last executing test programs: 4.914220206s ago: executing program 1 (id=2358): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000140)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='G', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000110001000000", @ANYRES32=r5, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000100080004"], 0x54}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000700)={0x1, 0x6}, &(0x7f0000000740)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000007c0)=0x40) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r7, 0x12504000) sendmmsg$inet_sctp(r2, &(0x7f0000000800)=[{&(0x7f0000000880)=@in6={0xa, 0x4e24, 0x9, @private1, 0x38}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000980)="c9d24bae75bb0ae2074d016a142c880bbf1e06b216c5b556561628dae81f6b89d473b182d3b1c4471ddd8e970a97c0baf509db06600d5a7c34309f06177a6dbba6773ffa4c650486827a04c30ad4c4aa5eb5b75f5324bb7c0666b369fe4d6ec5f63f54ff30e5dfa95c99a77f47690179a78edd7e9778d17329251bbfa94cd04046d1dbacc56153533586cbfa2364871ec072a115b1ab1bb13dfd75fa216896eff215cb3316ea2aaae4", 0xa9}, {&(0x7f0000000a40)="037b0c7a4d7797718bf0e224cea1ae7cd1a4ed347221aab32623b817a5c15a8f34f8b44c69eb196586699bc49dcce7011aba2d5a6cbe90a06fa85bb7a79a2adf955d147f5849dce6bbdad1f4c8dcdef96c62b50972caa2cbed1ada8be4f6c3", 0x5f}, {&(0x7f0000000b40)="92551f033ceeb2b6fcb1c9093292df53a75f8703ebffde0e81d0f8b74b7b962ff658b806cae881952747d56f7292e50f258e518082f9ad44e2dda1fa3711215354732ac3b52292a31a13a0320651ed249a9c35", 0x53}, {&(0x7f0000000bc0)="74164141a4267595a40b595f249ce3f2824ab4f9573ffd953ec5c83872f60adb618a8fa98b072d4462c5730ef039f94fab9e6109291483a95b5271143accaaa8893ef68e7d92b242c5bec869819472a7fc127f9a6cce0c276c8f0c5e46a95c24dd264e7090f28109cfef0657247cd6665eea0d4cf0aa40f69455ea4a3c7697c85d1654ed1009bfa145d17cca8ebea543b45e3d67f254dcafb2679df45ad18c2f4e19e3a447595e6b77a97838092e5834e90071ce287d27bfb8958c3adc6cc9c7ddfc0a4366fe285bb0dc116d11cc5dcc8fae905ecb4f5af48973413893defd61820ec35026d2ed0ea4b5a878baf2325705d7b61385", 0xf5}, {&(0x7f0000000cc0)="d5c1f1b9", 0x4}, {&(0x7f0000000d00)="ce1bedd53b5e3492b7b4a9f70a255599ba5513d23f2dc7fee1065a0b05433dbe8524053534f1e124a4af07340c24", 0x2e}, {&(0x7f0000000d40)="6c9057f33d1f63c07f3cab58728cccdf5e9b80e040ebc953675ece7e8e8743411a142fd9b24b3460be9762b59ef3b51d5b233538b2128f66b7a187c1abb094758a6390ea352dbf680ae9aa33b2913b6706ce93680497456ad5", 0x59}, {&(0x7f0000000dc0)="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", 0xfe}, {&(0x7f0000000ec0)="abe0e70567d7bd7c8741a1bd473eedca743d48b3a6a76eb8941bab5c621cb5c646a8865a8e3ce5e5fffeb82f9c7234146cecb9f41fb936aa245ceefbd347e1ff4969547abdf8b87ced4f3c776343cc0fcadbae9d808fa9ab007d1f009564e53ae64237f2d642a53ab67d81904f", 0x6d}], 0x9, &(0x7f0000000f40)=ANY=[@ANYBLOB="20000000000000008400000008000000ff02000000ffffffffffffffe8000200"], 0x20, 0x4048001}, {&(0x7f0000000f80)=@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x600}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000001000)="265935af1a516dcc09523546a2096fa74ede9c72dd927319bf5c4d5078befe0e2d5361f491e4790646058dd47b4af6ca4d58b40d55a5fdf1606f0c2059f88fd2cc2a9a839bff0ae732771d3ac410060a3d9d440f6e9c5357d5608cfd0a5f0ff886580d493b5523f15ed9d66a27398b3e82854717a946daa8008bc5cd740eb5575de28059baecf4da43bf18bba97c6403aa8fc7eff87465b559b65d1ee5a9e1761d8409ee636a8d67d7a607fa723ab070220e26fc50c15724662a610d61ce3e8ac78ea67182919e17d234c738e5c32d51d96bee357c86560d957fba04025798787536d72d", 0xe4}, {&(0x7f0000001100)="a2a3a60d5f7169b81df4f4f63140f7457bedba7ed505cf0d541375319ce1779c0511a4970a1aceff75bfd83f0f7de97a1fcce8fc74be8081ac8ddea07edd19d385cd23a01c89d8eab1c4ec25", 0x4c}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="20000000000000008400000008000000fe80000000000000000000000000002520000000000000008400000008000000fc0100000000000000000000000000013000000000000000840000000100000008002a0d0580000009000000010000004f060000e000000004000000", @ANYRES32=r6, @ANYBLOB="18000000000000008400000007000000e0000001000000001800851ad233ff4820c19701a9347c000000000000840000"], 0xa0, 0x4080}], 0x2, 0x20000000) bind$bt_sco(r2, &(0x7f0000001240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000001280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00343c00fe8000000000000000000000000000aaff0200000000000000000000000000013c03000000000000c9100000000000000000bc"], 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000001340)={&(0x7f0000001380), 0xc, &(0x7f00000013c0)={&(0x7f0000001400)={0x5c, r8, 0x800, 0x4, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc34c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18a}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x101}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x15, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f00000022c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002300), 0xfffffffffffffe8a, 0x10, &(0x7f0000002340), 0xfffffffffffffd27}, 0x48) sendmmsg(r2, &(0x7f0000002380), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000023c0)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000002400), &(0x7f0000002440)=0x4) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x8010) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 4.131985779s ago: executing program 1 (id=2365): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x2, 0x8c, "4e4912628158715c0c447b1e20e980e5b5d373e4a9af2803b677184a83f38473d560424eec0fb869f170a0a45fc1c878249892bad00ce418b9f822f648abf5e77397494939eabb5d1d770df3c7483641ea3a3dd5aaf13ca5c6dfb0d335780e0f4616f1bb918c49929064e02f29196764d01afc423f4bf03016c4851e18e9d3a5e9cac5a481c889c3dfbbfed0"}, &(0x7f0000000140)=0x94) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x4}, &(0x7f00000001c0)=0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)='0!\x00', 0x80680, &(0x7f0000000240)={@align=0x4, {0x72, 0x4, 0x2, 0x8000000000000000}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x4}) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r4, 0x84, 0x84, &(0x7f0000000340)={r0, @in6={{0xa, 0x4e21, 0x2c38, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x4e21}, &(0x7f0000000400)=0x90) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000440)={r3, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={r6, 0x1000}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000540)={0x1, 0x96}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x5, 0x8, 0x47, 0xca, 0x8, 0xfe, 0x5, 0xb, 0x9, 0xff, 0xa9, 0xfe, 0x64, 0xaa}, 0xe) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000740)={{r1, &(0x7f0000000600)='\x00', 0x2c000, &(0x7f0000000640)={@align=0x8, {0x0, 0x7, 0x5, 0x9}}, 0xf, &(0x7f0000000680), &(0x7f00000006c0)=0x400}, {[0x2, 0x81, 0x55]}, 0x1, 0x3b, &(0x7f0000000700)=""/59}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000007c0), 0x4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000800), &(0x7f0000000840)=0x4) (async) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000000880)=0xffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x4, 0xc6, 0xf9, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x7303, 0x5}}) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x4, [@enum64={0x7, 0x5, 0x0, 0x13, 0x1, 0x8, [{0xb, 0x4ee4, 0x6}, {0xb, 0x40, 0x6}, {0xd, 0x3, 0x90}, {0xa, 0x2, 0xffffffff}, {0xe, 0x2, 0x7}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @enum64={0x8, 0x2, 0x0, 0x13, 0x1, 0x3, [{0x6, 0x7, 0x5}, {0x2, 0x7, 0x1}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x4, [{0x7, 0x5, 0x1}]}, @const={0x10, 0x0, 0x0, 0xa, 0x1}, @union={0x7, 0x3, 0x0, 0x5, 0x0, 0xffff, [{0x5, 0x1, 0x1}, {0x5, 0x2, 0x100}, {0xc, 0x4, 0x2}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000a80)=""/166, 0xe8, 0xa6, 0x0, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x1, 0x36d, 0xa4e, 0x701, r4, 0x27, '\x00', r9, r10, 0x1, 0x5, 0x3, 0xc}, 0x50) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000c00)={r2, 0x1}, 0x8) (async) getsockopt$inet_sctp_SCTP_EVENT(r7, 0x84, 0x7f, &(0x7f0000000c40)={r5, 0x8002, 0x1}, &(0x7f0000000c80)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000cc0)={r11, 0x17}, 0x8) (async) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000d00), &(0x7f0000000d40)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000d80)={r3, 0x1}, 0x8) (async) getsockopt$inet_sctp_SCTP_EVENT(r7, 0x84, 0x7f, &(0x7f0000000dc0)={r2, 0x8001}, &(0x7f0000000e00)=0x8) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00'}) (async) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f40), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, r13, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x11) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000001040), &(0x7f0000001080)=0x4) 3.793324839s ago: executing program 4 (id=2367): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)="9c", 0x1}], 0x1}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000680)=[{&(0x7f00000006c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000700)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000940)='>', 0x1}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa0805"], 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local}) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x7a44, 0x1700) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000740)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000900), 0x9) 3.774199342s ago: executing program 1 (id=2369): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}], {0x14}}, 0xac}}, 0x20000000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000002c0)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xb0}}, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r0, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x10) 3.428713167s ago: executing program 0 (id=2371): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="79ecaab1e6e9bcd9bd53b2b10f143de29309", @ANYRES8=r1, @ANYRES16=0x0, @ANYRES64=r1], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x17, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}}}, &(0x7f0000000840)='GPL\x00', 0xf, 0x1002, &(0x7f0000000880)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 3.258712226s ago: executing program 0 (id=2374): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x8914, &(0x7f0000000000)='dummy0\x00'/40) ioctl(r1, 0x8914, &(0x7f0000000040)="64756d6d7930000000000000000000000100"/40) ioctl(r1, 0x8914, &(0x7f0000000080)="6c6170623000000000000000000000000100"/40) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000280)=0x3ff, 0x4) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000002c0)=0x7, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180"], 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000000280), 0x4000000000001f2, 0x600) ioctl(r1, 0x890b, &(0x7f00000000c0)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0xb, 0x100a, &(0x7f00000005c0)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 3.023894727s ago: executing program 4 (id=2376): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r0}, 0xc) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r0}, 0xc) (async) socket$kcm(0x29, 0x5, 0x0) (async) 2.856167003s ago: executing program 4 (id=2379): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="670004000a5b8e9e2ecdd3ec98fe000000000000e226", @ANYRES16=r2, @ANYRESHEX=r1], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x35c, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000b00)={0x1f, 0x0, @any, 0x8, 0x2}, 0xe) socket$netlink(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0xfffffffffffffd9d) bind$tipc(r8, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r8, &(0x7f0000000380)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r8, 0x0, 0x0) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000003180)=@req={0x1b, 0x3cd, 0x3, 0x3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 2.672779125s ago: executing program 1 (id=2380): unshare(0x20000400) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000380)={0x7, 'vlan0\x00', {0x3}, 0xf20c}) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003ba08bedec65477af2268fb103adacefba0d0997646bd90917fc379123bdef0929363c005d959509c51202c2b7dbf466f98fa3d711d105f8246635b2b4ee48e1c53e0d3329f37f10c969c9e2a8dcb1c785000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000480), 0x10) listen(r2, 0x4) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f00000004c0), 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000500)={0x1, 0xffffffff}, 0x8) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a18fe000000007313f80000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f0000001040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0x0, 0x10, &(0x7f00000010c0), 0xea2930ad9e218d39}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000001300)=ANY=[], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000100)={r5, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@align=0x6, {0x6780, 0x99b2, 0x83ea, 0x5}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2fe}) 2.38099288s ago: executing program 0 (id=2381): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @local}, 0x16) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0xa4, 0x0, r4}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.282121948s ago: executing program 2 (id=2383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050327bd7000000000000700000008000300", @ANYRES32=r0], 0x1c}}, 0x24044080) 2.218925214s ago: executing program 4 (id=2384): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000000214090028bd7000fbdbdf2508002200"], 0x18}, 0x1, 0x0, 0x0, 0x44040}, 0x20000080) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x2, 0x20000002, 0x3) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=@newtfilter={0x354, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x328, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_SEL={0x314, 0x5, {0x8, 0x3, 0x30, 0x4, 0x3, 0x9, 0x693, 0x658, [{0x8, 0x6, 0x2152, 0x2}, {0xf, 0x5, 0x400, 0x5}, {0x6, 0x2, 0x1000, 0x3}, {0x6, 0xc, 0xa45, 0x5}, {0x1, 0x2, 0x800, 0x2}, {0x3, 0x0, 0x3, 0x6}, {0x9, 0x2, 0x93, 0x4}, {0x968, 0x2, 0x6, 0x4a}, {0x2, 0x6, 0x9, 0x1}, {0x0, 0x6, 0x7, 0x40400000}, {0x3ff, 0xe9c, 0xd, 0x9ec}, {0x7, 0x66a5, 0xae3c, 0x5}, {0xb, 0x9, 0x1000, 0xe}, {0xfffff54c, 0xffff, 0x6, 0x4}, {0xc00000, 0x6, 0xd38, 0x4}, {0x1, 0x4, 0x200, 0xfffffffb}, {0x80, 0x7, 0x200, 0x7}, {0x7, 0x0, 0x9060, 0x3}, {0x2, 0x9, 0x518, 0x80}, {0xc7f, 0x2, 0x6, 0xfffffff7}, {0x6, 0x7, 0x2, 0x2}, {0x2, 0x5, 0x5, 0x1}, {0x80000001, 0xfffffffb, 0xfffffffd, 0x6d}, {0x7, 0x92c, 0x8, 0xfc3}, {0x3, 0xd, 0x4, 0x3}, {0x81, 0x8, 0x4}, {0x7, 0x9, 0x6, 0xffffffff}, {0x5b, 0x64, 0x9, 0x9}, {0x9, 0x80000001, 0x3, 0x3}, {0xba1c, 0x8, 0x59, 0xb}, {0x1, 0x10, 0xfffffff9, 0x6}, {0x1d3, 0x100, 0xd2cf, 0xfff}, {0x5, 0x50000, 0x3, 0x9}, {0x8131, 0x0, 0x6, 0x80000000}, {0x5, 0x1, 0xd}, {0xf3a1, 0x25ef2939, 0x7, 0x4000}, {0x1, 0x3, 0xff, 0x2}, {0x75, 0x1, 0x9, 0x3}, {0x6, 0x2, 0x3}, {0x9, 0x7, 0x9, 0xf}, {0x7, 0x7, 0x3, 0x7}, {0x471, 0x80000000, 0x4fc, 0xc}, {0x2, 0x88000001, 0x0, 0xffff}, {0x8, 0x0, 0x0, 0x98f}, {0xc8, 0xfffffeff, 0x40, 0xfffffffd}, {0xa0a, 0x480, 0x4, 0xc}, {0x9, 0x1, 0x2, 0x3}, {0x2, 0x3, 0xf000, 0x6}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x354}}, 0x0) 2.072132247s ago: executing program 0 (id=2385): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000040900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000004000038008000140000000002c0003801400010076657468315f746f5f626174616476001400010076657468315f746f5f626f6e64000000080002400000000058000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e640000000800024000000010140000001000010000000000000000000500000a"], 0x10c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) write(r3, &(0x7f00000003c0)="240000005800410f9c00f4f90085b3a85c91fddf080001000501f97305ef7f66845a009f", 0x24) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000400)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000440)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f00000004c0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000500)=0x80, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000540)=0x44, 0x4) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2020, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)=ANY=[@ANYBLOB="409d0000", @ANYRES16=r5, @ANYBLOB="05000000000000000000220000000a0001007770616e31000000"], 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000002280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000012c00048028000180080001006e6174001c000280080005400000000408000140000000010800"], 0x80}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002300)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000002340)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000023c0)={&(0x7f0000002400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002752fddbdf25", @ANYRES32=r6, @ANYBLOB="0c00050000010000000000000c0005000200aaaaaaaaaaaa08000200", @ANYRES32=r7, @ANYBLOB="0c0005000202aaaaaaaaaaaa08000200", @ANYRES32=r9, @ANYBLOB="0c0005000200aaaaaaaaaaaa0c0005000203aaaaaaaaaaaa"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) bind$inet(r0, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000000780)=ANY=[@ANYRES8=r6], &(0x7f00000007c0)='syzkaller\x00'}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r7], 0x30}}, 0x0) pipe(&(0x7f00000001c0)) 1.981221058s ago: executing program 2 (id=2386): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000018c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001900)={&(0x7f0000001940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000008c0)="bd21cccddb4bde7b6292e56a82e55b0abf59ff6db2db55f6420adbb0bc634de7a5de513448e344e0dda012f190c1df4b00749b10e26bfad1d3116179fa777c21a0ab4a45f79147f4899590be1872b999245311bb2a8287e49b5611658b5f7794b78412fc9f8a6b67f5ae209b8af8b0123511ecc091c157f8324731ef2d5556d08d752f3e3c7091838ee61d574f35c6c8df4625a916444161d8fde91d516871af0d73ecd17a1fdb94fca9d65b2ccd1afa63f75d53ad541bd82a150c0c87e609b62e1adcd7a5053a402224950d39b91e564e8563845192ccd3febed413badb463c70bae362a188129a0baac6322d323753bcd5a43ede4a8c55", 0xf8}, {&(0x7f00000009c0)="59a6cced63a6a6618c92b6e041c3eded5d5ae45b8a643b8f838a474f282b2670a9eaf110be4c94ff41bd04d586a641064c8195805cf83606b9f492e020a6697e74ad3d59a3feae12e5b7ecff02d05ddbde9d56a2751ddf34de8f4a48f565a14bc4b3a1f53ed2eafcf042c57919612e4f0a5446af0d793e855dd334c9ebcf9d9346d05948ac28240e6427487b58750229e27b44b78e7a41fe69fa5ea2123c5e1c61bd9260245ff7374efccbf142a91c64323152897e58fcb141ebad707acc8faad5a86ec5ec21a97418ef872325b54d9ca110289dd43f6c421774d584808df0888d608011", 0xe4}, {&(0x7f0000000ac0)="840aacd47bc9b34d3a75bc882c3feca6dedca8c19ce123193eb191e6b0269afe134befb6acba5a5302d3ab1b4a2668ae2890872e21ff516e9adfb553b3a9a387709552ca8fced951d154978a3d8eddbc951b7e65bf1394493941c48e151b467154f2df6b424ee4af6c116070fc63a82b6d0901cd99667c19c059712d4f6096eaac0f296dc5aa874a0bcda90fabb598d257aecc98bcbc243cde0b6ea12e54ecca72ce401714a68ce18f2408afa54821c334f0cf21194f69", 0xb7}, {&(0x7f0000000b80)="5af8665839c487f6fa42532ba7cd1d35d3762b857770b362d084b08c98ba81f092a9e640", 0x24}, {&(0x7f0000000bc0)="50cc57156629ec2a34ce5980fbfd0d6a05d9467f566ce63dcaf667f92a4a6fab7f8806581266aa48d7c22748f0a000619a4eee3653c79d6a8bde2d383ab3d97859fc8356988bf9756a7eabe0131ef852c09f0b8fd6d0665f89bab4d178414586cd95c26e4324e77cd399d4a9022f070bc1271f9e8d8dad648b2fdec6ad49c01e37a491ffcbbd5a7c6674fbe2d2f0ebb0333c6bc0c56bc90913de4dd4a30a0ab7ffc0e10e5c536a771a3ecdb7b49c266e37577996f0d0f8f4f6bfbacdf749981315b3a11e62fe2a8960a0effe268bf28367602038bb100a553c616153a3f734a9ebddcf24eaac45b51a7bfc6d84376da317404337b8cdf292", 0xf8}, {&(0x7f0000001540)="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", 0x115}, {&(0x7f0000000dc0)="4c8b80fc48abb4dfb3927a73b4b3ab376c4deeb60a4498e0e563d2a26e1d6a7c1cb5ad5ec5fcce643dabb97635a0046c9f2747ca5d036ee47dcd8506edbf03d9c03bdf817e4dd0c7222c8ee407c24f99f334776596a32af15609e39a3cd0c693e13bab335e276c54fc41b267a508ccd5ba23b176062f39f43fd4e83156bf638eb7e07b95a9c2179b3b1fe216cbc99af11c6145c4a9aefc2fb5e7bb1cd3280f536b9d", 0xa2}, {&(0x7f0000000e80)="950f2898eb88c7199c2a6138ffd7ab82d4809003e501fb2ca8a57c8438049c9ccf841b4e5fa6cbf6afef4553024e4c97d18ccd809a4a4fd9ff1c5a668bb92d", 0x3f}, {&(0x7f0000000ec0)="23c4d6ab78c0f78178f6576900a0b583d8ff30019b24054847c2e30117f4a56247cde2dfa074d61ea62e7c6947a9916cd2165824793f720e289ee149d188fb30491421cf9368dae67390fa038201cf078663fe8dc7d3890a7c87ddf4ff7ff929dc1bd4471cf6beb7f7cf7ff5ac79c8e5e4dcd6ce", 0x74}], 0x9, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xc0}}, {{&(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001140)="ff66e9fd0bf5ae81478428bf2377c05402a2c591e06e279e7854a9f4d06b5abb05e59c1dbb908c39610382507b3e582da8997757498260f23d5826e84a2dba25027b112b5a9938bfc9f7d17ca163fba6ba99c0f94f467756bd", 