last executing test programs: 3m32.632356711s ago: executing program 0 (id=2947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"/72], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m32.495025559s ago: executing program 0 (id=2949): unshare(0x400) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000006c0)={0x0, 0x10000000003000, 0x1000, 0x2, 0x1}, 0x20) accept4(r5, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008000}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, 0x42, 0x1, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x9, 0x4, 0x0, 0x1, [@generic="56b5bfa75b"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 3m32.336040241s ago: executing program 0 (id=2951): r0 = socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) socket$inet(0x2, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) (async) 3m30.550207168s ago: executing program 0 (id=2954): r0 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0xd, &(0x7f0000000180)=0x1f, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x53, 0x1000004, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8, 0xb4, 0xcfe}}) r6 = socket$netlink(0x10, 0x3, 0xa) writev(r6, &(0x7f0000000080), 0x0) 3m29.715870838s ago: executing program 0 (id=2959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x5, 0x1, 0x8000) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x4) (async) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000740), 0x0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}}, 0x0) 3m29.343660993s ago: executing program 0 (id=2962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) r4 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ec0100000f0301032cbd7000fedbdf250300000a9a655b0b203b0086a0eafda5f2683246cc2af0069bcf15da9a75476449e3c3a3cfa5f677d747e9687a5cbf218b824cf2a89dcb2723511d8a90b6b624e4c92402b08c78e80249d7f88cb06bdf426b673d6d9731e383d49e42a1bd8301eaa3519cd59878042bdacc361a6ffe5e4421e596ae20bba87d589bb96c2069869980f2ed3d9d2aaa0638aa5611c73a80dc19ceabb3ce6cceeca391571d4bb8dbd0fa6d48b1d11e9ee710865674e811ab00000000000000002c8201bbba4f296b12896ae86a0c2b35e5aa1c076b50da95a9da27b5b699fbef08004f00c0642e3ff1d99a29b9c54e98f39616481a4fc52f94657d24ec4a533d8071293c379219e63a2d3e9a9b5174cc4220850cf0da846cc11db13ee9d64063c10303006649116cfaa69e90c5d4aeafecf36749b08984e4d7ceff110a37aab28890a04312d09a2961246f38a4049c19d26c72e26e8163338cbe22eab88402c2174aa845c3276cc45018900d5ac8dc84eebb4c9575049c195e4aea101f6b9e771f79563067a10bdb53219739c832c756aa300558c057ce0942331e1775d7d25c851c", @ANYRES32=r2, @ANYBLOB="2400e28008008d00", @ANYRESHEX, @ANYBLOB="0400e6800c00b60089c60000000000000400ef8004005480a3c3930e1d6afaf44caa359851b43e752ff964038559b2b97110003a800800cc006e61740004003600180017800400000008005700", @ANYRES32=0x0, @ANYBLOB='\b\x00l\x00', @ANYRES32=r3, @ANYBLOB="51658647a2df3e2b7e3a548438fb2230900313145fa0d14f280cbb0448947e94e524f2ad766645aee8f586a4360163c22089cac513809ec9f3d5ab645c1784463f74ff21447183e33fd62ac0bcf10eed0c3ee4482bd25b0489e2b996ed81f6937d985d08000480040014802400578004000e800400258008001e00", @ANYRES32=r4, @ANYBLOB="04009a8005002000000000000400ab8000"], 0x1ec}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="2400e28008008d00", @ANYRESHEX, @ANYBLOB="0400e6800c00b60089c60000000000000400ef8004005480a3c3930e1d6afaf44caa359851b43e752ff964038559b2b97110003a800800cc006e61740004003600180017800400000008005700", @ANYRES32=0x0, @ANYBLOB='\b\x00l\x00', @ANYRES32=r3, @ANYBLOB="51658647a2df3e2b7e3a548438fb2230900313145fa0d14f280cbb0448947e94e524f2ad766645aee8f586a4360163c22089cac513809ec9f3d5ab645c1784463f74ff21447183e33fd62ac0bcf10eed0c3ee4482bd25b0489e2b996ed81f6937d985d08000480040014802400578004000e800400258008001e00", @ANYRES32=r4, @ANYBLOB="04009a8005002000000000000400ab8000"], 0x1ec}, 0x1, 0x0, 0x0, 0x841}, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f2ff3a117ccb33b05a", 0x9}], 0x1}, 0x80) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) (async) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, 0x1, 0x1, 0x300, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x40}}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x252, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r11]}, 0x80) 3m14.260998889s ago: executing program 32 (id=2962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) r4 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="2400e28008008d00", @ANYRESHEX, @ANYBLOB="0400e6800c00b60089c60000000000000400ef8004005480a3c3930e1d6afaf44caa359851b43e752ff964038559b2b97110003a800800cc006e61740004003600180017800400000008005700", @ANYRES32=0x0, @ANYBLOB='\b\x00l\x00', @ANYRES32=r3, @ANYBLOB="51658647a2df3e2b7e3a548438fb2230900313145fa0d14f280cbb0448947e94e524f2ad766645aee8f586a4360163c22089cac513809ec9f3d5ab645c1784463f74ff21447183e33fd62ac0bcf10eed0c3ee4482bd25b0489e2b996ed81f6937d985d08000480040014802400578004000e800400258008001e00", @ANYRES32=r4, @ANYBLOB="04009a8005002000000000000400ab8000"], 0x1ec}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="2400e28008008d00", @ANYRESHEX, @ANYBLOB="0400e6800c00b60089c60000000000000400ef8004005480a3c3930e1d6afaf44caa359851b43e752ff964038559b2b97110003a800800cc006e61740004003600180017800400000008005700", @ANYRES32=0x0, @ANYBLOB='\b\x00l\x00', @ANYRES32=r3, @ANYBLOB="51658647a2df3e2b7e3a548438fb2230900313145fa0d14f280cbb0448947e94e524f2ad766645aee8f586a4360163c22089cac513809ec9f3d5ab645c1784463f74ff21447183e33fd62ac0bcf10eed0c3ee4482bd25b0489e2b996ed81f6937d985d08000480040014802400578004000e800400258008001e00", @ANYRES32=r4, @ANYBLOB="04009a8005002000000000000400ab8000"], 0x1ec}, 0x1, 0x0, 0x0, 0x841}, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f2ff3a117ccb33b05a", 0x9}], 0x1}, 0x80) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) (async) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, 0x1, 0x1, 0x300, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x40}}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x252, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r11]}, 0x80) 5.194571598s ago: executing program 3 (id=4137): close(0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) unshare(0x6a040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) close(r4) 4.107280158s ago: executing program 2 (id=4150): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 3.910421678s ago: executing program 2 (id=4151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB="30468401"], 0x18) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="40007a800c000300a0d4e01051d6ff6314000100a141185d34a8353d9ec86372a23b0de6f87470a91cbb99c0fe5b1c37abc0da7ab2"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r3, 0x0, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) recvfrom$inet(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) read$alg(r3, &(0x7f0000000300)=""/74, 0x4a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400018102000000ac14140f000000000000000014000200020000006401010000000000000000000d0001007564703a73"], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001e40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e00)={&(0x7f0000001c80)={0x164, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "8eddef73031d5ec6f35ac552645604b4cb79d17a091b3e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf63}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000004}, 0x80810) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000440)="7914ca86ac613eb90a2234ca61f60ca925720bc4ee7b04440209652966561466ea1ce9ce571c08650f6202c6cd068740b7a4d6d4fbe4ec60f235317ca96d50062a0c6078323cbd45dddeae820ec77231cb6ad349e6166bb5803c06a97d519bfc69aae44410afb5d8e68f06506c9fa23d9a4fb52f8dbf6b83fd2d1738c3c5286249df9b7b716ad0c1562efc351c846b00153e478951c26eacf5708b9d9d00bbd2b938b90fbad1cd6f63ea1d567e98645e9d88ac221fb6c4ab9d8ec510e47594a321ca6770d24c6801e9ac201be23dd93e1cdfc6", 0xd3}, {&(0x7f00000002c0)="06b902cf49f587414c8583d6532fe37f8318e86b30c7a10523fbe1e2bf51dc0c3c6d38976ceffccd27ab952ef164848b1224f9491d700d", 0x37}, {&(0x7f00000005c0)="d56707ca935a811af3f39397d0d83bf7fe5489702c822352a2fa846e8002c6d0e144e08275d3d19e12ffbf5d575156e14faf51b2906f8bc61d0c4fadce4e05258a82e32ad4b99a5e4cccc38c97891b1811b37069bda1e5e5da839a05abd2fde3ab025d7527b0203ea69a38c6eeab6fe7ddab501ebea97d18b0240ec3654a69084364a0c81a9a71563c71b9f5d1274c648248c184faf21567fd612371", 0x9c}, {&(0x7f0000000380)="54d6953012f0b819612feafb3c4c5ab14affccf1ac7fa319899e43eb496e11660092aa87ade9fd7a8bfc51", 0x2b}, {&(0x7f0000000680)="0eff2b510c253fd4678bd0f3231c7b11deaabbf0ff430118384abf24fd1e947c636008fe2c3085c5bc604182400456ff26e4513fcb789c80aa4cf4b0ab99adb1c1bcfd594bc79e206c28b3ab4052c9dd3a2613e92ce6fe45e81ca2e4103e459949fb78ace785cd53b69af9fcdae6faf6da34248e8676bfb82ef4f583128fbbdc7c227f3a5509908c1373a48081972482a432408b1c785fe4c2e6e8ef40ac015cbf39e80094d0b592301630a1a86105cd75eb268cb37f4b03aa0a6f4de1a1b831b6509415a3ddd205d7e04e35eaf3c8bc435918ce5591a79b66a896a4030aa0c3e8f495ffbbda40c1a69000f1353b67dcef984c9ab4fb7e6ceb2617b7b67caf0f9674b0e02e25f818b9bed1baf886ed2a080f156a98967701431481417fc1b97cccb163f4a90ffed2e6a7aea942539c2de1c1fd91ab4e4f3b8a67fecf4850e9cb94c9061ca63c4ae9e8ab35a1d0c77cea8affd8dc1fd497d527262a82f435d90a2ac0aae93d5bc97ec900040e14d8df4abc44dc5a6b3862da9024d39168c9e2c71e85c9527febfb4aca52ed3fa1839dd50919f8e641209ceb0d2d6798131867fdbd9b3094148ca5e2081489e273af2d0422901b2de016458864ce29306005b85724573bd6dd6610bb8f70277c9d8e6f0736dcdb17f9ceb18ca0352d1bf8768b51d75c6acc3fbf4e49804b82193f09b573c0cba0975d3102f1e2e5369b29fc29124cd675f8ead3ba28e904d63bc67ae2f9789fb71480f640938910fb4274ed5715766c925d2c1d906917ab11e264f00eb2a72187f924bbffb6eb47d699a47e9ff7df2cc1ca8257cef355140541bb92bffa32955cb0a35426476374a7877277648aeab650e4025ea9ff61f8194e9f7047b8b4e6b0a92d3e7401c88824022da95543aac443088af1fe1e3bd2a71395bfc909ac70c495ca1c6ba596be0299d84e345e91077343aee0410913c0d8a7eadcf6a124d0855d7b13d28dfeabf89921b84876ff9b3d02b3ae6afc235dcb03165afc928c48e5c14c9c1e3eb084f43a0c586beb29b5163020895ac4ff44b6aeb21df92f8318e886449ea41030693ac2c6406575aca9cc346712c333071386dffc2fc99ffe7362297836d664325951b7dc7eab984a0cb55bf153fc1773d746e5353caa9b6e8f3be8efd3b8f611ad4f15ed05b3f6a63c2043d4647da546eb380cd40c5b8e8f2bc676c601c4ba196ccbbcbd6aa1566ee3758ad69c6cdf06342ea00d5fa16d9aff20e97a7960ec13e239990f59ec146918da59b82b115aa977316655cad63605a856ee57da2c888539a2f0647e8a5ed2b28c6bd215055350cc60d3615439be5e6ae4921845b5682f3e43cdddc4e72161cebac2b845919b8d03ba0d72000304badcf5a93b1588fb20f7ee34cdf9221b18569b64ac47e7e9919ec396bda92e7405219c5850bd7568f266ddc9c71a1ab6cbb4adfd13e981ac25b94cad71f3448805c7d7ac4bad9b27013043e6e4b486edf63949408f88f266d55ad6ef464c86e2752524ae29a3df9c4da0f33f5cc18d82f8d95b7aa73d1d384294c68e1ea27874c247d47d74d655608a7d866208fd1fa8650524b1498029aebeefa89136a06319f625f7f681162ff6f00177a28e657518d92c5d4c060be3779725c59e8a1d0b9435f111fe15b8e2fca28010d5e5f5c2b562c673d84626cd829c8b7a5d822378bdf42f6330bff85c68c7f853d24bc6df2474ae4ee6f1c1451761498ce23d247c9b071278e7012c465a23b205e8b6c744adc9fee57f9a3933c3cdc70b83f39702ce8cdcec668117ec7da794379ce5f107c07b78654b3892c68829cb0ec7a5bdbc3e8750112810e57680581d526d66ba69442343ca8a5ab6a9bf85cd345a41e1471236dbfa96ddaec7a2eaca94e247b137af978c5545388368dfe1034fa65c55f0119ae05f9f194b4e4da27c578ccf8418251e8e7c3c9038095d74105c8391d29d1d1bc82e9ce820e55b0810a78510e138ae26ab80e94a7e2ea3ce36e7addf3901e4a715144c20be02f525e73ab2a33d14b2d15634e563925d29e8db8ce4e2418351e1293c39d90ae0e6ee674838c72379e6a06ab93acc2cd8639df6996032ec3379239598c96051ae58fa9be29c3b2939e6b4e26b31131287efd155195bb28dfd49561fec3c5ac7c2b9fd6fb76f017df6d5811848be7b866b3d4a086899f01eb0662a600b7e90eefaf6c76c98eb8b8cdf1e0c4113c96da2800483122ac46e69bf242019ec059fe3b1cab67401015363fc6068d140a7ddc4975940ae60528b75253dd134e4a602adec5a46bfcd16c0760cbbc548de72889af77306ee29c880130d1decf53bc7e92b5f0b8db7f7413818c093566408bd24da86bab6deffedd196c3aed34b5aa98c291b7c44c176446e6cbbf9bd028fbb8a3df74489ec7659551cb2d6f9a5d3a9bcb9f3e8a66f3d95e201e9e95605da86ba02b99ed697f97ed82b3d700c98603b50fc22c865149927c6a7050da681e29ed443c9467dbf396cba47bd6ed7c6e080e9f50f2a70e12bff5074425f0fc9f8326228495e4577cd3a937a3bea04e54907b6d8ef33369ddab35fd04325147946fc40d5055b3f544ed6100828e630842815f6b4fca4b689fae18cb21788220599863fd3a77f92c2f8f4995632883c5437c2beca423fed784a45449336a1b6377f1d38c9361526558773d47cb5930cd671ee58ff1b4f91595c9082ea573161b780967e93ebe5d8c11239227f2af66f51fae66cec7c71844ac0469e09465b3a2990922df409fd809367d29a5e7d56da1da2a806d98b99c0e07945de6d41d16575e163e1c51667f903f2cf687f1e04b184a1c2a79f5ec1ae7d1c096011d9641b8d81abb97f9ff0ff4dc17860c78bac22bbce025dd739ee2eb872ddaacef98fc50cac4413471ff805fdc60d40d4c624884c03d13d430e38c68eb0945d0d61db54bd1f15338e3b8c29cffe0ca0934a67bbad42a74eee2e00f621f08aff4aeedcc99bb53b287ea4cef9cfe5ad6e89fc6ea80f42f34d018da4ef4a31fa728f2bb4a18513b3482a088c4756113b64f4f96001c1b5100b33bffe81be401200b49ac2d520a0df90d9039e62bb1ecaf9420f784a4dbc20792f5da25ad9c3659d1fdf93c7b0f8d8aa0345bd20e59d4cbcc446178f1fd092401a4f4fbc4daa2749a61a439eb8902b43fe4c9288eaa9f959eb8b2ec7a03dcb8f41d1a41ff1442ae728137569ba42c69c2e5a159fad6aee9f24c0acaf75370ed5d4fbe4b175912fe41cc049afb2775840541bc2dba411c7fa5da4f23498b568fd062fc6684392a90e2abd1d2963d2bdd4f7e1e4d0bf0c89bf9b7d6d74b5f86f125657a1a1c2f7c4b4a5a0f0e89d4b17eb1735acbf308eabd1bdb8c6a3a91b9f3137a814b024ce3522b1e90c37a142a51b9760d31cbc84c474ad792f99ea8cc98b385d3e2a2109710ba71a0ed948bef5e6118fff52d095511b289bca47fd3597938d7dba285d9caa7d11ca327ee3d3fbf321afef6452cd5cbbcfa81ce8ff72b7a3ec4333356b2ae1e0f366fd4f0f3c095c772f75a543c07fa4fe3a271a0fa7e82a5e4eddece47a2ce3b11dece54736bb5f7a26a965312a67aa121e83c664a0afb3199fde5f60f409f7e57ffbd63f086402ded17c7819482c8e62729b66525b7e31cceedba354eaf0353b2e0a6716fc962e146d29c95a12fb292d2f6fa2cb257a5d33b89061ecc96d9b99ff98fbf560b2efb24657ee623a578c3f52c3acb6a0a9ee24066364320e3979ca4c7dd24fee2fe65130ae1176310f0ae9d572583b737fe82ad02661cd50e2d2d689cdedb800c058c7c4860d282ea905550ed5bb1cef0ce414118621435a959b09056466fc395d15385b768a0d0b0b34797f7341c0d721fd81c59e39954c3febe7844aa1fbb2bbe1ab798a8947a68ed6da5368bf041f483c1c75b034e556c0333ec00f47baef38c12efdb1990aae746ef2296739a267b0ebbc1c81832996c7878aa5e633bf3d4bb2f8d7c0c3fdadb1cd3efd0f1aa6d2487e522e8dc9234191d3a9a61054f67d9e7c7e5e76c64d4d43dcc06af6aaa4e28cd7ffb88c1a0e85f9233ca2982ae591c2a8b748583eccdb68915b46af0e32043586eb96f8cd80921f744d890275230fe0fd0ae7e10876fa08961ebd811688b7ec35161798f1a4204039c806fed62bf94876ca0fa0e66e56107d4f43fd82e6281217b068664904ede24fa646f6720733db2319c0d1b7afee2c5354d0a80e829c6a95be4d0b9b59432ebc1e85b7148366f3b95d54e25abe5ac1ed64171d342ec53df33ee9a3ab92b9b235f0e92db07dfa0659cc1bc781c93771e9cf09070d7c5282c53fe8260f36b52b853924a74b0d9e5bd29aac80d3518552972fa78ee5a677e037f62c0d2beede8ea4343b4d1f57b02fbfaec7d3d18aa2e58f0dd0c020fbdfa8fdcb5c4a5b417931f4f9ad4f3de1604107fea91ebd4576300b41c069fdca9445dc4896a8b932d5d24e10561cee1697071358670f1115ac2182e6e8ef54d0a141acece58a36f2662f44c5282597131fe500a240e1f3039f496d6838a8c9fba5567b2f5a718dafdbf2aa7de83ff3e29818c55d0857c9835c7a22a269f2ad12b022ff2a7d2503c5e967f79fd2a2f8fcb183bcc56c5f82cd684d179190def287034f1d8984b6afaba02c97763204d635ef1e05b8c5f7ccda3cbe0843c5a449a089df1b6b533c0bdc5ed37bef336f0446da68bb21b672331a41e9a504ad6668222f9bdd9739e6162091703a1c7948899861588cb080b554d27cb468f89cfa523e9fec4b355ffcb9274ad624501d177b0f33a1d7fb7df65509b6e8231e61e7f2a5924bfd247f2d47540cfdbab128f4293a15473eb4085aa566e4a3114c2071c3c15f165942e5303252a67fca28f73ce6d26f1ec00b63acd8833642efaebbd2ca799ff7e5b82f5af079fcc3851001628d5bbe4d0dc487983d68186c4df02cf671f7181f035b55d5d75ca3d0c7aba4df16bcf3ae2ce60c869bfdce8086b521e92bafe8e69ad35e5d04a20da1161e90660aebcf7a192c296b2405bc1e7cdb74b4ebff4806cf6d1e0efcb9bc8c644e3a38ac7d7badf8db3c0aecf908b1284b9841f2a1b17026082d51cb7648fe072bbcc1e9ce15e9f8317993a471e17ed55139ae774fd5559775542c480e84b2a451254c784c45f8b967fce0c5f19834a62d572a94cd92f9e0c0218c2d0a353b2148c6adf5900164e6aaa4537ecca7a42c613f0d9aa01b4d3d6ac1334884f489d74c993fc873f01fc42115b6bad537368d9be91738c67b6de91c55beee51b42b3c9cfef9b42abaa7f58fd6ed9f66a90805457afe2c22a09b95a36d41cb133a677da40c1b0d08fe2c776a6a67eb847d25b7af9bf9afb7fea09a12714279012d1245aedab9fc4a95e889dab55261a3eb7b0a4ec75a62af414ba9739eb71b00f8669b641a679784170d64d7c4e7925934de2ece41e74b5d9f7bd7760040cfd5610051faee903da3246d359367b01f34c4608f9809ae49ec1e33737de8283f459e79f4075510e4676eda0d5c6d200685cd8cf66af66eed012b60630ca407bc24c41424d99d5c716f364d1a963255a66ff4db40ceae2fd0242bdefc1f90bb730f3de1c0a6aac9a5fcf8a7febd1f1605c5395d817347eb7e67603c54231dcfde05ac5c86aab364276b6753696613abc7a439d84a9d84f09e4675b8cb75bc1d41ac6364b92d39a3394269de4f9efe13a7b0b64bb39e16d0dd6d1e586e5d9b9db99103484eaeec81cb1fd5beacfebf49c6b0441cc10181a4339c417ba1b934a5cb5e67718c0bb155", 