last executing test programs: 3.864196354s ago: executing program 2 (id=3964): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f0000000180)=""/20, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0xd9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) shutdown(r2, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a030600000000000000000a0000090900010073797a31000000000900020073797a32000000003800048034000180090001007866726d000000002400028008000140000000000500030001000000080002"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="735fffff00000000000000000000000000000000f9f05e23dbe903f1fbcc1057adbeccdfdf378e98638675b869a40397d2ca0e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000380), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000000080108000000000000000007e70004d7d2e4a47e86ba58f6de7120cac71b8912906c744256a7b85fcd7c13d7dfb069ae1330a506a007297183ad9a90acedd6d65df7de02bb2e08d29d1121f3a6d8294a3737fe9a20bb76076f30bc41ebe7e1a6090fe0b664da965e512ea642b6000000ca4500"/130], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 3.75515298s ago: executing program 2 (id=3967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.599705873s ago: executing program 2 (id=3968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1410e27d20a649f72fe94aa7342aac6b5bc6fe318573a2e968", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20008000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x24008000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000001cc0)="2501d77b330b7e73d6b100714fa228ee1f5b48", 0x13, 0x4044080, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="95d10fe1b9f115197e601cab26162bd4a5612be01c760f848b5c43939f628a9c59e14ccbb5d208354135993ef980c8da5fa03961dfe233c6a8d97cc7a487588c9b38803feed53b0eed3497259fee0ba3fc960b809dd0dd07da0e7286d9f62b77f5fef0dd424e730c54c6e386edfbc1235432218e947038d7a75548c2505db888800a4e1d27257f83973099a8259443f3c72927e0d3706cf99de87a4c28669d", @ANYRESHEX=r4], 0x13c}}, 0x20040881) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r6 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r6, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000002040)=""/201, 0xc9}], 0x1, &(0x7f0000004780)=""/71, 0x47}, 0xfffffff2}], 0x1, 0x2122, 0x0) sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) r7 = accept4(r5, 0x0, 0x0, 0x800) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffffff}, 0x1c) getsockopt$sock_buf(r8, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) socket$inet6(0xa, 0x2, 0xc89f) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9cab8fff73f3be52163448412ba894da7f4576f0473a9e7e33800934ae35c439075292d6817eca3f2a8585007a66b4720c38b1ac08914acc276330eaccd91565e5954ac10d3ee388c4b76c4aa5ed0de12bc478dc293a606958984dae9a449316f164c7ce1a8d88d3fe5864c893ebad7d8f7a0dd0fde81deede6bff0e047e645294d29eb5077e9ad9000000", 0x8d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="0400000000000000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 3.312643523s ago: executing program 1 (id=3975): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x2, 0x0, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) ioctl(r1, 0x10001, &(0x7f0000000080)="81766f3bd8d9e08cd528a4fe2d7008523e87fadbe580266fe3016a6169bd19b4b7db52b08aca610251f77976dca9e7d403aad475de8cbec8e3c184bb2dd39306c5769a0fe75a255f56bc22ffb57a0e1f659d6c5e8a7c7ff456cdd72778f624456c3d22f211d5bf0876159ab16d062a43682a1e859f2efbf8852be09e4655c6e8f763b04ee1c8af4901dabf2ff1e613895d8c4a2311d0353a84800653d1a65c3f9f02e3b263c5a50d8df08608f5b9affa193c9baccdf34d8d4b45c3169d97efe70db37c0d12e11b91d8caee5323048d869d74d15c90df98e29c8a05c2f388") (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) 3.257721294s ago: executing program 1 (id=3976): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x25dfdbfd, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0x2, 0x6, 0x9}}]}, 0x38}}, 0x20040810) sendmsg$NFT_BATCH(r1, 0x0, 0x804) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x3) sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="df3b46a1330000000000000000000000000000f1bfb4aa068fc60c48ae2cd8ab1fcc903b7ebd3bf583aaa8d7c8db6df62ecfbbbf9d88e22299fc6bf8966fde2978d207040000001fc672f220fb612483c7392064f03ec88c0d80463164cc66bad573b1862f7e9dd8c88d2a5ad193407968b7cc9beb08c875", 0x78}], 0x1}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="150000001000010000000000000000000500000a5c000000090a010400000000000000000a00000409000102000000000000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00021d210225429d948008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x24000050}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2.946681213s ago: executing program 0 (id=3978): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000800)=""/228, 0xe4}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0x5}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, 0x1403, 0x8, 0x70bd29, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x24004881}, 0x800) 2.927578134s ago: executing program 2 (id=3979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000080)='ip6tnl0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1040}, 0x8844) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7411}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@getneightbl={0x0, 0x42, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x4c8d1}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14001f003a00010325bd7000fcffffff08005bd5"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 2.923028858s ago: executing program 3 (id=3980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r0, 0x6, 0x2a, &(0x7f0000000380)=0xffffffff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) (async) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2a, &(0x7f0000000380)=0xffffffff, 0x4) (async) 2.836883849s ago: executing program 0 (id=3982): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) (async) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) r1 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x72}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYBLOB="00000000600000005800128008000100677470004c000280"], 0x78}}, 0x0) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ff28140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038014000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e6400000008000240000000064c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000000014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f30000000001400010063616966300000000000000000000000140001006d6163736563300000000000000000001400010070696d726567310000000000000000001400010076657468315f746f5f7465616d000000140001007465616d5f736c6176655f300000000008000140000000200900020073797a300000000010010380080001400000000005000140000000000800014000000000080002400000010108000140000000004000038014000100776732000000000000000000000000001400010069705f76746930000000000000000000140001006272696467655f736c6176655f300000a400038014000100626f6e645f736c6176655f300000000014000100776c616e31000000000000000000000014000100766574683000000000000000000000001400010070696d726567300000000000000000001400010076657468315f6d6163767461700000001400010076657468305f6d6163767461700000001400010073797a6b616c6c6572300000000000001400010064766d727030000000000000000000000000054000000000000000020900010073797a31000000001400000010000100"/872], 0x378}}, 0x0) 2.488363259s ago: executing program 3 (id=3983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000630400000000000085000000030000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x4e, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r6, 0x1, 0x26, &(0x7f0000000140)=""/35, &(0x7f00000001c0)=0x23) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x24, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0xfffffffffffffca0, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x60044814}, 0x20000000) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x38}}, 0x10) 2.325987669s ago: executing program 4 (id=3985): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000240)=""/247, &(0x7f0000000200)=0xf7) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4800) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000ce35d64c993b3ec9000008000300", @ANYRES32=r4, @ANYBLOB="0800050009000000"], 0x24}}, 0x20000800) 2.211700799s ago: executing program 3 (id=3986): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 2.192341846s ago: executing program 4 (id=3987): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default, @default]}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011140100fdffffff000000000800030000e2ffff070001"], 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) r4 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@nfc_llcp={0x27, 0x0}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000680)=""/162, 0xa2}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000740)=""/65, 0x41}], 0x3, &(0x7f0000000480)=""/56, 0x38}, 0x10021) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private=0xa010101, @in6=@local, 0x4e24, 0x7, 0x4e23, 0xe, 0xa, 0x80, 0x0, 0x3b}, {0x7fff, 0xec, 0x4, 0x8000000000000001, 0x0, 0x7, 0x9, 0x5}, {0xe, 0x4, 0xfffffffffffffffd, 0x4}, 0x7f, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3503, 0x3, 0x3, 0x89, 0xa, 0x81, 0x7f0000}}, 0xe8) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c0000002c00070100000000ffdbdf25037c00004800018041000000b68fe76f82e4540d2ce34be40cb271187443a3ece4c2b3bc4607197415f3721ccf9e97275a29de68113509db0975fe772bc1ba1bb7564b1f5ceb24ed61000000100002800c0001"], 0x6c}}, 0xc890) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) listen(r6, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={0x0, @nfc={0x27, r5, 0x1, 0x2}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, @qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x5, 0x0, 0x0, 0x0, 0x6, &(0x7f00000007c0)='dvmrp0\x00', 0x0, 0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept$netrom(r6, &(0x7f0000000180)={{0x3, @bcast}, [@default, @remote, @default, @remote, @default, @null, @netrom]}, &(0x7f0000000100)=0x48) 2.190428205s ago: executing program 3 (id=3988): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ccc323d1b914cb9d460c4bf4fa8d826cbb9c8fa45870c4c2080000006c7245ec4519dbfc918f92189e119efbb65457b497417b9f7bc0d44d23109f392ab03ae9041a57f06854477573000061f58e7f1d1634794564c5f78b7a85e40e857e8a9ad1f640cd39", @ANYRES64=0x0], 0x20) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000001dc0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r1, r4, 0x2f, 0x8, 0x4, @void, @value=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000caa000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0xffff9000) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f00000005c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x80, @broadcast}}, 0x24) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b"], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.096265165s ago: executing program 1 (id=3989): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4b4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@delchain={0x50, 0x64, 0xf31, 0x3, 0x4, {0x0, 0x0, 0x0, r4, {0x8, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}]}}]}, 0x50}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) 1.83146493s ago: executing program 2 (id=3990): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x70bd29, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xff}, @in6=@mcast1, {@in=@rand_addr=0x64010101, @in=@local, 0x4e22, 0x0, 0x4e24, 0xe0ec, 0x2, 0x80, 0x0, 0x32}, {{@in=@local, @in=@loopback, 0x4e24, 0x9, 0x4e23, 0x5, 0x2, 0x80, 0x20, 0x16}, {0x9, 0x40000003, 0x800, 0x7, 0x5, 0x2, 0x9, 0x1ff}, {0x27b, 0x2, 0x6, 0x4000000000000}, 0x3, 0x6e6bbd, 0x0, 0x0, 0x2}, 0x5, 0x0, 0x7, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x8c0}, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff180100002020782500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x28e83, 0x0) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000540)={0x281, 0x2}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000740), 0x75, r5}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd697a262d00383afefe8000000000000000000000000000aaff02000000000000000000000000000102009066e40004fe620813313f6fff00fc020000000000000000000000000000ff01000000000000000000000000000188000a38"], 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x32, 0xfff}) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r9, 0x0, 0xd, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r9, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r8, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @remote}, 0x292, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000400)='ip_vti0\x00', 0x8de4, 0xc3, 0x8}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r5}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44) 1.830815514s ago: executing program 0 (id=3991): socketpair(0x2a, 0x3, 0x2, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x4004, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x30, 0x0, 0x1, 0x7}, 0x28) 1.653244133s ago: executing program 3 (id=3992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x1fffffffc0000) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000700)=0x40, 0x2) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff088", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @remote}, &(0x7f0000000480)=0xc) sendto$packet(r6, &(0x7f0000000000)="643d531a3397ea4f4f0d7eeb11dc55183cc7c61708b334b65c474da8ede1d5bc7b8ba5f293ac2f3ae8619c83441d0a3ddd", 0x31, 0x8001, &(0x7f00000004c0)={0x11, 0x15, r7, 0x1, 0x6}, 0x14) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}}, {{0xa, 0x4e20, 0xffffffc0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}}}, 0x108) (async, rerun: 64) ppoll(0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) (rerun: 64) 1.583856744s ago: executing program 0 (id=3993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="8f0300", @void, {@mpls_mc={0x8848, {[], @ipv4=@icmp={{0x5, 0x4, 0x2, 0x33, 0x30, 0x66, 0x0, 0xf8, 0x1, 0x0, @broadcast, @multicast1}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0xf6, 0xff4e, {0x5, 0x4, 0x3, 0x10, 0x3, 0x66, 0x1, 0x15, 0x1, 0x86, @remote, @multicast2}}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x0, 0xb88f, 0x1}, {0x6, 0x1, 0x9, 0xa2df, 0x8, 0x10}, 0x8, 0xfffffff9, 0x9c3}}, @TCA_TBF_RATE64={0xc, 0x4, 0x1ee2644bd4c0a1f6}, @TCA_TBF_PRATE64={0xc, 0x5, 0x26ab54c204cc3d9d}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x3, 0xfffffffa, 0x10000, 0x3, 0x7, 0x0, 0x9a, 0x80000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x8000) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'pimreg\x00'}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x1}], 0x1, 0x40800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000000080)=""/97, &(0x7f0000000100)=0x61) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.361515571s ago: executing program 1 (id=3994): unshare(0x26020480) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480), &(0x7f0000000440)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="36522e5d54beaf24ae5665385e1566cea55b41cab1ecbb8d7f4632151be487b48edd94f61c267ee14ef9300fcd47dc190391bee205c16b5239b7ac5c12237fc95966ef6aa7da18fcffde6d86428fdfd22ac46b925eb3f9016c3cb63f55da3e7ed7ff0c2d7195aed0b15bb774cbbdfc1697d617a735a6ea91551e3680ebf24905b3364ec9212fe09b1664e8392279f2d0bce9e78d1206fb202765ae2d44778f3a2f389aaf48effce27f10f809655d6ab9a28194264c01fd1e8736dbd9fd612325627e470102b9dcbaff16bd67440a2af2", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x3e000a80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100), &(0x7f00000002c0)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4, 0x2, 0x91, 0x100}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) socket$inet6(0xa, 0x5, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040900"/20, @ANYRES32, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=r7, @ANYBLOB="00ecbade4c06dab900000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000007b1d000000e3ffffff0000001844000003000000000000000000000085000000a1000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000200000e92c9c408ac7e0599b82b01b2bd336c4db7490a16ed1138dfc9f7024d0ccd241a43989c9"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r7}, 0x4) 1.13999681s ago: executing program 4 (id=3995): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80000) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 1.016125352s ago: executing program 3 (id=3996): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22030f00) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f00000000c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x84, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2573}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c408d6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x223f7dcf}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1331f0a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3396}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1582eb82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eea34b3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x84}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r8, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 935.494103ms ago: executing program 1 (id=3997): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 769.204247ms ago: executing program 4 (id=3998): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010110}, @in6={0xa, 0x4e23, 0xb, @loopback, 0x101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000640)={r3, 0x16, 0x5, 0x8, 0x100, 0x3}, 0x14) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000180, 0x0, 0x0, 0x200000000180, 0x200000000180], 0x1e010000, 0x0, &(0x7f0000000180)}, 0x78) 659.558496ms ago: executing program 1 (id=3999): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6020400) getpeername(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 650.160146ms ago: executing program 4 (id=4000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d85f8af, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x10, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendto$inet(r1, &(0x7f0000000380)="a6", 0x1, 0x40, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 484.708376ms ago: executing program 2 (id=4001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x18db8, 0x10000000}) r1 = socket(0x22, 0x800, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0x15, 0xd3, 0x7, 0x35, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x2}, @sadb_x_sec_ctx={0x1b, 0x18, 0xff, 0x0, 0xce, "884f993ec43a821a5db234296c62bc124d243ab67b732bd2b7a8bcd3b22e33ea369ba5021aec3c004b6697c2472a6f1a8a2a509276f56791704d95fecbc417ad8cb46d8c1b1d8f1f12f032a769b8839cb9bba4b09973af719199c5f4ba051c5fde70167fcf073a3f08a931e44c04a342e1869a83740f909631a5655d463ee22ba56a1a98abd1c8c35f6f5e9e17ccf66960ababce1c03f827c75960348a1fac8a24c825815db45d14e9b0aff15ef862db721822072f145e5884f402926196f27ce5d807221a0e0400429261e10788"}, @sadb_x_sa2={0x2, 0x13, 0xc2, 0x0, 0x0, 0x70bd2d}, @sadb_x_sec_ctx={0x8, 0x18, 0x9, 0x8, 0x33, "91662cae68d6e5747b5a3905f8a26a95ca5023536bad390f76e34294b256a0b0e449cfbdde98b3d9d12814d7070ba661c0fa40"}]}, 0x1a8}}, 0x4805) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5e000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000300003802c00038014000100766972745f776966693000000000000014000100766c616e31"], 0x84}}, 0x0) 213.888262ms ago: executing program 0 (id=4002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8d8c}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x1bd5408b8967b69a}, 0x38) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) 194.781397ms ago: executing program 4 (id=4003): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x38, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x1b, 0x2f, 0x22, 0x40, 0x1d, 0x18, 0xb, 0x2e, 0x29, 0x2a, 0x12, 0x2, 0x1a, 0x32, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec", 0x77}], 0x1}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r9, @ANYRES32=0x0, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x3, 0xa4, &(0x7f00000006c0)=""/164, 0x41000, 0x0, '\x00', r2}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x4400) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r11, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r11, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="e31725017000ffdbdf250200000010248167dadf4aa58a59a406f295e15072e3057f395f160f8db366c686b0748928ecc76f8ce3dd35f932c768210626f8617fa662b0a377464d88c5fa16d49849cfa9a33916c80d89449b903814f642da995e490aba944d6cd23ef49c5b12516f93e9da7f23c07f5b47a76bb307b33ccab2c2d5a71b8b8da1a56b3cb5103e"], 0x14}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, 0x8) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 0 (id=4004): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x100, 0x1, 0xb, 0xbd64}, {0x7, 0x80, 0xa}, {0x6, 0x9, 0xfa, 0x7}, {0xfbff, 0xcc, 0x10, 0xff}, {0x0, 0x2, 0xf, 0x401}]}, 0x10) r1 = socket(0x26, 0x3, 0x4) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000100)="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", 0x1000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001100)={0x1, 'veth0_to_bridge\x00', {}, 0x7}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001180), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}}, 0x800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001300)={0x0, @dev, @local}, &(0x7f0000001340)=0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@bloom_filter={0x1e, 0x7, 0x9, 0x0, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x6}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x813b, 0xa865, 0x2, 0x0, 0x1, 0x9e2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0x5}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x5, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000012c0)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x7, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000013c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0x6, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001540)=[r5, r6], &(0x7f0000001580)=[{0x1, 0x3, 0xf, 0x8}, {0x1, 0x1, 0xc, 0xb}, {0x5, 0x2, 0x5, 0x3}, {0x4, 0x1, 0xf, 0x5}], 0x10, 0x1000}, 0x94) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000001680)={{r4}, 0x1, 0xffffffffffffffff, 0x8000000000000001}) r8 = accept4$packet(r1, 0x0, &(0x7f00000016c0), 0x80800) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000001700)={r3, 0x1, 0x6, @broadcast}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x8000) bind$netlink(r4, &(0x7f00000018c0)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) getpid() sendmsg$kcm(r4, &(0x7f0000002d00)={&(0x7f0000001900)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001980)="dbe9fbd2c15e676a5ca8899f567156be3b3710a396ccf3318ac3553904a76585388319907f4ce8cecc6b20", 0x2b}, {&(0x7f00000019c0)="8261cc06e1806ade4fd25579da8a5435f8d73f3403e01c64f87b81338047359a783e94cb37482bec3c2cba08531eb79f22345ef2ffab51c6ebe06f0e56e5dc6deee15e0b7eefdf87fa7a8864a520676049a00dce9988e342e9eeffc4a472fe9adc27c2f77425575e0ab21b4386a69b055f98835dbe377a509b42d3b43a473194072671ddf1595bcb50564981780f45378b4219b253791f3e17efa131295157e95461b89ae72e404a4b400466a69f393c3c0f636d71c6024597e1e55edd0312bb6332b7a9815ef73adf74b40437eca4c3102d83d652e8455265b691500fb22a234f5957", 0xe3}, {&(0x7f0000001ac0)="2442136bbf3d9e9f1176897f4dcea52b3d35f44d7c601e0574b79834623b57223912e88205897ed617da47cc41fd1b4ee17de7182b6729a4440f0826bf84cf8034c634db7374de8d11a12ecd951dbec09dac040a8691fc94b24427d97f34ce5710066fa06104050fda616f013554308723a90525eee90692ac8963f37ec86366a8c178ddf51daa4f30dd60d6a1dbadc7f8b6b35708f7ea23a40b07156e924ce3a73f91dba1a92b70a08d5b9097c0555311f025", 0xb3}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)="0ed2c393293ba06010d47b79a6049f608b26446951b9c1213744ee91c2eb680b07f09bc0e5c42a25ba8175c1abc021a1e82327b37467096d6825cd6cdc14a3f3f99050f3f730ab6ab46a6de9416f2f82674ccaeddad94560d558fb7142ec3316d87f1bed3456d9349c17fdca48fa53b14d2801895767004fb30ffc5413112a44abb1e1f74607396b9d1d579cf3", 0x8d}, {&(0x7f0000001c80)="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", 0x1000}], 0x6}, 0x81) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000002d40)={0x7, 0xfffffffffffffe01, 0x1ff}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002dc0), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x2c, r10, 0x300, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x83}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x2c}}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x2) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x3fb, 0x4, 0x70bd26, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002fc0)={'bridge_slave_1\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000003000)={0x2, 'dummy0\x00', {}, 0xc453}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000003080)={0x3, &(0x7f0000003040)=[{0x4, 0x6, 0x8, 0x1}, {0x400, 0x2, 0x9a, 0x6}, {0x3, 0x4, 0x4, 0xfffffff9}]}, 0x10) kernel console output (not intermixed with test programs): ve interface with an up link [ 468.167414][T16739] team0: Port device team_slave_0 added [ 468.183609][T16739] team0: Port device team_slave_1 added [ 468.189261][T16808] wg1 speed is unknown, defaulting to 1000 [ 468.222308][T16808] lo speed is unknown, defaulting to 1000 [ 468.243497][T16808] wg1 speed is unknown, defaulting to 1000 [ 468.245494][T16739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.265155][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.311717][T16739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.346738][T16739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.356287][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.382796][T16739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.548558][T16739] hsr_slave_0: entered promiscuous mode [ 468.558152][ T5844] Bluetooth: hci5: command tx timeout [ 468.568861][T16739] hsr_slave_1: entered promiscuous mode [ 468.589948][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2731'. [ 468.911572][T16842] IPv6: sit1: Disabled Multicast RS [ 469.269878][T16863] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2741'. [ 469.424260][T16739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.449347][T16739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.478067][T16739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.498256][T16868] xt_TCPMSS: Only works on TCP SYN packets [ 469.518606][T16739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.553469][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2745'. [ 469.806181][T16739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.857290][T16739] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.883193][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.890471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.922601][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.929791][T12035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.023631][T16897] siw: device registration error -23 [ 470.108373][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2749'. [ 470.622474][T16739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.631960][ T5844] Bluetooth: hci5: command tx timeout [ 470.714760][T16926] ip6_vti0 speed is unknown, defaulting to 1000 [ 470.825666][T16739] veth0_vlan: entered promiscuous mode [ 470.865868][T16739] veth1_vlan: entered promiscuous mode [ 471.012668][T16739] veth0_macvtap: entered promiscuous mode [ 471.029151][T16739] veth1_macvtap: entered promiscuous mode [ 471.094962][T16739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.306788][T16926] wg1 speed is unknown, defaulting to 1000 [ 471.312745][T16739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.319330][ T3033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.329622][ T3033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.357792][ T3033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.382777][ T3033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.405887][T16926] lo speed is unknown, defaulting to 1000 [ 471.462734][T16926] wg1 speed is unknown, defaulting to 1000 [ 471.645295][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 471.707867][T12034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.750421][T12034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.915734][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 472.182334][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.191737][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.226665][T16958] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.573838][T16958] wg1 speed is unknown, defaulting to 1000 [ 472.582398][T16958] lo speed is unknown, defaulting to 1000 [ 472.591086][T16958] wg1 speed is unknown, defaulting to 1000 [ 472.712590][ T5844] Bluetooth: hci5: command tx timeout [ 473.036445][T16995] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2771'. [ 473.068504][T16995] ksmbd: Unknown IPC event: 1, ignore. [ 473.144046][T16990] bond10 (unregistering): Released all slaves [ 473.323099][T16999] tipc: Enabling of bearer rejected, already enabled [ 473.624691][T17014] xt_l2tp: invalid flags combination: 0 [ 473.758353][T17012] xt_CT: No such helper "snmp_trap" [ 473.973790][T17012] netlink: 'syz.2.2775': attribute type 11 has an invalid length. [ 473.998243][T17012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 474.034893][T17012] syzkaller1: linktype set to 260 [ 474.355880][T17032] xt_CT: No such helper "snmp_trap" [ 474.495909][T17032] xt_CT: No such helper "snmp_trap" [ 474.691514][T17041] netlink: 'syz.2.2781': attribute type 1 has an invalid length. [ 474.699490][T17041] netlink: 'syz.2.2781': attribute type 2 has an invalid length. [ 474.761936][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'. [ 474.794911][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2785'. [ 475.086668][T17054] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.363433][T17067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2788'. [ 475.399428][T17069] xt_limit: Overflow, try lower: 268435456/134217728 [ 475.481782][T17072] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 475.518035][T17074] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 475.541706][T17075] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 475.729641][T17054] wg1 speed is unknown, defaulting to 1000 [ 475.738692][T17054] lo speed is unknown, defaulting to 1000 [ 475.759828][T17054] wg1 speed is unknown, defaulting to 1000 [ 475.801018][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 475.830066][T17080] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.922671][T17080] bridge_slave_1 (unregistering): left allmulticast mode [ 475.930968][T17080] bridge_slave_1 (unregistering): left promiscuous mode [ 475.938215][T17080] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.040281][T17086] syzkaller1: entered promiscuous mode [ 476.046121][T17086] syzkaller1: entered allmulticast mode [ 476.415580][T17093] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.423751][T17101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2796'. [ 476.423812][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 476.466547][T17101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2796'. [ 476.599251][T17108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 476.625865][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 476.638611][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'. [ 477.123910][T17093] wg1 speed is unknown, defaulting to 1000 [ 477.134183][T17093] lo speed is unknown, defaulting to 1000 [ 477.151360][T17093] wg1 speed is unknown, defaulting to 1000 [ 477.435094][T17125] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 478.164168][T17119] delete_channel: no stack [ 478.168850][T17119] delete_channel: no stack [ 478.305884][T17139] __nla_validate_parse: 2 callbacks suppressed [ 478.305903][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2804'. [ 478.447764][T17131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.474027][T17146] gretap0: entered allmulticast mode [ 478.475290][T17144] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 478.726299][T17156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2809'. [ 479.321436][T17189] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2818'. [ 479.331888][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2818'. [ 479.360643][T17189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2818'. [ 480.127738][T17229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'. [ 480.483369][T17239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2828'. [ 481.561040][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.589623][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.883157][T17230] ip6gretap1: left allmulticast mode [ 481.889457][T17230] macvlan2: left promiscuous mode [ 481.895073][T17230] macvlan2: left allmulticast mode [ 481.900430][T17230] macvlan3: left promiscuous mode [ 481.947623][T17230] bond9: left promiscuous mode [ 481.979564][T13055] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.021697][T13055] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.072880][T13055] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.095319][T13055] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.114389][T17250] x_tables: duplicate underflow at hook 1 [ 482.120284][T17250] x_tables: duplicate underflow at hook 1 [ 482.126703][T13055] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.126739][T13055] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.126776][T13055] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.126802][T13055] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.171886][T17250] x_tables: duplicate underflow at hook 1 [ 482.178229][T17250] x_tables: duplicate underflow at hook 1 [ 482.184776][T17250] x_tables: duplicate underflow at hook 1 [ 482.188975][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2832'. [ 482.194988][T17250] x_tables: duplicate underflow at hook 1 [ 482.212011][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 482.222902][T17253] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 482.228719][T17250] x_tables: duplicate underflow at hook 1 [ 482.240283][T17250] x_tables: duplicate underflow at hook 1 [ 482.257597][T17250] x_tables: duplicate underflow at hook 1 [ 482.264209][T17250] x_tables: duplicate underflow at hook 1 [ 482.635243][T17256] infiniband !yz!: set down [ 482.639894][T17256] infiniband !yz!: added team_slave_0 [ 482.682842][T17270] syzkaller1: entered promiscuous mode [ 482.688818][T17270] syzkaller1: entered allmulticast mode [ 482.713338][T17256] RDS/IB: !yz!: added [ 482.717567][T17256] smc: adding ib device !yz! with port count 1 [ 482.724994][T17256] smc: ib device !yz! port 1 has no pnetid [ 483.123110][T17293] syzkaller0: entered promiscuous mode [ 483.128656][T17293] syzkaller0: entered allmulticast mode [ 483.136849][T17295] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2839'. [ 483.283561][T17302] netlink: 'syz.3.2842': attribute type 39 has an invalid length. [ 483.393273][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2843'. [ 483.512819][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 483.564831][T17315] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 483.659343][T17314] netlink: 'syz.3.2845': attribute type 1 has an invalid length. [ 483.667761][T17314] netlink: 'syz.3.2845': attribute type 2 has an invalid length. [ 483.676557][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2845'. [ 483.702531][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2846'. [ 484.004721][T17317] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 484.042123][T17317] bond10: (slave batadv3): making interface the new active one [ 484.080302][T17317] bond10: (slave batadv3): Enslaving as an active interface with an up link [ 484.143886][T17320] 8021q: adding VLAN 0 to HW filter on device bond10 [ 484.734601][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'. [ 484.869891][T17343] syzkaller1: entered promiscuous mode [ 