummy0 [ 1400.459528][T14152] netlink: 'syz.3.9886': attribute type 1 has an invalid length. [ 1400.628821][T14158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9888'. [ 1400.638968][T14150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.652558][T14150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.667554][T14150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1400.693014][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9887'. [ 1400.759430][T14162] netlink: 'syz.1.9889': attribute type 3 has an invalid length. [ 1400.918151][T14150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.979844][T14150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.995273][T14150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1401.035706][T14173] xt_hashlimit: size too large, truncated to 1048576 [ 1401.180184][T14150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.192385][T14150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.204651][T14150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1401.519600][T14150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.530440][T14150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.541713][T14150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1401.583741][T14190] syzkaller0: entered promiscuous mode [ 1401.589246][T14190] syzkaller0: entered allmulticast mode [ 1401.756013][T14194] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9900'. [ 1401.765206][T14194] NCSI netlink: No device for ifindex 566712438 [ 1401.807371][T14194] netlink: 'syz.5.9900': attribute type 10 has an invalid length. [ 1401.815629][T14194] bridge0: port 1(netdevsim1) entered blocking state [ 1401.822651][T14194] bridge0: port 1(netdevsim1) entered disabled state [ 1401.829561][T14194] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1401.838796][T14194] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1402.145483][ T9265] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.171402][ T9265] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1402.179558][ T9265] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1402.187912][ T9265] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.221313][ T9265] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1402.243381][ T9265] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1402.286312][ T9265] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.303752][ T9265] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1402.312706][ T9265] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1402.334418][ T9265] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.348190][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9905'. [ 1402.374922][ T9265] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1402.393533][ T9265] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1402.566260][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9908'. [ 1402.616827][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9901'. [ 1402.646607][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9901'. [ 1402.962845][T14240] netlink: 'syz.3.9912': attribute type 27 has an invalid length. [ 1402.974698][T14242] netlink: 'syz.5.9913': attribute type 26 has an invalid length. [ 1402.985552][T14244] netlink: 'syz.5.9913': attribute type 26 has an invalid length. [ 1403.858422][T14268] syzkaller0: entered promiscuous mode [ 1403.864310][T14268] syzkaller0: entered allmulticast mode [ 1405.013225][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9929'. [ 1405.046849][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9928'. [ 1405.065917][T14296] netlink: 'syz.1.9928': attribute type 1 has an invalid length. [ 1405.123445][T14294] bridge0: port 3(batadv1) entered blocking state [ 1405.130111][T14294] bridge0: port 3(batadv1) entered disabled state [ 1405.159927][T14294] batadv1: entered allmulticast mode [ 1405.175225][T14294] batadv1: entered promiscuous mode [ 1405.235009][T14297] SET target dimension over the limit! [ 1405.606631][T17741] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1405.615995][T17741] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1405.856781][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9931'. [ 1405.868986][T14307] netlink: 'syz.1.9931': attribute type 5 has an invalid length. [ 1405.876873][T14307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9931'. [ 1407.087228][T14341] netlink: 'syz.3.9940': attribute type 27 has an invalid length. [ 1407.207194][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9943'. [ 1407.247201][T14347] netlink: 'syz.3.9943': attribute type 5 has an invalid length. [ 1407.247654][T14350] netlink: 'syz.6.9944': attribute type 1 has an invalid length. [ 1407.266321][T14347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9943'. [ 1407.729930][T14369] netlink: 'syz.2.9951': attribute type 10 has an invalid length. [ 1407.738931][T14369] veth0_vlan: left promiscuous mode [ 1407.745834][T14369] veth0_vlan: entered promiscuous mode [ 1407.772733][T14369] team0: Device veth0_vlan failed to register rx_handler [ 1408.049617][T14377] digital: digital_start_poll: Unknown protocol [ 1408.191500][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9953'. [ 1408.280400][T14388] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1408.308668][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9953'. [ 1408.364302][T14358] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9947'. [ 1408.461543][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9947'. [ 1408.532261][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9955'. [ 1408.545492][T14400] netlink: 'syz.6.9955': attribute type 5 has an invalid length. [ 1408.553270][T14400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9955'. [ 1408.585196][T14400] geneve3: entered promiscuous mode [ 1408.590898][T14400] geneve3: entered allmulticast mode [ 1408.633299][ T9267] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1408.681411][ T9267] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1408.690321][ T9267] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1408.701841][ T9267] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1408.899469][T14408] netlink: 'syz.6.9960': attribute type 49 has an invalid length. [ 1409.586600][T14425] netlink: 'syz.2.9966': attribute type 22 has an invalid length. [ 1409.595319][T14425] netlink: 'syz.2.9966': attribute type 22 has an invalid length. [ 1409.682297][T14425] syzkaller0: entered promiscuous mode [ 1409.688977][T14425] syzkaller0: entered allmulticast mode [ 1411.097621][ T9262] syzkaller0: tun_net_xmit 76 [ 1411.115538][ T9262] syzkaller0: tun_net_xmit 48 [ 1411.122869][ T5764] syzkaller0: tun_net_xmit 76 [ 1411.401561][ T5764] syzkaller0: tun_net_xmit 76 [ 1411.411518][ T5764] syzkaller0: tun_net_xmit 76 [ 1414.830649][T14464] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1414.914872][T14467] __nla_validate_parse: 4 callbacks suppressed [ 1414.914894][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1415.311772][T14473] geneve3: entered promiscuous mode [ 1415.317911][T14473] geneve3: entered allmulticast mode [ 1415.373481][ T9262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 1415.391479][ T9262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 1415.433995][ T9262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 1415.445166][ T9262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 1415.674811][T14480] netlink: 'syz.3.9980': attribute type 1 has an invalid length. [ 1415.683515][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9980'. [ 1415.691945][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9981'. [ 1415.692612][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9980'. [ 1416.118507][T14507] bridge0: port 3(vlan0) entered blocking state [ 1416.125214][T14507] bridge0: port 3(vlan0) entered disabled state [ 1416.132597][T14507] vlan0: entered allmulticast mode [ 1416.137803][T14507] geneve0: entered allmulticast mode [ 1416.145133][T14507] vlan0: entered promiscuous mode [ 1416.150202][T14507] geneve0: entered promiscuous mode [ 1416.409351][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.476147][T14532] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9997'. [ 1416.485161][T14532] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9997'. [ 1416.498695][T14532] netlink: 192 bytes leftover after parsing attributes in process `syz.5.9997'. [ 1416.725123][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10003'. [ 1417.235992][T14570] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1417.245956][T14570] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1417.255392][T14570] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1417.341890][T14575] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10010'. [ 1417.394354][T14577] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1417.400754][T14577] syzkaller1: linktype set to 776 [ 1417.529366][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.753673][T14587] netlink: 'syz.6.10016': attribute type 1 has an invalid length. [ 1417.842959][T14588] bond2: (slave geneve4): making interface the new active one [ 1417.864255][T14588] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 1417.888808][ T9263] netdevsim netdevsim6 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1417.897691][ T9263] netdevsim netdevsim6 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1417.908726][ T9263] netdevsim netdevsim6 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1417.909891][T14587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10016'. [ 1417.917583][ T9263] netdevsim netdevsim6 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1418.061709][T14587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1418.430151][T14607] netlink: 'syz.2.10019': attribute type 30 has an invalid length. [ 1418.457340][ T9267] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.470820][T14607] netlink: 'syz.2.10019': attribute type 30 has an invalid length. [ 1418.474180][ T9267] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.614646][ T9267] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.641535][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.669965][ T9267] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.729360][T14623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.782670][T14623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.155582][T14585] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1419.233635][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.782965][T14657] syzkaller0: entered promiscuous mode [ 1419.795335][T14657] syzkaller0: entered allmulticast mode [ 1419.813038][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.825567][T14657] tipc: Enabled bearer , priority 0 [ 1419.869550][T14654] tipc: Resetting bearer [ 1419.927593][T14654] tipc: Disabling bearer [ 1420.010015][T14661] __nla_validate_parse: 3 callbacks suppressed [ 1420.010037][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10027'. [ 1420.038799][T14661] tc_dump_action: action bad kind [ 1420.075455][T14661] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1420.316654][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10029'. [ 1420.341823][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10029'. [ 1420.627844][T14673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.637340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.887493][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.425901][T14679] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10033'. [ 1421.553851][T14681] syzkaller0: entered promiscuous mode [ 1421.559528][T14681] syzkaller0: entered allmulticast mode [ 1422.017992][ T6067] net_ratelimit: 7 callbacks suppressed [ 1422.018011][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.080464][T14699] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10036'. [ 1422.093103][T14699] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10036'. [ 1422.102829][T14699] netlink: 43 bytes leftover after parsing attributes in process `syz.6.10036'. [ 1422.118113][T14699] netlink: 'syz.6.10036': attribute type 6 has an invalid length. [ 1422.126275][T14699] netlink: 'syz.6.10036': attribute type 5 has an invalid length. [ 1422.136740][T14699] netlink: 43 bytes leftover after parsing attributes in process `syz.6.10036'. [ 1422.271533][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.347481][T14708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 1423.153162][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.161811][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.378844][T14752] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1423.426816][T14754] netlink: 'syz.3.10050': attribute type 1 has an invalid length. [ 1423.468779][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1423.716427][T14768] netlink: 'syz.3.10054': attribute type 2 has an invalid length. [ 1423.725973][T14768] netlink: 'syz.3.10054': attribute type 11 has an invalid length. [ 1423.836804][T14775] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1423.993810][T14781] syzkaller0: entered promiscuous mode [ 1423.999542][T14781] syzkaller0: entered allmulticast mode [ 1424.062502][T14781] tipc: Started in network mode [ 1424.067541][T14781] tipc: Node identity b2873c8e9807, cluster identity 4711 [ 1424.075689][T14781] tipc: Enabled bearer , priority 0 [ 1424.085965][T14779] tipc: Resetting bearer [ 1424.137515][T14779] tipc: Disabling bearer [ 1424.244553][T14787] xt_hashlimit: size too large, truncated to 1048576 [ 1424.264504][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.321384][T14791] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1424.333035][T14791] bond2 (unregistering): Released all slaves [ 1424.587314][T14807] netlink: 'syz.3.10058': attribute type 1 has an invalid length. [ 1424.663640][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.684910][T14806] bridge_slave_0 (unregistering): left allmulticast mode [ 1424.692011][T14806] bridge_slave_0 (unregistering): left promiscuous mode [ 1424.699057][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.893319][T14815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.918677][T14815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.949882][T14815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.958830][T14815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.967825][T14815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.038690][T14826] __nla_validate_parse: 1 callbacks suppressed [ 1425.038712][T14826] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10066'. [ 1425.300100][T14837] veth0_vlan: entered allmulticast mode [ 1425.524333][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10067'. [ 1425.720680][T14851] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10076'. [ 1425.761807][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10067'. [ 1426.564104][T14887] netlink: 'syz.2.10084': attribute type 61 has an invalid length. [ 1426.572740][T14887] netlink: 'syz.2.10084': attribute type 62 has an invalid length. [ 1426.618443][ T1119] Bluetooth: hci0: link tx timeout [ 1426.633742][ T1119] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1426.656022][ T1119] Bluetooth: hci0: link tx timeout [ 1426.661527][ T1119] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1426.805572][T14896] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10090'. [ 1427.149278][T14901] tc_dump_action: action bad kind [ 1427.158025][ T30] audit: type=1804 audit(1780425724.753:27): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.10094" name="/newroot/137/cgroup.controllers" dev="tmpfs" ino=726 res=1 errno=0 [ 1427.199634][ T30] audit: type=1800 audit(1780425724.753:28): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10094" name="cgroup.controllers" dev="tmpfs" ino=726 res=0 errno=0 [ 1427.389721][T14915] xt_hashlimit: overflow, try lower: 6/0 [ 1427.636978][ T5798] net_ratelimit: 8 callbacks suppressed [ 1427.637001][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.145110][T14921] ipvlan2: entered promiscuous mode [ 1428.175143][T14926] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1428.188017][T14926] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1428.200234][T14926] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1428.357321][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.363359][T14942] xfrm1: entered allmulticast mode [ 1428.386329][T14945] tipc: New replicast peer: 255.255.255.255 [ 1428.393003][T14945] tipc: Enabled bearer , priority 5 [ 1428.400784][T14945] tipc: Enabling of bearer rejected, failed to enable media [ 1428.621564][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10110'. [ 1428.754527][ T1119] Bluetooth: hci0: command 0x0405 tx timeout [ 1428.782240][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.854655][T14926] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1428.894421][T14926] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1428.904850][T14926] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1428.937887][T14961] veth0: entered promiscuous mode [ 1428.952609][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10111'. [ 1428.966569][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1429.007885][T14926] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.017746][T14926] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1429.027428][T14926] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1429.169274][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10114'. [ 1429.215933][T14968] netlink: 'syz.5.10114': attribute type 4 has an invalid length. [ 1429.236784][T14968] netlink: 'syz.5.10114': attribute type 4 has an invalid length. [ 1429.281210][T14926] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.292368][T14926] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1429.302099][T14926] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1429.432497][ T5798] tipc: Node number set to 4278190080 [ 1429.498474][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1429.617036][T14989] syzkaller0: entered promiscuous mode [ 1429.622543][T14989] syzkaller0: entered allmulticast mode [ 1429.785987][T17741] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.799740][T17741] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1429.809100][T17741] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1429.852831][ T9259] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.861687][ T9259] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1429.869889][ T9259] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1429.894997][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.913579][T17741] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.922148][T17741] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1429.930272][T17741] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1429.943025][T14995] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1429.957710][T17741] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.966329][T17741] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1429.974648][T17741] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1430.083093][T14999] syzkaller1: entered promiscuous mode [ 1430.088748][T14999] syzkaller1: entered allmulticast mode [ 1430.229458][T15006] __nla_validate_parse: 2 callbacks suppressed [ 1430.229480][T15006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10125'. [ 1430.310321][T15009] Bluetooth: MGMT ver 1.23 [ 1430.442636][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10127'. [ 1430.468941][T15020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.559841][T15020] bridge_slave_1 (unregistering): left allmulticast mode [ 1430.586515][T15020] bridge_slave_1 (unregistering): left promiscuous mode [ 1430.603057][T15020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.823084][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10131'. [ 1430.832452][ T1119] Bluetooth: hci0: command 0x0405 tx timeout [ 1430.861323][T15029] netlink: 'syz.5.10131': attribute type 10 has an invalid length. [ 1430.871278][T15029] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10131'. [ 1430.951391][T15031] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1430.959461][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10132'. [ 1430.981855][T15029] dummy0: entered promiscuous mode [ 1431.157972][T15040] bond3: option tlb_dynamic_lb: invalid value (115) [ 1431.184267][T15040] bond3 (unregistering): Released all slaves [ 