0x1000}, {&(0x7f0000001680)="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", 0xfd}], 0x6, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0xa8, 0x20000890}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000018c0)="cace821b880b3a8987565eed8a72f0eef1166e48a615adc16324c4264858c007848b5e2b273947b7680780de46e099afa9d82129d03f1a9ead7da77bf32b3c4a27cb113771c2e0d03cfc8e646926d60cd0fabb01e0385c46a30be1069653f25c1e4d4d3c979ced90af9af626eeac8451d554261e3db0997c44a7", 0x7a}], 0x1, &(0x7f0000001940)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0x38, 0x117, 0x2, 0x20, "e0350c31f1901a88a5a54e880133c2d4b3b64a772071db29240aaa9098a6987c"}, @assoc={0x18, 0x117, 0x4, 0x1f6}, @assoc={0x18, 0x117, 0x4, 0x1ad7}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x76, "b034ecdb9a2f83c12a7541b7da7337796db9c8d8fb30046841a38bc2aa5733ed092a13ad75be2e0c57456a98d91f84bc497a9aca698d7fbde0d3a9e1294b34096cce1d942445f4eb53791e8a05cdeedee523ebd7ca1a66f6c49f8a58f44cb30024f2a0ec4901166f8860653dd95a85dd71eb1b46b737"}], 0x128, 0x24008000}], 0x2, 0x8c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r9, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.990180653s ago: executing program 2 (id=4162): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000540)={0x2d, 0x0, 0x8000}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x43, 0x1}, 0x50) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) 2.479430934s ago: executing program 2 (id=4165): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f0000003040)=[{{&(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0x80, 0x0, 0x0, &(0x7f0000001ac0)=[{0x58, 0x104, 0x6, "2468e06031ec8cc5f3772378448e1695d55a47dd4317fe9605a285726862b790826076cdaeb741f24fa1acade74a788d15d2f189d3045a9f275eb64dedad9344974d6160"}, {0x50, 0x0, 0x1, "9d9559a67e7f3d7001218c4d760700000000000000b8047a077bde230bbb6164da6310be6f635dfee558484d922cd120248bc8309af6ed5dbf83dcfd38"}, {0x1010, 0x19, 0x2b, "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"}], 0x10b8}}, {{&(0x7f0000002b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x0, 0x4, {0xa, 0x4e21, 0x93d, @mcast2, 0x2}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002c00)="32b68c8d545fc876d72ef90d4d8e59a706a3ede5e534b6cba966554a4b0db5ef3248e970d504ad7c474cce4eb4018b9f74c196159c498953df80782afeae51f7b30a330a190119dbd418fb04609b6d57361629cdbfbef3fbd4bf49a917fc5f075009f61aaccab4fb0ef3301e7334", 0x6e}, {&(0x7f0000002c80)="af6c474fd9a3829df4592326ee577ce75bbe9971da6c9f8a55e0e4e53cbd4e23cbe170f14ebcd80753543d93d4ce755123df5f50950cc9ab2784ff121b1c18b0b2429ded225ce37346d614d751c4edfe6e04376f990f675cf5b2014b853622507d378f55b46f80a62ace955d4f05ddc53c9221d796e1886d6d8cd3ff0c02c9824f7f2feeeca292635730a3bca61639b450572352fc744d", 0x97}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="415d1ad10aa2b78628862d1e7aee09263b1373f7f3c4390dcfbb8d88ed342d86c06b2e197a48ad9e", 0x28}, {&(0x7f0000002dc0)="40eb0ed00579275e82d305a569d341952991ce8b5bc9a5afdcaff977538ea089ad46db288c46e7a6971c1b6ed9178b7b1ff272c1ea0032402fb08ada9a94a5f9f950287e015adcccf256aeb89b024ca5735809171f72ff7f650b3acdfc92d937fb784eec502c74de1f35dba9c198de83f8469919b46a679b8ab81d60eb5c9b64dfa35c87e282f15fc7810a793ba25fbcbc6024c7e282f36808e96771a592be1c54c0d1b5343f036149b8838a6dd76796fcdbd4", 0xb3}, {&(0x7f0000002e80)="61dadd8c156810ec109a4d8f638d54d2896871833a2327eab80d9c90e6aafb36dec36894fb24aff0c46d66ad3f7e7ba2a62fecb25474bc38ed9eeec76605400ecc2eaf4431d0b99b3aee466b75e700bdbfb2b8dc6d", 0x55}], 0x6, &(0x7f0000002f80)}}], 0x2, 0x400d5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0xfcd, 0x0, 0x0, 0x40f00, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0x6, [@fwd={0x9}, @union={0x9, 0x6, 0x0, 0x5, 0x1, 0xd16, [{0x2, 0x2, 0x3}, {0x0, 0x2, 0x1}, {0x7, 0x1, 0x13}, {0xa, 0x5, 0x1}, {0xa, 0x1, 0x9}, {0xa, 0x2, 0x1}]}, @struct={0x2, 0x6, 0x0, 0x4, 0x0, 0x2, [{0x4, 0x3, 0xdb}, {0xd, 0x0, 0x7}, {0x0, 0x3, 0x1}, {0xa, 0x1, 0x3c0000}, {0x1, 0x0, 0x7}, {0x8, 0x4, 0x9}]}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0xb, [{0xa, 0x459eae8f, 0x8}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x7, 0x4}, {0xa, 0x4}]}, @union={0x3, 0x4, 0x0, 0x5, 0x0, 0x0, [{0xa, 0x2, 0x1b}, {0x0, 0x7d, 0x4}, {0xd, 0x2, 0x200}, {0xe, 0x0, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x0]}}, &(0x7f0000000a00)=""/4096, 0x14a, 0x1000, 0x0, 0xb, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x10001, '\x00', 0x0, r7, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000400)="411e3c7014cd4acc66c2d587aab1", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000000000c02000000000000000100000d0100000000000000000000000000005f"], 0x0, 0x3d, 0x0, 0x1}, 0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) 2.043064389s ago: executing program 2 (id=4170): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.862107722s ago: executing program 4 (id=4172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f00000000c0)=""/73, &(0x7f0000000140)=0x49) 1.791611368s ago: executing program 2 (id=4173): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd80, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x9}, {0xb, 0xfff4}, {0xfff2, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000080080000009111cb00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2000000bf090000000000005509010000000000950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff030000850000000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000002d00)=""/4097, 0x41100, 0x24, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 1.791200078s ago: executing program 5 (id=4174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x2c, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.759619689s ago: executing program 1 (id=4175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10280, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000011c0)={{r0, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80040, &(0x7f0000000100)={@_ha_fsid={[0x9, 0x3]}, {0x0, 0x1, 0x3a0, 0x3}}, 0x2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x10}, {[0x3, 0x1, 0x9, 0x4]}, 0x7, 0x1000, &(0x7f00000001c0)=""/4096}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$sock_netdev_private(r4, 0x3, &(0x7f0000001240)="d030e32c70bb07a434e6113049410974b2c55be3d0b071b55184b2f830d2c1adcf8a6572fc6cb5275a8ab1492463ef") r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001340)={'ip6tnl0\x00', &(0x7f00000012c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0xa3, 0x4, 0x13, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8, 0x700, 0xa, 0x3}}) sendmsg$nl_route(r4, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@ipmr_delroute={0x38, 0x19, 0x300, 0x70bd27, 0x25dfdbfd, {0x80, 0x10, 0x10, 0x6, 0x0, 0x1, 0xfe, 0x0, 0x2400}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_IIF={0x8, 0x3, r6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x4}}]}, 0x38}}, 0xc050) r7 = socket$inet_udp(0x2, 0x2, 0x0) listen(r7, 0x8) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmmsg$inet(r5, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) 1.714901946s ago: executing program 3 (id=4176): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x108002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000801017000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) (rerun: 32) socket$packet(0x11, 0x2, 0x300) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.639065365s ago: executing program 4 (id=4177): unshare(0x400) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, r0, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xab, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x20, 0x1, 0x7, 0x9}}) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a300000000068000000090a01dc440009f20400000000000000000700000208000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000106140000001000010000000000000000000084000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20050800) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r8, @ANYRESOCT=r8, @ANYBLOB="810200000000000014001a80100004800c000180", @ANYRES64=r8], 0x34}}, 0x4040) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x6, 0x1, 0x54, @loopback, @private2, 0x1, 0x7, 0x8, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, r12, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000001ff0), 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="89840000", @ANYRESHEX=r2, @ANYBLOB="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"/780, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080003000100000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f766972745f776966690008000100", @ANYRES32=r10, @ANYRES64, @ANYRES32=r12, @ANYBLOB="140002006d6163766c616e30000000000000000008000100", @ANYRES32, @ANYBLOB], 0x378}}, 0x2008040) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async, rerun: 64) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e1e, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 1.63584755s ago: executing program 5 (id=4178): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x3, @private0, 0x80000000}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) (async) r0 = socket$kcm(0x23, 0x5, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) socket$kcm(0x2, 0xa, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f0000000180)) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x60}, 0x1, 0x7}, 0x4048000) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x101, 0x7, 0x8008, 0x2, 0x4, 0x1, 0x9, 0x6bf639bc}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000100)="93d90400040300955a", 0x9}], 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4046840}, 0x0) (async) syz_emit_ethernet(0x195, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESDEC], 0x7c}}, 0x10) (async) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x66, &(0x7f0000000080)=0xfffffffb, 0x4) 1.531120243s ago: executing program 3 (id=4179): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYBLOB="110026bd7000fddbdf25070026", @ANYRES64=0x0, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000100000000000000030000", @ANYRES32, @ANYBLOB="0009000000abd4fbfc00"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11b43, 0x2001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r5, 0x4, 0x3, 0x1, 0x200, 0x20, @private1, @mcast1, 0x285a5d6aa534e5cf, 0x40, 0x673f, 0x9}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r10, 0x0, 0x40000300) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) 1.512174471s ago: executing program 4 (id=4180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000101030000000000000000000a000003440001802c000180"], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000)) close(0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000186dd06100001aaaaaaaaaaaafe88000000000000000000000000c2bbbbbbbbbbbbbb0000000000000000000000000000f400"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.32369025s ago: executing program 4 (id=4181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000500)="7c5331fc9356b5", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 1.274911226s ago: executing program 5 (id=4182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004c006000c0040800800034f95b1920008001b"], 0x34}}, 0x0) 1.220205176s ago: executing program 1 (id=4183): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x24044014) 1.078898514s ago: executing program 4 (id=4184): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb3cc, 0x0, 0x0, 0x0, 0x8000000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000700)=""/111, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.072680212s ago: executing program 1 (id=4185): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000020000000080000002d0301000000000095000000000000006926000000000000bf67200000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d3500000000000065070000020000000707000049ffffeb0f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@func={0x9, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0xd}, {0xf}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x92}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400130000000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48d4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r3 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000)=0x100, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x118, r5, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xde}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x3b, 0xc5, "9ac41afd3b3b673821f42a53d11d71f4b062fb2a4c9df6c59f90298ff89e6df559e8eb74e7d51f43ae6ade503d6b255f978fdae06de66f"}, @NL80211_ATTR_VENDOR_DATA={0x9f, 0xc5, "b617dac2887351d280de80e24a8473dfe930d1bad0ee9dacff0d916a22336e822d6110b4b60168aca648dd6c39bf18b21da50298d4d1365b219098ffbcc216472ea96c92d35d945381ee76242d74eb7b3f257c867f1d6dfd69db6ea62fecd11974b527ab5b19d2ea1e5923f4b6bb9ca502e6a7282bd5b042b15440da180cbe386d31604737ac320a63580c32aea7b3b5521638bd0dcd0859b28f03"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x118}}, 0x20044051) 1.053102047s ago: executing program 5 (id=4186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 403.069433ms ago: executing program 3 (id=4187): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2, 0x1000000}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="21a50600000000005000128009000100766c616e00000000400002800c0002000400000007000000280004800c00010004000000af0e00000c00010009000000ba1200000c0001000500000005000000060001000400000008000500", @ANYRES32=r5, @ANYBLOB="37384fe6"], 0x78}, 0x1, 0x0, 0x0, 0x4008011}, 0x24000050) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="21a50600000000005000128009000100766c616e00000000400002800c0002000400000007000000280004800c00010004000000af0e00000c00010009000000ba1200000c0001000500000005000000060001000400000008000500", @ANYRES32=r5, @ANYBLOB="37384fe6"], 0x78}, 0x1, 0x0, 0x0, 0x4008011}, 0x24000050) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x50}}, 0x4000000) 398.470664ms ago: executing program 1 (id=4188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x1205, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000700), &(0x7f0000000740)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 305.574283ms ago: executing program 5 (id=4189): r0 = socket$inet6(0xa, 0x1, 0x38) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001e40)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x44000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10003cbd7000ffd9df25390000000c00dd080c000000790000002c005a8020000180050004000300000014000500000001000500020090ee050008200700"], 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 246.60342ms ago: executing program 4 (id=4190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@rand_addr=0x64010102, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x8, 0xfffffffffffffffd, 0x100000001, 0x0, 0x8000000000000, 0x7, 0xffffffffffffffff, 0x40004}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000030000000000030000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000080010000000900010073797a30000000000900030073797a310000000038000000060a010400000000000000000100000008000b4000000000100004800c00018008000100636d70000900010073797a3000000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 246.088225ms ago: executing program 3 (id=4191): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) write$ppp(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800, @bcast, @bpq0, 