0x59}, {&(0x7f00000011c0)="ff7d2268211aaa918505deecfd73313e0f287d65e059a5204871437820a5943eb93aa04f198dcfded5bacfc66ac77ffa2c12a46fb39dc2", 0x37}, {&(0x7f0000001200)="2f8948ed18cbbeb3fc58e35c2e1e1266daf52ce392fd8405125b20e3f25ccb6ba14656f72027f613a9d9fdec8feda3da718254a089ee990fe73f1e6b71eed4b378e8469d89c05431c792153dc7d59e76eb3dd437f528b22aff20cba7d2a62f7b76e194f244168e705987cb39a4e35f7197b87ed4a6ef183fabc27dc33d9476cbed30fa3edb92bfc32d432c01d2c72d04746fe53a38aa0bc410bc02d2c77bbe2f66aadf8f80ec9725cfc4ffbff19cd189f46e1adb396fb9d329ea6f169de0bec3731f3359f2d4fea333022c1e974dc022d082d245cb9d377f774c453deff1ae7cc495e3cdf2", 0xe5}, {&(0x7f0000001300)="f1634abd2f73cd8e762f51193ab7b3465c37fd7245f9f92a07aae2390a1df904680084f377d4439f377e0b382238eab8f09a35f0dc453efc8a8ceb8b713c2d191d49d4b2475cddf4f152a61d4ac3241b3be09ff9270ceca4b156c5a39a3d6b9c6e89c0d850b1159126abdc61e5368d7420e4ed4c1fd7f0301416ef56255177f6afa7f4455c717edae1", 0x89}, {&(0x7f00000013c0)="24af106b3f902ffcc1ac2cd173cda4f613764147367e48e3d0d77033b052bae3e78a86d149662500a41c0ac45d262d0951c7daa774693002364d43b07e04eca7d25974922388ce98cf89346dad628951c640da072d28515814a8d66d44baa35c18154cbff735a4f2af77bce8c049d77b399b08913a7c", 0x76}, {&(0x7f0000001440)="aa813bb52599661e6e6543b699fcc11478f62d80b488770285e56e6b5fb30f9da09332ead0a2b3b6ab80f5aa239945ecc61bbbf6f56bb46f22b60c2112b5df81624b1de888ff1dc98164ab7efda279d290cd206d11f83a5c04fec5", 0x5b}], 0x6, &(0x7f0000001a40)=[{0xb0, 0x118, 0x6, "c74f100b212783459e97451b6e98f42ca4e98acd03411b6b323eca2540f98153aa568a52d08be6a228dd1f203848c09d1ac3b9453d7cbeea65869d53c86e2ee5ad85298655e9b9d1a58ae81cf7f044a33cbc4e645fa3ecd64293f601325d223104f2d9c73f1102a865c9ba9113f731bd60cace19eec2737c2efbcb262c362f41de8086c9aaec8eed8b74c39d3ef87eefd8d97903233777b9dd7c3058a6"}, {0x1010, 0xff, 0x8, "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"}, {0x80, 0x11, 0x6, "d3b11ee546828abffbc6d95c91657a0d5f502d5663120d19b16ea0d7f3b09bd4042e3b57f6aad0a3bbc4145daded218aecb7e038a1222b2d5a6c91746b25c34af4b444774ce0a3641fc652e0ea3222b3a3ddb500646c3f24550fbc288537209eaefcca8376b0b42d7da2"}, {0x40, 0x112, 0x7fffffff, "6ed245bb57f3de3e62cb41c66451540a86e0f56307488a9f3c9e8cded846df8640fdfee240ce77db17b3796e77"}, {0xc0, 0x0, 0xd, "7247c5e95f4111457b3ef6c5a1d47579909bf46677ffb6dacc85e6d5bb970b0ddbd034c5e2c12cad37d32586fe87be69f91a05531dae35d0b13f9afb4972cfed95d1dbecf1b824d4dcc3939f4f65e29faf08b887074fecbcd30f9cc22dc8fbcc4ec669e6e4e93b9982852b5727fa77d1aa9de99f8546b6b21e2e270c953791aee2d874954703d2d879963d1276c3c81abdbc795b0578482582c3d866302ddbbed9315319706998ad74c48696a7a7e1"}, {0xa0, 0x117, 0x6, "7d75c41c7cb39a46b35eabe7b7e87cddc0e61b8d7120b1afa420fea001b609b9640c5d1ef0d8abf56c992df03e303f867b2ec7cdb5dc2ed861a6c0b783a46bc4633fed201d948c16cbf0552cecd9f3796f05dc8d6058c52f3beb73b02557618318b02a7776f9d38145e23e497194399c20bd1036903f995498631a92fe1476fc009a6dfd8148cab3801a"}, {0x48, 0x11, 0x2000008, "19a0494951e2efd0e3e6b8e702475f8eb5270cb91b7da963cb6508cd7b1c0b3e9d0463b7caf97c34b59ef48398e6cd172f"}], 0x1328}}], 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x0, 0x87, 0x0, 0x10000000, 0x80000001}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r4, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000380)}, 0x20) sendmsg$rds(r0, &(0x7f0000001980)={&(0x7f00000019c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) connect$can_bcm(r6, &(0x7f0000000380), 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r7, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r8}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000004f34070000000000000070bafc68609ee6a2d7648c785e", @ANYRES16=r10, @ANYBLOB="07000000000000000000050000000c0003800400038004000500180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0x11, &(0x7f00000032c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000007c0)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000880)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000001a00)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.64406225s ago: executing program 3 (id=2387): socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x4e21, 0x4, 'rr\x00', 0x1, 0xa8a, 0x30}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000540)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x33) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000005c0)={{0x84, @rand_addr=0x64012100, 0x4e26, 0x3, 'lc\x00', 0x8, 0x101, 0x7}, {@loopback, 0x4e24, 0x0, 0x0, 0x12d5c, 0x3}}, 0x44) sendmsg$sock(r1, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, &(0x7f0000000400)="1b899d2b9c7cf9994546229afa3667b8b931aa1a97a26b4ee0c979e5c677b77d049d5a109b73297eebfb639e7e8549de04ab783cdf1d48b1a38c8d02fdb415bebbc21b4e3184aea4a3d0e60d25f4f63f203f6b23846c7342b394b866e1092584f901a71046051f7f01fa7ce801fc837a3e9fa9e2abc1129c783fa08585b5d2b8314b973ad2704fdbe281cb60ffd34359611de4dda95f0d2e0133282f5dab8651f664", 0xa2, 0x20008081, &(0x7f00000004c0)={0xa, 0x0, 0x9, @remote, 0x2}, 0x20) socket$tipc(0x1e, 0x2, 0x0) 1.553348952s ago: executing program 2 (id=2388): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffc, 0x3}, 0x23) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x6) write(r0, &(0x7f0000000480)="5400000012000100"/24, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c000000180001801400020076657468300000000000020000000000140003800400038007"], 0x40}}, 0x4040004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="8e", 0x1}], 0x1, 0x8001, 0x210) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000700)="060000000300000002", 0x9) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x8, 0xfb4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a000100000000000000000081"], 0x30}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)={0x114, 0x32, 0x8, 0x0, 0x0, "", [@nested={0x101, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a96ae52bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x79}]}]}, 0x114}], 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000900)={0x2, 0x4e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000940)={0x2, 0x4e21, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0x10}, {0x9, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.543344108s ago: executing program 1 (id=2389): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1, &(0x7f0000000400)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f00000021c0)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000002200)={&(0x7f0000002240)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002340)={r2, r1}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x301000, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x7fffffff]}, {0x101, 0x1, 0x5, 0x6}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0xb}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48051}, 0x10000000) recvfrom$x25(r3, &(0x7f0000000140)=""/90, 0x5a, 0x40000000, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000002380), 0x4) 1.299490151s ago: executing program 0 (id=2390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x8284}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000240), 0x0}, 0x20) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0xe0000000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffd67, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe65) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x9c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "52add35914398c3899317dd95a90224c"}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x9c}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000c80)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xd, 0x29, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xde13}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0xd, 0x3, 0x8, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0xb, 0x8, 0x6, 0x100, 0xfffffffffffffff0}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x4, 0x1, 0x9, 0x9, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x80000001}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x72, &(0x7f0000000740)=""/114, 0x41100, 0x1, '\x00', r6, @sock_ops, r7, 0x8, &(0x7f0000000a40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xb, 0x7ff, 0x3}, 0x10, 0xffffffffffffffff, r8, 0x7, 0x0, &(0x7f0000000cc0)=[{0x0, 0x5, 0x10, 0x6}, {0x0, 0x3, 0x4, 0x2}, {0x0, 0x1, 0x2, 0x6}, {0x4, 0x1, 0x5, 0x3}, {0x0, 0x1, 0x2, 0x9}, {0x0, 0x4, 0xc, 0x8}, {0x2, 0x4, 0xa, 0x5}], 0x10, 0x5}, 0x94) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000000080)=0x40000006, 0x4) recvmmsg(r9, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x8534}], 0x1, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009c0001000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94) 1.289055564s ago: executing program 3 (id=2391): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf250a000000"], 0x14}}, 0x4040000) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x1, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x3}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r11 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) 1.2288201s ago: executing program 4 (id=2392): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket(0x26, 0x5, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="287a30bc3ad815f6072ff857b91ae200", @ANYRES32=r1, @ANYRES32=r0], 0x128}, 0x8000) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0xfffffffffffffe25, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20}}], 0x4a}, 0x2002) r7 = socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000600)=0x8, 0x4) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100000000000000e20000000000", @ANYRESHEX=r6, @ANYRESOCT=r3, @ANYRES8=r7], 0x28}, 0x1, 0x0, 0x0, 0x2404e825}, 0x802) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000000c0)={0x2, 0x4e26, @broadcast}, 0x10) sendmsg$inet(r9, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="91dfef5b82badbaa6a8e0000", 0xc}], 0x1}, 0x0) sendmsg$rds(r9, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff45, 0x488c4}, 0x20008800) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r10, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) epoll_create(0x4) 1.095328122s ago: executing program 2 (id=2393): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000040000040001"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x4804) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r6, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r7, r6}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000180)={0x1, 0x2, 0x7, 0x1, 0x1, 0x6}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r10 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000300)='bridge0\x00') sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a390c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 956.523099ms ago: executing program 4 (id=2394): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000580)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c0000000000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) read(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1c0088a801000b00000014"], 0x36) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x639}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000003000000955d095b8a2cd9a200000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r5, &(0x7f0000000040), &(0x7f0000000a40)=@tcp6=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a80)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r8, {0x4, 0xfff2}, {0x9}, {0x4, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[], &(0x7f0000000000)=""/59, 0x8d, 0x3b, 0x20, 0x80000000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000005f28200000000000000000000000000000000000a203be1cd84afd0f8b664c23371426c9322599486722e3bbb9f69816876d5aa5dbcb84d32e5640e83869c35dd1eb84102c92dafa670e36a8c1bd9a8151569d696382724194425f842c6c0b709823343fcb91cc19901433f52e8d4fb0c1d71937f77c2f71456c49c020c01ad99178c256aa6c83e17b98a23793ac6462f3ae6251178b250f365aaa25b1047d308e5c05dd825790695c5af19b95622e67a442d4157348633fe503415205d7022c806b921224daaeaffe2145c093ec43b89c93d284ec71856a3b6bd14d32e1789aa2d6c29b6644b144d51c2542aef26d0f53a8c315dafb08ccf8d887c8f5bf00836a17963a54a3f"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000dc0)={0x2, 0x0, @empty}, 0x10) 901.925104ms ago: executing program 3 (id=2395): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000440)=@generic, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/224, 0x2c}, 0x6}, {{&(0x7f0000000600)=@isdn, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/4096}, {&(0x7f00000016c0)=""/67}], 0x0, &(0x7f0000001840)=""/174}}, {{&(0x7f0000001900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000001980)=[{&(0x7f00000019c0)=""/224}, {&(0x7f0000001ac0)=""/89}, {&(0x7f0000001b40)=""/209, 0x25}], 0x0, &(0x7f0000001c40)=""/195}, 0x81}], 0x101f2043b8267e, 0x40000151, 0x0) bind$nfc_llcp(r1, &(0x7f0000001d40)={0x27, 0x0, 0x1, 0x5, 0x0, 0x6, "23ba4cb148e27a62778ab6e2ad47e2f096dbae5488d838161da26752700a993a9898b753acbbe03034a8e6487bac34f3e95e88aaaafc3788337701a4cd90bb", 0x21}, 0x60) r2 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x400) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) sendto$l2tp(r2, &(0x7f0000000000)="8d29c00869b2fdabb58f6adbabb166defc5a9dc29b587dd8422484ad9843d0e2a47df06d221964e4fd33351a9f54d385ce675dd26abbbefecbd21d34200847b715f6758ce00ccb552e170691984165d366fe4ae3bfaf991981b182b4138408e43b69854efb5cb3565ac4968185cc5201d359d0a378a3c6679ead7765327a140516f960ccc211712c00060ffa16d5095045f15734ae3aaab979f8d25d6a5737e71513a11e8b6911905ca33952d5e9b2ad7d760bd1633c8ff8a193219017a936b3a109fd0554d642040108ada8282060be", 0xd0, 0x4000000, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1a, 0x0, 0x3}}, @TCA_CHOKE_STAB={0xfffffff3, 0x2, "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"}]}}]}, 0x154}}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x10, 0x1401, 0x1, 0x70bd28, 0x25dfdbfd}, 0x10}}, 0x20000890) 705.90216ms ago: executing program 2 (id=2396): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x10000000, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="3884", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x860) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd5030100177400407b3000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 700.560671ms ago: executing program 3 (id=2397): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000240)=@udp6=r1}, 0x20) r2 = epoll_create1(0x80000) r3 = socket(0x2b, 0x80805, 0x20000004) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000020000732ac0ff00000000632ac8ff00000000180200000a0000010000000000000000180200000a0000020000000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000950000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000400)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000020000732ac0ff00000000632ac8ff00000000180200000a0000010000000000000000180200000a0000020000000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000950000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000400)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0x10000000}) r4 = socket$phonet(0x23, 0x2, 0x1) socketpair(0x11, 0x3, 0x74, &(0x7f0000001400)={0xffffffffffffffff}) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) (async) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23000000d5dc000000e100fffcff000005"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 523.591874ms ago: executing program 3 (id=2398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xe, &(0x7f0000000680)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f00000009c0), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r3, r2, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_init_net_socket$x25(0x9, 0x2, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="00a47b36731a0e09561161251b0000000000aaaaaaaaaa4288a80b008100060086dd61c26a30000087fffe8000000000000000000000000000bbfc00"/74], 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=0x8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r7, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000440)={0x2, 0x7}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000006c0)={r9, @in6={{0xa, 0x4e20, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, [0x100000000, 0x9, 0x75c, 0xe, 0x3, 0x0, 0x5, 0x9000000000, 0x0, 0x7f, 0x6, 0x1, 0x4, 0x9, 0x7]}, &(0x7f00000007c0)=0x100) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00e4ff0f000304000000400004000000000000", @ANYRES32=0x0, @ANYBLOB="46060900040c01001c001280090001000a6f6e64000000000c00028005000c0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x5) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=r10, @ANYBLOB="9277bdb6d31e10535b905131638f13d289732b3beb86a4a60b83a5da53605362781b7364943d4a057e0f47c6bd16bd029a4f6618d61deb40a6d13ba48f59706ce5f42a4011e67e293fc6eacb9f110f32b93d038d09c2099944b6d41e4532f2bb768870e7e377fd8a9edc3a27", @ANYRES32=r13, @ANYRESHEX=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 522.408104ms ago: executing program 1 (id=2399): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @private1, @empty, 0x0, 0x0, 0xfffffffe}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb}}}}]}, 0x40}}, 0x4000010) sendmsg$nl_route(r0, 0x0, 0x440b0) 166.42676ms ago: executing program 0 (id=2400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) 147.023907ms ago: executing program 2 (id=2401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000071105d00000000009500000000000039f8f5e51e"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000140)=0xa40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000300)={0x3, 0xff, 0x4, 0xe17, 0x2, 0x0, [{0xffffffffffffff00, 0x7f, 0x8, '\x00', 0x880}, {0x8, 0x5, 0x0, '\x00', 0x1}]}) r4 = socket(0x10, 0x803, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x44091}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305800080000000000000000000673689b4f1d1302c62d60293d3282979b27ff0c3d8ba1ca961d4d4f66a9e5e443ca4bf08070d4b84672320f82e71b466d924826eae51a3daede67c8daaad09345b1753339f3966fb1f2f222684746870f973cb8bb6b7dd7a210f6643ad51aefb2bddfda026d5653207cd2d2a1d1e8ae9183e07e04aef1a160c4884c0581fd2fc9f419bf15fd0c6384fb7aece", @ANYRES32=0x0, @ANYBLOB="00000000e92000001c00128009000100626f6e64000000000c00028005001b0008000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305800080000000000000000000673689b4f1d1302c62d60293d3282979b27ff0c3d8ba1ca961d4d4f66a9e5e443ca4bf08070d4b84672320f82e71b466d924826eae51a3daede67c8daaad09345b1753339f3966fb1f2f222684746870f973cb8bb6b7dd7a210f6643ad51aefb2bddfda026d5653207cd2d2a1d1e8ae9183e07e04aef1a160c4884c0581fd2fc9f419bf15fd0c6384fb7aece", @ANYRES32=0x0, @ANYBLOB="00000000e92000001c00128009000100626f6e64000000000c00028005001b0008000000"], 0x3c}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) close(r7) syz_genetlink_get_family_id$mptcp(0x0, r5) (async) syz_genetlink_get_family_id$mptcp(0x0, r5) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r4) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xb0, r9, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x15}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x11}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000000000000000000088307b4ac14142f0001443cae530000000000000008ac1414bbfffff02eac1e010100000008ac1e0101000000070a0101010000000964010102000000ff00ffffff000003ac4420617000000000000000030000000700000003fffffffe0000000900000000000000"], 0x78}}], 0x1, 0x4040880) (async) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000000000000000000088307b4ac14142f0001443cae530000000000000008ac1414bbfffff02eac1e010100000008ac1e0101000000070a0101010000000964010102000000ff00ffffff000003ac4420617000000000000000030000000700000003fffffffe0000000900000000000000"], 0x78}}], 0x1, 0x4040880) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 0s ago: executing program 3 (id=2402): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000140)=0x4, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000140)=0x4, 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f00000018c0)=""/133, 0x85}], 0x9}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) kernel console output (not intermixed with test programs): =0 errno=-22 [ 246.944384][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 246.963753][ T9784] netlink: 72 bytes leftover after parsing attributes in process `syz.3.866'. [ 247.593170][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 247.678360][ T9797] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.796632][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 249.055217][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 249.130203][ T9823] team0: Port device dummy0 removed [ 249.178711][ T9823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.208501][ T9831] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 249.373179][ T9823] team0: Mode changed to "activebackup" [ 