1431.275724][T15045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10135'. [ 1431.388449][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10139'. [ 1431.393806][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.772085][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10143'. [ 1432.038951][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.209112][T15074] netlink: 260 bytes leftover after parsing attributes in process `syz.6.10146'. [ 1432.894808][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10155'. [ 1433.048320][T15110] FAULT_INJECTION: forcing a failure. [ 1433.048320][T15110] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.062172][T15110] CPU: 1 UID: 0 PID: 15110 Comm: syz.2.10157 Not tainted syzkaller #0 PREEMPT(full) [ 1433.062199][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1433.062212][T15110] Call Trace: [ 1433.062221][T15110] [ 1433.062230][T15110] dump_stack_lvl+0xe8/0x150 [ 1433.062263][T15110] should_fail_ex+0x412/0x560 [ 1433.062292][T15110] should_failslab+0xa8/0x100 [ 1433.062316][T15110] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1433.062345][T15110] ? __alloc_skb+0x186/0x7d0 [ 1433.062367][T15110] ? __alloc_skb+0x1d0/0x7d0 [ 1433.062384][T15110] ? __local_bh_enable_ip+0xd0/0x130 [ 1433.062412][T15110] __alloc_skb+0x1d0/0x7d0 [ 1433.062438][T15110] netlink_sendmsg+0x5d4/0xb40 [ 1433.062478][T15110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1433.062506][T15110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1433.062540][T15110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1433.062573][T15110] ____sys_sendmsg+0x972/0x9f0 [ 1433.062596][T15110] ? __might_fault+0xaf/0x130 [ 1433.062631][T15110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1433.062664][T15110] ? import_iovec+0x73/0xa0 [ 1433.062693][T15110] ___sys_sendmsg+0x2a5/0x360 [ 1433.062715][T15110] ? __lock_acquire+0x6b5/0x2cf0 [ 1433.062743][T15110] ? __pfx____sys_sendmsg+0x10/0x10 [ 1433.062821][T15110] ? __fget_files+0x2a/0x420 [ 1433.062848][T15110] ? __fget_files+0x3a0/0x420 [ 1433.062886][T15110] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1433.062913][T15110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1433.062948][T15110] ? __pfx_ksys_write+0x10/0x10 [ 1433.062990][T15110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.063013][T15110] do_syscall_64+0x174/0x580 [ 1433.063049][T15110] ? trace_irq_disable+0x3b/0x140 [ 1433.063083][T15110] ? clear_bhb_loop+0x40/0x90 [ 1433.063102][T15110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.063117][T15110] RIP: 0033:0x7fd9f299ce59 [ 1433.063132][T15110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.063145][T15110] RSP: 002b:00007fd9f3912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.063161][T15110] RAX: ffffffffffffffda RBX: 00007fd9f2c15fa0 RCX: 00007fd9f299ce59 [ 1433.063172][T15110] RDX: 0000000000004084 RSI: 0000200000000040 RDI: 0000000000000003 [ 1433.063181][T15110] RBP: 00007fd9f3912090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.063191][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.063199][T15110] R13: 00007fd9f2c16038 R14: 00007fd9f2c15fa0 R15: 00007ffd666fa278 [ 1433.063223][T15110] [ 1433.320737][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.801260][T15130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.822692][T15130] 8021q: VLANs not supported on ip_vti0 [ 1434.016784][T15141] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1434.053071][T15141] bridge2: entered allmulticast mode [ 1434.429038][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.437206][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.671621][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.142130][T15187] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1435.154438][T15187] netlink: 'syz.1.10176': attribute type 5 has an invalid length. [ 1435.275154][T15195] __nla_validate_parse: 4 callbacks suppressed [ 1435.275177][T15195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10181'. [ 1435.338393][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10180'. [ 1435.352255][T15201] netlink: 'syz.6.10182': attribute type 1 has an invalid length. [ 1435.365706][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10180'. [ 1435.386670][T15202] openvswitch: netlink: Invalid VLAN frame [ 1435.407446][T15203] openvswitch: netlink: Invalid VLAN frame [ 1435.414251][T15201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1435.440699][T15192] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10180'. [ 1435.449707][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10180'. [ 1435.509256][T15200] bond3: (slave veth0_to_bond): making interface the new active one [ 1435.518798][T15200] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1435.550114][T15204] macvlan2: entered promiscuous mode [ 1435.555475][T15204] macvlan2: entered allmulticast mode [ 1435.561686][T15204] bond3: entered promiscuous mode [ 1435.566764][T15204] veth0_to_bond: entered promiscuous mode [ 1435.574768][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.583694][T15204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1435.591675][T15204] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1435.607860][T15204] bond3: left promiscuous mode [ 1435.612752][T15204] veth0_to_bond: left promiscuous mode [ 1436.052997][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10186'. [ 1436.363895][T15234] veth7: entered promiscuous mode [ 1436.684314][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.704895][T15240] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1436.963030][T15250] Unsupported ieee802154 address type: 0 [ 1437.448848][T15261] gre0: entered promiscuous mode [ 1437.454193][T15261] gre0: entered allmulticast mode [ 1437.460460][T15261] tipc: Enabled bearer , priority 0 [ 1437.478375][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.532812][T15259] tipc: Disabling bearer [ 1437.607264][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10201'. [ 1437.616371][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10201'. [ 1437.692354][T15276] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10203'. [ 1438.232671][T15292] syzkaller0: entered promiscuous mode [ 1438.238208][T15292] syzkaller0: entered allmulticast mode [ 1438.470156][T15298] xt_hashlimit: size too large, truncated to 1048576 [ 1438.585231][T15304] netlink: 'syz.1.10211': attribute type 1 has an invalid length. [ 1438.780490][T15308] netlink: 'syz.2.10213': attribute type 1 has an invalid length. [ 1438.893768][T15308] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1438.908434][T15309] gretap1: entered allmulticast mode [ 1438.922674][ T6067] net_ratelimit: 3 callbacks suppressed [ 1438.922695][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.013968][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.511715][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.747228][T15368] gre2: entered promiscuous mode [ 1440.826309][T15370] netlink: 'syz.5.10234': attribute type 1 has an invalid length. [ 1440.843834][T15370] __nla_validate_parse: 4 callbacks suppressed [ 1440.843859][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10234'. [ 1440.861749][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10234'. [ 1440.871628][T15370] netlink: 11 bytes leftover after parsing attributes in process `syz.5.10234'. [ 1440.880901][T15370] netlink: 11 bytes leftover after parsing attributes in process `syz.5.10234'. [ 1440.904166][T15370] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10234'. [ 1440.917875][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10235'. [ 1440.927765][T15374] netlink: 'syz.2.10235': attribute type 15 has an invalid length. [ 1440.936017][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10235'. [ 1441.063166][T15382] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10236'. [ 1441.082955][T15385] FAULT_INJECTION: forcing a failure. [ 1441.082955][T15385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.096425][T15385] CPU: 0 UID: 0 PID: 15385 Comm: syz.2.10237 Not tainted syzkaller #0 PREEMPT(full) [ 1441.096446][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1441.096456][T15385] Call Trace: [ 1441.096462][T15385] [ 1441.096469][T15385] dump_stack_lvl+0xe8/0x150 [ 1441.096494][T15385] should_fail_ex+0x412/0x560 [ 1441.096515][T15385] _copy_from_iter+0x1d3/0x1670 [ 1441.096535][T15385] ? rcu_is_watching+0x15/0xb0 [ 1441.096559][T15385] ? __pfx__copy_from_iter+0x10/0x10 [ 1441.096581][T15385] ? netlink_sendmsg+0x650/0xb40 [ 1441.096624][T15385] ? skb_put+0x11b/0x210 [ 1441.096650][T15385] netlink_sendmsg+0x6c0/0xb40 [ 1441.096686][T15385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.096716][T15385] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1441.096741][T15385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1441.096765][T15385] ____sys_sendmsg+0x972/0x9f0 [ 1441.096783][T15385] ? __might_fault+0xaf/0x130 [ 1441.096809][T15385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1441.096833][T15385] ? import_iovec+0x73/0xa0 [ 1441.096854][T15385] ___sys_sendmsg+0x2a5/0x360 [ 1441.096871][T15385] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.096890][T15385] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.096912][T15385] ? kstrtouint+0x6e/0xe0 [ 1441.096955][T15385] ? __fget_files+0x2a/0x420 [ 1441.096979][T15385] ? __fget_files+0x3a0/0x420 [ 1441.097006][T15385] __sys_sendmmsg+0x27c/0x4e0 [ 1441.097028][T15385] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1441.097044][T15385] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1441.097081][T15385] ? ksys_write+0x242/0x270 [ 1441.097105][T15385] ? __pfx_ksys_write+0x10/0x10 [ 1441.097131][T15385] __x64_sys_sendmmsg+0xa0/0xc0 [ 1441.097148][T15385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.097164][T15385] do_syscall_64+0x174/0x580 [ 1441.097179][T15385] ? trace_irq_disable+0x3b/0x140 [ 1441.097201][T15385] ? clear_bhb_loop+0x40/0x90 [ 1441.097220][T15385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.097235][T15385] RIP: 0033:0x7fd9f299ce59 [ 1441.097250][T15385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.097263][T15385] RSP: 002b:00007fd9f3912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1441.097279][T15385] RAX: ffffffffffffffda RBX: 00007fd9f2c15fa0 RCX: 00007fd9f299ce59 [ 1441.097290][T15385] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1441.097301][T15385] RBP: 00007fd9f3912090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.097310][T15385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.097318][T15385] R13: 00007fd9f2c16038 R14: 00007fd9f2c15fa0 R15: 00007ffd666fa278 [ 1441.097343][T15385] [ 1441.421817][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.566772][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10243'. [ 1441.575805][T15394] netlink: 'syz.5.10243': attribute type 5 has an invalid length. [ 1441.583653][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10243'. [ 1441.600649][T15394] geneve4: entered promiscuous mode [ 1441.605919][T15394] geneve4: entered allmulticast mode [ 1441.627544][ T48] netdevsim netdevsim5 €Â: set [1, 0] type 2 family 0 port 256 - 0 [ 1441.638459][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1441.657608][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1441.685685][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1442.499020][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.551511][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.579868][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.274351][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.610812][T15398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1444.664008][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.853078][T15431] FAULT_INJECTION: forcing a failure. [ 1444.853078][T15431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.881409][T15431] CPU: 1 UID: 0 PID: 15431 Comm: syz.5.10251 Not tainted syzkaller #0 PREEMPT(full) [ 1444.881440][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1444.881453][T15431] Call Trace: [ 1444.881462][T15431] [ 1444.881472][T15431] dump_stack_lvl+0xe8/0x150 [ 1444.881503][T15431] should_fail_ex+0x412/0x560 [ 1444.881532][T15431] _copy_from_iter+0x1d3/0x1670 [ 1444.881561][T15431] ? rcu_is_watching+0x15/0xb0 [ 1444.881593][T15431] ? __pfx__copy_from_iter+0x10/0x10 [ 1444.881626][T15431] ? netlink_sendmsg+0x650/0xb40 [ 1444.881650][T15431] ? skb_put+0x11b/0x210 [ 1444.881676][T15431] netlink_sendmsg+0x6c0/0xb40 [ 1444.881712][T15431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1444.881742][T15431] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1444.881776][T15431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1444.881810][T15431] ____sys_sendmsg+0x972/0x9f0 [ 1444.881834][T15431] ? __might_fault+0xaf/0x130 [ 1444.881873][T15431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1444.881908][T15431] ? import_iovec+0x73/0xa0 [ 1444.881937][T15431] ___sys_sendmsg+0x2a5/0x360 [ 1444.881961][T15431] ? __lock_acquire+0x6b5/0x2cf0 [ 1444.881990][T15431] ? __pfx____sys_sendmsg+0x10/0x10 [ 1444.882020][T15431] ? kstrtouint+0x6e/0xe0 [ 1444.882081][T15431] ? __fget_files+0x2a/0x420 [ 1444.882106][T15431] ? __fget_files+0x3a0/0x420 [ 1444.882144][T15431] __sys_sendmmsg+0x27c/0x4e0 [ 1444.882176][T15431] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1444.882198][T15431] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1444.882261][T15431] ? ksys_write+0x242/0x270 [ 1444.882294][T15431] ? __pfx_ksys_write+0x10/0x10 [ 1444.882333][T15431] __x64_sys_sendmmsg+0xa0/0xc0 [ 1444.882358][T15431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.882381][T15431] do_syscall_64+0x174/0x580 [ 1444.882403][T15431] ? trace_irq_disable+0x3b/0x140 [ 1444.882434][T15431] ? clear_bhb_loop+0x40/0x90 [ 1444.882461][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.882482][T15431] RIP: 0033:0x7fd73159ce59 [ 1444.882502][T15431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.882521][T15431] RSP: 002b:00007fd7323d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1444.882544][T15431] RAX: ffffffffffffffda RBX: 00007fd731815fa0 RCX: 00007fd73159ce59 [ 1444.882560][T15431] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1444.882575][T15431] RBP: 00007fd7323d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.882588][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.882601][T15431] R13: 00007fd731816038 R14: 00007fd731815fa0 R15: 00007ffdf83197b8 [ 1444.882635][T15431] [ 1445.521611][T14118] IPVS: starting estimator thread 0... [ 1445.574254][T15440] netlink: 'syz.6.10255': attribute type 5 has an invalid length. [ 1445.663584][T15443] openvswitch: netlink: IP tunnel dst address not specified [ 1445.684455][T15444] sctp: [Deprecated]: syz.5.10256 (pid 15444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1445.684455][T15444] Use struct sctp_sack_info instead [ 1445.726936][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.831605][T15438] IPVS: using max 28 ests per chain, 67200 per kthread [ 1445.859217][ T1119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1445.876147][ T1119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1445.886890][ T1119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1445.904684][ T1119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1445.914796][ T1119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1445.993672][T15454] __nla_validate_parse: 4 callbacks suppressed [ 1445.993699][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10259'. [ 1446.057876][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10259'. [ 1446.166218][T15461] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10261'. [ 1446.183212][T15462] openvswitch: netlink: IPv4 tun info is not correct [ 1446.220058][T15462] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10260'. [ 1446.254282][T15462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1446.536112][T15473] netlink: 'syz.6.10264': attribute type 40 has an invalid length. [ 1446.581292][T15470] FAULT_INJECTION: forcing a failure. [ 1446.581292][T15470] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.596675][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.611764][T15470] CPU: 1 UID: 0 PID: 15470 Comm: syz.2.10263 Not tainted syzkaller #0 PREEMPT(full) [ 1446.611796][T15470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1446.611810][T15470] Call Trace: [ 1446.611819][T15470] [ 1446.611829][T15470] dump_stack_lvl+0xe8/0x150 [ 1446.611860][T15470] should_fail_ex+0x412/0x560 [ 1446.611890][T15470] should_failslab+0xa8/0x100 [ 1446.611914][T15470] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1446.611945][T15470] ? __alloc_skb+0x186/0x7d0 [ 1446.611966][T15470] ? __alloc_skb+0x1d0/0x7d0 [ 1446.611984][T15470] ? __local_bh_enable_ip+0xd0/0x130 [ 1446.612012][T15470] __alloc_skb+0x1d0/0x7d0 [ 1446.612033][T15470] ? netlink_ack_tlv_len+0x6c/0x210 [ 1446.612061][T15470] netlink_ack+0x146/0xa50 [ 1446.612082][T15470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1446.612106][T15470] ? __lock_acquire+0x6b5/0x2cf0 [ 1446.612153][T15470] netlink_rcv_skb+0x2b6/0x4b0 [ 1446.612178][T15470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1446.612202][T15470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1446.612241][T15470] ? netlink_deliver_tap+0x2e/0x1b0 [ 1446.612265][T15470] ? netlink_deliver_tap+0x2e/0x1b0 [ 1446.612296][T15470] netlink_unicast+0x75c/0x8e0 [ 1446.612330][T15470] netlink_sendmsg+0x813/0xb40 [ 1446.612366][T15470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.612395][T15470] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1446.612429][T15470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1446.612462][T15470] ____sys_sendmsg+0x972/0x9f0 [ 1446.612488][T15470] ? __might_fault+0xaf/0x130 [ 1446.612523][T15470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1446.612558][T15470] ? import_iovec+0x73/0xa0 [ 1446.612588][T15470] ___sys_sendmsg+0x2a5/0x360 [ 1446.612611][T15470] ? __lock_acquire+0x6b5/0x2cf0 [ 1446.612639][T15470] ? __pfx____sys_sendmsg+0x10/0x10 [ 1446.612672][T15470] ? kstrtouint+0x6e/0xe0 [ 1446.612733][T15470] ? __fget_files+0x2a/0x420 [ 1446.612759][T15470] ? __fget_files+0x3a0/0x420 [ 1446.612796][T15470] __sys_sendmmsg+0x27c/0x4e0 [ 1446.612827][T15470] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1446.612850][T15470] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1446.612903][T15470] ? ksys_write+0x242/0x270 [ 1446.612935][T15470] ? __pfx_ksys_write+0x10/0x10 [ 1446.612972][T15470] __x64_sys_sendmmsg+0xa0/0xc0 [ 1446.612997][T15470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.613020][T15470] do_syscall_64+0x174/0x580 [ 1446.613041][T15470] ? trace_irq_disable+0x3b/0x140 [ 1446.613072][T15470] ? clear_bhb_loop+0x40/0x90 [ 1446.613100][T15470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.613127][T15470] RIP: 0033:0x7fd9f299ce59 [ 1446.613148][T15470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.613166][T15470] RSP: 002b:00007fd9f3912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1446.613189][T15470] RAX: ffffffffffffffda RBX: 00007fd9f2c15fa0 RCX: 00007fd9f299ce59 [ 1446.613204][T15470] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1446.613219][T15470] RBP: 00007fd9f3912090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.613232][T15470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.613245][T15470] R13: 00007fd9f2c16038 R14: 00007fd9f2c15fa0 R15: 00007ffd666fa278 [ 1446.613280][T15470] [ 1446.985404][T15477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10262'. [ 1447.031798][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.131199][T15485] bridge_slave_0: left allmulticast mode [ 1447.137207][T15485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.153845][T15485] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1447.190079][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10267'. [ 1447.199103][T15488] netlink: 'syz.6.10267': attribute type 5 has an invalid length. [ 1447.208994][T15487] wg1: entered promiscuous mode [ 1447.213917][T15487] wg1: entered allmulticast mode [ 1447.264950][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10267'. [ 1447.275930][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.497694][T15495] hsr0: entered promiscuous mode [ 1447.608296][T15491] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10270'. [ 1447.819017][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10273'. [ 