0x5, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000010000000000", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x29}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbee0}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4718}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x438}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc35}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x34}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc2b}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x343, @default, @bpq0, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0xa, 0x84) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x102, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4010000", @ANYRES16, @ANYBLOB="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"/414], 0x1a4}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000001c0)=0xcbce, 0x4) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000000140), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r10, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012dbd7000fbdbdf2507000000080005007f000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4008010) 208.968298ms ago: executing program 1 (id=4192): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4f5af99b}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000080)=@phonet={0x23, 0xf8, 0x0, 0x7}, 0x80, 0x0}}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="890c020044800400480012800b0001006970366772650000380002800400120008000100", @ANYRES32, @ANYBLOB="14000700000000000000000000000000000000bb1400060020010000000000000000000000000001ae2882c40b25047f65b96f8922937c2ffc3f1c8bc20683de1e7c2cddbe42c47552b365652565124eae9cfc53eb90f1d837ee1024f5880a3cd58eb460f190addb"], 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="05000000002059b352b1a5ca05f1018fc1c9ea0633001d177ee8cf7e08bc04274cf910eb29472122922aebfb5fddaf517608586259160ba42956fc9e54ccb96f18b57be39d136207446bc9897ccf0ceb2ba95393b1049f9b6ce0e94c9801c61d4c7fb34761cfaf4080261c4eec5bed5e3764de5f921a1af904c6b7a7bca38097530f00cfc0af50b76acf67c90266591193b5b9ba17b8968dd660494539e51ba16f527a8d99ad73550cdbe12d357069ab947b4231688395e90d0fc407000000cdd1c22a72c2ce48825c7c24620aa678f57788918f035a8e595ad71cd92de7a3f3f648ba"]) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)=@getsa={0x268, 0x12, 0x400, 0x70bd2c, 0x25dfdbfc, {@in=@private=0xa010102, 0x4d4, 0x2, 0x2b}, [@offload={0xc}, @algo_aead={0xa6, 0x12, {{'generic-gcm-aesni\x00'}, 0x2d0, 0x100, "e27ced1d1f47d9ea344b6b694b6fd0b5e0285a20c0e1dc03b8b1bd32657eff0acafc6c81d1c713c72e5dd773e0a4780aadf23cb867560bf8542d0f6c2e8799de7527f98e789b9dff9d5fdb6fb09503190d5391c4bb8ac6d0d689"}}, @migrate={0x180, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x32, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x0, 0x0, 0x3503, 0xa, 0xa}, {@in6=@remote, @in6=@loopback, @in=@multicast2, @in=@empty, 0x6c, 0x9d489be97bf95602, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in=@multicast2, @in=@loopback, 0x6c, 0x6, 0x0, 0x3504, 0x2, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3504, 0x2, 0x2}]}, @offload={0xc, 0x1c, {r4, 0x1}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) socket$inet(0x2, 0x2, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@alu={0x4, 0x0, 0x7, 0x7, 0x6, 0x10, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcc9}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x4e}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000a00)='GPL\x00', 0x100, 0xba, &(0x7f0000000a40)=""/186, 0x40f00, 0x20, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0x0, 0xffffff01, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000d80)=[{0x5, 0x3, 0x6}, {0x5, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xd, 0x5}], 0x10, 0x9}, 0x94) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4, 0x100000000000000d) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000100)) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) 67.332665ms ago: executing program 3 (id=4193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d) 4.386856ms ago: executing program 5 (id=4194): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) 0s ago: executing program 1 (id=4195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x240400d9}, 0x2000) tee(r2, r3, 0x27e6, 0x8) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): 203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2982 res=0 errno=0 [ 498.597263][ T29] audit: type=1800 audit(1775135765.019:9): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2919" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2982 res=0 errno=0 [ 498.653068][ T29] audit: type=1800 audit(1775135765.019:10): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2919" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2982 res=0 errno=0 [ 498.695669][T17867] syzkaller0: entered promiscuous mode [ 498.707808][ T29] audit: type=1800 audit(1775135765.029:11): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2919" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2982 res=0 errno=0 [ 498.780763][ T29] audit: type=1800 audit(1775135765.029:12): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2919" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2982 res=0 errno=0 [ 498.781458][T17867] syzkaller0: entered allmulticast mode [ 498.881554][ T29] audit: type=1800 audit(1775135765.029:13): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2919" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2982 res=0 errno=0 [ 498.940321][ T29] audit: type=1800 audit(1775135765.029:14): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2919" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2982 res=0 errno=0 [ 499.084236][T17872] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 499.092749][T17872] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 499.259718][T11915] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.268551][T17879] 8021q: VLANs not supported on tunl0 [ 499.368294][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.478715][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.559174][T17885] netlink: 'syz.4.2926': attribute type 6 has an invalid length. [ 499.570533][T17885] netlink: 'syz.4.2926': attribute type 10 has an invalid length. [ 499.612879][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.750334][ T35] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.868231][ T35] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.983675][T17874] infiniband !yz!: set active [ 499.997484][T17874] infiniband !yz!: added team_slave_0 [ 500.030974][T17874] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 500.033315][T17874] infiniband !yz!: Couldn't open port 1 [ 500.137157][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 500.181588][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.191883][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.200461][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.208544][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.222334][T17874] RDS/IB: !yz!: added [ 500.226510][T17874] smc: adding ib device !yz! with port count 1 [ 500.256831][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 500.300157][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.306031][T17874] smc: ib device !yz! port 1 has no pnetid [ 500.313718][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.323838][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.333268][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.546719][T17903] gre0 speed is unknown, defaulting to 1000 [ 500.650515][T17925] __nla_validate_parse: 12 callbacks suppressed [ 500.650541][T17925] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2937'. [ 500.857585][T17925] syzkaller0: entered promiscuous mode [ 500.863929][T17925] syzkaller0: entered allmulticast mode [ 501.168465][T17935] sctp: [Deprecated]: syz.2.2940 (pid 17935) Use of int in max_burst socket option deprecated. [ 501.168465][T17935] Use struct sctp_assoc_value instead [ 501.631343][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 502.410346][ T5831] Bluetooth: hci2: command tx timeout [ 502.777077][T11915] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.788815][T11915] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.807594][T17938] netlink: 'syz.0.2941': attribute type 9 has an invalid length. [ 502.879830][T11915] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.917563][T11915] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.925364][T17948] netlink: 'syz.0.2943': attribute type 21 has an invalid length. [ 502.936665][T17948] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2943'. [ 502.971904][T17948] netlink: 'syz.0.2943': attribute type 3 has an invalid length. [ 502.985205][T17948] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2943'. [ 503.016431][T11915] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.038069][T11915] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.107900][T11915] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.148045][T11915] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.208881][ T9274] net_ratelimit: 8 callbacks suppressed [ 503.208902][ T9274] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 503.245999][T17952] syzkaller0: entered promiscuous mode [ 503.268322][T17952] syzkaller0: entered allmulticast mode [ 503.283101][T17966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 503.357664][T17968] netlink: 'syz.0.2949': attribute type 1 has an invalid length. [ 503.426139][T17970] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2950'. [ 503.458799][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 503.497148][T17970] ÿ: renamed from bond_slave_0 [ 503.578641][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 503.648235][T11915] erspan0: left allmulticast mode [ 503.679326][T17981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2952'. [ 503.690657][T11915] erspan0: left promiscuous mode [ 503.697561][T11915] bridge0: port 4(erspan0) entered disabled state [ 503.750472][T11915] `: left allmulticast mode [ 503.755144][T11915] team_slave_0: left allmulticast mode [ 503.765214][T11915] team_slave_1: left allmulticast mode [ 503.771359][T11915] bridge6: left allmulticast mode [ 503.776530][T11915] `: left promiscuous mode [ 503.785132][T11915] team_slave_0: left promiscuous mode [ 503.791336][T11915] team_slave_1: left promiscuous mode [ 503.797100][T11915] bridge6: left promiscuous mode [ 503.818601][T11915] bridge0: port 3(`) entered disabled state [ 503.825781][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 503.837212][T11915] bridge_slave_1: left allmulticast mode [ 503.849103][T11915] bridge_slave_1: left promiscuous mode [ 503.854904][T11915] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.868939][T11915] bridge_slave_0: left allmulticast mode [ 503.874645][T11915] bridge_slave_0: left promiscuous mode [ 503.898398][T11915] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.498481][ T5831] Bluetooth: hci2: command tx timeout [ 504.612814][T11915] bond5 (unregistering): (slave bridge4): Releasing active interface [ 504.621581][T11915] bridge4 (unregistering): left promiscuous mode [ 504.628049][T11915] bridge4 (unregistering): left allmulticast mode [ 504.732127][T11915] `: Port device bridge6 removed [ 504.922290][T11915] bond8 (unregistering): (slave bridge10): Releasing active interface [ 505.023405][T11915] bond1 (unregistering): (slave veth3): Releasing active interface [ 505.033146][T11915] bond1 (unregistering): Released all slaves [ 505.046617][T11915] bond2 (unregistering): Released all slaves [ 505.064580][T11915] bond3 (unregistering): (slave veth5): Releasing backup interface [ 505.076794][T11915] bond3 (unregistering): Released all slaves [ 505.090577][T11915] bond4 (unregistering): Released all slaves [ 505.107123][T11915] bond5 (unregistering): Released all slaves [ 505.120869][T11915] bond0 (unregistering): Released all slaves [ 505.135298][T11915] bond6 (unregistering): Released all slaves [ 505.158755][T11915] bond7 (unregistering): Released all slaves [ 505.172016][T11915] bond8 (unregistering): Released all slaves [ 505.193656][T11915] bond9 (unregistering): Released all slaves [ 505.228071][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 505.426113][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 505.497569][T11915] : left promiscuous mode [ 505.700240][T18018] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2957'. [ 505.775355][T18014] pim6reg: entered allmulticast mode [ 505.810312][T11915] tipc: Left network mode [ 506.028085][ T157] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 506.145023][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 506.184696][T17903] chnl_net:caif_netlink_parms(): no params data found [ 506.568668][ T5831] Bluetooth: hci2: command tx timeout [ 506.599984][T18045] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 506.620593][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2955'. [ 506.642439][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2955'. [ 506.656605][T18007] pim6reg: left allmulticast mode [ 506.878155][T18045] veth0_macvtap: left allmulticast mode [ 506.949327][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 506.965466][T17903] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.982221][T17903] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.998952][T17903] bridge_slave_0: entered allmulticast mode [ 507.018690][T17903] bridge_slave_0: entered promiscuous mode [ 507.041450][T17903] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.047987][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 507.048998][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.056510][ C0] lec:lec_tx_timeout: lec0 [ 507.057012][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 507.064701][T17903] bridge_slave_1: entered allmulticast mode [ 507.097860][T17903] bridge_slave_1: entered promiscuous mode [ 507.223235][T17903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.252013][T17903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.312180][T18058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.321418][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 507.350974][T17903] team0: Port device team_slave_0 added [ 507.369043][T18060] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20002 [ 507.377278][T17903] team0: Port device team_slave_1 added [ 507.529166][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 507.555381][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 507.558099][T17903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.588218][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.661981][T17903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.675389][T18066] netlink: 'syz.2.2966': attribute type 1 has an invalid length. [ 507.683489][T18066] netlink: 'syz.2.2966': attribute type 2 has an invalid length. [ 507.708998][T17903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.716017][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.825524][T17903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.192792][T17903] hsr_slave_0: entered promiscuous mode [ 508.212023][T17903] hsr_slave_1: entered promiscuous mode [ 508.225384][T18096] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2974'. [ 508.233710][T18098] netlink: 'syz.2.2973': attribute type 4 has an invalid length. [ 508.273461][T18096] net_ratelimit: 1 callbacks suppressed [ 508.273483][T18096] openvswitch: netlink: Flow key attr not present in new flow. [ 508.278125][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 508.347465][T18084] gre0 speed is unknown, defaulting to 1000 [ 508.584374][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2975'. [ 508.648712][ T5831] Bluetooth: hci2: command tx timeout [ 508.670731][T11915] hsr_slave_0: left promiscuous mode [ 508.723049][T11915] hsr_slave_1: left promiscuous mode [ 508.750364][T11915] veth1_vlan: left promiscuous mode [ 509.143189][T11915] ` (unregistering): Port device team_slave_1 removed [ 509.167586][T11915] ` (unregistering): Port device team_slave_0 removed [ 509.323138][T11915] smc: removing net device caif0 with