last executing test programs: 4.905736246s ago: executing program 2 (id=3679): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) connect$rose(r1, &(0x7f0000000500)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @null}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @local}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee, 0x0, 0x0, 0x40041}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x8ef718c5b8f2897f, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001c}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.585958516s ago: executing program 2 (id=3683): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140ffff00"/64], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r9, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) 4.414808934s ago: executing program 1 (id=3685): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x1, 0x0, 0x4, {0x7, 0x0, 0x0, r14, 0x48400}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x5, 0x8, 0x40, @loopback, @remote, 0x8000, 0x8, 0x6, 0x80000001}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@RTM_NEWMDB={0xf8, 0x54, 0x0, 0x70bd2a, 0x25dfdbfd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x2, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x4, {@ip4=@private=0xa010102, 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x2, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0xa}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x3, 0x1, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0xe0e3950d7801cebf}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x3, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x2, 0x4, {@in6_addr=@private0, 0x800}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2408081c}, 0x8090) 3.485437253s ago: executing program 2 (id=3691): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xfffffc96, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x8, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x20, 0x20, 0x10, 0x7}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0xc}]}, {0x0, [0x30, 0x2e, 0x30, 0x0, 0x0, 0x2e, 0x61]}}, &(0x7f0000000a40)=""/4096, 0x2d, 0x1000, 0x1, 0x8000, 0x10000}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b00), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000ff030000050000000400000012aa0500", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000000000000001000095bc56250000167400df21be95b89d39af28218b53415f6349ad1e1d7b6be909b97e9b129547fb9b819562227d07bbd464a23826dc6c7541d0d07231837eca85df4d79c79d0f1e494e848e627587016a2fcb6445b509630c004b1f3643ec4f27641fa8745fbc6e98fe06324e00cee938aec7812063d611a4db4bf7c95a70831f054c2686487b180fc2b6d24e7c12f19356fc5e5baaa7ffe4f115217831daffc6e94a002a3ce8741118f192d7", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 3.321158471s ago: executing program 1 (id=3692): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r0, 0x5000}], 0x1, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x6, 0x1f, 0xfffffffffffffffd, &(0x7f0000000000)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00.'], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000060601080000000000000000010000050900020073797a3000000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x0) 3.259656634s ago: executing program 2 (id=3693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd70000006000000000000000200000001000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.191166567s ago: executing program 1 (id=3694): r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) r1 = accept4(r0, &(0x7f0000000080)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xfa, "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"}, &(0x7f0000000280)=0x102) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x8, 0x6c89}, &(0x7f0000000300)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x8000) connect$phonet_pipe(r0, &(0x7f0000000480)={0x23, 0x0, 0x10, 0x7}, 0x10) r5 = socket$inet6(0xa, 0x1, 0xffff9322) getpeername$l2tp(r1, &(0x7f00000004c0)={0x2, 0x0, @initdev}, &(0x7f0000000500)=0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000640)={r0, &(0x7f0000000540)='/\x00', 0x0, &(0x7f0000000580)={@align=0x6, {0x6, 0x8, 0x2, 0xa}}, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x1}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r1) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000c40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000700)={0x4e4, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x864a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33c2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0x18c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfc000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xbf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x34e4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5004}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x84}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9bb}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4698}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x154, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x160a0bbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec74}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfed5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x884}, 0x20000010) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000001840)={{r5, &(0x7f0000000c80)='`]&@\x00', 0x80441, &(0x7f0000000cc0)={@align=0xc000000000000000, {0x7f, 0x8, 0x8, 0x7}}, 0xffffffff, &(0x7f0000000d00), &(0x7f0000000d40)=0x4}, 0xa, &(0x7f0000001700)=[{0x3, 0x3, &(0x7f0000000d80)='broadcast-link\x00', &(0x7f0000000dc0)="817b2c318b37fb008c3a0028c47f5dd0a9826330178e69ce5b6dd1621d73d83901407ffe3616014ab18a284f8893589bae5531705cb9c0ee88058a8e298f87d12b0a3a1ba29dc84d4f970320592c71d68729602b479a26a29566ac289a79479e849df4ba7b5f42db9eb087df3264ae104b81356a809e5d72fefafa49b0ebb5cee1acef4ef98546c1cdf61f1e783d882298be84ae9b17bd6ad31b3f3fc67e6031d94986c7441119f0f5a186102ea9fdac76a4abe31f3492a5f990fd", 0xbb, 0x1a}, {0x3, 0x2, &(0x7f0000000e80)='\x00', &(0x7f0000000ec0)="97b49eccbd755df433340f3889e19b624a12c3069ef434173490f74b9a5a08156a58a39a0117519d9ab6a9a2133e8548df250af0b0b2b4f9465e9a608792058f76a01636d39950218221da037168cb167bfdfb3b2af8890ea53f4ae220416a52b0191640766e8cc6fe5eb92e204b79e797093b4653710df402014df3f7ba76c48a04a2af82b906bd0786c2b6", 0x8c, 0x20}, {0x2, 0x2, &(0x7f0000000f80)='broadcast-link\x00', &(0x7f0000000fc0)="05e3bb76c24612d48d63a581340d1a3b343400fd7a55634f2218c70dab8c0287c26d43d78815d282314bedfd29b443c67d610b86a9d25bb503c9e2b8c666c8c397346d37cc82ac0b1263c7225f6d36d2caefa47d643a959a83fe035e6141e43851dd3ca4698785836ad745e341f8a3f14a9f569c6e180ecf9f6f50274da78ddabcb55de302ff2115b3ed784b75fdeda08d2276f78c4873260a1f1cb6e141b44f726182bd6bdcca396b488e59d69d87bf2430b76ecbd0728acf6d43b472cfb80f0b3c148911960ebf431c09c70fff83c4b4a6cf9fb383fd04af53e0d64fbd354a65346913366cd28b6d0e803d", 0xec, 0x18}, {0x3, 0x3, &(0x7f00000010c0)='\x00', &(0x7f0000001100)="c2cff047b90c45a19210a732a2cc957cecab0cc236aac3065f0a3895f801176f685e10cbe62ff999f46c37b45c6ca9d4e153a9514fbc0d1be5a97b634ebbf8df689340a6982d72a87fef6d37034a698561c21ca91e218898d1506cb3331ae044ccfa7d7fb922c07376fa2817239c41d4ab602380bf21527b78a022355c20e88f65f1ae5dd636d8682c018ee51f55a759e60948b194674f05823f4908aa7178f64ae793f0b87a54a799b8ddf1af2c98316a2ab7fe26444bbce5563b8846cf7e03a153ecfcb05371554fd88fb08a43d778ad0012aa5a8cda1efe7239b49a", 0xdd, 0x18}, {0x1, 0xba, &(0x7f0000001200)='\x00', &(0x7f0000001240)="bd068fe683433b6c", 0x8, 0x20}, {0x1, 0x5, &(0x7f0000001280)='\\($.#}:\x00', &(0x7f00000012c0)="8b0605f51a71b55208865cf4839d971cba6d622ab05aa40939e83aa82a2e34873f8fe0cc3da761c4ba939d102d1e41367f0c91ae0f0696cf37e5525588964ba6d0035533a852778780077c90034bfe0f", 0x50, 0x2}, {0x2, 0x6, &(0x7f0000001340)='syz0\x00', &(0x7f0000001380)="60eacb482c5776216d6a46a0f8843af131b86f7b45767f835e56f482e779dfa32d6f7c55ac2978280a58914b033f63751903de15ac235bef71e4a158546e4a58e53fcf2beffb7ad66d08cf3951d7b1c53e3050c322fd004ae8ae50158bbbacdaa46ebf00eaca2db26e1b1501c54fce1f8acf120d43b826482cedbefdb154b5c53b85765a69c230d898dc2e75347ea67c89b9f19b2c0d36d63dca2e956d2c4f235082726a2a630f7773e4fb6e4607231773147557732b0a809ea36190056ae3cb91374226b2c9dd3c58609587c0829a19bdbd8f0d98a97ec6d93ea23ec673d84ba10e9aba135906e1a959b5", 0xeb}, {0x1, 0x3, &(0x7f0000001480)='}-\x00', &(0x7f00000014c0)="29c9827c266423545868077e86c139e340525f89d2efa39316e9350d3088855bb61a3198ef94a10bf72744ef9badf983723b77d32ce39be97ecf8c741a6200b6eeaf3e", 0x43, 0x3a}, {0x3, 0x1, &(0x7f0000001540)='\'#\x90\x00', &(0x7f0000001580)="539bb9a793da83a80615b5cddfb6fefab8bc393dc541de6a94e9d31538", 0x1d, 0x2a}, {0x1, 0x9, &(0x7f00000015c0)='\xad/\xc9{.^\x00', &(0x7f0000001600)="0ab73e6f732c26aa9b278190f5fd33c7872d8ae5d440d7fbfd372e359e7b577d5544837d1e7dc7370290da9dbfaa32a325cff94b8fe41507de35e841943f67b673046950e35ae7a5c63436505a6ccac9a484b31d8c3c20cf91f4836e8bb50e9ecb7e879d8ebd16a10621e7b32443668db4c1342b6c8d3c19346abdb001cfd4e7f7948e73ebbf9e022d2cc5b3fe54335f2cedc9ce9c6fb5b7e8e5c083539f731fff9ff07fb5f9752c550cbed0184f6e3f1bf5762d55022928bfdc135dcf8c57f1be8e70180a3e37938d", 0xc9, 0x2}]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000018c0)=@int=0x3, 0x4) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001900)=0x0) syz_open_procfs$namespace(r9, &(0x7f0000001940)='ns/mnt\x00') r10 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001980)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001a80)=0xe8) sendmsg$nl_route(r8, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=@getneightbl={0x14, 0x42, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001c40)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r11, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, r12, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000d) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r14, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4008000) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000001e80)={r3, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x1}, 0x90) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000001f40)=0x4, 0x4) 3.049719296s ago: executing program 2 (id=3696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18002a8382b50d9ab39e2be605bf1800f06100"/34, @ANYRES32, @ANYBLOB="000000000000000085200000040000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x3d, &(0x7f0000000300)=""/61, 0x40f00, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x6, 0x8f03}, 0x10, 0x14466, r0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xfeffff, 0xe, 0x0, &(0x7f0000001bc0)="c45c57ce395de5b289f07d637a22", 0x0, 0x29, 0x0, 0x2a, 0x0, &(0x7f0000000700)="30045c262ad28e566e825e85fd10a4155eed06a0190acaf8796c7e109250fca9c0086cbc80aaf48a1c6a", 0x0}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x206500, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r4, 0x0, 0x4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='\x00', 0x0}, 0x50) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r3}, 0x10) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) 3.007971369s ago: executing program 4 (id=3697): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0"], 0xfce) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000280067b1fa5"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d030000000000000000130000000c0009"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x28c, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fb8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x163}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x403acc02}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x177c0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x139}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5ca2}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf1b7eae5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8a0}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x25}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$netlink(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)=ANY=[@ANYBLOB="44000000260023070000000000eeff003200a98057d753865bc026738a232100eb8808002000", @ANYRES32=r5, @ANYBLOB="2db88f6f88ebb2fd1bd786312d0c165c579777e85d0000000000"], 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.750472738s ago: executing program 1 (id=3698): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a00030014000200fc020000000000000000000000000001080017004e234e231400010020010000000000000000000000000001"], 0x4c}}, 0x40000) r2 = socket(0x2, 0x1, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="f71e82a5296aa5256f53f4d92c3710e0efe6055f1cc164eb1cfa9de84949a7b532b282c3e48eee48f7e2706d2b98d0792864488d32a3359d29f007caa5649eb20ea4d13df59acf090c4980a06db35e2ea8aabc7af6", 0x55) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000e200"], 0x5c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 2.51461699s ago: executing program 0 (id=3699): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r2 = accept(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd39}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x4000040) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r6 = accept4(r3, 0x0, 0x0, 0x80800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0x6, 0x6, 0x6, 0x0, @local, @remote, 0x40, 0x10, 0x5272, 0x5}}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r16, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060100080020000402"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000480)={@loopback, @remote, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000500)={@remote, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', r5, 0x7, 0x8, 0x100, 0x2, {{0x15, 0x4, 0x3, 0x17, 0x54, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x9}, {@broadcast, 0x3}, {@multicast2, 0xc40}]}, @timestamp={0x44, 0x10, 0xb1, 0x0, 0x8, [0x8, 0x1, 0x4]}, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x2, [{@broadcast, 0x7}, {@broadcast, 0x2}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000006c0)={0x6ec, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfff8, 0x4, 0x5, 0xc6dc}, {0x0, 0x3, 0x4, 0x3}, {0xb080, 0x0, 0x3, 0x1}, {0x1, 0x0, 0x8, 0x6}, {0x2, 0x1, 0x5, 0x7d}]}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffec}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r9}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc, 0xe, 0xfb, 0x1}]}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r18}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd9}}, {0x8}}}]}}]}, 0x6ec}}, 0x800) 2.4718733s ago: executing program 4 (id=3700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x2, 0x80, 0x7, 0x0, 0x9, 0xcd}, @x25={0x1, 0x3, 0x27, "8f373dcbc5a77b1ef8eaaef2a21ff9104a5a3fac2f0e7d2dbd6953713b752cb89adb23d2a60d"}}, 0x33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x26caf000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb6fb585}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.328958154s ago: executing program 1 (id=3701): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1, 0xf7, "40fca26c4035b060bd4d0ad445078eee6d64bbe45537271f00ce0139d18b810daf7e9f86a25f563c96e717b376cddcd6c82446cb998b5b906109e7466a7ddc61f9bf203f42a0bd553f0c97340fc85ac58d9e319d47033623ed4c8c0dbf7a4f41382fe234da01d5cb546ac146c16a99ff3255fa8c27ca549c70792129a07f1847479b78ce0a506b0c2af69daba7466767adcf091f2acd11f03573ceca2961ec988489ce0e8efb562d5ff0d9f9722abed2ec4571415d5fcf3cd9c0c6729e81f4f3f2d2e381d74edaeb9d85ef5d34504b1ce1e1b366473be60672b42181c51b33c0dca11913945d611832e1f2d8b75e81a81972934d4b67fa"}, &(0x7f0000000280)=0xff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x48}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.297055176s ago: executing program 4 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c00d59d82970000070000000000001104000000080000001000000003000084080000000900000001000000040000000a00000003000000c90000000900000001000000040000000800000000000007000000000e00000003000085030000000800000005000000060000000700000005000000d80100000200000003000000893900000c0000000000000e04000000020000000b00200000000011050000000400000000002e2e003000"], &(0x7f0000000380)=""/193, 0xbb, 0xc1, 0x0, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES64=r4, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRESOCT, @ANYRES32=r3, @ANYRES64, @ANYRESHEX=r2, @ANYRES8=r6, @ANYRES8=r0, @ANYRES8=r3], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000020130800000000ecca0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000001812000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x5}, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r11, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="93", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800070000000000840000005b0600"/24], 0x18, 0x40}, 0x6008045) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000069000000b7080000070000007b8af8ff00000000bfa200000000040007020000f8ffffffb703000008000000b7040000010000008500000082000000184600000500000000cc182150fc37509c619f06eaee2fb0efadc4e20d8a59af2c7fdaafbe5a7b55e8", @ANYRES32=r1, @ANYBLOB="0000000000000000180000000a000000000000000400000085100000fbffffff8520000002000000184200000000000000000000000000004440f0ff01000000"], &(0x7f00000000c0)='GPL\x00', 0x7ff, 0x9b, &(0x7f0000000180)=""/155, 0x41100, 0x2, '\x00', r5, 0x25, r6, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x1, r10, r11, r8, r9, r10, r12], &(0x7f0000000780)=[{0x1000, 0x1, 0xe, 0x2}, {0x1, 0x3, 0x3, 0x6}, {0x0, 0x4, 0xc, 0x5}, {0x1, 0x5, 0x0, 0x2}, {0x3, 0x2, 0x8, 0x4}, {0x1, 0x3, 0x6, 0x9}, {0x1, 0x3, 0x5, 0x3}], 0x10, 0xd854}, 0x94) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r1, 0x100000000) close(0x4) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r13, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r13, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) sendto$inet6(r13, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r13, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x10, 0xffffffffffffffff, 0x4000) 1.289740094s ago: executing program 3 (id=3704): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000001"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x10) 1.245464616s ago: executing program 0 (id=3705): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x30}, 0x8080) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x30}, 0x8080) (async) socket$inet6(0xa, 0x5, 0x0) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x24020400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000000200)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000500)=0xffff0080) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8) (async) 1.235972021s ago: executing program 1 (id=3706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="110027bd7063d4a74330846bf30d8f07040006dcdf250100000008002714", @ANYRES32=r2, @ANYBLOB="44000280cbfc010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x400000000000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x854}, 0x4890) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001"], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES16=r4], 0x50}}, 0x200c405a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="0000000014", 0x5}, {&(0x7f0000000640)="feb07edb23c1617b98b467152f0b55fc271c486e55bf7147a4dc5e027ea375a1235cf520a733dd54609ea9cb0318f0dcf81c96bb9e716fbf17c5a14c2cbc01d5088ba5a6bbe2ad03886e5ec27c", 0x4d}], 0x2}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000002c0), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0xffffffffffffffff}, 0xd) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x3, 0x0, 0x818}, 0xc) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x20008880) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000102010800000000000000001e0000060800094000000007080000000000000588000a807c0002801400018008000100ac14142b08000200ffffffff0c00028005000100110000002c00018014000300ff0100000000000000000000000000011400040000000000000000000000ffffac1414a7a7cdadedcdb5f77668113d722b4e7c308d811bc9878ddd5dccaa0c00028005000100840000001400018008000100ffffffff08000200ffffffff0c000280050001"], 0xac}, 0x1, 0x0, 0x0, 0x20040004}, 0x8810) 1.077814001s ago: executing program 3 (id=3707): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) bind$ax25(r1, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x700, 0x10, 0x4, 0x0, {{0x8, 0x4, 0x1, 0x38, 0x20, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @local, {[@lsrr={0x83, 0xb, 0x3c, [@multicast2, @empty]}]}}}}}) 1.018515692s ago: executing program 4 (id=3708): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x1e45, @mcast2, 0x40}}, 0x5b5c, 0x101}, &(0x7f0000000380)=0x90) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 954.409491ms ago: executing program 3 (id=3709): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x0) (rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) close(0x4) (rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}], 0x1}}], 0x1, 0x4000000) (async, rerun: 32) sendmmsg$sock(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0xfe, &(0x7f0000000a40)=[@timestamping={{0x14, 0xfe, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x3e}, 0x408d3) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x34, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x59}}], 0xfffffffffffffed7}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 902.069029ms ago: executing program 0 (id=3710): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x80}}, 0x1c, 0x0}}], 0x1, 0x20004855) 819.866653ms ago: executing program 4 (id=3711): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x20, &(0x7f0000001c00)={&(0x7f0000000b40)=""/4096, 