last executing test programs: 10.249951866s ago: executing program 1 (id=3559): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x3) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a000000040085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000b40)={r5, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x38, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x80000001, @mcast1, 0x7}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}]}, &(0x7f0000000340)=0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x5a, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 9.274130302s ago: executing program 1 (id=3562): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0x9}, {}, {0xc, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000084}, 0x20000000) recvfrom$l2tp(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x2001, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) 9.115218157s ago: executing program 1 (id=3565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000800000100000030000180060005004e230000060001000a0000001400040020010000000059d1483af475846f16000000000000000000020800060001000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000800000100000030000180060005004e230000060001000a0000001400040020010000000059d1483af475846f16000000000000000000020800060001000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) (async) 8.773337567s ago: executing program 1 (id=3569): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x1000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) r1 = accept4(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x1800) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x10000, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2, 0x7, 0x6, 0xfffff801, 0x20, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x1, 0xb64f}}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x9, r1}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4085}, 0x24004011) sendmsg$802154_dgram(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)="fac09dec6ceac89a3e9b4c86cc002894d8ac31331bb91f", 0x17}, 0x1, 0x0, 0x0, 0x84}, 0x18004) r4 = accept4$phonet_pipe(r1, &(0x7f0000000580), &(0x7f00000005c0)=0x10, 0x800) bind$phonet(r4, &(0x7f0000000600)={0x23, 0xa, 0x9, 0x3}, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000800), &(0x7f0000000840)=0x30) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x6485a356e2f4906f, 0x1000, 0xc2, &(0x7f0000000880)="71623a8ab22c5db33b04829d86b518f8db7cedbb4e33d7f630f15f9f2b8a0097c3b1d569fd8e03af73d27f534b49a5fbaddc446463e019dbf22c9ec40a91ec2835f440f32ec9f6e8c2f3bf6020e7296422129869545c555c439b765ed299c3e128f2a8236ce752fe26b89b4c0a58a06bf2ae460b739cdccb646d565b540dca10be7f2832fb3878a02ae3e033fbe331e73d7a5abcb6d88ee2e7671784c534437bc805b8f39a31481fe1b1405cd64683207764f7704e25b99179c95e02f8fa873724e5", 0xf0, 0x0, &(0x7f0000000980)="68310ec8627f611ede5d15772038d4d277a24b6efbdcd500924bd1b761ece676271f9bd4057b98316aa69728d0f27ee814c4849d5c722ebe00fb4ca72aba71fa45e8c63a39381432a8eeaad2a868fdc64f6d4b7eded75c4499cc5f59032eb3c05cb0c4721fad528163f05424bedb9a99640ce9940e7af68071052a7a014c1ac8e41b66103acb7e97b139b58a1a121e1eccbd8743b5228903d1e8e0c5647748f0d07f9c733e5c134a3f848c7c678df4aa38e87a92ff65cd802611bf3ac7ca3fbd97308b1c5e65bb24c6abfb093e24454e931ead83740416c55092a324be383d6573928389124d5c99a9b5fc188b83188e"}) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000b00)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd0, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4044}, 0x40010) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x4, [@fwd={0xe}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x4c, 0x4}, @datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x2, 0x7}], "cf7a"}, @ptr={0xc, 0x0, 0x0, 0x2, 0x1}, @struct={0x9, 0x6, 0x0, 0x4, 0x1, 0x390, [{0x2, 0x1, 0xfffffffd}, {0xd, 0x0, 0x6}, {0x0, 0x1}, {0x7, 0x2, 0x101}, {0x2, 0x3}, {0xb, 0x5, 0xe1}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000001000)=""/34, 0xb4, 0x22, 0x1, 0x2, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xc, 0x13, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x2, 0x6, 0x0, 0x0, 0x6, 0x4}, @call={0x85, 0x0, 0x0, 0x3d}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='syzkaller\x00', 0x7fffffff, 0xec, &(0x7f0000000e40)=""/236, 0x40f00, 0x50, '\x00', r2, @fallback=0xf, r7, 0x8, &(0x7f0000001080)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000010c0)={0x5, 0x7, 0x3, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f00000011c0)=@ethernet={0x6}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001240)="02690cb23b17b3be56ca4c02b43062d2db3d715b6574cc8177353755181644349a88e999653959b9c39a1482ae8b9a9de184fe280416c6345a6a0b3f905a005d5986ee6d795d3d00d8a32b69ac0905e8d866671282b2a98a026f5dfcc9f61f32e7c2e2ba9e1a4d722b15f549a446eb5cf9c06ad4172135e60142834a2af6f99c7531b5045273795f4e640e0cb3a9c74d77576fbf55b3f07d27be3ee0fbdd418bead20c4f544eb1704438e96d56dd88", 0xaf}, {&(0x7f0000001300)="24703b3382781e3fd9f50f78c1ea96d2812d31191d237ce6afd2a5cf006b210daa546dde17e93835ac01bbc38b6e58b4da1545da8760000bdb6a939d9dbca781ae176ee371b8941a16ad6b5e981f3d51ed41a631c642457ff8c99e8dae6fb8d58b2802d7d79b574bdc8840388ee60b955ff822df6fcfe9c8540422d7ac0701727ecf69df5387bfdbf82edaf1a015", 0x8e}, {&(0x7f00000013c0)="78120c5c42eab492f39a2d09ba52e59f4684b888da2d04e53813c4c1d30b23dcf9eeb9f88bb2120b92a1bbbb831d9172665e9bb65becf3f3abc442b74f65c439a3ab8bccb0f161c72df760438b458aa7ae6e65de73ae9915bfaa345b7fcda9aa1aacfef557c32c1ae4a158e0a37ba59848c789185b4296c7d04306a57903ea4b26ae2f644cdb58c14044f08f151854b9ebe37f5e0075e52a723b4d2923773274aaeb847f48a9d3c7394563c287df8bb606d12e3564da47469d0d16295037ca018dad7291b9d732c57a2169fbcfc8144d5baf0e2d489c42c489e466c40ba8e95038ad4289", 0xe4}, {&(0x7f00000014c0)="c02acffa1c7e413b40f42c011e10969b94f4ca7b5c95730d653e79950d8d7b40ba1df7bf08921863a31a393b64714a23bca33742dd0c245e98db5d3776dfa479079a6875979c117c7f416dba3b6fc0ea6824a8e6f0550b072bd7a0b8557af50176a1375ee099d464ec3eba71c0271afca05787f8bd9d1234f7210bac65b716da03c1c9af1d33e634bc2ccd5689f8c72029e3dac08bc7655d60376314fb447137e06b162f629e396dbe6247e416668f5fa3", 0xb1}, {&(0x7f0000001580)="8c0447cd580c5e5cdeac6484f1dd1b039ba17ae6f2ca5edc01a706e8b3c21787efad59ebdb0a55829e799dc3b59c7a953218df5c3a3dc130ebaff9b027", 0x3d}, {&(0x7f00000015c0)="5491a24a417e74cd32aa2f4c146a59e4d1e618533ebd16c52bc20af0b37bed5a6875321b5185cfb3611f1b71062891683803162224d421ea4ea1a892ed257c8fde45e305a5494c007da9f142ed5a30e6b296e2b0879ab235d3ce2a800247d2f75ba2327075a120dd89243715ee8bfb54eef1c789d694b7f33f1455ee2f5093d7749136b8ddff4a16b4abdbadef3b8591b21083b17a7cda938692bbfc1316868b822856c22eaae6c5e13c0bd3b3cb9f9643a959d8c4bed31a6fe83864e2a5aece7fc86273116aee139408c7578c9b4c7bc9d18fef7cc7713cd08d4679439b12768268", 0xe2}, {&(0x7f00000016c0)}], 0x7}}], 0x1, 0x8040) r8 = accept$inet6(r1, &(0x7f00000017c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001800)=0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000001840)={0x43}, 0x4) socket$kcm(0x29, 0x7, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000001880), &(0x7f00000018c0)=0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001900)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001940)={r9, 0x9, 0x16fe14d2ae1dfe0d}, 0xc) connect$pppl2tp(r1, &(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0x4, 0x3, 0x3, 0x2}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x5f87e88752b0b0fa) 8.678912357s ago: executing program 1 (id=3570): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x107e, [{}, {0x0, 0x100000000000000}]}, 0x68) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendto$inet(r0, &(0x7f0000000240)="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", 0x10c, 0x20000084, &(0x7f0000000100)={0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8.537827465s ago: executing program 1 (id=3572): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x8, 0x6, 0x4) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x1, 0x0, 0xffffffffffffff5a}, 0x40) unshare(0x20000400) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000bc0)={0xae3}, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0xafe6) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @remote, @local}, 0x7) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1}, 0xaad}], 0x1, 0x40000101, 0x0) 2.0429572s ago: executing program 0 (id=3630): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket(0x15, 0x5, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000001d40), &(0x7f0000001d80)=0x4) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendto$inet6(r1, &(0x7f0000000380)="c80b2485d614a60dbf8e7e86057a51878b8a99ed1b4575e55473b30ab952d4da758645ef6de687f4b6527bba86f35a3048205eced0672020f536f2977f8eb7259ed8fc403fbdae8a3ee3d8396f23912d526ec314612d4eaf8b0cc300c8aeb508f06726ca3717f750646afc583888aeccfd25da1085437965ac85dadd3a1871081ced4f9341968eed9f55ba48fc46dac8b3d2acbffd7c6574492fea71fe69a0e5c0803ba7a4b1f57c", 0xa8, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x60cf069a, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001c00)={0x0, 0x4}, &(0x7f0000001c40)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001c80)={r2, 0x1, 0x8f, "a9afd9f17eace016e542cb9f295fb5115cb078e501d49f1baf30fc42242d5e88193998346cdd5c44657f78032a376fc62b868a02b6b3c8eff5c8bcedc8331e3832b6f81b7562fbf986a2da414195ad26c35c7f9e620cc306e26941a28d6a822447178a6c15a1d0fc6a0d10a83ab196f5f66a8b94ea0ae4abf85de1a0bccab2ba80a08db22318a5721b3b014f0384f1"}, 0x97) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000001600)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001dc0)=""/122, 0x7a}], 0x1, &(0x7f0000000280)=""/24, 0x18}, 0x2}, {{&(0x7f00000003c0)=@caif=@rfm, 0x80, &(0x7f0000001940)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/160, 0xa0}, {&(0x7f0000001680)=""/215, 0xd7}, {&(0x7f0000001780)=""/161, 0xa1}, {&(0x7f0000001840)=""/217, 0xd9}], 0x5, &(0x7f0000001580)=""/81, 0x51}, 0x78}], 0x2, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/70, 0x46}, {0x0}], 0x2}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="b50d00000000000002004e21e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000007"], 0x410) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001a40)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x3}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1b2fb52d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x2, 0xffff8001, &(0x7f0000000000)="8197eb7fb96457a83aa84b2d93399d8dfa177388044ed2e2533026ae3d7400913082bba1589e446c5d10e81deb21d2d7ed302c131ee36de4832fe0bc72", 0x3d) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a80)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001ac0)={0x0, 0x6}, &(0x7f0000001b00)=0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/129, 0x81}, 0x5c}], 0x1, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000500)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001b40)={r5, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0xc894, 0x9}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.861459111s ago: executing program 4 (id=3633): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}, 0x80001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0xa, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 1.321331145s ago: executing program 2 (id=3638): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r5, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r5, 0x400}, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) 1.24896933s ago: executing program 2 (id=3639): r0 = socket$inet6(0xa, 0x4, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x7, 0x2, 0x1}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0xd, 0x0, 0x3, 0xb, 0x18000000, 0x200, 0x5, 0x9, 0x38, 0x40}, {0x30}}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) 1.024891242s ago: executing program 2 (id=3640): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x140e, 0x110, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x240, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x6c, r8, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xe4ffffff}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xffe4}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x6c}}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000580)={'ipvlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0x6, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008814}, 0x4010) 972.85804ms ago: executing program 0 (id=3641): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x11, r1, 0x2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="86411383e42375d45ecde17a1880d3d372bb9ed118fb708165030f759c07781ca52ded18fe55018eeb6e77b0abd04640c93711510c2533abb6fbf86454428cff4437486f995a90e9b21e7101a6be9d6c4e50913c0cf2625f6f92b0bf414442e70d137604b8eff2b05c158fd9d33cb562caf6871c1dcfb5de3296526eb56f8b2cb647d94a26b9e4a3bef24eb12c1055ce0821f8a0cda00d7c12ff988af051184c7c136ae7c5bf6ef90655fec1624aa32ca4f7cdb14f0798e355e14cc5a0cfda5c2a15d914cb18a3ef5be57c4d918332ba41bf67971524b4161643c97913df3df684812c0b9fdff76819d8e90d85bb10", 0xef}, {&(0x7f0000000180)="e789a97405303d040f4e136efbba0a3996e5168a5cb7eeeb9893b41e6ebe7b7f462173debb30a98b81ca84feb3faeb82993fc4454e01580268220543b1f580771e84c82e84", 0x45}], 0x2, 0x0, 0x0, 0x11}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x84) (async) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x81) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x28}}, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000500)={0x8}, 0x1) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x2004c080) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x801) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000800)={0x0, 0x73, "7b689bc8a51ab9b425eea9628f1425d7978187d63f04cd57c65010e7b03c52594cef5a727a826f621056ba45e36da034b02628dfde86cf53ef12978486a4e70526f3bdaa8853161a4926c6c22ecfb53119ceefdd79c984a64c03f58130e8e1beefc78e4a979998367253aca652dbe1d7423899"}, &(0x7f0000000880)=0x7b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000940)={r9, 0x4c, &(0x7f00000008c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x9, @private1, 0x2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000980)=0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000ac0)={r6, &(0x7f00000009c0)='\x00', 0x200, &(0x7f0000000a00)={@_ha_fsid={[0x0, 0x7fffffff]}, {0x7, 0x5e83, 0xa, 0x6f}}, 0x9, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0x4}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80940808}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r11, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffffffff, 0x20}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000410}, 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$nfc_llcp(r10, 0x118, 0x8324132967c91898, &(0x7f0000000c80)=""/66, 0x42) (async, rerun: 64) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 64) r13 = getpid() (async) r14 = gettid() sendmsg$netlink(r10, &(0x7f0000001880)={&(0x7f0000000e40)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)=[{&(0x7f0000000e80)={0x60, 0x37, 0x20, 0x70bd28, 0x25dfdbff, "", [@nested={0x3c, 0x67, 0x0, 0x1, [@typed={0x4, 0x122}, @generic="45fad6208dc1583510105d6a8ab2574a3ad1c121fb164506", @nested={0x4, 0x105}, @typed={0x8, 0x12b, 0x0, 0x0, @ipv4=@loopback}, @typed={0xe, 0x22, 0x0, 0x0, @binary="70e1dc43919620dc148c"}]}, @typed={0x8, 0x8c, 0x0, 0x0, @pid=r13}, @typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @typed={0x4, 0x9}]}, 0x60}], 0x1, &(0x7f0000001780)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0xf8, 0x40880}, 0x20000800) 970.492677ms ago: executing program 4 (id=3642): syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x3, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe0398cf617fd02722e3486ebd9"}]}}}}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17a}, {&(0x7f0000000a80)="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", 0x167}], 0x2, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/74, 0x4a, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xffffff81, 0x0}, 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc144, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) 825.414802ms ago: executing program 4 (id=3643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x83}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000002030300000000004000000003000008080001000000001400000440000000000000004000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r7], 0x20}}, 0x2000c004) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x8}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) accept4$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0xffffffffffffff85, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000200)='bridge0\x00') 821.861014ms ago: executing program 0 (id=3644): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x35c6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4010) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x6, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 815.075625ms ago: executing program 2 (id=3645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x840}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x70, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) (async) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000000)=""/220, &(0x7f0000000100)=0xdc) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) close(r8) r9 = socket$kcm(0x2, 0x5, 0x84) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x78, &(0x7f0000000040)=r10, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xffff}}, @datasec={0xc, 0x3, 0x0, 0xf, 0x3, [{0x1, 0xfffffffd, 0x7}, {0x3, 0x27, 0xc}, {0x2, 0x10000, 0x80}], "b944dd"}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e, 0x5f, 0x0, 0x0, 0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000380)=""/246, 0x7a, 0xf6, 0x1, 0x4, 0x10000, @value=r5}, 0x28) (async, rerun: 64) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x4e20, 0x1, @private1, 0x40}, 0x1c) (async) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r11, 0x80089419, &(0x7f0000000280)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r14, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4) 734.616866ms ago: executing program 3 (id=3646): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x3, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x7, 0x29}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 633.88945ms ago: executing program 0 (id=3647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030302000000040000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b1400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000083438c3357eb26a355fcefd52311478c7f552f715ff495a1f1f5bce0239e84e912254ced69ee6cc0c6d51182df047f3ff10d48fc74ec07b0277d28b5d58b43716c8bb6f14021f12155882b2d89325b518fc7982aef"], 