user defined pnetid SYZ2 [ 509.688313][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 509.798635][T18133] netlink: 'syz.2.2977': attribute type 1 has an invalid length. [ 509.878175][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2977'. [ 509.902730][T18133] batadv_slave_0: entered promiscuous mode [ 509.945373][T18133] batadv_slave_0: entered allmulticast mode [ 509.989162][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.108368][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.309167][ T157] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.494853][T11915] IPVS: stop unused estimator thread 0... [ 510.508668][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.597658][T18163] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2985'. [ 510.698778][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.710229][T17903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 510.733951][T17903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 510.799769][T17903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 510.833055][T17903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 510.970714][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 511.090660][T17903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.126245][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.146459][T17903] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.158296][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 511.184524][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.197247][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.204521][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.215305][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.229755][T18185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.249522][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.256957][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.270906][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.283075][T18185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.298471][T11915] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 511.344851][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.368193][T18185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.412586][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.442219][T18185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2989'. [ 511.719572][T18208] netlink: 'syz.2.2993': attribute type 8 has an invalid length. [ 511.813873][T18208] bond0: entered promiscuous mode [ 511.819890][T18208] ÿ: entered promiscuous mode [ 511.825088][T18208] bond_slave_1: entered promiscuous mode [ 511.833151][T18208] bond0: left promiscuous mode [ 511.838554][T18208] ÿ: left promiscuous mode [ 511.843542][T18208] bond_slave_1: left promiscuous mode [ 511.911774][T17903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.050668][T18223] netlink: 'syz.2.2997': attribute type 14 has an invalid length. [ 512.077992][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 512.079635][T18223] netlink: 'syz.2.2997': attribute type 11 has an invalid length. [ 512.086084][ C0] lec:lec_tx_timeout: lec0 [ 512.604941][T18255] syzkaller1: entered promiscuous mode [ 512.620144][T18255] syzkaller1: entered allmulticast mode [ 512.661605][T18256] tipc: New replicast peer: 255.255.255.255 [ 512.675352][T18256] tipc: Enabled bearer , priority 10 [ 512.775205][T17903] veth0_vlan: entered promiscuous mode [ 512.824130][T17903] veth1_vlan: entered promiscuous mode [ 512.940620][T17903] veth0_macvtap: entered promiscuous mode [ 512.964884][T17903] veth1_macvtap: entered promiscuous mode [ 513.024326][T18279] netlink: 'syz.3.3008': attribute type 4 has an invalid length. [ 513.037152][T17903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.083241][T17903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.124412][ T157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.144725][ T157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.176227][ T157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.216564][ T157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.289645][T18292] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 513.301207][ T9145] net_ratelimit: 12 callbacks suppressed [ 513.301230][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 513.412637][T18288] gre0 speed is unknown, defaulting to 1000 [ 513.441661][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 513.556203][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.566048][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.668036][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 513.680227][ T9145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.718501][ T9145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.778505][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 513.888883][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.030573][ T157] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.149110][ T157] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.301782][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.377009][T18289] gre0 speed is unknown, defaulting to 1000 [ 514.423364][T18335] syzkaller1: entered promiscuous mode [ 514.430773][T18335] syzkaller1: entered allmulticast mode [ 514.438283][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.568815][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.994536][T18330] gre0 speed is unknown, defaulting to 1000 [ 515.554213][T18348] gre0 speed is unknown, defaulting to 1000 [ 516.029942][T18374] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 516.048628][T18374] IPVS: length: 528 != 206581052192 [ 516.282361][T18378] __nla_validate_parse: 67 callbacks suppressed [ 516.282381][T18378] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3022'. [ 516.839896][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3023'. [ 516.865701][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057209800: Timeout. Failed to send simple message. [ 518.438063][ T9145] net_ratelimit: 16 callbacks suppressed [ 518.438096][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 518.604272][ T9274] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 518.635810][T18419] gre0 speed is unknown, defaulting to 1000 [ 518.657379][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3025'. [ 518.673275][T18423] netlink: 'syz.4.3025': attribute type 9 has an invalid length. [ 518.802468][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'. [ 519.008069][ T9274] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.168085][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.217777][T18428] tipc: Invalid UDP bearer configuration [ 519.219319][T18428] tipc: Enabling of bearer rejected, failed to enable media [ 519.298203][ T157] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.460597][ T157] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.588131][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.699051][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.812662][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 519.822549][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 519.831239][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 519.839526][T11915] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.848915][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 519.856690][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 519.968026][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 520.044101][T18442] gre0 speed is unknown, defaulting to 1000 [ 520.212208][ T5821] syz_tun (unregistering): left allmulticast mode [ 520.219117][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 520.235388][ T5821] syz_tun (unregistering): left promiscuous mode [ 520.265781][ T5821] bridge0: port 1(syz_tun) entered disabled state [ 520.324556][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 520.344045][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 520.531491][T18466] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3036'. [ 521.224980][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3038'. [ 521.929459][ T5838] Bluetooth: hci3: command tx timeout [ 521.999198][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.009595][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.018503][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.027432][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.035335][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.089239][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.132028][ T3502] bridge_slave_1: left allmulticast mode [ 522.155510][ T3502] bridge_slave_1: left promiscuous mode [ 522.178334][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.239187][ T3502] pimreg: left allmulticast mode [ 522.244515][ T3502] pimreg9: left allmulticast mode [ 522.823147][ T3502] bond0 (unregistering): (slave c5ÿ): Releasing backup interface [ 522.846410][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.859945][ T3502] bond0 (unregistering): Released all slaves [ 522.872178][ T3502] bond1 (unregistering): Released all slaves [ 522.891830][ T3502] bond2 (unregistering): Released all slaves [ 522.914335][ T3502] bond3 (unregistering): Released all slaves [ 522.940924][ T3502] bond4 (unregistering): Released all slaves [ 522.955493][ T3502] bond5 (unregistering): Released all slaves [ 522.968947][ T3502] bond6 (unregistering): Released all slaves [ 523.046038][T18527] netlink: 'syz.4.3048': attribute type 4 has an invalid length. [ 523.128965][ T3502] tipc: Disabling bearer [ 523.147076][ T3502] tipc: Left network mode [ 523.151516][T18496] gre0 speed is unknown, defaulting to 1000 [ 523.195043][T18442] chnl_net:caif_netlink_parms(): no params data found [ 523.505672][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3051'. [ 523.514873][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3051'. [ 523.525336][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 523.535753][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 523.559616][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3051'. [ 523.640979][T18538] erspan0: entered promiscuous mode [ 523.839572][T18535] gre0 speed is unknown, defaulting to 1000 [ 523.918886][T18442] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.926176][T18442] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.938762][T18442] bridge_slave_0: entered allmulticast mode [ 523.957046][T18442] bridge_slave_0: entered promiscuous mode [ 524.013070][ T5831] Bluetooth: hci3: command tx timeout [ 524.088215][ T5831] Bluetooth: hci0: command tx timeout [ 524.098747][ T6005] net_ratelimit: 12 callbacks suppressed [ 524.098769][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 524.149145][T18442] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.156665][T18442] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.188396][T18442] bridge_slave_1: entered allmulticast mode [ 524.218791][T18442] bridge_slave_1: entered promiscuous mode [ 524.421086][T18442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.471986][T18442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.488503][T11917] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 524.664752][T18442] team0: Port device team_slave_0 added [ 524.683807][T18442] team0: Port device team_slave_1 added [ 524.769383][T18442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.776567][T18442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.806425][T18442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.892062][T18442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.899630][T18442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.928951][T18442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.101435][T11917] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.227264][T18442] hsr_slave_0: entered promiscuous mode [ 525.242789][T18442] hsr_slave_1: entered promiscuous mode [ 525.250202][T18442] debugfs: 'hsr0' already exists in 'hsr' [ 525.255973][T18442] Cannot create hsr debugfs directory [ 525.431490][T18584] sit1: entered promiscuous mode [ 525.468629][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.706239][T18593] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 525.833071][ T3502] hsr_slave_0: left promiscuous mode [ 526.088309][ T5831] Bluetooth: hci3: command tx timeout [ 526.168205][ T5831] Bluetooth: hci0: command tx timeout [ 526.327595][ T3502] team0 (unregistering): Port device team_slave_1 removed [ 526.374141][ T3502] team0 (unregistering): Port device team_slave_0 removed [ 526.651805][T18496] chnl_net:caif_netlink_parms(): no params data found [ 527.315308][ T3502] IPVS: stop unused estimator thread 0... [ 527.319548][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3067'. [ 527.578141][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 527.815679][T18496] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.838519][T18496] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.848873][T18496] bridge_slave_0: entered allmulticast mode [ 527.869394][T18496] bridge_slave_0: entered promiscuous mode [ 527.923489][T18496] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.956670][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.964791][T18496] bridge_slave_1: entered allmulticast mode [ 527.973225][T18496] bridge_slave_1: entered promiscuous mode [ 528.064662][T18496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.094402][T18496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.135013][T18659] gre0 speed is unknown, defaulting to 1000 [ 528.139965][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 528.181125][ T5831] Bluetooth: hci3: command tx timeout [ 528.248349][ T5831] Bluetooth: hci0: command tx timeout [ 528.368906][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'. [ 528.540011][T18496] team0: Port device team_slave_0 added [ 528.546570][T18675] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 528.549893][T18670] gre0 speed is unknown, defaulting to 1000 [ 528.558487][ T9274] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 528.577092][T18496] team0: Port device team_slave_1 added [ 528.826798][T18496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.843025][T18496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.873134][T18496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.887207][T18496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.896236][T18496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.938215][T18496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.963778][T18442] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 529.016616][T18442] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 529.060834][T18442] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 529.148040][T18442] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 529.167105][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 529.256021][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 529.269742][T18496] hsr_slave_0: entered promiscuous mode [ 529.276579][T18496] hsr_slave_1: entered promiscuous mode [ 529.290234][T18496] debugfs: 'hsr0' already exists in 'hsr' [ 529.296336][T18496] Cannot create hsr debugfs directory [ 529.341589][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 529.609382][ T9274] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 529.768110][ T9145] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.094121][T18730] netlink: 'syz.1.3080': attribute type 10 has an invalid length. [ 530.328123][ T5831] Bluetooth: hci0: command tx timeout [ 530.405472][T18496] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 530.492932][T18442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.508407][ T9274] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.529015][T18496] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.552536][T18496] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 530.662651][T18496] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 