0x1000, 0x0, &(0x7f0000001b40)=""/164, 0xa4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x5, &(0x7f0000000340)=ANY=[@ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, r6, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b3}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 785.242628ms ago: executing program 0 (id=3712): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)={0x24, 0x12, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x3da8cb51e639b63a, 0xd, 0xb48c, {0x2, @usr_ip6_spec={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1000, 0x82, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xde0, 0x2db, [0x800, 0x386a]}, @udp_ip4_spec={@remote, @empty, 0x4e20, 0x4e21, 0x4}, {0x0, @broadcast, 0xa0d, 0x3, [0x6, 0x800]}, 0x3, 0xffff}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6}, 0x94) 721.41408ms ago: executing program 3 (id=3713): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0xaa750000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x48}}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) sendmmsg(r0, &(0x7f0000005a40)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x3, 0x3}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000240)="b1b9747792edfcd5ae4f756f2a71f2e99c4cfc9c819641ecb8d67d9284f7c94fd1859919cbf816312974edf051682ab25ffa8cec29aaa7783073217824280709a1cacdd5dbc01402e2788f02257f2344aef4ff642ed8ab74de20be35b632a2a6819eb6f2b643706629fd088627e8c2282dc75784b83e5e643b0f3a164cdf75c3ccb309323ca80c7c756e70b8a0c98971abd5a5b9d5808d122487495569a7e58a96843f859f10035dd88dc1e0c9b6adbfc48761dceb89464cd3fa855f9b8c06a40ca7", 0xc2}, {&(0x7f0000000340)="95b13faddb1233fd93d255e8da5a1a92a88f580e6478fc2e6848e0e191f8a0484864ca726ec4977d9438", 0x2a}, {&(0x7f0000000380)="86bc4f2f32842f0d1852742b24bf560e0802ae98f26fc21cfd619c2f6b47d970f7566ecfd53387f236837f4c094da5792eb114f4b9a86dd97e528ab25cc0", 0x3e}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="f0d9e198fca21ad6ea5da508fdab339e044ceacb2c3eeec202261308829afbc3ff4962f2ae189f3a62cd72222672b0a07fcbe22c91d70c69cb2144aff2fc0919a81f3880e05211a835b5b2d6f017f134ac800d2521524e51b60bbefbbc7a9c5bc0273f6ff3ca8a2a274ec372304d6229e830b594ea5626322a47abb87151b0d7640ddef5ae340a6ed3e5c753288e2d2d13242e3e7f34eb7d4384b07b99c167b1464e46f46a990ce089de7ffe6923210aa0d1ff27e97ccf326e299f92e11e299e0e1a9992c44d53d50fb21e76c71e0b27c811f8629b58d55483bd2e80553f7d96a2bcd3fb99f1d8d3a32d5ed6d09ec2812c1b7947cb555cb843bce3d7f13c670e07467f9b6447a227e02b5284f1d7e9b7b5d81a4acef93930d6307aa1d3c0d5c2d27be40eb44365b187f8728fe45277f0979f6970042f6de86ce2ad97b6f97ed04a54a6b5ff0bdc4c59b957eaffff9f3771af4254fceeb78d74df8b1e6f9b8d6c57b31f357873a8be2305f7e71ff1a26665c58ec4dfd343674d4bb688f78ed4da1dda87167939e9847d304bddc93c1f2bd4331691ce68c5e778bc9ca52bc37dc33f1e0f6692b0c10bb46ef6d36bba9a9d0f2c80be417e42b39aa022ba2bea70530abb25576ca3145ec169edbfe5a2c1e4f6fc9daa75a9ad7dd33afe0d31fd8f59d95637136a1c2accdd204837fa173a463914ac83d749554dcc91ee21dc250cacac07fe26df233958651a197907bf7a4f3bcafec43f96a5d887283e875520d3ce60b13a181a8233039aea205b2b1cee67cb28a1d3eb6dcda533e04ba72df08f62d47753a836e74c66c6570835680c811ebe67f9916fb292138eea5f44efa9f3901153483ff617c4a2eb19e889caa23992b8417f4b746735aae4360d7a811bb5a1afc8b73ddc7e0da635c06edcfaa72e54a5000619ee85a2b4a5c1df3ddad255c74b0db4f7e3df10fa9c2b928cbc1cf82a444d4430b8e1017716736ab24d07155bc54f9c7388cba96a015e1352078d135984bf500fae92d63ea56c215e10967925f2d4f14bde801780639a8e279b5f2aa37e0794b64756996e518e9be2f861c880948008171de42ade2c4c905844fe2fad7dab2fe8a3ae56a78104adfb98305e8969d55dc311926bb58aa59e06a661489bdf5914d671f0d6b6c0c86a769aa9b290239f243bc4c44171d291b71b46ef71bb7d4ebe1ffe93a08f22aa2ff971cf1b89653d035dd911da733fe06e511cd861a9682b9e163830489bd365bbbb4a9f640c0d9c50338fda18bca257c6f2ccf90b4d411839bc6c4a677a89e35724d5787878a84cb50525cad2fc6dfdacde3d7a0ac7778d61b1e69b6d85d9284901284a8850dd6383bca461a0257d0e5a8aa4f06e7b2053147b47cb33f6b5b7e60ae0db6731340cd5c9499717536ff04aeb9a30c14e590866bfb3a467903cff3fb9ea19226ac28d6d276708624edd4761079c93fed8ad153e4a966097c57f4e06bb42b5523a69a2039c8bb80c17106ec4939d59155485067fd26cbf103fef88b3d00336ba21f2176c7ff29cbcb3d609ff648dd4efeba5d023fb851a120e03c1b39441539b1ec37c749d4237eb05aa3b2336b8ec1e5754640142f47ee9619c7d68c471efa6c15ba244b8986b33e285f4c1e6d838063035af703ba15d7f4c9deefef3e25b5bdfc495c16fa3b9b02ed29118bf31579736e0a1de25b8b7de60e7cd429b88300a1b1abfcd58c8aa3d589ec2b113a461dc40915caff823d90c845c8a88dca559921d43d890f0fa557168b62394e0b10e300c313b25c34eec4cbd154e2e24bef0f70c5b0d00499ec49e04bbcf8cfcd5e34366b706be2609698079c247faaf0eb2eec3274988c6163fca992392a10d48550ed6f9b9b2b22f61f7b18332ccd429177f072976525e52843f73da7daf4f2f2ed9392987cdb3d58c0a0e4172ebf8c65655846bade741dfaff83e5a9319f792700019caf364184b98df6c0a5836bb671676872cb12713d55f3473073b840e25b98b861b6f78b5a96e21f4aaf06a5b8f8ac82ad059eb3400e3ce52de550a45e35417d82d83b4bf034449d3d8018a8a8f4ce0fd73e4ffb736922a1e40561e5e74e9d97247b9d60588104510bd5a7dfbb3096deadde2903ed23c96aedc227d55d5b0a6d3367c94fd3b62cffb4b0e4769592987d959e7414b8e21e8b9bbc12d6b9ec8b86f9abcbee6e40c4a782c04d1b4475d3320ca3bc26288a98efd871cd19e9f7c2e0f173bc5cf9249367f51099d81e9b08642e2cf82fc4946b566a2ce1d6704ea65d8108f350602ba147c7319369a6852989cc697ae35bc38dae755a379888bc52f0399aaf87da17774788d604f5cace5ab69bbce8fefd058aff0dbceebd4157c6bfb8eac8494d2e59e23fcba0b8844dfdb7d9d87ef6a516622f8fda955f7307f766dfbf354704e12f1d11491e94b987e72db54a220f6f7ee49f30ffc384376ada334617527f3361ff4c69ca91a8f4e1bab35158b716f71bcf2cb047f405533b939a29a4d1e329c5288339dda165fb030906a69f8ec38b6eb90a28c63ce78c1f060687b370cf9036d81cf86fd5db69ca8e4d32f671586912264e93ade187515239ec57d7933e63b942eea880ff976f7319a71e7a72cbf2504b1eda3e5ea4e8f1abdb87d0893d1e89504cab5d1f2dc58fcf7c0e511d8d4caa1bfcf4cff160c7eabb950a285bdb79e3cb19c2e5052883a7a88574d22700ebd6c11980a2e6e98b1babba4236e80bf51c70a3322a8a314eb94849472e00bd618125978a1ac093bb61e1804046b3bc4f75c74646ae8a11b4e8603e21be235342047504b652d887cbc98973dcfb9ba6c8fd75b544b46b7a059ec35d0e58889fd536a93fb0120b73f49daa1c6a48e411bde92b09cbb6edbd0e0fce40afb85821e156aa46688a720f9b4c809beed1db7ef7cffbf69a417ed5dc5a1eed34c7bee438c2d8cc225a55bd19f761b2c8c056d9d96d7322243b8d9cb7f830e7ba70eb80523d1420a0d0564cf279e05d1ee7ba46721f5fffdfbeb4f447817f316a0be5322f2d04fbf8ce33d91a4106c917da4f7bde01519ebd41db45d69b1cc838b65e745602d3938b900eef20468899f9312f20357f3eb62a2a8b0584838fd9e73a56aca05072dad01400fa8ff516c9423a8e60e912c8fcc92d847718d4fbadf9bb3a1f8fdd143c907e3712de07d899d8c1460d6ac95bfdeacb48a34616702530b5fa98bc43fc73622371acd1dc5e8c47d691c5ce2f28e90b50da8fc1f25583f4e93f99381008aad4610660c4f566adffd50f5d130063cb8f872f2b87826a45e610e14afdec6f3ce65dc5a640b68d54f49746f256380f4286b4035aaec4bab31b8fe75de5989a337a1830e0d85b925a8c8c6405457ac05e0e5236515ffb8096ec9dbb45b53b2978b61c9641035d87f6e4dadb8568f74a0d6bcea99d93a89e39bf9922a89df45fe54c9ec92ca8107774afcbe4b23d98e18c148b376e6249fda7147bfd2170809e08f478cf7407205f17ba70677535f09d2e37ef41c67a5f71252a5fc7db1af50fcdbcca9e4c51d46a05d64596b3f34ae6e72195a6baca869d4d6bffd221d42bd2dca0d1b4c3cef1d0b25c28b1efb52ce72eadec64c0661a1595ba48840346f3c6b2f3cbf485f1b38295cab8a58f0f0f564f596e82cb592533986c2328516188152a2e680eeaf510f6473181b7aa387391a3f141d7db4514139bbd7d271c28ff67bf648237f7f848e1250bff91953710a265ea67c54ee0969c3212d4be456bffc138e87051c19de0976f78c81ca305a121b3ba34f2729b123acccea3cf044841b36c67b18bb395055b570a16630c1601267410da3b7124d8f831f58b5c46ff51c9925c7ac829e842971c9ecec27f40c0707dc7a96d06f57651c923afa286a24afc95ec6bc85c178118890f69dba5ec6c93cd1f881074e77e9ca2cc24b9ecc6d6ee62872084d7014320968e9b1017a112e1fcf72bd739575edbc7fcb2d552402807b742bee6e4b58cd367d048b96d161fe08fe088431d6afd517c5104d8355c233bf6cd808150c331cf0c69a230931abd85fff5671b5501653636fd3c1a63fe24e6f3d762eea9a793a05b625f42e54b51d873104f11f9ea4ddce61e4b88d9a53fcb86c6f0d88a3457349c171231c145cfcb50b007abd94408368d705a031a8f64ee08018fdb332918772f540596153c47944a106b0c2a884fb866d6e16448a4b044a09c51bb03ccb73384ce5990a1c1bfafd7e482cc282568d983ba4a1477ba6a39368a6dea60548d6d46a3ff251b8dec48685485f96c04b5cad822221279aa3c41e05be8b4b8956ee34c6ea0d6f785b85302fdbe9ef7110efa35027bbc80984f2be665c69fde69b666863854280b52ed463fa68485614426a1fdc7a813c46225edad5a7ed494e1d50327c1e7b8cb70430a6d9c744b4bd7508f3b0c3bc414cefd8a36d1aa3ada56e217926fbf1bcf90e55394e03c2354b3bd396a93e66299e90204dc4f04d513ad6ce397aec3da87d8fb8f14f559bc21bf77ef90cf4f7393596af9e9c8cef290ea4a4f680f38044b8e2118df49e95b20573cb434ac8b11cf14a40708dc485304737974c46678769b6947162f1861909baa68e946597c9f0c9182e8885836545a08bcc8424bc6fd1a28dc2df36b7cd085829f4a2bfa72f37d6d4148b019d0499e61501cc4ee853e288ac0b052ba9769d9919d90d8d7caf7c6495f4aaf7db5d87749b81b9903c4fafd5118bce38fd2dd9554cb7f8a35eaeada465f73329b7ee0ace25cbfa167a34df03105e30d356af3bc038e77cf4c8bd48fa26eb5918e115b4c9ef7f70dc61c437527b0ea8162a8e3922922aa045535015bf798ac9653c720e8d1972509a34d5388b9c981f554821240110ee934ac76f926ab14f25c9576aa8f637e744942ffd29e40df6aff50d413f40620813ca419ac02707524e0423882f2b3f7881683ff605d10ed172757fe424d42405f830fef521bdb24cded2fe0ebc4f2df04f0689b3de4dc5ce3989ff40fa8523f3a48ac5ee17c8f06e43f8346b009adf9beae3180983fc5018b691b260ad1ee29c6e3a642ddd2d8cf614ca4659b3680d5125f22686cb985e9272f3239edfdd0134bc5d3184ca5679a4f37417a333222b21223896b0678b69eb7c7c894dae552bd34d1d37a1ce83c82e64ee5fa13892af6cae66023736a37f571a3401d186c5b893cf98972acebb45397504802874d488fb8d2688d4064493dd8532ae928651f8394eca1c711b5ae9776dc74391704151436ab1c65427979b5728ed0e0b281efe2a970851704a18bdb163c999bae7ae61db2e0fbbfe94ce7c41a052c759d46bfed622bfce689595f25c9563c2d01efba25e80e46da773b176a39c336ec12ab4cd27fc43fec2e874fc646ac578294e9f291a73980b09a6f9da7e63e18de670736522e6b29434facd3cc1a57a17e2a8e4b52fe3d6c2cee3719feee89ae4501459f7a2b6bcbc164fe4c6e717f558683f6baa865879cc0326581859dbab421ffc5c17cee0c968cd863b9ff4ed1a802234c456f82136701a297b8ece590d64fc3b526bbdf92a167f9bcb97294ef5928945224671230ce74700df4714727231597dc18c819febd535796b3bc6063c20b861ac1df34fc8fffc742bb8194ac3767e52a828cd38336f0e4e4d82f4700a02c3d5189d6e07f9cd88c2c52666c78d58d2dc79d80221815fd1bd0e5846a6ddc4d5e6eddd4f70579506f3312e11b1dd84e6d22fe935a94753001124009c6df39d16b7619c12bc2b4127a7f66aab597707b869b1a73de4b5", 0x1000}, {&(0x7f0000002a80)="ae4b2883866abd12b0ece68b25a99a05099faf36245f3bb7cdeaae5fe1cbe38c96be7dc1e6a9a19f424946a93f709a6315", 0x31}, {&(0x7f0000002ac0)="173653ee625f4f111e67e4cc17c65b510f1642b9dbf801b2f8d2ebc9d75456869f7b2d401661c53386644d47b572a299a067176548a391b020b0e118f95e0a1d72947266465603cf5591b29e79833a888916657ca9e2aeba359c3cc0e256b8429089ce0d8c7f6b108769ce7f3c5a1c08", 0x70}, {&(0x7f0000002b40)="100215d7343b6aa5b1cda59c2972db89888eab6d079e249b4407fe9c6a47b6cda665756629a956661550ebdd78546f4b27df272c1a8dc8b061dda99cd8f46ff527237354e76f9c7a98ac7c28897bffc635b68c331b0d9b8b3f65a7ce75f231ee66cb8dd54ca0b3c799aeefec7b4adf3e2910860fa65a8e3e30f7653412f8f57e36592c6a93cd883e9502395ab02fa8d3556d6a458aa702580f60791cc6e84185f2187dd3e71c280edea696293ddff6", 0xaf}], 0x8, &(0x7f0000002c80)=[{0x108, 0x10a, 0x7, "5448bfe7a45a3d7df07b715dea5a4d6c3700c6dee176ff76dbd3de10cdaf7c9c58b70ab6d25fe5cba912c19378c2772202237760d743d2c3b2bd936484a1a180a192490e0ab42a6ca6a0017cbf0f014abb057149f7f392bbfb20abcf00cf7aeee6247b8b1c700f9ca1338e32e71452fedecfd15117f219990dd1f844d277f419893ddc19f7f45f4e73c29e50f1ab87567eeac81aa1ec328b3fd4ded224932de9965e5066cb6e5ccec50e683eceae57ac7270d6f2f496c94020c62c0760f7663b6182705e08171297dec8ad208fd5b2e7ce9a63959ea74e4e465f35f1802671cbceaa4f7a0cd394cea1ab36995662881be759bd2acf"}], 0x108}}, {{&(0x7f0000002dc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002e40)="e132d658b5ce1e30d939f2fca5a52667d9e1de7e646540e61e90bdbaa3939abd079b1578df518e35c9c9363d5fdfcde48025ced012236ffc0d62eeb9952aba490ecbfacbb65de34ef1f3d4f429b72706cee848bbb1a35492830ce8a50d6f", 0x5e}], 0x1, &(0x7f0000002f00)=[{0x78, 0x10a, 0x4, "02d2cf240ba1849dffc6a4fa25011ddc71e1a14aee3a9eb228095a82a3671a5e78afe2fe5ee7097a3636ff9ec5fe84c4b32726e7f2fc30b86db6ca5f0d15c7628a402b325185da664e0236b6129c6c73dea5f757ad1288c1c1d06deb398b48a653337a842eebc2"}, {0x108, 0x132, 0x3, "4881c6c5bd0776c36fa2033ce38107ac164a6390e5c619bdb1abe4929c112a3b8cc7c714ae10931e673873afa66ee318d91595e8b973fd27002e3a9c1617fc8f95a63acfbabbe2b31047fbf6f35ecc64fa50036582c381ec984970e716c7d293c587fb667203ea1a38c5ad7c4e8ed0ec15ee21450df469d3ff5bdb67b2f2b1e046538b41f90c7235b24f6b7dc2ab3b705eac70a338c3b0543358c44c11b2fe8a6cdc1d3560fa7ee31951639ff1301785eb616b4565ff0183c32970a2f86d79b06148865a2ec196625aba1a1975006582be11d357452b9e5af3f7f6357de4d9d9b4ea06f80a848c78ca28930d6cc8db570e5a2f80442a"}, {0xf8, 0x6, 0x0, "ccf1b46222f44e3a555285c96aa774db65a4508bd325464571c64f75adb974fc43e08b845612ce79b418e645140d6f32529f5ea6dc5c3022f41a1f41490a0482bf2764db48ee657e4e72f90947659108622975db7af15538169963e34fb0889b7eaaf7a06eb96686769ca75119ec1f8761e4b7d4a064008fbf5f2d865d2c0c345256d43fd6cbaf0d669919e303c76b9132d489540b2f49d2148033eca3917c4e94cea87d06267c457eeea2d2180b7eb4e84f2a0e2935efa89b4157328839ecc8293ff3ef524ea50ff2f3db9d75f73ecdc5c76fb4bc95c368327fc5bb9d13ff2c27b837d574229c80"}, {0x48, 0x113, 0x7, "8e6d1369fc3c5bc8877b17e7ff1256ac1f2e0508de7f03b3efc9f3f39837b32cffc929847f8e6687a40aa4d0f576111cb7ecf74704eb"}, {0x40, 0x11, 0x5, "1916ccfc6501f33847d20774276a145e21ebacc87da5993a6981a890eac2aae27579575eb08a1a817e5017565cda89"}, {0xe8, 0x116, 0x4, "4665575d9fe6e23add66877618325a2e44634428ac4f28f865e4338367c7330ed3f54144e54ae73f8eb3d3f3b03ca1362ffaff5700386da44410ede35a1a1076274a6ff6769e97332a418813148fefd6b99aea9f443ce3b59d12144f286d48bda5c0582602b74a8501e4bc21a46ace5a8d8f27d88420510968c12fca76b79dfd8867d9835ed8975c70982477cfd8c08af6e3d2ba78bf506cee68924c168dbe6878ab2e6cea73c2f1852e068ba1a87455e7376da3fa7f39862d8ac0e7d94981a01a0a0a52b488e473fd1796a2f7e233fef246d7482f"}, {0xc8, 0x84, 0x7, "9ae3cc35c443de651504a549a266fea3ab2979b7b35f44976da59905dd9f4be9f78b31c27fdab4c3582936268b2a8f8200da53a17f716691f034002a30189f4351d2767a4badced4c115567882e77458def9c4040caec3887d1852412235aa7d958b07b929ad481e356626faf37df3c6d8d30b74209637a2e4a80e8ab03741f0a6b9720028f3b7560212a30f879ace1bd2cc8c78588c895bcd94c9883e83b15e55fbb80b59aaa615980b02def6eb89a01ae327"}], 0x4b0}}, {{&(0x7f00000033c0)=@xdp={0x2c, 0xd, r5, 0xe}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003440)="f500aa673110dfd95f3a917d5c35fcb1e92ea130c2f9206c85ad51250edfaa4b85461f3c41bae27aee2902065f1e39c500470f482ecbe5e462b15420f73f3917e99262547e22aa11c5a101170ec0b431196ac54fc43922daa43357ab3bd32137d5aaa81ad09fe95c9949267045ef46bea4e7276e8d056b7e6e82ba6701baf5a3956dc1", 0x83}], 0x1}}, {{&(0x7f0000003540)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000003740)=[{&(0x7f00000035c0)="97f638a177ef474d32cc902eff2590ca6d86d0ede376ca337447ace95eb50f4985f0c04c0b2d0bedaffdb70d5aae2137e60095bbfdc48ebd68065eb599aae549c4fb74a571058a07ecb0e41c718f3180644164ac0e649e52", 0x58}, {&(0x7f0000003640)="61ae702b08204e573e8df9b68312fff8f87448118d86885c092ef5464f6cc79b3291adca9b32e386a326dc4141ddc0c4bcad5bdb9413df02ba92526ea2af97d44c4b5f2bc6ae2f75379a1b352cac5b51bd8e384b797c45b2c56ba09904d3ccb6087c5878735bcf7ff64a3a691dceb8801a8dc7b036b349b511154515847630849bc9f20f1d087c351fd004893186c3532fe741126b7f5e49e6f6d881214c598500c502e4efd463cb60f04671cee51551ede11e5bc2ef3f0ab3fc3868e0dafa0c12f12dd45be09c7c6d", 0xc9}], 0x2, &(0x7f0000003780)=[{0xe0, 0x29, 0x0, "ccc5b596880d4b543448d033599a725ac461cb499be1c8f8e30b4f37db1f4e57309a7824073b9ab9e581300298a71786d88e038c32add2ffb18e7c66dc190b264bb0d5429d842587f2c2bf46d232533ebb9ff76e478cb434087b296bf2d8af6bce1e29e1dcf1466f2bd53f83904f0a7a6612e661f8e6089efc2930f746a53024e2ed099edd11b790067e6df25554547db13373241ce7299a00cc3afd7d02e0a56cae585585cbe77a03b53204bb68e1f9ac692296c3963b9356dacf210f124c5fc25fb00efa069091a4fd18302e"}, {0x68, 0x103, 0xe3a, "64386df70edd25914788dda5c982074ce3ab862862e4582f8f131bad1c43e79bd6ef2b7f85d80772c80021c34445a074ddbad2d23844231842754d0f29ec65a11b5cd8a9416333b6f01e5ba7299d073934b64490d21267"}, {0xd8, 0x10a, 0x3a72, "72795765211aac9aed3176269efce797bb034e8b33233e001d6d68091954d3779cbcfd05f5bb92bd14d3503c9daadf73902e6ce4def6544747ceb510b44bdf13214aff4af9d7675ed7a0234ec67e7c207a02546123b689fff2b603e3dadcdabb62696a6b53f036325de8c81835c32c0fd43597c6a8a73fc0628de0507cc0fb66fb75056546d267a2262f4dd6c07bd5faf9cc4326b2ece2628b507ba7cea04d10afcee2acff6dcf9310f562cbc007eded59178faf15415ec0564ab88296f43c39782a6eb30644"}, {0xf0, 0x1, 0x80, "90a44fc475f32c86b3e05d191cb92e1da43a8fcfd20fefee4990efc0a40a31aaa484d533ac940abb62fb23f54e44ce4ad04d2e69735c06af2aef43b01ac4ef140933381fa0a827a37ebbf36bc29c2d43109adf676b0e347608da64ddb59fc0389ec6fdd9c6e2f4eff39e94cd445898976a079dc478844adf75cc978cdae29f54f7d249aa65e3c4b4ba2f75112e516317867ae816794845c4e85722967cd22aa9f61f9f5b6b609d50c0778404e256f1b126dd36d47d7e44f2ddeacae2d3e2c8f35b0e0342fc979a6dd57dfba368de99d7ddfab6b86a5054e1a5d02580"}, {0x1010, 0x109, 0x7, "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"}, {0x78, 0x101, 0x9, "fb3ce972b465eb38bfc7dd2a54cd5edc0e405ed92c029350a71145b64ea901e210eed28594a567f74e527ebf5434f5c22859e69208d1223cbb68fcfb8c557239fac1edbab0afa0fe463afe6629328de2e64497740750aad4509693321007bec0d1d6a0a60991"}, {0x68, 0x6, 0x10001, "88dd16a9670be5cf3f054d7178653121c309472176e918d1e8aecbdba03b993b2e99464cdcf30b80c83d19f03a707c5304dde4ce7dccf64a3c4563bf61570ac39c2b4e88f9aa8e6ecd091c70ca79bb330006e5"}, {0xc8, 0xff, 0x4, "26bf1a6f60cf876094b3d2fa4768570ddbeb9475fd2d7372e6eaccedae036a97dbb7cf56804af84c0333ed74c888ad3816b4988c11f5ca581d7d44336b7af7d91642e1158398b4c5b921a87f4c5d001cf547a8777aaa3ef77e8da34a39ceb8948b5368078f4985d21e85aabc13c4d2bb7d63d666601a56e9fe8f57bd661c306a600a8e8f6a04391c70f04cf3f7b0cf7e7ba1e670ca1a803138406a8cddc2327431eb18d59d41eb4f7553c4d328ded480e9"}, {0x88, 0x6, 0x2, "01b02b1280e3aedcb6c08fe661b843e505c2076d32feb9c5329046c4316470f5cb4240d329c46ae0291cdad6ff7be8c17ae74c701dc15cc76fee8706c0e2bf43648ffe099f5b55ddeb77410eb3b179c9cd0ecb2d1f05a7abb2a76dfa6d5ddc1eff6ff800dc06d7640d8dd19cb430006741eef7b392"}, {0xa0, 0x10c, 0x8, "fa8423f8597110accbb9241edc59361cfddc2e80691c5db1b0b812302130c5166d6f68d56a572576c2363ecf84bdc6ed4acd287c5f5e5b36ec3f406271c4a579b8c8958482b26228633f03c74c18573ce050be50dc96669cf30144cff071dc37ce7748c40fac8cbc00bf9dccadd1d94a8520db86c3158520be9d6943a8e29dc8d284285dd496a8425829"}], 0x15f0}}, {{&(0x7f0000004d80)=@generic={0x29, "9e4c7aa49b96676f2fe4a8f3414b2ff4954f184250393ae1f19881fa0428db4afe94fb9a0b8733aec6b1b53629a182d7ddd0e315e4a58598ef12a6b2fe49b101766fd07c19e73398b8f7cb82617899e96c69b841d645f8f449ee79dea45b18603370585adc41f25c4e69aa7b3cada4ad590b9ce87b9b86f00f8cba5a5704"}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004e00)="44add19eea206dd76fb200d20f318fdb772010879a91b5e39710b4d7c0e34642b9ebc064b1416aa892daf9d092", 0x2d}, {&(0x7f0000004e40)="2a8c6c8a38af75f892ed815143bd9966fab47435cd20", 0x16}, {&(0x7f0000004e80)="704bcbb629f2d948b2779af995a99284b61ad548e004f334337a69dbc42b5e7c94bfef941b4e69ed274ee7ee15c7674885e549fb1951fa7fa9b843e0bfb6333ae3c08dbe70ff570934069ba08ca0d4f5e639fbff7211f1feb31a53bb1229d9ec87e1ea0ebe30801370a8c91efd3b057a0a51805658c6427a95e83bedbfac6e1bb3ae75c4815a1ead32da7619fa703ab1882380061c6a227d73668b", 0x9b}, {&(0x7f0000004f40)="5f6ea9e69cec89f7db3983f81cc95bca516cf624f915cb1b67645869238db1f14bfebfe702ab321e280a302513ad9dd1e6a13dc1cb002f3637872ac77d8207ef91019780add89ce91ea6c779910166726a10d4c9f18425391a8563f4826b649bfff216117aaab4cd4532b3d9931226578693789ecb35d286a38900c5a8bb295abffff41ff0409f067ab66b7149ed998a19a849bc3c4ef27685552d67b158b3ba4120111a6accad7b7a5dbeac808f", 0xae}], 0x4, &(0x7f0000005040)=[{0xe8, 0x118, 0x8, "8b1268d7a26c2efd0babffcdf1be50e7008cec735f0d6267ae2343503fb1d9eb72019b03d7ff32af55ed00089aa31fbdf291a2d2c88c41b41311fcfeba439a4aa6fea3637bfcb718165635ad72b7ad477d56a7a8639685319b808592e6c1b7a6e27a10007a0d78fcd7e5af304c0ade02129f57a44a4771e8791b039a42f164becba46953481ad6ab3869e7780dcc23bcc77080cd365dafe0e048f544fae8b9d5e06a10eda7bd78764a8fc2229521eae591f81ff657f7b8a43d7de212f30452c3b380fec638934aaefdc5aefec49a875f39700df2d0b4"}, {0x68, 0x10b, 0xa, "421df4a21a4f508a08a011c2b7a060cdab4c2ea2625d276514762fd2f479a0fa8eb2625f56583a5b2e1f4ec2a5726b35a4ed8ebd4277de0f9f34006b282cab2cea68081efdf683fc8c31788d98c8003a69e389bd482dc8a6"}, {0xa0, 0x112, 0x8d, "19002412680633c0df3bd646d2984ab4f8b68a274833608d0a695aa72f9430448193efcb0198028e8bd5a41d7f8b0acc8ecf549d2729c53445cbc2bf0e7357f8bd356ad339b0cd1d687eb83bde1adc6b9addc7a38c65eb7458e0e275cfef771dfa9b69d8232fc8f2048230aabc7ce3ccb78d4265f7267aff45779783431eb53efa63d75ba6ec421817"}], 0x1f0}}, {{&(0x7f0000005240)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000005780)=[{&(0x7f00000052c0)="fc35298c18096729020f895061a37dbda48987de09d18afdc353f1bd939f748aa48e0406442305fccd9e63401c0d12f5ab462a08", 0x34}, {&(0x7f0000005300)="f780222a012b8c2bc1ffb81f146a609cc6f5a4e1aeae8217e58a569f72b515c5364693b2c45b4ce8f982e25edf3ef07cba7b8af4a32714db4421453e5dd376f8939bd967589a8255fbaeb312ac976a4d3e1e750579b203628af439f2b1750bf5461a8ea192ac2fb7331c404adc7afed74021578b3d7ce3bc55a6c1cde5f1375c6491d7ff99add04766d2f3f468670f7c5c9f5a179383b034fc51fe1d99bbd536", 0xa0}, {&(0x7f00000053c0)="86fc4e951cef6b0af07f99e6fd41ab378a5cc88f72f195433159025817ee278d652626737edaf6e9dea7d6e2a4cbd8afb9d9a5", 0x33}, {&(0x7f0000005400)="ac09024c48df7ae7f6386d393042ec72019f7141b4e93c9aeb6b116933de2f36ac3aafeeecd61b24f224951be45a8bf4079e4a7dcc18869ebeb9b675af2851d9c0c352a774a4d1a9b9c558ad8e8109f9a5f0cd6f95416e08533a36cd14abd6f19a93a4167f9fbe2807aa2d57014e7aefbb511732d774708645fd38beb1d5de831afc75b71e029ff22cac3347f0911302bef4a51add2138e0ae23ac9e89302c446494cee2a47a384023aa14d36b458aa4d55815b4e46ee022404760199ad1e2af6d05b3d3a3", 