0x1c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20004c00}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xc, 0xfff2}, {0xc, 0xfff2}, {0xfff1, 0xfff1}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8c2}, {0x8, 0xb, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffe89, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r11, @ANYRES64=r1, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f00000004c0)=""/101, &(0x7f0000000540)=0x65) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) sendmsg$inet(r14, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r15, 0xc) connect$x25(r15, &(0x7f0000000a80), 0xfffffebe) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="000327bd7000fedbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00090000000e0001006e657464657673f11465696d0000000f0002006e657464657673696d30000008000b0003000000080001007063690011000200303030303a30303a31302e300000000008000b00a5000000080000303030303a30303a31302e300000000008000b00ec000000000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x10858) 628.651808ms ago: executing program 2 (id=3648): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74, 0x0, 0x0, @pid}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x38, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={0x14, r2, 0x4f79951a91b7df8f, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x42000}, 0x40000c4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x34, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @IFLA_GROUP={0x8, 0x1b, 0xfffffff9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x54d95733954bd9cd, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 615.219817ms ago: executing program 3 (id=3649): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1700000003000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x400, 0xfc, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x11}, 0x0) 569.97978ms ago: executing program 4 (id=3650): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3b}, 0x6f, 0x0, 0xff, 0x1, 0x1, 0xaf6}, &(0x7f0000000040)=0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000000102030000000000000000000a000009300001802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) 425.288269ms ago: executing program 3 (id=3651): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async, rerun: 32) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (rerun: 32) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async, rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x5, 0x30, 0x5, 0x80000000}, &(0x7f0000000100)=0x18) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x0, 0x0, 0x2005, 0xc02, 0x5}, 0x20) 424.091977ms ago: executing program 4 (id=3652): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x11, 0x3, 0x9, 0x7, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x6c, 0xe0, 0x0, @in6={0xa, 0x4e21, 0xff, @mcast2, 0x200}}]}, 0x38}}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) 414.541329ms ago: executing program 0 (id=3653): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2, 0x0, @private1, @mcast1, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xff}]}]}}}}}}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x10000) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000280)={'pimreg\x00', @remote}) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, r5, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000440)=@raw=[@map_idx={0x18, 0xb}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x3e, &(0x7f0000000a40)=""/62, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0xe, 0x0, 0x9}, 0x10, 0x2afbc, 0xffffffffffffffff, 0xa, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x3, 0xa, 0xe}, {0x5, 0x2, 0xa, 0x1}, {0x0, 0x4, 0x8, 0x6}, {0x1, 0x3, 0xc, 0x3}, {0x5, 0x3, 0xa, 0x9}, {0x2, 0x4, 0x7, 0x1}, {0x1, 0x2, 0x0, 0x4}, {0x0, 0x41, 0xa, 0x2}, {0x4, 0x4, 0xf, 0x5}, {0x3, 0x3, 0x0, 0x7}], 0x10, 0x40000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x10, &(0x7f00000003c0)=@raw=[@ldst={0x2, 0x0, 0x2, 0x2, 0xa, 0x80, 0x10}, @call={0x85, 0x0, 0x0, 0x7f}, @generic={0x5, 0xd, 0x9, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}], &(0x7f0000000e80)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x19, r5, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x0, 0x68cd}, 0x10, 0x267d1, r6, 0x1, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x2, 0x4, 0x12, 0x1}], 0x10, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'macvlan0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="92000000000000000000000067c91e542268e99838c288ccbb5aec674d75f4f84ac224a1e1db528f098d6148026b9b264c065291124512cd04e6415357cb857065cf401bdf863e6f5b25163e982751aa28d13d2c878190d0dfbf3ef644335d2327fc66623c463fed5b010000007d3a3c40b79e8947ed7ed886b7ef790e6f7942776f5ce82398b418401672d33065622d4ceb484b4e204fb1c711f199df759b8dec64d8d6a1e2b7c82be10d7b5a2aa3f6661d9a081f216422f4345a1d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x40000}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0xd0, 0x68, &(0x7f0000000400)=""/104, 0x40f00, 0x40, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000540)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[r10, 0x1], &(0x7f0000000680)=[{0x3, 0x4, 0x10, 0x3}, {0x0, 0x3, 0x5, 0x6}, {0x2, 0x4, 0xb, 0x2}, {0x5, 0x3, 0x6, 0x2}, {0x5, 0x4, 0x4, 0xa}], 0x10, 0x81}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x11, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4880) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000014}, 0x4000080) sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0) 376.678695ms ago: executing program 4 (id=3654): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @rose, @netrom, @default, @bcast, @netrom, @rose, @rose]}, &(0x7f0000000080)=0x48, 0x80800) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) (async, rerun: 64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000140)='\'[\x00', 0x80, &(0x7f0000000180)={@_ha_fsid={[0x9882, 0x6]}, {0x8, 0x6d, 0xfffffff2, 0xfffffffffffffffc}}, 0x7fff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x5}, {[0x4, 0x7, 0x1, 0x8]}, 0x8000, 0x7f, &(0x7f0000000240)=""/127}) (rerun: 64) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) (async, rerun: 32) splice(r1, &(0x7f0000000480)=0xfffffffffffffffe, r1, &(0x7f00000004c0)=0xab, 0x97, 0xc) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0xc009) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0xe) (rerun: 64) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_getnetconf={0x44, 0x52, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000009c0)={r1, &(0x7f00000008c0)='team0\x00', 0x80c80, &(0x7f0000000900)={@align=0x2, {0x9, 0x80, 0x7, 0xd85}}, 0x6, &(0x7f0000000940), &(0x7f0000000980)=0x9}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xf874696f7c95a34a}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x20, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ldst={0x3, 0x3, 0x3, 0x7, 0xb, 0x6, 0x4}, @exit, @ldst={0x2, 0x1, 0x1, 0x3, 0x8, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x30f7ba61, 0x9a, &(0x7f0000000c80)=""/154, 0x0, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x3, 0x60b0, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000dc0)=[r1, r6, r1], &(0x7f0000000e00)=[{0x5, 0x5, 0x2, 0xc}, {0x3, 0x3, 0x1, 0x7}, {0x3, 0x3, 0x9, 0x5}], 0x10, 0x60}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f00)={r9, r4, 0x25, 0xb, @void}, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f40), r7) sendmmsg$sock(r5, &(0x7f0000002480)=[{{&(0x7f0000000f80)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001000)="2a623c0de96b6fc7a26d93288fda578641db40a5c9f36ea35aa774fe12481477f033d2d23b12c8a56ea6b59da164e1740b6560a48d0dbf2b8b9560e841295756c9", 0x41}], 0x1, &(0x7f00000010c0)=[@timestamping={{0x14, 0x1, 0x25, 0xf}}], 0x18}}, {{&(0x7f0000001100)=@can, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001180)="af98c50cbfb780be46040e91a162e5d12280acca3a269e410360195c197e48f70ef17325a1e32187f34b474257d33e2dd421d7b8294a06e12342736f99bca4ad30319be06e34cc6934d9f2289f021d5f511f0519c6c9986369a0987b301dcf4982dddd9565f321e242a8f8cfca8b6ecffb554262b717a1390a7f40d80c88ca662e782ae515f80ca45e42e3e4921b7b0071a3c076649fc191863cc99963b58c057c77e1ee23a00a", 0xa7}, {&(0x7f0000001240)="364f485b6877d800660855a9df3f6053d26a76c0f9e937815863935e6055f4e752a8ffc64c40700953ac25eafef9ad53", 0x30}, {&(0x7f0000001280)="df84f2ca0dc20d414918e1631a0d9d2248934d4fe23bcf8f8c191eccbc6a0dcf35c06f1257bbf883941b451b394eb7ccd650a2805af83291df45db70b0410cf85c94d3ca5c", 0x45}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)}, {&(0x7f0000002340)="c7c952ee84495214890c059b7c58750f0713e88c52d4ec908428ffadf8f1be9544681ca7f4a32c3b5909b1964067dd7431856147ba30bb84544883515456b07f7bf5a07acb3d4b2124913bdef9cc04b874131145bf86432f71fdacbf8cb42f1ff55c8c5cdd07a6519b58ba3ea10d6105b3a07cbf12291e60c12a9ee87d9f", 0x7e}], 0x6, &(0x7f0000002440)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfff}}], 0x30}}], 0x2, 0x4800) pipe(&(0x7f0000002500)={0xffffffffffffffff}) ioctl$XFS_IOC_SCRUBV_METADATA(r10, 0xc0285840, &(0x7f00000025c0)={0x7fffffff, 0x9, 0x7, 0x0, 0x1ff, 0x8, 0x0, &(0x7f0000002540)=[{0x3, 0x101, 0x5}, {0x1c, 0xe2c48955d378188a, 0xfffffe01}, {0x4, 0xb65756d2badced48, 0x1000000}, {0x1c, 0xfe, 0x80}, {0x6, 0xfe, 0xb0}, {0x18, 0x1ff, 0x9}, {0xa, 0xfe, 0x2}, {0x11, 0x1ff, 0xa0}]}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000002780)={{r1, &(0x7f0000002600)='syz0\x00', 0x100, &(0x7f0000002640)={@_ha_fsid={[0x3, 0x4]}, {0x200, 0x8000, 0xdf1, 0x5}}, 0x2, &(0x7f0000002680)={@_ha_fsid}, &(0x7f00000026c0)=0x20000}, {[0x10000, 0x5fa6, 0x7, 0x3]}, 0x9, 0x6b, &(0x7f0000002700)=""/107}) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000002980)={&(0x7f0000002800), 0xc, &(0x7f0000002940)={&(0x7f0000002840)={0x100, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1a4d}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100000000}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x4080}, 0x4) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000029c0), &(0x7f0000002a00)=0x4) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x54, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) socket(0x10, 0x1, 0x0) 297.692399ms ago: executing program 2 (id=3655): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="e611a484d8c4801348c3bf156b96b253e36c9a4bf8845b3e92f88efcad8529f8562efe7ac01236b96c2acaa55c9927e054b846177e4e1be4e4f686c343ddb543e83097a562e965afe2fdf5a071c0808c21b5b290921e259ee95de98ab4e1e9c108d726bba041f21524ceadbef2f749b3eed2d4cda122039d39eb06106f7863e8bd2ef1f663f9fe40a1e0611f6e2fc239dcec04eb6841a934787828a8cad1de7274b681388d2aa25ccfa14e2f4521a5ae9cd0e5e754fe9eaa28ff536c7fadce62017cfe5c5d7241", @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1f, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x8004}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r10 = epoll_create1(0x0) epoll_wait(r10, &(0x7f0000000100)=[{}, {}], 0x2, 0xf2f9) 283.037166ms ago: executing program 3 (id=3656): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x84}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000000) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x58051}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x5}}]}]}]}, 0x58}}, 0x4000014) 115.291679ms ago: executing program 0 (id=3657): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x27, &(0x7f00000000c0)="c1188e19b95d02ff4284860186dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x27) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000080)=[{}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000240)=""/80, 0x50}], 0x3}, 0x2102) 1.513207ms ago: executing program 3 (id=3658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000130a0500000000000040000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8005) 0s ago: executing program 3 (id=3659): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) poll(&(0x7f0000000280), 0x0, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket(0x27, 0x5, 0x2) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0xe, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019700)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d43c000000fe8000000000000000000000000000bb000000000000000001000000000000000600000000000000ffff0000000000001c250800000000000200000000000000feffffffffffffff0000000000000000ffffffffffffffffc1000000000000001f00000000000000feffffffffffffff09000000fcffffff000000002abd7000053500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, &(0x7f00000000c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0xc5bfdcb6eae9e3e7, 0x2) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000200)=r8, 0x4) sendmmsg$inet6(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9167aef8035f3dfa06f0659a1bb214aa4f592e44ed663019b6ef7f84e10fd6fe11a3b795ce9ae139a0a68af807d8f3", 0x2f}, {&(0x7f0000000080)="63bd918aa5629eb0adc1521ac725ef20e8dc64744bc3ebb8381eae0636c3b07d287ce8ca3e095900d31c42dd9ae0457595dc69c487ee8f6287ac7160f925ba585e78923faca9e7fb9f278f100582869619e72d21a7885159143a4d53aacc7c4252dcb14df17f5cedacfa50fe2398792c8c88ce", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7332efe85cfa26d1917d67198aa2a83adb77f0056f9ee947f49b1fd08e6e12f428224fef999e0b7e659e647be3c91f57a532838497d1fb319eca151edc9959967a408c6875e0ddcfe8e9b81ff160b005605dabf39d8f21af7353987fe3b18d66d9a3caed9dced353a00fec35d0474679ec99c1bdb985f6309738f6853b5f81f9b07f18826270785d579a456c3a7d1c38ce8ead0f4d733cfb3819033ea4002214071612f61ef365bb5bf805eeaa55dd4aebc588e8a012955bd239c7ae40823bc23e48a8e18062374fdd6708bc8570055cf61456ae288e73c510", 0xd9}, {&(0x7f0000019580)="26e71ea70b1babe7b27f739bb1ed717284c12aa57704b9660f3847ef6be3871766d406e25fde858afc5f63959257951a6f0fb07e089cf8f40adbdca5195bc06a51f08b54e6fa075cb213998cbb2572efb5a1f3af7b9e177efd3d6f224ffaf3fca2fc68b064796f7aaf2b67e99a789bf54348c51f778dec2a3de71c841d0249b59617716bb5409b2a0525be54d62a54feab119d8068991674a80b7b877ba3552ed2698ecff73d14b15264976dc83bfe212ffbe1d6dc65f0cc6cde76977ca3", 0xbe}, {&(0x7f0000019640)="f10f28a8a5b50cca71af4b3597c7e9dffb0906fd3eb1e474ffb271a6fb762b4a2e8f7480fd1e706d668cee0167919296f4673e37e87e15bafcc20157fb0abffae9ff401685b33e2930f1586bedf9c76d7d4627e10b144264b6e7373ff3269dca3a264b03c6da1f0d566dc7957d76a33d7f06624dc6c80e9914b066e9d53e2676b82d9f83", 0x84}], 0x3}}], 0x2, 0x48800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000019840)=""/4096, 0xfffffffffffffe39}], 0x1}, 0x17bf2694}], 0x1, 0x10143, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) kernel console output (not intermixed with test programs): n process `syz.0.2425'. [ 346.187368][T15332] 8021q: VLANs not supported on gre0 [ 346.210039][T15333] 8021q: VLANs not supported on gre0 [ 346.261458][T15168] tipc: Resetting bearer [ 346.312916][T15168] tipc: Disabling bearer [ 346.349556][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 346.384304][T15340] veth7: entered promiscuous mode [ 346.395829][T15340] netlink: 'syz.0.2430': attribute type 5 has an invalid length. [ 346.416503][T15340] geneve6: entered promiscuous mode [ 346.422675][T15340] geneve6: entered allmulticast mode [ 346.432090][T13186] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 53353 - 0 [ 346.448788][T13186] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 53353 - 0 [ 346.457835][T13186] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 53353 - 0 [ 346.467531][T13186] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 53353 - 0 [ 346.468354][T15307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.483063][T15307] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 346.510432][T15307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.522291][T15307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 346.551286][T15307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.564669][T15307] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 346.582510][T15307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.589211][T15307] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 347.247985][T15349] lo speed is unknown, defaulting to 1000 [ 347.450202][T15379] netlink: 'syz.4.2441': attribute type 1 has an invalid length. [ 347.496703][T15379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.532811][T15378] bond6: (slave veth7): Enslaving as an active interface with a down link [ 347.549269][T15378] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 347.604577][T15378] bond6: (slave wlan0): Opening slave failed [ 347.625635][T15382] tap0: tun_chr_ioctl cmd 1074025677 [ 347.631995][T15382] tap0: linktype set to 769 [ 347.674929][T15349] lo speed is unknown, defaulting to 1000 [ 347.952871][T15393] block nbd0: Unsupported socket: should be TCP or UNIX. [ 348.047804][T15395] macsec2: entered promiscuous mode [ 348.124701][T15397] syzkaller0: entered promiscuous mode [ 348.130672][T15397] syzkaller0: entered allmulticast mode [ 348.263910][T15414] syzkaller0: left promiscuous mode [ 348.269336][T15414] syzkaller0: left allmulticast mode [ 348.281818][T15414] tipc: Resetting bearer [ 348.412029][T15423] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 349.212035][T15428] lo speed is unknown, defaulting to 1000 [ 349.487382][T15428] lo speed is unknown, defaulting to 1000 [ 351.164210][T15409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.354089][T15451] __nla_validate_parse: 5 callbacks suppressed [ 351.354113][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 351.487493][T15467] x_tables: duplicate underflow at hook 2 [ 351.579646][T15473] batman_adv: batadv0: Adding interface: macsec2 [ 351.615450][T15473] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.643989][T15473] batman_adv: batadv0: Interface activated: macsec2 [ 351.723746][T15479] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2468'. [ 351.794199][T15486] "syz.0.2470" (15486) uses obsolete ecb(arc4) skcipher [ 352.151031][ T29] audit: type=1804 audit(1771837718.124:8): pid=15508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2477" name="/newroot/472/memory.events" dev="tmpfs" ino=2443 res=1 errno=0 [ 352.203631][ T29] audit: type=1800 audit(1771837718.144:9): pid=15508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2477" name="memory.events" dev="tmpfs" ino=2443 res=0 errno=0 [ 352.255276][ T29] audit: type=1804 audit(1771837718.144:10): pid=15508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2477" name="/newroot/472/memory.events" dev="tmpfs" ino=2443 res=1 errno=0 [ 352.282796][T15512] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2479'. [ 352.383419][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 