530.752605][T18442] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.794455][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.801689][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.873386][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.881008][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.918135][T11915] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 531.158838][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 531.283074][T18496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.319352][T11915] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 531.370586][T18496] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.387697][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3083'. [ 531.429538][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.436871][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.476744][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.484013][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.548646][ T3502] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 531.745718][T18772] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3084'. [ 531.778057][T18772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.870281][T18442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.053941][T18442] veth0_vlan: entered promiscuous mode [ 532.127393][T18442] veth1_vlan: entered promiscuous mode [ 532.357584][T18442] veth0_macvtap: entered promiscuous mode [ 532.421047][T18442] veth1_macvtap: entered promiscuous mode [ 532.517472][T18496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.583815][T18442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.647095][T18442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.666632][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3090'. [ 532.736655][T11917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.755120][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 532.764902][T11917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.834321][T11917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.870626][T11917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.409870][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.417753][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.572302][ T9262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.591412][ T9262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.950133][T18496] veth0_vlan: entered promiscuous mode [ 534.043754][T18496] veth1_vlan: entered promiscuous mode [ 534.193985][T18865] net_ratelimit: 15 callbacks suppressed [ 534.194007][T18865] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 534.209719][ T9278] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 534.234875][T18496] veth0_macvtap: entered promiscuous mode [ 534.281150][T18496] veth1_macvtap: entered promiscuous mode [ 534.341666][T18496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.390826][T18496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.417614][ T9279] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.440308][ T9279] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.457660][ T9279] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.485662][ T9279] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.507050][T18876] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3101'. [ 534.719402][T11917] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 534.843814][ T9279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.873644][ T9279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.938804][ T9262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.947269][ T9262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.990249][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.162665][T11917] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.178393][T18885] tipc: Enabling of bearer rejected, failed to enable media [ 535.217547][T18900] ip6tnl1: entered allmulticast mode [ 535.241152][T18904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3107'. [ 535.346044][ T9262] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.492108][T11917] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.519458][T18916] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3112'. [ 535.621226][T11917] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.763367][ T9262] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.792093][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3115'. [ 535.851691][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3115'. [ 535.888038][ T9278] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.917347][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.958752][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.973035][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.994258][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.011066][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.026322][T18941] IPVS: set_ctl: invalid protocol: 102 172.30.1.5:20002 [ 536.176008][T18935] gre0 speed is unknown, defaulting to 1000 [ 536.184063][T18948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3119'. [ 536.223534][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'. [ 536.283521][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3119'. [ 536.294409][T18952] nft_compat: unsupported protocol 0 [ 536.300961][T18948] netlink: 'syz.2.3119': attribute type 18 has an invalid length. [ 536.525602][T18965] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 536.567316][T18968] tipc: Started in network mode [ 536.580878][T18968] tipc: Node identity 1677534af0da, cluster identity 4711 [ 536.589103][T18968] tipc: Enabled bearer , priority 0 [ 536.682435][T18970] syzkaller0: entered allmulticast mode [ 536.699771][T18968] tipc: Resetting bearer [ 536.708331][T18967] tipc: Resetting bearer [ 536.727710][T18967] tipc: Disabling bearer [ 536.816680][T18980] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3126'. [ 537.013237][T18989] netlink: 'syz.4.3128': attribute type 1 has an invalid length. [ 537.038123][T18989] netlink: 'syz.4.3128': attribute type 2 has an invalid length. [ 538.088896][ T5838] Bluetooth: hci1: command tx timeout [ 539.324753][T11914] net_ratelimit: 4 callbacks suppressed [ 539.324778][T11914] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 539.489510][ T6005] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 539.499189][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'. [ 539.523165][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 539.537739][T19002] netlink: 'syz.3.3131': attribute type 18 has an invalid length. [ 539.620076][T19010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3135'. [ 539.640979][T19008] 8021q: VLANs not supported on gre0 [ 539.748391][ T1165] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 539.878257][T11917] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 539.919189][ T9262] vlan2: left allmulticast mode [ 539.924198][ T9262] batadv_slave_1: left allmulticast mode [ 539.927707][T19020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3137'. [ 539.976870][ T9262] vlan2: left promiscuous mode [ 539.982610][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3137'. [ 539.994762][ T9262] batadv_slave_1: left promiscuous mode [ 540.000823][ T9262] bridge0: port 3(vlan2) entered disabled state [ 540.016095][ T9262] bridge_slave_1: left promiscuous mode [ 540.028461][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.039581][ T9262] bridge_slave_0: left allmulticast mode [ 540.045832][ T9262] bridge_slave_0: left promiscuous mode [ 540.066823][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.099807][ T9262] pimreg9: left allmulticast mode [ 540.168624][ T5838] Bluetooth: hci1: command tx timeout [ 540.176474][ T9262] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 540.188180][T19024] !yz!: rxe_newlink: already configured on team_slave_0 [ 540.196638][ T9262] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 540.205347][ T9262] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 9e:10:0d:25:6f:91 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 540.306882][ T9262] tipc: Disabling bearer [ 540.312636][T11914] smc: removing ib device syz1 [ 540.511801][ T9262] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 540.782319][ T9262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.803818][ T9262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.815143][ T9262] bond0 (unregistering): Released all slaves [ 540.833900][ T9262] bond1 (unregistering): Released all slaves [ 540.869417][ T9262] bond2 (unregistering): Released all slaves [ 540.902314][ T9262] bond3 (unregistering): Released all slaves [ 540.935507][ T9262] bond4 (unregistering): Released all slaves [ 540.976870][ T9262] bond5 (unregistering): (slave veth13): Releasing active interface [ 540.989184][ T9262] bond5 (unregistering): (slave veth15): Releasing active interface [ 541.001030][ T9262] bond5 (unregistering): Released all slaves [ 541.026125][ T9262] bond6 (unregistering): Released all slaves [ 541.069132][ T9262] bond7 (unregistering): (slave veth25): Releasing backup interface [ 541.082793][ T9262] bond7 (unregistering): Released all slaves [ 541.118377][ T9262] bond8 (unregistering): Released all slaves [ 541.413683][T19032] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3139'. [ 541.536946][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3140'. [ 541.587571][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3140'. [ 541.753338][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3140'. [ 541.775683][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3140'. [ 541.864164][ T6005] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.888696][ T6005] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.937138][ T6005] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.966546][ T6005] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.250824][ T5838] Bluetooth: hci1: command tx timeout [ 542.318317][T18935] chnl_net:caif_netlink_parms(): no params data found [ 542.718872][T18935] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.726125][T18935] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.733899][T18935] bridge_slave_0: entered allmulticast mode [ 542.741365][T18935] bridge_slave_0: entered promiscuous mode [ 542.752733][T18935] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.760067][T18935] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.767347][T18935] bridge_slave_1: entered allmulticast mode [ 542.775078][T18935] bridge_slave_1: entered promiscuous mode [ 542.812149][T18935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.825089][T18935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.859355][T18935] team0: Port device team_slave_0 added [ 542.869282][T18935] team0: Port device team_slave_1 added [ 542.898698][T18935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.905792][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.932820][T18935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.944288][ T9262] : left promiscuous mode [ 542.960079][T18935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.967082][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.993745][T18935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.040940][ T9262] tipc: Left network mode [ 543.096648][T18935] hsr_slave_0: entered promiscuous mode [ 543.105023][T18935] hsr_slave_1: entered promiscuous mode [ 543.123525][T18935] debugfs: 'hsr0' already exists in 'hsr' [ 543.134260][T18935] Cannot create hsr debugfs directory [ 543.978649][T18935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 544.012727][T18935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 544.057790][T18935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 544.069915][T18935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 544.289945][T18935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.311368][T18935] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.328671][ T5838] Bluetooth: hci1: command tx timeout [ 544.365799][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.373214][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.418708][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.425977][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.462312][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.472590][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.205405][ T9262] IPVS: stop unused estimator thread 0... [ 545.295603][T18935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.355529][T18935] veth0_vlan: entered promiscuous mode [ 545.376407][T18935] veth1_vlan: entered promiscuous mode [ 545.414258][T18935] veth0_macvtap: entered promiscuous mode [ 545.427399][T18935] veth1_macvtap: entered promiscuous mode [ 545.454098][T18935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.475651][T18935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.504762][ T9278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.514736][ T9278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.524270][ T9278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.533335][ T9262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.601543][ T9278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.620911][ T9278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.645452][T11914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.655348][T11914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.053934][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.065187][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 568.078060][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.086116][ C0] lec:lec_tx_timeout: lec0 [ 568.090770][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 573.108002][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 573.116161][ C0] lec:lec_tx_timeout: lec0 [ 624.500654][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.510884][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 626.570246][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 628.843934][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3148'. [ 628.908725][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3148'. [ 628.964437][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'. [ 629.197572][T19161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3153'. [ 629.419980][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3157'. [ 629.431813][T19175] netlink: 356 bytes leftover after parsing attributes in process `syz.5.3157'. [ 629.445602][T19175] netlink: 'syz.5.3157': attribute type 2 has an invalid length. [ 629.609283][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3160'. [ 629.690075][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 629.730125][ T5889] IPVS: starting estimator thread 0... [ 629.798780][T19188] team0: Port device team_slave_0 removed [ 629.848241][T19194] IPVS: using max 35 ests per chain, 84000 per kthread [ 630.008050][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 630.016153][ C0] lec:lec_tx_timeout: lec0 [ 630.020860][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 630.035195][T19209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3168'. [ 630.061965][T19213] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 630.073690][T19206] netlink: 2076 bytes leftover after parsing attributes in process `syz.4.3166'. [ 630.087069][T19206] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 ! [ 630.223782][T19213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.336043][T19202] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 630.363408][T19204] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 630.373553][T19204] syzkaller1: linktype set to 805 [ 630.490632][T19231] netlink: 'syz.1.3172': attribute type 2 has an invalid length. [ 630.707379][ T5889] IPVS: starting estimator thread 0... [ 630.716987][T19239] netlink: 'syz.4.3175': attribute type 1 has an invalid length. [ 630.799345][T19240] IPVS: using max 25 ests per chain, 60000 per kthread [ 630.828978][T19245] netlink: 'syz.3.3176': attribute type 1 has an invalid length. [ 