484.882933][ T5844] block nbd4: Receive control failed (result -32) [ 484.893401][T17343] syzkaller1: entered allmulticast mode [ 484.996138][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 485.027080][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 485.082467][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 485.233674][T17354] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2855'. [ 485.386804][T17363] syzkaller0: entered promiscuous mode [ 485.456265][T17363] syzkaller0: entered allmulticast mode [ 485.479617][T17366] syzkaller0: left promiscuous mode [ 485.488389][T17366] syzkaller0: left allmulticast mode [ 485.567467][T17374] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2860'. [ 487.334623][T17373] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 487.351093][T17373] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 487.361243][T17373] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 487.664371][T17400] syzkaller1: entered promiscuous mode [ 487.670076][T17400] syzkaller1: entered allmulticast mode [ 490.319832][T17409] veth13: entered promiscuous mode [ 490.342253][T17432] tipc: Enabled bearer , priority 0 [ 490.421338][T17432] tipc: Disabling bearer [ 490.453847][T17443] Unsupported ieee802154 address type: 0 [ 490.534736][T17448] syzkaller1: entered promiscuous mode [ 490.541113][T17448] syzkaller1: entered allmulticast mode [ 490.628061][T17451] __nla_validate_parse: 1 callbacks suppressed [ 490.628082][T17451] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2877'. [ 490.649250][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2879'. [ 490.744386][T17465] netlink: 'syz.1.2882': attribute type 5 has an invalid length. [ 490.752495][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'. [ 490.900261][T17472] batman_adv: batadv0: Adding interface: vlan2 [ 490.907702][T17472] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.951615][T17472] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 491.037290][T17480] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.089097][T17483] bridge0: port 1(macvtap1) entered blocking state [ 491.126418][T17483] bridge0: port 1(macvtap1) entered disabled state [ 491.146432][T17483] macvtap1: entered allmulticast mode [ 491.154935][T17483] bridge0: entered allmulticast mode [ 491.176444][T17483] macvtap1: left allmulticast mode [ 491.182274][T17483] bridge0: left allmulticast mode [ 491.284680][T17496] IPVS: set_ctl: invalid protocol: 4 172.30.1.3:20000 [ 491.384061][T17499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2886'. [ 491.562680][T17501] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2890'. [ 491.582436][T17480] wg1 speed is unknown, defaulting to 1000 [ 491.590119][T17480] lo speed is unknown, defaulting to 1000 [ 491.615758][T17480] wg1 speed is unknown, defaulting to 1000 [ 491.778172][T17503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2891'. [ 491.821171][T17503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2891'. [ 492.027927][T17507] netlink: 'syz.2.2893': attribute type 1 has an invalid length. [ 492.040525][T17507] netlink: 'syz.2.2893': attribute type 2 has an invalid length. [ 492.068967][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 492.105245][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2892'. [ 492.582726][T17528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.332822][T17544] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 493.637736][T17557] ieee802154 phy0 wpan0: encryption failed: -22 [ 493.696105][T17559] netlink: 'syz.3.2900': attribute type 1 has an invalid length. [ 493.707777][T17558] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.957341][T17558] wg1 speed is unknown, defaulting to 1000 [ 493.965924][T17558] lo speed is unknown, defaulting to 1000 [ 493.974383][T17558] wg1 speed is unknown, defaulting to 1000 [ 494.145347][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2904'. [ 495.111399][ T5844] Bluetooth: hci5: command 0x0405 tx timeout [ 495.341469][T17622] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.387721][T17622] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 495.928390][T17641] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 495.986871][T17641] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 496.147444][T17654] openvswitch: netlink: Message has 8 unknown bytes. [ 496.378614][T17654] __nla_validate_parse: 1 callbacks suppressed [ 496.378637][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2926'. [ 496.679051][T17672] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 496.722804][T17674] vlan0: entered allmulticast mode [ 496.727991][T17674] bridge_slave_0: entered allmulticast mode [ 496.776732][T17672] bond0: (slave wlan1): Releasing backup interface [ 496.791821][T17676] netlink: 'syz.3.2932': attribute type 1 has an invalid length. [ 496.809860][T17676] netlink: 'syz.3.2932': attribute type 2 has an invalid length. [ 496.819085][T17672] netlink: 'syz.2.2930': attribute type 10 has an invalid length. [ 496.827734][T17672] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 496.844775][T17672] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 497.261863][T17697] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.269044][T17700] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2939'. [ 497.312329][T17700] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 497.319474][T17704] sctp: [Deprecated]: syz.0.2936 (pid 17704) Use of int in maxseg socket option. [ 497.319474][T17704] Use struct sctp_assoc_value instead [ 497.419863][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2939'. [ 497.589988][T17700] bond10: (slave bridge10): making interface the new active one [ 497.631611][T17700] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 497.871713][T17718] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2942'. [ 497.988569][T17697] wg1 speed is unknown, defaulting to 1000 [ 498.013320][T17697] lo speed is unknown, defaulting to 1000 [ 498.032143][T17697] wg1 speed is unknown, defaulting to 1000 [ 498.958308][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.969568][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.983797][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.995364][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.004446][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.105669][T17752] ip6_vti0 speed is unknown, defaulting to 1000 [ 499.489447][T17762] netlink: 'syz.1.2954': attribute type 1 has an invalid length. [ 499.798347][T17752] wg1 speed is unknown, defaulting to 1000 [ 500.040779][T17752] lo speed is unknown, defaulting to 1000 [ 500.083031][T17752] wg1 speed is unknown, defaulting to 1000 [ 500.090002][T17774] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.176156][T17794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2962'. [ 500.189027][T17794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2962'. [ 501.030995][ T5838] Bluetooth: hci1: command tx timeout [ 501.038359][T17774] wg1 speed is unknown, defaulting to 1000 [ 501.038408][T17789] ip6_vti0 speed is unknown, defaulting to 1000 [ 501.055286][T17774] lo speed is unknown, defaulting to 1000 [ 501.102173][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'. [ 501.144992][T17774] wg1 speed is unknown, defaulting to 1000 [ 501.284975][T17823] bond0: (slave wlan1): Releasing backup interface [ 501.315132][T17823] bond10: (slave bridge10): Releasing active interface [ 501.408961][T17825] netlink: 'syz.2.2967': attribute type 10 has an invalid length. [ 501.440022][T17825] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 501.674795][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.690912][T17789] wg1 speed is unknown, defaulting to 1000 [ 501.704344][T17789] lo speed is unknown, defaulting to 1000 [ 501.704579][T17828] syzkaller1: entered promiscuous mode [ 501.723685][T17828] syzkaller1: entered allmulticast mode [ 501.733737][T17789] wg1 speed is unknown, defaulting to 1000 [ 501.763937][T17752] chnl_net:caif_netlink_parms(): no params data found [ 501.927393][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'. [ 502.071854][T17752] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.079937][T17752] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.101894][T17752] bridge_slave_0: entered allmulticast mode [ 502.110060][T17752] bridge_slave_0: entered promiscuous mode [ 502.134241][T17752] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.142120][T17752] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.149835][T17752] bridge_slave_1: entered allmulticast mode [ 502.158657][T17752] bridge_slave_1: entered promiscuous mode [ 502.306217][T17752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.358539][T17752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.659511][T17752] team0: Port device team_slave_0 added [ 502.666887][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 502.702414][T17752] team0: Port device team_slave_1 added [ 502.885564][T17752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.907573][T17752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.936120][T17752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.005528][T17752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.018671][T17752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.047021][T17752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.121104][ T5838] Bluetooth: hci1: command tx timeout [ 503.263226][T17752] hsr_slave_0: entered promiscuous mode [ 503.270267][T17752] hsr_slave_1: entered promiscuous mode [ 503.312596][T17752] debugfs: 'hsr0' already exists in 'hsr' [ 503.318389][T17752] Cannot create hsr debugfs directory [ 503.573242][T17865] bond0: (slave wlan1): Releasing backup interface [ 503.816856][T17752] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.829508][T17867] netlink: 'syz.1.2976': attribute type 7 has an invalid length. [ 503.917579][T17752] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.002597][T17752] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.098176][T17752] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.198089][T17874] syzkaller1: entered promiscuous mode [ 504.219476][T17874] syzkaller1: entered allmulticast mode [ 504.361453][T17872] ip6_vti0 speed is unknown, defaulting to 1000 [ 504.516220][T17752] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 504.548740][T17752] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 504.571693][T17752] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 504.603512][T17752] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 504.723748][T17882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.938646][T17872] wg1 speed is unknown, defaulting to 1000 [ 504.966438][T17872] lo speed is unknown, defaulting to 1000 [ 504.996224][T17872] wg1 speed is unknown, defaulting to 1000 [ 505.019532][T17893] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2982'. [ 505.023710][T17752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.076871][T17752] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.109616][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.116902][T12033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.167527][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.174772][T12033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.205797][ T5838] Bluetooth: hci1: command tx timeout [ 505.768342][T17908] ip6_vti0 speed is unknown, defaulting to 1000 [ 505.871891][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 505.881367][T17916] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 505.983799][T17916] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2987'. [ 506.019691][T17916] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2987'. [ 506.098019][T17752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.282286][T17922] netlink: 'syz.0.2988': attribute type 12 has an invalid length. [ 506.692435][T17931] syzkaller1: entered promiscuous mode [ 506.707147][T17931] syzkaller1: entered allmulticast mode [ 506.829449][T17908] wg1 speed is unknown, defaulting to 1000 [ 506.840094][T17908] lo speed is unknown, defaulting to 1000 [ 506.857596][T17908] wg1 speed is unknown, defaulting to 1000 [ 506.885696][T17752] veth0_vlan: entered promiscuous mode [ 506.934943][T17752] veth1_vlan: entered promiscuous mode [ 506.988155][T17752] veth0_macvtap: entered promiscuous mode [ 507.015398][T17752] veth1_macvtap: entered promiscuous mode [ 507.079614][T17752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.139382][T17752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.188944][T12034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.222637][T12034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.245900][T12034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.265194][T12034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.281305][ T5838] Bluetooth: hci1: command tx timeout [ 507.431136][T17943] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 507.475348][T12034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.511064][T12034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.567678][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.596728][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.881795][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2999'. [ 508.132186][T17970] syzkaller1: entered promiscuous mode [ 508.137838][T17970] syzkaller1: entered allmulticast mode [ 508.683699][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.702301][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.726595][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.736739][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.746438][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 508.983772][T17981] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.149172][T17993] netlink: 'syz.2.3008': attribute type 3 has an invalid length. [ 509.492136][T18007] syzkaller1: entered promiscuous mode [ 509.506298][T18007] syzkaller1: entered allmulticast mode [ 509.534209][T18008] netlink: 'syz.4.3011': attribute type 12 has an invalid length. [ 509.751364][T17981] wg1 speed is unknown, defaulting to 1000 [ 509.767990][T17981] lo speed is unknown, defaulting to 1000 [ 509.787243][T17981] wg1 speed is unknown, defaulting to 1000 [ 509.973363][T18016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3015'. [ 510.577029][T18027] syzkaller1: entered allmulticast mode [ 510.814272][ T5838] Bluetooth: hci2: command tx timeout [ 510.975149][T17981] chnl_net:caif_netlink_parms(): no params data found [ 511.099513][T18034] netlink: 'syz.4.3020': attribute type 21 has an invalid length. [ 511.116210][T18034] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3020'. [ 511.303139][T17981] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.311485][T17981] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.318970][T17981] bridge_slave_0: entered allmulticast mode [ 511.328278][T17981] bridge_slave_0: entered promiscuous mode [ 511.338933][T18034] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.341414][T17981] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.371412][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.378962][T17981] bridge_slave_1: entered allmulticast mode [ 511.387555][T17981] bridge_slave_1: entered promiscuous mode [ 511.542236][T17981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.557098][T17981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.686952][T17981] team0: Port device team_slave_0 added [ 511.699707][T18050] syzkaller1: entered promiscuous mode [ 511.709188][T18050] syzkaller1: entered allmulticast mode [ 511.722329][T17981] team0: Port device team_slave_1 added [ 511.769353][T18034] wg1 speed is unknown, defaulting to 1000 [ 511.785851][T18034] lo speed is unknown, defaulting to 1000 [ 511.787493][T17981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.798814][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.826762][T17981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.854363][T17981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.861666][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.910754][T17981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.935857][T18034] wg1 speed is unknown, defaulting to 1000 [ 511.956573][T18052] batadv2: entered promiscuous mode [ 512.038265][T18054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3024'. [ 512.113254][T17981] hsr_slave_0: entered promiscuous mode [ 512.132180][T17981] hsr_slave_1: entered promiscuous mode [ 512.138914][T17981] debugfs: 'hsr0' already exists in 'hsr' [ 512.173673][T17981] Cannot create hsr debugfs directory [ 512.569984][T18052] ip6_vti0 speed is unknown, defaulting to 1000 [ 512.871621][ T5838] Bluetooth: hci2: command tx timeout [ 513.230568][T18052] wg1 speed is unknown, defaulting to 1000 [ 513.257128][T18052] lo speed is unknown, defaulting to 1000 [ 513.362461][T18052] wg1 speed is unknown, defaulting to 1000 [ 513.575927][T18072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3029'. [ 513.782551][T18079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3033'. [ 513.802819][T18079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.814357][T18081] netlink: 'syz.3.3032': attribute type 1 has an invalid length. [ 513.995430][T17981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 514.019885][T17981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 514.036095][T17981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 514.059236][T17981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.097886][T18085] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.467293][T17981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.525803][T17981] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.548469][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.555727][T12033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.600918][T18085] wg1 speed is unknown, defaulting to 1000 [ 