249.388015][ T9823] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 249.521587][ T9839] x_tables: duplicate underflow at hook 3 [ 249.816618][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'. [ 252.113114][ T9860] syzkaller0: entered promiscuous mode [ 252.113332][ T9860] syzkaller0: entered allmulticast mode [ 252.220878][ T9867] netlink: 424 bytes leftover after parsing attributes in process `syz.0.883'. [ 252.220909][ T9867] netlink: 424 bytes leftover after parsing attributes in process `syz.0.883'. [ 252.423754][ T9880] netlink: 'syz.3.887': attribute type 10 has an invalid length. [ 252.423774][ T9880] netlink: 152 bytes leftover after parsing attributes in process `syz.3.887'. [ 253.215705][ T9855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.418645][ T9900] tipc: Enabled bearer , priority 10 [ 253.545839][ T5940] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 253.545886][ T5940] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 253.545919][ T5940] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 253.545949][ T5940] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 254.341552][ T9935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.900'. [ 254.341603][ T9935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.900'. [ 254.341634][ T9935] netlink: 31 bytes leftover after parsing attributes in process `syz.1.900'. [ 255.091849][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 255.091888][ T9978] netlink: 'syz.4.907': attribute type 30 has an invalid length. [ 255.147573][ T9978] vxlan1: entered promiscuous mode [ 255.147603][ T9978] vxlan1: entered allmulticast mode [ 255.158529][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 255.158561][ T9982] netlink: 'syz.4.907': attribute type 30 has an invalid length. [ 255.275174][ T9982] vxlan1: entered promiscuous mode [ 255.275198][ T9982] vxlan1: entered allmulticast mode [ 255.352214][ T9988] netlink: 'syz.2.912': attribute type 3 has an invalid length. [ 255.412554][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.901'. [ 255.529458][ T9993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.699538][ C0] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967292. macoff=76 [ 255.792390][ T9985] batman_adv: batadv0: Adding interface: veth0 [ 255.792409][ T9985] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.792518][ T9985] batman_adv: batadv0: Interface activated: veth0 [ 256.015908][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'. [ 256.032456][T10009] ip6_vti0: entered promiscuous mode [ 256.399049][T10018] lo: entered promiscuous mode [ 256.399073][T10018] lo: entered allmulticast mode [ 256.432407][T10018] tunl0: entered promiscuous mode [ 256.432430][T10018] tunl0: entered allmulticast mode [ 256.460303][T10018] gre0: entered promiscuous mode [ 256.460327][T10018] gre0: entered allmulticast mode [ 256.481388][T10018] gretap0: entered promiscuous mode [ 256.481412][T10018] gretap0: entered allmulticast mode [ 256.502387][T10018] erspan0: entered promiscuous mode [ 256.502409][T10018] erspan0: entered allmulticast mode [ 256.524441][T10018] ip_vti0: entered promiscuous mode [ 256.524463][T10018] ip_vti0: entered allmulticast mode [ 256.525212][T10018] ip6_vti0: entered promiscuous mode [ 256.525227][T10018] ip6_vti0: entered allmulticast mode [ 256.575766][T10018] sit0: entered promiscuous mode [ 256.575791][T10018] sit0: entered allmulticast mode [ 256.588464][T10018] ip6tnl0: entered promiscuous mode [ 256.588485][T10018] ip6tnl0: entered allmulticast mode [ 256.589373][T10018] ip6gre0: entered promiscuous mode [ 256.589388][T10018] ip6gre0: entered allmulticast mode [ 256.590224][T10018] ip6gretap0: entered promiscuous mode [ 256.590239][T10018] ip6gretap0: entered allmulticast mode [ 256.591092][T10018] vcan0: entered promiscuous mode [ 256.591107][T10018] vcan0: entered allmulticast mode [ 256.591998][T10018] bond0: entered promiscuous mode [ 256.592050][T10018] bond0: entered allmulticast mode [ 256.593382][T10018] dummy0: entered promiscuous mode [ 256.593400][T10018] dummy0: entered allmulticast mode [ 256.595040][T10018] nlmon0: entered promiscuous mode [ 256.595057][T10018] nlmon0: entered allmulticast mode [ 256.595820][T10018] batadv0: entered promiscuous mode [ 256.595835][T10018] batadv0: entered allmulticast mode [ 256.689268][T10018] vxcan0: entered promiscuous mode [ 256.689290][T10018] vxcan0: entered allmulticast mode [ 256.690077][T10018] vxcan1: entered promiscuous mode [ 256.690093][T10018] vxcan1: entered allmulticast mode [ 256.690843][T10018] veth0: entered promiscuous mode [ 256.690858][T10018] veth0: entered allmulticast mode [ 256.691740][T10018] veth1: entered promiscuous mode [ 256.691757][T10018] veth1: entered allmulticast mode [ 256.692546][T10018] wg0: entered promiscuous mode [ 256.692559][T10018] wg0: entered allmulticast mode [ 256.693306][T10018] wg1: entered promiscuous mode [ 256.693413][T10018] wg1: entered allmulticast mode [ 256.694165][T10018] wg2: entered promiscuous mode [ 256.694180][T10018] wg2: entered allmulticast mode [ 256.694969][T10018] veth0_to_bridge: entered promiscuous mode [ 256.694985][T10018] veth0_to_bridge: entered allmulticast mode [ 256.695755][T10018] bridge_slave_0: entered promiscuous mode [ 256.715378][T10018] veth1_to_bridge: entered promiscuous mode [ 256.715589][T10018] veth1_to_bridge: entered allmulticast mode [ 256.757325][T10018] bridge_slave_1: entered promiscuous mode [ 256.757533][T10018] bridge_slave_1: entered allmulticast mode [ 256.764645][T10018] veth0_to_bond: entered promiscuous mode [ 256.764884][T10018] veth0_to_bond: entered allmulticast mode [ 256.779312][T10018] bond_slave_0: entered promiscuous mode [ 256.780231][T10018] bond_slave_0: entered allmulticast mode [ 256.819469][T10018] veth1_to_bond: entered promiscuous mode [ 256.819688][T10018] veth1_to_bond: entered allmulticast mode [ 256.855418][T10018] bond_slave_1: entered promiscuous mode [ 256.855643][T10018] bond_slave_1: entered allmulticast mode [ 256.881527][T10018] veth0_to_team: entered promiscuous mode [ 256.881753][T10018] veth0_to_team: entered allmulticast mode [ 256.915979][T10018] team_slave_0: entered promiscuous mode [ 256.916222][T10018] team_slave_0: entered allmulticast mode [ 256.935230][T10018] veth1_to_team: entered promiscuous mode [ 256.935450][T10018] veth1_to_team: entered allmulticast mode [ 256.961854][T10018] team_slave_1: entered promiscuous mode [ 256.962075][T10018] team_slave_1: entered allmulticast mode [ 256.998214][T10018] veth0_to_batadv: entered promiscuous mode [ 256.998454][T10018] veth0_to_batadv: entered allmulticast mode [ 257.028220][T10018] batadv_slave_0: entered promiscuous mode [ 257.028444][T10018] batadv_slave_0: entered allmulticast mode [ 257.032547][T10018] veth1_to_batadv: entered promiscuous mode [ 257.032760][T10018] veth1_to_batadv: entered allmulticast mode [ 257.049932][T10018] batadv_slave_1: entered promiscuous mode [ 257.050025][T10018] batadv_slave_1: entered allmulticast mode [ 257.065326][T10018] xfrm0: entered promiscuous mode [ 257.065539][T10018] xfrm0: entered allmulticast mode [ 257.131115][T10018] veth1_to_hsr: entered promiscuous mode [ 257.131343][T10018] veth1_to_hsr: entered allmulticast mode [ 257.148118][T10018] hsr_slave_1: entered allmulticast mode [ 257.172305][T10018] hsr0: entered promiscuous mode [ 257.172527][T10018] hsr0: entered allmulticast mode [ 257.193264][T10018] veth1_virt_wifi: entered promiscuous mode [ 257.193480][T10018] veth1_virt_wifi: entered allmulticast mode [ 257.200393][T10018] veth0_virt_wifi: entered promiscuous mode [ 257.204126][T10018] veth0_virt_wifi: entered allmulticast mode [ 257.212701][T10018] virt_wifi0: entered promiscuous mode [ 257.212915][T10018] virt_wifi0: entered allmulticast mode [ 257.213119][T10018] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 257.785500][T10047] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 257.785526][T10047] batman_adv: batadv0: Removing interface: ip6gretap1 [ 257.808688][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 257.808715][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 257.989745][T10047] batadv0 (unregistering): left promiscuous mode [ 258.496377][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 259.001452][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 259.001477][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.934'. [ 259.001491][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 259.036156][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.933'. [ 259.093819][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.933'. [ 259.152327][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.936'. [ 259.554536][T10119] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.630093][T10122] netlink: 'syz.0.942': attribute type 21 has an invalid length. [ 259.630115][T10122] netlink: 'syz.0.942': attribute type 20 has an invalid length. [ 259.768828][T10126] TC_ACT_REPEAT abuse ? [ 259.925363][T10129] vti0: entered promiscuous mode [ 260.034189][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 260.086491][T10140] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.086592][T10140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.086603][T10140] IPv6: NLM_F_CREATE should be set when creating new route [ 260.086648][T10140] IPv6: NLM_F_CREATE should be set when creating new route [ 260.086732][T10140] IPv6: NLM_F_CREATE should be set when creating new route [ 260.263216][T10149] netlink: 'syz.4.950': attribute type 13 has an invalid length. [ 260.993484][T10144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.993511][T10144] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 261.029579][T10172] ip_tables: iptables: counters copy to user failed while replacing table [ 261.125156][T10144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.125180][T10144] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 261.160880][T10144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.160903][T10144] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 261.217865][T10144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.217889][T10144] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 262.761245][T10238] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 262.956153][T10250] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.967730][T10238] 8021q: adding VLAN 0 to HW filter on device bond9 [ 262.974853][T10243] bond9: entered allmulticast mode [ 262.994351][T10243] __nla_validate_parse: 5 callbacks suppressed [ 262.994370][T10243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.970'. [ 263.078556][T10248] netlink: 'syz.0.971': attribute type 16 has an invalid length. [ 263.078577][T10248] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.971'. [ 263.472372][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 263.710975][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 264.209884][T10289] syzkaller0: entered promiscuous mode [ 264.209907][T10289] syzkaller0: entered allmulticast mode [ 264.441470][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.981'. [ 265.278535][T10313] syzkaller1: entered promiscuous mode [ 265.278559][T10313] syzkaller1: entered allmulticast mode [ 265.283817][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 265.283847][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 265.846204][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 265.867366][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 266.214438][T10345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.994'. [ 266.526498][T10357] lo speed is unknown, defaulting to 1000 [ 266.544706][T10347] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 266.555871][T10357] lo speed is unknown, defaulting to 1000 [ 266.662306][T10347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.664395][T10357] lo speed is unknown, defaulting to 1000 [ 266.744508][T10353] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 266.864399][T10347] bridge1: entered promiscuous mode [ 266.916241][T10347] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 267.185230][T10361] batman_adv: batadv0: Adding interface: syzkaller0 [ 267.185252][T10361] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.185286][T10361] batman_adv: batadv0: Interface activated: syzkaller0 [ 267.243338][T10359] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 267.444416][T10385] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 267.469352][T10359] batman_adv: batadv0: Removing interface: syzkaller0 [ 267.665455][T10357] infiniband syz0: set active [ 267.666639][T10357] infiniband syz0: added lo [ 267.685566][T10357] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 267.696244][T10357] infiniband syz0: Couldn't open port 1 [ 267.696504][T10357] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 267.696536][T10357] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 267.696574][T10357] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 267.729726][ T5754] lo speed is unknown, defaulting to 1000 [ 267.804351][T10357] RDS/IB: syz0: added [ 267.804411][T10357] smc: adding ib device syz0 with port count 1 [ 267.804430][T10357] smc: ib device syz0 port 1 has no pnetid [ 267.804518][ T5754] lo speed is unknown, defaulting to 1000 [ 267.830933][T10357] lo speed is unknown, defaulting to 1000 [ 268.007325][T10400] __nla_validate_parse: 4 callbacks suppressed [ 268.007345][T10400] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1004'. [ 268.239879][T10403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1006'. [ 268.472585][T10415] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 268.581835][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1009'. [ 268.719608][T10412] rxe_eth0 speed is unknown, defaulting to 1000 [ 268.744635][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 268.989591][T10415] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.342517][T10357] lo speed is unknown, defaulting to 1000 [ 269.762703][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 270.064877][T10445] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 270.228946][T10412] wg2 speed is unknown, defaulting to 1000 [ 270.294355][T10447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.423629][T10454] batman_adv: batadv0: Adding interface: syzkaller0 [ 270.423649][T10454] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.423857][T10454] batman_adv: batadv0: Interface activated: syzkaller0 [ 270.519744][T10412] lo speed is unknown, defaulting to 1000 [ 270.782409][T10357] lo speed is unknown, defaulting to 1000 [ 271.208336][T10357] lo speed is unknown, defaulting to 1000 [ 271.513335][T10357] lo speed is unknown, defaulting to 1000 [ 311.126233][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.127259][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.140926][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.141695][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.150264][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.151061][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.151764][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.155302][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.156288][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.161369][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 311.665335][T10494] gretap0: entered promiscuous mode [ 311.665490][T10494] vlan0: entered promiscuous mode [ 311.872848][T10499] netlink: 'syz.1.1023': attribute type 11 has an invalid length. [ 312.544728][T10531] sctp: [Deprecated]: syz.0.1030 (pid 10531) Use of int in maxseg socket option. [ 312.544728][T10531] Use struct sctp_assoc_value instead [ 312.920572][T10542] netlink: zone id is out of range [ 312.920613][T10542] netlink: zone id is out of range [ 312.920621][T10542] netlink: zone id is out of range [ 312.920629][T10542] netlink: zone id is out of range [ 312.920636][T10542] netlink: zone id is out of range [ 313.992220][T10585] ip_tables: iptables: counters copy to user failed while replacing table [ 314.270273][T10592] smc: net device lo applied user defined pnetid SYZ2 [ 314.274474][T10592] smc: net device lo erased user defined pnetid SYZ2 [ 314.674623][T10615] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 314.732424][T10615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.775068][T10624] bond5: entered allmulticast mode [ 315.513056][T10649] xt_hashlimit: size too large, truncated to 1048576 [ 315.603358][T10652] xt_hashlimit: size too large, truncated to 1048576 [ 315.836112][T10659] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 315.924342][T10668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.028603][T10707] __nla_validate_parse: 32 callbacks suppressed [ 317.028625][T10707] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1068'. [ 317.028644][T10707] netlink: 'syz.0.1068': attribute type 2 has an invalid length. [ 317.028656][T10707] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 317.028670][T10707] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1068'. [ 317.097513][T10706] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1070'. [ 317.752817][T10727] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1075'. [ 317.887595][T10727] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1075'. [ 318.006292][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 318.316422][T10735] TC_ACT_REPEAT abuse ? [ 318.598154][T10744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1078'. [ 318.666772][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1080'. [ 319.017462][T10761] smc: smcd device lo applied user defined pnetid SYZ0 [ 319.021192][T10761] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 319.341782][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 319.635124][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'. [ 319.726289][T10789] syzkaller0: entered promiscuous mode [ 319.726311][T10789] syzkaller0: entered allmulticast mode [ 319.825176][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.862968][T10794] batman_adv: batadv0: Adding interface: syzkaller0 [ 319.862987][T10794] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.863018][T10794] batman_adv: batadv0: Interface activated: syzkaller0 [ 319.917084][T10783] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 319.983848][T10783] batman_adv: batadv0: Removing interface: syzkaller0 [ 319.984986][T10797] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.115073][T10801] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 320.218894][T10801] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.256581][T10802] bond10: (slave veth3): Enslaving as an active interface with a down link [ 320.808667][T10820] batman_adv: batadv0: Adding interface: syzkaller0 [ 320.808687][T10820] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.808718][T10820] batman_adv: batadv0: Interface activated: syzkaller0 [ 320.947072][T10813] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 321.012957][T10813] batman_adv: batadv0: Removing interface: syzkaller0 [ 321.082907][T10828] 8021q: VLANs not supported on wg0 [ 321.083017][T10828] 8021q: VLANs not supported on wg0 [ 321.084319][T10828] 8021q: VLANs not supported on wg0 [ 321.084409][T10828] 8021q: VLANs not supported on wg0 [ 321.084487][T10828] 8021q: VLANs not supported on wg0 [ 321.084565][T10828] 8021q: VLANs not supported on wg0 [ 321.084655][T10828] 8021q: VLANs not supported on wg0 [ 321.084734][T10828] 8021q: VLANs not supported on wg0 [ 321.084826][T10828] 8021q: VLANs not supported on wg0 [ 321.084907][T10828] 8021q: VLANs not supported on wg0 [ 321.084987][T10828] 8021q: VLANs not supported on wg0 [ 321.085063][T10828] 8021q: VLANs not supported on wg0 [ 321.085140][T10828] 8021q: VLANs not supported on wg0 [ 321.085213][T10828] 8021q: VLANs not supported on wg0 [ 321.085291][T10828] 8021q: VLANs not supported on wg0 [ 321.086220][T10828] 8021q: VLANs not supported on wg0 [ 321.086566][T10828] 8021q: VLANs not supported on wg0 [ 321.086643][T10828] 8021q: VLANs not supported on wg0 [ 321.112579][T10834] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 321.124208][T10828] 8021q: VLANs not supported on wg0 [ 321.124299][T10828] 8021q: VLANs not supported on wg0 [ 321.124374][T10828] 8021q: VLANs not supported on wg0 [ 321.124447][T10828] 8021q: VLANs not supported on wg0 [ 321.124527][T10828] 8021q: VLANs not supported on wg0 [ 321.124601][T10828] 8021q: VLANs not supported on wg0 [ 321.124675][T10828] 8021q: VLANs not supported on wg0 [ 321.124748][T10828] 8021q: VLANs not supported on wg0 [ 321.124838][T10828] 8021q: VLANs not supported on wg0 [ 321.124919][T10828] 8021q: VLANs not supported on wg0 [ 321.124993][T10828] 8021q: VLANs not supported on wg0 [ 321.125066][T10828] 8021q: VLANs not supported on wg0 [ 321.125180][T10828] 8021q: VLANs not supported on wg0 [ 321.125255][T10828] 8021q: VLANs not supported on wg0 [ 321.125328][T10828] 8021q: VLANs not supported on wg0 [ 321.822651][T10852] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 321.981539][T10857] xt_hashlimit: size too large, truncated to 1048576 [ 322.108246][T10852] bond6: entered promiscuous mode [ 322.110219][T10852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.167532][T10864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.190824][T10873] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 322.217277][T10865] __nla_validate_parse: 7 callbacks suppressed [ 322.217297][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 322.243373][T10855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.243755][T10855] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 322.243773][T10855] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 322.325675][T10855] bond6: (slave wireguard0): making interface the new active one [ 322.325701][T10855] wireguard0: entered promiscuous mode [ 322.342615][T10855] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 322.405987][T10865] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 322.422504][T10880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 322.425917][T10880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1106'. [ 322.425942][T10880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1106'. [ 322.437417][T10865] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 322.790737][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 322.909668][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1109'. [ 323.003155][T10901] IPVS: set_ctl: invalid protocol: 50 172.20.20.61:20002 [ 323.022693][T10903] IPVS: set_ctl: invalid protocol: 50 172.20.20.61:20002 [ 323.098400][T10887] batman_adv: batadv0: Interface deactivated: veth0 [ 323.743642][T10887] tipc: Resetting bearer [ 323.880091][T10890] tipc: Started in network mode [ 323.880119][T10890] tipc: Node identity cab37fb14954, cluster identity 4711 [ 323.880312][T10890] tipc: Enabled bearer , priority 0 [ 323.880370][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 323.933564][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.933601][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.933625][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.933666][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.933689][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.933711][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.933746][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.933769][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.933792][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.933827][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.933849][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.933872][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.204927][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 324.371841][T10940] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 324.431544][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 324.484881][T10940] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.509026][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1116'. [ 325.011360][ T24] tipc: Node number set to 2212986801 [ 325.124231][T10936] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 325.185010][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.296074][T10975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.070604][T11010] batman_adv: batadv0: Adding interface: syzkaller0 [ 326.070624][T11010] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.070653][T11010] batman_adv: batadv0: Interface activated: syzkaller0 [ 326.242445][T10997] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 326.325778][T10997] batman_adv: batadv0: Removing interface: syzkaller0 [ 326.879805][T11024] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 326.937410][T10279] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.937468][T10279] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.937504][T10279] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.191748][T11035] syzkaller0: left promiscuous mode [ 327.513605][T11036] __nla_validate_parse: 76 callbacks suppressed [ 327.513625][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1136'. [ 328.058434][T11055] batadv_slave_1: entered promiscuous mode [ 328.461306][T11075] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 328.603027][T11075] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.697353][T11086] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 328.963664][T11052] batadv_slave_1: left promiscuous mode [ 328.965492][T11091] syzkaller1: entered promiscuous mode [ 328.965742][T11091] syzkaller1: entered allmulticast mode [ 329.283736][T11110] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 329.283761][T11110] netlink: 991 bytes leftover after parsing attributes in process `syz.3.1152'. [ 329.284667][T11110] syzkaller0: entered promiscuous mode [ 329.284686][T11110] syzkaller0: entered allmulticast mode [ 330.386083][T11153] netlink: 'syz.3.1164': attribute type 10 has an invalid length. [ 330.391349][T11151] tls_set_device_offload_rx: netdev not found [ 330.478188][T11159] netlink: 'syz.4.1163': attribute type 16 has an invalid length. [ 330.478209][T11159] netlink: 'syz.4.1163': attribute type 17 has an invalid length. [ 330.610850][T11151] tipc: Resetting bearer [ 330.611318][T11151] tipc: Resetting bearer [ 330.682766][T11159] sit0: left promiscuous mode [ 330.724966][T11174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1168'. [ 330.807701][T11159] bond_slave_0: left promiscuous mode [ 330.866049][T11159] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 331.263770][T11185] vlan0: entered allmulticast mode [ 331.263794][T11185] bond0: entered allmulticast mode [ 331.263807][T11185] bond_slave_0: entered allmulticast mode [ 331.263821][T11185] bond_slave_1: entered allmulticast mode [ 331.263834][T11185] batadv0: entered allmulticast mode [ 331.700299][T11206] batadv_slave_0: Device is already in use. [ 332.088227][T11226] netlink: zone id is out of range [ 332.088244][T11226] netlink: zone id is out of range [ 332.088252][T11226] netlink: get zone limit has 8 unknown bytes [ 332.092563][T11222] bond9: Unable to set down delay as MII monitoring is disabled [ 332.159040][T11219] netlink: 'syz.0.1182': attribute type 3 has an invalid length. [ 334.946959][T11222] bond9 (unregistering): Released all slaves [ 335.106356][T11235] syzkaller0: entered promiscuous mode [ 335.106379][T11235] syzkaller0: entered allmulticast mode [ 335.419346][T11280] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1185'. [ 335.605180][ T13] IPVS: starting estimator thread 0... [ 335.686794][T11292] IPVS: using max 27 ests per chain, 64800 per kthread [ 335.884621][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 336.030544][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 336.157317][T11305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.345256][T11311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.350215][T11311] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 336.351698][T11311] bond3: (slave sit1): Error -95 calling set_mac_address [ 336.369535][T11323] siw: device registration error -23 [ 336.673100][T11334] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 336.783990][T11334] 8021q: adding VLAN 0 to HW filter on device bond10 [ 337.002144][T11357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1207'. [ 337.380958][T11371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1209'. [ 337.394418][T11360] syzkaller1: entered promiscuous mode [ 337.394449][T11360] syzkaller1: entered allmulticast mode [ 337.631758][T11381] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 337.705754][T11381] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1211'. [ 337.752960][T11383] netlink: 'syz.3.1212': attribute type 4 has an invalid length. [ 338.164455][T11381] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 338.244882][T11393] batadv0: entered promiscuous mode [ 338.245100][T11393] macvtap1: entered promiscuous mode [ 338.252537][T11393] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 338.271547][T11393] batadv0: left promiscuous mode [ 338.540469][T11403] openvswitch: netlink: Missing valid actions attribute. [ 338.540502][T11403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.543503][T11404] openvswitch: netlink: Missing valid actions attribute. [ 338.543535][T11404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.280624][ T24] wg2 speed is unknown, defaulting to 1000 [ 339.281647][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.281775][ T1108] bridge0: port 1(bridge_slave_0) entered listening state [ 339.293158][T11395] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 339.596931][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1220'. [ 340.562276][T11476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 340.613368][T11476] vlan0: entered promiscuous mode [ 340.754501][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 341.037447][T11493] Bluetooth: MGMT ver 1.23 [ 341.067395][T10279] IPVS: starting estimator thread 0... [ 341.180069][T11498] IPVS: using max 27 ests per chain, 64800 per kthread [ 341.286371][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 341.304936][T11500] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20002 [ 341.350628][T11495] vlan1: entered promiscuous mode [ 341.350655][T11495] bridge0: entered promiscuous mode [ 341.917748][T11520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1238'. [ 341.919220][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 342.375463][T11538] bridge14: entered allmulticast mode [ 342.425954][T11537] batman_adv: batadv0: Adding interface: syzkaller0 [ 342.425978][T11537] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.426010][T11537] batman_adv: batadv0: Interface activated: syzkaller0 [ 342.511784][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 342.555640][T11545] tipc: Resetting bearer [ 342.555800][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'. [ 342.555826][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 342.641852][T10279] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.642377][T10279] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.642414][T10279] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.642448][T10279] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.856718][T11559] IPVS: length: 77 != 24 [ 346.089353][T11573] netlink: 'syz.1.1247': attribute type 3 has an invalid length. [ 347.042307][T11588] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 347.200093][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 347.334200][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 347.908485][T11648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1271'. [ 348.974519][T11650] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.974557][T11650] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.100206][T11685] syzkaller0: entered promiscuous mode [ 349.100233][T11685] syzkaller0: entered allmulticast mode [ 349.345403][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 349.955096][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 352.588773][T11719] macvtap1: entered promiscuous mode [ 352.588798][T11719] gretap0: entered promiscuous mode [ 352.591280][T11719] macvtap1: entered allmulticast mode [ 352.591302][T11719] gretap0: entered allmulticast mode [ 352.594562][T11721] gretap0: left allmulticast mode [ 352.594587][T11721] gretap0: left promiscuous mode [ 352.595264][T11721] macvtap1: left promiscuous mode [ 352.595283][T11721] macvtap1: left allmulticast mode [ 352.759543][T11650] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.759582][T11650] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.965096][T11650] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.965137][T11650] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.387017][ T1108] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.387050][ T1108] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.476825][ T5946] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.476858][ T5946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.567204][ T5954] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.567238][ T5954] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.639100][ T1108] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.639133][ T1108] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.699028][T11761] ip_tables: iptables: counters copy to user failed while replacing table [ 354.067771][T11777] syzkaller0: left promiscuous mode [ 354.068036][T11777] syzkaller0: left allmulticast mode [ 354.908339][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 355.045828][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 355.266343][T11815] IPv4: Oversized IP packet from 127.202.26.0 [ 355.353789][T11822] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1330'. [ 355.354694][T11822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1330'. [ 356.085560][T11849] tipc: Enabled bearer , priority 0 [ 356.094998][T11849] syzkaller0: entered promiscuous mode [ 356.095019][T11849] syzkaller0: entered allmulticast mode [ 356.194254][T11849] tipc: Resetting bearer [ 356.206259][T11848] tipc: Resetting bearer [ 356.237596][T11848] tipc: Disabling bearer [ 356.919434][T11871] nbd4: detected capacity change from 0 to 63 [ 357.376217][ T5632] block nbd4: Receive control failed (result -104) [ 357.609621][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 358.313947][T11930] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.315734][T11930] bridge0: port 1(bond4) entered blocking state [ 358.332383][T11930] bridge0: port 1(bond4) entered disabled state [ 358.332574][T11930] bond4: entered allmulticast mode [ 358.365001][T11930] bond4: entered promiscuous mode [ 358.372397][T11930] bridge0: port 1(bond4) entered blocking state [ 358.372534][T11930] bridge0: port 1(bond4) entered forwarding state [ 358.439337][ T62] bridge0: port 1(bond4) entered disabled state [ 359.295239][T11936] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 359.394863][T12011] tipc: Resetting bearer [ 359.609733][T12025] block nbd0: server does not support multiple connections per device. [ 359.642157][T12025] block nbd0: shutting down sockets [ 359.834432][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1367'. [ 360.153159][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 362.714838][T12043] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1368'. [ 362.840996][T12047] syzkaller1: entered promiscuous mode [ 362.841237][T12047] syzkaller1: entered allmulticast mode [ 362.930507][T12056] ip6t_hbh: unknown flags AD [ 363.839103][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 363.885653][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 363.927991][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 363.996725][T12092] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1382'. [ 364.177021][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1383'. [ 364.617561][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 364.617604][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 364.752632][T12124] tipc: Started in network mode [ 364.752662][T12124] tipc: Node identity ac1414aa, cluster identity 4711 [ 364.754879][T12124] tipc: New replicast peer: 172.20.20.187 [ 364.777218][T12124] tipc: Enabled bearer , priority 10 [ 365.026652][T12130] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1391'. [ 365.277146][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 365.402696][T12142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1393'. [ 365.537501][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 365.877221][ T5754] tipc: Node number set to 2886997162 [ 366.289595][T12176] netlink: 'syz.3.1405': attribute type 4 has an invalid length. [ 366.362605][T12179] netlink: 'syz.3.1405': attribute type 4 has an invalid length. [ 366.394144][T12180] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1406'. [ 366.451702][T12171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1404'. [ 366.500702][T12186] netlink: 'syz.2.1408': attribute type 10 has an invalid length. [ 366.620485][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 366.639101][T12184] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 366.639125][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 366.969089][T12205] vlan5: entered allmulticast mode [ 367.003532][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1414'. [ 367.027128][T12207] netlink: 'syz.0.1412': attribute type 1 has an invalid length. [ 367.027152][T12207] netlink: 'syz.0.1412': attribute type 2 has an invalid length. [ 367.721305][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 367.753788][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 368.190235][T12228] tipc: Resetting bearer [ 368.190277][T12228] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 368.254363][T12228] tipc: Disabling bearer [ 368.277653][T12228] batman_adv: batadv0: Removing interface: syzkaller0 [ 368.369312][T12235] geneve1: entered promiscuous mode [ 368.369594][T12235] geneve1: entered allmulticast mode [ 368.544266][T12243] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 368.632451][T12247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.940875][T12250] 8021q: adding VLAN 0 to HW filter on device bond11 [ 369.618017][T12243] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 369.639124][T12242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 369.742432][T12283] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.177905][T12289] syzkaller1: entered promiscuous mode [ 370.177930][T12289] syzkaller1: entered allmulticast mode [ 370.256844][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.256868][ C1] bridge0: topology change detected, propagating [ 370.875732][T12317] __nla_validate_parse: 8 callbacks suppressed [ 370.875755][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1439'. [ 371.672142][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 371.904196][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 372.472392][T12376] xt_hashlimit: size too large, truncated to 1048576 [ 373.395904][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 373.395928][T12402] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1461'. [ 373.455841][T12400] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.456478][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.456883][T12400] bridge_slave_0: entered allmulticast mode [ 373.735960][T12400] bridge_slave_0: entered promiscuous mode [ 373.783217][T12415] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 373.830310][ T5635] block nbd0: Receive control failed (result -32) [ 373.842869][ T5632] block nbd0: Receive control failed (result -32) [ 374.050354][T12415] 8021q: adding VLAN 0 to HW filter on device bond13 [ 374.076857][T12407] bridge_slave_0: left allmulticast mode [ 374.077353][T12407] bridge_slave_0: left promiscuous mode [ 374.078525][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.618960][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 374.661151][T12450] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 374.751050][T12447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1469'. [ 375.041190][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 375.647075][T12480] netlink: 'syz.2.1474': attribute type 1 has an invalid length. [ 376.227913][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 377.003087][T12521] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 377.166026][T12521] bond5: entered promiscuous mode [ 377.166317][T12526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1483'. [ 377.184856][T12521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.337521][T12523] bond5: (slave bridge2): making interface the new active one [ 377.337548][T12523] bridge2: entered promiscuous mode [ 377.344673][T12523] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 377.441220][T12525] ipvlan2: entered allmulticast mode [ 377.441243][T12525] bond5: entered allmulticast mode [ 377.441256][T12525] bridge2: entered allmulticast mode [ 377.441798][T12525] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.441818][T12525] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 378.473124][T12548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1490'. [ 379.163323][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 