352.485041][T15521] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 352.525503][T15521] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 352.800589][T15540] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2487'. [ 352.831715][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 352.841563][T15540] openvswitch: netlink: Missing key (keys=40, expected=80) [ 353.345685][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2493'. [ 354.204928][T15593] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2502'. [ 354.220889][T15589] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 354.540117][T15579] lo speed is unknown, defaulting to 1000 [ 354.556272][T15600] syzkaller0: entered promiscuous mode [ 354.580881][T15600] syzkaller0: entered allmulticast mode [ 355.112011][T15611] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 355.370791][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2511'. [ 355.385093][T15579] lo speed is unknown, defaulting to 1000 [ 355.588165][T15641] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2514'. [ 355.735389][T15646] sock: sock_timestamping_bind_phc: sock not bind to device [ 355.814988][T15644] IPVS: length: 132 != 8 [ 355.857818][T15644] pimreg: entered allmulticast mode [ 355.969719][T15644] pimreg: left allmulticast mode [ 356.214716][T15668] openvswitch: netlink: Flow key attr not present in new flow. [ 356.288808][T15608] lo speed is unknown, defaulting to 1000 [ 356.557366][T15678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2522'. [ 356.611712][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2522'. [ 356.645346][T15678] veth0_to_team: entered promiscuous mode [ 356.664062][T15678] veth0_to_team: left promiscuous mode [ 356.745685][T15679] veth0_to_team: entered promiscuous mode [ 356.831133][T15679] veth0_to_team: left promiscuous mode [ 356.860540][T15665] lo speed is unknown, defaulting to 1000 [ 357.056206][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 357.089570][T15700] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 357.101144][T15698] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2528'. [ 357.196823][T15608] lo speed is unknown, defaulting to 1000 [ 358.098737][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2541'. [ 358.118585][T15665] lo speed is unknown, defaulting to 1000 [ 358.129666][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 358.156084][T15749] veth0_virt_wifi: entered promiscuous mode [ 358.170082][T15749] macsec2: entered allmulticast mode [ 358.175600][T15749] veth0_virt_wifi: entered allmulticast mode [ 358.483438][T15763] netlink: 620 bytes leftover after parsing attributes in process `syz.4.2547'. [ 358.503466][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'. [ 358.611912][T15765] bond10: entered promiscuous mode [ 358.617751][T15765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 358.766123][T15768] 8021q: adding VLAN 0 to HW filter on device bond10 [ 358.799489][T15768] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 358.811911][T15768] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 358.889452][T15770] team0: entered promiscuous mode [ 358.895892][T15770] team_slave_0: entered promiscuous mode [ 358.902062][T15770] team_slave_1: entered promiscuous mode [ 358.934673][T15765] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 358.980492][T15765] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 359.025480][T15785] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 359.217529][ T5193] udevd[5193]: worker [5843] /devices/virtual/block/nbd0 is taking a long time [ 359.256447][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 359.265953][T15790] netlink: 5288 bytes leftover after parsing attributes in process `syz.4.2551'. [ 359.919614][ T983] IPVS: starting estimator thread 0... [ 359.944700][T15813] netlink: 'syz.1.2556': attribute type 1 has an invalid length. [ 360.019941][T15819] IPVS: using max 28 ests per chain, 67200 per kthread [ 360.089033][T15818] syzkaller0: entered promiscuous mode [ 360.094689][T15818] syzkaller0: entered allmulticast mode [ 360.192393][T15823] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 360.211210][T15823] bond11: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 360.259455][T15823] bond11: (slave vxcan5): making interface the new active one [ 360.283039][T15823] bond11: (slave vxcan5): Enslaving as an active interface with an up link [ 360.338797][T15824] bond11 (unregistering): (slave vxcan5): Releasing backup interface [ 360.367992][T15824] bond11 (unregistering): Released all slaves [ 362.549559][T15851] block nbd2: NBD_DISCONNECT [ 362.554667][T15851] block nbd2: Send disconnect failed -32 [ 362.561836][T15851] block nbd2: shutting down sockets [ 362.592889][T15857] __nla_validate_parse: 3 callbacks suppressed [ 362.592910][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 362.680470][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 362.915578][T15864] team0: left promiscuous mode [ 362.920581][T15864] team_slave_0: left promiscuous mode [ 362.926240][T15864] team_slave_1: left promiscuous mode [ 362.938569][T15864] batadv0: left promiscuous mode [ 363.012937][T15864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.036146][T15864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.135289][T15864] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 363.146088][T15864] team1: left allmulticast mode [ 363.155823][T15864] team2: left allmulticast mode [ 363.162624][T15864] team3: left allmulticast mode [ 363.172696][T15864] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 363.181563][T15864] macsec1: left promiscuous mode [ 363.195656][T15864] ip6erspan0: left allmulticast mode [ 363.202397][T15864] ip6gretap1: left promiscuous mode [ 363.207899][T15864] ip6gretap1: left allmulticast mode [ 363.220140][T15864] geneve2: left promiscuous mode [ 363.235822][T15864] bond3: left promiscuous mode [ 363.287584][T15864] veth0_virt_wifi: left allmulticast mode [ 363.294040][T15864] macsec2: left allmulticast mode [ 363.311773][T13188] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.322710][T15875] smc: net device wlan0 applied user defined pnetid SYZ0 [ 363.350536][T15875] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 363.358420][T13188] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.367757][T13188] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 363.403046][T13188] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.433145][T13188] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.480063][T13188] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 363.488800][T13188] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.533072][T13188] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.556420][T13188] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 363.653795][T13188] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.690343][T13188] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.716627][T13188] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 363.956724][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 364.118893][T15880] lo speed is unknown, defaulting to 1000 [ 364.262949][T15935] team0 (unregistering): Port device team_slave_0 removed [ 364.303001][T15939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2588'. [ 364.314556][T15935] team0 (unregistering): Port device team_slave_1 removed [ 364.408672][T15942] m1Ie5n: entered promiscuous mode [ 364.515805][T15880] lo speed is unknown, defaulting to 1000 [ 364.757462][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 365.269916][T15959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2592'. [ 365.489732][T15955] lo speed is unknown, defaulting to 1000 [ 365.495008][T15967] xt_hashlimit: size too large, truncated to 1048576 [ 366.121833][T15955] lo speed is unknown, defaulting to 1000 [ 366.132930][T15992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2598'. [ 366.168944][T15992] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2598'. [ 366.212546][T15992] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2598'. [ 366.246437][T15992] netlink: 'syz.4.2598': attribute type 9 has an invalid length. [ 366.265655][T15992] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2598'. [ 366.304653][T15990] syzkaller1: entered promiscuous mode [ 366.310429][T15990] syzkaller1: entered allmulticast mode [ 366.616976][T16010] netlink: 'syz.0.2604': attribute type 5 has an invalid length. [ 366.628605][T16011] xt_nfacct: accounting object `syz0' does not exist [ 366.655839][T16007] geneve2: entered promiscuous mode [ 366.738528][T13186] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.771422][T13186] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.779688][T13186] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.866942][T13186] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.922833][T16022] macvtap1: entered promiscuous mode [ 366.928306][T16022] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 367.106426][T16030] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 368.126193][T16050] IPVS: length: 24 != 36888 [ 368.269437][T16055] __nla_validate_parse: 7 callbacks suppressed [ 368.269458][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2618'. [ 368.497453][T16071] syzkaller1: entered promiscuous mode [ 368.550260][T16071] syzkaller1: entered allmulticast mode [ 368.737242][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 368.777782][T16082] syzkaller0: entered promiscuous mode [ 368.789189][T16082] syzkaller0: entered allmulticast mode [ 368.802950][T16082] tipc: Resetting bearer [ 368.875590][T16084] syzkaller0: entered promiscuous mode [ 368.887816][T16087] netlink: 'syz.4.2626': attribute type 4 has an invalid length. [ 368.887816][T16086] netlink: 'syz.4.2626': attribute type 4 has an invalid length. [ 368.905383][T16084] syzkaller0: entered allmulticast mode [ 368.943173][T16087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.951294][T16084] netlink: 'syz.0.2625': attribute type 6 has an invalid length. [ 369.193066][T16100] vlan3: entered promiscuous mode [ 369.198267][T16100] geneve1: entered promiscuous mode [ 369.210067][T16100] vlan3: entered allmulticast mode [ 369.221338][T16100] geneve1: entered allmulticast mode [ 369.291481][T16100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.538824][T16117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2633'. [ 369.604746][T16121] netlink: 'syz.2.2634': attribute type 3 has an invalid length. [ 369.626634][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 369.653769][T16121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 369.667355][T16112] team0 (unregistering): Port device bond0 removed [ 369.698713][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2636'. [ 369.849973][T16101] lo speed is unknown, defaulting to 1000 [ 370.258420][T16101] lo speed is unknown, defaulting to 1000 [ 370.349378][T16154] netlink: zone id is out of range [ 370.351233][T16152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2646'. [ 370.362293][T16154] netlink: get zone limit has 4 unknown bytes [ 370.555175][T16159] bridge5: entered promiscuous mode [ 370.722250][T16173] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 370.802556][T16178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.885017][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 371.013682][T16189] netlink: 'syz.2.2656': attribute type 4 has an invalid length. [ 371.437288][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2659'. [ 371.510474][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 371.558732][T16205] hsr_slave_0: left promiscuous mode [ 371.570070][T16205] hsr_slave_1: left promiscuous mode [ 371.617214][T16217] netlink: 'syz.4.2663': attribute type 1 has an invalid length. [ 371.702176][T16217] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.924902][T16226] netlink: 'syz.2.2665': attribute type 1 has an invalid length. [ 371.946310][T16226] batadv_slave_1: entered promiscuous mode [ 371.974518][T16226] batadv_slave_1: entered allmulticast mode [ 373.475073][T16251] lo speed is unknown, defaulting to 1000 [ 374.115251][T16298] __nla_validate_parse: 8 callbacks suppressed [ 374.115271][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 374.224500][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 376.232926][T16319] xt_TPROXY: Can be used only with -p tcp or -p udp [ 376.243677][T16319] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 376.251644][T16319] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2689'. [ 376.566752][T16328] xt_TCPMSS: Only works on TCP SYN packets [ 376.592118][T16251] lo speed is unknown, defaulting to 1000 [ 377.556987][ T5836] block nbd2: Receive control failed (result -32) [ 377.826813][T16395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2706'. [ 377.895799][T16397] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 377.920628][T16397] netlink: 476 bytes leftover after parsing attributes in process `syz.0.2705'. [ 377.929724][T16397] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2705'. [ 377.957457][T16403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2705'. [ 378.099030][T16409] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 378.521671][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'. [ 378.665896][T16429] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 378.757139][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.842989][T16429] 8021q: adding VLAN 0 to HW filter on device bond13 [ 378.851133][T16425] syzkaller1: entered promiscuous mode [ 378.856908][T16425] syzkaller1: entered allmulticast mode [ 378.871225][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2713'. [ 378.882079][T16427] syzkaller1: left promiscuous mode [ 378.887339][T16427] syzkaller1: left allmulticast mode [ 378.901093][T16421] bond13: entered promiscuous mode [ 378.927454][T16421] bond13: entered allmulticast mode [ 379.139323][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2718'. [ 379.153157][T16444] netlink: 'syz.0.2718': attribute type 1 has an invalid length. [ 379.671136][T16462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2720'. [ 379.816013][T16467] Cannot find add_set index 2 as target [ 380.090399][T16483] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2728'. [ 380.215175][T16486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.425638][T16491] bond6: entered promiscuous mode [ 380.435931][ T29] audit: type=1107 audit(1771837746.404:11): pid=16488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 380.623760][T16502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2735'. [ 380.736389][T16504] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 380.852108][T16507] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2738'. [ 380.881049][T16510] netlink: 'syz.2.2739': attribute type 8 has an invalid length. [ 381.005792][T16514] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.006949][T16515] netlink: 'syz.0.2741': attribute type 32 has an invalid length. [ 381.120281][T16519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2742'. [ 381.571884][T16532] xt_hashlimit: size too large, truncated to 1048576 [ 381.724058][T16537] netlink: 'syz.2.2747': attribute type 13 has an invalid length. [ 381.851871][T16541] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 382.021302][T16551] netlink: 876 bytes leftover after parsing attributes in process `syz.3.2750'. [ 382.040035][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 382.074155][T16554] netlink: 876 bytes leftover after parsing attributes in process `syz.3.2750'. [ 382.084006][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 382.207448][T16541] 8021q: adding VLAN 0 to HW filter on device bond14 [ 382.249061][T16545] vlan4: entered promiscuous mode [ 382.254450][T16545] bond14: entered promiscuous mode [ 382.260092][T16545] vlan4: entered allmulticast mode [ 382.265414][T16545] bond14: entered allmulticast mode [ 382.526286][T16566] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.685158][T16573] netlink: 'syz.1.2756': attribute type 11 has an invalid length. [ 383.163141][T16597] netlink: 'syz.3.2764': attribute type 1 has an invalid length. [ 383.171313][T16597] netlink: 'syz.3.2764': attribute type 1 has an invalid length. [ 383.381605][T16607] syz0: rxe_newlink: already configured on lo [ 384.063606][T16632] bond11: invalid ARP target 0.0.0.0 specified for addition [ 384.071831][T16632] bond11: option arp_ip_target: invalid value (0) [ 384.081327][T16632] bond11 (unregistering): Released all slaves [ 384.284232][T16642] __nla_validate_parse: 5 callbacks suppressed [ 384.284253][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 384.334608][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 384.662794][ T5831] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 384.747083][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 384.747112][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.747124][ T5831] Call Trace: [ 384.747132][ T5831] [ 384.747141][ T5831] dump_stack_lvl+0xe8/0x150 [ 384.747187][ T5831] dump_header+0xd3/0x4c0 [ 384.747215][ T5831] oom_kill_process+0x3ab/0x970 [ 384.747241][ T5831] out_of_memory+0x106c/0x1410 [ 384.747260][ T5831] ? percpu_ref_put+0x19/0x180 [ 384.747285][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 384.747325][ T5831] ? __pfx_out_of_memory+0x10/0x10 [ 384.747341][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 384.747375][ T5831] try_charge_memcg+0xc53/0x1560 [ 384.747419][ T5831] ? __pfx_try_charge_memcg+0x10/0x10 [ 384.747446][ T5831] ? get_mem_cgroup_from_mm+0x38/0x290 [ 384.747481][ T5831] ? get_mem_cgroup_from_mm+0x38/0x290 [ 384.747507][ T5831] ? get_mem_cgroup_from_mm+0x38/0x290 [ 384.747533][ T5831] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 384.747562][ T5831] __mem_cgroup_charge+0xab/0x1e0 [ 384.747586][ T5831] filemap_add_folio+0x152/0x530 [ 384.747625][ T5831] __filemap_get_folio_mpol+0x500/0xb00 [ 384.747657][ T5831] filemap_fault+0x9ac/0x1320 [ 384.747690][ T5831] ? __pfx_filemap_fault+0x10/0x10 [ 384.747716][ T5831] ? __pfx_filemap_map_pages+0x10/0x10 [ 384.747753][ T5831] __do_fault+0x138/0x390 [ 384.747783][ T5831] do_pte_missing+0x228f/0x3750 [ 384.747803][ T5831] ? do_pte_missing+0x130a/0x3750 [ 384.747836][ T5831] ? handle_mm_fault+0xee/0x3310 [ 384.747868][ T5831] handle_mm_fault+0x1bec/0x3310 [ 384.747912][ T5831] ? handle_mm_fault+0xee/0x3310 [ 384.747947][ T5831] ? __pfx_handle_mm_fault+0x10/0x10 [ 384.747971][ T5831] ? lock_vma_under_rcu+0x45a/0x500 [ 384.748023][ T5831] do_user_addr_fault+0xa73/0x1340 [ 384.748057][ T5831] ? rcu_is_watching+0x15/0xb0 [ 384.748084][ T5831] ? trace_page_fault_user+0x84/0x210 [ 384.748113][ T5831] exc_page_fault+0x6a/0xc0 [ 384.748143][ T5831] asm_exc_page_fault+0x26/0x30 [ 384.748162][ T5831] RIP: 0033:0x7f5c3766a6b4 [ 384.748191][ T5831] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 384.748207][ T5831] RSP: 002b:00007fff01126330 EFLAGS: 00010206 [ 384.748227][ T5831] RAX: 0000001b30c24000 RBX: 000000000000075d RCX: 000000000005dc00 [ 384.748241][ T5831] RDX: 00000000072ed8d2 RSI: 00007fff011263c0 RDI: 000000001b66a4fe [ 384.748254][ T5831] RBP: 00007fff0112636c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 384.748267][ T5831] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 384.748279][ T5831] R13: 00000000000927c0 R14: 000000000005d9fa R15: 00007fff011263c0 [ 384.748314][ T5831] [ 385.080036][ T5831] memory: usage 307200kB, limit 307200kB, failcnt 745 [ 385.088798][ T5831] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 385.115556][ T5831] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 385.146029][ T5831] Memory cgroup stats for /syz3: [ 385.146384][ T5831] cache 4096 [ 385.175811][T16638] lo speed is unknown, defaulting to 1000 [ 385.220590][ T5831] rss 0 [ 385.223408][ T5831] rss_huge 0 [ 385.226628][ T5831] shmem 0 [ 385.261293][ T5831] mapped_file 0 [ 385.264893][ T5831] dirty 0 [ 385.290654][ T5831] writeback 0 [ 385.319921][ T5831] workingset_refault_anon 35 [ 385.340756][ T5831] workingset_refault_file 0 [ 385.369975][ T5831] swap 167936 [ 385.373753][ T5831] swapcached 212992 [ 385.377575][ T5831] pgpgin 91924 [ 385.439925][ T5831] pgpgout 91912 [ 385.443680][ T5831] pgfault 151306 [ 385.447251][ T5831] pgmajfault 16 [ 385.491396][ T5831] inactive_anon 8192 [ 385.495393][ T5831] active_anon 36864 [ 385.519592][ T5831] inactive_file 0 [ 385.529719][ T5831] active_file 4096 [ 385.540382][ T5831] unevictable 0 [ 385.543902][ T5831] hierarchical_memory_limit 314572800 [ 385.555749][T16653] FAULT_INJECTION: forcing a failure. [ 385.555749][T16653] name failslab, interval 1, probability 0, space 0, times 0 [ 385.569874][ T5831] hierarchical_memsw_limit 9223372036854771712 [ 385.589951][ T5831] total_cache 4096 [ 385.593734][ T5831] total_rss 0 [ 385.610364][T16653] CPU: 1 UID: 0 PID: 16653 Comm: syz.4.2781 Not tainted syzkaller #0 PREEMPT(full) [ 385.610392][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.610404][T16653] Call Trace: [ 385.610413][T16653] [ 385.610420][T16653] dump_stack_lvl+0xe8/0x150 [ 385.610454][T16653] should_fail_ex+0x412/0x560 [ 385.610483][T16653] should_failslab+0xa8/0x100 [ 385.610508][T16653] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 385.610530][T16653] ? __get_vm_area_node+0x13f/0x300 [ 385.610564][T16653] __get_vm_area_node+0x13f/0x300 [ 385.610598][T16653] __vmalloc_node_range_noprof+0x372/0x1730 [ 385.610618][T16653] ? translate_table+0x1b5/0x2110 [ 385.610641][T16653] ? __asan_memset+0x22/0x50 [ 385.610696][T16653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.610719][T16653] ? rcu_is_watching+0x15/0xb0 [ 385.610747][T16653] ? rcu_is_watching+0x15/0xb0 [ 385.610778][T16653] __kvmalloc_node_noprof+0x5ba/0x8a0 [ 385.610800][T16653] ? translate_table+0x1b5/0x2110 [ 385.610818][T16653] ? xt_alloc_table_info+0x40/0xb0 [ 385.610845][T16653] ? do_ipt_set_ctl+0x903/0xe00 [ 385.610863][T16653] ? translate_table+0x1b5/0x2110 [ 385.610882][T16653] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 385.610906][T16653] ? do_syscall_64+0x14d/0xf80 [ 385.610941][T16653] translate_table+0x1b5/0x2110 [ 385.610985][T16653] ? __pfx_translate_table+0x10/0x10 [ 385.611033][T16653] ? _copy_from_user+0x94/0xb0 [ 385.611064][T16653] do_ipt_set_ctl+0x9f5/0xe00 [ 385.611087][T16653] ? rcu_is_watching+0x15/0xb0 [ 385.611113][T16653] ? trace_contention_end+0x3d/0x150 [ 385.611143][T16653] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 385.611192][T16653] ? __pfx___mutex_lock+0x10/0x10 [ 385.611222][T16653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.611259][T16653] ? __pfx_aa_sk_perm+0x10/0x10 [ 385.611288][T16653] nf_setsockopt+0x26f/0x290 [ 385.611318][T16653] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.611343][T16653] do_sock_setsockopt+0x17c/0x1b0 [ 385.611374][T16653] __x64_sys_setsockopt+0x13d/0x1b0 [ 385.611405][T16653] do_syscall_64+0x14d/0xf80 [ 385.611430][T16653] ? trace_irq_disable+0x3b/0x150 [ 385.611454][T16653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.611472][ T5831] total_rss_huge 0 [ 385.611473][T16653] ? clear_bhb_loop+0x40/0x90 [ 385.611497][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.611513][T16653] RIP: 0033:0x7f2dc019c629 [ 385.611530][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.611544][T16653] RSP: 002b:00007f2dc1115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.611564][T16653] RAX: ffffffffffffffda RBX: 00007f2dc0415fa0 RCX: 00007f2dc019c629 [ 385.611576][T16653] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 385.611587][T16653] RBP: 00007f2dc1115090 R08: 0000000000000428 R09: 0000000000000000 [ 385.611598][T16653] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.611609][T16653] R13: 00007f2dc0416038 R14: 00007f2dc0415fa0 R15: 00007ffc337d16d8 [ 385.611638][T16653] [ 385.611817][T16653] syz.4.2781: vmalloc error: size 40108080, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 385.639924][ T5831] total_shmem 0 [ 385.951196][T16653] ,cpuset=/,mems_allowed=0-1 [ 385.999961][T16653] CPU: 1 UID: 0 PID: 16653 Comm: syz.4.2781 Not tainted syzkaller #0 PREEMPT(full) [ 385.999996][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.000007][T16653] Call Trace: [ 386.000016][T16653] [ 386.000024][T16653] dump_stack_lvl+0xe8/0x150 [ 386.000058][T16653] warn_alloc+0x249/0x340 [ 386.000088][T16653] ? __pfx_warn_alloc+0x10/0x10 [ 386.000111][T16653] ? __get_vm_area_node+0x13f/0x300 [ 386.000145][T16653] ? __get_vm_area_node+0x2b5/0x300 [ 386.000190][T16653] __vmalloc_node_range_noprof+0x397/0x1730 [ 386.000214][T16653] ? __asan_memset+0x22/0x50 [ 386.000269][T16653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.000292][T16653] ? rcu_is_watching+0x15/0xb0 [ 386.000320][T16653] ? rcu_is_watching+0x15/0xb0 [ 386.000350][T16653] __kvmalloc_node_noprof+0x5ba/0x8a0 [ 386.000372][T16653] ? translate_table+0x1b5/0x2110 [ 386.000392][T16653] ? xt_alloc_table_info+0x40/0xb0 [ 386.000417][T16653] ? do_ipt_set_ctl+0x903/0xe00 [ 386.000435][T16653] ? translate_table+0x1b5/0x2110 [ 386.000453][T16653] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 386.000479][T16653] ? do_syscall_64+0x14d/0xf80 [ 386.000514][T16653] translate_table+0x1b5/0x2110 [ 386.000558][T16653] ? __pfx_translate_table+0x10/0x10 [ 386.000605][T16653] ? _copy_from_user+0x94/0xb0 [ 386.000637][T16653] do_ipt_set_ctl+0x9f5/0xe00 [ 386.000660][T16653] ? rcu_is_watching+0x15/0xb0 [ 386.000686][T16653] ? trace_contention_end+0x3d/0x150 [ 386.000717][T16653] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 386.000758][T16653] ? __pfx___mutex_lock+0x10/0x10 [ 386.000787][T16653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.000824][T16653] ? __pfx_aa_sk_perm+0x10/0x10 [ 386.000852][T16653] nf_setsockopt+0x26f/0x290 [ 386.000882][T16653] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 386.000908][T16653] do_sock_setsockopt+0x17c/0x1b0 [ 386.000939][T16653] __x64_sys_setsockopt+0x13d/0x1b0 [ 386.000972][T16653] do_syscall_64+0x14d/0xf80 [ 386.000998][T16653] ? trace_irq_disable+0x3b/0x150 [ 386.001024][T16653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.001044][T16653] ? clear_bhb_loop+0x40/0x90 [ 386.001068][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.001087][T16653] RIP: 0033:0x7f2dc019c629 [ 386.001106][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.001123][T16653] RSP: 002b:00007f2dc1115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 386.001145][T16653] RAX: ffffffffffffffda RBX: 00007f2dc0415fa0 RCX: 00007f2dc019c629 [ 386.001159][T16653] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 386.001179][T16653] RBP: 00007f2dc1115090 R08: 0000000000000428 R09: 0000000000000000 [ 386.001191][T16653] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.001203][T16653] R13: 00007f2dc0416038 R14: 00007f2dc0415fa0 R15: 00007ffc337d16d8 [ 386.001236][T16653] [ 386.001274][T16653] Mem-Info: [ 386.300588][ T5831] total_mapped_file 0 [ 386.304699][ T5831] total_dirty 0 [ 386.308193][ T5831] total_writeback 0 [ 386.322333][ T5831] total_workingset_refault_anon 35 [ 386.327671][ T5831] total_workingset_refault_file 0 [ 386.353115][ T5831] total_swap 167936 [ 386.356978][ T5831] total_swapcached 212992 [ 386.379046][T16653] active_anon:7890 inactive_anon:5 isolated_anon:0 [ 386.379046][T16653] active_file:2635 inactive_file:40341 isolated_file:0 [ 386.379046][T16653] unevictable:768 dirty:9 writeback:0 [ 386.379046][T16653] slab_reclaimable:12805 slab_unreclaimable:143929 [ 386.379046][T16653] mapped:29493 shmem:1878 pagetables:1223 [ 386.379046][T16653] sec_pagetables:0 bounce:0 [ 386.379046][T16653] kernel_misc_reclaimable:0 [ 386.379046][T16653] free:1224645 free_pcp:17486 free_cma:0 [ 386.425442][ T5831] total_pgpgin 91924 [ 386.429371][ T5831] total_pgpgout 91912 [ 386.435133][T16644] lo speed is unknown, defaulting to 1000 [ 386.439947][ T5831] total_pgfault 151306 [ 386.455643][ T5831] total_pgmajfault 16 [ 386.459711][ T5831] total_inactive_anon 8192 [ 386.460947][T16638] lo speed is unknown, defaulting to 1000 [ 386.469858][ T5831] total_active_anon 36864 [ 386.474331][ T5831] total_inactive_file 0 [ 386.478518][ T5831] total_active_file 4096 [ 386.499824][ T5831] total_unevictable 0 [ 386.503957][T16653] Node 0 active_anon:31760kB inactive_anon:20kB active_file:10540kB inactive_file:161160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117972kB dirty:36kB writeback:0kB shmem:5976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15044kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.536497][ T5831] anon_cost 0 [ 386.546600][ T5831] file_cost 0 [ 386.550103][ T5831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2767,pid=16609,uid=0 [ 386.588121][ T5831] Memory cgroup out of memory: Killed process 16609 (syz.3.2767) total-vm:102416kB, anon-rss:1244kB, file-rss:22920kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 386.620011][T16653] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.710187][T16653] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.775641][T16653] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 386.789975][T16653] Node 0 DMA32 free:973464kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32360kB inactive_anon:20kB active_file:10540kB inactive_file:161160kB unevictable:1536kB writepending:36kB zspages:104kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:70028kB local_pcp:20564kB free_cma:0kB [ 386.889308][T16653] lowmem_reserve[]: 0 0 0 0 0 [ 386.907318][T16653] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 386.980010][T16653] lowmem_reserve[]: 0 0 0 0 0 [ 386.993005][T16653] Node 1 Normal free:3938864kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.044038][T16655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.090719][T16653] lowmem_reserve[]: 0 0 0 0 0 [ 387.095497][T16653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 387.149996][T16653] Node 0 DMA32: 3440*4kB (UME) 699*8kB (UME) 458*16kB (UME) 887*32kB (UM) 534*64kB (UME) 342*128kB (UME) 229*256kB (UME) 201*512kB (UM) 165*1024kB (UME) 70*2048kB (UM) 105*4096kB (UM) = 1036952kB [ 387.219182][T16653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 387.243692][T16653] Node 1 Normal: 2*4kB (UM) 9*8kB (UM) 8*16kB (UME) 11*32kB (UME) 6*64kB (UME) 5*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 959*4096kB (M) = 3938864kB [ 387.291717][T16653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.326367][T16653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.351471][T16653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.379300][T16653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.404507][T16653] 44981 total pagecache pages [ 387.407850][T16644] lo speed is unknown, defaulting to 1000 [ 387.422334][T16653] 2 pages in swap cache [ 387.436889][T16653] Free swap = 124988kB [ 387.453351][T16653] Total swap = 124996kB [ 387.464352][T16653] 2097051 pages RAM [ 387.475537][T16653] 0 pages HighMem/MovableOnly [ 387.486114][T16653] 427002 pages reserved [ 387.499918][T16653] 0 pages cma reserved [ 387.944039][T16670] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2786'. [ 388.185533][T16672] netlink: 'syz.3.2787': attribute type 7 has an invalid length. [ 389.033984][T16689] syzkaller0: entered promiscuous mode [ 389.045625][T16689] syzkaller0: entered allmulticast mode [ 389.373444][T16702] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2796'. [ 389.472012][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 390.057021][T16733] netlink: 'syz.0.2806': attribute type 1 has an invalid length. [ 390.126558][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 390.423465][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 390.703726][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'. [ 390.739636][T16762] lo speed is unknown, defaulting to 1000 [ 390.748534][T16762] lo speed is unknown, defaulting to 1000 [ 390.776722][T16763] tipc: Resetting bearer [ 390.795422][T16763] syzkaller0: left promiscuous mode [ 390.801901][T16763] syzkaller0: left allmulticast mode [ 390.828690][T16763] vlan2: left allmulticast mode [ 390.836258][T16763] gretap0: left allmulticast mode [ 390.842936][T16763] bond2: left promiscuous mode [ 390.850474][T16763] bond2: left allmulticast mode [ 390.872325][T16763] xfrm1: left allmulticast mode [ 390.883369][T16763] bond4: left promiscuous mode [ 390.889325][T16763] bridge4: left promiscuous mode [ 390.904245][T16763] vlan0: left promiscuous mode [ 390.909329][T16763] team0: left promiscuous mode [ 390.923970][T16763] vlan1: left allmulticast mode [ 390.928960][T16763] team0: left allmulticast mode [ 390.963502][T16763] bond6: left promiscuous mode [ 390.974513][T16763] vlan5: left allmulticast mode [ 390.981883][T16763] veth0_to_bond: left allmulticast mode [ 391.008264][T16762] lo speed is unknown, defaulting to 1000 [ 391.008355][T16764] netem: change failed [ 391.120000][T16767] syzkaller0: entered promiscuous mode [ 391.125628][T16767] syzkaller0: entered allmulticast mode [ 391.146630][T16767] tipc: Resetting bearer [ 391.249316][T16758] lo speed is unknown, defaulting to 1000 [ 391.319206][T16770] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 391.362032][T16772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2817'. [ 391.891589][T16758] lo speed is unknown, defaulting to 1000 [ 391.952966][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 391.980071][T16797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2823'. [ 392.322460][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2831'. [ 392.359957][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2831'. [ 392.379897][T16824] netlink: 'syz.4.2831': attribute type 3 has an invalid length. [ 392.494982][T16762] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 392.613658][T16762] lo speed is unknown, defaulting to 1000 [ 392.636183][T16762] lo speed is unknown, defaulting to 1000 [ 392.704633][T16762] lo speed is unknown, defaulting to 1000 [ 392.783142][T16762] lo speed is unknown, defaulting to 1000 [ 392.813321][T16762] lo speed is unknown, defaulting to 1000 [ 392.828756][T16762] lo speed is unknown, defaulting to 1000 [ 392.847389][T16762] lo speed is unknown, defaulting to 1000 [ 393.017350][T16838] openvswitch: netlink: Key type 30 is not supported [ 393.025892][T16830] lo speed is unknown, defaulting to 1000 [ 393.332010][T16850] veth0_to_bridge: entered promiscuous mode [ 393.344077][T16849] veth0_to_bridge: left promiscuous mode [ 393.362104][T16851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.420987][T16851] veth1_macvtap: entered promiscuous mode [ 393.442675][T16851] macsec3: entered promiscuous mode [ 393.458608][T16851] veth1_macvtap: left promiscuous mode [ 393.550739][T16830] lo speed is unknown, defaulting to 1000 [ 395.069397][T16887] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2845'. [ 395.086406][T16880] ip_vti0: left allmulticast mode [ 395.108016][T16880] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.120305][T16880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.163217][T16887] 0{X: renamed from gretap0 [ 395.177701][T16887] 0{X: entered allmulticast mode [ 395.189006][T16887] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 396.048888][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 396.081681][T16910] x_tables: duplicate underflow at hook 2 [ 396.164223][T16908] ip6tnl2: entered allmulticast mode [ 396.247812][T16917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2854'. [ 396.260169][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2855'. [ 396.327730][T16912] netlink: 41 bytes leftover after parsing attributes in process `syz.3.2852'. [ 396.359964][T16912] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2852'. [ 396.568389][T16930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2857'. [ 396.655184][T16935] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2859'. [ 396.746145][T16932] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.763956][T16932] syzkaller1: linktype set to 778 [ 396.869174][T16932] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.933961][T16945] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 396.997518][T16937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 397.051973][T16937] bond11: (slave macvlan2): Enslaving as a backup interface with an up link [ 397.106443][T13186] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 397.201686][ T6931] bond11: (slave macvlan2): link status up again after 0 ms [ 397.232038][ T6931] bond11: (slave macvlan2): link status up again after 0 ms [ 397.244152][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 397.266307][ T6931] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 397.370621][T13183] bond11: (slave macvlan2): failed to get link speed/duplex [ 397.466637][T16951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2863'. [ 397.535879][ T1331] bond11: (slave macvlan2): failed to get link speed/duplex [ 397.646344][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.657691][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.667954][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.679581][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.689337][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.718895][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.760095][T16968] netlink: 