0xc5}, {&(0x7f0000005500)="f4e90f104a0ed87c30b18c2802157c651e4e77078f3d611e876e987c553e047dcdb504192c1c2d9a1a5b777624c41726617f86235c9147b78bc30647258f1e82e5b41a54b76d3c412a977d5a2c2a55", 0x4f}, {&(0x7f0000005580)="5567d59a1b10a2ca9176c4e494f817cf37c8f77543275d273af465835a5f42a7628f7ebbb531e14ab6627d2d9cee3dc1b315c08c5c4d0fe94f6ab0dbcdd4b94315ba510b3fae822dcfd6401f3f325b45f7c96d89367a7f9e9ae83a859c8bc66aea496413432536e65a7d39776c", 0x6d}, {&(0x7f0000005600)="ff634adc97dd3c3911e018bbc994960d5ae1ca07769d585d665b30a2577e7461e807ea7229ae26c3740dd22135b3ca184e3be8468aace913b6e82adc017bfba89ffa9cefcd90627fb14b3ef17b73c5fa62c214ad98ccb622620133f85c97f3bfe1243646717d5fd14a127a2c7e25d458", 0x70}, {&(0x7f0000005680)="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", 0xfc}], 0x8, &(0x7f0000005800)=[{0xc8, 0x10a, 0x5, "6ca2d0e82b5dc6878d462b719c25d88fa269f05e7ab305d552651e5e53cfaaacf1e0a6ec0e92acdd679a3fcc70344fadc8d2c3f464f9e25e1011f4b30f9e6a603ff2f534bb571d85058235e205a50064a4d30173cb2a1a4ab521702107171c62a4de29b84c52c6eab77da0d56d62c39f749a31638d51e0184e200bdf6a33675475d2f9d535a6a0ebc31e0aef24f20919b5ec3612eb048a5921ea957ae3e05432ae53ec5e74a63be8e9c641f1f9916051bf1e"}, {0x70, 0x107, 0x2, "fc0e1cdcd006f1b0749c85ea3be362dcb31479491c0fa64841d563cc876d2b577f8005c98c0bb77898b02d6658af219fb8508c177379b57bda0c5acac608b528b76de27beb4d6ca2a848de7e11b199863a8610c26637bb1e2413a45033"}, {0xb8, 0x110, 0x3875, "d266b5e5d0a991c02620b6da09af224045aa1ebda2cea42cab44bc91a5199b3f53dc6fe33fc689cbe986144ae7b5b8418e58616a764cb426290da2351ba7bfcd126460a09c8e5eb9081f81dc7157513e2f77f7c5d10f9dc57714f1f79b078b44699e68b3540bc7f58d93a67525d58d1107c52ead8b2b71707b9ba295049bef0120063caa860728024da84c4b87b7231c8ef041d8788943bc2315cc4542b5a64974e4d0"}, {0x30, 0x114, 0x3ff, "3845cdf012ef62736a22d8cc6b2c17e5c56c174bee8f7d15401bf437"}], 0x220}}], 0x6, 0x1) epoll_create(0x6) 603.398939ms ago: executing program 4 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xfd, &(0x7f0000000180)=""/253, 0x41100, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8d51, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff]}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@setlink={0x50, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70428, 0x1810}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, 0xffffffffffffffff, 0xe041b000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x632, 0x4}}, @TCA_NETEM_RATE={0x14, 0x6, {0xd, 0x4, 0x7}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa889, r10, 0x2a}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="272ac18566a9964daa91f15bdecef73a0bd9332d8053ae0dd4c645b25393528957d0c3e062edebbc99244d7217", 0x2d}, {0x0}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 550.753066ms ago: executing program 0 (id=3715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018007b18e00212ba0d8105040a0a9100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6fd4007100a007a290457f0189b316277ce06bbace8017cbec4c2fe5a7cef4090000001fb791643a5ee4b01602b2a10800ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8880) 401.260351ms ago: executing program 3 (id=3716): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="d9", 0x1, 0x3b00, 0x0, 0x0) 314.463065ms ago: executing program 0 (id=3717): r0 = socket$kcm(0x2, 0xa, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x48) splice(r4, 0x0, r1, 0x0, 0x3000, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES16=r7, @ANYRES8=r6], 0x80}}, 0x800) 161.435791ms ago: executing program 3 (id=3718): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0x0, 0x4}]}]}}, 0x0, 0x8d, 0x0, 0x1, 0x7fffffff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, r2, 0x700, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe909}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2004c044}, 0x20040091) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f00000029c0)="bd", 0x1}, {0x0}], 0x3) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000800)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r4, 0x101, 0x4, 0x0, &(0x7f0000000400)) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (rerun: 64) r6 = socket(0x2, 0x5, 0x0) sendmmsg$inet(r6, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000001c0)={r7, 0x6}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYBLOB="28009a33418331de2d0d00000cdcdf25017c000008000180000006040c0002800800d6dc04008e81"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) (async, rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={r7, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f00000001c0)=0x10) (async, rerun: 32) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r5, 0x952de000) 0s ago: executing program 2 (id=3719): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008060006080006040001"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000060000000b"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000140), 0x8) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000900)={0x84, r3, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x56, 0x1, '\x13j^\x80\x8b\xf5\xf2\xdbU\xc9K\"\x1c\xa5\xbb\xa5\'\xc4\x8f\x88.\xf9\xf7\xed\xa1\xa4$\x8f\xee\xed\xd3\xe5\x81\x12U\x1d\x9e%^\xca\x82\xf7\x91g]\xb6%}\x85Z\x8a\x03O\x9eZJ\r\xed\x920\xc8\x87\x00\x00\x0e\x00'/82}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x84}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x27, &(0x7f0000000700)={@multicast, @local, @void, {@generic={0x19, "c0c72a06f3b8569bb6f43288e80c0f91899c80f5b121d2fca9"}}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)}, 0x200a4800) (async) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88847b96648e582003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) sendmmsg$sock(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000001500)="8989ee96e109eb05d74e1edd5752276e24976c9a86e5c74742a6967c847615808ad4ab63d1e12916ac511f8b0be21d7e96268a7fed4bd69dd5f63b2a1dd5c11a14c89f21ab02a5dbaf45bdf7374b0f", &(0x7f0000000540)=""/119}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) kernel console output (not intermixed with test programs): ] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 376.541429][T16394] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 376.591442][T16394] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 376.677413][T16397] bond11: (slave gretap2): making interface the new active one [ 376.728029][T16397] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 376.818013][T16390] macvlan1: entered promiscuous mode [ 376.885671][T16390] macvlan1: entered allmulticast mode [ 376.903654][T16390] bond11: entered promiscuous mode [ 376.908868][T16390] gretap2: entered promiscuous mode [ 376.933164][T16390] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 377.007772][T16390] bond11: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 377.044994][T16390] bond11: left promiscuous mode [ 377.065060][T16390] gretap2: left promiscuous mode [ 377.574833][T16447] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 377.757822][T16446] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 377.826332][T16458] tipc: New replicast peer: 255.255.255.255 [ 377.853814][T16458] tipc: Enabled bearer , priority 10 [ 378.835881][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 378.852300][ T24] tipc: Node number set to 2443641781 [ 378.932856][T16505] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 379.169657][T16518] __nla_validate_parse: 9 callbacks suppressed [ 379.169677][T16518] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2625'. [ 379.217712][T16518] netlink: Unknown conntrack attr (type=2304, max=9) [ 379.587705][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'. [ 379.701785][T16539] tipc: Enabled bearer , priority 0 [ 379.731324][T16539] syzkaller0: entered promiscuous mode [ 379.749540][T16539] syzkaller0: entered allmulticast mode [ 379.759714][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2632'. [ 379.803454][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2632'. [ 379.855202][T16539] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 379.978406][T16538] tipc: Resetting bearer [ 380.068280][T16538] tipc: Disabling bearer [ 380.313784][T16569] netlink: 'syz.1.2637': attribute type 1 has an invalid length. [ 380.343781][T16569] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2637'. [ 380.383323][T16569] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 380.504460][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'. [ 380.581541][T16581] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 380.670165][T16582] lo speed is unknown, defaulting to 1000 [ 380.682873][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2643'. [ 381.021349][T16604] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 381.086746][T16604] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 381.144851][T16609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 381.155499][T16602] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.483153][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 381.633320][T16617] lo speed is unknown, defaulting to 1000 [ 381.633356][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 382.033478][T16616] lo speed is unknown, defaulting to 1000 [ 382.708756][T16635] netlink: 'syz.3.2655': attribute type 1 has an invalid length. [ 382.849146][T16635] 8021q: adding VLAN 0 to HW filter on device bond11 [ 382.868747][T16634] lo: entered allmulticast mode [ 382.876528][T16634] lo: left allmulticast mode [ 383.441087][T16658] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 383.799951][T16673] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 383.875172][T16676] netlink: 'syz.2.2666': attribute type 11 has an invalid length. [ 383.985305][T16684] syzkaller1: entered promiscuous mode [ 383.991072][T16684] syzkaller1: entered allmulticast mode [ 384.102080][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 384.110223][ C0] lec:lec_tx_timeout: lec0 [ 384.281959][T16694] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 384.346918][T16697] __nla_validate_parse: 5 callbacks suppressed [ 384.346946][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 384.453764][T16697] macvlan2: entered promiscuous mode [ 384.459226][T16697] macvlan2: entered allmulticast mode [ 384.464950][T16697] veth1_to_batadv: entered allmulticast mode [ 384.699468][T16710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2676'. [ 384.725171][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2677'. [ 385.275095][T16742] syzkaller1: entered promiscuous mode [ 385.283594][T16742] syzkaller1: entered allmulticast mode [ 385.708114][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2688'. [ 385.718247][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2688'. [ 386.070048][T16780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2693'. [ 386.380092][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2696'. [ 386.414054][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2696'. [ 386.455205][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2696'. [ 386.730029][T16807] lo speed is unknown, defaulting to 1000 [ 387.098524][T16819] netlink: 'syz.3.2697': attribute type 11 has an invalid length. [ 387.189400][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2706'. [ 387.581945][T16845] netlink: 'syz.1.2711': attribute type 3 has an invalid length. [ 387.614947][T16845] x_tables: duplicate underflow at hook 1 [ 387.968756][T16838] lo speed is unknown, defaulting to 1000 [ 388.903387][T16853] lo speed is unknown, defaulting to 1000 [ 389.314828][T16856] lo speed is unknown, defaulting to 1000 [ 389.659021][T16907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.741221][T16908] netlink: 'syz.1.2723': attribute type 2 has an invalid length. [ 389.752284][T16908] netlink: 'syz.1.2723': attribute type 2 has an invalid length. [ 390.066223][T16920] __nla_validate_parse: 2 callbacks suppressed [ 390.066245][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2726'. [ 390.096099][T16921] netlink: 'syz.1.2726': attribute type 11 has an invalid length. [ 390.113832][T16921] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2726'. [ 391.237048][T16956] syzkaller0: entered promiscuous mode [ 391.333910][T16967] syz.3.2735 (16967) used obsolete PPPIOCDETACH ioctl [ 391.558553][T16974] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2737'. [ 391.598748][T16978] openvswitch: netlink: IP tunnel dst address not specified [ 392.073795][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.093320][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.107784][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.118782][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.132298][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.624585][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2737'. [ 393.765373][T17000] tipc: Enabling of bearer rejected, already enabled [ 393.874417][T16990] lo speed is unknown, defaulting to 1000 [ 394.160246][T17024] 8021q: adding VLAN 0 to HW filter on device bond20 [ 394.182182][ T5831] Bluetooth: hci5: command tx timeout [ 394.338365][T17032] netlink: 'syz.1.2749': attribute type 2 has an invalid length. [ 394.454053][T17034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2751'. [ 394.469060][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2751'. [ 394.489022][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 394.513019][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'. [ 394.521961][T17037] netlink: 'syz.1.2750': attribute type 7 has an invalid length. [ 394.601100][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 394.645514][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'. [ 394.683476][T17037] netlink: 'syz.1.2750': attribute type 7 has an invalid length. [ 394.802601][T17045] bond12: entered promiscuous mode [ 394.808593][T17045] 8021q: adding VLAN 0 to HW filter on device bond12 [ 394.914226][T17049] 8021q: adding VLAN 0 to HW filter on device bond13 [ 394.925436][T17049] bond13: entered promiscuous mode [ 394.933163][T17049] bond12: (slave bond13): Enslaving as an active interface with an up link [ 395.124032][T17054] lo speed is unknown, defaulting to 1000 [ 395.207156][T17060] netlink: 'syz.2.2755': attribute type 3 has an invalid length. [ 395.253103][T17060] netlink: 'syz.2.2755': attribute type 3 has an invalid length. [ 395.372358][T16990] chnl_net:caif_netlink_parms(): no params data found [ 395.776530][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.807312][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.815947][T16990] bridge_slave_0: entered allmulticast mode [ 395.826105][T16990] bridge_slave_0: entered promiscuous mode [ 395.945882][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.961520][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.986399][T16990] bridge_slave_1: entered allmulticast mode [ 396.002831][T16990] bridge_slave_1: entered promiscuous mode [ 396.168640][T16990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.216490][T16990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.262693][ T5831] Bluetooth: hci5: command tx timeout [ 396.349040][T16990] team0: Port device team_slave_0 added [ 396.381122][T16990] team0: Port device team_slave_1 added [ 396.522819][T17108] __nla_validate_parse: 1 callbacks suppressed [ 396.522842][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 396.563588][T17102] syzkaller0: entered promiscuous mode [ 396.582281][T17102] syzkaller0: entered allmulticast mode [ 396.654328][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2766'. [ 396.680548][T17114] bond16 (unregistering): Released all slaves [ 396.750817][T17108] bond16: entered promiscuous mode [ 396.780726][T17108] 8021q: adding VLAN 0 to HW filter on device bond16 [ 396.795014][T17113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2766'. [ 397.210994][T17126] block nbd0: NBD_DISCONNECT [ 397.223331][T17126] block nbd0: Send disconnect failed -32 [ 398.344728][ T5831] Bluetooth: hci5: command tx timeout [ 398.364203][T17097] lo speed is unknown, defaulting to 1000 [ 398.366511][T16990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.377503][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.412294][T16990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.432743][T16990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.440031][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.466962][T16990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.488832][T17122] netlink: 'syz.2.2768': attribute type 3 has an invalid length. [ 398.696521][T16990] hsr_slave_0: entered promiscuous mode [ 398.703683][T16990] hsr_slave_1: entered promiscuous mode [ 398.728694][T16990] debugfs: 'hsr0' already exists in 'hsr' [ 398.742115][T16990] Cannot create hsr debugfs directory [ 399.670907][T17172] lo: Caught tx_queue_len zero misconfig [ 399.790871][T17177] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2780'. [ 399.871399][T17183] tipc: Enabling of bearer rejected, failed to enable media [ 400.115352][T17190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2784'. [ 400.157524][T17191] block nbd3: not configured, cannot reconfigure [ 400.233561][T17190] bond19: entered promiscuous mode [ 400.239450][T17190] 8021q: adding VLAN 0 to HW filter on device bond19 [ 400.278891][T17190] bond19 (unregistering): Released all slaves [ 400.315414][T17201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2785'. [ 400.355397][T17197] vlan4: left promiscuous mode [ 400.361046][T17197] bridge_slave_0: left promiscuous mode [ 400.378478][T16990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.422127][ T5831] Bluetooth: hci5: command tx timeout [ 400.440570][T16990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.487129][T16990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.567781][T16990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.807319][T17228] nbd: must specify an index to disconnect [ 400.945727][T17238] netlink: 'syz.2.2792': attribute type 8 has an invalid length. [ 400.957445][T16990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.007236][T16990] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.038335][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.045621][T10178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.088775][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.096091][T10178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.246443][T16990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.276119][T17257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2795'. [ 401.301501][T17253] netlink: 'syz.1.2796': attribute type 10 has an invalid length. [ 401.320008][T17253] syz_tun: entered promiscuous mode [ 401.413116][T17253] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 401.541755][T17267] x_tables: duplicate underflow at hook 2 [ 401.549686][T17269] x_tables: duplicate underflow at hook 2 [ 401.699306][T17274] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 401.740670][T17274] team0: Port device dummy0 added [ 401.761110][T16990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.774567][T17274] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 401.831901][T17274] team0: Port device dummy0 removed [ 401.852799][T17274] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 401.983970][T16990] veth0_vlan: entered promiscuous mode [ 402.014857][T16990] veth1_vlan: entered promiscuous mode [ 402.115740][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2803'. [ 402.159450][T16990] veth0_macvtap: entered promiscuous mode [ 402.189613][T16990] veth1_macvtap: entered promiscuous mode [ 402.200402][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'. [ 402.281634][T16990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.321103][T16990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.327766][T17304] netlink: 'syz.2.2805': attribute type 11 has an invalid length. [ 402.362374][T17304] netlink: 'syz.2.2805': attribute type 23 has an invalid length. [ 402.402633][T17304] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2805'. [ 402.438802][ T1107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.456007][ T1107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.493224][T17299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2805'. [ 402.522204][T17299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2805'. [ 402.534539][ T1107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.620952][ T1107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.640161][T17299] gretap3: entered promiscuous mode [ 402.930978][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.952138][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.030772][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.058355][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.092873][T17329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2815'. [ 403.110969][T17329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2815'. [ 403.156950][T17331] Cannot find del_set index 49151 as target [ 403.485614][T17340] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.493436][T17340] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.605597][ C1] vcan0: j1939_session_tx_dat: 0xffff88807b229000: queue data error: -100 [ 403.616705][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'. [ 403.806820][T17340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.828122][T17340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.994497][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2825'. [ 404.087063][T10172] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.097648][ T7912] lec:lec_start_xmit: lec0:No lecd attached [ 