379.163351][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'. [ 379.163365][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1498'. [ 379.344643][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 379.408658][T12569] veth5: entered allmulticast mode [ 379.687802][T12586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 380.003693][T12600] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1504'. [ 380.365112][T12620] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1507'. [ 380.375016][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1507'. [ 380.494399][T12612] ip6gre1: entered promiscuous mode [ 380.494420][T12612] ip6gre1: entered allmulticast mode [ 380.700250][T12633] nft_compat: unsupported protocol 5 [ 381.219953][T12657] xt_cgroup: path and classid specified [ 381.487277][T12664] __nla_validate_parse: 4 callbacks suppressed [ 381.487298][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 381.494277][T12664] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1521'. [ 381.495996][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 382.018344][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1526'. [ 382.486401][T12700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 382.486432][T12700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 382.486447][T12700] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1533'. [ 383.194473][T12726] syzkaller0: entered promiscuous mode [ 383.194497][T12726] syzkaller0: entered allmulticast mode [ 383.225935][T12730] rxe_eth0 speed is unknown, defaulting to 1000 [ 383.329476][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 383.482170][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 383.643157][T12749] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 383.643364][T12730] wg2 speed is unknown, defaulting to 1000 [ 383.678254][T12730] lo speed is unknown, defaulting to 1000 [ 384.274196][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 384.396662][T12762] bond6: entered promiscuous mode [ 384.396804][T12762] bond6: entered allmulticast mode [ 384.615229][T12776] x_tables: duplicate underflow at hook 1 [ 385.011954][T12789] netlink: 'syz.3.1554': attribute type 8 has an invalid length. [ 386.129973][T12806] netlink: 'syz.4.1557': attribute type 6 has an invalid length. [ 386.217888][T12808] ip_tables: iptables: counters copy to user failed while replacing table [ 386.469415][T12824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.502599][ T5776] lo speed is unknown, defaulting to 1000 [ 386.661229][T12830] __nla_validate_parse: 4 callbacks suppressed [ 386.661252][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 386.705165][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 386.775794][T12830] netlink: 'syz.2.1568': attribute type 4 has an invalid length. [ 387.102088][T12856] netlink: 'syz.4.1575': attribute type 10 has an invalid length. [ 387.102113][T12856] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1575'. [ 387.350040][T12866] dvmrp6: entered allmulticast mode [ 387.552768][ T1998] block nbd4: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 30 seconds [ 387.555763][ T1998] block nbd4: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 30 seconds [ 387.555802][ T1998] block nbd4: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 30 seconds [ 387.555827][ T1998] block nbd4: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 30 seconds [ 387.757350][T12879] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 387.866292][T12884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1581'. [ 387.882571][T12884] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1581'. [ 388.397613][T12898] x_tables: duplicate underflow at hook 1 [ 388.397703][T12898] x_tables: duplicate underflow at hook 1 [ 388.397776][T12898] x_tables: duplicate underflow at hook 1 [ 388.397851][T12898] x_tables: duplicate underflow at hook 1 [ 388.397922][T12898] x_tables: duplicate underflow at hook 1 [ 388.397993][T12898] x_tables: duplicate underflow at hook 1 [ 388.398076][T12898] x_tables: duplicate underflow at hook 1 [ 388.398151][T12898] x_tables: duplicate underflow at hook 1 [ 388.398222][T12898] x_tables: duplicate underflow at hook 1 [ 388.762012][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 389.101632][T12916] FAULT_INJECTION: forcing a failure. [ 389.101632][T12916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.101669][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.3.1588 Not tainted syzkaller #0 PREEMPT(full) [ 389.101690][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 389.101719][T12916] Call Trace: [ 389.101727][T12916] [ 389.101736][T12916] dump_stack_lvl+0xe8/0x150 [ 389.101769][T12916] should_fail_ex+0x410/0x560 [ 389.101801][T12916] _copy_from_user+0x2d/0xb0 [ 389.101829][T12916] ___sys_sendmsg+0x1c6/0x360 [ 389.101856][T12916] ? __lock_acquire+0x747/0x2de0 [ 389.101883][T12916] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.101949][T12916] ? __fget_files+0x3a2/0x420 [ 389.101969][T12916] ? __fget_files+0x2a/0x420 [ 389.101999][T12916] __x64_sys_sendmsg+0x1b1/0x290 [ 389.102020][T12916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.102071][T12916] do_syscall_64+0x166/0x520 [ 389.102089][T12916] ? trace_irq_disable+0x3b/0x140 [ 389.102110][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.102129][T12916] ? clear_bhb_loop+0x70/0xc0 [ 389.102153][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.102171][T12916] RIP: 0033:0x7f7f1b39f559 [ 389.102189][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.102226][T12916] RSP: 002b:00007f7f1c22f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.102247][T12916] RAX: ffffffffffffffda RBX: 00007f7f1b625fa0 RCX: 00007f7f1b39f559 [ 389.102261][T12916] RDX: 0000000020048844 RSI: 0000200000000740 RDI: 0000000000000003 [ 389.102274][T12916] RBP: 00007f7f1c22f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.102323][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.102335][T12916] R13: 00007f7f1b626038 R14: 00007f7f1b625fa0 R15: 00007fff1ce0a298 [ 389.102367][T12916] [ 389.418115][T12923] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1589'. [ 389.418399][T12923] 0XD: renamed from gretap0 [ 389.651423][T12923] 0XD: entered allmulticast mode [ 389.914024][T12941] openvswitch: netlink: Message has 64 unknown bytes. [ 389.923488][T12941] ip_tables: iptables: counters copy to user failed while replacing table [ 390.020688][T12933] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 390.124671][T12933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.133627][T12941] bond0: (slave erspan0): Opening slave failed [ 390.168864][T12952] ip_tables: iptables: counters copy to user failed while replacing table [ 390.169215][T12953] openvswitch: netlink: Message has 64 unknown bytes. [ 390.215941][T12956] bond0: (slave erspan0): Opening slave failed [ 390.298154][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 390.304930][T12935] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.735822][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 390.886532][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 391.023562][T12935] wg2 speed is unknown, defaulting to 1000 [ 391.040601][T12935] lo speed is unknown, defaulting to 1000 [ 391.810336][T13009] netlink: 'syz.1.1612': attribute type 1 has an invalid length. [ 392.081473][T13019] netlink: 'syz.1.1612': attribute type 10 has an invalid length. [ 392.081495][T13019] __nla_validate_parse: 1 callbacks suppressed [ 392.081507][T13019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1612'. [ 392.202539][T13009] bond7: option mode: invalid value (11) [ 392.206115][T13009] bond7 (unregistering): Released all slaves [ 392.386203][T13011] batman_adv: batadv0: Adding interface: veth0 [ 392.386221][T13011] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.386251][T13011] batman_adv: batadv0: Interface activated: veth0 [ 392.838068][T13019] dummy0: entered promiscuous mode [ 393.069482][T13026] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 393.205469][T13026] 8021q: adding VLAN 0 to HW filter on device bond11 [ 393.419702][T13033] tipc: Enabling of bearer rejected, failed to enable media [ 393.439873][T13031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1617'. [ 394.036354][T13066] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 394.036394][T13066] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 394.036433][T13066] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 394.253120][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 394.276563][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 394.331924][T13079] ip_tables: iptables: counters copy to user failed while replacing table [ 394.335966][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 394.386965][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 394.674429][T13089] netlink: 'syz.4.1630': attribute type 83 has an invalid length. [ 394.675470][T13083] netlink: 'syz.4.1630': attribute type 83 has an invalid length. [ 395.026751][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 395.070984][T13109] IPVS: set_ctl: invalid protocol: 183 172.30.1.2:20003 [ 395.092677][T13108] lo: entered promiscuous mode [ 395.094719][T13108] tunl0: entered promiscuous mode [ 395.172931][T13108] gre0: entered promiscuous mode [ 395.231450][T13108] erspan0: entered promiscuous mode [ 395.235829][T13108] ip_vti0: entered promiscuous mode [ 395.251882][T13108] ip6_vti0: entered promiscuous mode [ 395.255109][T13108] sit0: entered promiscuous mode [ 395.271440][T13108] ip6tnl0: entered promiscuous mode [ 395.296561][T13108] ip6gre0: entered promiscuous mode [ 395.400867][T13108] syz_tun: entered promiscuous mode [ 395.492457][T13108] ip6gretap0: entered promiscuous mode [ 395.573430][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.573873][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.653832][T13108] vcan0: entered promiscuous mode [ 395.697456][T13108] bond0: entered promiscuous mode [ 395.697490][T13108] bond_slave_0: entered promiscuous mode [ 395.697736][T13108] bond_slave_1: entered promiscuous mode [ 395.697904][T13108] batadv0: entered promiscuous mode [ 395.701775][T13108] dummy0: entered promiscuous mode [ 395.705557][T13108] nlmon0: entered promiscuous mode [ 395.748956][T13108] vxcan0: entered promiscuous mode [ 395.750004][T13108] vxcan1: entered promiscuous mode [ 395.751044][T13108] veth0: entered promiscuous mode [ 395.753782][T13108] veth1: entered promiscuous mode [ 395.781779][T13108] wg0: entered promiscuous mode [ 395.794457][T13108] wg1: entered promiscuous mode [ 395.804382][T13108] wg2: entered promiscuous mode [ 395.806333][T13108] veth0_to_bridge: entered promiscuous mode [ 395.826325][T13108] veth1_to_bridge: entered promiscuous mode [ 395.839013][T13108] veth0_to_bond: entered promiscuous mode [ 395.842644][T13108] veth1_to_bond: entered promiscuous mode [ 395.861626][T13108] veth0_to_team: entered promiscuous mode [ 395.873894][T13108] team_slave_0: entered promiscuous mode [ 395.883933][T13108] veth1_to_team: entered promiscuous mode [ 395.893323][T13108] team_slave_1: entered promiscuous mode [ 395.895300][T13108] veth1_to_batadv: entered promiscuous mode [ 395.910860][T13108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.910920][T13108] batadv_slave_1: entered promiscuous mode [ 395.913618][T13108] xfrm0: entered promiscuous mode [ 395.939954][T13108] veth0_to_hsr: entered promiscuous mode [ 395.960424][T13108] veth1_to_hsr: entered promiscuous mode [ 396.058714][T13108] hsr0: entered promiscuous mode [ 396.141656][T13108] macvtap0: entered promiscuous mode [ 396.144661][T13108] macsec0: entered promiscuous mode [ 396.160077][T13108] geneve0: entered promiscuous mode [ 396.164514][T13108] geneve1: entered promiscuous mode [ 396.180699][T13108] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 396.180918][T13108] mac80211_hwsim hwsim4 nicvf0: entered promiscuous mode [ 396.181096][T13108] geneve2: entered promiscuous mode [ 396.183115][T13108] bond1: entered promiscuous mode [ 396.184032][T13108] bond2: entered promiscuous mode [ 396.184174][T13108] bond3: entered promiscuous mode [ 396.184293][T13108] bond4: entered promiscuous mode [ 396.185963][T13108] bond5: entered promiscuous mode [ 396.185989][T13108] geneve3: entered promiscuous mode [ 396.242315][T13108] vlan2: entered promiscuous mode [ 396.244408][T13108] bond6: entered promiscuous mode [ 396.245340][T13108] vlan3: entered promiscuous mode [ 396.246058][T13108] bond7: entered promiscuous mode [ 396.268932][T13108] gtp0: entered promiscuous mode [ 396.269291][T13108] batadv0.5: entered promiscuous mode [ 396.271097][T13108] ip6tnl1: entered promiscuous mode [ 396.271695][T13108] bond8: entered promiscuous mode [ 396.272660][T13108] gretap2: entered promiscuous mode [ 396.273358][T13108] bond9: entered promiscuous mode [ 396.275467][T13108] bond10: entered promiscuous mode [ 396.276408][T13108] veth2: entered promiscuous mode [ 396.309243][T13108] veth3: entered promiscuous mode [ 396.358197][T13108] bridge1: entered promiscuous mode [ 396.408958][T13108] vxlan0: entered promiscuous mode [ 396.410729][T13108] vlan0: entered promiscuous mode [ 396.413064][T13108] netdevsim netdevsim2 eth0: entered promiscuous mode [ 396.413449][T13108] netdevsim netdevsim2 eth1: entered promiscuous mode [ 396.413572][T13108] netdevsim netdevsim2 eth2: entered promiscuous mode [ 396.413690][T13108] netdevsim netdevsim2 eth3: entered promiscuous mode [ 396.413810][T13108] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 396.414419][T13108] bond11: entered promiscuous mode [ 396.415542][T13108] bond12: entered promiscuous mode [ 396.475898][T13108] bond13: entered promiscuous mode [ 396.482460][T13108] syztnl1: entered promiscuous mode [ 396.484529][T13108] mac80211_hwsim hwsim20 wlan2: entered promiscuous mode [ 396.568952][T11980] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.568985][T11980] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.569347][ T5768] wg2 speed is unknown, defaulting to 1000 [ 396.571998][ T5768] syz2: Port: 1 Link DOWN [ 396.574914][T11995] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.574953][T11995] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.574990][T11995] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.575012][T11995] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.575060][T11995] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.575082][T11995] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.691821][T13147] Bluetooth: hci0: unsupported parameter 5135 [ 396.691846][T13147] Bluetooth: hci0: unsupported parameter 8192 [ 396.691878][T13147] Bluetooth: hci0: unsupported parameter 5135 [ 396.691891][T13147] Bluetooth: hci0: unsupported parameter 8192 [ 396.921566][T13158] ip_tables: iptables: counters copy to user failed while replacing table [ 397.637083][T13164] 8021q: adding VLAN 0 to HW filter on device bond13 [ 397.643219][T13164] bond13: entered promiscuous mode [ 397.643424][T13164] bond13: entered allmulticast mode [ 397.646148][T13164] bond0: (slave bond13): Enslaving as an active interface with an up link [ 398.342715][T13205] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1660'. [ 398.414157][T13205] dvmrp8: entered allmulticast mode [ 398.448862][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1662'. [ 398.551400][T13220] ip6gre2: entered promiscuous mode [ 398.551420][T13220] ip6gre2: entered allmulticast mode [ 398.606237][T12005] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.619025][T12005] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.628981][ T5749] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.729377][ T5749] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.769004][ T5749] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 399.020986][T13238] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 399.041673][T13238] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 399.101150][T13241] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 399.102915][T13242] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 399.427147][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1673'. [ 399.682892][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 399.774426][T13263] syzkaller0: entered promiscuous mode [ 399.774450][T13263] syzkaller0: entered allmulticast mode [ 399.815949][T13263] rdma_rxe: rxe_newlink: failed to add lo [ 400.128940][T13278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1680'. [ 400.133898][T13277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 400.144557][T13271] tun0: tun_chr_ioctl cmd 1074025675 [ 400.144578][T13271] tun0: persist disabled [ 400.375535][T13290] xt_hashlimit: size too large, truncated to 1048576 [ 400.375782][T13290] xt_hashlimit: max too large, truncated to 1048576 [ 400.535791][T13295] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1685'. [ 400.535986][T13295] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1685'. [ 400.536175][T13295] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1685'. [ 400.536345][T13295] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1685'. [ 401.053967][T13321] syzkaller1: entered promiscuous mode [ 401.053989][T13321] syzkaller1: entered allmulticast mode [ 401.697583][T13347] netlink: 'syz.3.1697': attribute type 4 has an invalid length. [ 401.768740][T13350] FAULT_INJECTION: forcing a failure. [ 401.768740][T13350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.768770][T13350] CPU: 0 UID: 0 PID: 13350 Comm: syz.2.1696 Not tainted syzkaller #0 PREEMPT(full) [ 401.768789][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 401.768801][T13350] Call Trace: [ 401.768807][T13350] [ 401.768815][T13350] dump_stack_lvl+0xe8/0x150 [ 401.768847][T13350] should_fail_ex+0x410/0x560 [ 401.768878][T13350] _copy_from_user+0x2d/0xb0 [ 401.768903][T13350] kstrtouint_from_user+0xd6/0x180 [ 401.768928][T13350] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 401.768959][T13350] ? lock_acquire+0x115/0x350 [ 401.768985][T13350] proc_fail_nth_write+0x8e/0x210 [ 401.769011][T13350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.769044][T13350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.769067][T13350] vfs_write+0x296/0xba0 [ 401.769098][T13350] ? __pfx_vfs_write+0x10/0x10 [ 401.769121][T13350] ? __fget_files+0x2a/0x420 [ 401.769138][T13350] ? __fget_files+0x3a2/0x420 [ 401.769155][T13350] ? __fget_files+0x2a/0x420 [ 401.769179][T13350] ? fdget+0x1ac/0x250 [ 401.769205][T13350] ksys_write+0x150/0x270 [ 401.769229][T13350] ? __pfx_ksys_write+0x10/0x10 [ 401.769259][T13350] do_syscall_64+0x166/0x520 [ 401.769276][T13350] ? trace_irq_disable+0x3b/0x140 [ 401.769298][T13350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.769316][T13350] ? clear_bhb_loop+0x70/0xc0 [ 401.769338][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.769355][T13350] RIP: 0033:0x7fba0cd5fd8e [ 401.769373][T13350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.769388][T13350] RSP: 002b:00007fba0dbb9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.769409][T13350] RAX: ffffffffffffffda RBX: 00007fba0dbba6c0 RCX: 00007fba0cd5fd8e [ 401.769423][T13350] RDX: 0000000000000001 RSI: 00007fba0dbba0a0 RDI: 0000000000000004 [ 401.769435][T13350] RBP: 00007fba0dbba090 R08: 0000000000000000 R09: 0000000000000000 [ 401.769447][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.769458][T13350] R13: 00007fba0d026038 R14: 00007fba0d025fa0 R15: 00007ffd7ec43138 [ 401.769490][T13350] [ 401.783668][T13353] netlink: 'syz.1.1698': attribute type 21 has an invalid length. [ 402.143422][T13363] syzkaller0: entered promiscuous mode [ 402.143450][T13363] syzkaller0: entered allmulticast mode [ 402.179159][T13363] bond2: option mode: unable to set because the bond device is up [ 402.261136][T13363] rdma_rxe: rxe_newlink: failed to add bond0 [ 402.279290][T13363] tipc: Enabled bearer , priority 0 [ 402.312867][T13362] tipc: Resetting bearer [ 402.489786][T13362] tipc: Disabling bearer [ 402.576911][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 403.394082][T13410] ip6gretap0: left promiscuous mode [ 403.415013][T13410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.431132][T13410] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.460455][T13410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.477123][T13410] batman_adv: batadv0: Interface activated: veth0 [ 403.848652][T13410] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 403.957122][T13423] sctp: [Deprecated]: syz.2.1712 (pid 13423) Use of int in max_burst socket option. [ 403.957122][T13423] Use struct sctp_assoc_value instead [ 