631.296084][T19268] bridge0: entered promiscuous mode [ 631.310280][T19268] veth1_to_team: entered promiscuous mode [ 631.545617][T19288] netlink: 'syz.4.3189': attribute type 1 has an invalid length. [ 632.066406][T19314] netlink: 'syz.1.3194': attribute type 12 has an invalid length. [ 632.084461][T19314] netlink: 'syz.1.3194': attribute type 29 has an invalid length. [ 632.105827][T19319] netlink: 'syz.5.3195': attribute type 12 has an invalid length. [ 632.130658][T19315] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 632.162838][T19315] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 632.237632][T19314] sctp: [Deprecated]: syz.1.3194 (pid 19314) Use of int in max_burst socket option. [ 632.237632][T19314] Use struct sctp_assoc_value instead [ 632.382691][T19322] tipc: Started in network mode [ 632.387630][T19322] tipc: Node identity , cluster identity 4711 [ 632.415389][T19322] tipc: Failed to obtain node identity [ 632.426990][T19322] tipc: Enabling of bearer rejected, failed to enable media [ 632.462685][T19326] syzkaller0: entered promiscuous mode [ 632.468706][T19326] syzkaller0: entered allmulticast mode [ 632.478357][T19322] 0ªX¹¦À: renamed from caif0 [ 632.500045][T19322] 0ªX¹¦À: entered allmulticast mode [ 632.515548][T19322] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 632.741312][T19340] syzkaller0: entered promiscuous mode [ 632.747056][T19340] syzkaller0: entered allmulticast mode [ 633.435061][T19377] x_tables: duplicate underflow at hook 1 [ 633.888876][T19372] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 634.527490][T19401] __nla_validate_parse: 17 callbacks suppressed [ 634.527513][T19401] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3218'. [ 634.543716][T19401] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3218'. [ 635.047973][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 635.056107][ C0] lec:lec_tx_timeout: lec0 [ 635.245917][T19416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3222'. [ 635.271094][T19424] validate_nla: 11 callbacks suppressed [ 635.271115][T19424] netlink: 'syz.1.3225': attribute type 21 has an invalid length. [ 635.301914][T19424] netlink: 'syz.1.3225': attribute type 22 has an invalid length. [ 635.321672][T19424] netlink: 'syz.1.3225': attribute type 23 has an invalid length. [ 635.343889][T19424] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3225'. [ 635.707810][T19441] netlink: 'syz.5.3230': attribute type 1 has an invalid length. [ 636.086478][T19451] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3233'. [ 636.214225][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3235'. [ 636.274373][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3235'. [ 636.286172][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 636.327330][T19461] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3235'. [ 636.335651][T19460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.394308][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 636.552899][T19466] nbd: must specify at least one socket [ 636.812046][T19483] wg1 speed is unknown, defaulting to 1000 [ 636.835373][T19483] wg1 speed is unknown, defaulting to 1000 [ 636.860061][T19483] wg1 speed is unknown, defaulting to 1000 [ 637.156444][T19504] sctp: [Deprecated]: syz.5.3248 (pid 19504) Use of int in maxseg socket option. [ 637.156444][T19504] Use struct sctp_assoc_value instead [ 637.350963][T19514] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 637.385196][T19514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.691536][T19529] openvswitch: netlink: IPv6 tunnel dst address is zero [ 637.724258][T19483] infiniband syz0: set active [ 637.736163][T17257] wg1 speed is unknown, defaulting to 1000 [ 637.747790][T19483] infiniband syz0: added wg1 [ 637.849215][T19483] RDS/IB: syz0: added [ 637.857727][T19483] smc: adding ib device syz0 with port count 1 [ 637.869790][T19483] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 637.934008][ T5889] wg1 speed is unknown, defaulting to 1000 [ 637.944332][T19483] wg1 speed is unknown, defaulting to 1000 [ 638.122618][T17257] IPVS: starting estimator thread 0... [ 638.155440][T19540] netlink: 'syz.3.3261': attribute type 33 has an invalid length. [ 638.176328][T19540] `: renamed from team0 (while UP) [ 638.219219][T19542] IPVS: using max 25 ests per chain, 60000 per kthread [ 638.548552][T19483] wg1 speed is unknown, defaulting to 1000 [ 639.177775][T19568] gretap1: entered promiscuous mode [ 639.295236][T19572] bond1: option broadcast_neighbor: invalid value (30) [ 639.318816][T19572] bond1 (unregistering): Released all slaves [ 639.354855][T19483] wg1 speed is unknown, defaulting to 1000 [ 639.359770][T19575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.387565][T19583] netlink: 'syz.2.3271': attribute type 3 has an invalid length. [ 639.577041][T19590] netlink: 'syz.4.3275': attribute type 1 has an invalid length. [ 639.902696][T19483] wg1 speed is unknown, defaulting to 1000 [ 640.614410][T19615] netlink: 'syz.5.3280': attribute type 1 has an invalid length. [ 640.659399][T19615] __nla_validate_parse: 12 callbacks suppressed [ 640.659423][T19615] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3280'. [ 640.685558][T19483] wg1 speed is unknown, defaulting to 1000 [ 640.784091][T19615] NCSI netlink: No device for ifindex 0 [ 640.857641][T19620] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 640.869110][T19620] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3282'. [ 640.878782][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 640.888407][T19620] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3282'. [ 640.906988][T19624] syz_tun: entered allmulticast mode [ 640.976873][T19626] netlink: 'syz.3.3284': attribute type 20 has an invalid length. [ 640.991592][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 641.120600][T19626] netlink: 'syz.3.3284': attribute type 20 has an invalid length. [ 641.128772][T11914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.152254][T19622] syz_tun: left allmulticast mode [ 641.154278][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 641.206172][T11914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.225783][ T9279] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.240525][ T9279] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.351495][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3286'. [ 641.425557][T19642] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3287'. [ 641.492027][T19483] wg1 speed is unknown, defaulting to 1000 [ 641.621217][T19647] syzkaller0: entered promiscuous mode [ 641.628754][T19647] syzkaller0: entered allmulticast mode [ 642.263504][T19669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 642.296912][T19669] team0: Port device bond1 added [ 642.395143][T19677] ip6gretap0: entered promiscuous mode [ 642.753748][T19692] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 643.088133][T19705] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3306'. [ 643.156507][T19707] netlink: 'syz.4.3307': attribute type 1 has an invalid length. [ 643.165892][T19707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.329283][T19713] bond1: entered promiscuous mode [ 643.336500][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 643.345961][T19713] netlink: 'syz.2.3309': attribute type 1 has an invalid length. [ 643.546631][T19723] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 643.586637][T19723] team0: Device vxcan1 is of different type [ 644.030778][T19746] ip6gretap0: entered promiscuous mode [ 644.508465][T19775] syzkaller0: entered promiscuous mode [ 644.514014][T19775] syzkaller0: entered allmulticast mode [ 644.538040][T19775] 0: reclassify loop, rule prio 0, protocol 800 [ 644.861640][T19754] wg1 speed is unknown, defaulting to 1000 [ 645.438737][T19813] x_tables: duplicate underflow at hook 1 [ 645.702640][T19826] IPv6: Can't replace route, no match found [ 645.731517][T19826] IPv6: Can't replace route, no match found [ 645.962143][T19839] netlink: 'syz.2.3343': attribute type 3 has an invalid length. [ 645.981489][T19839] netlink: 'syz.2.3343': attribute type 3 has an invalid length. [ 646.104159][T19846] __nla_validate_parse: 40 callbacks suppressed [ 646.104182][T19846] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3346'. [ 646.260832][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 646.292510][T19853] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3348'. [ 646.488526][T19860] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 646.938505][T19879] netlink: 'syz.2.3358': attribute type 2 has an invalid length. [ 646.960643][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3356'. [ 646.971524][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'. [ 646.990263][T19880] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3355'. [ 646.998271][T19879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3358'. [ 647.011216][T19876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3355'. [ 647.051080][T19787] Bluetooth: hci3: command 0x0406 tx timeout [ 647.057242][T19786] Bluetooth: hci0: command 0x0406 tx timeout [ 647.231763][T19896] netlink: 'syz.5.3360': attribute type 2 has an invalid length. [ 647.296199][T19896] : entered promiscuous mode [ 647.331216][T19903] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 647.811622][T19906] wg1 speed is unknown, defaulting to 1000 [ 650.105952][T19886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.323931][T19914] xt_hashlimit: size too large, truncated to 1048576 [ 650.396856][T19927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3370'. [ 650.423009][T19928] syzkaller1: entered promiscuous mode [ 650.444561][T19928] syzkaller1: entered allmulticast mode [ 650.478801][T19922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3366'. [ 650.676942][T19933] netlink: 'syz.4.3372': attribute type 2 has an invalid length. [ 650.857978][T19933] netlink: 'syz.4.3372': attribute type 1 has an invalid length. [ 650.870749][T19933] netlink: 'syz.4.3372': attribute type 1 has an invalid length. [ 651.279089][T19953] __nla_validate_parse: 1 callbacks suppressed [ 651.279110][T19953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3377'. [ 651.315052][T19955] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 651.322773][T19953] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3377'. [ 651.360358][T19962] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3378'. [ 651.423847][T19962] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3378'. [ 651.469326][T19962] netlink: 'syz.3.3378': attribute type 6 has an invalid length. [ 651.477240][T19962] netlink: 'syz.3.3378': attribute type 6 has an invalid length. [ 651.678078][T19971] netlink: 'syz.2.3381': attribute type 1 has an invalid length. [ 651.695621][T19971] netlink: 'syz.2.3381': attribute type 1 has an invalid length. [ 651.713897][T19968] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 651.727300][T19968] bond1 (unregistering): Released all slaves [ 651.745579][T19946] wg1 speed is unknown, defaulting to 1000 [ 651.758021][T19971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3381'. [ 651.970779][T19976] tipc: Started in network mode [ 651.998709][T19976] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 652.006824][T19976] tipc: Enabled bearer , priority 6 [ 652.450047][T19953] wg1 speed is unknown, defaulting to 1000 [ 652.451281][T19988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'. [ 652.465754][T19988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.519226][T19988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.793197][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 653.030087][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580ee400: rx timeout, send abort [ 653.281262][ T6811] tipc: Node number set to 11578026 [ 653.341286][T20016] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 653.360501][T20016] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.530235][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580ed400: rx timeout, send abort [ 653.538654][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580ee400: abort rx timeout. Force session deactivation [ 653.703021][T20027] geneve2: entered promiscuous mode [ 654.038578][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580ed400: abort rx timeout. Force session deactivation [ 654.528360][T20058] nbd2: detected capacity change from 0 to 63 [ 654.682421][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 654.751601][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'. [ 654.794996][T20069] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3408'. [ 654.867699][T20063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.152686][ T5838] block nbd2: Receive control failed (result -104) [ 655.275788][T20089] dummy0: entered promiscuous mode [ 655.283000][T20089] bridge0: entered promiscuous mode [ 655.298941][T20089] debugfs: 'hsr1' already exists in 'hsr' [ 655.316965][T20089] Cannot create hsr debugfs directory [ 655.328856][T20089] hsr1: entered allmulticast mode [ 655.344693][T20089] dummy0: entered allmulticast mode [ 655.360595][T20089] bridge0: entered allmulticast mode [ 655.416739][T20094] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 655.748323][T20055] wg1 speed is unknown, defaulting to 1000 [ 655.844084][T20125] netlink: 'syz.3.3420': attribute type 13 has an invalid length. [ 655.863102][T20125] netlink: 'syz.3.3420': attribute type 17 has an invalid length. [ 656.075338][T20125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.663145][T20152] __nla_validate_parse: 6 callbacks suppressed [ 656.663166][T20152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3427'. [ 656.856892][T20143] xt_TCPMSS: Only works on TCP SYN packets [ 657.313981][T20185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 657.466287][T20190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3437'. [ 657.506445][T20165] wg1 speed is unknown, defaulting to 1000 [ 657.632912][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3438'. [ 657.662606][T20195] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3439'. [ 657.820832][T20202] delete_channel: no stack [ 657.871351][T20203] Nßôž: entered allmulticast mode [ 658.510442][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3447'. [ 658.564603][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3447'. [ 658.615441][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3448'. [ 658.668357][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3448'. [ 658.775311][ T9278] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.786935][ T9278] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.808640][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3448'. [ 658.818665][ T9278] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.848579][ T9278] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.874122][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3448'. [ 659.435113][T20213] wg1 speed is unknown, defaulting to 1000 [ 660.286711][T20252] wg1 speed is unknown, defaulting to 1000 [ 661.819710][T20329] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 663.216400][T20369] __nla_validate_parse: 3 callbacks suppressed [ 663.216423][T20369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3502'. [ 663.254470][ T1165] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.256220][T20369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.418098][T20379] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 663.820904][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3517'. [ 664.726982][T20435] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3534'. [ 665.399950][T20476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.764734][T20494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3562'. [ 665.778024][T20494] netlink: 'syz.2.3562': attribute type 7 has an invalid length. [ 665.795588][T20494] netlink: 'syz.2.3562': attribute type 8 has an invalid length. [ 665.819997][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 