404.112314][T10172] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.231302][T10172] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.250846][T10172] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.359074][T17383] netlink: 'syz.1.2827': attribute type 4 has an invalid length. [ 404.380073][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'. [ 404.796109][T17412] No such timeout policy "syz0" [ 405.173130][T17425] bond14: entered promiscuous mode [ 405.178931][T17425] 8021q: adding VLAN 0 to HW filter on device bond14 [ 405.221502][T17425] 8021q: adding VLAN 0 to HW filter on device bond15 [ 405.228855][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 405.248160][T17425] bond15: entered promiscuous mode [ 405.274487][T17425] bond14: (slave bond15): Enslaving as an active interface with an up link [ 405.723168][T17454] netlink: 'syz.0.2848': attribute type 1 has an invalid length. [ 405.951958][T17467] bond19: entered promiscuous mode [ 405.958390][T17467] 8021q: adding VLAN 0 to HW filter on device bond19 [ 406.043443][T17467] 8021q: adding VLAN 0 to HW filter on device bond20 [ 406.052693][T17467] bond20: entered promiscuous mode [ 406.062831][T17467] bond19: (slave bond20): Enslaving as an active interface with an up link [ 406.325635][T17480] lo speed is unknown, defaulting to 1000 [ 407.128893][T17499] __nla_validate_parse: 5 callbacks suppressed [ 407.128916][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2855'. [ 407.462832][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'. [ 407.473094][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'. [ 408.928101][T17521] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 408.968966][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'. [ 409.124669][T17523] bond21: entered promiscuous mode [ 409.130267][T17523] 8021q: adding VLAN 0 to HW filter on device bond21 [ 409.142052][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 409.150260][ C0] lec:lec_tx_timeout: lec0 [ 409.203397][T17531] 8021q: adding VLAN 0 to HW filter on device bond22 [ 409.212461][T17531] bond22: entered promiscuous mode [ 409.219597][T17531] bond21: (slave bond22): Enslaving as an active interface with an up link [ 409.269866][T17542] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2870'. [ 409.324568][T17545] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 409.500247][T17553] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 409.511061][T17554] netlink: 'syz.2.2871': attribute type 2 has an invalid length. [ 409.554055][T17554] netlink: 'syz.2.2871': attribute type 2 has an invalid length. [ 409.577467][T17553] tipc: Resetting bearer [ 409.605001][T17557] sctp: [Deprecated]: syz.3.2874 (pid 17557) Use of int in max_burst socket option. [ 409.605001][T17557] Use struct sctp_assoc_value instead [ 410.233119][T17577] tipc: Enabled bearer , priority 0 [ 410.304871][T17577] syzkaller0: entered promiscuous mode [ 410.310591][T17577] syzkaller0: entered allmulticast mode [ 410.347774][T17582] lo speed is unknown, defaulting to 1000 [ 410.362238][T17582] lo speed is unknown, defaulting to 1000 [ 410.378714][T17576] tipc: Resetting bearer [ 410.430496][T17576] tipc: Disabling bearer [ 410.467412][T17582] lo speed is unknown, defaulting to 1000 [ 410.480660][T17582] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 410.502942][T17582] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 410.536425][T17582] lo speed is unknown, defaulting to 1000 [ 410.558356][T17582] lo speed is unknown, defaulting to 1000 [ 410.608580][T17582] lo speed is unknown, defaulting to 1000 [ 410.641049][T17582] lo speed is unknown, defaulting to 1000 [ 410.670666][T17582] lo speed is unknown, defaulting to 1000 [ 410.699495][T17582] lo speed is unknown, defaulting to 1000 [ 410.738179][T17591] tipc: Resetting bearer [ 410.768656][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 410.943618][T17605] can: request_module (can-proto-0) failed. [ 410.958005][T17599] bond16 (unregistering): Released all slaves [ 411.040835][T17596] bond16: entered promiscuous mode [ 411.047465][T17596] 8021q: adding VLAN 0 to HW filter on device bond16 [ 411.244665][T17626] netlink: 'syz.2.2886': attribute type 8 has an invalid length. [ 411.638956][T17655] xt_hashlimit: size too large, truncated to 1048576 [ 411.725421][T10172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.740771][T10172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.775893][T17658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.808306][T17658] netlink: 'syz.3.2894': attribute type 3 has an invalid length. [ 412.069213][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 412.110671][T17668] bond1 (unregistering): Released all slaves [ 412.121327][T17637] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 412.320325][T17674] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2899'. [ 412.413395][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 412.436790][T17686] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2901'. [ 412.553421][T17683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2902'. [ 412.613967][T17674] infiniband syz1: set down [ 412.618671][T17674] infiniband syz1: added bond0 [ 412.704923][T17674] RDS/IB: syz1: added [ 412.709147][T17674] smc: adding ib device syz1 with port count 1 [ 412.715666][T17674] smc: ib device syz1 port 1 has no pnetid [ 413.167397][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2909'. [ 413.182798][T17712] netlink: 'syz.4.2907': attribute type 13 has an invalid length. [ 413.196854][T17711] Cannot find add_set index 0 as target [ 413.212350][T17709] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 413.253586][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2910'. [ 413.334039][T17719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2908'. [ 413.373668][T17715] bond21: entered promiscuous mode [ 413.384524][T17715] 8021q: adding VLAN 0 to HW filter on device bond21 [ 413.393649][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 413.450351][T17718] 8021q: adding VLAN 0 to HW filter on device bond22 [ 413.484255][T17718] bond22: entered promiscuous mode [ 413.490241][T17718] bond21: (slave bond22): Enslaving as an active interface with an up link [ 413.612480][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2911'. [ 413.612480][T17719] bond0: entered promiscuous mode [ 413.653264][T17719] bond0: left promiscuous mode [ 414.319340][T17748] netlink: 'syz.3.2918': attribute type 8 has an invalid length. [ 414.330934][T17749] netlink: 'syz.3.2918': attribute type 8 has an invalid length. [ 415.001430][T17778] netlink: 'syz.0.2926': attribute type 1 has an invalid length. [ 415.028552][T17765] lo speed is unknown, defaulting to 1000 [ 415.124095][T17781] openvswitch: netlink: IPv6 tunnel dst address is zero [ 415.164621][T17778] bond1 (unregistering): Released all slaves [ 415.438406][T17783] ipvlan3: entered promiscuous mode [ 415.712381][T17765] lo speed is unknown, defaulting to 1000 [ 415.921057][T17804] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 415.952445][T17804] veth0_vlan: left promiscuous mode [ 415.994409][T17805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2933'. [ 415.994859][T17804] veth0_vlan: entered promiscuous mode [ 416.026533][T17804] team0: Device veth0_vlan failed to register rx_handler [ 416.122285][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 416.151051][T17813] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 416.161744][T17813] tipc: Resetting bearer [ 416.320778][T17823] netlink: 'syz.0.2936': attribute type 3 has an invalid length. [ 416.513156][T17829] lo speed is unknown, defaulting to 1000 [ 416.589177][T17838] tipc: Resetting bearer [ 416.987523][T17829] lo speed is unknown, defaulting to 1000 [ 417.285515][T17851] netlink: 'syz.1.2941': attribute type 1 has an invalid length. [ 417.343971][T17849] tc_dump_action: action bad kind [ 418.350656][T17875] lo speed is unknown, defaulting to 1000 [ 418.662962][T17885] __nla_validate_parse: 1 callbacks suppressed [ 418.662983][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 418.769689][T17885] 8021q: adding VLAN 0 to HW filter on device bond23 [ 418.865602][T17884] bond23 (unregistering): Released all slaves [ 418.924743][T17885] xfrm1: entered allmulticast mode [ 419.119872][T17875] lo speed is unknown, defaulting to 1000 [ 419.181302][T17878] lo speed is unknown, defaulting to 1000 [ 419.595945][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 419.677497][T17929] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2958'. [ 419.962092][T17878] lo speed is unknown, defaulting to 1000 [ 419.980864][T17920] lo speed is unknown, defaulting to 1000 [ 420.389751][T17920] lo speed is unknown, defaulting to 1000 [ 420.622088][T17929] siw: device registration error -23 [ 420.641529][T17932] lo speed is unknown, defaulting to 1000 [ 420.906262][T17939] bond17 (unregistering): Released all slaves [ 420.924794][T17932] lo speed is unknown, defaulting to 1000 [ 421.189128][T17947] netlink: 'syz.3.2962': attribute type 1 has an invalid length. [ 421.322317][T17951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2962'. [ 421.731322][T17948] bond17: (slave geneve4): making interface the new active one [ 421.754033][T17948] bond17: (slave geneve4): Enslaving as an active interface with an up link [ 421.814985][T17951] 8021q: adding VLAN 0 to HW filter on device bond17 [ 422.175748][T10172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.208559][T10172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.236972][T10172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 422.254243][T10172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.485409][T17991] lo speed is unknown, defaulting to 1000 [ 423.681009][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2977'. [ 423.733208][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 423.764225][ T1107] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.782567][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 423.791714][ T1107] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.802797][ T1107] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.814482][ T30] audit: type=1107 audit(1775740127.704:5): pid=18009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 423.847284][ T1107] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.113106][T18019] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2982'. [ 424.205625][T18025] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2982'. [ 424.289517][T17991] lo speed is unknown, defaulting to 1000 [ 424.497290][T18035] lo speed is unknown, defaulting to 1000 [ 424.820313][T18035] lo speed is unknown, defaulting to 1000 [ 424.937225][T18045] netlink: 'syz.2.2988': attribute type 13 has an invalid length. [ 425.212345][T18057] netlink: 'syz.0.2991': attribute type 14 has an invalid length. [ 425.230025][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2991'. [ 425.437907][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 425.465153][T18062] tipc: New replicast peer: 100.1.1.1 [ 425.470853][T18062] tipc: Enabled bearer , priority 10 [ 425.631765][T18064] dummy0: entered promiscuous mode [ 425.648092][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 425.664727][T18064] dummy0: left promiscuous mode [ 425.751289][T18068] geneve2: entered promiscuous mode [ 425.790209][ T1107] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.799784][ T1107] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.808508][ T1107] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.881231][T18069] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2996'. [ 425.897478][T18068] vlan4: entered allmulticast mode [ 425.903615][T18068] bond0: entered allmulticast mode [ 425.938844][ T1107] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.007217][T18078] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.015757][T18078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.023078][T18078] IPv6: NLM_F_CREATE should be set when creating new route [ 426.030420][T18078] IPv6: NLM_F_CREATE should be set when creating new route [ 426.037795][T18078] IPv6: NLM_F_CREATE should be set when creating new route [ 426.087226][T18069] bond0 (unregistering): left promiscuous mode [ 426.125145][T18069] bond0 (unregistering): Released all slaves [ 426.134319][ T1107] smc: removing ib device syz1 [ 426.544774][T18088] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 427.890966][T18134] netlink: 'syz.3.3014': attribute type 11 has an invalid length. [ 427.908312][T18134] netlink: 'syz.3.3014': attribute type 23 has an invalid length. [ 427.928801][T18134] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3014'. [ 428.411576][T18143] netlink: 'syz.3.3017': attribute type 3 has an invalid length. [ 428.433674][T18141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.955748][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.967185][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.992181][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.006346][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.014277][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.154663][T18152] lo speed is unknown, defaulting to 1000 [ 429.514189][T18166] __nla_validate_parse: 1 callbacks suppressed [ 429.514210][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 429.539465][T18171] netlink: 'syz.4.3024': attribute type 8 has an invalid length. [ 429.560329][T18172] netlink: 'syz.1.3023': attribute type 3 has an invalid length. [ 429.591155][T18172] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3023'. [ 429.697082][T18152] lo speed is unknown, defaulting to 1000 [ 430.038603][T18152] chnl_net:caif_netlink_parms(): no params data found [ 430.536157][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.562269][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.578723][T18152] bridge_slave_0: entered allmulticast mode [ 430.597573][T18152] bridge_slave_0: entered promiscuous mode [ 430.617354][ T645] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.632276][ T645] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.641282][ T645] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.682434][ T645] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.696051][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.705171][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.712958][T18152] bridge_slave_1: entered allmulticast mode [ 430.726526][T18152] bridge_slave_1: entered promiscuous mode [ 430.778093][T18219] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 430.789194][T18221] netlink: 'syz.1.3035': attribute type 2 has an invalid length. [ 430.895443][T18152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.919792][T18152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.042753][T18231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3039'. [ 431.075165][T18234] netlink: 'syz.1.3037': attribute type 2 has an invalid length. [ 431.083643][T18234] netlink: 'syz.1.3037': attribute type 2 has an invalid length. [ 431.145052][ T5841] Bluetooth: hci0: command tx timeout [ 431.229684][T18152] team0: Port device team_slave_0 added [ 431.379929][T18152] team0: Port device team_slave_1 added [ 431.405829][T18248] macsec1: entered promiscuous mode [ 431.411821][T18248] erspan0: entered promiscuous mode [ 431.428268][T18248] erspan0: left promiscuous mode [ 431.644569][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 431.845033][T18152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.852370][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.898978][T18152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.026548][T18152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.082122][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.122125][T18152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.184893][T18152] hsr_slave_0: entered promiscuous mode [ 432.191844][T18152] hsr_slave_1: entered promiscuous mode [ 432.198573][T18152] debugfs: 'hsr0' already exists in 'hsr' [ 432.204621][T18152] Cannot create hsr debugfs directory [ 432.233132][T18263] nbd0: detected capacity change from 0 to 63 [ 432.242898][ T5831] block nbd0: Receive control failed (result -32) [ 432.244624][ T5838] block nbd0: Send control failed (result -32) [ 432.253361][ T5841] block nbd0: Receive control failed (result -32) [ 432.258410][ T5838] block nbd0: Request send failed, requeueing [ 432.275324][ T1315] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.316773][ T25] block nbd0: Dead connection, failed to find a fallback [ 432.317825][ T5838] block nbd0: Dead connection, failed to find a fallback [ 432.338213][ T1315] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.348894][ T25] blk_print_req_error: 138 callbacks suppressed [ 432.348914][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.354783][ T5838] block nbd0: shutting down sockets [ 432.364246][ T25] buffer_io_error: 138 callbacks suppressed [ 432.364302][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 432.390307][ T5838] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.410251][ T5838] Buffer I/O error on dev nbd0, logical block 1, async page read [ 432.418656][ T5838] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.430566][ T5838] Buffer I/O error on dev nbd0, logical block 2, async page read [ 432.439121][ T5838] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.448830][ T5838] Buffer I/O error on dev nbd0, logical block 3, async page read [ 432.456747][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.466430][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 432.480449][ T5838] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.490189][ T5838] Buffer I/O error on dev nbd0, logical block 1, async page read [ 432.499923][ T5838] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.509658][ T5838] Buffer I/O error on dev nbd0, logical block 2, async page read [ 432.517753][ T5838] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.528509][ T5838] Buffer I/O error on dev nbd0, logical block 3, async page read [ 432.536609][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.548150][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3047'. [ 432.557266][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 432.565377][ T5838] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 432.576330][ T5838] Buffer I/O error on dev nbd0, logical block 1, async page read [ 432.585285][T18282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3047'. [ 432.595948][ T5838] ldm_validate_partition_table(): Disk read failed. [ 432.603359][ T5838] Dev nbd0: unable to read RDB block 0 [ 432.622757][ T5838] nbd0: unable to read partition table [ 432.640041][ T1315] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.655080][ T1315] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.676410][ T5838] ldm_validate_partition_table(): Disk read failed. [ 432.684134][ T5838] Dev nbd0: unable to read RDB block 0 [ 432.693186][ T5838] nbd0: unable to read partition table [ 432.850444][T18287] bond1: (slave lo): Releasing backup interface [ 432.858002][T18287] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 432.872685][T18287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 432.958133][T18292] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 433.001207][T18285] syzkaller0: entered promiscuous mode [ 433.022358][T18285] syzkaller0: entered allmulticast mode [ 433.052768][T18298] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3051'. [ 433.082173][T18298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3051'. [ 433.224833][ T5841] Bluetooth: hci0: command tx timeout [ 434.936483][T18152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.069564][T18152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.102981][T18332] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3059'. [ 435.115145][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'. [ 435.141967][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3058'. [ 435.196186][T18152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.225162][T18335] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 136 [ 435.267190][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 435.315762][ T5831] Bluetooth: hci0: command tx timeout [ 435.405324][T18152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.570596][T18350] IPVS: set_ctl: invalid protocol: 98 100.1.1.0:5 [ 435.582191][T18350] IPVS: ip_vs_edit_dest(): server weight less than zero [ 435.754250][T18152] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.777046][T18152] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.794334][T18152] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.834777][T18152] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.896597][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'. [ 435.961458][T18152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.005283][T18152] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.031178][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.038468][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.083187][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.090639][T10172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.513123][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'. [ 436.546882][T18152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.581712][T18371] bond0: entered promiscuous mode [ 436.588045][T18371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.651822][T18376] 8021q: adding