403.984533][T13410] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 403.984751][T13409] batadv_slave_1: entered promiscuous mode [ 404.310115][T13410] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 404.313134][T13426] syz_tun: entered allmulticast mode [ 404.317080][T13419] syz_tun: left allmulticast mode [ 404.450221][T13432] netlink: 'syz.1.1716': attribute type 4 has an invalid length. [ 404.569020][T13439] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 404.574435][ T10] lo speed is unknown, defaulting to 1000 [ 404.574479][ T10] syz0: Port: 1 Link DOWN [ 404.575144][ T10] lo speed is unknown, defaulting to 1000 [ 404.575903][T13435] x9: renamed from bridge_slave_0 [ 404.621714][T13435] ip_tables: iptables: counters copy to user failed while replacing table [ 404.623166][T13437] __nla_validate_parse: 34 callbacks suppressed [ 404.623187][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1714'. [ 405.124295][T13452] ip_tables: iptables: counters copy to user failed while replacing table [ 405.617151][ C1] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 406.656795][ C1] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 407.568676][T13475] gretap0: entered promiscuous mode [ 407.571000][T13475] vlan2: entered promiscuous mode [ 407.660272][T13410] batadv_slave_1: left promiscuous mode [ 407.816371][T13485] syzkaller1: entered promiscuous mode [ 407.816635][T13485] syzkaller1: entered allmulticast mode [ 407.995630][T13493] xt_hashlimit: size too large, truncated to 1048576 [ 408.037282][T13491] netlink: 'syz.2.1730': attribute type 3 has an invalid length. [ 408.536127][T13503] tipc: Enabling of bearer rejected, failed to enable media [ 408.921626][T13514] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 408.921829][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 409.046580][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1738'. [ 409.199501][T13527] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1738'. [ 409.255672][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1739'. [ 409.317970][T13533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1738'. [ 409.422090][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 409.472983][T13539] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 409.759014][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 409.894442][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 410.576890][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 410.830438][T13529] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 410.833077][T13532] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 410.847528][T13539] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 410.882416][T13541] batman_adv: batadv0: Interface deactivated: veth0 [ 410.882447][T13541] batman_adv: batadv0: Removing interface: veth0 [ 410.984727][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 412.039620][T13541] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 412.040295][T13540] netlink: 'syz.4.1741': attribute type 12 has an invalid length. [ 412.041831][T13549] vlan0: entered promiscuous mode [ 412.050163][T13561] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 412.079782][T13563] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 412.766916][T13597] nbd: must specify a size in bytes for the device [ 413.098460][T13603] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 413.198033][T13608] batman_adv: batadv0: Adding interface: dummy0 [ 413.198051][T13608] batman_adv: batadv0: The MTU of interface dummy0 is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 413.198080][T13608] batman_adv: batadv0: Interface activated: dummy0 [ 413.248287][T13610] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 413.248308][T13610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1752'. [ 413.252920][T13605] batadv0: mtu less than device minimum [ 413.254519][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.255996][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.257510][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.258988][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.260565][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.262046][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.263508][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.264964][T13605] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 413.388433][T13610] batadv0: entered promiscuous mode [ 413.388454][T13610] batadv0: entered allmulticast mode [ 413.431852][T13613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1754'. [ 414.083371][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 414.315899][T13636] 8021q: adding VLAN 0 to HW filter on device bond9 [ 414.351625][T13641] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1757'. [ 414.982909][T13656] netlink: 'syz.0.1762': attribute type 21 has an invalid length. [ 414.982940][T13656] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1762'. [ 415.081668][T13656] netlink: 'syz.0.1762': attribute type 5 has an invalid length. [ 415.081693][T13656] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1762'. [ 415.505550][T13674] syzkaller0: entered promiscuous mode [ 415.505573][T13674] syzkaller0: entered allmulticast mode [ 415.962444][T13684] tc_dump_action: action bad kind [ 416.196942][T13695] can: request_module (can-proto-0) failed. [ 416.698827][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 417.182638][T13734] bond6: entered allmulticast mode [ 417.182660][T13734] wireguard0: entered allmulticast mode [ 417.435742][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 417.435765][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'. [ 417.463264][T13716] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.479908][T13733] bond6: left allmulticast mode [ 417.479931][T13733] wireguard0: left allmulticast mode [ 417.502671][T13716] netlink: 'syz.1.1774': attribute type 4 has an invalid length. [ 417.502695][T13716] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1774'. [ 417.551781][T13716] .`: renamed from bond0 [ 417.620925][ T1998] block nbd4: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 60 seconds [ 417.620968][ T1998] block nbd4: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 60 seconds [ 417.620995][ T1998] block nbd4: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 60 seconds [ 417.621019][ T1998] block nbd4: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 60 seconds [ 418.117394][T13772] veth1_to_bond: entered promiscuous mode [ 418.142131][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 418.190316][T13778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.725974][T13766] veth1_to_bond: left promiscuous mode [ 419.224443][T13806] macsec2: entered promiscuous mode [ 419.473382][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1797'. [ 419.715965][T13815] ip6gretap1: entered promiscuous mode [ 419.882962][T13827] GUP no longer grows the stack in syz.2.1800 (13827): 200000003000-20000000a000 (200000001000) [ 419.882994][T13827] CPU: 1 UID: 0 PID: 13827 Comm: syz.2.1800 Not tainted syzkaller #0 PREEMPT(full) [ 419.883015][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 419.883027][T13827] Call Trace: [ 419.883034][T13827] [ 419.883043][T13827] dump_stack_lvl+0xe8/0x150 [ 419.883078][T13827] __get_user_pages+0x23b1/0x2750 [ 419.883113][T13827] ? lock_acquire+0x115/0x350 [ 419.883151][T13827] ? __gup_longterm_locked+0xcb2/0x16f0 [ 419.883179][T13827] __gup_longterm_locked+0xe24/0x16f0 [ 419.883225][T13827] gup_fast_fallback+0x1d92/0x20e0 [ 419.883278][T13827] ? __pfx_gup_fast_fallback+0x10/0x10 [ 419.883301][T13827] ? is_valid_gup_args+0x11f/0x200 [ 419.883331][T13827] ? get_user_pages_fast+0x4d/0xb0 [ 419.883350][T13827] __iov_iter_get_pages_alloc+0x378/0xa40 [ 419.883379][T13827] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 419.883401][T13827] ? __fget_files+0x2a/0x420 [ 419.883425][T13827] iov_iter_get_pages2+0x5e/0xa0 [ 419.883454][T13827] __se_sys_vmsplice+0x844/0x16f0 [ 419.883497][T13827] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 419.883527][T13827] ? __pfx_futex_wait+0x10/0x10 [ 419.883576][T13827] ? vm_mmap_pgoff+0x35a/0x4e0 [ 419.883600][T13827] ? lock_acquire+0x115/0x350 [ 419.883659][T13827] do_syscall_64+0x166/0x520 [ 419.883678][T13827] ? trace_irq_disable+0x3b/0x140 [ 419.883699][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.883718][T13827] ? clear_bhb_loop+0x70/0xc0 [ 419.883742][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.883761][T13827] RIP: 0033:0x7fba0cd9f559 [ 419.883779][T13827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.883794][T13827] RSP: 002b:00007fba0aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 419.883816][T13827] RAX: ffffffffffffffda RBX: 00007fba0d026180 RCX: 00007fba0cd9f559 [ 419.883829][T13827] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000008 [ 419.883840][T13827] RBP: 00007fba0ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 419.883852][T13827] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 419.883863][T13827] R13: 00007fba0d026218 R14: 00007fba0d026180 R15: 00007ffd7ec43138 [ 419.883897][T13827] [ 420.244207][T13833] netlink: 'syz.3.1802': attribute type 83 has an invalid length. [ 420.754852][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1807'. [ 421.601891][T13892] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~ϱoxR!Fo?< [ 421.666576][T13895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1816'. [ 421.760804][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 421.842404][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 422.438712][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 423.021577][T13946] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1829'. [ 423.371326][T13961] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 423.445313][T13964] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1836'. [ 423.496512][T13961] 8021q: adding VLAN 0 to HW filter on device bond14 [ 423.648534][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1835'. [ 423.682997][T13972] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 423.683019][T13972] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1837'. [ 423.683042][T13972] NCSI netlink: No device for ifindex 0 [ 423.832581][T13981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1841'. [ 425.936935][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 426.678358][ T4995] udevd[4995]: worker [11884] /devices/virtual/block/nbd4 is taking a long time [ 427.083155][T14015] ip6tnl0: entered promiscuous mode [ 427.083181][T14015] ip6tnl0: entered allmulticast mode [ 427.491405][T14030] xt_check_table_hooks: 24 callbacks suppressed [ 427.491428][T14030] x_tables: duplicate underflow at hook 1 [ 427.766933][T14042] netlink: 'syz.3.1853': attribute type 1 has an invalid length. [ 427.766957][T14042] __nla_validate_parse: 1 callbacks suppressed [ 427.766968][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1853'. [ 427.995547][T14048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1854'. [ 428.082722][T14050] netlink: 'syz.0.1854': attribute type 49 has an invalid length. [ 428.731503][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1861'. [ 428.836229][T14078] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 428.906283][T14079] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1860'. [ 428.993436][T14078] bond9: entered promiscuous mode [ 428.993509][T14078] bond9: entered allmulticast mode [ 428.993917][T14078] 8021q: adding VLAN 0 to HW filter on device bond9 [ 429.031868][T14080] erspan1: entered allmulticast mode [ 429.130731][T14091] netlink: 'syz.3.1867': attribute type 39 has an invalid length. [ 429.485210][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 429.702327][T14109] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 430.383058][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 431.699006][T14191] netlink: 712 bytes leftover after parsing attributes in process `syz.4.1885'. [ 431.699030][T14191] netlink: 5504 bytes leftover after parsing attributes in process `syz.4.1885'. [ 431.699043][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1885'. [ 431.758937][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 432.839095][T14236] rxe_eth0 speed is unknown, defaulting to 1000 [ 433.553828][T14275] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 433.824928][T14275] bond10: entered promiscuous mode [ 433.825489][T14275] 8021q: adding VLAN 0 to HW filter on device bond10 [ 434.121764][T14236] wg2 speed is unknown, defaulting to 1000 [ 434.186901][T14236] lo speed is unknown, defaulting to 1000 [ 434.336217][T14286] netlink: 'syz.0.1900': attribute type 6 has an invalid length. [ 435.019638][T14318] __nla_validate_parse: 2 callbacks suppressed [ 435.019659][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 435.489510][T14319] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1907'. [ 435.558091][T14318] xt_LOG: level 115 >= 8 [ 436.405685][T14354] net_ratelimit: 14 callbacks suppressed [ 436.405708][T14354] ip_tables: iptables: counters copy to user failed while replacing table [ 436.674472][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 437.145654][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'. [ 438.044773][T14385] tipc: Invalid UDP bearer configuration [ 438.044822][T14385] tipc: Enabling of bearer rejected, failed to enable media [ 438.623162][T14412] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1929'. [ 438.770571][T14419] sctp: [Deprecated]: syz.2.1931 (pid 14419) Use of int in max_burst socket option. [ 438.770571][T14419] Use struct sctp_assoc_value instead [ 438.794647][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 438.854924][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 439.165594][T14431] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1935'. [ 439.275806][T14440] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1938'. [ 439.298759][T14441] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 439.298784][T14441] nbd: illegal input index 395028 [ 439.299822][T14443] netlink: 'syz.4.1939': attribute type 10 has an invalid length. [ 439.509880][T14451] netlink: 'syz.2.1938': attribute type 10 has an invalid length. [ 440.355699][T14461] block nbd0: reconnected socket [ 440.355792][T14461] block nbd0: reconnected socket [ 440.373735][T14461] netlink: 'syz.1.1942': attribute type 9 has an invalid length. [ 440.685745][T14460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1941'. [ 440.719089][ T5635] block nbd0: Receive control failed (result -32) [ 440.719129][ T5632] block nbd0: Receive control failed (result -32) [ 440.954093][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 441.120698][T14489] mac80211_hwsim hwsim6 ..c: renamed from wlan1 [ 441.182471][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182530][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182558][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182584][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182609][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182635][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182661][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182686][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182712][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.182737][T14487] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.421388][T14506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1955'. [ 441.509155][T14509] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.549039][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 441.551355][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 441.551917][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 441.815177][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1959'. [ 442.341767][T14545] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 442.478971][T14551] bond15: (slave geneve5): making interface the new active one [ 442.484663][T14551] bond15: (slave geneve5): Enslaving as an active interface with an up link [ 442.507932][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 442.526174][T14559] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 442.546914][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 442.546961][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 442.546991][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 443.107061][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 443.155125][T14577] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 443.167033][T14577] 0XD: entered promiscuous mode [ 443.179081][T14577] 0XD: left promiscuous mode [ 443.198268][T14577] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 443.283117][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 443.311201][T14586] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 443.313533][T14586] 0XD: entered promiscuous mode [ 443.319552][T14586] 0XD: left promiscuous mode [ 443.321880][T14586] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 443.481385][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1976'. [ 444.794368][T14639] TC_ACT_REPEAT abuse ? [ 445.046015][T14659] netlink: 'syz.3.1984': attribute type 10 has an invalid length. [ 445.571755][T14659] veth0_to_bond: left promiscuous mode [ 445.571783][T14659] veth0_to_bond: left allmulticast mode [ 445.605747][T14659] veth0_to_bond: entered promiscuous mode [ 445.605924][T14659] veth0_to_bond: entered allmulticast mode [ 445.635325][T14671] netlink: 'syz.1.1990': attribute type 9 has an invalid length. [ 445.719504][T14676] netlink: 'syz.1.1990': attribute type 9 has an invalid length. [ 445.723521][T14667] macsec2: entered promiscuous mode [ 446.056029][T14670] __nla_validate_parse: 69 callbacks suppressed [ 446.056052][T14670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1990'. [ 446.074124][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1990'. [ 446.074519][T14671] bridge6: entered promiscuous mode [ 447.649873][T14676] bridge7: entered promiscuous mode [ 447.700011][ T1998] block nbd4: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 90 seconds [ 447.700056][ T1998] block nbd4: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 90 seconds [ 447.700082][ T1998] block nbd4: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 90 seconds [ 447.700106][ T1998] block nbd4: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 90 seconds [ 447.770611][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1990'. [ 448.495517][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 448.900873][T14723] netlink: 'syz.4.2002': attribute type 21 has an invalid length. [ 448.900896][T14723] netlink: 'syz.4.2002': attribute type 22 has an invalid length. [ 448.900909][T14723] netlink: 'syz.4.2002': attribute type 23 has an invalid length. [ 448.900921][T14723] netlink: 'syz.4.2002': attribute type 25 has an invalid length. [ 448.900934][T14723] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2002'. [ 448.941092][T14733] netlink: 'syz.3.2006': attribute type 6 has an invalid length. [ 448.994024][T14731] syzkaller0: entered promiscuous mode [ 448.994047][T14731] syzkaller0: entered allmulticast mode [ 449.337025][T14739] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2007'. [ 449.980348][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 450.036886][T14768] netlink: 'syz.3.2009': attribute type 11 has an invalid length. [ 450.400576][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 450.513854][T14791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.559387][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 450.620734][T14791] bond0: (slave batadv0): Releasing backup interface [ 450.635963][T14791] batadv0 (unregistering): left allmulticast mode [ 450.767433][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2016'. [ 451.100573][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2016'. [ 451.154945][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 451.907462][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2028'. [ 452.030430][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2030'. [ 452.093850][T14857] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2031'. [ 452.094808][T14857] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2031'. [ 452.310300][T14866] IPv6: sit1: Disabled Multicast RS [ 453.064983][T14894] netlink: 'syz.1.2042': attribute type 11 has an invalid length. [ 453.742063][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 453.821339][T14924] erspan2: entered promiscuous mode [ 453.821363][T14924] erspan2: entered allmulticast mode [ 454.513315][T14959] sctp: [Deprecated]: syz.3.2058 (pid 14959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.513315][T14959] Use