'syz.4.2867': attribute type 1 has an invalid length. [ 397.767988][T16968] netlink: 476 bytes leftover after parsing attributes in process `syz.4.2867'. [ 397.778432][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.786104][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.794692][T16973] syzkaller1: entered promiscuous mode [ 397.796530][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.810568][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.854476][T16973] syzkaller1: entered allmulticast mode [ 398.109746][T13183] net_ratelimit: 2 callbacks suppressed [ 398.128389][T13183] bond11: (slave macvlan2): failed to get link speed/duplex [ 398.380008][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 398.721981][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 398.756936][T16965] lo speed is unknown, defaulting to 1000 [ 398.861569][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 399.053515][ T12] bond11: (slave macvlan2): failed to get link speed/duplex [ 399.199975][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 399.260317][T17041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 399.305836][T17040] netlink: 'syz.2.2884': attribute type 1 has an invalid length. [ 399.329987][T17040] netlink: 'syz.2.2884': attribute type 11 has an invalid length. [ 399.330431][ T12] bond11: (slave macvlan2): failed to get link speed/duplex [ 399.390124][T16965] lo speed is unknown, defaulting to 1000 [ 399.503079][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 399.654568][ T1331] bond11: (slave macvlan2): failed to get link speed/duplex [ 399.756660][T17059] syzkaller0: entered promiscuous mode [ 399.762574][T17059] syzkaller0: entered allmulticast mode [ 399.872882][ T5839] Bluetooth: hci5: command tx timeout [ 399.942048][T17064] lo: Caught tx_queue_len zero misconfig [ 399.985382][T16965] lo speed is unknown, defaulting to 1000 [ 400.232679][T16965] chnl_net:caif_netlink_parms(): no params data found [ 400.242576][T17079] __nla_validate_parse: 13 callbacks suppressed [ 400.242600][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 400.261656][T17084] netlink: 'syz.3.2895': attribute type 4 has an invalid length. [ 400.269674][T17084] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2895'. [ 400.333826][T17084] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 400.444022][T17093] netlink: 250 bytes leftover after parsing attributes in process `syz.3.2895'. [ 400.510731][T16965] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.518155][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.526552][T16965] bridge_slave_0: entered allmulticast mode [ 400.534836][T16965] bridge_slave_0: entered promiscuous mode [ 400.544366][T16965] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.552273][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.560181][T16965] bridge_slave_1: entered allmulticast mode [ 400.568507][T16965] bridge_slave_1: entered promiscuous mode [ 400.602086][T17102] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2901'. [ 400.624629][T16965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.637777][T16965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.687061][T16965] team0: Port device team_slave_0 added [ 400.704753][T16965] team0: Port device team_slave_1 added [ 400.759732][T16965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.767249][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.794766][T16965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.841905][T16965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.849068][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.877398][T16965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.994859][T16965] hsr_slave_0: entered promiscuous mode [ 401.001914][T16965] hsr_slave_1: entered promiscuous mode [ 401.008465][T16965] debugfs: 'hsr0' already exists in 'hsr' [ 401.014815][T16965] Cannot create hsr debugfs directory [ 401.304837][T16965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 401.319242][T16965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 53353 - 0 [ 401.350195][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2912'. [ 401.350531][T17132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2912'. [ 401.359288][T17133] netlink: 'syz.1.2912': attribute type 7 has an invalid length. [ 401.376337][T17132] netlink: 'syz.1.2912': attribute type 7 has an invalid length. [ 401.376358][T17132] netlink: 'syz.1.2912': attribute type 8 has an invalid length. [ 401.376371][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 401.402682][T17133] netlink: 'syz.1.2912': attribute type 8 has an invalid length. [ 401.419712][T16965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 401.429765][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 401.445606][T16965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 53353 - 0 [ 401.463483][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 401.543449][T16965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 401.565285][T16965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 53353 - 0 [ 401.618702][T17147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.772506][T17152] syzkaller0: entered promiscuous mode [ 401.778374][T17152] syzkaller0: entered allmulticast mode [ 401.804727][T16965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 401.844823][T16965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 53353 - 0 [ 401.952129][ T5839] Bluetooth: hci5: command tx timeout [ 402.341492][T17169] netlink: 'syz.4.2925': attribute type 31 has an invalid length. [ 402.356291][T16965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.375987][T16965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.414512][T16965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.458917][T16965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.530474][T17177] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 402.644006][T16965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.693418][T16965] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.718739][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.725983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.756017][T17158] lo speed is unknown, defaulting to 1000 [ 402.764529][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.771726][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.786861][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 402.813493][T17192] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 403.171815][T17209] bridge4: entered promiscuous mode [ 403.177104][T17209] bridge4: entered allmulticast mode [ 403.360401][ T6931] net_ratelimit: 13 callbacks suppressed [ 403.360426][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 403.374649][T17158] lo speed is unknown, defaulting to 1000 [ 403.457483][T16965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.481194][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 403.531747][T17214] netlink: 'syz.1.2935': attribute type 33 has an invalid length. [ 403.587029][T16965] veth0_vlan: entered promiscuous mode [ 403.611055][T13186] bond11: (slave macvlan2): failed to get link speed/duplex [ 403.633988][T16965] veth1_vlan: entered promiscuous mode [ 403.717268][T16965] veth0_macvtap: entered promiscuous mode [ 403.734343][T16965] veth1_macvtap: entered promiscuous mode [ 403.758890][T16965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.775642][T16965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.788322][T17220] netlink: 'syz.1.2936': attribute type 28 has an invalid length. [ 403.811252][T13186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.828721][T13186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.841219][T17158] lo speed is unknown, defaulting to 1000 [ 403.867499][T13186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.904402][T13186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.030400][ T5839] Bluetooth: hci5: command tx timeout [ 404.064332][T17235] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 404.102413][T17233] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 404.150392][ T6931] bond11: (slave macvlan2): failed to get link speed/duplex [ 404.233107][ T6923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.256216][ T6923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.311066][T13183] bond11: (slave macvlan2): failed to get link speed/duplex [ 404.491696][T13183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.499998][ T6923] bond11: (slave macvlan2): failed to get link speed/duplex [ 404.518113][T13183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.619956][T13183] bond11: (slave macvlan2): failed to get link speed/duplex [ 404.792145][T13183] bond11: (slave macvlan2): failed to get link speed/duplex [ 404.881377][T17258] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 405.079092][T17263] veth0_to_bond: Caught tx_queue_len zero misconfig [ 405.253392][T17263] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 405.313148][T17263] bond4 (unregistering): Released all slaves [ 405.412045][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.423016][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.434612][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.448333][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.457107][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.096390][T17294] __nla_validate_parse: 7 callbacks suppressed [ 406.096413][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2957'. [ 406.113153][ T5839] Bluetooth: hci5: command tx timeout [ 406.204424][T17294] erspan0: entered promiscuous mode [ 406.327336][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2959'. [ 406.518949][T17275] lo speed is unknown, defaulting to 1000 [ 406.609999][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2959'. [ 406.641326][T17307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2960'. [ 407.446734][ T12] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 407.550361][ T5839] Bluetooth: hci1: command tx timeout [ 407.667052][ T12] bond11 (unregistering): (slave macvlan2): Removing an active aggregator [ 407.676650][ T12] bond11 (unregistering): (slave macvlan2): Releasing backup interface [ 407.693994][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 407.703424][ T12] bond0 (unregistering): Released all slaves [ 407.714593][ T12] bond1 (unregistering): Released all slaves [ 407.728304][ T12] bond2 (unregistering): Released all slaves [ 407.745030][ T12] bond3 (unregistering): Released all slaves [ 407.760617][ T12] bond4 (unregistering): Released all slaves [ 407.786354][ T12] bond5 (unregistering): Released all slaves [ 407.813339][ T12] bond6 (unregistering): Released all slaves [ 407.837369][ T12] bond7 (unregistering): Released all slaves [ 407.850233][ T12] bond8 (unregistering): Released all slaves [ 407.863457][ T12] bond9 (unregistering): Released all slaves [ 407.884711][ T12] bond10 (unregistering): Released all slaves [ 407.898139][ T12] bond11 (unregistering): Released all slaves [ 407.980181][T17275] lo speed is unknown, defaulting to 1000 [ 408.070680][T17335] gretap0: entered promiscuous mode [ 408.076467][T17335] vlan3: entered promiscuous mode [ 408.178690][ T12] m1Ie5n: left promiscuous mode [ 408.351312][ T12] tipc: Disabling bearer [ 408.397005][ T12] tipc: Disabling bearer [ 408.414423][ T12] tipc: Left network mode [ 408.445060][T17353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2968'. [ 408.458380][T17354] netlink: 'syz.2.2969': attribute type 21 has an invalid length. [ 408.815053][T17275] lo speed is unknown, defaulting to 1000 [ 408.835025][T17361] siw: device registration error -23 [ 408.845058][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 408.854929][T17368] netlink: 'syz.3.2971': attribute type 12 has an invalid length. [ 408.881980][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 408.923940][T17374] Unsupported ieee802154 address type: 0 [ 408.935839][T17368] netlink: 'syz.3.2971': attribute type 12 has an invalid length. [ 409.634269][ T5839] Bluetooth: hci1: command tx timeout [ 409.765765][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2979'. [ 410.031911][T17410] bridge5: entered promiscuous mode [ 410.037302][T17410] bridge5: entered allmulticast mode [ 410.069390][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 410.192772][T17275] chnl_net:caif_netlink_parms(): no params data found [ 410.210283][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 410.861356][T17436] netlink: 'syz.4.2982': attribute type 3 has an invalid length. [ 410.913060][T17438] netlink: 'syz.4.2982': attribute type 7 has an invalid length. [ 410.949052][T17438] netlink: 'syz.4.2982': attribute type 8 has an invalid length. [ 411.006078][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.044085][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.071112][T17275] bridge_slave_0: entered allmulticast mode [ 411.093561][T17275] bridge_slave_0: entered promiscuous mode [ 411.133361][T17438] gretap0: entered promiscuous mode [ 411.161274][T17438] gretap0: left promiscuous mode [ 411.209537][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.218872][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.236544][T17275] bridge_slave_1: entered allmulticast mode [ 411.254198][T17275] bridge_slave_1: entered promiscuous mode [ 411.339625][T17449] syzkaller0: entered promiscuous mode [ 411.361332][T17449] syzkaller0: entered allmulticast mode [ 411.453074][T17449] tipc: Enabled bearer , priority 0 [ 411.579580][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.607405][T17454] tipc: Resetting bearer [ 411.661849][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.719868][ T5839] Bluetooth: hci1: command tx timeout [ 411.848956][T17448] tipc: Resetting bearer [ 411.904431][T17448] tipc: Disabling bearer [ 412.062025][T17486] netlink: 'syz.0.2991': attribute type 9 has an invalid length. [ 412.068461][T17275] team0: Port device team_slave_0 added [ 412.085884][T17486] netlink: 'syz.0.2991': attribute type 6 has an invalid length. [ 412.184849][T17275] team0: Port device team_slave_1 added [ 412.397834][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.449865][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.528524][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.568559][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.585835][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.755926][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.790037][ T5839] Bluetooth: hci1: command tx timeout [ 413.867416][T17545] xt_TCPMSS: Only works on TCP SYN packets [ 414.089188][ T6923] smc: removing ib device sqz0 [ 414.143158][T17275] hsr_slave_0: entered promiscuous mode [ 414.153155][T17275] hsr_slave_1: entered promiscuous mode [ 414.163161][T17275] debugfs: 'hsr0' already exists in 'hsr' [ 414.168954][T17275] Cannot create hsr debugfs directory [ 414.439706][T17559] __nla_validate_parse: 3 callbacks suppressed [ 414.439726][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'. [ 415.134953][T17582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3014'. [ 415.163803][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'. [ 415.192396][T17582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3014'. [ 415.329744][T17589] sctp: [Deprecated]: syz.0.3016 (pid 17589) Use of int in max_burst socket option. [ 415.329744][T17589] Use struct sctp_assoc_value instead [ 415.656472][T17602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3018'. [ 415.980744][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 416.211438][ T5839] block nbd1: Receive control failed (result -32) [ 416.219982][T17553] lo speed is unknown, defaulting to 1000 [ 416.234426][T17627] can: request_module (can-proto-0) failed. [ 416.414167][T17637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3024'. [ 416.566720][T17642] syzkaller0: entered promiscuous mode [ 416.602847][T17642] syzkaller0: entered allmulticast mode [ 416.613493][T17642] netlink: 'syz.0.3025': attribute type 2 has an invalid length. [ 416.683255][T17642] !9: entered promiscuous mode [ 417.024306][T17275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.067787][T17275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.129335][T17275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.197077][T17275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.569198][T17553] lo speed is unknown, defaulting to 1000 [ 417.604530][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.607381][ T12] IPVS: stop unused estimator thread 0... [ 417.665021][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3030'. [ 417.748858][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.778686][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.786007][ T6923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.844488][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.851764][ T6923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.007603][T17682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3032'. [ 418.028782][T17275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.057674][T17683] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3031'. [ 418.067081][T17683] net_ratelimit: 8 callbacks suppressed [ 418.067101][T17683] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 418.089977][T17275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.687396][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.793798][T17275] veth0_vlan: entered promiscuous mode [ 418.868721][T17706] syzkaller1: entered allmulticast mode [ 418.930962][T17275] veth1_vlan: entered promiscuous mode [ 418.931318][T17706] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 418.967364][T17713] openvswitch: netlink: IP tunnel dst address not specified [ 419.115670][T17720] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 419.996138][T17275] veth0_macvtap: entered promiscuous mode [ 420.058928][T17275] veth1_macvtap: entered promiscuous mode [ 420.145260][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.173245][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.222769][ T1331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.247234][ T1331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.269502][ T1331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.312491][ T1331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.346006][T17743] 9: renamed from lo [ 420.502138][ T6923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.537360][ T6923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.570283][T17756] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 