1447.872960][T15513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10274'. [ 1448.133378][ T1119] Bluetooth: hci4: command tx timeout [ 1448.741473][T15450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.751000][T15450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.758632][T15450] bridge_slave_0: entered allmulticast mode [ 1448.766759][T15450] bridge_slave_0: entered promiscuous mode [ 1448.781973][T15450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.789342][T15450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.861658][T15450] bridge_slave_1: entered allmulticast mode [ 1448.871720][T15450] bridge_slave_1: entered promiscuous mode [ 1449.033114][T15528] dvmrp0: entered allmulticast mode [ 1449.170285][T15450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.183009][T15450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.293117][ T6063] net_ratelimit: 7 callbacks suppressed [ 1449.293136][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.363989][T15450] team0: Port device team_slave_0 added [ 1449.401023][T15450] team0: Port device team_slave_1 added [ 1449.474755][T15450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.509005][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.598856][T15450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.623903][T15450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.632044][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.650847][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.698520][T15450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.799677][T15560] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1449.948707][T15450] hsr_slave_0: entered promiscuous mode [ 1449.956554][T15450] hsr_slave_1: entered promiscuous mode [ 1449.963627][T15450] debugfs: 'hsr0' already exists in 'hsr' [ 1449.969445][T15450] Cannot create hsr debugfs directory [ 1450.026623][T15561] tipc: Enabled bearer , priority 0 [ 1450.078438][T15561] syzkaller0: entered promiscuous mode [ 1450.084210][T15561] syzkaller0: entered allmulticast mode [ 1450.149657][T15561] tipc: Resetting bearer [ 1450.188541][T15561] netlink: 'syz.6.10288': attribute type 2 has an invalid length. [ 1450.288784][ T1119] Bluetooth: hci4: command tx timeout [ 1450.407538][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.416493][T15555] tipc: Resetting bearer [ 1450.488124][T15555] tipc: Disabling bearer [ 1450.770156][T15450] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1450.782105][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1450.795042][T15450] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1450.825647][T15586] netlink: 'syz.2.10300': attribute type 11 has an invalid length. [ 1450.924887][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1451.013258][T15450] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1451.050638][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1451.074275][T15450] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1451.089664][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1451.161922][T15590] __nla_validate_parse: 3 callbacks suppressed [ 1451.161942][T15590] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10301'. [ 1451.202731][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10303'. [ 1451.217775][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10303'. [ 1451.340303][T15450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.381743][T15450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.412884][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.430674][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.437938][ T9259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.467761][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.475002][ T9259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.517500][T15450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1451.536177][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.552882][T15450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1451.717484][T15619] syzkaller0: entered promiscuous mode [ 1451.725304][T15619] syzkaller0: entered allmulticast mode [ 1451.908712][T15621] tipc: Started in network mode [ 1451.913924][T15621] tipc: Node identity 02570a1192f9, cluster identity 4711 [ 1451.922489][T15621] tipc: Enabled bearer , priority 0 [ 1451.955776][T15617] syzkaller0: create flow: hash 3134447814 index 2 [ 1452.007588][ T9262] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.041979][ T9262] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1452.061562][ T9262] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1452.148205][T15618] tipc: Resetting bearer [ 1452.199407][T15618] tipc: Disabling bearer [ 1452.285322][ T9261] syzkaller0: tun_net_xmit 76 [ 1452.297446][ T9261] syzkaller0: tun_net_xmit 48 [ 1452.312151][T14118] syzkaller0: tun_net_xmit 76 [ 1452.360467][ T9262] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.377248][T15635] netlink: 'syz.1.10311': attribute type 1 has an invalid length. [ 1452.387739][ T9262] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1452.407493][ T9262] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1452.427201][ T1119] Bluetooth: hci4: command tx timeout [ 1452.435121][ T6051] syzkaller0: tun_net_xmit 76 [ 1452.452784][T15617] syzkaller0: delete flow: hash 3134447814 index 2 [ 1452.675020][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.688553][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.731500][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10313'. [ 1453.802186][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.872557][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1454.511860][ T1119] Bluetooth: hci4: command tx timeout [ 1454.927672][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.719198][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.052282][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.249413][T15635] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1456.317604][ T9262] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.370389][ T9262] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1456.380855][ T9262] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1456.563862][T15668] netlink: 'syz.1.10316': attribute type 1 has an invalid length. [ 1456.581049][ T9262] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.591446][ T9262] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1456.601142][ T9262] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1456.619660][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10317'. [ 1456.620725][T15671] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10316'. [ 1456.620746][T15671] netlink: 'syz.1.10316': attribute type 9 has an invalid length. [ 1456.698862][T15676] netlink: 'syz.2.10319': attribute type 19 has an invalid length. [ 1456.706823][T15676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10319'. [ 1456.784911][T15668] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1456.808968][T15450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.830559][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10320'. [ 1456.852957][T15671] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1456.883169][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10320'. [ 1456.913855][T15674] macvlan2: entered promiscuous mode [ 1456.925897][T15674] macvlan2: entered allmulticast mode [ 1456.938642][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10320'. [ 1456.956690][T15674] bond8: entered promiscuous mode [ 1456.976466][T15674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1457.013800][T15674] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1457.047767][T15674] bond8: left promiscuous mode [ 1457.079487][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.103049][T15677] hmó3)ó: entered promiscuous mode [ 1457.348856][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10321'. [ 1457.391069][T15695] ip6gre1: entered promiscuous mode [ 1457.396356][T15695] ip6gre1: entered allmulticast mode [ 1457.543259][T15695] netlink: 'syz.5.10321': attribute type 6 has an invalid length. [ 1457.553453][T15695] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10321'. [ 1457.620868][T15707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10323'. [ 1457.734084][T15695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.754759][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.890413][T15718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1457.963417][T15450] veth0_vlan: entered promiscuous mode [ 1457.997179][T15450] veth1_vlan: entered promiscuous mode [ 1458.057994][ T9262] bridge_slave_1: left allmulticast mode [ 1458.063728][ T9262] bridge_slave_1: left promiscuous mode [ 1458.069535][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.217753][ T6065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.751528][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.854480][ T9262] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1458.862640][ T9262] bridge2 (unregistering): left promiscuous mode [ 1458.934075][ T9262] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1458.957078][ T9262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.969174][ T9262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.005669][ T9262] bond0 (unregistering): Released all slaves [ 1459.026001][ T9262] bond1 (unregistering): (slave lo): Releasing backup interface [ 1459.034765][ T9262] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1459.047129][ T9262] bond1 (unregistering): Released all slaves [ 1459.069772][ T9262] bond2 (unregistering): Released all slaves [ 1459.108717][ T9262] bond3 (unregistering): (slave veth3): Releasing active interface [ 1459.131556][ T9262] batadv1: entered promiscuous mode [ 1459.140606][ T9262] bond3 (unregistering): (slave batadv1): Releasing active interface [ 1459.152098][ T9262] bond3 (unregistering): Released all slaves [ 1459.186226][ T9262] bond4 (unregistering): (slave veth5): Releasing backup interface [ 1459.203583][ T9262] bond4 (unregistering): Released all slaves [ 1459.224634][ T9262] bond5 (unregistering): Released all slaves [ 1459.246060][ T9262] bond6 (unregistering): Released all slaves [ 