514.612828][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.620078][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.651436][T18085] lo speed is unknown, defaulting to 1000 [ 514.733407][T18085] wg1 speed is unknown, defaulting to 1000 [ 514.753768][T18116] af_packet: tpacket_rcv: packet too big, clamped from 252 to 4294967272. macoff=96 [ 514.763926][T17981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.781389][T17981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.950905][ T5838] Bluetooth: hci2: command tx timeout [ 515.140629][T17981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.219328][T17981] veth0_vlan: entered promiscuous mode [ 515.253426][T17981] veth1_vlan: entered promiscuous mode [ 515.321419][T17981] veth0_macvtap: entered promiscuous mode [ 515.332357][T17981] veth1_macvtap: entered promiscuous mode [ 515.373985][T17981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.407863][T17981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.706720][ T3033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.731037][ T3033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.778747][ T3033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.792909][ T3033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.134407][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.148382][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.277720][T12038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.302206][T12038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.406422][T18134] netlink: zone id is out of range [ 516.406422][T18135] netlink: zone id is out of range [ 516.406441][T18135] netlink: zone id is out of range [ 516.406450][T18135] netlink: zone id is out of range [ 516.411686][T18134] netlink: zone id is out of range [ 516.411698][T18134] netlink: zone id is out of range [ 516.411706][T18134] netlink: zone id is out of range [ 516.411715][T18134] netlink: zone id is out of range [ 516.411727][T18134] netlink: zone id is out of range [ 516.526216][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3045'. [ 516.536514][T18137] netlink: 'syz.1.3045': attribute type 12 has an invalid length. [ 516.683076][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3045'. [ 516.701158][T18137] netlink: 'syz.1.3045': attribute type 12 has an invalid length. [ 517.043120][ T5838] Bluetooth: hci2: command tx timeout [ 517.207414][T18156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 517.645057][T18170] netlink: 203840 bytes leftover after parsing attributes in process `syz.4.3051'. [ 517.706372][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3051'. [ 517.747299][T18173] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.813503][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3052'. [ 518.005175][T18184] tipc: Started in network mode [ 518.010895][T18184] tipc: Node identity 7e93c95a86d1, cluster identity 4711 [ 518.018423][T18184] tipc: Enabled bearer , priority 0 [ 518.029527][T18184] syzkaller0: entered promiscuous mode [ 518.038972][T18184] syzkaller0: entered allmulticast mode [ 518.088357][T18184] tipc: Resetting bearer [ 518.102383][T18182] tipc: Resetting bearer [ 518.124797][T18182] tipc: Disabling bearer [ 518.125539][T18186] netlink: 'syz.1.3055': attribute type 13 has an invalid length. [ 518.278771][T18173] wg1 speed is unknown, defaulting to 1000 [ 518.286060][ T6016] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.296741][T18173] lo speed is unknown, defaulting to 1000 [ 518.308148][ T6016] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.319830][T18173] wg1 speed is unknown, defaulting to 1000 [ 518.325844][ T6016] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.337305][ T6016] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.451997][T18192] netdevsim0: renamed from gretap0 [ 518.466202][T18192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3058'. [ 519.143801][T18208] bond6 (unregistering): Released all slaves [ 519.701997][T18223] ip6gre1: entered promiscuous mode [ 519.818324][T18227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.834435][T18223] tipc: Started in network mode [ 519.851031][T18223] tipc: Node identity 16c1ebfbe05, cluster identity 4711 [ 519.858383][T18223] tipc: Enabled bearer , priority 0 [ 519.905002][T18230] syzkaller0: entered promiscuous mode [ 519.912280][T18230] syzkaller0: entered allmulticast mode [ 519.949527][T18223] tipc: Resetting bearer [ 519.973033][T18222] tipc: Resetting bearer [ 520.031882][T18222] tipc: Disabling bearer [ 520.331500][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3078'. [ 520.356771][T18256] vlan2: entered promiscuous mode [ 520.380958][T18256] bond0: entered promiscuous mode [ 520.386891][T18256] bond_slave_0: entered promiscuous mode [ 520.410801][T18256] bond_slave_1: entered promiscuous mode [ 520.729839][T18279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 520.831192][T18287] sch_fq: defrate 4294967293 ignored. [ 521.106321][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 521.157244][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 521.299584][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 521.352736][T18309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3097'. [ 521.362484][T18309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3097'. [ 521.466322][T18315] netlink: 'syz.4.3099': attribute type 21 has an invalid length. [ 521.475916][T18315] netlink: 'syz.4.3099': attribute type 22 has an invalid length. [ 521.485514][T18315] netlink: 'syz.4.3099': attribute type 23 has an invalid length. [ 521.500249][T18315] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3099'. [ 521.504802][T18312] syzkaller0: entered promiscuous mode [ 521.522103][T18312] syzkaller0: entered allmulticast mode [ 521.574031][T18315] pimreg: entered allmulticast mode [ 521.581261][T18315] pimreg: left allmulticast mode [ 521.677895][T18320] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 524.256530][T18326] macvlan2: entered promiscuous mode [ 524.262200][T18326] macvlan2: entered allmulticast mode [ 524.267906][T18326] veth0_to_team: entered promiscuous mode [ 524.275258][T18326] veth0_to_team: entered allmulticast mode [ 524.286779][T18326] team0: Port device macvlan2 added [ 524.360700][T18333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3102'. [ 524.372899][T18336] tipc: Started in network mode [ 524.377821][T18336] tipc: Node identity b253e977cc7c, cluster identity 4711 [ 524.386120][T18336] tipc: Enabled bearer , priority 0 [ 524.424930][T18340] syzkaller0: entered promiscuous mode [ 524.437004][T18340] syzkaller0: entered allmulticast mode [ 524.466177][T18330] tipc: Resetting bearer [ 524.504269][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3107'. [ 524.505608][T18330] tipc: Disabling bearer [ 524.535401][ T50] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.549189][ T50] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.567222][ T50] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.592910][ T50] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.955214][T18386] ip6gre0: entered allmulticast mode [ 525.079087][T18380] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.092264][T18392] batadv_slave_1: entered promiscuous mode [ 525.276541][T18400] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 525.572172][T18391] batadv_slave_1: left promiscuous mode [ 525.585176][T18380] wg1 speed is unknown, defaulting to 1000 [ 525.594217][T18380] lo speed is unknown, defaulting to 1000 [ 525.614183][T18380] wg1 speed is unknown, defaulting to 1000 [ 525.839982][T18400] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.318190][T18400] wg1 speed is unknown, defaulting to 1000 [ 526.326302][T18400] lo speed is unknown, defaulting to 1000 [ 526.334535][T18400] wg1 speed is unknown, defaulting to 1000 [ 526.877575][T18421] netlink: 'syz.0.3125': attribute type 1 has an invalid length. [ 527.598760][T18435] __nla_validate_parse: 3 callbacks suppressed [ 527.598784][T18435] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3130'. [ 528.105298][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.119052][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.129386][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.138990][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.147569][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.377722][T18437] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.533600][T18440] netlink: 'syz.4.3131': attribute type 1 has an invalid length. [ 528.555538][T18440] netlink: 'syz.4.3131': attribute type 3 has an invalid length. [ 528.580520][T18440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3131'. [ 529.194543][T12034] veth3: left promiscuous mode [ 529.202466][T12034] bridge1: port 1(veth3) entered disabled state [ 530.170796][T12034] bond1 (unregistering): (slave gretap1): Releasing active interface [ 530.237500][ T5844] Bluetooth: hci0: command tx timeout [ 531.018792][T12034] bond0 (unregistering): (slave lo): Releasing backup interface [ 531.038955][T12034] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 531.060397][T12034] lo: left allmulticast mode [ 531.073254][T12034] bond0 (unregistering): Released all slaves [ 531.115832][T12034] bond1 (unregistering): Released all slaves [ 531.157624][T12034] bond2 (unregistering): Released all slaves [ 531.169225][T18455] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3135'. [ 531.346420][T12034] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 531.357070][T12034] bond3 (unregistering): Released all slaves [ 532.317484][ T5844] Bluetooth: hci0: command tx timeout [ 532.353831][T12034] bond4 (unregistering): Released all slaves [ 532.373345][T12034] bond5 (unregistering): Released all slaves [ 532.400256][T18437] wg1 speed is unknown, defaulting to 1000 [ 532.562462][T12034] : left promiscuous mode [ 532.570438][T18437] lo speed is unknown, defaulting to 1000 [ 532.613111][T18437] wg1 speed is unknown, defaulting to 1000 [ 532.678216][T18469] syzkaller0: entered promiscuous mode [ 532.684328][T18469] syzkaller0: entered allmulticast mode [ 532.735287][T12034] tipc: Left network mode [ 532.789753][T18474] tipc: Enabled bearer , priority 0 [ 532.814923][T18469] tipc: Enabled bearer , priority 0 [ 532.875791][T18474] tipc: Disabling bearer [ 532.910015][T18468] tipc: Resetting bearer [ 532.973820][T18468] tipc: Disabling bearer [ 533.941932][T18521] tipc: Enabled bearer , priority 0 [ 534.259849][T18521] syzkaller0: entered promiscuous mode [ 534.272804][T18521] syzkaller0: entered allmulticast mode [ 534.391616][ T5844] Bluetooth: hci0: command tx timeout [ 534.440626][T18530] tipc: Resetting bearer [ 534.476616][T18520] tipc: Resetting bearer [ 534.585396][T18520] tipc: Disabling bearer [ 534.645189][T18437] chnl_net:caif_netlink_parms(): no params data found [ 534.725168][T12034] hsr_slave_0: left promiscuous mode [ 534.737100][T12034] hsr_slave_1: left promiscuous mode [ 535.675553][T18547] tipc: Enabled bearer , priority 0 [ 535.690919][T18548] syzkaller0: entered promiscuous mode [ 535.696514][T18548] syzkaller0: entered allmulticast mode [ 535.757778][T18536] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.801420][T18548] tipc: Resetting bearer [ 535.893477][T18548] tipc: Disabling bearer [ 535.947324][T18558] netlink: 'syz.3.3162': attribute type 10 has an invalid length. [ 535.971705][T18536] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.028307][T18558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.048726][T18558] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 536.101348][T18536] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.214960][T18571] can: request_module (can-proto-5) failed. [ 536.312174][T18569] can: request_module (can-proto-5) failed. [ 536.335994][T18536] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.382509][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.390007][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.401897][T18437] bridge_slave_0: entered allmulticast mode [ 536.409770][T18437] bridge_slave_0: entered promiscuous mode [ 536.425854][T18437] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.434270][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.441936][T18437] bridge_slave_1: entered allmulticast mode [ 536.451055][T18437] bridge_slave_1: entered promiscuous mode [ 536.467882][T18578] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.476773][ T5844] Bluetooth: hci0: command tx timeout [ 536.809652][T18578] wg1 speed is unknown, defaulting to 1000 [ 536.820796][T18593] netlink: 'syz.3.3167': attribute type 30 has an invalid length. [ 536.846818][T18437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.916916][T18578] lo speed is unknown, defaulting to 1000 [ 536.944706][T18437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.957627][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.003660][T12034] IPVS: stop unused estimator thread 0... [ 537.028700][T18578] wg1 speed is unknown, defaulting to 1000 [ 537.144426][T12038] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.170733][T12038] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.179155][T12038] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.191491][T18607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3169'. [ 537.286911][T18437] team0: Port device team_slave_0 added [ 537.309334][T18437] team0: Port device team_slave_1 added [ 537.406854][T18605] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.501133][T18437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.523467][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.612112][T18437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.729188][T18437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.750950][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.848030][T18437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.441915][T18605] wg1 speed is unknown, defaulting to 1000 [ 538.507173][T18605] lo speed is unknown, defaulting to 1000 [ 538.553063][T18605] wg1 speed is unknown, defaulting to 1000 [ 538.653868][T18437] hsr_slave_0: entered promiscuous mode [ 538.674435][T18437] hsr_slave_1: entered promiscuous mode [ 538.692046][T18437] debugfs: 'hsr0' already exists in 'hsr' [ 538.699341][T18437] Cannot create hsr debugfs directory [ 539.729970][T18640] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 539.777168][T18639] Bluetooth: MGMT ver 1.23 [ 539.790896][T18639] batadv0: entered promiscuous mode [ 539.808826][T18638] batadv0: left promiscuous mode [ 539.820737][T18638] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 540.443757][T18437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.481115][T18437] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.510711][T18437] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.532320][T18437] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.973691][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.024021][T18437] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.068933][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.076370][T13055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.124036][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.131278][T13055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.199238][T18663] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.215477][T18667] netlink: 'syz.4.3183': attribute type 29 has an invalid length. [ 541.255332][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 541.285829][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3183'. [ 541.310688][T18667] IPv6: Can't replace route, no match found [ 541.587117][T14832] IPVS: starting estimator thread 0... [ 541.697329][T18663] wg1 speed is unknown, defaulting to 1000 [ 541.705397][T18663] lo speed is unknown, defaulting to 1000 [ 541.710914][T18680] IPVS: using max 28 ests per chain, 67200 per kthread [ 541.713139][T18663] wg1 speed is unknown, defaulting to 1000 [ 541.822774][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3186'. [ 542.406962][T18699] xt_hashlimit: size too large, truncated to 1048576 [ 542.421086][T18699] xt_hashlimit: max too large, truncated to 1048576 [ 542.491459][T18701] netlink: 'syz.4.3190': attribute type 1 has an invalid length. [ 542.501227][T18691] bond2: Unable to set down delay as MII monitoring is disabled [ 542.509295][T18701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3190'. [ 542.524221][T18691] bond2 (unregistering): Released all slaves [ 542.802024][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.857812][T18705] netlink: 'syz.0.3191': attribute type 10 has an invalid length. [ 542.894166][T18705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3191'. [ 542.934698][T18710] netlink: 'syz.0.3191': attribute type 1 has an invalid length. [ 542.945493][T18705] batadv0: entered promiscuous mode [ 542.961023][T18705] batadv0: entered allmulticast mode [ 542.967052][T18705] bridge0: port 3(batadv0) entered blocking state [ 542.974551][T18705] bridge0: port 3(batadv0) entered disabled state [ 542.983214][T18705] bridge0: port 3(batadv0) entered blocking state [ 542.989711][T18705] bridge0: port 3(batadv0) entered forwarding state [ 543.060139][T18437] veth0_vlan: entered promiscuous mode [ 543.117836][T18714] syzkaller1: entered promiscuous mode [ 543.160444][T18714] syzkaller1: entered allmulticast mode [ 543.169379][T18437] veth1_vlan: entered promiscuous mode [ 543.275150][T18437] veth0_macvtap: entered promiscuous mode [ 543.352225][T18437] veth1_macvtap: entered promiscuous mode [ 543.415620][T18437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.434579][T18437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.467715][T12033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.481406][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 543.491123][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 