struct sctp_sack_info instead [ 454.653016][T14943] syzkaller0: entered promiscuous mode [ 454.653260][T14943] syzkaller0: entered allmulticast mode [ 454.749931][T14952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2060'. [ 455.327475][T14995] netlink: zone id is out of range [ 455.327492][T14995] netlink: zone id is out of range [ 455.327500][T14995] netlink: zone id is out of range [ 455.327508][T14995] netlink: zone id is out of range [ 455.327516][T14995] netlink: zone id is out of range [ 455.327523][T14995] netlink: zone id is out of range [ 455.327531][T14995] netlink: zone id is out of range [ 455.327539][T14995] netlink: zone id is out of range [ 455.331581][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 455.776512][T15003] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2067'. [ 456.333237][T15016] __nla_validate_parse: 1 callbacks suppressed [ 456.333259][T15016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2070'. [ 458.476137][T14953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 458.486017][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 458.511771][T14959] bond16: option min_links: invalid value (18446744073709551612) [ 458.511797][T14959] bond16: option min_links: allowed values 0 - 2147483647 [ 458.514318][T14959] bond16 (unregistering): Released all slaves [ 458.587705][T14995] bridge_slave_1: left allmulticast mode [ 458.587953][T14995] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.590539][T14995] x9: left allmulticast mode [ 458.590784][T14995] bridge0: port 1(1x9) entered disabled state [ 459.001120][T15003] gretap0: entered promiscuous mode [ 459.013280][T15009] 0{X: renamed from gretap0 [ 459.028652][T15009] 0{X: left promiscuous mode [ 459.028912][T15009] 0{X: entered allmulticast mode [ 459.034168][T15009] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 459.471019][T15038] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 459.516657][T15038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.644908][T15048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2079'. [ 459.722060][T15058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2079'. [ 460.724629][T15085] lo: entered promiscuous mode [ 460.834142][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2088'. [ 461.354619][T15114] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 461.370608][T15114] ip_tables: iptables: counters copy to user failed while replacing table [ 461.413226][T15116] netlink: 'syz.1.2093': attribute type 16 has an invalid length. [ 461.413249][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 461.704462][T15123] Bluetooth: MGMT ver 1.23 [ 461.890087][T15134] tipc: Can't bind to reserved service type 2 [ 462.002373][T15140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2103'. [ 462.305818][T15153] netlink: 'syz.1.2108': attribute type 13 has an invalid length. [ 462.305841][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 462.316657][T15155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2109'. [ 462.316848][T15156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2109'. [ 462.317103][T15155] @: renamed from veth0_vlan (while UP) [ 462.503121][T15161] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2110'. [ 462.720743][T15168] syzkaller0: entered promiscuous mode [ 462.720767][T15168] syzkaller0: entered allmulticast mode [ 462.740631][T15163] tipc: Enabled bearer , priority 0 [ 462.769796][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2111'. [ 462.795872][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2114'. [ 462.809813][T15162] tipc: Resetting bearer [ 462.883601][T15162] tipc: Disabling bearer [ 463.175321][T15185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2117'. [ 463.539523][T15199] tipc: Enabled bearer , priority 0 [ 463.585348][T15199] tipc: Resetting bearer [ 463.585589][T15199] batadv0: mtu less than device minimum [ 463.587152][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.588540][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.589879][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.591203][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.592564][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.593901][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.595233][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.596553][T15199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.065526][T15220] : option downdelay: invalid value (18446744073709547007) [ 464.065553][T15220] : option downdelay: allowed values 0 - 2147483647 [ 464.101938][T15220]  (unregistering): Released all slaves [ 464.159884][T15231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2126'. [ 464.216444][T15235] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 464.263700][T15231] rxe_eth0 speed is unknown, defaulting to 1000 [ 464.415830][ T5754] lo speed is unknown, defaulting to 1000 [ 464.415887][ T5754] syz0: Port: 1 Link ACTIVE [ 464.415968][ T5754] lo speed is unknown, defaulting to 1000 [ 465.081831][T15262] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 466.403898][T15328] bond10: entered allmulticast mode [ 466.441584][T15331] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 466.446568][T15331] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 466.865339][T15310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.195177][T15355] __nla_validate_parse: 3 callbacks suppressed [ 467.195201][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 467.232259][T15357] net_ratelimit: 11 callbacks suppressed [ 467.232283][T15357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 467.595632][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2157'. [ 467.645818][T15368] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 467.645841][T15368] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2157'. [ 468.079974][T15385] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 468.172399][T15385] bond16: entered promiscuous mode [ 468.174522][T15385] 8021q: adding VLAN 0 to HW filter on device bond16 [ 468.196418][T15388] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2162'. [ 469.186568][T15410] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2168'. [ 469.284444][T15414] tun0: tun_chr_ioctl cmd 1074812117 [ 469.358528][T15417] tun0: tun_chr_ioctl cmd 1074025673 [ 469.361607][T15423] tun0: tun_chr_ioctl cmd 1074812117 [ 469.547454][T15420] vxcan2: entered allmulticast mode [ 469.953980][T15451] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 470.282871][T15451] 8021q: adding VLAN 0 to HW filter on device bond12 [ 470.322154][T15452] 8021q: adding VLAN 0 to HW filter on device bond12 [ 470.322641][T15452] bond12: (slave gre2): The slave device specified does not support setting the MAC address [ 470.323508][T15452] bond12: (slave gre2): Error -95 calling set_mac_address [ 470.423447][T15453] gretap2: entered promiscuous mode [ 470.587519][T15454] 8021q: adding VLAN 0 to HW filter on device bond13 [ 470.611350][T15454] bond12: (slave bond13): Enslaving as an active interface with a down link [ 470.640687][T15451] bond12 (unregistering): (slave bond13): Releasing active interface [ 470.671303][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 470.698450][T15470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2179'. [ 470.700226][T15451] bond12 (unregistering): Released all slaves [ 470.743659][T15459] batadv0: left promiscuous mode [ 470.743679][T15459] batadv0: left allmulticast mode [ 470.867950][T15477] ebt_among: dst integrity fail: 301 [ 471.367542][T15469] erspan0: entered promiscuous mode [ 471.555354][T15493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2188'. [ 471.809966][T15506] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 472.245988][T15506] bridge0: entered promiscuous mode [ 472.246013][T15506] bridge0: entered allmulticast mode [ 472.272012][T15506] bond14: (slave bridge0): making interface the new active one [ 472.272491][T15506] bond14: (slave bridge0): Enslaving as an active interface with an up link [ 472.500389][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2199'. [ 472.523852][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2198'. [ 472.526151][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 472.640913][T15538] netlink: 'syz.0.2200': attribute type 4 has an invalid length. [ 472.640937][T15538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2200'. [ 472.670642][T15529] syzkaller0: entered promiscuous mode [ 472.670665][T15529] syzkaller0: entered allmulticast mode [ 472.730301][T15533] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 472.780141][T15533] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 472.781245][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2201'. [ 473.393994][T15557] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 473.521918][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 473.700032][T15572] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2207'. [ 473.752369][T15556] syzkaller1: entered promiscuous mode [ 473.752647][T15556] syzkaller1: entered allmulticast mode [ 474.131368][T15594] rds_bind: 23 callbacks suppressed [ 474.131389][T15594] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 474.451459][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2215'. [ 474.451501][T15591] tipc: Invalid UDP bearer configuration [ 474.451542][T15591] tipc: Enabling of bearer rejected, failed to enable media [ 475.025564][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2222'. [ 475.103981][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'. [ 475.194480][T15615] gretap0: entered allmulticast mode [ 475.273221][T15611] syzkaller0: entered promiscuous mode [ 475.273252][T15611] syzkaller0: entered allmulticast mode [ 476.650537][T15684] netlink: 'syz.2.2238': attribute type 8 has an invalid length. [ 476.748334][T15682] macvtap1: entered promiscuous mode [ 476.987315][T11995] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.987360][T11995] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.987392][T11995] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.987421][T11995] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.124055][T15703] xt_NETMAP: bad MAP_IPS. [ 477.426363][T15718] netlink: 'syz.0.2243': attribute type 2 has an invalid length. [ 477.786897][ T1998] block nbd4: Possible stuck request ffff8880286b5080: control (read@0,1024B). Runtime 120 seconds [ 477.786944][ T1998] block nbd4: Possible stuck request ffff8880286b5240: control (read@1024,1024B). Runtime 120 seconds [ 477.786969][ T1998] block nbd4: Possible stuck request ffff8880286b5400: control (read@2048,1024B). Runtime 120 seconds [ 477.786995][ T1998] block nbd4: Possible stuck request ffff8880286b55c0: control (read@3072,1024B). Runtime 120 seconds [ 477.905671][T15731] ip_tables: iptables: counters copy to user failed while replacing table [ 478.067608][T15747] FAULT_INJECTION: forcing a failure. [ 478.067608][T15747] name failslab, interval 1, probability 0, space 0, times 0 [ 478.067644][T15747] CPU: 1 UID: 0 PID: 15747 Comm: syz.0.2257 Not tainted syzkaller #0 PREEMPT(full) [ 478.067666][T15747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 478.067678][T15747] Call Trace: [ 478.067687][T15747] [ 478.067696][T15747] dump_stack_lvl+0xe8/0x150 [ 478.067728][T15747] should_fail_ex+0x410/0x560 [ 478.067878][T15747] should_failslab+0xa8/0x100 [ 478.067908][T15747] __kmalloc_cache_node_noprof+0xa5/0x620 [ 478.067934][T15747] ? __css_rstat_updated+0x237/0x540 [ 478.067957][T15747] ? __get_vm_area_node+0x155/0x2f0 [ 478.067976][T15747] ? __get_vm_area_node+0x155/0x2f0 [ 478.068002][T15747] __get_vm_area_node+0x155/0x2f0 [ 478.068037][T15747] __vmalloc_node_range_noprof+0x343/0x1540 [ 478.068060][T15747] ? bpf_check+0x115b/0x2ef0 [ 478.068097][T15747] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 478.068130][T15747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.068153][T15747] ? apparmor_capable+0x126/0x170 [ 478.068213][T15747] ? bpf_lsm_capable+0x9/0x20 [ 478.068231][T15747] ? security_capable+0x7e/0x2c0 [ 478.068282][T15747] ? bpf_check+0x115b/0x2ef0 [ 478.068301][T15747] __vmalloc_noprof+0xd2/0x120 [ 478.068325][T15747] ? bpf_check+0x115b/0x2ef0 [ 478.068350][T15747] bpf_check+0x115b/0x2ef0 [ 478.068388][T15747] ? __pfx_bpf_check+0x10/0x10 [ 478.068414][T15747] ? bpf_obj_name_cpy+0x194/0x1e0 [ 478.068437][T15747] bpf_prog_load+0x14d1/0x1c20 [ 478.068473][T15747] ? __pfx_bpf_prog_load+0x10/0x10 [ 478.068527][T15747] __sys_bpf+0xd0d/0xd90 [ 478.068558][T15747] ? __pfx___sys_bpf+0x10/0x10 [ 478.068588][T15747] ? __fget_files+0x2a/0x420 [ 478.068624][T15747] ? ksys_write+0x242/0x270 [ 478.068649][T15747] ? __pfx_ksys_write+0x10/0x10 [ 478.068677][T15747] __x64_sys_bpf+0xba/0xd0 [ 478.068702][T15747] do_syscall_64+0x166/0x520 [ 478.068778][T15747] ? trace_irq_disable+0x3b/0x140 [ 478.068801][T15747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.068820][T15747] ? clear_bhb_loop+0x70/0xc0 [ 478.068843][T15747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.068860][T15747] RIP: 0033:0x7f887279f559 [ 478.068876][T15747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.068891][T15747] RSP: 002b:00007f88735a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.068910][T15747] RAX: ffffffffffffffda RBX: 00007f8872a25fa0 RCX: 00007f887279f559 [ 478.068922][T15747] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 478.068933][T15747] RBP: 00007f88735a4090 R08: 0000000000000000 R09: 0000000000000000 [ 478.068942][T15747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.068952][T15747] R13: 00007f8872a26038 R14: 00007f8872a25fa0 R15: 00007ffc919e5de8 [ 478.068980][T15747] [ 478.073204][T15747] syz.0.2257: vmalloc error: size 1632, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 478.073405][T15747] CPU: 1 UID: 0 PID: 15747 Comm: syz.0.2257 Not tainted syzkaller #0 PREEMPT(full) [ 478.073427][T15747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 478.073439][T15747] Call Trace: [ 478.073447][T15747] [ 478.073455][T15747] dump_stack_lvl+0xe8/0x150 [ 478.073488][T15747] warn_alloc+0x24d/0x270 [ 478.073510][T15747] ? __kasan_kmalloc+0x22/0xb0 [ 478.073536][T15747] ? __pfx_warn_alloc+0x10/0x10 [ 478.073554][T15747] ? __css_rstat_updated+0x237/0x540 [ 478.073577][T15747] ? __get_vm_area_node+0x155/0x2f0 [ 478.073605][T15747] ? __get_vm_area_node+0x2a9/0x2f0 [ 478.073633][T15747] __vmalloc_node_range_noprof+0x36b/0x1540 [ 478.073668][T15747] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 478.073703][T15747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.073726][T15747] ? apparmor_capable+0x126/0x170 [ 478.073756][T15747] ? bpf_lsm_capable+0x9/0x20 [ 478.073777][T15747] ? security_capable+0x7e/0x2c0 [ 478.073801][T15747] ? bpf_check+0x115b/0x2ef0 [ 478.073821][T15747] __vmalloc_noprof+0xd2/0x120 [ 478.073840][T15747] ? bpf_check+0x115b/0x2ef0 [ 478.073862][T15747] bpf_check+0x115b/0x2ef0 [ 478.073901][T15747] ? __pfx_bpf_check+0x10/0x10 [ 478.073925][T15747] ? bpf_obj_name_cpy+0x194/0x1e0 [ 478.073946][T15747] bpf_prog_load+0x14d1/0x1c20 [ 478.073982][T15747] ? __pfx_bpf_prog_load+0x10/0x10 [ 478.074042][T15747] __sys_bpf+0xd0d/0xd90 [ 478.074075][T15747] ? __pfx___sys_bpf+0x10/0x10 [ 478.074111][T15747] ? __fget_files+0x2a/0x420 [ 478.074149][T15747] ? ksys_write+0x242/0x270 [ 478.074175][T15747] ? __pfx_ksys_write+0x10/0x10 [ 478.074202][T15747] __x64_sys_bpf+0xba/0xd0 [ 478.074224][T15747] do_syscall_64+0x166/0x520 [ 478.074239][T15747] ? trace_irq_disable+0x3b/0x140 [ 478.074256][T15747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.074271][T15747] ? clear_bhb_loop+0x70/0xc0 [ 478.074289][T15747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.074302][T15747] RIP: 0033:0x7f887279f559 [ 478.074318][T15747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.074336][T15747] RSP: 002b:00007f88735a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.074356][T15747] RAX: ffffffffffffffda RBX: 00007f8872a25fa0 RCX: 00007f887279f559 [ 478.074369][T15747] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 478.074379][T15747] RBP: 00007f88735a4090 R08: 0000000000000000 R09: 0000000000000000 [ 478.074389][T15747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.074399][T15747] R13: 00007f8872a26038 R14: 00007f8872a25fa0 R15: 00007ffc919e5de8 [ 478.074428][T15747] [ 478.076049][T15747] Mem-Info: [ 478.076062][T15747] active_anon:8096 inactive_anon:0 isolated_anon:0 [ 478.076062][T15747] active_file:1 inactive_file:43341 isolated_file:0 [ 478.076062][T15747] unevictable:0 dirty:109 writeback:0 [ 478.076062][T15747] slab_reclaimable:12174 slab_unreclaimable:111846 [ 478.076062][T15747] mapped:31463 shmem:2513 pagetables:1302 [ 478.076062][T15747] sec_pagetables:0 bounce:0 [ 478.076062][T15747] kernel_misc_reclaimable:0 [ 478.076062][T15747] free:1252217 free_pcp:26103 free_cma:0 [ 478.076119][T15747] Node 0 active_anon:32384kB inactive_anon:0kB active_file:4kB inactive_file:173160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125852kB dirty:436kB writeback:0kB shmem:10052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16184kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 478.076164][T15747] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 478.076204][T15747] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.076253][T15747] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 478.076285][T15747] Node 0 DMA32 free:1049816kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32384kB inactive_anon:0kB active_file:4kB inactive_file:173160kB unevictable:0kB writepending:436kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:104412kB local_pcp:84904kB free_cma:0kB [ 478.076337][T15747] lowmem_reserve[]: 0 0 0 0 0 [ 478.076369][T15747] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.076417][T15747] lowmem_reserve[]: 0 0 0 0 0 [ 478.076448][T15747] Node 1 Normal free:3943692kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.076500][T15747] lowmem_reserve[]: 0 0 0 0 0 [ 478.076532][T15747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 478.076646][T15747] Node 0 DMA32: 240*4kB (UE) 772*8kB (UE) 518*16kB (UME) 713*32kB (UM) 107*64kB (UM) 33*128kB (M) 14*256kB (UM) 7*512kB (UME) 4*1024kB (M) 5*2048kB (ME) 239*4096kB (UM) = 1049760kB [ 478.111666][T15747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 478.111761][T15747] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 9*16kB (UM) 5*32kB (UM) 5*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943692kB [ 478.111913][T15747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.111928][T15747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.111942][T15747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 478.111957][T15747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 478.111971][T15747] 45876 total pagecache pages [ 478.111984][T15747] 0 pages in swap cache [ 478.111990][T15747] Free swap = 124996kB [ 478.111997][T15747] Total swap = 124996kB [ 478.112005][T15747] 2097051 pages RAM [ 478.112011][T15747] 0 pages HighMem/MovableOnly [ 478.112017][T15747] 433831 pages reserved [ 478.112023][T15747] 0 pages cma reserved [ 479.326585][T15764] __nla_validate_parse: 3 callbacks suppressed [ 479.326607][T15764] netlink: 400 bytes leftover after parsing attributes in process `syz.3.2261'. [ 479.346314][T15762] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2260'. [ 479.459806][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2261'. [ 479.844820][T15784] syzkaller0: left promiscuous mode [ 479.844843][T15784] syzkaller0: left allmulticast mode [ 480.031991][T15793] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2273'. [ 480.184163][T15798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2271'. [ 480.422399][ T30] audit: type=1804 audit(1792912503.907:7): pid=15806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2276" name="/newroot/471/cgroup.controllers" dev="tmpfs" ino=2437 res=1 errno=0 [ 480.425954][ T30] audit: type=1800 audit(1792912503.907:8): pid=15806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2276" name="cgroup.controllers" dev="tmpfs" ino=2437 res=0 errno=-22 [ 481.151292][T15839] nbd: must specify a size in bytes for the device [ 481.296829][T15831] ipvlan2: entered allmulticast mode [ 482.074654][T15884] netlink: 'syz.0.2295': attribute type 28 has an invalid length. [ 482.074675][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 482.093288][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 482.244769][T15880] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 482.265677][T15892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2297'. [ 482.303080][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2298'. [ 