666.131249][T20503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3563'. [ 666.691690][T20520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 666.733976][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'. [ 667.035329][T20513] wg1 speed is unknown, defaulting to 1000 [ 667.328915][T20553] batadv_slave_1: entered promiscuous mode [ 667.349937][T20551] batadv_slave_1: left promiscuous mode [ 667.427305][T20557] syzkaller0: entered promiscuous mode [ 667.447276][T20557] syzkaller0: entered allmulticast mode [ 667.608132][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 667.756076][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 668.251297][T20593] syzkaller0: entered promiscuous mode [ 668.256860][T20593] syzkaller0: entered allmulticast mode [ 668.530360][T20607] tap0: tun_chr_ioctl cmd 1074025677 [ 668.546089][T20607] tap0: linktype set to 780 [ 668.594223][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3607'. [ 669.134835][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3619'. [ 669.150882][T20639] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 669.215943][T20639] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 669.268703][T20646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3621'. [ 669.454317][T20652] FAULT_INJECTION: forcing a failure. [ 669.454317][T20652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.493166][T20652] CPU: 0 UID: 0 PID: 20652 Comm: syz.3.3624 Not tainted syzkaller #0 PREEMPT(full) [ 669.493197][T20652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 669.493209][T20652] Call Trace: [ 669.493217][T20652] [ 669.493226][T20652] dump_stack_lvl+0xe8/0x150 [ 669.493262][T20652] should_fail_ex+0x412/0x560 [ 669.493299][T20652] _copy_from_user+0x2d/0xb0 [ 669.493324][T20652] do_ipv6_setsockopt+0x25c/0x3150 [ 669.493360][T20652] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 669.493384][T20652] ? get_pid_task+0x20/0x1f0 [ 669.493404][T20652] ? get_pid_task+0x20/0x1f0 [ 669.493421][T20652] ? get_pid_task+0x20/0x1f0 [ 669.493454][T20652] ? __lock_acquire+0x6b5/0x2cf0 [ 669.493501][T20652] ? aa_sk_perm+0x6d5/0x900 [ 669.493537][T20652] ? __pfx_aa_sk_perm+0x10/0x10 [ 669.493566][T20652] ? __fget_files+0x2a/0x420 [ 669.493592][T20652] ? aa_sock_opt_perm+0xff/0x1a0 [ 669.493624][T20652] ipv6_setsockopt+0x59/0x170 [ 669.493645][T20652] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 669.493667][T20652] do_sock_setsockopt+0x17c/0x1b0 [ 669.493697][T20652] __x64_sys_setsockopt+0x13d/0x1b0 [ 669.493726][T20652] do_syscall_64+0x14d/0xf80 [ 669.493753][T20652] ? trace_irq_disable+0x3b/0x150 [ 669.493769][T20652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.493789][T20652] ? clear_bhb_loop+0x40/0x90 [ 669.493812][T20652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.493831][T20652] RIP: 0033:0x7f650c79c819 [ 669.493849][T20652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.493874][T20652] RSP: 002b:00007f650d603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 669.493896][T20652] RAX: ffffffffffffffda RBX: 00007f650ca15fa0 RCX: 00007f650c79c819 [ 669.493909][T20652] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 669.493921][T20652] RBP: 00007f650d603090 R08: 0000000000000020 R09: 0000000000000000 [ 669.493933][T20652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.493944][T20652] R13: 00007f650ca16038 R14: 00007f650ca15fa0 R15: 00007ffeb18abf38 [ 669.493977][T20652] [ 669.843264][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3626'. [ 669.884851][T20659] bond2: entered promiscuous mode [ 669.890530][T20659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.910016][T20659] bond2 (unregistering): Released all slaves [ 669.971280][T20666] netlink: 'syz.2.3629': attribute type 1 has an invalid length. [ 669.979333][T20666] netlink: 'syz.2.3629': attribute type 1 has an invalid length. [ 670.002621][T20666] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.3629'. [ 670.034092][T20641] wg1 speed is unknown, defaulting to 1000 [ 670.062841][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3629'. [ 670.217953][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 670.217975][ T29] audit: type=1800 audit(1775135936.919:70): pid=20658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3627" name="memory.events" dev="tmpfs" ino=843 res=0 errno=0 [ 670.576590][T20692] FAULT_INJECTION: forcing a failure. [ 670.576590][T20692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.670966][T20692] CPU: 0 UID: 0 PID: 20692 Comm: syz.4.3638 Not tainted syzkaller #0 PREEMPT(full) [ 670.670996][T20692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 670.671007][T20692] Call Trace: [ 670.671015][T20692] [ 670.671024][T20692] dump_stack_lvl+0xe8/0x150 [ 670.671058][T20692] should_fail_ex+0x412/0x560 [ 670.671100][T20692] _copy_from_user+0x2d/0xb0 [ 670.671125][T20692] ipv6_flowlabel_opt+0x147/0x28e0 [ 670.671151][T20692] ? look_up_lock_class+0x57/0x110 [ 670.671181][T20692] ? register_lock_class+0x31/0x2e0 [ 670.671212][T20692] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 670.671252][T20692] ? aa_file_perm+0x192/0x15e0 [ 670.671279][T20692] ? do_raw_spin_lock+0x12b/0x2f0 [ 670.671304][T20692] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.671337][T20692] ? __local_bh_enable_ip+0xd0/0x130 [ 670.671369][T20692] do_ipv6_setsockopt+0xd9f/0x3150 [ 670.671403][T20692] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 670.671427][T20692] ? get_pid_task+0x20/0x1f0 [ 670.671447][T20692] ? get_pid_task+0x20/0x1f0 [ 670.671464][T20692] ? get_pid_task+0x20/0x1f0 [ 670.671500][T20692] ? __lock_acquire+0x6b5/0x2cf0 [ 670.671544][T20692] ? aa_sk_perm+0x6d5/0x900 [ 670.671581][T20692] ? __pfx_aa_sk_perm+0x10/0x10 [ 670.671613][T20692] ? __fget_files+0x2a/0x420 [ 670.671641][T20692] ? aa_sock_opt_perm+0xff/0x1a0 [ 670.671674][T20692] ipv6_setsockopt+0x59/0x170 [ 670.671696][T20692] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 670.671721][T20692] do_sock_setsockopt+0x17c/0x1b0 [ 670.671752][T20692] __x64_sys_setsockopt+0x13d/0x1b0 [ 670.671783][T20692] do_syscall_64+0x14d/0xf80 [ 670.671810][T20692] ? trace_irq_disable+0x3b/0x150 [ 670.671826][T20692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.671846][T20692] ? clear_bhb_loop+0x40/0x90 [ 670.671871][T20692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.671890][T20692] RIP: 0033:0x7f86ecd9c819 [ 670.671910][T20692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.671928][T20692] RSP: 002b:00007f86edb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 670.671951][T20692] RAX: ffffffffffffffda RBX: 00007f86ed015fa0 RCX: 00007f86ecd9c819 [ 670.671966][T20692] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 670.671978][T20692] RBP: 00007f86edb81090 R08: 0000000000000020 R09: 0000000000000000 [ 670.671996][T20692] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.672009][T20692] R13: 00007f86ed016038 R14: 00007f86ed015fa0 R15: 00007ffd9831f758 [ 670.672043][T20692] [ 671.006646][T20705] "syz.4.3642" (20705) uses obsolete ecb(arc4) skcipher [ 671.078979][T20706] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3642'. [ 671.090375][T20706] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3642'. [ 671.249914][T20709] netlink: 'syz.3.3643': attribute type 3 has an invalid length. [ 671.676360][T20726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3648'. [ 671.770680][T20734] FAULT_INJECTION: forcing a failure. [ 671.770680][T20734] name failslab, interval 1, probability 0, space 0, times 0 [ 671.784817][T20734] CPU: 1 UID: 0 PID: 20734 Comm: syz.5.3652 Not tainted syzkaller #0 PREEMPT(full) [ 671.784853][T20734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 671.784866][T20734] Call Trace: [ 671.784874][T20734] [ 671.784883][T20734] dump_stack_lvl+0xe8/0x150 [ 671.784930][T20734] should_fail_ex+0x412/0x560 [ 671.784965][T20734] should_failslab+0xa8/0x100 [ 671.784994][T20734] __kmalloc_cache_noprof+0x88/0x660 [ 671.785018][T20734] ? ipv6_flowlabel_opt+0xf1e/0x28e0 [ 671.785048][T20734] ipv6_flowlabel_opt+0xf1e/0x28e0 [ 671.785074][T20734] ? look_up_lock_class+0x57/0x110 [ 671.785158][T20734] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 671.785200][T20734] ? aa_file_perm+0x192/0x15e0 [ 671.785224][T20734] ? do_raw_spin_lock+0x12b/0x2f0 [ 671.785249][T20734] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 671.785282][T20734] ? __local_bh_enable_ip+0xd0/0x130 [ 671.785314][T20734] do_ipv6_setsockopt+0xd9f/0x3150 [ 671.785349][T20734] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 671.785372][T20734] ? get_pid_task+0x20/0x1f0 [ 671.785391][T20734] ? get_pid_task+0x20/0x1f0 [ 671.785408][T20734] ? get_pid_task+0x20/0x1f0 [ 671.785440][T20734] ? __lock_acquire+0x6b5/0x2cf0 [ 671.785482][T20734] ? aa_sk_perm+0x6d5/0x900 [ 671.785518][T20734] ? __pfx_aa_sk_perm+0x10/0x10 [ 671.785548][T20734] ? __fget_files+0x2a/0x420 [ 671.785574][T20734] ? aa_sock_opt_perm+0xff/0x1a0 [ 671.785606][T20734] ipv6_setsockopt+0x59/0x170 [ 671.785628][T20734] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 671.785651][T20734] do_sock_setsockopt+0x17c/0x1b0 [ 671.785682][T20734] __x64_sys_setsockopt+0x13d/0x1b0 [ 671.785712][T20734] do_syscall_64+0x14d/0xf80 [ 671.785739][T20734] ? trace_irq_disable+0x3b/0x150 [ 671.785757][T20734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.785777][T20734] ? clear_bhb_loop+0x40/0x90 [ 671.785800][T20734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.785818][T20734] RIP: 0033:0x7fc19319c819 [ 671.785837][T20734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.785855][T20734] RSP: 002b:00007fc193f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 671.785879][T20734] RAX: ffffffffffffffda RBX: 00007fc193415fa0 RCX: 00007fc19319c819 [ 671.785893][T20734] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 671.785905][T20734] RBP: 00007fc193f8f090 R08: 0000000000000020 R09: 0000000000000000 [ 671.785916][T20734] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.785930][T20734] R13: 00007fc193416038 R14: 00007fc193415fa0 R15: 00007ffd45f3fb98 [ 671.785965][T20734] [ 672.098550][T20736] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 672.151068][T20740] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 672.192030][T20743] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 672.307821][T20748] ip6gretap0: entered promiscuous mode [ 672.659078][T20763] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3662'. [ 672.847608][T20749] lo: entered allmulticast mode [ 672.893617][T20754] wg1 speed is unknown, defaulting to 1000 [ 672.903155][T20774] FAULT_INJECTION: forcing a failure. [ 672.903155][T20774] name failslab, interval 1, probability 0, space 0, times 0 [ 672.941876][T20774] CPU: 0 UID: 0 PID: 20774 Comm: syz.1.3666 Not tainted syzkaller #0 PREEMPT(full) [ 672.941905][T20774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 672.941918][T20774] Call Trace: [ 672.941927][T20774] [ 672.941935][T20774] dump_stack_lvl+0xe8/0x150 [ 672.941971][T20774] should_fail_ex+0x412/0x560 [ 672.942006][T20774] should_failslab+0xa8/0x100 [ 672.942035][T20774] __kmalloc_cache_noprof+0x88/0x660 [ 672.942069][T20774] ? ipv6_flowlabel_opt+0x1bc8/0x28e0 [ 672.942100][T20774] ipv6_flowlabel_opt+0x1bc8/0x28e0 [ 672.942139][T20774] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 672.942180][T20774] ? aa_file_perm+0x192/0x15e0 [ 672.942207][T20774] ? do_raw_spin_lock+0x12b/0x2f0 [ 672.942234][T20774] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 672.942267][T20774] ? __local_bh_enable_ip+0xd0/0x130 [ 672.942300][T20774] do_ipv6_setsockopt+0xd9f/0x3150 [ 672.942335][T20774] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 672.942358][T20774] ? get_pid_task+0x20/0x1f0 [ 672.942377][T20774] ? get_pid_task+0x20/0x1f0 [ 672.942393][T20774] ? get_pid_task+0x20/0x1f0 [ 672.942430][T20774] ? __lock_acquire+0x6b5/0x2cf0 [ 672.942474][T20774] ? aa_sk_perm+0x6d5/0x900 [ 672.942512][T20774] ? __pfx_aa_sk_perm+0x10/0x10 [ 672.942543][T20774] ? __fget_files+0x2a/0x420 [ 672.942571][T20774] ? aa_sock_opt_perm+0xff/0x1a0 [ 672.942603][T20774] ipv6_setsockopt+0x59/0x170 [ 672.942626][T20774] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 672.942651][T20774] do_sock_setsockopt+0x17c/0x1b0 [ 672.942682][T20774] __x64_sys_setsockopt+0x13d/0x1b0 [ 672.942715][T20774] do_syscall_64+0x14d/0xf80 [ 672.942742][T20774] ? trace_irq_disable+0x3b/0x150 [ 672.942760][T20774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.942780][T20774] ? clear_bhb_loop+0x40/0x90 [ 672.942804][T20774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.942824][T20774] RIP: 0033:0x7f37adf9c819 [ 672.942844][T20774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.942861][T20774] RSP: 002b:00007f37aef0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.942889][T20774] RAX: ffffffffffffffda RBX: 00007f37ae215fa0 RCX: 00007f37adf9c819 [ 672.942905][T20774] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 672.942917][T20774] RBP: 00007f37aef0d090 R08: 0000000000000020 R09: 0000000000000000 [ 672.942929][T20774] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.942942][T20774] R13: 00007f37ae216038 R14: 00007f37ae215fa0 R15: 00007ffe4c281c58 [ 672.942977][T20774] [ 673.974689][T20813] netlink: 'syz.2.3678': attribute type 1 has an invalid length. [ 674.024772][T20813] __nla_validate_parse: 1 callbacks suppressed [ 674.024794][T20813] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3678'. [ 674.074471][T20813] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3678'. [ 674.085716][T20813] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3678'. [ 674.698740][T20854] vlan2: entered promiscuous mode [ 674.710084][T20851] tap0: tun_chr_ioctl cmd 1074025677 [ 674.715627][T20851] tap0: linktype set to 780 [ 674.849838][T20866] sock: sock_timestamping_bind_phc: sock not bind to device [ 675.399007][T20887] netlink: 'syz.1.3705': attribute type 12 has an invalid length. [ 675.430713][T20887] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3705'. [ 675.520385][T20862] wg1 speed is unknown, defaulting to 1000 [ 675.535569][T20892] sctp: [Deprecated]: syz.2.3707 (pid 20892) Use of int in max_burst socket option deprecated. [ 675.535569][T20892] Use struct sctp_assoc_value instead [ 675.561736][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 675.623997][T20897] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3708'. [ 675.848188][ T5831] Bluetooth: hci1: command 0x0405 tx timeout [ 675.973466][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3715'. [ 676.013027][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3715'. [ 676.063421][T20912] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 676.234512][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3719'. [ 676.433641][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3723'. [ 676.531926][T20938] bond0: (slave bond_slave_0): Releasing backup interface [ 676.712174][T20951] sock: sock_timestamping_bind_phc: sock not bind to device [ 676.863995][T20952] syzkaller1: entered promiscuous mode [ 676.882086][T20952] syzkaller1: entered allmulticast mode [ 676.968057][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.671134][T20995] x_tables: duplicate underflow at hook 2 [ 677.967603][T21009] netlink: 'syz.4.3750': attribute type 11 has an invalid length. [ 678.063975][T21015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.351887][T21028] bridge0: port 3(veth0_to_bridge) entered blocking state [ 678.368128][T21028] bridge0: port 3(veth0_to_bridge) entered disabled state [ 678.375498][T21028] veth0_to_bridge: entered allmulticast mode [ 678.389090][T21028] veth0_to_bridge: entered promiscuous mode [ 678.395331][T21028] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.415603][T21028] bridge0: port 3(veth0_to_bridge) entered blocking state [ 678.422981][T21028] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 678.427052][T21038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.504668][T21031] bond2: entered promiscuous mode [ 