1459.312027][T15744] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1459.315384][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1459.373016][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.503408][T15450] veth0_macvtap: entered promiscuous mode [ 1459.529297][T15450] veth1_macvtap: entered promiscuous mode [ 1459.563625][T15762] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10333'. [ 1459.603014][T15450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.644770][T15450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.676375][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.707271][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.717182][ T9260] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.758842][ T9260] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.844191][ T9265] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.488943][ T5798] net_ratelimit: 1 callbacks suppressed [ 1460.488966][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.690429][ T9265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.731582][ T9265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.949416][ T9265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.961640][ T9265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.981750][T15818] x_tables: duplicate underflow at hook 1 [ 1461.395011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.576730][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1461.665081][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.791646][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.858206][T15832] dvmrp0: left allmulticast mode [ 1461.930210][T15843] __nla_validate_parse: 6 callbacks suppressed [ 1461.930232][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10352'. [ 1461.974990][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10352'. [ 1462.021447][T15846] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1462.390877][T15863] netlink: 27 bytes leftover after parsing attributes in process `syz.7.10356'. [ 1462.611736][T15871] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10358'. [ 1462.802944][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.365013][ T9262] hsr_slave_0: left promiscuous mode [ 1463.376455][ T9262] hsr_slave_1: left promiscuous mode [ 1463.388051][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.404789][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.457995][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.470245][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.575864][ T9262] veth1_macvtap: left promiscuous mode [ 1463.593252][ T9262] veth0_macvtap: left promiscuous mode [ 1463.610642][ T9262] veth1_vlan: left promiscuous mode [ 1463.618007][ T9262] veth0_vlan: left promiscuous mode [ 1463.723762][T15912] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1463.872986][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.175782][ T9262] team0 (unregistering): Port device team_slave_1 removed [ 1464.207473][ T9262] team0 (unregistering): Port device team_slave_0 removed [ 1464.317835][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1464.337787][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1464.373886][T15912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1464.818982][ T9262] IPVS: stop unused estimator thread 0... [ 1464.831953][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.922118][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.145029][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10378'. [ 1465.154884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.155331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.189791][T15955] netlink: 'syz.1.10378': attribute type 5 has an invalid length. [ 1465.199334][T15955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10378'. [ 1465.260578][T15945] syzkaller0: entered promiscuous mode [ 1465.285659][T15945] syzkaller0: entered allmulticast mode [ 1465.953553][T24344] net_ratelimit: 6 callbacks suppressed [ 1465.953576][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.033442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.992863][ T6063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.871572][T14115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.054139][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.073159][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.235190][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.882837][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.121510][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.194444][T15965] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10379'. [ 1470.215718][T15975] gre0: entered promiscuous mode [ 1470.230410][T15975] gre0: entered allmulticast mode [ 1470.238909][ T5296] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1470.602536][T16024] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10388'. [ 1470.660484][T16019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.805011][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10390'. [ 1470.831803][T16028] netlink: 'syz.5.10390': attribute type 5 has an invalid length. [ 1470.855392][T16028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10390'. [ 1470.867771][T16030] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1470.912444][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.027052][T16034] IPv6: sit1: Disabled Multicast RS [ 1471.052752][T16034] macvtap2: entered promiscuous mode [ 1471.058345][T16034] bridge0: entered promiscuous mode [ 1471.087813][T16034] bridge0: port 2(macvtap2) entered blocking state [ 1471.115033][T16034] bridge0: port 2(macvtap2) entered disabled state [ 1471.138530][T16034] macvtap2: entered allmulticast mode [ 1471.148390][T16034] bridge0: entered allmulticast mode [ 1471.155189][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.163540][T16039] netlink: 'syz.7.10394': attribute type 1 has an invalid length. [ 1471.185415][T16034] macvtap2: left allmulticast mode [ 1471.190651][T16034] bridge0: left allmulticast mode [ 1471.253205][ T6067] bridge0: left promiscuous mode [ 1471.946587][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10403'. [ 1471.984396][T16074] netlink: 'syz.6.10403': attribute type 5 has an invalid length. [ 1472.017367][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10403'. [ 1472.204204][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.288309][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10405'. [ 1472.441412][T16098] netlink: 'syz.2.10409': attribute type 3 has an invalid length. [ 1472.465913][T16098] netlink: 'syz.2.10409': attribute type 16 has an invalid length. [ 1472.491607][T16098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10409'. [ 1472.542945][T16085] : entered promiscuous mode [ 1472.810948][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10410'. [ 1473.232614][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.691610][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10415'. [ 1473.728262][T16127] netlink: 'syz.7.10415': attribute type 5 has an invalid length. [ 1473.805256][T16127] geneve2: entered promiscuous mode [ 1473.819733][T16127] geneve2: entered allmulticast mode [ 1473.841592][ T9259] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1473.961364][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.975451][ T9259] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1474.008614][ T9259] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1474.046764][T16130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.069828][T16130] batadv_slave_1: entered promiscuous mode [ 1474.122188][ T9259] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1474.277606][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.194187][T16165] netlink: 'syz.2.10424': attribute type 1 has an invalid length. [ 1475.264631][T16165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1475.324328][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.349295][T16167] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1475.406330][T16165] bond4: (slave dummy0): making interface the new active one [ 1475.426322][T16165] dummy0: entered promiscuous mode [ 1475.441747][T16165] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1475.633734][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.197870][T16177] __nla_validate_parse: 3 callbacks suppressed [ 1476.197932][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10427'. [ 1476.213956][T16177] netlink: 'syz.1.10427': attribute type 5 has an invalid length. [ 1476.231763][T16177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10427'. [ 1476.355352][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.375472][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1476.391291][T16179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1476.401586][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1476.410697][T16179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1476.426704][T16179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1476.466893][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1476.501972][T16179] ip6gre1: entered promiscuous mode [ 1476.507511][T16179] ip6gre1: entered allmulticast mode [ 1476.992195][T14115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.395734][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.807335][T16210] syzkaller0: entered promiscuous mode [ 1477.813272][T16210] syzkaller0: entered allmulticast mode [ 1478.127482][T16218] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1478.435020][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.596212][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10438'. [ 1478.625812][T16224] netlink: 'syz.2.10438': attribute type 5 has an invalid length. [ 1478.638002][T16224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10438'. [ 1479.476669][T24344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.599490][T16262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.622186][T16268] vlan0: left allmulticast mode [ 1479.631413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.639653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.650077][T16262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.663225][T16268] geneve0: left allmulticast mode [ 1479.685773][T16268] vlan0: left promiscuous