482.320128][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2297'. [ 482.949663][T15925] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 483.586394][T15947] 8021q: VLANs not supported on ip6_vti0 [ 483.739095][T15958] ip6tnl1: entered allmulticast mode [ 483.944480][T15955] xt_CT: No such helper "snmp" [ 484.097826][ T5949] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.098059][ T5949] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.127590][ T5754] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.251931][T15986] syzkaller0: entered promiscuous mode [ 484.251952][T15986] syzkaller0: entered allmulticast mode [ 484.285367][T15996] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 484.418384][T15999] __nla_validate_parse: 6 callbacks suppressed [ 484.418404][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 484.478005][T15999] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 484.478263][T15999] xt_SECMARK: invalid mode: 9 [ 484.661017][ T5754] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.902057][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.999057][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 485.495358][T16030] bond8: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 485.512181][T16030] bond8: (slave ip6tnl3): Error -95 calling set_mac_address [ 485.828002][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 485.828025][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 485.828050][T16044] netlink: 'syz.0.2319': attribute type 6 has an invalid length. [ 485.931989][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 485.932015][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 485.932040][T16044] netlink: 'syz.0.2319': attribute type 6 has an invalid length. [ 486.202889][T16054] tipc: Resetting bearer [ 486.220207][T16068] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2324'. [ 486.280664][T16072] ip_tables: iptables: counters copy to user failed while replacing table [ 486.363477][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 486.363534][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 486.363599][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 486.597075][T16075] pim6reg: entered allmulticast mode [ 486.599834][T16085] netlink: 'syz.0.2328': attribute type 10 has an invalid length. [ 487.776874][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 488.098452][T16148] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 488.507869][ C0] TC_ACT_REPEAT abuse ? [ 489.540360][ C1] TC_ACT_REPEAT abuse ? [ 489.726053][T16200] x9: renamed from bridge_slave_0 (while UP) [ 489.930835][T16217] netlink: 'syz.2.2366': attribute type 2 has an invalid length. [ 489.931040][T16216] netlink: 'syz.2.2366': attribute type 2 has an invalid length. [ 490.105925][T16215] __nla_validate_parse: 22 callbacks suppressed [ 490.105944][T16215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2368'. [ 490.418977][T16232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2372'. [ 490.507771][ C1] TC_ACT_REPEAT abuse ? [ 490.893256][T16267] netlink: 'syz.4.2379': attribute type 10 has an invalid length. [ 491.008064][T16267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.038088][T16267] team0: Port device netdevsim1 added [ 491.051635][T16269] Cannot find del_set index 4 as target [ 491.444169][T16286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2380'. [ 491.537628][ C1] TC_ACT_REPEAT abuse ? [ 491.584387][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 491.704282][ C0] TC_ACT_REPEAT abuse ? [ 491.794533][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2385'. [ 492.255964][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2388'. [ 492.743050][ C1] TC_ACT_REPEAT abuse ? [ 492.858546][T16338] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2395'. [ 493.631750][T16365] ipt_rpfilter: unknown options [ 493.633496][T16363] ipt_rpfilter: unknown options [ 493.672323][T16341] [ 493.674700][T16341] ====================================================== [ 493.681733][T16341] WARNING: possible circular locking dependency detected [ 493.682658][T16363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2401'. [ 493.686513][T16365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2401'. [ 493.706610][T16341] syzkaller #0 Not tainted [ 493.711018][T16341] ------------------------------------------------------ [ 493.718028][T16341] syz.4.2394/16341 is trying to acquire lock: [ 493.724084][T16341] ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 493.734014][T16341] [ 493.734014][T16341] but task is already holding lock: [ 493.741375][T16341] ffffffff9080a100 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 493.750279][T16341] [ 493.750279][T16341] which lock already depends on the new lock. [ 493.750279][T16341] [ 493.760684][T16341] [ 493.760684][T16341] the existing dependency chain (in reverse order) is: [ 493.769696][T16341] [ 493.769696][T16341] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 493.776912][T16341] __mutex_lock+0x197/0x15a0 [ 493.782119][T16341] get_device_parent+0x16f/0x3a0 [ 493.787582][T16341] device_add+0x2d4/0xb80 [ 493.792431][T16341] device_create+0x269/0x300 [ 493.797544][T16341] msr_device_create+0x33/0x50 [ 493.802850][T16341] cpuhp_invoke_callback+0x434/0x810 [ 493.808671][T16341] cpuhp_thread_fun+0x362/0x780 [ 493.814052][T16341] smpboot_thread_fn+0x5f8/0xb30 [ 493.819514][T16341] kthread+0x38b/0x480 [ 493.824097][T16341] ret_from_fork+0x514/0xb70 [ 493.829201][T16341] ret_from_fork_asm+0x1a/0x30 [ 493.834476][T16341] [ 493.834476][T16341] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 493.842030][T16341] cpuhp_thread_fun+0x127/0x780 [ 493.847399][T16341] smpboot_thread_fn+0x5f8/0xb30 [ 493.852856][T16341] kthread+0x38b/0x480 [ 493.857438][T16341] ret_from_fork+0x514/0xb70 [ 493.862549][T16341] ret_from_fork_asm+0x1a/0x30 [ 493.867827][T16341] [ 493.867827][T16341] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 493.875554][T16341] cpus_read_lock+0x3d/0x160 [ 493.880665][T16341] static_key_slow_inc+0x12/0x30 [ 493.886126][T16341] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 493.892361][T16341] nbd_genl_foreach_sock+0x265/0x450 [ 493.898251][T16341] nbd_genl_reconfigure+0xbbb/0x1040 [ 493.904125][T16341] genl_family_rcv_msg_doit+0x233/0x340 [ 493.910287][T16341] genl_rcv_msg+0x614/0x7a0 [ 493.915311][T16341] netlink_rcv_skb+0x226/0x4a0 [ 493.920588][T16341] genl_rcv+0x28/0x40 [ 493.925087][T16341] netlink_unicast+0x8ef/0xa80 [ 493.930367][T16341] netlink_sendmsg+0x7f0/0xb20 [ 493.935647][T16341] sock_sendmsg_nosec+0x14e/0x190 [ 493.941437][T16341] ____sys_sendmsg+0x54e/0x850 [ 493.946776][T16341] ___sys_sendmsg+0x2a5/0x360 [ 493.951986][T16341] __x64_sys_sendmsg+0x1b1/0x290 [ 493.957435][T16341] do_syscall_64+0x166/0x520 [ 493.962538][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.968949][T16341] [ 493.968949][T16341] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 493.976587][T16341] __mutex_lock+0x197/0x15a0 [ 493.981696][T16341] nbd_queue_rq+0x373/0xff0 [ 493.986722][T16341] blk_mq_dispatch_rq_list+0x499/0x1990 [ 493.992905][T16341] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 493.999803][T16341] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 494.006303][T16341] blk_mq_run_work_fn+0x167/0x2f0 [ 494.011851][T16341] process_scheduled_works+0xc3d/0x1630 [ 494.017917][T16341] worker_thread+0xa47/0xfb0 [ 494.023026][T16341] kthread+0x38b/0x480 [ 494.027609][T16341] ret_from_fork+0x514/0xb70 [ 494.032714][T16341] ret_from_fork_asm+0x1a/0x30 [ 494.037988][T16341] [ 494.037988][T16341] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 494.045187][T16341] __mutex_lock+0x197/0x15a0 [ 494.050293][T16341] nbd_queue_rq+0xc1/0xff0 [ 494.055231][T16341] blk_mq_dispatch_rq_list+0x499/0x1990 [ 494.061298][T16341] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 494.068149][T16341] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 494.074653][T16341] blk_mq_run_work_fn+0x167/0x2f0 [ 494.080210][T16341] process_scheduled_works+0xc3d/0x1630 [ 494.086297][T16341] worker_thread+0xa47/0xfb0 [ 494.091510][T16341] kthread+0x38b/0x480 [ 494.096126][T16341] ret_from_fork+0x514/0xb70 [ 494.101269][T16341] ret_from_fork_asm+0x1a/0x30 [ 494.106591][T16341] [ 494.106591][T16341] -> #5 (set->srcu){.+.+}-{0:0}: [ 494.113715][T16341] __synchronize_srcu+0xca/0x2f0 [ 494.119170][T16341] elevator_switch+0x1e8/0x7b0 [ 494.124539][T16341] elevator_change+0x2fa/0x480 [ 494.129822][T16341] elevator_set_default+0x375/0x440 [ 494.135539][T16341] blk_register_queue+0x404/0x4f0 [ 494.141155][T16341] __add_disk+0x6b8/0xdb0 [ 494.146367][T16341] add_disk_fwnode+0x100/0x3a0 [ 494.151674][T16341] nbd_dev_add+0x733/0xb60 [ 494.156621][T16341] nbd_init+0x168/0x1f0 [ 494.161294][T16341] do_one_initcall+0x250/0x870 [ 494.166582][T16341] do_initcall_level+0x10a/0x1a0 [ 494.172041][T16341] do_initcalls+0x59/0xa0 [ 494.176893][T16341] kernel_init_freeable+0x29d/0x3e0 [ 494.182610][T16341] kernel_init+0x22/0x1d0 [ 494.187456][T16341] ret_from_fork+0x514/0xb70 [ 494.192561][T16341] ret_from_fork_asm+0x1a/0x30 [ 494.197841][T16341] [ 494.197841][T16341] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 494.205663][T16341] __mutex_lock+0x197/0x15a0 [ 494.210776][T16341] elevator_change+0x1af/0x480 [ 494.216063][T16341] elevator_set_none+0xb5/0x140 [ 494.221435][T16341] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 494.227767][T16341] nbd_start_device+0x189/0xb30 [ 494.233140][T16341] nbd_genl_connect+0x167d/0x1cd0 [ 494.238685][T16341] genl_family_rcv_msg_doit+0x233/0x340 [ 494.244750][T16341] genl_rcv_msg+0x614/0x7a0 [ 494.249776][T16341] netlink_rcv_skb+0x226/0x4a0 [ 494.255058][T16341] genl_rcv+0x28/0x40 [ 494.259558][T16341] netlink_unicast+0x8ef/0xa80 [ 494.264836][T16341] netlink_sendmsg+0x7f0/0xb20 [ 494.270123][T16341] sock_sendmsg_nosec+0x14e/0x190 [ 494.275663][T16341] ____sys_sendmsg+0x54e/0x850 [ 494.280946][T16341] ___sys_sendmsg+0x2a5/0x360 [ 494.286143][T16341] __x64_sys_sendmsg+0x1b1/0x290 [ 494.291593][T16341] do_syscall_64+0x166/0x520 [ 494.296698][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.303116][T16341] [ 494.303116][T16341] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 494.311723][T16341] blk_alloc_queue+0x544/0x690 [ 494.317010][T16341] __blk_mq_alloc_disk+0x194/0x390 [ 494.322642][T16341] nbd_dev_add+0x494/0xb60 [ 494.327577][T16341] nbd_init+0x168/0x1f0 [ 494.332253][T16341] do_one_initcall+0x250/0x870 [ 494.337538][T16341] do_initcall_level+0x10a/0x1a0 [ 494.342995][T16341] do_initcalls+0x59/0xa0 [ 494.347841][T16341] kernel_init_freeable+0x29d/0x3e0 [ 494.353564][T16341] kernel_init+0x22/0x1d0 [ 494.358453][T16341] ret_from_fork+0x514/0xb70 [ 494.363554][T16341] ret_from_fork_asm+0x1a/0x30 [ 494.368833][T16341] [ 494.368833][T16341] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 494.376044][T16341] fs_reclaim_acquire+0x71/0x100 [ 494.381524][T16341] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 494.387758][T16341] alloc_inode+0xb8/0x1b0 [ 494.392623][T16341] iget_locked+0x12c/0x690 [ 494.397553][T16341] kernfs_get_inode+0x4f/0x770 [ 494.402861][T16341] kernfs_get_tree+0x5cd/0x980 [ 494.408580][T16341] vfs_get_tree+0x92/0x2a0 [ 494.413521][T16341] do_new_mount+0x325/0xb00 [ 494.418541][T16341] __se_sys_mount+0x31d/0x420 [ 494.423733][T16341] do_syscall_64+0x166/0x520 [ 494.428841][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.435254][T16341] [ 494.435254][T16341] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 494.443244][T16341] down_write+0x91/0x200 [ 494.448013][T16341] kernfs_remove_by_name_ns+0x4e/0x140 [ 494.453990][T16341] device_links_driver_bound+0x4ab/0x1440 [ 494.460230][T16341] driver_bound+0xd8/0x2e0 [ 494.465253][T16341] really_probe+0x774/0xae0 [ 494.470366][T16341] __driver_probe_device+0x1e8/0x360 [ 494.476166][T16341] driver_probe_device+0x4f/0x240 [ 494.481705][T16341] __device_attach_driver+0x270/0x410 [ 494.487590][T16341] bus_for_each_drv+0x258/0x2f0 [ 494.492958][T16341] __device_attach+0x2c4/0x450 [ 494.498236][T16341] device_initial_probe+0xa1/0xd0 [ 494.503809][T16341] bus_probe_device+0x12a/0x220 [ 494.509185][T16341] device_add+0x7d7/0xb80 [ 494.514033][T16341] faux_device_create_with_groups+0x1a5/0x2b0 [ 494.520697][T16341] regulator_dummy_init+0x19/0x40 [ 494.526239][T16341] regulator_init+0xca/0x110 [ 494.531338][T16341] do_one_initcall+0x250/0x870 [ 494.536626][T16341] do_initcall_level+0x10a/0x1a0 [ 494.542169][T16341] do_initcalls+0x59/0xa0 [ 494.547016][T16341] kernel_init_freeable+0x29d/0x3e0 [ 494.552727][T16341] kernel_init+0x22/0x1d0 [ 494.557574][T16341] ret_from_fork+0x514/0xb70 [ 494.562683][T16341] ret_from_fork_asm+0x1a/0x30 [ 494.567960][T16341] [ 494.567960][T16341] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 494.576557][T16341] __lock_acquire+0x164c/0x2de0 [ 494.581927][T16341] lock_acquire+0x115/0x350 [ 494.587120][T16341] down_read+0x45/0x320 [ 494.591792][T16341] kernfs_remove+0x35/0x80 [ 494.596734][T16341] __kobject_del+0xe0/0x310 [ 494.601851][T16341] kobject_del+0x45/0x60 [ 494.606609][T16341] cleanup_glue_dir+0x1a3/0x220 [ 494.612015][T16341] device_del+0x77d/0x8f0 [ 494.616867][T16341] device_destroy+0xb2/0x1a0 [ 494.621976][T16341] macvtap_device_event+0x226/0x400 [ 494.627768][T16341] notifier_call_chain+0x1a5/0x3d0 [ 494.633402][T16341] unregister_netdevice_many_notify+0x1432/0x1d80 [ 494.640426][T16341] macvlan_device_event+0x93a/0x9e0 [ 494.646156][T16341] notifier_call_chain+0x1a5/0x3d0 [ 494.651781][T16341] unregister_netdevice_many_notify+0x1432/0x1d80 [ 494.658722][T16341] rtnl_dellink+0x5bc/0x810 [ 494.663835][T16341] rtnetlink_rcv_msg+0x802/0xc00 [ 494.669295][T16341] netlink_rcv_skb+0x226/0x4a0 [ 494.674578][T16341] netlink_unicast+0x8ef/0xa80 [ 494.679854][T16341] netlink_sendmsg+0x7f0/0xb20 [ 494.685138][T16341] sock_sendmsg_nosec+0x14e/0x190 [ 494.690679][T16341] ____sys_sendmsg+0x54e/0x850 [ 494.695967][T16341] ___sys_sendmsg+0x2a5/0x360 [ 494.701169][T16341] __x64_sys_sendmsg+0x1b1/0x290 [ 494.706621][T16341] do_syscall_64+0x166/0x520 [ 494.711726][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.718133][T16341] [ 494.718133][T16341] other info that might help us debug this: [ 494.718133][T16341] [ 494.728352][T16341] Chain exists of: [ 494.728352][T16341] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 494.728352][T16341] [ 494.741736][T16341] Possible unsafe locking scenario: [ 494.741736][T16341] [ 494.749211][T16341] CPU0 CPU1 [ 494.754567][T16341] ---- ---- [ 494.759924][T16341] lock(gdp_mutex); [ 494.763818][T16341] lock(cpuhp_state-up); [ 494.770719][T16341] lock(gdp_mutex); [ 494.777138][T16341] rlock(&root->kernfs_supers_rwsem); [ 494.782600][T16341] [ 494.782600][T16341] *** DEADLOCK *** [ 494.782600][T16341] [ 494.790735][T16341] locks held by syz.4.2394/16341: 2, last CPU#1: [ 494.797055][T16341] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 494.806059][T16341] #1: ffffffff9080a100 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 494.815239][T16341] [ 494.815239][T16341] stack backtrace: [ 494.821137][T16341] CPU: 1 UID: 0 PID: 16341 Comm: syz.4.2394 Not tainted syzkaller #0 PREEMPT(full) [ 494.830507][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.840587][T16341] Call Trace: [ 494.843863][T16341] [ 494.846789][T16341] dump_stack_lvl+0xe8/0x150 [ 494.851386][T16341] print_circular_bug+0x2e2/0x300 [ 494.856435][T16341] check_noncircular+0x12f/0x150 [ 494.861378][T16341] __lock_acquire+0x164c/0x2de0 [ 494.866239][T16341] lock_acquire+0x115/0x350 [ 494.870743][T16341] ? kernfs_remove+0x35/0x80 [ 494.875348][T16341] down_read+0x45/0x320 [ 494.879497][T16341] ? kernfs_remove+0x35/0x80 [ 494.884091][T16341] kernfs_remove+0x35/0x80 [ 494.888510][T16341] __kobject_del+0xe0/0x310 [ 494.893049][T16341] kobject_del+0x45/0x60 [ 494.897296][T16341] cleanup_glue_dir+0x1a3/0x220 [ 494.902156][T16341] device_del+0x77d/0x8f0 [ 494.906492][T16341] ? __pfx_device_del+0x10/0x10 [ 494.911460][T16341] ? kobject_put+0x50f/0x550 [ 494.916054][T16341] device_destroy+0xb2/0x1a0 [ 494.920649][T16341] ? __pfx_device_destroy+0x10/0x10 [ 494.925874][T16341] ? kernfs_remove_by_name_ns+0x101/0x140 [ 494.931592][T16341] macvtap_device_event+0x226/0x400 [ 494.936799][T16341] ? __pfx_ipvlan_device_event+0x10/0x10 [ 494.942523][T16341] ? __pfx_macvtap_device_event+0x10/0x10 [ 494.948248][T16341] ? lockdep_rtnl_is_held+0x26/0x40 [ 494.953448][T16341] notifier_call_chain+0x1a5/0x3d0 [ 494.958571][T16341] unregister_netdevice_many_notify+0x1432/0x1d80 [ 494.964996][T16341] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 494.971768][T16341] ? netdev_upper_dev_unlink+0x99/0xe0 [ 494.977314][T16341] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 494.983303][T16341] ? macvlan_dellink+0x3e4/0x470 [ 494.988245][T16341] macvlan_device_event+0x93a/0x9e0 [ 494.993448][T16341] ? __pfx_ipvlan_device_event+0x10/0x10 [ 494.999078][T16341] ? __pfx_macvlan_device_event+0x10/0x10 [ 495.004807][T16341] ? lockdep_rtnl_is_held+0x26/0x40 [ 495.010006][T16341] notifier_call_chain+0x1a5/0x3d0 [ 495.015119][T16341] unregister_netdevice_many_notify+0x1432/0x1d80 [ 495.021626][T16341] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 495.028389][T16341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.034457][T16341] ? __kasan_slab_free+0x5c/0x80 [ 495.039401][T16341] ? __pfx_veth_dellink+0x10/0x10 [ 495.044503][T16341] ? __pfx_veth_dellink+0x10/0x10 [ 495.049530][T16341] rtnl_dellink+0x5bc/0x810 [ 495.054043][T16341] ? __pfx_rtnl_dellink+0x10/0x10 [ 495.059098][T16341] ? lock_acquire+0x115/0x350 [ 495.063773][T16341] ? __pfx_rtnl_dellink+0x10/0x10 [ 495.068806][T16341] ? __pfx_rtnl_dellink+0x10/0x10 [ 495.073832][T16341] rtnetlink_rcv_msg+0x802/0xc00 [ 495.078775][T16341] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 495.083891][T16341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.089363][T16341] ? __copy_skb_header+0xa3/0x4a0 [ 495.094500][T16341] netlink_rcv_skb+0x226/0x4a0 [ 495.099267][T16341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.104743][T16341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.110049][T16341] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.115252][T16341] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.120457][T16341] netlink_unicast+0x8ef/0xa80 [ 495.125255][T16341] netlink_sendmsg+0x7f0/0xb20 [ 495.130026][T16341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.135314][T16341] ? aa_sock_msg_perm+0x144/0x210 [ 495.140424][T16341] ? apparmor_socket_sendmsg+0x18b/0x360 [ 495.146059][T16341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.151349][T16341] sock_sendmsg_nosec+0x14e/0x190 [ 495.156377][T16341] ____sys_sendmsg+0x54e/0x850 [ 495.161149][T16341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.166447][T16341] ? import_iovec+0x73/0xa0 [ 495.171125][T16341] ___sys_sendmsg+0x2a5/0x360 [ 495.175808][T16341] ? __lock_acquire+0x747/0x2de0 [ 495.180744][T16341] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.185945][T16341] ? futex_wake+0x51b/0x5f0 [ 495.190453][T16341] ? __fget_files+0x3a2/0x420 [ 495.195130][T16341] ? __fget_files+0x2a/0x420 [ 495.199720][T16341] __x64_sys_sendmsg+0x1b1/0x290 [ 495.204655][T16341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.210132][T16341] do_syscall_64+0x166/0x520 [ 495.214717][T16341] ? trace_irq_disable+0x3b/0x140 [ 495.219752][T16341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.225824][T16341] ? clear_bhb_loop+0x70/0xc0 [ 495.230501][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.236394][T16341] RIP: 0033:0x7fcebd19f559 [ 495.240807][T16341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.260410][T16341] RSP: 002b:00007fcebe078028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.268827][T16341] RAX: ffffffffffffffda RBX: 00007fcebd425fa0 RCX: 00007fcebd19f559 [ 495.276796][T16341] RDX: 0000000024048004 RSI: 0000200000000ac0 RDI: 000000000000000a [ 495.284775][T16341] RBP: 00007fcebd236b20 R08: 0000000000000000 R09: 0000000000000000 [ 495.292764][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.300760][T16341] R13: 00007fcebd426038 R14: 00007fcebd425fa0 R15: 00007ffeee894038 [ 495.308740][T16341] [ 495.313694][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 495.315162][ C1] TC_ACT_REPEAT abuse ? [ 496.338610][ C1] TC_ACT_REPEAT abuse ? [ 496.342489][ C1] TC_ACT_REPEAT abuse ? [ 497.380406][ C1] TC_ACT_REPEAT abuse ? [ 498.420074][ C1] TC_ACT_REPEAT abuse ? [ 499.462892][ C1] TC_ACT_REPEAT abuse ? [ 500.498039][ C1] TC_ACT_REPEAT abuse ? [ 501.537890][ C1] TC_ACT_REPEAT abuse ? [ 501.541143][ C1] TC_ACT_REPEAT abuse ? [ 502.584538][ C1] TC_ACT_REPEAT abuse ? [ 503.622341][ C1] TC_ACT_REPEAT abuse ?