420.607589][ T6923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.631275][ T6923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.896399][T17778] __nla_validate_parse: 3 callbacks suppressed [ 420.896420][T17778] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3050'. [ 420.931244][T17778] xfrm0: entered promiscuous mode [ 421.415973][T17799] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 421.474782][T17798] bond1 (unregistering): Released all slaves [ 421.623426][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.634260][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.643027][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.662019][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.672468][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.802840][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3059'. [ 421.906393][T17817] xfrm0: Caught tx_queue_len zero misconfig [ 421.963306][T17814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3059'. [ 421.987307][T17814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3059'. [ 422.225016][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3064'. [ 422.256334][T17831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3064'. [ 422.282021][T17835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3064'. [ 422.307725][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3064'. [ 422.320849][T17831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3064'. [ 422.512629][T17804] lo speed is unknown, defaulting to 1000 [ 422.820904][T17862] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.845347][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 423.094849][T17871] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 423.105629][T17871] bridge1: entered allmulticast mode [ 423.208019][T17804] lo speed is unknown, defaulting to 1000 [ 423.278028][T17815] lo speed is unknown, defaulting to 1000 [ 423.570869][T13186] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.611125][T13186] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.691472][T17804] chnl_net:caif_netlink_parms(): no params data found [ 423.777442][T13186] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.790796][ T5839] Bluetooth: hci4: command tx timeout [ 423.806522][T13186] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.001262][T13186] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.038735][T13186] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.114449][T17815] lo speed is unknown, defaulting to 1000 [ 424.159158][T13186] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.181455][T13186] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.433886][T17908] syzkaller1: entered promiscuous mode [ 424.441073][T17908] syzkaller1: entered allmulticast mode [ 424.453657][T17804] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.471242][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.478865][T17804] bridge_slave_0: entered allmulticast mode [ 424.489234][T17804] bridge_slave_0: entered promiscuous mode [ 424.525196][T17804] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.539081][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.547230][T17804] bridge_slave_1: entered allmulticast mode [ 424.556606][T17804] bridge_slave_1: entered promiscuous mode [ 424.877203][T17804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.963090][T17804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.200482][T17947] netlink: 'syz.4.3082': attribute type 10 has an invalid length. [ 425.871758][ T5839] Bluetooth: hci4: command tx timeout [ 426.072620][T13186] bond3 (unregistering): (slave gretap2): Releasing active interface [ 426.414934][T13186] bond0 (unregistering): Released all slaves [ 426.434907][T13186] bond1 (unregistering): (slave lo): Releasing backup interface [ 426.447306][T13186] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 426.463248][T13186] bond1 (unregistering): Released all slaves [ 426.491257][T13186] bond2 (unregistering): Released all slaves [ 426.518979][T13186] bond3 (unregistering): Released all slaves [ 426.533211][T13186] bond4 (unregistering): Released all slaves [ 426.546295][T13186] bond5 (unregistering): Released all slaves [ 426.567673][T13186] bond6 (unregistering): Released all slaves [ 426.583102][T17804] team0: Port device team_slave_0 added [ 426.597212][T17958] __nla_validate_parse: 3 callbacks suppressed [ 426.597228][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'. [ 426.626771][T17966] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3085'. [ 426.689045][T17804] team0: Port device team_slave_1 added [ 426.753940][T17969] netlink: 'syz.4.3086': attribute type 3 has an invalid length. [ 426.758376][T17972] netlink: 'syz.2.3087': attribute type 1 has an invalid length. [ 426.763217][T17969] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 426.777496][T17969] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3086'. [ 426.783472][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3087'. [ 426.843369][T17972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'. [ 426.867954][T13186] 9: left promiscuous mode [ 426.952389][T13186] : left promiscuous mode [ 427.067129][T17983] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3089'. [ 427.071160][T17804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.079818][T17988] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3090'. [ 427.092653][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.144451][T17804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.171046][T13186] tipc: Left network mode [ 427.178562][T17804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.185827][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.222378][T17804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.304164][T17994] xt_HMARK: proto mask must be zero with L3 mode [ 427.334532][T13186] IPVS: stopping backup sync thread 13235 ... [ 427.536728][T17804] hsr_slave_0: entered promiscuous mode [ 427.571296][T17804] hsr_slave_1: entered promiscuous mode [ 427.583564][T17804] debugfs: 'hsr0' already exists in 'hsr' [ 427.591174][T17804] Cannot create hsr debugfs directory [ 427.750978][T18013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3097'. [ 427.776253][T18022] openvswitch: netlink: IP tunnel dst address not specified [ 427.825537][T18013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3097'. [ 427.950093][ T5839] Bluetooth: hci4: command tx timeout [ 427.976228][T18031] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3102'. [ 428.013290][T18013] Cannot find add_set index 0 as target [ 428.514350][T18056] netlink: 'syz.1.3106': attribute type 10 has an invalid length. [ 429.321968][T18084] vlan1: entered promiscuous mode [ 429.327281][T18084] vlan1: entered allmulticast mode [ 429.369056][T18084] veth0_vlan: entered allmulticast mode [ 429.379030][T18084] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 429.592082][T18099] x_tables: duplicate underflow at hook 2 [ 429.781882][T18052] lo speed is unknown, defaulting to 1000 [ 429.905560][T18112] netlink: 'syz.1.3119': attribute type 1 has an invalid length. [ 429.966749][T18110] syzkaller1: entered promiscuous mode [ 429.980043][T18110] syzkaller1: entered allmulticast mode [ 430.032730][ T5839] Bluetooth: hci4: command tx timeout [ 430.190876][T18112] bond1: entered promiscuous mode [ 430.232233][T18112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.237610][T18121] nbd: socks must be embedded in a SOCK_ITEM attr [ 430.413026][T18113] bond1: (slave bridge2): making interface the new active one [ 430.440202][T18113] bridge2: entered promiscuous mode [ 430.454387][T18113] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 430.499640][T17804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.546883][T15303] udevd[15303]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 430.694171][T17804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.745949][T17804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.778986][T18052] lo speed is unknown, defaulting to 1000 [ 430.781331][T17804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.946725][T18144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.971148][T18148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.167348][T13186] hsr_slave_0: left promiscuous mode [ 431.186836][T13186] hsr_slave_1: left promiscuous mode [ 431.267582][T18170] netlink: 'syz.2.3128': attribute type 4 has an invalid length. [ 431.620379][T13185] smc: removing ib device syz1 [ 431.770950][T18195] __nla_validate_parse: 20 callbacks suppressed [ 431.770975][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3128'. [ 431.823831][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 431.898926][T18189] hsr_slave_1 (unregistering): left promiscuous mode [ 432.203735][T17804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.302423][T17804] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.496610][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.503869][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.518903][T18219] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3132'. [ 432.553511][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.560801][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.798400][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3135'. [ 432.878286][T17804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.890364][T18230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3135'. [ 433.173789][T18230] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 433.251644][T18232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.533363][T18248] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3137'. [ 433.594843][T17804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.599931][T18248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 433.758892][T17804] veth0_vlan: entered promiscuous mode [ 433.798342][T17804] veth1_vlan: entered promiscuous mode [ 433.900702][T17804] veth0_macvtap: entered promiscuous mode [ 433.912017][T18253] netlink: 'syz.4.3141': attribute type 3 has an invalid length. [ 433.945640][T17804] veth1_macvtap: entered promiscuous mode [ 433.952297][T18253] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 433.983860][T18253] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3141'. [ 434.005635][T17804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.101307][T17804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.137502][ T6931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.176587][ T6931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.209466][ T6931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.293834][ T6931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.610189][ T6931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.640976][ T6931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.653901][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 434.834265][T18271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.892527][T18280] bond4: option ad_select: unable to set because the bond device is up [ 434.921300][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.929499][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.147315][T18290] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 435.161063][T18290] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3147'. [ 435.188476][T18290] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 435.427902][T13186] IPVS: stop unused estimator thread 0... [ 435.616775][T18301] netlink: 'syz.3.3151': attribute type 8 has an invalid length. [ 435.684018][T18301] bond0: entered promiscuous mode [ 435.689135][T18301] bond_slave_0: entered promiscuous mode [ 435.707726][T18301] bond_slave_1: entered promiscuous mode [ 435.792398][T18301] gretap0: entered promiscuous mode [ 435.825552][T18301] bond0: left promiscuous mode [ 435.849945][T18301] bond_slave_0: left promiscuous mode [ 435.855636][T18301] bond_slave_1: left promiscuous mode [ 435.902577][T18301] gretap0: left promiscuous mode [ 436.160824][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.170992][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.181816][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.191715][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.199470][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 436.263712][T18326] syzkaller0: entered promiscuous mode [ 436.269264][T18326] syzkaller0: entered allmulticast mode [ 436.365013][T18327] lo speed is unknown, defaulting to 1000 [ 436.506152][T18333] tunl0: Caught tx_queue_len zero misconfig [ 436.644033][T18337] netlink: 'syz.0.3158': attribute type 4 has an invalid length. [ 436.843029][T18344] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 436.854582][T18344] team0: Port device batadv4 added [ 436.865934][T18327] lo speed is unknown, defaulting to 1000 [ 437.338867][T18327] chnl_net:caif_netlink_parms(): no params data found [ 437.475237][T18327] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.482652][T18327] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.490967][T18327] bridge_slave_0: entered allmulticast mode [ 437.499208][T18327] bridge_slave_0: entered promiscuous mode [ 437.509099][T18327] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.516934][T18327] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.524640][T18327] bridge_slave_1: entered allmulticast mode [ 437.533093][T18327] bridge_slave_1: entered promiscuous mode [ 437.575795][T18327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.589470][T18327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.641440][T18327] team0: Port device team_slave_0 added [ 437.651336][T18327] team0: Port device team_slave_1 added [ 437.708217][T18327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.719816][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.753435][T18327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.766874][T18327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.792841][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.862216][T18327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.967708][T18327] hsr_slave_0: entered promiscuous mode [ 437.981800][T18327] hsr_slave_1: entered promiscuous mode [ 437.998013][T18399] __nla_validate_parse: 7 callbacks suppressed [ 437.998034][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 438.272974][ T5839] Bluetooth: hci2: command tx timeout [ 438.312445][T18405] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3179'. [ 438.732437][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'. [ 438.796656][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 438.834714][T18420] netlink: 'syz.0.3182': attribute type 12 has an invalid length. [ 438.843668][T18420] netlink: 'syz.0.3182': attribute type 29 has an invalid length. [ 438.852485][T18420] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3182'. [ 438.871935][T18420] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3182'. [ 438.910570][T18428] batadv_slave_0: entered promiscuous mode [ 438.928736][T18327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.985263][T18327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 439.007567][T18327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 439.040993][T18327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.061093][T18437] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 439.079513][T18437] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 439.096656][T18433] batadv_slave_0: left promiscuous mode [ 439.104595][T18437] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 439.252449][T18447] : entered promiscuous mode [ 439.273221][T18447] syzkaller1: entered promiscuous mode [ 439.279224][T18447] syzkaller1: entered allmulticast mode [ 439.361232][T18327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.413745][T18327] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.474447][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.481696][T13190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.556105][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.563368][T13186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.695869][T18465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3194'. [ 439.751571][T18470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3195'. [ 439.774487][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 439.783738][T18470] unsupported nlmsg_type 40 [ 440.014809][T18477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.088605][T18327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.194979][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.351118][ T5836] Bluetooth: hci2: command tx timeout [ 440.371512][T18491] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 440.391240][T18491] batman_adv: batadv0: Adding interface: wlan1 [ 440.411829][T18491] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.446566][T18491] batman_adv: batadv0: Interface activated: wlan1 [ 440.660144][T18502] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 440.814311][T18327] veth0_vlan: entered promiscuous mode [ 440.863562][T18327] veth1_vlan: entered promiscuous mode [ 440.906617][T18513] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 440.974181][T18327] veth0_macvtap: entered promiscuous mode [ 441.014222][T18327] veth1_macvtap: entered promiscuous mode [ 441.097338][T18327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.128866][T18327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.163667][T13190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.181238][T18522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3211'. [ 441.205783][T13190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.269117][T13190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.310419][T13190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.658046][T18529] syzkaller1: entered promiscuous mode [ 441.687754][T18529] syzkaller1: entered allmulticast mode [ 441.775485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.811420][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.898190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.909891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.089590][T18546] No such timeout policy "syz0" [ 442.147953][T18546] netlink: 'syz.4.3152': attribute type 4 has an invalid length. [ 442.417257][T18572] netlink: 'syz.1.3224': attribute type 1 has an invalid length. [ 442.425345][T18574] netlink: 'syz.4.3152': attribute type 4 has an invalid length. [ 442.441415][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 