VLAN 0 to HW filter on device bond17 [ 436.691617][T18376] bond17: entered promiscuous mode [ 436.713001][T18376] bond0: (slave bond17): Enslaving as an active interface with an up link [ 436.917163][T18152] veth0_vlan: entered promiscuous mode [ 436.955120][T18152] veth1_vlan: entered promiscuous mode [ 436.973498][T18383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 437.025231][T18152] veth0_macvtap: entered promiscuous mode [ 437.049611][T18152] veth1_macvtap: entered promiscuous mode [ 437.087011][T18152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.111936][T18152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.139063][ T1315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.159663][ T1315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.180095][ T1315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.205285][ T1315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.366269][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.377017][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.386217][ T5831] Bluetooth: hci0: command tx timeout [ 437.482245][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.496930][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.636703][T18388] Cannot find add_set index 0 as target [ 437.966308][T18401] sctp: [Deprecated]: syz.3.3074 (pid 18401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.966308][T18401] Use struct sctp_sack_info instead [ 438.014633][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.026257][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.028112][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 438.044486][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.064672][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.082439][T18405] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3075'. [ 438.093000][T18403] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 438.110640][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.232900][T18409] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3076'. [ 438.263530][T18402] lo speed is unknown, defaulting to 1000 [ 438.351567][T18415] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 438.458504][T18419] tipc: Enabling of bearer rejected, already enabled [ 438.811556][T18402] lo speed is unknown, defaulting to 1000 [ 438.834086][T18431] nftables ruleset with unbound set [ 439.117571][T18402] chnl_net:caif_netlink_parms(): no params data found [ 439.235892][T18443] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.253094][T18443] scsi_nl_rcv_msg: discarding partial skb [ 439.385226][T18402] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.393038][T18402] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.400819][T18402] bridge_slave_0: entered allmulticast mode [ 439.410147][T18402] bridge_slave_0: entered promiscuous mode [ 439.423087][T18402] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.430699][T18402] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.438838][T18402] bridge_slave_1: entered allmulticast mode [ 439.448365][T18402] bridge_slave_1: entered promiscuous mode [ 439.528244][T18402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.544675][T18402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.563594][T18456] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 439.577749][T18456] tipc: Resetting bearer [ 439.629468][T18460] netlink: 'syz.1.3089': attribute type 13 has an invalid length. [ 439.637860][T18460] netlink: 'syz.1.3089': attribute type 17 has an invalid length. [ 439.681960][T17907] lo speed is unknown, defaulting to 1000 [ 439.695558][T17907] syz2: Port: 1 Link DOWN [ 439.711691][T18461] netlink: 'syz.0.3090': attribute type 1 has an invalid length. [ 439.776703][T18460] syz_tun: left promiscuous mode [ 439.806880][T18460] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.818866][T18460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.837246][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.848003][ T5902] lo speed is unknown, defaulting to 1000 [ 439.848698][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.854306][ T5902] syz2: Port: 1 Link ACTIVE [ 439.865467][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.892895][T18461] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 439.898929][T18402] team0: Port device team_slave_0 added [ 439.925264][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.970685][T18402] team0: Port device team_slave_1 added [ 440.053117][T18402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.079162][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.112824][T18402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.130293][T18482] tipc: Resetting bearer [ 440.185011][ T5831] Bluetooth: hci1: command tx timeout [ 440.195757][T18402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.212824][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.269178][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 440.281161][T18402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.313248][T18493] netlink: 'syz.4.3097': attribute type 3 has an invalid length. [ 440.321268][T18493] netlink: 'syz.4.3097': attribute type 3 has an invalid length. [ 440.329494][T18493] __nla_validate_parse: 1 callbacks suppressed [ 440.329513][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 440.500457][T18402] hsr_slave_0: entered promiscuous mode [ 440.521412][T18402] hsr_slave_1: entered promiscuous mode [ 440.539425][T18402] debugfs: 'hsr0' already exists in 'hsr' [ 440.556284][T18402] Cannot create hsr debugfs directory [ 440.817750][T18517] ipvlan2: entered promiscuous mode [ 441.145909][T18543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3109'. [ 441.300809][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 441.510734][T18554] syzkaller0: entered promiscuous mode [ 441.520210][T18554] syzkaller0: entered allmulticast mode [ 441.671722][T18566] syz.1.3118 uses old SIOCAX25GETINFO [ 441.699696][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'. [ 441.781724][T18402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.805086][T18402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.886777][T18402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 441.923521][T18402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.008439][T18564] ipvlan2: entered promiscuous mode [ 442.021181][T18564] ipvlan2: entered allmulticast mode [ 442.027146][T18564] gretap0: entered allmulticast mode [ 442.036290][T18564] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 442.071915][T18589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.272147][ T5831] Bluetooth: hci1: command tx timeout [ 442.720228][T18402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.806412][T18402] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.836113][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.843524][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.914827][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.922239][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.983730][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3127'. [ 443.071140][ T645] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 443.113205][ T645] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 443.144051][ T645] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 443.180079][ T645] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 443.262756][T18618] lo speed is unknown, defaulting to 1000 [ 443.520915][T18402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.603576][T18402] veth0_vlan: entered promiscuous mode [ 443.654884][T18402] veth1_vlan: entered promiscuous mode [ 443.726994][T18402] veth0_macvtap: entered promiscuous mode [ 443.739085][T18402] veth1_macvtap: entered promiscuous mode [ 443.941702][T18618] lo speed is unknown, defaulting to 1000 [ 443.965703][T18402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.985935][T18647] syzkaller0: entered promiscuous mode [ 443.991467][T18647] syzkaller0: entered allmulticast mode [ 444.041104][T18402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.158089][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.187884][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.222716][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.346405][ T5841] Bluetooth: hci1: command tx timeout [ 444.387402][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.745013][T18688] FAULT_INJECTION: forcing a failure. [ 444.745013][T18688] name failslab, interval 1, probability 0, space 0, times 0 [ 444.758920][T18688] CPU: 1 UID: 0 PID: 18688 Comm: syz.1.3148 Not tainted syzkaller #0 PREEMPT(full) [ 444.758949][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.758966][T18688] Call Trace: [ 444.758975][T18688] [ 444.758989][T18688] dump_stack_lvl+0xe8/0x150 [ 444.759024][T18688] should_fail_ex+0x412/0x560 [ 444.759062][T18688] should_failslab+0xa8/0x100 [ 444.759092][T18688] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 444.759116][T18688] ? __alloc_skb+0x186/0x7d0 [ 444.759141][T18688] ? __alloc_skb+0x1d0/0x7d0 [ 444.759163][T18688] ? __local_bh_enable_ip+0xd0/0x130 [ 444.759195][T18688] __alloc_skb+0x1d0/0x7d0 [ 444.759225][T18688] pfkey_sendmsg+0x212/0x1120 [ 444.759266][T18688] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 444.759294][T18688] ? aa_sk_perm+0x6d5/0x900 [ 444.759333][T18688] ? __pfx_aa_sk_perm+0x10/0x10 [ 444.759360][T18688] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 444.759397][T18688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 444.759430][T18688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.759458][T18688] ____sys_sendmsg+0x972/0x9f0 [ 444.759496][T18688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.759535][T18688] ? import_iovec+0x73/0xa0 [ 444.759563][T18688] ___sys_sendmsg+0x2a5/0x360 [ 444.759598][T18688] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.759663][T18688] ? __fget_files+0x2a/0x420 [ 444.759681][T18688] ? __fget_files+0x3a0/0x420 [ 444.759711][T18688] __x64_sys_sendmsg+0x1bd/0x2a0 [ 444.759742][T18688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.759781][T18688] ? __pfx_ksys_write+0x10/0x10 [ 444.759817][T18688] do_syscall_64+0x14d/0xf80 [ 444.759843][T18688] ? trace_irq_disable+0x3b/0x150 [ 444.759861][T18688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.759883][T18688] ? clear_bhb_loop+0x40/0x90 [ 444.759909][T18688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.759935][T18688] RIP: 0033:0x7f0651b9c819 [ 444.759956][T18688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.759974][T18688] RSP: 002b:00007f0652a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.759996][T18688] RAX: ffffffffffffffda RBX: 00007f0651e15fa0 RCX: 00007f0651b9c819 [ 444.760012][T18688] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 444.760025][T18688] RBP: 00007f0652a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 444.760037][T18688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.760049][T18688] R13: 00007f0651e16038 R14: 00007f0651e15fa0 R15: 00007fff46dd4fa8 [ 444.760083][T18688] [ 445.069294][T10172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.077817][T10172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.148060][T18692] bond0: (slave syz_tun): Releasing backup interface [ 445.156211][T18692] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 445.190644][T18692] bond0: (slave dummy0): Releasing backup interface [ 445.205626][T18692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.229924][T18690] macsec1: entered promiscuous mode [ 445.235739][T18690] erspan0: entered promiscuous mode [ 445.246730][T18690] erspan0: left promiscuous mode [ 445.282066][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.290453][ C0] lec:lec_tx_timeout: lec0 [ 445.303391][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 445.327552][T10172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.337919][T10172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.719593][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3154'. [ 445.847112][T18708] bond1 (unregistering): Released all slaves [ 445.880472][T18694] infiniband !yz!: set down [ 445.932984][T18694] infiniband !yz!: added team_slave_0 [ 445.983578][T18694] infiniband !yz!: Couldn't open port 1 [ 446.073434][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.084606][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.100232][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.124065][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.139194][T18694] RDS/IB: !yz!: added [ 446.145397][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.165053][T18694] smc: adding ib device !yz! with port count 1 [ 446.178353][T18694] smc: ib device !yz! port 1 has no pnetid [ 446.323340][T18716] lo speed is unknown, defaulting to 1000 [ 446.426062][ T5831] Bluetooth: hci1: command tx timeout [ 446.681062][T18730] GUP no longer grows the stack in syz.2.3159 (18730): 200000003000-20000000a000 (200000001000) [ 446.711541][T18730] CPU: 0 UID: 0 PID: 18730 Comm: syz.2.3159 Not tainted syzkaller #0 PREEMPT(full) [ 446.711572][T18730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.711586][T18730] Call Trace: [ 446.711594][T18730] [ 446.711604][T18730] dump_stack_lvl+0xe8/0x150 [ 446.711641][T18730] __get_user_pages+0x2453/0x29d0 [ 446.711675][T18730] ? __lock_acquire+0x6b5/0x2cf0 [ 446.711722][T18730] ? __gup_longterm_locked+0xc4e/0x1630 [ 446.711755][T18730] ? down_read_killable+0x1bb/0x340 [ 446.711795][T18730] __gup_longterm_locked+0xdcf/0x1630 [ 446.711856][T18730] gup_fast_fallback+0x1d82/0x22e0 [ 446.711924][T18730] ? __pfx_gup_fast_fallback+0x10/0x10 [ 446.711960][T18730] ? is_valid_gup_args+0x11f/0x200 [ 446.711998][T18730] ? get_user_pages_fast+0x4d/0xb0 [ 446.712033][T18730] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 446.712068][T18730] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 446.712096][T18730] iov_iter_get_pages2+0x5e/0xa0 [ 446.712125][T18730] __se_sys_vmsplice+0x7b3/0x1490 [ 446.712178][T18730] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 446.712203][T18730] ? __pfx_futex_wake+0x10/0x10 [ 446.712243][T18730] ? lockdep_hardirqs_on+0x7a/0x110 [ 446.712335][T18730] do_syscall_64+0x14d/0xf80 [ 446.712362][T18730] ? trace_irq_disable+0x3b/0x150 [ 446.712380][T18730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.712401][T18730] ? clear_bhb_loop+0x40/0x90 [ 446.712430][T18730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.712451][T18730] RIP: 0033:0x7f36fa59c819 [ 446.712472][T18730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.712489][T18730] RSP: 002b:00007f36fb4f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 446.712513][T18730] RAX: ffffffffffffffda RBX: 00007f36fa815fa0 RCX: 00007f36fa59c819 [ 446.712529][T18730] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 446.712542][T18730] RBP: 00007f36fa632c91 R08: 0000000000000000 R09: 0000000000000000 [ 446.712555][T18730] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 446.712568][T18730] R13: 00007f36fa816038 R14: 00007f36fa815fa0 R15: 00007ffc1f829358 [ 446.712604][T18730] [ 446.878145][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3158'. [ 447.040850][T18730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3159'. [ 447.115943][T18716] lo speed is unknown, defaulting to 1000 [ 447.379396][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3162'. [ 447.510922][T18743] team0: No ports can be present during mode change [ 448.027990][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3167'. [ 448.074397][T18755] lo speed is unknown, defaulting to 1000 [ 448.264744][ T5831] Bluetooth: hci3: command tx timeout [ 448.357033][T18716] chnl_net:caif_netlink_parms(): no params data found [ 448.523458][T18764] xt_hashlimit: size too large, truncated to 1048576 [ 448.579988][T18755] lo speed is unknown, defaulting to 1000 [ 448.605341][T18716] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.612922][T18716] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.620586][T18716] bridge_slave_0: entered allmulticast mode [ 448.629543][T18716] bridge_slave_0: entered promiscuous mode [ 448.639836][T18716] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.647775][T18716] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.655577][T18716] bridge_slave_1: entered allmulticast mode [ 448.698441][T18716] bridge_slave_1: entered promiscuous mode [ 448.858404][T18716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.888093][T18716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.961548][T18716] team0: Port device team_slave_0 added [ 449.006246][T18716] team0: Port device team_slave_1 added [ 449.060190][T18716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.068295][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.122618][T18716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.137860][T18716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.146504][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.173594][T18716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.347586][T18716] hsr_slave_0: entered promiscuous mode [ 449.364157][T18716] hsr_slave_1: entered promiscuous mode [ 449.391286][T18716] debugfs: 'hsr0' already exists in 'hsr' [ 449.412182][T18716] Cannot create hsr debugfs directory [ 449.474061][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3173'. [ 449.497711][T18778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3173'. [ 450.001647][T18797] lo speed is unknown, defaulting to 1000 [ 450.029076][T18716] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 450.146521][T18716] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 450.253920][T18716] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 450.342653][ T5831] Bluetooth: hci3: command tx timeout [ 450.358798][T18716] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 450.721447][T18716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.737195][T18716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.756262][T18716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 450.789672][T18716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.830731][T18820] can: request_module (can-proto-0) failed. [ 451.259390][T18797] lo speed is unknown, defaulting to 1000 [ 451.429359][T18828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.457490][ T30] audit: type=1804 audit(1775740155.344:6): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3184" name="/newroot/641/memory.events" dev="tmpfs" ino=3299 res=1 errno=0 [ 451.487521][ T30] audit: type=1800 audit(1775740155.344:7): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3184" name="memory.events" dev="tmpfs" ino=3299 res=0 errno=0 [ 451.513308][ T30] audit: type=1804 audit(1775740155.354:8): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3184" name="/newroot/641/memory.events" dev="tmpfs" ino=3299 res=1 errno=0 [ 451.912410][T18833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'. [ 452.016955][T18830] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 452.031536][T18830] bond23 (unregistering): Released all slaves [ 452.094817][T18835] lo speed is unknown, defaulting to 1000 [ 452.423064][ T5831] Bluetooth: hci3: command tx timeout [ 452.429789][T18835] lo speed is unknown, defaulting to 1000 [ 452.484931][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'. [ 452.494642][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 452.505940][T18841] netlink: 'syz.0.3187': attribute type 14 has an invalid length. [ 452.528127][T18841] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3187'. [ 453.125226][T18858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3192'. [ 453.690413][T18822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.903784][T18886] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 453.941784][T18885] lo speed is unknown, defaulting to 1000 [ 453.999303][T18716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.101417][T18716] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.131869][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.139230][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.147810][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 454.190632][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.197902][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.419534][T18885] lo speed is unknown, defaulting to 1000 [ 454.493445][T18899] sctp: [Deprecated]: syz.0.3201 (pid 18899) Use of int in max_burst socket option deprecated. [ 454.493445][T18899] Use struct sctp_assoc_value instead [ 454.522074][ T5831] Bluetooth: hci3: command tx timeout [ 454.619938][T18901] tipc: MTU too low for tipc bearer [ 454.691764][T18716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.217834][T18716] veth0_vlan: entered promiscuous mode [ 455.263915][T18716] veth1_vlan: entered promiscuous mode [ 455.346471][T18716] veth0_macvtap: entered promiscuous mode [ 455.407819][T18716] veth1_macvtap: entered promiscuous mode [ 455.426852][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3207'. [ 455.453275][T18932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 455.480781][T18935] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3208'. [ 455.491089][T18932] netlink: 'syz.1.3207': attribute type 13 has an invalid length. [ 455.500787][T18935] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 455.524638][T18716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.533470][T18936] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3208'. [ 