543.514869][T12033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.527679][T12033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.544876][T12033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.557637][T18731] netlink: 'syz.4.3198': attribute type 4 has an invalid length. [ 543.604663][T18731] netlink: 'syz.4.3198': attribute type 4 has an invalid length. [ 543.853981][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.861886][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.882998][T18744] netlink: 'syz.3.3200': attribute type 1 has an invalid length. [ 544.028902][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.056697][T18739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.223720][T18745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.291015][T18751] veth7: entered promiscuous mode [ 544.300166][T18751] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 544.324079][ T1316] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.334573][ T1316] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.378500][T18753] syzkaller1: entered promiscuous mode [ 544.397437][T18753] syzkaller1: entered allmulticast mode [ 544.411793][ T1316] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.437087][ T1316] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.532527][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.565657][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.648289][T18764] : entered promiscuous mode [ 544.690013][T12033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.705517][T18764] netlink: 'syz.0.3204': attribute type 21 has an invalid length. [ 544.718316][T12033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.741144][T18764] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3204'. [ 544.800284][T18778] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 545.028943][T18784] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.185581][T18792] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 545.285055][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.295913][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.304977][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.314636][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.352833][T18793] netlink: 'syz.3.3208': attribute type 13 has an invalid length. [ 545.372951][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.652666][T18799] syzkaller1: entered promiscuous mode [ 545.661661][T18799] syzkaller1: entered allmulticast mode [ 545.704631][T18784] wg1 speed is unknown, defaulting to 1000 [ 545.723572][T18796] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.732327][T18784] lo speed is unknown, defaulting to 1000 [ 545.742528][T18784] wg1 speed is unknown, defaulting to 1000 [ 546.119359][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3215'. [ 546.182363][T18815] netlink: 'syz.1.3215': attribute type 5 has an invalid length. [ 546.190157][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3215'. [ 546.227815][T18816] syzkaller1: entered promiscuous mode [ 546.241302][T18816] syzkaller1: entered allmulticast mode [ 546.336790][T18796] wg1 speed is unknown, defaulting to 1000 [ 546.357724][T18796] lo speed is unknown, defaulting to 1000 [ 546.383227][T18796] wg1 speed is unknown, defaulting to 1000 [ 546.418048][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'. [ 546.428978][T18819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3217'. [ 546.459381][T18819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3217'. [ 546.474784][T18819] netlink: 540 bytes leftover after parsing attributes in process `syz.1.3217'. [ 546.656541][T18833] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 546.683131][T18833] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3219'. [ 547.259988][T18852] netlink: 'syz.1.3223': attribute type 10 has an invalid length. [ 547.297830][T18847] netlink: 'syz.1.3223': attribute type 29 has an invalid length. [ 547.455458][ T5838] Bluetooth: hci4: command tx timeout [ 547.770282][T18852] team0: Cannot enslave team device to itself [ 547.789575][T18849] netlink: 'syz.1.3223': attribute type 29 has an invalid length. [ 547.798979][T18856] __nla_validate_parse: 3 callbacks suppressed [ 547.799000][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3224'. [ 547.991714][T18860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.087321][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3225'. [ 548.171911][T18868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3227'. [ 548.223759][T18870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'. [ 548.245922][T18871] Bluetooth: MGMT ver 1.23 [ 548.254956][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 548.298904][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.378759][T18870] bridge_slave_0 (unregistering): left allmulticast mode [ 548.386667][T18870] bridge_slave_0 (unregistering): left promiscuous mode [ 548.398054][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.399151][T18873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3227'. [ 548.524696][T18796] chnl_net:caif_netlink_parms(): no params data found [ 548.679626][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'. [ 548.742406][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.749801][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.757326][T18796] bridge_slave_0: entered allmulticast mode [ 548.766099][T18796] bridge_slave_0: entered promiscuous mode [ 548.775503][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.784509][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.792574][T18796] bridge_slave_1: entered allmulticast mode [ 548.799827][T18796] bridge_slave_1: entered promiscuous mode [ 548.848235][T18796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.861878][T18796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.963632][T18796] team0: Port device team_slave_0 added [ 548.974280][T18887] netlink: 'syz.3.3230': attribute type 2 has an invalid length. [ 548.987061][T18796] team0: Port device team_slave_1 added [ 549.011857][T18891] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3231'. [ 549.061757][T18887] 9: entered promiscuous mode [ 549.068275][T18796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.076656][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.108684][T18796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.141137][T18796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.160522][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.215917][T18796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.228733][T18890] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.363690][T18904] netlink: 'syz.4.3233': attribute type 12 has an invalid length. [ 549.476747][T18904] netlink: 'syz.4.3233': attribute type 4 has an invalid length. [ 549.492814][T18796] hsr_slave_0: entered promiscuous mode [ 549.512726][T18796] hsr_slave_1: entered promiscuous mode [ 549.515757][ T5838] Bluetooth: hci4: command tx timeout [ 549.519265][T18796] debugfs: 'hsr0' already exists in 'hsr' [ 549.537352][T18796] Cannot create hsr debugfs directory [ 550.076570][T18918] vlan0: entered promiscuous mode [ 550.101981][T18918] team0: Port device vlan0 added [ 550.137456][T18890] wg1 speed is unknown, defaulting to 1000 [ 550.151808][T18890] lo speed is unknown, defaulting to 1000 [ 550.184358][T18890] wg1 speed is unknown, defaulting to 1000 [ 550.706106][T18933] rdma_rxe: rxe_newlink: failed to add lo [ 550.717199][T18943] xt_hashlimit: size too large, truncated to 1048576 [ 550.769571][T18943] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 550.984113][T18949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3245'. [ 551.022774][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 551.343840][T18796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 551.446162][T18796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 551.463329][T18796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 551.496491][T18796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 551.590808][ T5838] Bluetooth: hci4: command tx timeout [ 551.714489][T18796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.765619][T18796] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.799656][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.806912][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.848832][T18973] macsec1: entered promiscuous mode [ 551.857371][T18973] macsec0: entered promiscuous mode [ 551.862977][T18973] macsec1: entered allmulticast mode [ 551.868304][T18973] macsec0: entered allmulticast mode [ 551.877729][T18973] macsec0: left allmulticast mode [ 551.883178][T18973] macsec0: left promiscuous mode [ 551.931503][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.938740][T12034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.505407][T18992] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.655565][T18796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.816051][T18796] veth0_vlan: entered promiscuous mode [ 552.837777][T18796] veth1_vlan: entered promiscuous mode [ 552.894762][T18796] veth0_macvtap: entered promiscuous mode [ 552.907074][T18796] veth1_macvtap: entered promiscuous mode [ 552.945215][T18796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.988997][T18796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.148984][T19016] __nla_validate_parse: 2 callbacks suppressed [ 553.149003][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3260'. [ 553.192819][T12035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.249507][T12035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.297241][T12035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.323303][T18992] wg1 speed is unknown, defaulting to 1000 [ 553.328404][T12035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.409494][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.410393][T18992] lo speed is unknown, defaulting to 1000 [ 553.421192][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.455116][T18992] wg1 speed is unknown, defaulting to 1000 [ 553.496887][T12035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.507091][T19017] netlink: 'syz.4.3260': attribute type 13 has an invalid length. [ 553.519915][T12035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.671553][ T5838] Bluetooth: hci4: command tx timeout [ 554.285003][T19060] sctp: [Deprecated]: syz.3.3272 (pid 19060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.285003][T19060] Use struct sctp_sack_info instead [ 554.309450][T19055] tipc: Enabled bearer , priority 0 [ 554.345454][T19055] syzkaller0: entered promiscuous mode [ 554.360513][T19055] syzkaller0: entered allmulticast mode [ 554.515577][T19055] tipc: Resetting bearer [ 554.535371][T19065] tipc: Started in network mode [ 554.540295][T19065] tipc: Node identity a6c3e5a100c7, cluster identity 4711 [ 554.574923][T19065] tipc: Enabled bearer , priority 0 [ 554.595944][T19065] syzkaller0: entered promiscuous mode [ 554.611998][T19065] syzkaller0: entered allmulticast mode [ 554.633750][T19054] tipc: Resetting bearer [ 554.688327][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'. [ 554.702621][T19054] tipc: Disabling bearer [ 554.715105][ T30] audit: type=1804 audit(1767712516.628:6): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3275" name="/newroot/56/cgroup.controllers" dev="tmpfs" ino=305 res=1 errno=0 [ 554.779326][ T30] audit: type=1800 audit(1767712516.638:7): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3275" name="cgroup.controllers" dev="tmpfs" ino=305 res=0 errno=0 [ 554.814521][ T30] audit: type=1800 audit(1767712516.638:8): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3275" name="cgroup.controllers" dev="tmpfs" ino=305 res=0 errno=0 [ 554.939968][T19065] tipc: Resetting bearer [ 555.058303][T19065] tipc: Disabling bearer [ 555.429902][T19096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3281'. [ 555.454581][T19097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3281'. [ 555.534280][T19102] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20002 [ 555.696403][T19102] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.188890][T19102] wg1 speed is unknown, defaulting to 1000 [ 556.197414][T19102] lo speed is unknown, defaulting to 1000 [ 556.206441][T19102] wg1 speed is unknown, defaulting to 1000 [ 556.490789][T19118] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3288'. [ 556.779510][T19126] syzkaller1: entered promiscuous mode [ 556.836925][T19126] syzkaller1: entered allmulticast mode [ 556.876536][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3291'. [ 556.942330][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3292'. [ 557.050051][T19150] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 557.101982][T19153] netlink: 'syz.3.3294': attribute type 8 has an invalid length. [ 557.129283][T19152] ip6_vti0 speed is unknown, defaulting to 1000 [ 557.272235][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 557.291947][T19166] netlink: 'syz.0.3296': attribute type 5 has an invalid length. [ 557.299802][T19166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3296'. [ 557.368282][T19166] geneve2: entered promiscuous mode [ 557.390531][T19166] geneve2: entered allmulticast mode [ 557.528444][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 557.530612][T19161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.553009][T19171] net_ratelimit: 81 callbacks suppressed [ 557.553030][T19171] openvswitch: netlink: Invalid VLAN frame [ 557.619486][T19152] wg1 speed is unknown, defaulting to 1000 [ 557.625674][T12034] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 557.635098][T19165] syzkaller0: entered promiscuous mode [ 557.640872][T19165] syzkaller0: entered allmulticast mode [ 557.665187][T12034] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 557.679229][T12034] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 557.688841][T19152] lo speed is unknown, defaulting to 1000 [ 557.803505][T19152] wg1 speed is unknown, defaulting to 1000 [ 558.828703][T19192] __nla_validate_parse: 2 callbacks suppressed [ 558.828725][T19192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3303'. [ 559.298417][T19161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.321725][T19161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 559.398718][T19215] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3310'. [ 559.462114][T19219] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3311'. [ 559.655025][T19161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.680713][T19161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 560.153395][T19218] bridge_slave_1: left allmulticast mode [ 560.172675][T19218] bridge_slave_1: left promiscuous mode [ 560.178714][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.332635][T19161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.355087][T19161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 560.656921][T19240] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.932335][T19251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.192887][T19251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.282753][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3323'. [ 561.302839][T19273] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 561.341445][T19273] netlink: 'syz.0.3323': attribute type 2 has an invalid length. [ 561.417404][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 561.432197][T19251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.454653][T19240] wg1 speed is unknown, defaulting to 1000 [ 561.464837][T19278] macsec1: entered promiscuous mode [ 561.470196][T19278] macsec1: entered allmulticast mode [ 561.486218][T19240] lo speed is unknown, defaulting to 1000 [ 561.498397][T19240] wg1 speed is unknown, defaulting to 1000 [ 561.584700][T19251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.684370][T19288] netlink: 'syz.0.3328': attribute type 2 has an invalid length. [ 561.695030][T19288] netlink: 'syz.0.3328': attribute type 2 has an invalid length. [ 561.801914][ T3033] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.860010][ T1316] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.896245][ T1316] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.926986][ T1316] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.079325][T19285] siw: device registration error -23 [ 562.080657][T19288] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.406038][T19288] wg1 speed is unknown, defaulting to 1000 [ 562.414530][T19288] lo speed is unknown, defaulting to 1000 [ 562.423028][T19288] wg1 speed is unknown, defaulting to 1000 [ 562.827360][T19305] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3333'. [ 563.656023][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 563.668906][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 564.477521][T19336] netlink: zone id is out of range [ 564.485242][T19336] netlink: zone id is out of range [ 564.491279][T19336] netlink: zone id is out of range [ 564.505458][T19336] netlink: zone id is out of range [ 564.544923][T19336] netlink: zone id is out of range [ 564.554584][T19336] netlink: zone id is out of range [ 564.560164][T19336] netlink: zone id is out of range [ 564.631199][T19336] netlink: zone id is out of range [ 564.637640][T19336] netlink: zone id is out of range [ 564.660809][T19336] netlink: zone id is out of range [ 564.691721][T19347] xt_connbytes: Forcing CT accounting to be enabled [ 564.725618][T19347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 564.817475][T19351] veth8: entered allmulticast mode [ 565.310148][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3351'. [ 565.448537][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 565.473736][T19389] veth1_to_hsr: entered promiscuous mode [ 565.479599][T19389] macvtap1: entered promiscuous mode [ 565.485436][T19389] macvtap1: entered allmulticast mode [ 565.491866][T19389] veth1_to_hsr: entered allmulticast mode [ 565.558568][T19389] gretap1: entered promiscuous mode [ 565.619942][T19393] batman_adv: batadv0: Adding interface: macsec1 [ 565.635860][T19393] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.693717][T19393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.715499][T19393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.725706][T19393] batman_adv: batadv0: Interface activated: macsec1 [ 565.753120][T19403] tipc: Cannot configure node identity twice [ 565.979963][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3361'. [ 566.343460][T19437] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.423405][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 566.538412][T19451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3370'. [ 566.636444][T19451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3370'. [ 566.733448][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3372'. [ 566.750226][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3372'. [ 567.149381][T19481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 567.300503][T19481] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3376'. [ 567.338679][T19487] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 567.344022][T19491] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 567.744742][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3383'. [ 567.826645][T19505] ip6_vti0 speed is unknown, defaulting to 1000 [ 568.184514][T19531] netlink: 'syz.0.3390': attribute type 1 has an invalid length. [ 568.642777][T19505] wg1 speed is unknown, defaulting to 1000 [ 568.673470][T19505] lo speed is unknown, defaulting to 1000 [ 568.726103][T19505] wg1 speed is unknown, defaulting to 1000 [ 568.746952][T19553] bridge_slave_0: left allmulticast mode [ 568.764429][T19553] bridge_slave_0: left promiscuous mode [ 568.770635][T19553] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.831737][T19553] bond0: (slave bond_slave_0): Releasing backup interface [ 568.848385][T19553] bond0: (slave bond_slave_1): Releasing backup interface [ 568.881512][T19553] team0: Port device team_slave_0 removed [ 568.901818][T19553] team0: Port device team_slave_1 removed [ 568.922340][T19553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.952135][T19553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.987983][T19558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.010092][T19558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.045087][T19558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.071755][T19558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.186019][T19564] syzkaller0: entered promiscuous mode [ 569.192275][T19564] syzkaller0: entered allmulticast mode [ 569.244116][T19564] tipc: Enabled bearer , priority 0 [ 569.269703][T19563] tipc: Resetting bearer [ 569.436854][T19563] tipc: Disabling bearer [ 569.922096][T19582] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 570.519363][T19609] syz_tun: entered allmulticast mode [ 570.574700][T19609] dvmrp1: entered allmulticast mode [ 570.599305][T19604] __nla_validate_parse: 8 callbacks suppressed [ 570.599327][T19604] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3409'. [ 570.625173][T19604] block nbd0: Unsupported socket: should be TCP or UNIX. [ 571.174877][T19625] bridge_slave_0: left allmulticast mode [ 571.192620][T19625] bridge_slave_0: left promiscuous mode [ 571.198570][T19625] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.357199][T19625] bridge_slave_1: left allmulticast mode [ 571.372363][T19625] bridge_slave_1: left promiscuous mode [ 571.387133][T19625] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.482741][T19625] bond0: (slave bond_slave_0): Releasing backup interface [ 571.509438][T19625] bond0: (slave bond_slave_1): Releasing backup interface [ 571.555757][T19625] team0: Port device team_slave_0 removed [ 571.588023][T19625] team0: Port device team_slave_1 removed [ 571.601705][T19625] net_ratelimit: 48 callbacks suppressed [ 571.601729][T19625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.688604][T19612] syz_tun: left allmulticast mode [ 571.813080][ T5909] IPVS: starting estimator thread 0... [ 571.826140][T19637] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3416'. [ 571.835612][T19639] netlink: 'syz.1.3417': attribute type 4 has an invalid length. [ 571.861699][T19637] netlink: 'syz.3.3416': attribute type 9 has an invalid length. [ 571.864633][T19639] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 571.869566][T19637] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3416'. [ 571.900674][T19639] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3417'. [ 571.911001][T19638] IPVS: using max 28 ests per chain, 67200 per kthread [ 571.931473][T19640] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 571.949762][T19637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3416'. [ 571.961086][T19642] syzkaller1: entered promiscuous mode [ 571.966679][T19642] syzkaller1: entered allmulticast mode [ 572.407202][T19662] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3425'. [ 572.428440][T19662] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 572.551110][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 572.693450][T19673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3429'. [ 572.980027][T19691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3435'. [ 573.078656][T19691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.295245][T19706] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.523605][T19723] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 573.585683][T19723] veth9: entered promiscuous mode [ 573.616289][T19726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3444'. [ 573.811319][T19706] wg1 speed is unknown, defaulting to 1000 [ 573.827882][T19706] lo speed is unknown, defaulting to 1000 [ 573.854743][T19706] wg1 speed is unknown, defaulting to 1000 [ 573.892166][T19710] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.912370][ T5838] Bluetooth: hci4: command tx timeout [ 574.397484][T19744] xt_check_table_hooks: 23 callbacks suppressed [ 574.397505][T19744] x_tables: unsorted entry at hook 2 [ 574.422748][T19744] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 574.633491][T19747] tipc: Enabled bearer , priority 0 [ 574.641415][T19747] syzkaller0: entered promiscuous mode [ 574.646918][T19747] syzkaller0: entered allmulticast mode [ 574.742087][T19746] tipc: Resetting bearer [ 574.834112][T19746] tipc: Disabling bearer [ 574.944209][T19710] wg1 speed is unknown, defaulting to 1000 [ 574.944266][T19725] ip6_vti0 speed is unknown, defaulting to 1000 [ 574.954761][T19710] lo speed is unknown, defaulting to 1000 [ 574.986065][T19710] wg1 speed is unknown, defaulting to 1000 [ 575.333606][T19743] ip6_vti0 speed is unknown, defaulting to 1000 [ 575.495430][T19756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.642487][T19756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.736400][T19756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.756880][T19734] ip6_vti0 speed is unknown, defaulting to 1000 [ 575.866076][T19756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.083957][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.101761][T19743] wg1 speed is unknown, defaulting to 1000 [ 576.145684][T19734] wg1 speed is unknown, defaulting to 1000 [ 576.145768][ T6016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.241030][ T3033] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.258332][T19725] wg1 speed is unknown, defaulting to 1000 [ 576.302432][T19725] lo speed is unknown, defaulting to 1000 [ 576.303852][T12033] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.326886][T19743] lo speed is unknown, defaulting to 1000 [ 576.337690][T19725] wg1 speed is unknown, defaulting to 1000 [ 576.339217][T19734] lo speed is unknown, defaulting to 1000 [ 576.370167][T19734] wg1 speed is unknown, defaulting to 1000 [ 576.399773][T19743] wg1 speed is unknown, defaulting to 1000 [ 576.638181][T19764] netlink: 'syz.2.3454': attribute type 10 has an invalid length. [ 576.647758][T19764] __nla_validate_parse: 4 callbacks suppressed [ 576.647778][T19764] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3454'. [ 577.304321][T19778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.084229][T19789] can: request_module (can-proto-4) failed. [ 578.327956][T19781] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.554742][T19781] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.644314][T19781] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.645073][T19798] delete_channel: no stack [ 578.928024][T19808] syz_tun: entered allmulticast mode [ 578.993316][T19781] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.235594][T19802] dvmrp7: entered allmulticast mode [ 579.314820][T19818] syzkaller0: entered promiscuous mode [ 579.326314][T19818] syzkaller0: entered allmulticast mode [ 579.399533][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'. [ 579.433950][T19808] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3463'. [ 579.623838][T19801] syz_tun: left allmulticast mode [ 580.012754][T13055] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.066124][ T6016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.149009][T12038] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.207056][T12038] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.252941][T19843] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3472'. [ 580.691672][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 580.711933][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3478'. [ 580.847059][T19870] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 580.857724][T19870] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 581.202544][T19889] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3485'. [ 581.282329][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 581.717443][T19910] syzkaller1: entered promiscuous mode [ 581.724253][T19910] syzkaller1: entered allmulticast mode [ 581.894305][T19914] geneve2: entered allmulticast mode [ 581.912278][T19916] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 581.931761][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 582.092780][T19922] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 582.275447][T19931] netlink: 'syz.4.3500': attribute type 4 has an invalid length. [ 582.286095][T19931] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3500'. [ 582.353514][T19931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3500'. [ 582.578856][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'. [ 582.609213][T19948] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3503'. [ 582.799772][T19959] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3506'. [ 582.994941][T19971] netlink: 'syz.1.3509': attribute type 1 has an invalid length. [ 583.026294][T19971] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 583.198118][T19987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3512'. [ 583.468285][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3514'. [ 583.498269][T19996] veth1: entered promiscuous mode [ 583.508653][T19996] veth1: left promiscuous mode [ 583.767894][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3518'. [ 583.794158][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3518'. [ 583.966922][T20014] smc: net device bond0 applied user defined pnetid SYZ0 [ 583.984288][T20017] smc: net device bond0 erased user defined pnetid SYZ0 [ 584.239077][T20025] veth1_macvtap: left promiscuous mode [ 584.262608][T20025] macsec0: entered allmulticast mode [ 584.894008][T20047] Bluetooth: MGMT ver 1.23 [ 584.956752][T20047] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.047758][T20047] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.125875][T20047] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.219047][T20047] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.426740][T12034] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.447071][T20071] veth1_macvtap: left promiscuous mode [ 585.548186][T12034] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.600584][T12038] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.625817][T20076] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 585.641237][ T6016] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.098720][T20087] batman_adv: batadv0: Adding interface: dummy0 [ 586.106381][T20087] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.137765][T20087] batman_adv: batadv0: Interface activated: dummy0 [ 586.246920][T20092] batadv0: mtu less than device minimum [ 586.254743][T20095] netlink: 'syz.2.3540': attribute type 32 has an invalid length. [ 586.272932][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.285872][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.297867][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.310080][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.322185][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.334182][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.346189][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.358167][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.370235][T20092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.465699][T20095] bond2: Setting coupled_control to off (0) [ 586.850155][T20124] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 587.010964][T20129] syzkaller0: entered promiscuous mode [ 587.016680][T20129] syzkaller0: entered allmulticast mode [ 587.039953][T20129] tipc: Enabled bearer , priority 0 [ 587.101091][T20128] tipc: Resetting bearer [ 587.196042][T20128] tipc: Disabling bearer [ 587.232114][T20146] sctp: [Deprecated]: syz.0.3555 (pid 20146) Use of int in max_burst socket option. [ 587.232114][T20146] Use struct sctp_assoc_value instead [ 587.263662][T20146] team0: No ports can be present during mode change [ 587.308352][T20138] ip6_vti0 speed is unknown, defaulting to 1000 [ 587.372583][T20148] netlink: 'syz.3.3556': attribute type 3 has an invalid length. [ 587.424814][T20150] __nla_validate_parse: 10 callbacks suppressed [ 587.424837][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 587.478199][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 587.659925][T20160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3561'. [ 587.862290][T20169] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3563'. [ 587.904293][T20138] wg1 speed is unknown, defaulting to 1000 [ 587.923496][T20138] lo speed is unknown, defaulting to 1000 [ 587.945925][T20138] wg1 speed is unknown, defaulting to 1000 [ 588.082397][T20178] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3565'. [ 588.096111][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 588.126194][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3565'. [ 588.225775][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 588.258441][T20182] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 588.284193][T20183] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 588.376136][T20178] ip6_vti0 speed is unknown, defaulting to 1000 [ 588.727608][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3567'. [ 588.833582][T20178] wg1 speed is unknown, defaulting to 1000 [ 588.842261][T20178] lo speed is unknown, defaulting to 1000 [ 588.863424][T20178] wg1 speed is unknown, defaulting to 1000 [ 588.993898][T20193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3568'. [ 589.144160][T20171] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 589.405684][T20207] netlink: 'syz.4.3571': attribute type 30 has an invalid length. [ 589.597839][T20199] ip6_vti0 speed is unknown, defaulting to 1000 [ 590.282843][T20199] wg1 speed is unknown, defaulting to 1000 [ 590.298760][T20199] lo speed is unknown, defaulting to 1000 [ 590.412404][T20199] wg1 speed is unknown, defaulting to 1000 [ 590.700745][T20238] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 592.016985][T20264] ip6_vti0 speed is unknown, defaulting to 1000 [ 592.101288][T20278] sctp: [Deprecated]: syz.0.3591 (pid 20278) Use of int in max_burst socket option deprecated. [ 592.101288][T20278] Use struct sctp_assoc_value instead [ 592.347539][T20288] xt_TCPMSS: Only works on TCP SYN packets [ 592.364730][T20264] wg1 speed is unknown, defaulting to 1000 [ 592.394726][T20264] lo speed is unknown, defaulting to 1000 [ 592.425433][T20264] wg1 speed is unknown, defaulting to 1000 [ 592.827750][T20312] __nla_validate_parse: 5 callbacks suppressed [ 592.827772][T20312] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3600'. [ 592.868426][T20312] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 593.183023][T20330] nbd: couldn't find device at index 536870912 [ 593.448270][T20333] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3606'. [ 593.457633][T20333] net_ratelimit: 11 callbacks suppressed [ 593.457654][T20333] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 593.841650][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 593.957543][T20344] syzkaller1: entered promiscuous mode [ 593.964178][T20344] syzkaller1: entered allmulticast mode [ 594.185770][T20351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3609'. [ 594.229005][T20351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3609'. [ 594.302072][T20358] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 594.330068][T20357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3612'. [ 594.438943][T20361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3613'. [ 594.446115][T20357] bond1: entered promiscuous mode [ 594.481585][T20357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.544073][T20373] x_tables: duplicate underflow at hook 1 [ 594.638874][T20375] netlink: ct family unspecified [ 594.648265][T20375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.662621][ T9] IPVS: starting estimator thread 0... [ 594.743980][T20375] ip6gre1: entered promiscuous mode [ 594.763844][T20378] IPVS: using max 29 ests per chain, 69600 per kthread [ 594.926763][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 594.995291][T20395] netlink: 'syz.2.3623': attribute type 21 has an invalid length. [ 