442.507178][T18573] tipc: Started in network mode [ 442.517355][T18573] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 442.538552][T18573] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 442.569167][T18573] tipc: Enabled bearer , priority 10 [ 442.586476][T18572] tipc: Enabling of bearer rejected, already enabled [ 442.622840][T18579] 8021q: VLANs not supported on vxcan1 [ 443.072839][T13189] wlan1: Trigger new scan to find an IBSS to join [ 443.131013][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.142547][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.150020][T18611] __nla_validate_parse: 9 callbacks suppressed [ 443.150037][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 443.179031][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.198160][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.206426][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.299995][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 443.309188][T18614] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.357053][T18608] lo speed is unknown, defaulting to 1000 [ 443.730507][ T7446] IPVS: starting estimator thread 0... [ 443.740097][ T983] tipc: Node number set to 1 [ 443.840042][T18622] IPVS: using max 27 ests per chain, 64800 per kthread [ 443.985810][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3242'. [ 444.079346][T18608] lo speed is unknown, defaulting to 1000 [ 444.513747][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 444.612857][T18608] chnl_net:caif_netlink_parms(): no params data found [ 444.755249][T18659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.908120][T18608] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.917463][T18608] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.925011][T18608] bridge_slave_0: entered allmulticast mode [ 444.938673][T18608] bridge_slave_0: entered promiscuous mode [ 444.948740][T18608] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.956738][T18608] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.964157][T18608] bridge_slave_1: entered allmulticast mode [ 444.976949][T18608] bridge_slave_1: entered promiscuous mode [ 445.021479][T18608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.039285][T18608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.222540][T18608] team0: Port device team_slave_0 added [ 445.257390][T18608] team0: Port device team_slave_1 added [ 445.280403][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 445.312266][ T5836] Bluetooth: hci0: command tx timeout [ 445.370189][T18608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.379914][T18608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.407979][T18608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.422259][T18608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.433408][T18608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.460426][T18608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.477999][T18693] netlink: 'syz.0.3256': attribute type 2 has an invalid length. [ 445.514667][T18692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.556202][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 445.577261][T18608] hsr_slave_0: entered promiscuous mode [ 445.588409][T18608] hsr_slave_1: entered promiscuous mode [ 445.596091][T18608] debugfs: 'hsr0' already exists in 'hsr' [ 445.603594][T18608] Cannot create hsr debugfs directory [ 445.611090][T18700] netlink: 'syz.1.3262': attribute type 1 has an invalid length. [ 445.704349][T18703] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 445.715662][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3262'. [ 445.722383][T18703] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 445.739184][T18703] bond3: (slave vxcan3): making interface the new active one [ 445.747928][T18703] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 445.764127][T18700] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 445.778685][T18700] bond3 (unregistering): Released all slaves [ 445.898510][T18716] netlink: 'syz.3.3266': attribute type 32 has an invalid length. [ 445.913801][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 445.932584][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 445.944290][T18716] netlink: 165240 bytes leftover after parsing attributes in process `syz.3.3266'. [ 446.224155][T18722] SET target dimension over the limit! [ 446.239042][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3268'. [ 446.343968][T18608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.391556][T18608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.425623][T18608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34325 - 0 [ 446.600924][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 446.647948][T18608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.659432][T18608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.672634][T18608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34325 - 0 [ 446.792584][T18608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.805655][T18608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.817028][T18608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34325 - 0 [ 446.958448][T18608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.983422][T18608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.995202][T18608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34325 - 0 [ 447.041894][T18744] lo speed is unknown, defaulting to 1000 [ 447.274532][ T29] audit: type=1804 audit(1771837813.234:12): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3276" name="/newroot/67/memory.events" dev="tmpfs" ino=358 res=1 errno=0 [ 447.357017][ T29] audit: type=1800 audit(1771837813.234:13): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3276" name="memory.events" dev="tmpfs" ino=358 res=0 errno=0 [ 447.428804][ T29] audit: type=1804 audit(1771837813.234:14): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3276" name="/newroot/67/memory.events" dev="tmpfs" ino=358 res=1 errno=0 [ 447.472411][ T29] audit: type=1804 audit(1771837813.264:15): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3276" name="/newroot/67/memory.events" dev="tmpfs" ino=358 res=1 errno=0 [ 447.611384][T18765] sctp: [Deprecated]: syz.1.3278 (pid 18765) Use of int in max_burst socket option. [ 447.611384][T18765] Use struct sctp_assoc_value instead [ 447.667399][T18608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.686590][T18744] lo speed is unknown, defaulting to 1000 [ 447.687213][T18608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 447.757618][T18608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.816266][T18608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.031467][T13185] wlan1: Trigger new scan to find an IBSS to join [ 448.390366][T18794] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 448.617261][T18794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.725053][T18608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.823668][T18794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.862354][T18608] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.881028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.888231][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.925993][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.933224][T13190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.964647][ T12] wlan1: Creating new IBSS network, BSSID 1a:82:20:2b:68:d1 [ 449.035487][T18794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.119566][T18810] bond1 (unregistering): Released all slaves [ 449.207004][T18794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.356802][T18825] __nla_validate_parse: 1 callbacks suppressed [ 449.356822][T18825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3289'. [ 449.383684][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.391529][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.529729][T18813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.552622][T18813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.772212][T13189] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.803254][T13189] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.849428][T13185] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.875713][T13185] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.920166][T18817] lo speed is unknown, defaulting to 1000 [ 449.942256][T18834] syzkaller0: entered promiscuous mode [ 449.947778][T18834] syzkaller0: entered allmulticast mode [ 450.051112][T13183] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.170442][T13185] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.225037][T13183] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.257338][T13189] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.285658][T18608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.388843][T18608] veth0_vlan: entered promiscuous mode [ 450.408097][T18608] veth1_vlan: entered promiscuous mode [ 450.468397][T18827] lo speed is unknown, defaulting to 1000 [ 450.479496][T18817] lo speed is unknown, defaulting to 1000 [ 450.485002][T18608] veth0_macvtap: entered promiscuous mode [ 450.547458][T18608] veth1_macvtap: entered promiscuous mode [ 450.649325][T18608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.667292][T18608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.690353][T13190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.710909][T13190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.737243][T13190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.778921][T13190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.913048][T18827] lo speed is unknown, defaulting to 1000 [ 450.919221][T13183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.935431][T13183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.053353][T13189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.075069][T13189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.297485][T18848] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 451.668453][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 451.682904][T18870] syzkaller0: entered promiscuous mode [ 451.688440][T18870] syzkaller0: entered allmulticast mode [ 451.807822][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 451.851833][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'. [ 451.976809][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3300'. [ 452.013342][T18879] : entered promiscuous mode [ 452.260955][T18893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3305'. [ 452.358462][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3306'. [ 452.374460][T18900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3307'. [ 452.385541][T18900] netlink: 'syz.2.3307': attribute type 7 has an invalid length. [ 452.397350][T18900] netlink: 'syz.2.3307': attribute type 8 has an invalid length. [ 452.406790][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 452.418343][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3306'. [ 453.028370][T18930] tipc: Started in network mode [ 453.046275][T18930] tipc: Node identity , cluster identity 4711 [ 453.068971][T18930] tipc: Failed to obtain node identity [ 453.096738][T18930] tipc: Enabling of bearer rejected, failed to enable media [ 453.132879][T18936] syzkaller0: entered promiscuous mode [ 453.162654][T18936] syzkaller0: entered allmulticast mode [ 453.807190][T18939] bond1 (unregistering): Released all slaves [ 455.243903][T19002] __nla_validate_parse: 2 callbacks suppressed [ 455.243923][T19002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3329'. [ 455.269597][T19002] bond0: entered promiscuous mode [ 455.275148][T19002] bond_slave_0: entered promiscuous mode [ 455.282050][T19002] bond_slave_1: entered promiscuous mode [ 455.290660][T19002] bond0: left promiscuous mode [ 455.295486][T19002] bond_slave_0: left promiscuous mode [ 455.302312][T19002] bond_slave_1: left promiscuous mode [ 455.387489][T19000] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3327'. [ 456.821704][T18970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.013411][T19008] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.049529][T19008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3330'. [ 457.064034][T19008] bridge_slave_1: left allmulticast mode [ 457.080808][T19008] bridge_slave_1: left promiscuous mode [ 457.102622][T19008] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.209591][T19025] ip6t_srh: unknown srh invflags 4000 [ 457.569719][T19040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3337'. [ 457.668861][T19043] batman_adv: batadv0: Adding interface: macsec1 [ 457.700173][T19043] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.755423][T19043] batman_adv: batadv0: Interface activated: macsec1 [ 457.958933][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 457.977442][T19050] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 458.200469][T19054] bond_slave_0: entered promiscuous mode [ 458.206567][T19054] bond_slave_1: entered promiscuous mode [ 458.244227][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'. [ 458.273953][T19054] bond_slave_0: left promiscuous mode [ 458.279473][T19054] bond_slave_1: left promiscuous mode [ 458.410855][T19059] xt_ecn: cannot match TCP bits for non-tcp packets [ 459.193123][T19071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3345'. [ 459.220377][T19071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3345'. [ 459.774819][T19079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3348'. [ 459.936773][T19084] netlink: 'syz.0.3350': attribute type 1 has an invalid length. [ 459.976440][T19084] bond1: entered promiscuous mode [ 459.982924][T19084] bond1: entered allmulticast mode [ 460.050603][T19090] syzkaller1: entered promiscuous mode [ 460.070199][T19090] syzkaller1: entered allmulticast mode [ 461.741101][T19104] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3355'. [ 462.131561][T19115] syzkaller0: entered promiscuous mode [ 462.137100][T19115] syzkaller0: entered allmulticast mode [ 462.200605][T19120] netlink: 'syz.4.3361': attribute type 6 has an invalid length. [ 462.224150][T19121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3360'. [ 462.474241][T19129] : renamed from team_slave_1 [ 462.598731][T19020] Set syz1 is full, maxelem 65536 reached [ 462.727651][T19138] ip6gre1: entered promiscuous mode [ 462.736438][T19138] ip6gre1: entered allmulticast mode [ 462.889450][T19142] 8021q: VLANs not supported on nlmon0 [ 462.902009][ T5193] udevd[5193]: worker [5843] /devices/virtual/block/nbd0 timeout; kill it [ 462.911350][ T5193] udevd[5193]: seq 19177 '/devices/virtual/block/nbd0' killed [ 462.927130][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3368'. [ 462.939092][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3368'. [ 463.055136][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3369'. [ 463.147840][T19155] sctp: [Deprecated]: syz.1.3373 (pid 19155) Use of int in maxseg socket option. [ 463.147840][T19155] Use struct sctp_assoc_value instead [ 463.303057][T19155] netlink: 'syz.1.3373': attribute type 61 has an invalid length. [ 463.312235][T19155] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3373'. [ 463.350432][T19157] syzkaller0: entered promiscuous mode [ 463.360110][T19157] syzkaller0: entered allmulticast mode [ 463.448181][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3377'. [ 463.469592][T19171] tipc: Started in network mode [ 463.480549][T19171] tipc: Node identity ee735be12132, cluster identity 4711 [ 463.488248][T19171] tipc: Enabled bearer , priority 0 [ 463.508748][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 463.536149][T19157] tipc: Resetting bearer [ 463.549037][T19156] tipc: Resetting bearer [ 463.604307][T19156] tipc: Disabling bearer [ 463.701508][T19191] netlink: 'syz.4.3383': attribute type 7 has an invalid length. [ 463.745861][T19191] netlink: 'syz.4.3383': attribute type 7 has an invalid length. [ 464.064057][T19209] netlink: 'syz.4.3387': attribute type 1 has an invalid length. [ 464.184179][T19216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3390'. [ 464.251879][T19220] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 464.266495][T19220] batman_adv: batadv0: Adding interface: gretap1 [ 464.279136][T19220] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.305460][T19220] batman_adv: batadv0: Interface activated: gretap1 [ 464.430692][T19230] syzkaller1: entered allmulticast mode [ 464.453249][T19231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.476464][T19233] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3396'. [ 464.590298][T19239] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 464.685848][T19242] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 464.715841][T19242] bond2 (unregistering): Released all slaves [ 464.744056][T19239] lo speed is unknown, defaulting to 1000 [ 464.764556][T19251] syzkaller0: entered promiscuous mode [ 464.778372][T19251] syzkaller0: entered allmulticast mode [ 465.020623][T19257] netlink: 'syz.4.3403': attribute type 1 has an invalid length. [ 465.037945][T19257] netlink: 'syz.4.3403': attribute type 1 has an invalid length. [ 465.146858][T19239] lo speed is unknown, defaulting to 1000 [ 465.410389][T19268] netlink: 'syz.1.3406': attribute type 28 has an invalid length. [ 465.623715][T19271] lo speed is unknown, defaulting to 1000 [ 465.944723][T19293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.958964][T19299] netlink: 'syz.1.3415': attribute type 30 has an invalid length. [ 466.038657][T19298] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 466.099459][T19298] bond2 (unregistering): Released all slaves [ 466.151493][T13186] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.165552][T13186] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.212194][T13189] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.223576][T13189] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.383499][T19271] lo speed is unknown, defaulting to 1000 [ 466.661452][T19327] openvswitch: netlink: Actions may not be safe on all matching packets [ 466.876884][T19334] sch_tbf: peakrate 4294967283 is lower than or equals to rate 6829859379779001161 ! [ 466.931047][T19336] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 466.978084][T19336] __nla_validate_parse: 9 callbacks suppressed [ 466.978103][T19336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3427'. [ 467.224925][T19351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3432'. [ 467.398977][T19361] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3433'. [ 467.802066][T19383] syzkaller1: entered promiscuous mode [ 467.814425][T19383] syzkaller1: entered allmulticast mode [ 467.885604][T19389] sctp: [Deprecated]: syz.4.3441 (pid 19389) Use of int in maxseg socket option. [ 467.885604][T19389] Use struct sctp_assoc_value instead [ 467.903896][T19390] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 468.250942][T19398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.280558][T19408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.386079][T19403] syzkaller0: entered promiscuous mode [ 468.406588][T19403] syzkaller0: entered allmulticast mode [ 468.451785][T19403] tipc: Started in network mode [ 468.458921][T19403] tipc: Node identity b69bb2ce213b, cluster identity 4711 [ 468.475661][T19403] tipc: Enabled bearer , priority 0 [ 468.850614][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3451'. [ 468.871882][T19436] lo speed is unknown, defaulting to 1000 [ 469.024950][T19401] tipc: Resetting bearer [ 469.061109][T19401] tipc: Disabling bearer [ 469.102068][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 469.133215][T19445] syzkaller1: entered promiscuous mode [ 469.138770][T19445] syzkaller1: entered allmulticast mode [ 469.155977][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'. [ 469.330215][T19436] lo speed is unknown, defaulting to 1000 [ 469.565774][T19460] sctp: [Deprecated]: syz.2.3463 (pid 19460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.565774][T19460] Use struct sctp_sack_info instead [ 469.619182][T19470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3467'. [ 471.005368][T19538] IPVS: Unknown mcast interface: pim6reg0 [ 471.012283][T19539] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3479'. [ 471.033391][T19538] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3481'. [ 471.052979][T19538] openvswitch: netlink: Flow key attr not present in new flow. [ 471.080574][ T7970] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 471.195313][T19544] lo speed is unknown, defaulting to 1000 [ 471.291439][T19551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3483'. [ 471.569869][T19544] lo speed is unknown, defaulting to 1000 [ 471.796962][T19570] netlink: 'syz.2.3491': attribute type 1 has an invalid length. [ 471.929209][T19570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.037953][T19576] bond1: (slave geneve2): making interface the new active one [ 472.048490][T19576] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 472.059531][T13190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 472.115082][ T7535] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 472.250182][T19590] __nla_validate_parse: 3 callbacks suppressed [ 472.250206][T19590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3495'. [ 472.613454][T19612] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.713442][T19612] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.781086][T19612] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.793670][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3504'. [ 472.819699][T19623] bridge_slave_0: left allmulticast mode [ 472.831891][T19623] bridge_slave_0: left promiscuous mode [ 472.837968][T19623] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.936239][T19612] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.947545][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 473.080653][T13185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 473.112091][T19633] netlink: 'syz.1.3508': attribute type 2 has an invalid length. [ 473.125426][T13185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 473.198752][T13185] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.235763][ T6931] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.284018][ T6931] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.349372][T13185] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.531923][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3514'. [ 473.573349][T13185] tipc: Subscription rejected, illegal request [ 473.796373][T19666] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3514'. [ 473.842730][ T5839] block nbd3: Receive control failed (result -32) [ 474.042784][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3523'. [ 474.111663][ T7453] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.346287][T19711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.383870][T19715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3530'. [ 474.393305][T19716] netlink: 'syz.2.3529': attribute type 1 has an invalid length. [ 474.423506][T19716] netlink: 'syz.2.3529': attribute type 1 has an invalid length. [ 474.446512][T19713] bridge2: entered promiscuous mode [ 474.461224][T19713] bridge2: entered allmulticast mode [ 474.473927][T19713] team0: Port device bridge2 added [ 474.525812][T19723] xt_TCPMSS: Only works on TCP SYN packets [ 474.622340][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 474.626567][T19711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.631791][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 474.672806][T19723] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.683795][T19723] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.691262][T19723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.851879][T19711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.869328][T19731] netlink: 'syz.1.3533': attribute type 3 has an invalid length. [ 474.878887][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'. [ 475.048550][T19711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.196618][T19759] vxcan2: entered allmulticast mode [ 475.311601][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.349029][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.349233][ T5839] block nbd4: Receive control failed (result -111) [ 475.381599][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.476080][T19772] syzkaller0: entered promiscuous mode [ 475.485725][T19772] syzkaller0: entered allmulticast mode [ 475.504897][T13193] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.654488][T19783] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 476.833679][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 477.902829][T19786] __nla_validate_parse: 4 callbacks suppressed [ 477.902848][T19786] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3550'. [ 477.987747][T19796] syzkaller0: entered promiscuous mode [ 477.995061][T19796] syzkaller0: entered allmulticast mode [ 478.008805][T19817] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3552'. [ 478.280930][T19829] lo speed is unknown, defaulting to 1000 [ 478.369321][T19836] netlink: 'syz.2.3555': attribute type 13 has an invalid length. [ 478.529474][T19844] netlink: 'syz.1.3559': attribute type 5 has an invalid length. [ 479.371325][T19829] lo speed is unknown, defaulting to 1000 [ 479.531877][T19857] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 479.539603][T19857] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 479.675466][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 479.695824][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 479.736554][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 479.792878][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 479.945498][T19876] pim6reg1: entered promiscuous mode [ 479.975526][T19876] pim6reg1: entered allmulticast mode [ 482.433458][ T6916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 482.491068][T19911] netlink: 'syz.4.3578': attribute type 2 has an invalid length. [ 482.513429][T19911] netlink: 'syz.4.3578': attribute type 11 has an invalid length. [ 482.541962][T19911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3578'. [ 482.731534][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3580'. [ 482.741999][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3580'. [ 482.755702][T19921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.795872][T19921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.103553][T19934] netlink: 'syz.4.3583': attribute type 21 has an invalid length. [ 483.112187][T19934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3583'. [ 483.127509][T19934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.146176][T19934] bridge2: entered promiscuous mode [ 483.238390][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'. [ 483.326891][T19946] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3587'. [ 483.374335][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 483.996008][T19978] syzkaller0: entered promiscuous mode [ 484.036150][T19978] syzkaller0: entered allmulticast mode [ 484.118116][T19986] sctp: [Deprecated]: syz.3.3596 (pid 19986) Use of int in maxseg socket option. [ 484.118116][T19986] Use struct sctp_assoc_value instead [ 484.349966][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 484.925452][T20017] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3606'. [ 485.340202][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 485.595468][T20068] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 485.608397][T20068] nbd: must specify at least one socket [ 485.802265][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 486.126367][T20096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3625'. [ 486.541011][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 486.782651][T20118] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 486.790794][T20118] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 486.953187][T20127] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 486.970101][T20127] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 487.333184][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 488.047672][T20170] bridge3: entered promiscuous mode [ 488.053663][T20170] bridge3: entered allmulticast mode [ 488.068232][T20170] team0: Port device bridge3 added [ 488.164260][T20174] team0: Device gtp0 is of different type [ 488.183561][T20177] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 488.228215][T20180] netlink: 'syz.4.3650': attribute type 1 has an invalid length. [ 488.244526][T20177] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.550920][T20207] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 488.830547][ T30] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 488.838345][ T30] Not tainted syzkaller #0 [ 488.851005][T20218] lo speed is unknown, defaulting to 1000 [ 488.859958][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.868676][ T30] task:kworker/0:0H state:D stack:26536 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 488.910864][ T30] Workqueue: kblockd blk_mq_requeue_work [ 488.918502][ T30] Call Trace: [ 488.922479][ T30] [ 488.925808][ T30] __schedule+0x1585/0x5340 [ 488.935673][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.947927][ T30] ? __pfx___schedule+0x10/0x10 [ 488.959888][ T30] ? schedule+0x90/0x360 [ 488.965609][ T30] schedule+0x164/0x360 [ 488.974743][ T30] schedule_timeout+0x158/0x2c0 [ 488.980866][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 488.986733][ T30] ? __pfx_process_timeout+0x10/0x10 [ 488.997793][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 489.011000][ T30] ? prepare_to_wait_event+0x436/0x480 [ 489.029816][ T30] nbd_queue_rq+0x857/0x1100 [ 489.034505][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 489.039669][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 489.059427][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 489.065743][ T30] ? sbitmap_get+0x229/0x390 [ 489.075769][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 489.082100][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 489.088118][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 489.094766][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 489.101903][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 489.108502][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 489.115284][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 489.120966][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 489.126293][ T30] blk_mq_requeue_work+0x71c/0x780 [ 489.133818][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 489.145052][ T30] ? process_scheduled_works+0xa25/0x1830 [ 489.156679][ T30] ? process_scheduled_works+0xa25/0x1830 [ 489.163233][ T30] process_scheduled_works+0xb02/0x1830 [ 489.171519][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 489.186928][ T30] ? assign_work+0x3d5/0x5e0 [ 489.193484][T20218] lo speed is unknown, defaulting to 1000 [ 489.199553][ T30] worker_thread+0xa50/0xfc0 [ 489.208557][ T30] kthread+0x388/0x470 [ 489.218795][ T30] ? __pfx_worker_thread+0x10/0x10 [ 489.235007][ T30] ? __pfx_kthread+0x10/0x10 [ 489.240435][ T30] ret_from_fork+0x51e/0xb90 [ 489.245416][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 489.252294][T20194] caif:caif_disconnect_client(): nothing to disconnect [ 489.261165][ T30] ? __switch_to+0xc7d/0x1450 [ 489.266361][ T30] ? __pfx_kthread+0x10/0x10 [ 489.271876][ T30] ret_from_fork_asm+0x1a/0x30 [ 489.289015][ T30] [ 489.297052][ T30] [ 489.297052][ T30] Showing all locks held in the system: [ 489.316466][ T30] 4 locks held by kworker/0:0H/11: [ 489.345590][ T30] #0: ffff88801feebd48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 489.379049][ T30] #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 489.396124][ T30] #2: ffff888026231218 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 489.406527][ T30] #3: ffff8880266e8780 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 489.415969][ T30] 1 lock held by khungtaskd/30: [ 489.420978][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 489.431099][ T30] 2 locks held by getty/5583: [ 489.435816][ T30] #0: ffff8880342330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 489.446119][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 489.457593][ T30] 1 lock held by udevd/5843: [ 489.462577][ T30] #0: ffff888026671358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 489.472883][ T30] 3 locks held by kworker/u8:14/6919: [ 489.478383][ T30] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 489.489878][ T30] #1: ffffc900047ffc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 489.500651][ T30] #2: ffffffff8fbbcff0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 489.510136][ T30] 1 lock held by syz.0.3657/20212: [ 489.515698][ T30] [ 489.539903][ T30] ============================================= [ 489.539903][ T30] [ 489.559283][ T30] NMI backtrace for cpu 1 [ 489.559308][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 489.559329][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.559340][ T30] Call Trace: [ 489.559348][ T30] [ 489.559356][ T30] dump_stack_lvl+0xe8/0x150 [ 489.559390][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 489.559413][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 489.559441][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 489.559467][ T30] sys_info+0x135/0x170 [ 489.559486][ T30] watchdog+0xfd9/0x1030 [ 489.559518][ T30] ? watchdog+0x21a/0x1030 [ 489.559554][ T30] kthread+0x388/0x470 [ 489.559574][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.559599][ T30] ? __pfx_kthread+0x10/0x10 [ 489.559620][ T30] ret_from_fork+0x51e/0xb90 [ 489.559647][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 489.559671][ T30] ? __switch_to+0xc7d/0x1450 [ 489.559697][ T30] ? __pfx_kthread+0x10/0x10 [ 489.559717][ T30] ret_from_fork_asm+0x1a/0x30 [ 489.559772][ T30] [ 489.665853][ T30] Sending NMI from CPU 1 to CPUs 0: [ 489.671358][ C0] NMI backtrace for cpu 0 [ 489.671375][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 489.671392][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.671401][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 489.671428][ C0] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 489.671449][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 489.671462][ C0] RSP: 0018:ffffc900000e79a8 EFLAGS: 00000202 [ 489.671475][ C0] RAX: 00000000ffffff01 RBX: ffffffffffffffff RCX: ffffffff81a21d7b [ 489.671486][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900000e7a20 [ 489.671496][ C0] RBP: ffffc900000e7a98 R08: ffffc900000e7a23 R09: 1ffff9200001cf44 [ 489.671507][ C0] R10: dffffc0000000000 R11: fffff5200001cf44 R12: 0000000000000001 [ 489.671517][ C0] R13: ffffffff8f3055c8 R14: fffff5200001cf45 R15: 1ffff9200001cf44 [ 489.671528][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 489.671541][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.671551][ C0] CR2: 00007f84cc7e82f8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 489.671567][ C0] Call Trace: [ 489.671574][ C0] [ 489.671583][ C0] do_raw_spin_lock+0x12b/0x2f0 [ 489.671602][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.671623][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 489.671642][ C0] ? process_scheduled_works+0xa25/0x1830 [ 489.671662][ C0] process_scheduled_works+0xb02/0x1830 [ 489.671692][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 489.671722][ C0] ? assign_work+0x3d5/0x5e0 [ 489.671742][ C0] worker_thread+0xa50/0xfc0 [ 489.671773][ C0] kthread+0x388/0x470 [ 489.671788][ C0] ? __pfx_worker_thread+0x10/0x10 [ 489.671805][ C0] ? __pfx_kthread+0x10/0x10 [ 489.671819][ C0] ret_from_fork+0x51e/0xb90 [ 489.671840][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 489.671857][ C0] ? __switch_to+0xc7d/0x1450 [ 489.671875][ C0] ? __pfx_kthread+0x10/0x10 [ 489.671889][ C0] ret_from_fork_asm+0x1a/0x30 [ 489.671917][ C0] [ 489.897398][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 489.904366][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 489.913485][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.923548][ T30] Call Trace: [ 489.926833][ T30] [ 489.929856][ T30] vpanic+0x56c/0xa60 [ 489.933858][ T30] ? __pfx___schedule+0x10/0x10 [ 489.938810][ T30] ? __pfx_vpanic+0x10/0x10 [ 489.943351][ T30] ? __pfx_console_unlock+0x10/0x10 [ 489.948644][ T30] panic+0xc5/0xd0 [ 489.952453][ T30] ? __pfx_panic+0x10/0x10 [ 489.956960][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 489.962417][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 489.969038][ T30] watchdog+0x1023/0x1030 [ 489.973396][ T30] ? watchdog+0x21a/0x1030 [ 489.977876][ T30] kthread+0x388/0x470 [ 489.981959][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.986734][ T30] ? __pfx_kthread+0x10/0x10 [ 489.991338][ T30] ret_from_fork+0x51e/0xb90 [ 489.996051][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 490.001166][ T30] ? __switch_to+0xc7d/0x1450 [ 490.005841][ T30] ? __pfx_kthread+0x10/0x10 [ 490.010447][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.015326][ T30] [ 490.018833][ T30] Kernel Offset: disabled [ 490.023159][ T30] Rebooting in 86400 seconds..