455.544111][T18936] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 455.886739][T18716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.909281][ T1315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.915054][T18940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3209'. [ 455.932290][ T1315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.976623][T18940] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 456.004445][ T1315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.035420][ T1315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.380972][T18959] bond2: entered promiscuous mode [ 456.394407][T18959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.433024][T18956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.447233][T18956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.458944][T18956] bond0 (unregistering): Released all slaves [ 456.492742][T18964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.504120][T18964] bond3: entered promiscuous mode [ 456.510195][T18964] bond2: (slave bond3): Enslaving as an active interface with an up link [ 456.589760][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.629396][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.750070][T18972] bond4: option ad_actor_sys_prio: invalid value (0) [ 456.769414][T18972] bond4: option ad_actor_sys_prio: allowed values 1 - 65535 [ 456.781289][T18972] bond4 (unregistering): Released all slaves [ 456.830624][ T645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.839789][ T645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.151164][T18995] __nla_validate_parse: 2 callbacks suppressed [ 457.151185][T18995] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3223'. [ 457.208411][T18995] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 457.298338][T19001] lo speed is unknown, defaulting to 1000 [ 457.388085][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 457.434795][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.446192][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.454947][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.463371][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.471227][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.780087][T19019] syzkaller0: entered promiscuous mode [ 457.844460][T19019] syzkaller0: entered allmulticast mode [ 457.945630][T19011] lo speed is unknown, defaulting to 1000 [ 457.953473][T19001] lo speed is unknown, defaulting to 1000 [ 457.967242][T19019] tipc: Started in network mode [ 457.977570][T19019] tipc: Node identity 6250ea2a6d6b, cluster identity 4711 [ 457.992717][T19019] tipc: Enabled bearer , priority 0 [ 458.002849][T19019] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 458.035108][T19018] tipc: Resetting bearer [ 458.057487][T19018] tipc: Disabling bearer [ 458.395850][T19011] lo speed is unknown, defaulting to 1000 [ 459.140323][T19060] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 459.316543][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 459.327008][T19069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3241'. [ 459.542989][ T5841] Bluetooth: hci2: command tx timeout [ 459.618968][T19077] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3244'. [ 460.128422][T19087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3240'. [ 460.464595][T19093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.667369][T19093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.726473][T19011] chnl_net:caif_netlink_parms(): no params data found [ 460.927950][T19093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.958794][T19123] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 460.966886][T19123] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 461.073968][T19093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.266367][T19011] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.283822][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.291259][T19011] bridge_slave_0: entered allmulticast mode [ 461.299941][T19011] bridge_slave_0: entered promiscuous mode [ 461.342241][T19011] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.349704][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.364750][T19011] bridge_slave_1: entered allmulticast mode [ 461.374146][T19011] bridge_slave_1: entered promiscuous mode [ 461.398070][T10176] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.418855][T10176] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.428680][T19139] netlink: 'syz.4.3259': attribute type 1 has an invalid length. [ 461.437347][T19140] netlink: 'syz.4.3259': attribute type 1 has an invalid length. [ 461.476350][T19011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.537890][T19011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.576258][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3259'. [ 461.595801][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.622630][ T5841] Bluetooth: hci2: command tx timeout [ 461.718309][ T1315] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.757089][T19011] team0: Port device team_slave_0 added [ 461.771883][T19011] team0: Port device team_slave_1 added [ 461.812651][T19147] syzkaller0: entered promiscuous mode [ 461.818384][T19147] syzkaller0: entered allmulticast mode [ 461.882980][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3262'. [ 461.912784][T19011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.939807][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.974221][T19155] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 461.987151][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3263'. [ 461.997177][T19011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.011770][T19158] sctp: [Deprecated]: syz.3.3264 (pid 19158) Use of int in maxseg socket option. [ 462.011770][T19158] Use struct sctp_assoc_value instead [ 462.045211][T19158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 462.090387][T19152] vlan2: entered promiscuous mode [ 462.100495][T19152] team0: entered promiscuous mode [ 462.117429][T19152] team_slave_0: entered promiscuous mode [ 462.142773][T19152] team_slave_1: entered promiscuous mode [ 462.212695][T19155] bond1: entered promiscuous mode [ 462.220254][T19155] bond1: entered allmulticast mode [ 462.233334][T19155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.253741][T19011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.261717][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.290000][T19011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.418935][T19011] hsr_slave_0: entered promiscuous mode [ 462.438632][T19011] hsr_slave_1: entered promiscuous mode [ 462.474310][T19011] debugfs: 'hsr0' already exists in 'hsr' [ 462.480332][T19011] Cannot create hsr debugfs directory [ 462.688553][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3270'. [ 462.760007][T19183] bond2: entered promiscuous mode [ 462.767155][T19183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.843645][T19185] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 462.859407][T19185] bond3 (unregistering): Released all slaves [ 462.890462][T19190] tipc: Started in network mode [ 462.902577][T19190] tipc: Node identity 84e, cluster identity 4711 [ 462.909145][T19190] tipc: Node number set to 2126 [ 462.971783][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 463.288835][T19202] lo speed is unknown, defaulting to 1000 [ 463.600024][T19011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.618811][T19011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.638062][T19202] lo speed is unknown, defaulting to 1000 [ 463.640200][T19011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.678167][T19011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.702336][ T5841] Bluetooth: hci2: command tx timeout [ 463.734443][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3278'. [ 463.774515][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3278'. [ 463.844218][T19011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.874104][T19011] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.890835][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.898138][T10176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.920792][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.928116][T10176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.218097][T19011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.315360][T19011] veth0_vlan: entered promiscuous mode [ 464.341762][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'. [ 464.351121][T19229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3279'. [ 464.375711][T19229] vlan2: entered allmulticast mode [ 464.380868][T19229] macvtap0: entered allmulticast mode [ 464.430917][T19011] veth1_vlan: entered promiscuous mode [ 464.518891][T19011] veth0_macvtap: entered promiscuous mode [ 464.540782][T19011] veth1_macvtap: entered promiscuous mode [ 464.554448][T19232] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3280'. [ 464.625057][T19011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.660876][T19235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3281'. [ 464.686952][T19011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.730429][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.757225][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.795891][T19237] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 464.797911][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.821355][T19237] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3282'. [ 464.835248][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.038418][T19248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3284'. [ 465.198934][T19248] bond3: entered promiscuous mode [ 465.204875][T19248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.247005][T19251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 465.255697][T19251] bond4: entered promiscuous mode [ 465.261389][T19251] bond3: (slave bond4): Enslaving as an active interface with an up link [ 465.291506][T19253] syzkaller0: entered promiscuous mode [ 465.297398][T19253] syzkaller0: entered allmulticast mode [ 465.344571][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.353634][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.442842][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.452918][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.782320][ T5841] Bluetooth: hci2: command tx timeout [ 465.957239][T19275] syzkaller0: entered promiscuous mode [ 465.968647][T19275] syzkaller0: entered allmulticast mode [ 466.186501][T19284] bond0: entered promiscuous mode [ 466.212771][T19284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.416651][T19296] xt_hashlimit: size too large, truncated to 1048576 [ 466.620288][ T30] audit: type=1800 audit(1775740170.484:9): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3295" name="e" dev="tmpfs" ino=281 res=0 errno=0 [ 467.021815][T19317] netlink: 'syz.3.3301': attribute type 1 has an invalid length. [ 467.115688][T19324] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 467.154221][T19317] bond4: (slave geneve2): making interface the new active one [ 467.163713][T19317] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 467.177616][ T49] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 467.205523][T19325] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.273584][ T49] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 467.300889][T19331] netdevsim netdevsim0: Direct firmware load for ½Ï failed with error -2 [ 467.308571][ T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 467.327554][T19331] netdevsim netdevsim0: Falling back to sysfs fallback for: ½Ï [ 467.408200][T19335] lo: Caught tx_queue_len zero misconfig [ 467.441007][T19337] SET target dimension over the limit! [ 467.587799][T19346] tipc: Enabled bearer , priority 0 [ 467.595770][T19346] syzkaller0: entered promiscuous mode [ 467.601379][T19346] syzkaller0: entered allmulticast mode [ 467.625327][T19346] tipc: Resetting bearer [ 467.633450][T19346] netlink: 'syz.2.3311': attribute type 18 has an invalid length. [ 467.650042][T19345] tipc: Resetting bearer [ 467.667503][T19345] tipc: Disabling bearer [ 467.879102][T19351] netlink: 'syz.2.3313': attribute type 1 has an invalid length. [ 468.376154][T19370] netlink: 'syz.1.3318': attribute type 1 has an invalid length. [ 468.392707][T19370] netlink: 'syz.1.3318': attribute type 30 has an invalid length. [ 468.493762][T19374] syzkaller1: entered promiscuous mode [ 468.499032][T19376] __nla_validate_parse: 7 callbacks suppressed [ 468.499093][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 468.518678][T19374] syzkaller1: entered allmulticast mode [ 468.553262][T19376] : renamed from veth0_to_bond (while UP) [ 468.631460][T19384] netem: unknown loss type 0 [ 468.636860][T19384] netem: change failed [ 468.730687][T19387] syzkaller0: entered promiscuous mode [ 468.736593][T19387] syzkaller0: entered allmulticast mode [ 468.773741][T19389] ipvlan2: entered promiscuous mode [ 468.910322][ T7912] lec:lec_start_xmit: lec0:No lecd attached [ 469.056693][T19325] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.073012][T19325] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.163159][T19325] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.173804][T19325] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.229551][T19325] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.252429][T19325] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.292732][T19414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3331'. [ 469.309374][T19414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3331'. [ 469.322516][T19414] netlink: 'syz.0.3331': attribute type 5 has an invalid length. [ 469.346505][T19419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 469.359822][T19419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3329'. [ 469.372915][T19419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 469.397707][T19419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3329'. [ 469.465331][T10172] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 469.476561][T10172] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 469.523783][T10172] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 469.533692][T10172] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 469.774166][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 469.796227][ T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 470.011511][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.020137][ T49] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 470.239476][T19436] netlink: 'syz.1.3336': attribute type 1 has an invalid length. [ 470.282299][T19436] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3336'. [ 470.315746][T19436] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3336'. [ 470.395804][T19442] block nbd2: server does not support multiple connections per device. [ 470.409599][T19442] block nbd2: shutting down sockets [ 470.586273][T19452] : entered promiscuous mode [ 470.611202][T19452] xt_hashlimit: size too large, truncated to 1048576 [ 470.911142][T19461] lo speed is unknown, defaulting to 1000 [ 470.974307][T19458] geneve3: entered promiscuous mode [ 471.056644][T19464] syzkaller0: entered promiscuous mode [ 471.069679][T19458] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 471.082223][T19464] syzkaller0: entered allmulticast mode [ 471.267645][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3346'. [ 471.449939][T19476] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.457850][T19476] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.535507][T19484] atomic_op ffff88807eeee198 conn xmit_atomic 0000000000000000 [ 471.641126][T19476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.670381][T19476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.819341][T19461] lo speed is unknown, defaulting to 1000 [ 471.831628][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.845817][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.865704][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.892502][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.057532][T19494] netlink: 'syz.4.3351': attribute type 3 has an invalid length. [ 472.082831][T19494] netlink: 'syz.4.3351': attribute type 3 has an invalid length. [ 473.417559][T19544] netlink: 'syz.1.3363': attribute type 27 has an invalid length. [ 473.563721][T19544] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.571566][T19544] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.633097][T19528] sctp: [Deprecated]: syz.4.3360 (pid 19528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.633097][T19528] Use struct sctp_sack_info instead [ 473.652558][T19528] sctp: [Deprecated]: syz.4.3360 (pid 19528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.652558][T19528] Use struct sctp_sack_info instead [ 473.708037][T19544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.725099][T19544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.873672][T19545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.882332][T19545] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.927992][T19545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.991014][ T93] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.002218][T10172] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.027106][T10172] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.042826][T10172] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.102217][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 474.110457][ C0] lec:lec_tx_timeout: lec0 [ 474.115630][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.142694][T19553] xt_TCPMSS: Only works on TCP SYN packets [ 474.307831][T19560] __nla_validate_parse: 7 callbacks suppressed [ 474.307852][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3368'. [ 474.428219][T19565] lo speed is unknown, defaulting to 1000 [ 474.436722][T19569] Cannot find add_set index 0 as target [ 474.594646][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 474.621287][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3372'. [ 474.642724][T19578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3372'. [ 474.662587][T19575] netlink: 'syz.0.3372': attribute type 12 has an invalid length. [ 474.674682][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 474.696112][T19579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 474.717529][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3372'. [ 474.738859][T19575] netlink: 'syz.0.3372': attribute type 12 has an invalid length. [ 474.792973][T19581] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 474.834555][T19579] n: the hash_elasticity option has been deprecated and is always 16 [ 474.844331][T19582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3374'. [ 474.881470][T19579] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 474.935327][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 474.978797][T19581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.013015][T19589] bond1 (unregistering): Released all slaves [ 475.038949][T19565] lo speed is unknown, defaulting to 1000 [ 475.049388][T19593] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.109093][T19593] bond1: (slave lo): Enslaving as an active interface with an up link [ 475.123383][T19593] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 475.323130][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 475.701907][T19627] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 475.711401][T19627] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 476.570316][T19662] netlink: 'syz.3.3399': attribute type 7 has an invalid length. [ 476.581136][T19662] netlink: 'syz.3.3399': attribute type 8 has an invalid length. [ 476.600257][T19662] netlink: 'syz.3.3399': attribute type 8 has an invalid length. [ 476.779384][T19669] wg0: entered allmulticast mode [ 476.975346][T19682] hsr0: entered promiscuous mode [ 477.873940][T19703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.938954][T19722] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 477.975700][T19720] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 478.256999][T19735] bond5: entered allmulticast mode [ 478.265358][T19735] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.275355][T19740] Bluetooth: MGMT ver 1.23 [ 478.431591][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.439638][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.555498][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.571464][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.761660][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 478.770550][ T12] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.779716][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 478.799514][ T12] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.809388][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 478.820463][ T12] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.829886][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 478.851867][ T12] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 479.144691][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 479.152940][ C0] lec:lec_tx_timeout: lec0 [ 479.158249][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 479.222938][T19760] ipvlan1: entered promiscuous mode [ 479.230877][T19760] ipvlan1: left promiscuous mode [ 479.299554][T19764] syzkaller0: entered promiscuous mode [ 479.318832][T19764] syzkaller0: entered allmulticast mode [ 