595.277023][T20410] netlink: 'syz.1.3628': attribute type 3 has an invalid length. [ 595.440076][T20418] tipc: New replicast peer: 0.0.0.0 [ 595.448323][T20418] tipc: Enabled bearer , priority 10 [ 595.455975][T20418] tipc: New replicast peer: 172.30.1.3 [ 595.466891][T20423] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 595.472306][T20428] tipc: Enabling of bearer rejected, already enabled [ 595.894002][T20444] syzkaller1: entered promiscuous mode [ 595.906662][T20444] syzkaller1: entered allmulticast mode [ 595.935130][T20444] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 595.956735][T20444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3636'. [ 596.606718][ T10] tipc: Node number set to 2785338785 [ 596.613299][T20464] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3641'. [ 596.981424][T20485] xt_socket: unknown flags 0x50 [ 597.439502][T20500] netlink: 'syz.0.3649': attribute type 13 has an invalid length. [ 597.448733][T20500] netlink: 'syz.0.3649': attribute type 17 has an invalid length. [ 597.656276][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'. [ 597.752973][T20505] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20002 [ 597.802605][T20508] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.819014][T20517] hsr_slave_0: left promiscuous mode [ 597.831520][T20517] hsr_slave_1: left promiscuous mode [ 598.227082][T20542] xt_TPROXY: Can be used only with -p tcp or -p udp [ 598.489468][T20552] __nla_validate_parse: 1 callbacks suppressed [ 598.489489][T20552] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3665'. [ 598.676352][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 598.683351][T20508] wg1 speed is unknown, defaulting to 1000 [ 598.695090][T20521] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.735843][T20564] netlink: 'syz.2.3668': attribute type 10 has an invalid length. [ 598.739951][T20508] lo speed is unknown, defaulting to 1000 [ 598.754403][T20562] netlink: 'syz.4.3667': attribute type 1 has an invalid length. [ 598.764186][T20562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3667'. [ 598.779950][T20564] team0: Port device dummy0 added [ 598.840151][T20508] wg1 speed is unknown, defaulting to 1000 [ 598.957101][T20573] netlink: 'syz.3.3670': attribute type 5 has an invalid length. [ 599.052759][T20575] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3670'. [ 599.424836][T20584] netlink: 'syz.3.3674': attribute type 9 has an invalid length. [ 599.433420][T20584] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3674'. [ 599.551821][T20521] wg1 speed is unknown, defaulting to 1000 [ 599.582538][T20521] lo speed is unknown, defaulting to 1000 [ 599.641247][T20521] wg1 speed is unknown, defaulting to 1000 [ 599.865915][T20591] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 599.988264][T20602] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.665652][T20599] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.675891][T20623] netlink: 'syz.4.3683': attribute type 1 has an invalid length. [ 600.725471][T20623] bond2: entered promiscuous mode [ 600.740561][T20623] bond2: entered allmulticast mode [ 600.756049][T20623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3683'. [ 600.821089][T20623] bond2: left promiscuous mode [ 600.830646][T20623] bond2: left allmulticast mode [ 600.841221][T20623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.966747][T20599] wg1 speed is unknown, defaulting to 1000 [ 600.977332][T20599] lo speed is unknown, defaulting to 1000 [ 600.984192][T20602] wg1 speed is unknown, defaulting to 1000 [ 600.998883][T20599] wg1 speed is unknown, defaulting to 1000 [ 601.017647][T20602] lo speed is unknown, defaulting to 1000 [ 601.065963][T20602] wg1 speed is unknown, defaulting to 1000 [ 601.209222][T20634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3686'. [ 601.797522][T20642] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3689'. [ 602.065236][T20644] NFSD: Failed to start, no listeners configured. [ 602.655592][T20655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3692'. [ 602.668642][T20655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3692'. [ 603.534640][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'. [ 603.975381][T20678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.338285][T20706] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 604.402614][T20706] veth0_vlan: left promiscuous mode [ 604.431739][T20706] veth0_vlan: entered promiscuous mode [ 604.459667][T20706] team0: Device veth0_vlan failed to register rx_handler [ 604.860920][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3717'. [ 604.894244][T20741] netlink: 'syz.0.3717': attribute type 3 has an invalid length. [ 604.898256][T20746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3716'. [ 605.175045][T20754] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.200978][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'. [ 605.221916][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 605.526615][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3726'. [ 605.565442][T20754] wg1 speed is unknown, defaulting to 1000 [ 605.572080][T20781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3727'. [ 605.573250][T20754] lo speed is unknown, defaulting to 1000 [ 605.592523][T20754] wg1 speed is unknown, defaulting to 1000 [ 605.849596][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'. [ 606.017978][T20792] tipc: Started in network mode [ 606.036178][T20792] tipc: Node identity , cluster identity 4711 [ 606.060449][T20792] tipc: Failed to obtain node identity [ 606.066031][T20792] tipc: Enabling of bearer rejected, failed to enable media [ 606.105482][T20794] syzkaller0: entered promiscuous mode [ 606.130865][T20794] syzkaller0: entered allmulticast mode [ 606.401045][T20804] netlink: 'syz.3.3734': attribute type 8 has an invalid length. [ 606.473001][T20809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'. [ 606.506592][T20810] netlink: 'syz.3.3734': attribute type 2 has an invalid length. [ 606.523507][T20806] bond6: entered promiscuous mode [ 606.549465][T20806] bond6: entered allmulticast mode [ 606.557595][T20806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 606.776816][T20810] netlink: 'syz.3.3734': attribute type 11 has an invalid length. [ 606.793397][T20810] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3734'. [ 606.867464][T20821] ip6_vti0 speed is unknown, defaulting to 1000 [ 607.190989][T20346] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 607.474328][T20821] wg1 speed is unknown, defaulting to 1000 [ 607.558557][T20821] lo speed is unknown, defaulting to 1000 [ 607.570029][T20821] wg1 speed is unknown, defaulting to 1000 [ 608.065129][T20863] netlink: 'syz.0.3747': attribute type 21 has an invalid length. [ 608.096959][T20863] netlink: 'syz.0.3747': attribute type 21 has an invalid length. [ 608.161694][T20868] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 608.561783][T20881] __nla_validate_parse: 6 callbacks suppressed [ 608.561804][T20881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3751'. [ 608.605840][T20884] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 609.044406][T20897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3756'. [ 609.280127][T20908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3762'. [ 609.384494][T20920] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20002 [ 609.621734][T20929] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3766'. [ 609.710203][T20929] bond4: option all_slaves_active: invalid value (13) [ 609.740047][T20929] bond4 (unregistering): Released all slaves [ 609.972993][T20940] tipc: Enabled bearer , priority 0 [ 610.028537][T20940] syzkaller0: entered promiscuous mode [ 610.046017][T20940] syzkaller0: entered allmulticast mode [ 610.184661][T20952] syzkaller1: entered promiscuous mode [ 610.200615][T20952] syzkaller1: entered allmulticast mode [ 610.722894][T20933] tipc: Resetting bearer [ 610.745083][T20933] tipc: Disabling bearer [ 611.117633][T20982] xt_ecn: cannot match TCP bits for non-tcp packets [ 611.182554][T20982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3780'. [ 611.390698][T20991] block nbd3: NBD_DISCONNECT [ 611.401026][T20991] block nbd3: Send disconnect failed -32 [ 611.425167][T20991] block nbd3: shutting down sockets [ 611.723353][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'. [ 611.995623][T21021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3792'. [ 612.058582][T21022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3792'. [ 612.083936][T21023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3792'. [ 612.180219][T21021] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 612.478172][T21058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3799'. [ 612.775335][T21068] syzkaller0: entered promiscuous mode [ 612.797924][T21071] netlink: 'syz.0.3803': attribute type 4 has an invalid length. [ 612.799222][T21068] syzkaller0: entered allmulticast mode [ 613.051471][T21081] nbd: device at index 64 is going down [ 613.332220][T21094] netlink: 'syz.4.3807': attribute type 5 has an invalid length. [ 613.714868][T21113] netlink: 'syz.4.3813': attribute type 13 has an invalid length. [ 613.735683][T21118] netlink: 'syz.3.3816': attribute type 1 has an invalid length. [ 613.769844][ T3033] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.781958][T21113] netlink: 'syz.4.3813': attribute type 13 has an invalid length. [ 613.798017][ T3033] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.813868][T21126] __nla_validate_parse: 7 callbacks suppressed [ 613.813892][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3816'. [ 613.838026][T21124] siw: device registration error -23 [ 613.963367][ T3033] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.015525][T21126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 614.161809][T21134] bond4: (slave bridge2): making interface the new active one [ 614.184442][T21134] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 614.206120][ T3033] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.227052][T21139] ip6_vti0 speed is unknown, defaulting to 1000 [ 614.271849][T21118] macvlan2: entered promiscuous mode [ 614.281122][T21118] macvlan2: entered allmulticast mode [ 614.293744][T21118] bond4: entered promiscuous mode [ 614.309070][T21118] bridge2: entered promiscuous mode [ 614.321989][T21118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 614.330686][T21118] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 614.348199][T21118] bond4: left promiscuous mode [ 614.353382][T21118] bridge2: left promiscuous mode [ 614.412974][T21145] pimreg3: entered allmulticast mode [ 614.642682][T21156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3824'. [ 614.952874][T21139] wg1 speed is unknown, defaulting to 1000 [ 614.962360][T21139] lo speed is unknown, defaulting to 1000 [ 614.970064][T21139] wg1 speed is unknown, defaulting to 1000 [ 615.063980][T21178] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!!b.>nS#^' [ 615.107292][T21178] CPU: 1 UID: 0 PID: 21178 Comm: syz.4.3829 Not tainted syzkaller #0 PREEMPT(full) [ 615.107330][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.107343][T21178] Call Trace: [ 615.107352][T21178] [ 615.107363][T21178] dump_stack_lvl+0xe8/0x150 [ 615.107400][T21178] sysfs_warn_dup+0x8e/0xa0 [ 615.107449][T21178] sysfs_do_create_link_sd+0xc0/0x110 [ 615.107477][T21178] device_add_class_symlinks+0x1cf/0x240 [ 615.107504][T21178] device_add+0x475/0xb80 [ 615.107531][T21178] wiphy_register+0x1d2e/0x2d20 [ 615.107582][T21178] ? __pfx_wiphy_register+0x10/0x10 [ 615.107613][T21178] ? __pfx_netdev_run_todo+0x10/0x10 [ 615.107641][T21178] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 615.107676][T21178] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 615.107704][T21178] ieee80211_register_hw+0x34a7/0x4110 [ 615.107729][T21178] ? __lock_acquire+0x6b6/0x2cf0 [ 615.107767][T21178] ? ieee80211_register_hw+0x1411/0x4110 [ 615.107803][T21178] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 615.107850][T21178] ? __hrtimer_setup+0x181/0x200 [ 615.107876][T21178] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 615.107906][T21178] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 615.107975][T21178] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 615.107996][T21178] ? kstrndup+0xbf/0x160 [ 615.108033][T21178] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 615.108064][T21178] ? __pfx___nla_validate_parse+0x10/0x10 [ 615.108107][T21178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 615.108137][T21178] ? rcu_is_watching+0x15/0xb0 [ 615.108169][T21178] ? __nla_parse+0x40/0x60 [ 615.108198][T21178] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 615.108231][T21178] genl_family_rcv_msg_doit+0x215/0x300 [ 615.108262][T21178] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 615.108299][T21178] ? bpf_lsm_capable+0x9/0x20 [ 615.108323][T21178] ? security_capable+0x7e/0x2e0 [ 615.108357][T21178] genl_rcv_msg+0x60e/0x790 [ 615.108386][T21178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 615.108405][T21178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 615.108446][T21178] netlink_rcv_skb+0x208/0x470 [ 615.108475][T21178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 615.108498][T21178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 615.108521][T21178] ? genl_rcv+0x19/0x40 [ 615.108574][T21178] ? down_read+0x274/0x2e0 [ 615.108597][T21178] ? genl_rcv+0xd/0x40 [ 615.108631][T21178] genl_rcv+0x28/0x40 [ 615.108660][T21178] netlink_unicast+0x82f/0x9e0 [ 615.108695][T21178] ? __pfx_netlink_unicast+0x10/0x10 [ 615.108718][T21178] ? __alloc_skb+0x198/0x3a0 [ 615.108740][T21178] ? netlink_sendmsg+0x642/0xb30 [ 615.108764][T21178] ? skb_put+0x11b/0x210 [ 615.108792][T21178] netlink_sendmsg+0x805/0xb30 [ 615.108832][T21178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.108865][T21178] ? aa_sock_msg_perm+0xf1/0x1b0 [ 615.108895][T21178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.108915][T21178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.108951][T21178] __sock_sendmsg+0x21c/0x270 [ 615.108987][T21178] ____sys_sendmsg+0x505/0x820 [ 615.109021][T21178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.109059][T21178] ? import_iovec+0x74/0xa0 [ 615.109089][T21178] ___sys_sendmsg+0x21f/0x2a0 [ 615.109118][T21178] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.109153][T21178] ? futex_wake+0x4b2/0x560 [ 615.109213][T21178] ? __fget_files+0x2a/0x420 [ 615.109239][T21178] ? __fget_files+0x3a0/0x420 [ 615.109279][T21178] __x64_sys_sendmsg+0x19b/0x260 [ 615.109309][T21178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.109349][T21178] ? rcu_is_watching+0x15/0xb0 [ 615.109391][T21178] do_syscall_64+0xec/0xf80 [ 615.109413][T21178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.109433][T21178] ? trace_irq_disable+0x37/0x100 [ 615.109460][T21178] ? clear_bhb_loop+0x60/0xb0 [ 615.109487][T21178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.109507][T21178] RIP: 0033:0x7f1ffe18f749 [ 615.109529][T21178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.109547][T21178] RSP: 002b:00007f1ffc3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.109572][T21178] RAX: ffffffffffffffda RBX: 00007f1ffe3e6090 RCX: 00007f1ffe18f749 [ 615.109588][T21178] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b [ 615.109602][T21178] RBP: 00007f1ffe213f91 R08: 0000000000000000 R09: 0000000000000000 [ 615.109616][T21178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.109628][T21178] R13: 00007f1ffe3e6128 R14: 00007f1ffe3e6090 R15: 00007ffd0c462fd8 [ 615.109666][T21178] [ 615.705373][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3830'. [ 615.875569][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3832'. [ 616.094042][T21193] geneve2: entered promiscuous mode [ 616.145595][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3835'. [ 616.154805][T21196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.169971][T21196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3835'. [ 616.178900][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3834'. [ 616.206421][T21193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3834'. [ 616.299535][T21197] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.799742][T21216] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3840'. [ 616.840527][T21216] netlink: 'syz.4.3840': attribute type 1 has an invalid length. [ 616.858583][T21216] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3840'. [ 616.878915][T21197] wg1 speed is unknown, defaulting to 1000 [ 616.932976][T21197] lo speed is unknown, defaulting to 1000 [ 616.968824][T21219] vlan4: entered allmulticast mode [ 616.974590][T21219] erspan0: entered allmulticast mode [ 617.012910][T21197] wg1 speed is unknown, defaulting to 1000 [ 617.586301][T21242] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 618.058094][T21261] netlink: 'syz.4.3854': attribute type 1 has an invalid length. [ 618.300187][T21267] bond4 (unregistering): Released all slaves [ 618.347002][T21271] bond3: (slave gretap1): making interface the new active one [ 618.355590][T21271] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 618.371768][T21276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.444406][T21261] vlan2: entered promiscuous mode [ 618.449846][T21261] bond3: entered promiscuous mode [ 618.456276][T21261] gretap1: entered promiscuous mode [ 618.932069][T21302] netlink: 'syz.1.3864': attribute type 11 has an invalid length. [ 619.139453][T21309] xt_nat: multiple ranges no longer supported [ 619.168707][T21315] x_tables: duplicate underflow at hook 2 [ 619.653918][T21346] syzkaller1: entered promiscuous mode [ 619.672923][T21346] syzkaller1: entered allmulticast mode [ 619.815006][T21351] geneve3: entered promiscuous mode [ 619.832112][T21353] __nla_validate_parse: 5 callbacks suppressed [ 619.832135][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3879'. [ 