mode [ 1479.691677][T16262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.722427][T16268] geneve0: left promiscuous mode [ 1479.750264][T16268] bridge0: port 3(vlan0) entered disabled state [ 1479.793392][T16268] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1479.826891][T16268] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1479.859722][T16268] bridge0: port 1(netdevsim1) entered disabled state [ 1479.913846][T16268] bridge_slave_1: left allmulticast mode [ 1479.940838][T16268] bridge_slave_1: left promiscuous mode [ 1479.965991][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.214712][T16284] netlink: 'syz.2.10451': attribute type 5 has an invalid length. [ 1481.594970][ T9262] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.625204][ T9262] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1481.660554][ T9262] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.686720][ T9262] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1481.714888][ T9262] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.741581][ T9262] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1481.760853][ T9262] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.785547][ T9262] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1482.195735][T16324] __nla_validate_parse: 12 callbacks suppressed [ 1482.195761][T16324] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10456'. [ 1482.721622][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10462'. [ 1482.791231][T16347] netlink: 'syz.1.10462': attribute type 5 has an invalid length. [ 1482.824301][T16350] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10463'. [ 1482.838185][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10462'. [ 1483.118867][T16362] net_ratelimit: 2 callbacks suppressed [ 1483.118888][T16362] openvswitch: netlink: Missing valid actions attribute. [ 1483.179073][T16366] openvswitch: netlink: Missing valid actions attribute. [ 1483.201617][T16362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.258958][T16366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.390534][T16375] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10468'. [ 1484.300899][ T9266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.336806][ T9266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.536942][T16420] netlink: 'syz.5.10475': attribute type 1 has an invalid length. [ 1484.565672][T16420] netlink: 'syz.5.10475': attribute type 1 has an invalid length. [ 1484.594542][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.722215][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10476'. [ 1484.745121][T16424] netlink: 'syz.2.10476': attribute type 5 has an invalid length. [ 1484.776524][T16424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10476'. [ 1485.057376][T16443] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10481'. [ 1485.102850][T16445] netlink: 'syz.5.10479': attribute type 3 has an invalid length. [ 1485.198924][T16448] bond9: entered promiscuous mode [ 1488.164802][ T8149] dummy0: left promiscuous mode [ 1488.196700][T16467] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.10485'. [ 1488.475971][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10490'. [ 1488.496884][T16481] erspan1: entered promiscuous mode [ 1488.513893][T16481] erspan1: entered allmulticast mode [ 1488.522389][T16486] netlink: 'syz.5.10490': attribute type 5 has an invalid length. [ 1488.543462][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10490'. [ 1488.802725][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10493'. [ 1488.856761][T16498] netlink: 'syz.5.10494': attribute type 1 has an invalid length. [ 1489.121592][T16504] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1489.305201][T16520] macsec0: entered promiscuous mode [ 1489.305403][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10497'. [ 1489.370863][T16519] veth1_macvtap: left promiscuous mode [ 1489.440768][T16519] macsec0 (unregistering): left promiscuous mode [ 1489.494754][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10499'. [ 1489.595014][T16530] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.10500'. [ 1489.769443][T16535] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1490.125764][T16552] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10506'. [ 1490.229341][T24344] IPVS: starting estimator thread 0... [ 1490.237855][T16560] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10507'. [ 1490.321224][T16563] IPVS: using max 26 ests per chain, 62400 per kthread [ 1490.360118][T16553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1490.950529][T16594] tipc: Enabled bearer , priority 0 [ 1491.173020][T16594] syzkaller0: entered promiscuous mode [ 1491.187790][T16594] syzkaller0: entered allmulticast mode [ 1491.356967][T16594] tipc: Resetting bearer [ 1491.766029][T16592] tipc: Resetting bearer [ 1491.857643][T16592] tipc: Disabling bearer [ 1492.586551][T16646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1492.595829][T16645] netlink: 'syz.7.10525': attribute type 29 has an invalid length. [ 1492.836094][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10528'. [ 1493.312979][ T1119] Bluetooth: hci4: command tx timeout [ 1493.358148][T16672] [ 1493.360546][T16672] ====================================================== [ 1493.367622][T16672] WARNING: possible circular locking dependency detected [ 1493.374744][T16672] syzkaller #0 Not tainted [ 1493.379223][T16672] ------------------------------------------------------ [ 1493.386323][T16672] syz.6.10533/16672 is trying to acquire lock: [ 1493.392542][T16672] ffff88802a8cd958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1493.402161][T16672] [ 1493.402161][T16672] but task is already holding lock: [ 1493.409553][T16672] ffff88802a8cd430 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1493.419881][T16672] [ 1493.419881][T16672] which lock already depends on the new lock. [ 1493.419881][T16672] [ 1493.430319][T16672] [ 1493.430319][T16672] the existing dependency chain (in reverse order) is: [ 1493.439361][T16672] [ 1493.439361][T16672] -> #6 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 1493.448341][T16672] blk_alloc_queue+0x546/0x680 [ 1493.453705][T16672] __blk_mq_alloc_disk+0x197/0x390 [ 1493.459405][T16672] nbd_dev_add+0x499/0xb50 [ 1493.464454][T16672] nbd_genl_connect+0x962/0x1cf0 [ 1493.469959][T16672] genl_family_rcv_msg_doit+0x22a/0x330 [ 1493.476062][T16672] genl_rcv_msg+0x61c/0x7a0 [ 1493.481116][T16672] netlink_rcv_skb+0x232/0x4b0 [ 1493.486432][T16672] genl_rcv+0x28/0x40 [ 1493.490961][T16672] netlink_unicast+0x75c/0x8e0 [ 1493.496261][T16672] netlink_sendmsg+0x813/0xb40 [ 1493.501568][T16672] ____sys_sendmsg+0x972/0x9f0 [ 1493.506890][T16672] ___sys_sendmsg+0x2a5/0x360 [ 1493.512198][T16672] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1493.517674][T16672] do_syscall_64+0x174/0x580 [ 1493.522809][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.529250][T16672] [ 1493.529250][T16672] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1493.536503][T16672] fs_reclaim_acquire+0x71/0x100 [ 1493.541988][T16672] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1493.548353][T16672] __alloc_skb+0x1d0/0x7d0 [ 1493.553309][T16672] __ip6_append_data+0x2d3c/0x3f60 [ 1493.559037][T16672] ip6_append_data+0x10f/0x280 [ 1493.564345][T16672] rawv6_sendmsg+0x12d3/0x18e0 [ 1493.569716][T16672] ____sys_sendmsg+0x80a/0x9f0 [ 1493.575022][T16672] ___sys_sendmsg+0x2a5/0x360 [ 1493.580328][T16672] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1493.585806][T16672] do_syscall_64+0x174/0x580 [ 1493.590944][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.597388][T16672] [ 1493.597388][T16672] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1493.605150][T16672] lock_sock_nested+0x41/0x100 [ 1493.610459][T16672] inet_shutdown+0x6a/0x390 [ 1493.615584][T16672] nbd_mark_nsock_dead+0x2e9/0x560 [ 1493.621331][T16672] sock_shutdown+0x15e/0x260 [ 1493.626468][T16672] nbd_clear_sock+0x24/0x170 [ 1493.631597][T16672] nbd_config_put+0x2dd/0x580 [ 1493.636834][T16672] nbd_genl_connect+0x19d5/0x1cf0 [ 1493.642408][T16672] genl_family_rcv_msg_doit+0x22a/0x330 [ 1493.648504][T16672] genl_rcv_msg+0x61c/0x7a0 [ 1493.653552][T16672] netlink_rcv_skb+0x232/0x4b0 [ 1493.658864][T16672] genl_rcv+0x28/0x40 [ 1493.663389][T16672] netlink_unicast+0x75c/0x8e0 [ 1493.668702][T16672] netlink_sendmsg+0x813/0xb40 [ 1493.674002][T16672] ____sys_sendmsg+0x972/0x9f0 [ 1493.679306][T16672] ___sys_sendmsg+0x2a5/0x360 [ 1493.684527][T16672] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1493.690002][T16672] do_syscall_64+0x174/0x580 [ 1493.695221][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.701652][T16672] [ 1493.701652][T16672] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1493.709320][T16672] __mutex_lock+0x1a3/0x1550 [ 1493.714457][T16672] nbd_queue_rq+0x37b/0x1100 [ 1493.719678][T16672] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1493.725761][T16672] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1493.733316][T16672] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1493.739849][T16672] blk_mq_run_hw_queue+0x348/0x4f0 [ 1493.745539][T16672] blk_mq_dispatch_list+0xd16/0xe10 [ 1493.751278][T16672] blk_mq_flush_plug_list+0x48d/0x570 [ 1493.757195][T16672] __blk_flush_plug+0x3ed/0x4d0 [ 1493.762590][T16672] __submit_bio+0x28d/0x580 [ 1493.767841][T16672] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1493.774031][T16672] block_read_full_folio+0x599/0x830 [ 1493.780055][T16672] filemap_read_folio+0x137/0x3b0 [ 1493.785658][T16672] do_read_cache_folio+0x358/0x590 [ 1493.791324][T16672] read_part_sector+0xb6/0x2b0 [ 1493.796701][T16672] adfspart_check_ICS+0xb1/0x960 [ 1493.802188][T16672] bdev_disk_changed+0x817/0x1770 [ 1493.807795][T16672] blkdev_get_whole+0x380/0x510 [ 1493.813262][T16672] bdev_open+0x31e/0xd30 [ 1493.818063][T16672] blkdev_open+0x470/0x610 [ 1493.823041][T16672] do_dentry_open+0x822/0x13a0 [ 1493.828358][T16672] vfs_open+0x3b/0x340 [ 1493.832965][T16672] path_openat+0x2e08/0x3860 [ 1493.838113][T16672] do_file_open+0x23e/0x4a0 [ 1493.843172][T16672] do_sys_openat2+0x113/0x200 [ 1493.848431][T16672] __x64_sys_openat+0x138/0x170 [ 1493.853843][T16672] do_syscall_64+0x174/0x580 [ 1493.858977][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.865425][T16672] [ 1493.865425][T16672] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1493.872680][T16672] __mutex_lock+0x1a3/0x1550 [ 1493.877821][T16672] nbd_queue_rq+0xc6/0x1100 [ 1493.882885][T16672] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1493.888971][T16672] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1493.895851][T16672] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1493.902379][T16672] blk_mq_run_hw_queue+0x348/0x4f0 [ 1493.908026][T16672] blk_mq_dispatch_list+0xd16/0xe10 [ 1493.913784][T16672] blk_mq_flush_plug_list+0x48d/0x570 [ 1493.919709][T16672] __blk_flush_plug+0x3ed/0x4d0 [ 1493.925101][T16672] __submit_bio+0x28d/0x580 [ 1493.930166][T16672] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1493.936341][T16672] block_read_full_folio+0x599/0x830 [ 1493.942163][T16672] filemap_read_folio+0x137/0x3b0 [ 1493.947738][T16672] do_read_cache_folio+0x358/0x590 [ 1493.953396][T16672] read_part_sector+0xb6/0x2b0 [ 1493.958711][T16672] adfspart_check_ICS+0xb1/0x960 [ 1493.964216][T16672] bdev_disk_changed+0x817/0x1770 [ 1493.969874][T16672] blkdev_get_whole+0x380/0x510 [ 1493.975274][T16672] bdev_open+0x31e/0xd30 [ 1493.980061][T16672] blkdev_open+0x470/0x610 [ 1493.985019][T16672] do_dentry_open+0x822/0x13a0 [ 1493.990347][T16672] vfs_open+0x3b/0x340 [ 1493.994954][T16672] path_openat+0x2e08/0x3860 [ 1494.000106][T16672] do_file_open+0x23e/0x4a0 [ 1494.005162][T16672] do_sys_openat2+0x113/0x200 [ 1494.010377][T16672] __x64_sys_openat+0x138/0x170 [ 1494.015775][T16672] do_syscall_64+0x174/0x580 [ 1494.021055][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.027594][T16672] [ 1494.027594][T16672] -> #1 (set->srcu){.+.+}-{0:0}: [ 1494.034748][T16672] __synchronize_srcu+0xca/0x300 [ 1494.040277][T16672] elevator_switch+0x1e8/0x7a0 [ 1494.045692][T16672] elevator_change+0x2cc/0x450 [ 1494.051032][T16672] elevator_set_default+0x36c/0x430 [ 1494.056800][T16672] blk_register_queue+0x3e9/0x4e0 [ 1494.062379][T16672] __add_disk+0x677/0xd50 [ 1494.067264][T16672] add_disk_fwnode+0xfb/0x480 [ 1494.072498][T16672] nbd_dev_add+0x72c/0xb50 [ 1494.077474][T16672] nbd_init+0x168/0x1f0 [ 1494.082259][T16672] do_one_initcall+0x250/0x870 [ 1494.087563][T16672] do_initcall_level+0x104/0x190 [ 1494.093049][T16672] do_initcalls+0x59/0xa0 [ 1494.097922][T16672] kernel_init_freeable+0x2a6/0x3e0 [ 1494.103666][T16672] kernel_init+0x1d/0x1d0 [ 1494.108536][T16672] ret_from_fork+0x514/0xb70 [ 1494.113667][T16672] ret_from_fork_asm+0x1a/0x30 [ 1494.118983][T16672] [ 1494.118983][T16672] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1494.126823][T16672] __lock_acquire+0x15a5/0x2cf0 [ 1494.132218][T16672] lock_acquire+0x106/0x350 [ 1494.137285][T16672] __mutex_lock+0x1a3/0x1550 [ 1494.142416][T16672] elevator_change+0x1b3/0x450 [ 1494.147765][T16672] elevator_set_none+0xb5/0x140 [ 1494.153189][T16672] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1494.159560][T16672] nbd_start_device+0x17f/0xb10 [ 1494.164959][T16672] nbd_genl_connect+0x165b/0x1cf0 [ 1494.170531][T16672] genl_family_rcv_msg_doit+0x22a/0x330 [ 1494.176633][T16672] genl_rcv_msg+0x61c/0x7a0 [ 1494.181738][T16672] netlink_rcv_skb+0x232/0x4b0 [ 1494.187067][T16672] genl_rcv+0x28/0x40 [ 1494.191602][T16672] netlink_unicast+0x75c/0x8e0 [ 1494.196920][T16672] netlink_sendmsg+0x813/0xb40 [ 1494.202252][T16672] ____sys_sendmsg+0x972/0x9f0 [ 1494.207582][T16672] ___sys_sendmsg+0x2a5/0x360 [ 1494.212822][T16672] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1494.218321][T16672] do_syscall_64+0x174/0x580 [ 1494.223468][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.230022][T16672] [ 1494.230022][T16672] other info that might help us debug this: [ 1494.230022][T16672] [ 1494.240295][T16672] Chain exists of: [ 1494.240295][T16672] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#69 [ 1494.240295][T16672] [ 1494.254100][T16672] Possible unsafe locking scenario: [ 1494.254100][T16672] [ 1494.261609][T16672] CPU0 CPU1 [ 1494.267053][T16672] ---- ---- [ 1494.272442][T16672] lock(&q->q_usage_counter(io)#69); [ 1494.277847][T16672] lock(fs_reclaim); [ 1494.284461][T16672] lock(&q->q_usage_counter(io)#69); [ 1494.292387][T16672] lock(&q->elevator_lock); [ 1494.297000][T16672] [ 1494.297000][T16672] *** DEADLOCK *** [ 1494.297000][T16672] [ 1494.305233][T16672] 6 locks held by syz.6.10533/16672: [ 1494.310541][T16672] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1494.318860][T16672] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1494.327859][T16672] #2: ffff888052fbd1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 1494.339316][T16672] #3: ffff888052fbd0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 1494.350357][T16672] #4: ffff88802a8cd430 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1494.361039][T16672] #5: ffff88802a8cd468 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1494.371986][T16672] [ 1494.371986][T16672] stack backtrace: [ 1494.377922][T16672] CPU: 0 UID: 0 PID: 16672 Comm: syz.6.10533 Not tainted syzkaller #0 PREEMPT(full) [ 1494.377955][T16672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.377972][T16672] Call Trace: [ 1494.377979][T16672] [ 1494.377988][T16672] dump_stack_lvl+0xe8/0x150 [ 1494.378014][T16672] print_circular_bug+0x2e1/0x300 [ 1494.378042][T16672] check_noncircular+0x12e/0x150 [ 1494.378070][T16672] __lock_acquire+0x15a5/0x2cf0 [ 1494.378102][T16672] ? elevator_change+0x1b3/0x450 [ 1494.378124][T16672] lock_acquire+0x106/0x350 [ 1494.378143][T16672] ? elevator_change+0x1b3/0x450 [ 1494.378171][T16672] __mutex_lock+0x1a3/0x1550 [ 1494.378192][T16672] ? elevator_change+0x1b3/0x450 [ 1494.378216][T16672] ? rcu_is_watching+0x15/0xb0 [ 1494.378240][T16672] ? work_grab_pending+0x3d1/0x990 [ 1494.378262][T16672] ? elevator_change+0x1b3/0x450 [ 1494.378286][T16672] ? __pfx___mutex_lock+0x10/0x10 [ 1494.378305][T16672] ? enable_work+0x17f/0x230 [ 1494.378327][T16672] ? lockdep_hardirqs_on+0x7a/0x110 [ 1494.378350][T16672] ? __cancel_work_sync+0xf7/0x110 [ 1494.378374][T16672] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1494.378401][T16672] elevator_change+0x1b3/0x450 [ 1494.378427][T16672] elevator_set_none+0xb5/0x140 [ 1494.378448][T16672] ? __pfx_elevator_set_none+0x10/0x10 [ 1494.378473][T16672] ? xa_load+0x1db/0x210 [ 1494.378497][T16672] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1494.378531][T16672] ? kernfs_add_one+0x477/0x5c0 [ 1494.378560][T16672] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1494.378592][T16672] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1494.378617][T16672] nbd_start_device+0x17f/0xb10 [ 1494.378649][T16672] ? device_create_file+0xf4/0x1b0 [ 1494.378680][T16672] nbd_genl_connect+0x165b/0x1cf0 [ 1494.378707][T16672] ? __pfx___nla_validate_parse+0x10/0x10 [ 1494.378737][T16672] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1494.378766][T16672] ? rcu_is_watching+0x15/0xb0 [ 1494.378797][T16672] ? trace_kmalloc+0x2a/0xf0 [ 1494.378827][T16672] ? __nla_parse+0x40/0x60 [ 1494.378851][T16672] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1494.378880][T16672] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1494.378912][T16672] genl_family_rcv_msg_doit+0x22a/0x330 [ 1494.378943][T16672] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1494.378977][T16672] ? __lock_acquire+0x6b5/0x2cf0 [ 1494.379001][T16672] genl_rcv_msg+0x61c/0x7a0 [ 1494.379030][T16672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1494.379056][T16672] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1494.379090][T16672] netlink_rcv_skb+0x232/0x4b0 [ 1494.379111][T16672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1494.379138][T16672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1494.379166][T16672] ? down_read+0x270/0x2e0 [ 1494.379186][T16672] ? genl_rcv+0xd/0x40 [ 1494.379212][T16672] genl_rcv+0x28/0x40 [ 1494.379236][T16672] netlink_unicast+0x75c/0x8e0 [ 1494.379259][T16672] netlink_sendmsg+0x813/0xb40 [ 1494.379288][T16672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.379313][T16672] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1494.379343][T16672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1494.379372][T16672] ____sys_sendmsg+0x972/0x9f0 [ 1494.379393][T16672] ? __might_fault+0xaf/0x130 [ 1494.379421][T16672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1494.379447][T16672] ? import_iovec+0x73/0xa0 [ 1494.379471][T16672] ___sys_sendmsg+0x2a5/0x360 [ 1494.379491][T16672] ? __lock_acquire+0x6b5/0x2cf0 [ 1494.379512][T16672] ? __pfx____sys_sendmsg+0x10/0x10 [ 1494.379536][T16672] ? futex_wake+0x4ac/0x580 [ 1494.379576][T16672] ? __fget_files+0x2a/0x420 [ 1494.379598][T16672] ? __fget_files+0x3a0/0x420 [ 1494.379626][T16672] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1494.379648][T16672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1494.379674][T16672] ? rcu_is_watching+0x15/0xb0 [ 1494.379700][T16672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.379720][T16672] do_syscall_64+0x174/0x580 [ 1494.379739][T16672] ? trace_irq_disable+0x3b/0x140 [ 1494.379767][T16672] ? clear_bhb_loop+0x40/0x90 [ 1494.379796][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.379815][T16672] RIP: 0033:0x7fac0219ce59 [ 1494.379834][T16672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.379851][T16672] RSP: 002b:00007fac030e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1494.379872][T16672] RAX: ffffffffffffffda RBX: 00007fac02415fa0 RCX: 00007fac0219ce59 [ 1494.379886][T16672] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 1494.379899][T16672] RBP: 00007fac02232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1494.379911][T16672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1494.379922][T16672] R13: 00007fac02416038 R14: 00007fac02415fa0 R15: 00007fff7a858448 [ 1494.379945][T16672] [ 1494.910301][T16686] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10536'. [ 1494.966809][ T1119] block nbd3: Receive control failed (result -32) [ 1494.971599][T11566] block nbd3: Receive control failed (result -32) [ 1494.993254][T16689] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10537'. [ 1499.951687][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!