480.991731][T19785] __nla_validate_parse: 83 callbacks suppressed [ 480.991747][T19785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3427'. [ 481.008394][T19785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3427'. [ 481.058678][T19727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.379818][T19787] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.387728][T19787] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.400303][T19796] netlink: 187644 bytes leftover after parsing attributes in process `syz.1.3429'. [ 481.648657][T19787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.671228][T19787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.728233][T19787] hsr0: left promiscuous mode [ 482.054882][T19790] macvtap1: entered promiscuous mode [ 482.060362][T19790] syz_tun: entered promiscuous mode [ 482.086205][T19790] syz_tun: left promiscuous mode [ 482.168676][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.178877][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.215975][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.235551][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.309907][T19814] sctp: [Deprecated]: syz.2.3432 (pid 19814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.309907][T19814] Use struct sctp_sack_info instead [ 482.375228][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3434'. [ 482.388552][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3434'. [ 482.525484][T19826] No such timeout policy "syz0" [ 482.559432][T19829] netlink: 'syz.4.3438': attribute type 1 has an invalid length. [ 482.578974][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 482.674245][T19836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3438'. [ 482.734881][T19837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3438'. [ 483.526493][T19830] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 483.576095][T19829] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 483.617393][T19829] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 483.688430][T19855] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 483.701588][T19836] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 483.730745][T19837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.758990][T19838] macvlan2: entered promiscuous mode [ 483.769540][T19838] macvlan2: entered allmulticast mode [ 483.783494][T19838] bond2: entered promiscuous mode [ 483.803360][T19838] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.846383][T19838] bond2: left promiscuous mode [ 484.017295][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'. [ 484.172025][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 484.180291][ C0] lec:lec_tx_timeout: lec0 [ 484.185321][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 484.202472][T19873] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3448'. [ 484.734343][T19899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.749015][T19901] netlink: 'syz.1.3457': attribute type 13 has an invalid length. [ 484.757803][T19901] netlink: 'syz.1.3457': attribute type 17 has an invalid length. [ 484.834518][T19899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.867113][T19900] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 484.882542][T19900] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 484.927587][T19892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.025660][T19901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.034541][T19901] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.046198][T19901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.266167][T19914] netlink: 'syz.4.3460': attribute type 4 has an invalid length. [ 485.277573][T19914] .`: renamed from bond0 [ 485.410264][T19922] lo speed is unknown, defaulting to 1000 [ 485.416642][T19918] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 485.421717][T19924] Cannot find add_set index 0 as target [ 486.042382][T19950] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 486.076962][T19948] batadv_slave_1: entered promiscuous mode [ 486.089005][T19947] __nla_validate_parse: 16 callbacks suppressed [ 486.089027][T19947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3471'. [ 486.107746][T19947] syzkaller1: entered promiscuous mode [ 486.113465][T19947] syzkaller1: entered allmulticast mode [ 486.199320][T19922] lo speed is unknown, defaulting to 1000 [ 486.199346][T19949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3471'. [ 486.288404][T19948] syzkaller1: entered promiscuous mode [ 486.310343][T19948] syzkaller1: entered allmulticast mode [ 486.406866][T19942] batadv_slave_1: left promiscuous mode [ 488.223215][T19966] vlan2: entered promiscuous mode [ 488.228335][T19966] bridge0: entered promiscuous mode [ 488.238846][T19968] tipc: Enabling of bearer rejected, failed to enable media [ 488.691316][T19991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3480'. [ 488.727446][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 488.728722][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 488.761180][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 488.804819][T19994] n: the hash_elasticity option has been deprecated and is always 16 [ 488.832280][T19994] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 488.858550][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 488.885001][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3482'. [ 488.955512][T19993] n: the hash_elasticity option has been deprecated and is always 16 [ 488.967535][T19993] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 489.077094][T19999] netlink: 'syz.1.3484': attribute type 2 has an invalid length. [ 489.143918][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.152237][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.192018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 489.200113][ C0] lec:lec_tx_timeout: lec0 [ 489.205383][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 489.437637][T20012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3487'. [ 489.564783][T20016] syzkaller0: entered promiscuous mode [ 489.570379][T20016] syzkaller0: entered allmulticast mode [ 489.599128][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.606660][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.613194][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.619659][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.626267][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.632832][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.639357][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.646072][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.652576][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.658959][T20016] tc action pedit 'at' offset 1298 out of bounds [ 489.665407][T20016] 0: reclassify loop, rule prio 0, protocol 800 [ 489.926672][T20032] No such timeout policy "syz1" [ 489.941388][T20033] lo speed is unknown, defaulting to 1000 [ 490.177352][T20049] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3498'. [ 490.276764][T20052] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 490.436339][T20064] 8021q: adding VLAN 0 to HW filter on device bond6 [ 490.534626][T20066] tap0: tun_chr_ioctl cmd 1074025677 [ 490.540219][T20066] tap0: linktype set to 6 [ 490.866678][T20033] lo speed is unknown, defaulting to 1000 [ 491.046765][T20096] netlink: 'syz.2.3508': attribute type 9 has an invalid length. [ 491.117955][T20101] __nla_validate_parse: 4 callbacks suppressed [ 491.117977][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 491.137765][T20099] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3509'. [ 491.645301][T20108] lo speed is unknown, defaulting to 1000 [ 492.075544][T20108] lo speed is unknown, defaulting to 1000 [ 492.178983][ T30] audit: type=1107 audit(1775740196.064:10): pid=20118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 492.206108][T20123] syzkaller0: entered promiscuous mode [ 492.211717][T20123] syzkaller0: entered allmulticast mode [ 492.305885][T20132] lo speed is unknown, defaulting to 1000 [ 492.333911][T20130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 492.351722][T20136] geneve2: entered promiscuous mode [ 492.366228][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.394159][T20130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3517'. [ 492.403478][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.421862][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.452699][T10172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.813260][T20132] lo speed is unknown, defaulting to 1000 [ 493.115178][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3525'. [ 493.159500][T20164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3525'. [ 493.171854][T20164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3525'. [ 493.245329][T20170] tunl0: Caught tx_queue_len zero misconfig [ 493.320071][T20166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.718059][T20175] syz_tun: entered allmulticast mode [ 493.725549][T20175] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 493.948271][T20188] syzkaller0: entered promiscuous mode [ 493.966011][T20188] syzkaller0: entered allmulticast mode [ 494.051723][T20199] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3532'. [ 494.066149][T20199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3532'. [ 494.082241][T20195] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3532'. [ 494.212023][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 494.220112][ C0] lec:lec_tx_timeout: lec0 [ 494.224856][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 495.092737][T20224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.301426][T20235] pim6reg: entered allmulticast mode [ 495.340171][T20235] pim6reg: left allmulticast mode [ 495.559692][T20243] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 495.593987][T20243] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 495.703602][T20251] syzkaller0: entered promiscuous mode [ 495.709271][T20251] syzkaller0: entered allmulticast mode [ 496.055492][T20265] ip6tnl1: entered promiscuous mode [ 496.254424][T20270] tls_set_device_offload_rx: netdev not found [ 496.356837][T20279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.825254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.895158][T20303] __nla_validate_parse: 6 callbacks suppressed [ 496.895181][T20303] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3564'. [ 497.069670][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 497.146790][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3566'. [ 497.186471][T20309] nbd: nbd0 already in use [ 497.194297][T20309] block nbd0: NBD_DISCONNECT [ 497.204737][T20309] block nbd0: Send disconnect failed -32 [ 497.214863][T20309] block nbd0: Send disconnect failed -32 [ 497.227286][T20313] openvswitch: netlink: IPv6 tunnel dst address is zero [ 497.397666][T20320] IPv6: Can't replace route, no match found [ 497.610078][T20330] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 497.705016][T20333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.854930][T20337] batadv0: entered promiscuous mode [ 497.866469][T20337] bond0: entered promiscuous mode [ 497.871948][T20337] bond_slave_0: entered promiscuous mode [ 497.879059][T20337] bond_slave_1: entered promiscuous mode [ 497.890444][T20337] debugfs: 'hsr1' already exists in 'hsr' [ 497.898299][T20337] Cannot create hsr debugfs directory [ 497.905434][T20337] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 497.916421][T20337] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 497.927654][T20337] hsr1: entered allmulticast mode [ 497.935037][T20337] batadv0: entered allmulticast mode [ 497.941260][T20337] bond0: entered allmulticast mode [ 497.947518][T20337] bond_slave_0: entered allmulticast mode [ 497.954686][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 497.964472][T20337] bond_slave_1: entered allmulticast mode [ 497.970559][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3576'. [ 497.981240][T20337] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 498.353741][T10176] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.366372][T10176] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.392702][T10176] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.413479][T10176] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.884747][T20384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3590'. [ 498.916055][T20384] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3590'. [ 498.946628][T20386] netlink: 'syz.1.3591': attribute type 64 has an invalid length. [ 498.972261][T20388] sctp: [Deprecated]: syz.4.3592 (pid 20388) Use of int in max_burst socket option deprecated. [ 498.972261][T20388] Use struct sctp_assoc_value instead [ 499.125086][T20391] syzkaller0: entered promiscuous mode [ 499.139417][T20391] syzkaller0: entered allmulticast mode [ 499.165255][T20393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3591'. [ 499.232004][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 499.240220][ C0] lec:lec_tx_timeout: lec0 [ 499.245047][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 499.559365][T20397] netlink: 'syz.0.3594': attribute type 9 has an invalid length. [ 499.574671][T20405] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3595'. [ 499.593303][T20397] netlink: 'syz.0.3594': attribute type 11 has an invalid length. [ 499.601543][T20397] netlink: 'syz.0.3594': attribute type 12 has an invalid length. [ 499.640813][T20397] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3594'. [ 500.433127][T20437] netlink: 'syz.4.3599': attribute type 11 has an invalid length. [ 500.785099][T20416] sch_fq: defrate 53322 ignored. [ 501.264766][T20464] netlink: 'syz.2.3605': attribute type 21 has an invalid length. [ 501.274802][T20461] Cannot find add_set index 2 as target [ 501.306929][T20462] netlink: 'syz.2.3605': attribute type 21 has an invalid length. [ 501.438106][T20471] netlink: 'syz.3.3606': attribute type 1 has an invalid length. [ 501.726917][T20486] netlink: 'syz.4.3610': attribute type 8 has an invalid length. [ 501.854342][T20459] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 501.931025][T20492] bond6: entered promiscuous mode [ 501.937695][T20502] netlink: 'syz.2.3612': attribute type 10 has an invalid length. [ 501.961237][T20502] __nla_validate_parse: 3 callbacks suppressed [ 501.961256][T20502] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3612'. [ 501.977905][T20492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.004268][T20483] bond7: (slave bridge5): Enslaving as a backup interface with a down link [ 502.065720][T20497] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.074476][T20497] bond7: entered promiscuous mode [ 502.080463][T20497] bond6: (slave bond7): Enslaving as an active interface with an up link [ 502.182995][T20502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.204822][T20511] netlink: 'syz.0.3614': attribute type 1 has an invalid length. [ 502.232588][T20502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.252139][T20502] hsr0: entered promiscuous mode [ 502.285052][T20502] bridge0: port 3(hsr0) entered blocking state [ 502.294668][T20502] bridge0: port 3(hsr0) entered disabled state [ 502.301176][T20502] hsr0: entered allmulticast mode [ 502.310566][T20502] hsr_slave_0: entered allmulticast mode [ 502.316639][T20502] hsr_slave_1: entered allmulticast mode [ 502.359931][T20511] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.367558][T20512] bond8: up delay (636) is not a multiple of miimon (100), value rounded to 600 ms [ 502.380252][T20512] bond8: entered allmulticast mode [ 502.417862][T20513] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 502.659274][T20524] syzkaller1: entered promiscuous mode [ 502.684135][T20524] syzkaller1: entered allmulticast mode [ 502.859538][T20548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.875178][T20530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3619'. [ 502.886203][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 502.944541][T20549] macvtap1: entered promiscuous mode [ 502.956400][T20549] veth1_to_hsr: entered promiscuous mode [ 502.975747][T20549] macvtap1: entered allmulticast mode [ 502.981687][T20549] veth1_to_hsr: entered allmulticast mode [ 503.115411][T20562] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3629'. [ 503.138187][T20564] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 503.311604][T20570] xt_hashlimit: size too large, truncated to 1048576 [ 503.407631][T20584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3636'. [ 503.500412][T20589] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 503.516497][T20589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.677946][T20595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3639'. [ 503.729565][T20595] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3639'. [ 503.864698][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'. [ 503.894230][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'. [ 504.070764][T20615] validate_nla: 2 callbacks suppressed [ 504.070786][T20615] netlink: 'syz.2.3644': attribute type 21 has an invalid length. [ 504.177702][T20618] netlink: 'syz.2.3644': attribute type 13 has an invalid length. [ 504.252063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 504.257148][T20618] lo: entered allmulticast mode [ 504.260167][ C0] lec:lec_tx_timeout: lec0 [ 504.268662][T20618] tunl0: entered allmulticast mode [ 504.270718][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 504.292995][T20618] gre0: entered allmulticast mode [ 504.298279][T20618] gretap0: entered allmulticast mode [ 504.342787][T20618] erspan0: entered allmulticast mode [ 504.352395][T20618] ip_vti0: entered allmulticast mode [ 504.358021][T20618] ip6_vti0: entered allmulticast mode [ 504.401123][T20618] sit0: entered allmulticast mode [ 504.417991][T20618] ip6tnl0: entered allmulticast mode [ 504.426879][T20618] ip6gre0: entered allmulticast mode [ 504.457965][T20618] syz_tun: entered allmulticast mode [ 504.471940][T20618] ip6gretap0: entered allmulticast mode [ 504.493641][T20618] bridge0: entered allmulticast mode [ 504.507183][T20618] team0: entered allmulticast mode [ 504.518729][T20639] netlink: 548 bytes leftover after parsing attributes in process `syz.4.3650'. [ 504.528740][T20618] team_slave_0: entered allmulticast mode [ 504.534924][T20618] team_slave_1: entered allmulticast mode [ 504.547832][T20618] dummy0: entered allmulticast mode [ 504.554417][T20618] nlmon0: entered allmulticast mode [ 504.559996][T20618] caif0: entered allmulticast mode [ 504.565990][T20618] batadv0: entered allmulticast mode [ 504.571653][T20618] veth0: entered allmulticast mode [ 504.579683][T20618] veth1: entered allmulticast mode [ 504.585568][T20618] wg0: entered allmulticast mode [ 504.591037][T20618] wg1: entered allmulticast mode [ 504.604550][T20618] wg2: entered allmulticast mode [ 504.609876][T20618] veth0_to_bridge: entered allmulticast mode [ 504.617548][T20618] veth1_to_bridge: entered allmulticast mode [ 504.624342][T20618] : entered allmulticast mode [ 504.629610][T20618] bond_slave_0: entered allmulticast mode [ 504.636551][T20618] veth1_to_bond: entered allmulticast mode [ 504.643182][T20618] bond_slave_1: entered allmulticast mode [ 504.649400][T20618] veth0_to_team: entered allmulticast mode [ 504.656454][T20618] veth1_to_team: entered allmulticast mode [ 504.666028][T20618] veth0_to_batadv: entered allmulticast mode [ 504.673533][T20618] batadv_slave_0: entered allmulticast mode [ 504.680003][T20618] veth1_to_batadv: entered allmulticast mode [ 504.687381][T20618] batadv_slave_1: entered allmulticast mode [ 504.694748][T20618] xfrm0: entered allmulticast mode [ 504.700437][T20618] veth0_to_hsr: entered allmulticast mode [ 504.707446][T20618] veth1_to_hsr: entered allmulticast mode [ 504.752656][T20618] veth1_virt_wifi: entered allmulticast mode [ 504.758916][T20618] veth0_virt_wifi: entered allmulticast mode [ 504.782374][T20618] virt_wifi0: entered allmulticast mode [ 504.788415][T20618] veth1_vlan: entered allmulticast mode [ 504.812284][T20618] veth0_vlan: entered allmulticast mode [ 504.818188][T20618] vlan0: entered allmulticast mode [ 504.831090][T20618] vlan1: entered allmulticast mode [ 504.839090][T20618] macvlan0: entered allmulticast mode [ 504.845836][T20618] macvlan1: entered allmulticast mode [ 504.851926][T20618] ipvlan0: entered allmulticast mode [ 504.859382][T20618] ipvlan1: entered allmulticast mode [ 504.865564][T20618] veth1_macvtap: entered allmulticast mode [ 504.872162][T20618] veth0_macvtap: entered allmulticast mode [ 504.884270][T20618] macvtap0: entered allmulticast mode [ 504.890812][T20618] macsec0: entered allmulticast mode [ 504.897070][T20618] geneve0: entered allmulticast mode [ 504.903434][T20618] geneve1: entered allmulticast mode [ 504.909251][T20618] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 504.917905][T20618] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 504.925757][T20618] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 504.934734][T20618] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 504.943047][T20618] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 504.962844][T20618] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 504.976179][T20618] vxcan2: entered allmulticast mode [ 504.988627][T20618] vxcan3: entered allmulticast mode [ 505.000155][T20618] bond0: left promiscuous mode [ 505.007251][T20618] bond0: entered allmulticast mode [ 505.013187][T20618] vxlan0: entered allmulticast mode [ 505.018866][T20618] syztnl1: entered allmulticast mode [ 505.025990][T20618] bond1: entered allmulticast mode [ 505.031568][T20618] sit1: entered allmulticast mode [ 505.037917][T20618] bridge1: entered allmulticast mode [ 505.069841][T20618] rose0: entered allmulticast mode [ 505.181523][T20650] netlink: 'syz.0.3653': attribute type 21 has an invalid length. [ 505.197358][T20650] netlink: 'syz.0.3653': attribute type 5 has an invalid length. [ 505.213805][T20650] netlink: 'syz.0.3653': attribute type 6 has an invalid length. [ 505.798763][T20680] netlink: ct family unspecified [ 508.442129][T20715] __nla_validate_parse: 6 callbacks suppressed [ 508.442150][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3668'. [ 508.482633][T20713] lo: entered allmulticast mode [ 508.487993][T20713] tunl0: entered allmulticast mode [ 508.495936][T20713] gre0: entered allmulticast mode [ 508.505822][T20713] gretap0: entered allmulticast mode [ 508.511473][T20713] erspan0: entered allmulticast mode [ 508.517957][T20713] ip_vti0: entered allmulticast mode [ 508.574981][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'. [ 508.586845][T20713] ip6_vti0: entered allmulticast mode [ 508.595570][T20713] sit0: entered allmulticast mode [ 508.600990][T20713] ip6tnl0: entered allmulticast mode [ 508.617676][T20713] ip6gre0: entered allmulticast mode [ 508.638715][T20713] syz_tun: entered allmulticast mode [ 508.662485][T20713] ip6gretap0: entered allmulticast mode [ 508.675104][T20713] bridge0: entered allmulticast mode [ 508.683620][T20713] vcan0: entered allmulticast mode [ 508.695931][T20713] bond0: entered allmulticast mode [ 508.701411][T20713] bond_slave_0: entered allmulticast mode [ 508.708681][T20713] bond_slave_1: entered allmulticast mode [ 508.714941][T20713] team0: entered allmulticast mode [ 508.720238][T20713] team_slave_0: entered allmulticast mode [ 508.726396][T20713] team_slave_1: entered allmulticast mode [ 508.733096][T20713] dummy0: entered allmulticast mode [ 508.739516][T20713] nlmon0: entered allmulticast mode [ 508.747637][T20713] caif0: entered allmulticast mode [ 508.756651][T20713] batadv0: entered allmulticast mode [ 508.764128][T20713] vxcan0: entered allmulticast mode [ 508.765763][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'. [ 508.769848][T20713] vxcan1: entered allmulticast mode [ 508.784779][T20713] veth0: entered allmulticast mode [ 508.790818][T20713] veth1: entered allmulticast mode [ 508.797224][T20713] wg0: entered allmulticast mode [ 508.802653][T20713] wg1: entered allmulticast mode [ 508.807971][T20713] wg2: entered allmulticast mode [ 508.813195][T20713] veth0_to_bridge: entered allmulticast mode [ 508.819638][T20713] veth1_to_bridge: entered allmulticast mode [ 508.827026][T20713] veth0_to_bond: entered allmulticast mode [ 508.833476][T20713] veth1_to_bond: entered allmulticast mode [ 508.839584][T20713] veth0_to_team: entered allmulticast mode [ 508.853236][T20713] veth1_to_team: entered allmulticast mode [ 508.859473][T20713] veth0_to_batadv: entered allmulticast mode [ 508.867083][T20713] batadv_slave_0: entered allmulticast mode [ 508.873554][T20713] veth1_to_batadv: entered allmulticast mode [ 508.880025][T20713] batadv_slave_1: entered allmulticast mode [ 508.886358][T20713] xfrm0: entered allmulticast mode [ 508.891650][T20713] veth0_to_hsr: entered allmulticast mode [ 508.897885][T20713] hsr_slave_0: entered allmulticast mode [ 508.908998][T20713] hsr_slave_1: entered allmulticast mode [ 508.915380][T20713] hsr0: entered allmulticast mode [ 508.920661][T20713] veth1_virt_wifi: entered allmulticast mode [ 508.930203][T20713] veth0_virt_wifi: entered allmulticast mode [ 508.937203][T20713] virt_wifi0: entered allmulticast mode [ 508.943903][T20713] veth1_vlan: entered allmulticast mode [ 508.950265][T20713] veth0_vlan: entered allmulticast mode [ 508.956589][T20713] vlan0: entered allmulticast mode [ 508.962534][T20713] vlan1: entered allmulticast mode [ 508.968010][T20713] macvlan0: entered allmulticast mode [ 508.988830][T20713] macvlan1: entered allmulticast mode [ 508.995200][T20713] ipvlan0: entered allmulticast mode [ 509.000801][T20713] ipvlan1: entered allmulticast mode [ 509.006423][T20713] veth1_macvtap: entered allmulticast mode [ 509.014711][T20713] veth0_macvtap: entered allmulticast mode [ 509.020827][T20713] macvtap0: entered allmulticast mode [ 509.026669][T20713] macsec0: entered allmulticast mode [ 509.033622][T20713] geneve0: entered allmulticast mode [ 509.039182][T20713] geneve1: entered allmulticast mode [ 509.044969][T20713] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 509.052634][T20713] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 509.060212][T20713] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 509.068412][T20713] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 509.076330][T20713] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 509.084288][T20713] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode [ 509.092159][T20713] bond1: entered allmulticast mode [ 509.097574][T20713] syztnl1: entered allmulticast mode [ 509.103285][T20713] mac80211_hwsim hwsim60 wlan2: entered allmulticast mode [ 509.110785][T20713] veth2: entered allmulticast mode [ 509.116300][T20713] veth3: entered allmulticast mode [ 509.121587][T20713] veth4: entered allmulticast mode [ 509.127087][T20713] veth5: entered allmulticast mode [ 509.132922][T20713] bridge1: entered allmulticast mode [ 509.139011][T20713] n: entered allmulticast mode [ 509.145200][T20713] veth1_to_hsr: left promiscuous mode [ 509.152174][T20713] macvtap1: left promiscuous mode [ 509.172225][T20713] syzkaller0: entered allmulticast mode [ 509.208962][T20734] macvlan2: entered allmulticast mode [ 509.214706][T20734] bridge0: entered allmulticast mode [ 509.221309][T20734] bridge0: port 3(macvlan2) entered blocking state [ 509.229300][T20734] bridge0: port 3(macvlan2) entered disabled state [ 509.241799][T20734] bridge0: left allmulticast mode [ 509.292052][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 509.300258][ C0] lec:lec_tx_timeout: lec0 [ 509.307998][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 509.644701][T20761] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 509.716747][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.730512][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.843142][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.864105][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.138548][T20788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3684'. [ 510.354939][T20803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'. [ 510.398873][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'. [ 510.436293][T20803] ipvlan2: entered allmulticast mode [ 510.753980][T20825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3688'. [ 510.848275][ T5841] block nbd0: Receive control failed (result -1) [ 511.742381][T20862] lo speed is unknown, defaulting to 1000 [ 511.757056][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3697'. [ 511.784240][T20869] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 511.812354][T20869] netlink: 'syz.4.3697': attribute type 2 has an invalid length. [ 512.755367][T20882] veth7: entered allmulticast mode [ 513.245777][T20862] lo speed is unknown, defaulting to 1000 [ 513.910390][T20944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3712'. [ 514.108016][T20950] bridge_slave_1: left allmulticast mode [ 514.119671][T20950] bridge_slave_1: left promiscuous mode [ 514.132840][T20950] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.305270][T20950] syzkaller0: entered promiscuous mode [ 514.311076][T20950] syzkaller0: entered allmulticast mode [ 514.572993][T20961] [ 514.575436][T20961] ====================================================== [ 514.582852][T20961] WARNING: possible circular locking dependency detected [ 514.590546][T20961] syzkaller #0 Not tainted [ 514.595452][T20961] ------------------------------------------------------ [ 514.602693][T20961] syz.3.3718/20961 is trying to acquire lock: [ 514.609092][T20961] ffff888032195900 (&mm->mmap_lock){++++}-{4:4}, at: gup_fast_fallback+0x20d/0x22e0 [ 514.618821][T20961] [ 514.618821][T20961] but task is already holding lock: [ 514.626327][T20961] ffff888028fd9d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 514.635794][T20961] [ 514.635794][T20961] which lock already depends on the new lock. [ 514.635794][T20961] [ 514.646768][T20961] [ 514.646768][T20961] the existing dependency chain (in reverse order) is: [ 514.655887][T20961] [ 514.655887][T20961] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 514.663689][T20961] lock_sock_nested+0x41/0x100 [ 514.669098][T20961] inet_shutdown+0x6a/0x390 [ 514.674237][T20961] nbd_mark_nsock_dead+0x2e9/0x560 [ 514.679934][T20961] recv_work+0x1c7f/0x1d90 [ 514.685030][T20961] process_scheduled_works+0xb6e/0x18c0 [ 514.691150][T20961] worker_thread+0xa53/0xfc0 [ 514.696590][T20961] kthread+0x388/0x470 [ 514.701426][T20961] ret_from_fork+0x51e/0xb90 [ 514.706628][T20961] ret_from_fork_asm+0x1a/0x30 [ 514.712015][T20961] [ 514.712015][T20961] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 514.719878][T20961] __mutex_lock+0x19f/0x1300 [ 514.725157][T20961] nbd_queue_rq+0x37b/0x1100 [ 514.730304][T20961] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 514.736489][T20961] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 514.743511][T20961] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 514.750318][T20961] blk_mq_run_hw_queue+0x348/0x4f0 [ 514.756018][T20961] blk_mq_dispatch_list+0xd16/0xe10 [ 514.761858][T20961] blk_mq_flush_plug_list+0x48d/0x570 [ 514.767775][T20961] __blk_flush_plug+0x3ed/0x4d0 [ 514.773587][T20961] __submit_bio+0x28d/0x580 [ 514.778834][T20961] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 514.785120][T20961] block_read_full_folio+0x599/0x830 [ 514.790962][T20961] filemap_read_folio+0x137/0x3b0 [ 514.796915][T20961] do_read_cache_folio+0x358/0x590 [ 514.802769][T20961] read_part_sector+0xb6/0x2b0 [ 514.808135][T20961] adfspart_check_ICS+0xa5/0xa40 [ 514.813645][T20961] bdev_disk_changed+0x7ba/0x1550 [ 514.819310][T20961] blkdev_get_whole+0x380/0x510 [ 514.824721][T20961] bdev_open+0x31e/0xd30 [ 514.829686][T20961] blkdev_open+0x470/0x610 [ 514.834657][T20961] do_dentry_open+0x785/0x14e0 [ 514.839985][T20961] vfs_open+0x3b/0x340 [ 514.844615][T20961] path_openat+0x2e08/0x3860 [ 514.849867][T20961] do_file_open+0x23e/0x4a0 [ 514.855270][T20961] do_sys_openat2+0x113/0x200 [ 514.860510][T20961] __x64_sys_openat+0x138/0x170 [ 514.866082][T20961] do_syscall_64+0x14d/0xf80 [ 514.871334][T20961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.877886][T20961] [ 514.877886][T20961] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 514.885231][T20961] __mutex_lock+0x19f/0x1300 [ 514.890471][T20961] nbd_queue_rq+0xc6/0x1100 [ 514.895877][T20961] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 514.902071][T20961] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 514.908953][T20961] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 514.915568][T20961] blk_mq_run_hw_queue+0x348/0x4f0 [ 514.921405][T20961] blk_mq_dispatch_list+0xd16/0xe10 [ 514.927330][T20961] blk_mq_flush_plug_list+0x48d/0x570 [ 514.933258][T20961] __blk_flush_plug+0x3ed/0x4d0 [ 514.938663][T20961] __submit_bio+0x28d/0x580 [ 514.943723][T20961] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 514.950346][T20961] block_read_full_folio+0x599/0x830 [ 514.956280][T20961] filemap_read_folio+0x137/0x3b0 [ 514.961942][T20961] do_read_cache_folio+0x358/0x590 [ 514.967688][T20961] read_part_sector+0xb6/0x2b0 [ 514.973444][T20961] adfspart_check_ICS+0xa5/0xa40 [ 514.978991][T20961] bdev_disk_changed+0x7ba/0x1550 [ 514.984620][T20961] blkdev_get_whole+0x380/0x510 [ 514.990296][T20961] bdev_open+0x31e/0xd30 [ 514.995171][T20961] blkdev_open+0x470/0x610 [ 515.000152][T20961] do_dentry_open+0x785/0x14e0 [ 515.005492][T20961] vfs_open+0x3b/0x340 [ 515.010132][T20961] path_openat+0x2e08/0x3860 [ 515.015363][T20961] do_file_open+0x23e/0x4a0 [ 515.020425][T20961] do_sys_openat2+0x113/0x200 [ 515.025746][T20961] __x64_sys_openat+0x138/0x170 [ 515.031160][T20961] do_syscall_64+0x14d/0xf80 [ 515.036300][T20961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.042752][T20961] [ 515.042752][T20961] -> #4 (set->srcu){.+.+}-{0:0}: [ 515.050164][T20961] __synchronize_srcu+0xca/0x300 [ 515.055918][T20961] elevator_switch+0x1e8/0x7a0 [ 515.061235][T20961] elevator_change+0x2cc/0x450 [ 515.066543][T20961] elevator_set_default+0x36c/0x430 [ 515.072290][T20961] blk_register_queue+0x366/0x430 [ 515.078153][T20961] __add_disk+0x677/0xd50 [ 515.083061][T20961] add_disk_fwnode+0xfb/0x480 [ 515.088306][T20961] nbd_dev_add+0x72c/0xb50 [ 515.093454][T20961] nbd_init+0x168/0x1f0 [ 515.098695][T20961] do_one_initcall+0x250/0x8d0 [ 515.104201][T20961] do_initcall_level+0x104/0x190 [ 515.109876][T20961] do_initcalls+0x59/0xa0 [ 515.114769][T20961] kernel_init_freeable+0x2a6/0x3e0 [ 515.120734][T20961] kernel_init+0x1d/0x1d0 [ 515.125705][T20961] ret_from_fork+0x51e/0xb90 [ 515.130941][T20961] ret_from_fork_asm+0x1a/0x30 [ 515.136405][T20961] [ 515.136405][T20961] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 515.144363][T20961] __mutex_lock+0x19f/0x1300 [ 515.149868][T20961] elevator_change+0x1b3/0x450 [ 515.155370][T20961] elevator_set_none+0xb5/0x140 [ 515.160790][T20961] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 515.167558][T20961] nbd_start_device+0x17f/0xb10 [ 515.173149][T20961] nbd_genl_connect+0x165b/0x1cf0 [ 515.178902][T20961] genl_family_rcv_msg_doit+0x22a/0x330 [ 515.185261][T20961] genl_rcv_msg+0x61c/0x7a0 [ 515.190336][T20961] netlink_rcv_skb+0x232/0x4b0 [ 515.195647][T20961] genl_rcv+0x28/0x40 [ 515.200186][T20961] netlink_unicast+0x80f/0x9b0 [ 515.205492][T20961] netlink_sendmsg+0x813/0xb40 [ 515.210803][T20961] ____sys_sendmsg+0x972/0x9f0 [ 515.216118][T20961] ___sys_sendmsg+0x2a5/0x360 [ 515.221705][T20961] __x64_sys_sendmsg+0x1bd/0x2a0 [ 515.227227][T20961] do_syscall_64+0x14d/0xf80 [ 515.232370][T20961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.239017][T20961] [ 515.239017][T20961] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 515.247663][T20961] blk_alloc_queue+0x546/0x680 [ 515.252984][T20961] __blk_mq_alloc_disk+0x197/0x390 [ 515.258660][T20961] nbd_dev_add+0x499/0xb50 [ 515.263719][T20961] nbd_init+0x168/0x1f0 [ 515.268541][T20961] do_one_initcall+0x250/0x8d0 [ 515.273893][T20961] do_initcall_level+0x104/0x190 [ 515.279381][T20961] do_initcalls+0x59/0xa0 [ 515.284256][T20961] kernel_init_freeable+0x2a6/0x3e0 [ 515.290016][T20961] kernel_init+0x1d/0x1d0 [ 515.295025][T20961] ret_from_fork+0x51e/0xb90 [ 515.300194][T20961] ret_from_fork_asm+0x1a/0x30 [ 515.305608][T20961] [ 515.305608][T20961] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 515.313194][T20961] fs_reclaim_acquire+0x71/0x100 [ 515.318676][T20961] kmem_cache_alloc_noprof+0x40/0x650 [ 515.324592][T20961] mas_alloc_nodes+0x291/0x350 [ 515.329903][T20961] mas_preallocate+0x2d6/0x640 [ 515.335212][T20961] vma_link+0x123/0x470 [ 515.340099][T20961] insert_vm_struct+0x199/0x260 [ 515.345509][T20961] create_init_stack_vma+0x304/0x670 [ 515.351788][T20961] alloc_bprm+0x495/0x5c0 [ 515.356884][T20961] kernel_execve+0x87/0x930 [ 515.361982][T20961] try_to_run_init_process+0x13/0x60 [ 515.367992][T20961] kernel_init+0xad/0x1d0 [ 515.373044][T20961] ret_from_fork+0x51e/0xb90 [ 515.378449][T20961] ret_from_fork_asm+0x1a/0x30 [ 515.383768][T20961] [ 515.383768][T20961] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 515.391533][T20961] __lock_acquire+0x15a5/0x2cf0 [ 515.397294][T20961] lock_acquire+0xf0/0x2e0 [ 515.402265][T20961] gup_fast_fallback+0x226/0x22e0 [ 515.408044][T20961] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 515.414318][T20961] iov_iter_get_pages2+0x5e/0xa0 [ 515.419811][T20961] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 515.425989][T20961] tls_sw_sendmsg+0x9da/0x2360 [ 515.431335][T20961] sock_write_iter+0x333/0x4f0 [ 515.436653][T20961] do_iter_readv_writev+0x619/0x8c0 [ 515.442402][T20961] vfs_writev+0x33c/0x990 [ 515.447550][T20961] do_writev+0x154/0x2e0 [ 515.452518][T20961] do_syscall_64+0x14d/0xf80 [ 515.457652][T20961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.464094][T20961] [ 515.464094][T20961] other info that might help us debug this: [ 515.464094][T20961] [ 515.474426][T20961] Chain exists of: [ 515.474426][T20961] &mm->mmap_lock --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 515.474426][T20961] [ 515.487691][T20961] Possible unsafe locking scenario: [ 515.487691][T20961] [ 515.495303][T20961] CPU0 CPU1 [ 515.500871][T20961] ---- ---- [ 515.506342][T20961] lock(sk_lock-AF_INET6); [ 515.510875][T20961] lock(&nsock->tx_lock); [ 515.518005][T20961] lock(sk_lock-AF_INET6); [ 515.525146][T20961] rlock(&mm->mmap_lock); [ 515.529596][T20961] [ 515.529596][T20961] *** DEADLOCK *** [ 515.529596][T20961] [ 515.537849][T20961] 2 locks held by syz.3.3718/20961: [ 515.543251][T20961] #0: ffff88804f3a98f0 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x12f/0x2360 [ 515.552944][T20961] #1: ffff888028fd9d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 515.562822][T20961] [ 515.562822][T20961] stack backtrace: [ 515.568733][T20961] CPU: 0 UID: 0 PID: 20961 Comm: syz.3.3718 Not tainted syzkaller #0 PREEMPT(full) [ 515.568753][T20961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.568764][T20961] Call Trace: [ 515.568773][T20961] [ 515.568781][T20961] dump_stack_lvl+0xe8/0x150 [ 515.568807][T20961] print_circular_bug+0x2e1/0x300 [ 515.568836][T20961] check_noncircular+0x12e/0x150 [ 515.568864][T20961] __lock_acquire+0x15a5/0x2cf0 [ 515.568896][T20961] lock_acquire+0xf0/0x2e0 [ 515.568916][T20961] ? gup_fast_fallback+0x20d/0x22e0 [ 515.568941][T20961] ? __page_table_check_zero+0x397/0x3e0 [ 515.568960][T20961] ? __page_table_check_zero+0x6a/0x3e0 [ 515.568985][T20961] ? gup_fast_fallback+0x20d/0x22e0 [ 515.569008][T20961] gup_fast_fallback+0x226/0x22e0 [ 515.569033][T20961] ? gup_fast_fallback+0x20d/0x22e0 [ 515.569059][T20961] ? get_page_from_freelist+0x24f5/0x2580 [ 515.569089][T20961] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 515.569110][T20961] ? __pfx_gup_fast_fallback+0x10/0x10 [ 515.569133][T20961] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 515.569153][T20961] ? is_valid_gup_args+0x11f/0x200 [ 515.569177][T20961] ? get_user_pages_fast+0x4d/0xb0 [ 515.569202][T20961] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 515.569225][T20961] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 515.569249][T20961] iov_iter_get_pages2+0x5e/0xa0 [ 515.569269][T20961] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 515.569295][T20961] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 515.569327][T20961] tls_sw_sendmsg+0x9da/0x2360 [ 515.569362][T20961] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 515.569379][T20961] ? __pfx_aa_sk_perm+0x10/0x10 [ 515.569403][T20961] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 515.569420][T20961] ? sock_rps_record_flow+0x19/0x350 [ 515.569446][T20961] ? inet_getname+0x377/0x3c0 [ 515.569466][T20961] ? inet6_sendmsg+0x101/0x120 [ 515.569488][T20961] ? __pfx_inet6_sendmsg+0x10/0x10 [ 515.569508][T20961] sock_write_iter+0x333/0x4f0 [ 515.569535][T20961] ? __pfx_sock_write_iter+0x10/0x10 [ 515.569559][T20961] ? __futex_wait+0x371/0x420 [ 515.569587][T20961] ? __pfx___futex_wait+0x10/0x10 [ 515.569616][T20961] do_iter_readv_writev+0x619/0x8c0 [ 515.569643][T20961] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 515.569665][T20961] ? bpf_lsm_file_permission+0x9/0x20 [ 515.569686][T20961] ? security_file_permission+0x75/0x260 [ 515.569708][T20961] ? rw_verify_area+0x255/0x4d0 [ 515.569727][T20961] vfs_writev+0x33c/0x990 [ 515.569753][T20961] ? __pfx_vfs_writev+0x10/0x10 [ 515.569782][T20961] ? __fget_files+0x2a/0x420 [ 515.569798][T20961] ? __fget_files+0x3a0/0x420 [ 515.569811][T20961] ? __fget_files+0x2a/0x420 [ 515.569829][T20961] do_writev+0x154/0x2e0 [ 515.569851][T20961] ? __pfx_do_writev+0x10/0x10 [ 515.569879][T20961] do_syscall_64+0x14d/0xf80 [ 515.569900][T20961] ? trace_irq_disable+0x3b/0x150 [ 515.569914][T20961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.569931][T20961] ? clear_bhb_loop+0x40/0x90 [ 515.569949][T20961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.569965][T20961] RIP: 0033:0x7f515819c819 [ 515.569988][T20961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.570002][T20961] RSP: 002b:00007f51590aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 515.570020][T20961] RAX: ffffffffffffffda RBX: 00007f5158416090 RCX: 00007f515819c819 [ 515.570032][T20961] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000004 [ 515.570042][T20961] RBP: 00007f5158232c91 R08: 0000000000000000 R09: 0000000000000000 [ 515.570052][T20961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.570062][T20961] R13: 00007f5158416128 R14: 00007f5158416090 R15: 00007ffc53b2c728 [ 515.570081][T20961] [ 515.727871][T20965] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3719'. [ 515.734456][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6420 ms [ 515.961130][ C0] lec:lec_tx_timeout: lec0 [ 515.968432][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 521.552041][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 521.560236][ C0] lec:lec_tx_timeout: lec0 [ 521.565150][ C0] lec:lec_start_xmit: lec0:No lecd attached