619.903763][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3878'. [ 620.087898][T21351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.201400][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 620.246681][T21351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.267245][T21365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3881'. [ 620.289506][T21363] netlink: 'syz.4.3881': attribute type 10 has an invalid length. [ 620.304906][T21359] ip6_vti0 speed is unknown, defaulting to 1000 [ 620.321537][T21367] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 620.349434][T21363] bond0: (slave wlan1): Opening slave failed [ 620.479587][T21351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.493642][T21371] netlink: 'syz.3.3883': attribute type 1 has an invalid length. [ 620.647383][T21376] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 620.660209][T21376] bond5: (slave batadv1): making interface the new active one [ 620.669739][T21376] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 620.793056][T21351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.855033][T21359] wg1 speed is unknown, defaulting to 1000 [ 620.867342][T21359] lo speed is unknown, defaulting to 1000 [ 620.887005][T21359] wg1 speed is unknown, defaulting to 1000 [ 620.897260][T21383] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 621.226250][T21385] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3887'. [ 621.257361][ T3033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.277070][T21387] ip6_vti0 speed is unknown, defaulting to 1000 [ 621.283898][ T3033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.334306][ T6016] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.381448][ T6016] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.611864][T21387] wg1 speed is unknown, defaulting to 1000 [ 621.632004][T21387] lo speed is unknown, defaulting to 1000 [ 621.654326][T21387] wg1 speed is unknown, defaulting to 1000 [ 622.379566][T21417] sch_fq: defrate 0 ignored. [ 622.569301][T21423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3897'. [ 622.822028][T21427] tipc: Enabled bearer , priority 0 [ 622.829599][T21427] syzkaller0: entered promiscuous mode [ 622.846439][T21427] syzkaller0: entered allmulticast mode [ 622.905944][T21426] tipc: Resetting bearer [ 622.936008][T21426] tipc: Disabling bearer [ 623.138224][T21435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.416304][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'. [ 623.561232][T21453] netlink: 'syz.3.3906': attribute type 21 has an invalid length. [ 623.610171][T21446] vlan2: entered promiscuous mode [ 623.630521][T21446] bond0: entered promiscuous mode [ 623.649911][T21446] vlan2: entered allmulticast mode [ 623.656501][T21446] bond0: entered allmulticast mode [ 623.664335][T21453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3906'. [ 623.675686][T21453] netlink: 'syz.3.3906': attribute type 1 has an invalid length. [ 623.743287][T21453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3906'. [ 623.949745][T21471] netlink: 'syz.1.3910': attribute type 2 has an invalid length. [ 623.975621][T21471] : entered promiscuous mode [ 623.988445][T21473] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3911'. [ 624.108701][T21485] ipvlan0: entered promiscuous mode [ 625.569141][T21525] __nla_validate_parse: 5 callbacks suppressed [ 625.569162][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'. [ 625.824360][T21537] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3932'. [ 625.839139][T21533] ip6_vti0 speed is unknown, defaulting to 1000 [ 626.094055][T21533] wg1 speed is unknown, defaulting to 1000 [ 626.106404][T21533] lo speed is unknown, defaulting to 1000 [ 626.123749][T21533] wg1 speed is unknown, defaulting to 1000 [ 626.130734][T21552] lo: entered allmulticast mode [ 626.352117][T21567] netlink: 'syz.4.3939': attribute type 1 has an invalid length. [ 626.373073][T21563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3940'. [ 626.424557][T21567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.520933][T21573] veth5: entered promiscuous mode [ 626.587699][T21573] bond4: (slave veth5): Enslaving as an active interface with a down link [ 626.628319][T21567] erspan0: entered allmulticast mode [ 626.642809][T21567] bond4: (slave erspan0): making interface the new active one [ 626.657625][T21567] erspan0: entered promiscuous mode [ 626.664180][T21567] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 626.685646][T21582] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 626.990230][T21598] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.3942'. [ 627.060525][T21598] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.3942'. [ 627.198282][T21611] netlink: 'syz.2.3945': attribute type 1 has an invalid length. [ 627.207028][T21611] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3945'. [ 627.319023][T21604] bond1 (unregistering): Released all slaves [ 627.705384][T21637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3947'. [ 628.623016][T21677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3959'. [ 628.796900][T21679] 0: reclassify loop, rule prio 0, protocol 800 [ 628.957109][T21692] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3964'. [ 628.974013][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 629.043698][T12033] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 629.361213][T21723] gretap0: entered promiscuous mode [ 629.371744][T21723] gretap0: entered allmulticast mode [ 629.468882][T21727] bond8: (slave bond_slave_1): Device is not our slave [ 629.476409][T21727] bond8: option active_slave: invalid value (bond_slave_1) [ 629.486695][T21727] bond8 (unregistering): Released all slaves [ 629.567219][T21737] ip6_vti0 speed is unknown, defaulting to 1000 [ 630.026535][T21737] wg1 speed is unknown, defaulting to 1000 [ 630.043631][T21737] lo speed is unknown, defaulting to 1000 [ 630.051650][T21737] wg1 speed is unknown, defaulting to 1000 [ 630.327077][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.352918][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.368334][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.385557][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.404551][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.419778][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.435620][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.451400][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.466517][T21765] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 630.626308][T21775] __nla_validate_parse: 1 callbacks suppressed [ 630.626328][T21775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3988'. [ 630.652872][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3988'. [ 630.665347][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3988'. [ 630.717978][T21782] netlink: 'syz.4.3987': attribute type 1 has an invalid length. [ 630.753157][T21781] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3989'. [ 630.754754][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 630.768018][T21781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3989'. [ 630.785336][T21785] netlink: 'syz.4.3987': attribute type 1 has an invalid length. [ 631.083255][T21781] bond1: option lp_interval: invalid value (0) [ 631.125397][T21781] bond1: option lp_interval: allowed values 1 - 2147483647 [ 631.169925][T21781] bond1 (unregistering): Released all slaves [ 631.249595][T21808] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3990'. [ 631.402257][T21808] vlan2: entered allmulticast mode [ 631.412783][T21808] erspan0: entered allmulticast mode [ 631.864383][T21825] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 631.881504][T21825] bridge3: entered allmulticast mode [ 631.898483][T21814] syzkaller0: entered promiscuous mode [ 631.928445][T21814] syzkaller0: entered allmulticast mode [ 632.656775][T21853] netlink: 'syz.0.4002': attribute type 1 has an invalid length. [ 632.670031][T21852] netlink: 'syz.0.4002': attribute type 1 has an invalid length. [ 632.700926][T21854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4003'. [ 632.717619][T21833] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.877986][ C0] [ 632.880862][ C0] ============================================ [ 632.887013][ C0] WARNING: possible recursive locking detected [ 632.893170][ C0] syzkaller #0 Not tainted [ 632.897575][ C0] -------------------------------------------- [ 632.903713][ C0] syz.1.3999/21841 is trying to acquire lock: [ 632.909784][ C0] ffff888059086958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 632.919698][ C0] [ 632.919698][ C0] but task is already holding lock: [ 632.927070][ C0] ffff8880afd64158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 632.936901][ C0] [ 632.936901][ C0] other info that might help us debug this: [ 632.944953][ C0] Possible unsafe locking scenario: [ 632.944953][ C0] [ 632.952448][ C0] CPU0 [ 632.955810][ C0] ---- [ 632.959194][ C0] lock(&qdisc_xmit_lock_key#3); [ 632.964309][ C0] lock(&qdisc_xmit_lock_key#3); [ 632.969610][ C0] [ 632.969610][ C0] *** DEADLOCK *** [ 632.969610][ C0] [ 632.977783][ C0] May be due to missing lock nesting notation [ 632.977783][ C0] [ 632.986200][ C0] 14 locks held by syz.1.3999/21841: [ 632.991524][ C0] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf7/0x260 [ 633.001719][ C0] #1: ffffc90000007d00 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x590 [ 633.011394][ C0] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 633.020905][ C0] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 633.029954][ C0] #4: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 633.039971][ C0] #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xc1/0x1940 [ 633.049540][ C0] #6: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 633.059458][ C0] #7: ffff888058631228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 633.072090][ C0] #8: ffff8880afd64158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 633.082401][ C0] #9: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 633.091285][ C0] #10: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0x1000 [ 633.101125][ C0] #11: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 633.110005][ C0] #12: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 633.120015][ C0] #13: ffff888030482228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 633.132723][ C0] [ 633.132723][ C0] stack backtrace: [ 633.138615][ C0] CPU: 0 UID: 0 PID: 21841 Comm: syz.1.3999 Not tainted syzkaller #0 PREEMPT(full) [ 633.138635][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.138645][ C0] Call Trace: [ 633.138653][ C0] [ 633.138661][ C0] dump_stack_lvl+0xe8/0x150 [ 633.138681][ C0] print_deadlock_bug+0x279/0x290 [ 633.138700][ C0] __lock_acquire+0x2540/0x2cf0 [ 633.138717][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 633.138734][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 633.138760][ C0] ? sch_direct_xmit+0x153/0x4b0 [ 633.138773][ C0] lock_acquire+0x107/0x340 [ 633.138787][ C0] ? sch_direct_xmit+0x153/0x4b0 [ 633.138806][ C0] _raw_spin_lock+0x2e/0x40 [ 633.138827][ C0] ? sch_direct_xmit+0x153/0x4b0 [ 633.138840][ C0] sch_direct_xmit+0x153/0x4b0 [ 633.138857][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 633.138869][ C0] ? kmalloc_reserve+0xbd/0x290 [ 633.138884][ C0] ? arp_send_dst+0x70/0x340 [ 633.138900][ C0] ? arp_solicit+0xbbd/0xe10 [ 633.138919][ C0] __dev_queue_xmit+0x1379/0x31c0 [ 633.138940][ C0] ? __dev_queue_xmit+0x289/0x31c0 [ 633.138963][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 633.138983][ C0] ? arpt_do_table+0x238/0x1fd0 [ 633.139000][ C0] ? __pfx_arpt_do_table+0x10/0x10 [ 633.139021][ C0] ? NF_HOOK+0x9e/0x3a0 [ 633.139039][ C0] NF_HOOK+0x310/0x3a0 [ 633.139055][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 633.139072][ C0] ? NF_HOOK+0x9e/0x3a0 [ 633.139087][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 633.139102][ C0] ? lock_acquire+0x107/0x340 [ 633.139116][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 633.139136][ C0] arp_xmit+0x16c/0x270 [ 633.139151][ C0] ? arp_xmit+0x23/0x270 [ 633.139167][ C0] arp_solicit+0xbbd/0xe10 [ 633.139186][ C0] ? arp_solicit+0xfc/0xe10 [ 633.139203][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 633.139221][ C0] ? __neigh_event_send+0xed6/0x1520 [ 633.139237][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 633.139254][ C0] __neigh_event_send+0xf3e/0x1520 [ 633.139273][ C0] neigh_resolve_output+0x198/0x750 [ 633.139288][ C0] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 633.139308][ C0] ip_finish_output2+0xbb6/0x1000 [ 633.139324][ C0] ? ip_skb_dst_mtu+0x917/0xb70 [ 633.139339][ C0] ? ip_finish_output2+0x3d0/0x1000 [ 633.139354][ C0] ? ip_finish_output+0x33a/0x3f0 [ 633.139369][ C0] ip_output+0x29f/0x450 [ 633.139384][ C0] ? ip_output+0x5b/0x450 [ 633.139399][ C0] iptunnel_xmit+0x5f8/0xa90 [ 633.139425][ C0] ip_tunnel_xmit+0x1c41/0x2390 [ 633.139451][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 633.139467][ C0] ? gre_build_header+0x3fd/0xa40 [ 633.139487][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 633.139502][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 633.139525][ C0] gre_tap_xmit+0x590/0x7a0 [ 633.139549][ C0] ? __pfx_gre_tap_xmit+0x10/0x10 [ 633.139568][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 633.139592][ C0] sch_direct_xmit+0x241/0x4b0 [ 633.139608][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 633.139626][ C0] __dev_queue_xmit+0x1379/0x31c0 [ 633.139646][ C0] ? __dev_queue_xmit+0x289/0x31c0 [ 633.139667][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 633.139682][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 633.139704][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 633.139726][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 633.139742][ C0] ? lock_acquire+0x107/0x340 [ 633.139766][ C0] bond_start_xmit+0xd2c/0x1940 [ 633.139783][ C0] ? bond_start_xmit+0xc1/0x1940 [ 633.139797][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 633.139814][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 633.139835][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 633.139858][ C0] __dev_queue_xmit+0x149d/0x31c0 [ 633.139879][ C0] ? __dev_queue_xmit+0x289/0x31c0 [ 633.139898][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 633.139919][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 633.139939][ C0] ? ip6_output+0x340/0x550 [ 633.139953][ C0] ? lock_acquire+0x107/0x340 [ 633.139966][ C0] ? ip6_output+0x340/0x550 [ 633.139985][ C0] ? ip6_finish_output2+0xe7e/0x1360 [ 633.140006][ C0] ? ip6_output+0x126/0x550 [ 633.140020][ C0] ip6_output+0x340/0x550 [ 633.140037][ C0] ndisc_send_skb+0xbce/0x1510 [ 633.140058][ C0] ? ndisc_send_skb+0x1e4/0x1510 [ 633.140078][ C0] ? kmem_cache_alloc_noprof+0x6b1/0x710 [ 633.140102][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 633.140122][ C0] ? __pfx_dst_output+0x10/0x10 [ 633.140150][ C0] addrconf_rs_timer+0x369/0x6a0 [ 633.140171][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 633.140187][ C0] ? do_raw_spin_lock+0x121/0x290 [ 633.140209][ C0] call_timer_fn+0x16e/0x590 [ 633.140226][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 633.140243][ C0] ? call_timer_fn+0xbe/0x590 [ 633.140258][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 633.140280][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.140304][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 633.140322][ C0] __run_timer_base+0x61a/0x860 [ 633.140341][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 633.140360][ C0] run_timer_softirq+0xb7/0x180 [ 633.140375][ C0] handle_softirqs+0x22b/0x7c0 [ 633.140391][ C0] ? do_softirq+0x76/0xd0 [ 633.140406][ C0] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 633.140425][ C0] do_softirq+0x76/0xd0 [ 633.140439][ C0] [ 633.140444][ C0] [ 633.140449][ C0] __local_bh_enable_ip+0xf8/0x130 [ 633.140463][ C0] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 633.140480][ C0] bpf_test_run_xdp_live+0x1880/0x1b20 [ 633.140500][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 633.140516][ C0] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 633.140544][ C0] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 633.140562][ C0] ? 0xffffffffa02057c0 [ 633.140581][ C0] ? 0xffffffffa02016c8 [ 633.140601][ C0] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 633.140623][ C0] ? _copy_from_user+0x94/0xb0 [ 633.140640][ C0] ? bpf_test_init+0x113/0x150 [ 633.140655][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 633.140673][ C0] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 633.140696][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 633.140713][ C0] ? __might_fault+0xb0/0x130 [ 633.140737][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 633.140755][ C0] bpf_prog_test_run+0x2c7/0x340 [ 633.140777][ C0] __sys_bpf+0x562/0x860 [ 633.140804][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 633.140830][ C0] ? rcu_is_watching+0x15/0xb0 [ 633.140851][ C0] __x64_sys_bpf+0x7c/0x90 [ 633.140868][ C0] do_syscall_64+0xec/0xf80 [ 633.140883][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.140897][ C0] ? trace_irq_disable+0x37/0x100 [ 633.140916][ C0] ? clear_bhb_loop+0x60/0xb0 [ 633.140931][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.140946][ C0] RIP: 0033:0x7f51f4f8f749 [ 633.140959][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.140973][ C0] RSP: 002b:00007f51f5e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.140989][ C0] RAX: ffffffffffffffda RBX: 00007f51f51e5fa0 RCX: 00007f51f4f8f749 [ 633.141001][ C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 633.141011][ C0] RBP: 00007f51f5013f91 R08: 0000000000000000 R09: 0000000000000000 [ 633.141020][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.141029][ C0] R13: 00007f51f51e6038 R14: 00007f51f51e5fa0 R15: 00007ffe239fcf28 [ 633.141047][ C0] [ 638.640937][T21575] erspan0: left promiscuous mode