678.510927][T21031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.965744][T21058] netlink: 'syz.4.3765': attribute type 1 has an invalid length. [ 679.144816][T21058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 679.218189][T21061] bond2: (slave geneve2): making interface the new active one [ 679.249009][T21061] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 679.270292][T21033] wg1 speed is unknown, defaulting to 1000 [ 679.282581][T21068] __nla_validate_parse: 7 callbacks suppressed [ 679.282602][T21068] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3768'. [ 679.757334][T21090] 8021q: VLANs not supported on ip6_vti0 [ 680.251279][T21078] tun0: tun_chr_ioctl cmd 1074025677 [ 680.269310][T21078] tun0: linktype set to 822 [ 681.022091][T21115] FAULT_INJECTION: forcing a failure. [ 681.022091][T21115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.071744][T21115] CPU: 0 UID: 0 PID: 21115 Comm: syz.4.3782 Not tainted syzkaller #0 PREEMPT(full) [ 681.071777][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 681.071788][T21115] Call Trace: [ 681.071796][T21115] [ 681.071805][T21115] dump_stack_lvl+0xe8/0x150 [ 681.071841][T21115] should_fail_ex+0x412/0x560 [ 681.071875][T21115] _copy_from_user+0x2d/0xb0 [ 681.071900][T21115] sk_setsockopt+0x2b3/0x2e80 [ 681.071935][T21115] ? __pfx_sk_setsockopt+0x10/0x10 [ 681.071962][T21115] ? aa_sk_perm+0x6d5/0x900 [ 681.071999][T21115] ? __pfx_aa_sk_perm+0x10/0x10 [ 681.072030][T21115] ? __fget_files+0x2a/0x420 [ 681.072058][T21115] ? aa_sock_opt_perm+0xff/0x1a0 [ 681.072100][T21115] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 681.072129][T21115] do_sock_setsockopt+0x11b/0x1b0 [ 681.072160][T21115] __x64_sys_setsockopt+0x13d/0x1b0 [ 681.072191][T21115] do_syscall_64+0x14d/0xf80 [ 681.072219][T21115] ? trace_irq_disable+0x3b/0x150 [ 681.072237][T21115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.072257][T21115] ? clear_bhb_loop+0x40/0x90 [ 681.072281][T21115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.072301][T21115] RIP: 0033:0x7f86ecd9c819 [ 681.072322][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.072339][T21115] RSP: 002b:00007f86edb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 681.072363][T21115] RAX: ffffffffffffffda RBX: 00007f86ed015fa0 RCX: 00007f86ecd9c819 [ 681.072377][T21115] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 681.072389][T21115] RBP: 00007f86edb81090 R08: 0000000000000004 R09: 0000000000000000 [ 681.072402][T21115] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 681.072414][T21115] R13: 00007f86ed016038 R14: 00007f86ed015fa0 R15: 00007ffd9831f758 [ 681.072448][T21115] [ 681.410912][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3786'. [ 681.423292][T21124] netlink: 212332 bytes leftover after parsing attributes in process `syz.5.3786'. [ 681.604616][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3789'. [ 681.652125][T21134] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3789'. [ 681.800702][T21142] netlink: 'syz.1.3794': attribute type 23 has an invalid length. [ 681.809317][T21144] sock: sock_timestamping_bind_phc: sock not bind to device [ 681.826238][T21144] FAULT_INJECTION: forcing a failure. [ 681.826238][T21144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.865831][T21144] CPU: 0 UID: 0 PID: 21144 Comm: syz.3.3795 Not tainted syzkaller #0 PREEMPT(full) [ 681.865861][T21144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 681.865873][T21144] Call Trace: [ 681.865883][T21144] [ 681.865891][T21144] dump_stack_lvl+0xe8/0x150 [ 681.865927][T21144] should_fail_ex+0x412/0x560 [ 681.865964][T21144] _copy_to_user+0x31/0xb0 [ 681.865990][T21144] simple_read_from_buffer+0xe1/0x170 [ 681.866035][T21144] proc_fail_nth_read+0x1bb/0x230 [ 681.866069][T21144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.866103][T21144] ? rw_verify_area+0x2a6/0x4d0 [ 681.866124][T21144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.866155][T21144] vfs_read+0x20c/0xa70 [ 681.866176][T21144] ? fdget_pos+0x246/0x320 [ 681.866200][T21144] ? __pfx___mutex_lock+0x10/0x10 [ 681.866232][T21144] ? __pfx_vfs_read+0x10/0x10 [ 681.866258][T21144] ? __fget_files+0x2a/0x420 [ 681.866299][T21144] ? __fget_files+0x3a0/0x420 [ 681.866327][T21144] ? __fget_files+0x2a/0x420 [ 681.866368][T21144] ksys_read+0x150/0x270 [ 681.866394][T21144] ? __pfx_ksys_read+0x10/0x10 [ 681.866430][T21144] do_syscall_64+0x14d/0xf80 [ 681.866458][T21144] ? trace_irq_disable+0x3b/0x150 [ 681.866476][T21144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.866496][T21144] ? clear_bhb_loop+0x40/0x90 [ 681.866522][T21144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.866542][T21144] RIP: 0033:0x7f650c75d04e [ 681.866562][T21144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 681.866578][T21144] RSP: 002b:00007f650d602fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.866601][T21144] RAX: ffffffffffffffda RBX: 00007f650d6036c0 RCX: 00007f650c75d04e [ 681.866617][T21144] RDX: 000000000000000f RSI: 00007f650d6030a0 RDI: 0000000000000004 [ 681.866629][T21144] RBP: 00007f650d603090 R08: 0000000000000000 R09: 0000000000000000 [ 681.866640][T21144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.866652][T21144] R13: 00007f650ca16038 R14: 00007f650ca15fa0 R15: 00007ffeb18abf38 [ 681.866686][T21144] [ 682.459138][T21174] sock: sock_timestamping_bind_phc: sock not bind to device [ 682.943235][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 682.987561][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3815'. [ 682.996629][T21209] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3815'. [ 683.057981][T21205] netlink: 'syz.4.3815': attribute type 5 has an invalid length. [ 683.095162][T11917] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.117966][T11917] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.151176][ T1165] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.160509][ T1165] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.633819][T21243] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 684.198142][T21267] netlink: 'syz.2.3842': attribute type 1 has an invalid length. [ 684.421173][T21269] bond3: entered promiscuous mode [ 684.444651][T21280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3846'. [ 684.445971][T21273] vcan1: entered promiscuous mode [ 684.459290][T21273] vcan1: entered allmulticast mode [ 684.510055][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'. [ 684.529470][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'. [ 684.651271][ T1766] block nbd2: Possible stuck request ffff888026e90000: control (read@0,1024B). Runtime 30 seconds [ 684.663800][ T1766] block nbd2: Possible stuck request ffff888026e90200: control (read@1024,1024B). Runtime 30 seconds [ 684.674988][ T1766] block nbd2: Possible stuck request ffff888026e90400: control (read@2048,1024B). Runtime 30 seconds [ 684.686116][ T1766] block nbd2: Possible stuck request ffff888026e90600: control (read@3072,1024B). Runtime 30 seconds [ 685.062500][T21287] erspan0: entered promiscuous mode [ 685.094958][T21287] macsec1: entered promiscuous mode [ 685.127779][T21287] erspan0: left promiscuous mode [ 685.531129][T21322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3848'. [ 685.541188][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3859'. [ 685.936044][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.952733][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.436520][T21360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3872'. [ 686.451111][T21360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3872'. [ 686.590109][T21360] vlan3: entered promiscuous mode [ 687.197588][T21400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3885'. [ 687.228105][T21400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3885'. [ 687.468470][T21406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.796595][T21414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3890'. [ 687.842500][T21417] lo speed is unknown, defaulting to 1000 [ 687.850006][T21417] lo speed is unknown, defaulting to 1000 [ 687.856790][T21417] lo speed is unknown, defaulting to 1000 [ 687.893028][T21417] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 688.020656][T21417] lo speed is unknown, defaulting to 1000 [ 688.032354][T21417] lo speed is unknown, defaulting to 1000 [ 688.051547][T21417] lo speed is unknown, defaulting to 1000 [ 688.061692][T21417] lo speed is unknown, defaulting to 1000 [ 688.080922][T21417] lo speed is unknown, defaulting to 1000 [ 688.132038][T21417] lo speed is unknown, defaulting to 1000 [ 688.964546][T21464] sock: sock_timestamping_bind_phc: sock not bind to device [ 689.175558][T21472] syzkaller0: entered promiscuous mode [ 689.185314][T21472] syzkaller0: entered allmulticast mode [ 691.049772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 691.058086][ C0] lec:lec_tx_timeout: lec0 [ 691.677644][T21508] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 691.760820][T21511] __nla_validate_parse: 4 callbacks suppressed [ 691.760841][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'. [ 691.890941][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3930'. [ 691.977264][T21521] ip6gretap0: entered promiscuous mode [ 692.562483][T21547] xt_cgroup: invalid path, errno=-2 [ 692.582718][T21547] netlink: 'syz.3.3941': attribute type 1 has an invalid length. [ 692.886594][T21556] tap0: tun_chr_ioctl cmd 1074025677 [ 692.897167][T21556] tap0: linktype set to 780 [ 692.943926][T21561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3947'. [ 692.943926][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3947'. [ 693.024710][T21567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3949'. [ 693.037418][T21567] netlink: 'syz.1.3949': attribute type 2 has an invalid length. [ 693.046753][T21567] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3949'. [ 693.058980][T21567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.071584][T21567] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3949'. [ 693.266242][ T9397] lec:lec_start_xmit: lec0:No lecd attached [ 695.528095][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.592728][T21658] netlink: 'syz.1.3976': attribute type 64 has an invalid length. [ 695.639217][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 695.823257][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 696.119175][T21681] FAULT_INJECTION: forcing a failure. [ 696.119175][T21681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.158971][T21681] CPU: 0 UID: 0 PID: 21681 Comm: syz.4.3983 Not tainted syzkaller #0 PREEMPT(full) [ 696.159010][T21681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 696.159022][T21681] Call Trace: [ 696.159030][T21681] [ 696.159039][T21681] dump_stack_lvl+0xe8/0x150 [ 696.159073][T21681] should_fail_ex+0x412/0x560 [ 696.159110][T21681] _copy_to_user+0x31/0xb0 [ 696.159135][T21681] simple_read_from_buffer+0xe1/0x170 [ 696.159171][T21681] proc_fail_nth_read+0x1bb/0x230 [ 696.159205][T21681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 696.159238][T21681] ? rw_verify_area+0x2a6/0x4d0 [ 696.159260][T21681] ? tun_chr_write_iter+0xe0/0x200 [ 696.159281][T21681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 696.159312][T21681] vfs_read+0x20c/0xa70 [ 696.159333][T21681] ? fdget_pos+0x246/0x320 [ 696.159357][T21681] ? __pfx___mutex_lock+0x10/0x10 [ 696.159388][T21681] ? __pfx_vfs_read+0x10/0x10 [ 696.159413][T21681] ? __fget_files+0x2a/0x420 [ 696.159447][T21681] ? __fget_files+0x3a0/0x420 [ 696.159475][T21681] ? __fget_files+0x2a/0x420 [ 696.159515][T21681] ksys_read+0x150/0x270 [ 696.159541][T21681] ? __pfx_ksys_read+0x10/0x10 [ 696.159578][T21681] do_syscall_64+0x14d/0xf80 [ 696.159604][T21681] ? trace_irq_disable+0x3b/0x150 [ 696.159623][T21681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.159643][T21681] ? clear_bhb_loop+0x40/0x90 [ 696.159669][T21681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.159688][T21681] RIP: 0033:0x7f86ecd5d04e [ 696.159708][T21681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 696.159724][T21681] RSP: 002b:00007f86eaff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 696.159747][T21681] RAX: ffffffffffffffda RBX: 00007f86eaff66c0 RCX: 00007f86ecd5d04e [ 696.159761][T21681] RDX: 000000000000000f RSI: 00007f86eaff60a0 RDI: 0000000000000004 [ 696.159774][T21681] RBP: 00007f86eaff6090 R08: 0000000000000000 R09: 0000000000000000 [ 696.159787][T21681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.159799][T21681] R13: 00007f86ed016128 R14: 00007f86ed016090 R15: 00007ffd9831f758 [ 696.159834][T21681] [ 697.505009][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 697.938878][T21709] wg1 speed is unknown, defaulting to 1000 [ 698.668496][T21723] wg1 speed is unknown, defaulting to 1000 [ 698.668496][T21709] lo speed is unknown, defaulting to 1000 [ 699.047896][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 699.055964][ C0] lec:lec_tx_timeout: lec0 [ 699.294507][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'. [ 699.431066][T21756] FAULT_INJECTION: forcing a failure. [ 699.431066][T21756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.468054][T21756] CPU: 0 UID: 0 PID: 21756 Comm: syz.4.4010 Not tainted syzkaller #0 PREEMPT(full) [ 699.468083][T21756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 699.468106][T21756] Call Trace: [ 699.468114][T21756] [ 699.468123][T21756] dump_stack_lvl+0xe8/0x150 [ 699.468158][T21756] should_fail_ex+0x412/0x560 [ 699.468194][T21756] _copy_from_user+0x2d/0xb0 [ 699.468219][T21756] bpf_test_init+0xd8/0x150 [ 699.468246][T21756] bpf_prog_test_run_skb+0x36f/0x1c90 [ 699.468281][T21756] ? __fget_files+0x2a/0x420 [ 699.468321][T21756] ? __fget_files+0x3a0/0x420 [ 699.468350][T21756] ? __fget_files+0x2a/0x420 [ 699.468384][T21756] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 699.468408][T21756] bpf_prog_test_run+0x2c7/0x340 [ 699.468434][T21756] __sys_bpf+0x643/0x950 [ 699.468455][T21756] ? __pfx___sys_bpf+0x10/0x10 [ 699.468492][T21756] ? ksys_write+0x242/0x270 [ 699.468518][T21756] ? __pfx_ksys_write+0x10/0x10 [ 699.468550][T21756] __x64_sys_bpf+0x7c/0x90 [ 699.468580][T21756] do_syscall_64+0x14d/0xf80 [ 699.468607][T21756] ? trace_irq_disable+0x3b/0x150 [ 699.468625][T21756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.468646][T21756] ? clear_bhb_loop+0x40/0x90 [ 699.468671][T21756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.468692][T21756] RIP: 0033:0x7f86ecd9c819 [ 699.468713][T21756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.468730][T21756] RSP: 002b:00007f86edb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 699.468752][T21756] RAX: ffffffffffffffda RBX: 00007f86ed015fa0 RCX: 00007f86ecd9c819 [ 699.468766][T21756] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 699.468779][T21756] RBP: 00007f86edb81090 R08: 0000000000000000 R09: 0000000000000000 [ 699.468791][T21756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.468803][T21756] R13: 00007f86ed016038 R14: 00007f86ed015fa0 R15: 00007ffd9831f758 [ 699.468836][T21756] [ 699.735738][T21749] wg1 speed is unknown, defaulting to 1000 [ 699.753064][T21759] FAULT_INJECTION: forcing a failure. [ 699.753064][T21759] name failslab, interval 1, probability 0, space 0, times 0 [ 699.766235][T21759] CPU: 1 UID: 0 PID: 21759 Comm: syz.4.4011 Not tainted syzkaller #0 PREEMPT(full) [ 699.766263][T21759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 699.766275][T21759] Call Trace: [ 699.766283][T21759] [ 699.766292][T21759] dump_stack_lvl+0xe8/0x150 [ 699.766328][T21759] should_fail_ex+0x412/0x560 [ 699.766364][T21759] should_failslab+0xa8/0x100 [ 699.766394][T21759] __kmalloc_cache_noprof+0x88/0x660 [ 699.766419][T21759] ? reuseport_alloc+0x121/0x4d0 [ 699.766449][T21759] reuseport_alloc+0x121/0x4d0 [ 699.766478][T21759] inet_hash+0x725/0xd80 [ 699.766515][T21759] inet_csk_listen_start+0x27b/0x390 [ 699.766545][T21759] __inet_listen_sk+0x2d2/0x5d0 [ 699.766577][T21759] ? __pfx___inet_listen_sk+0x10/0x10 [ 699.766608][T21759] ? inet_listen+0x45/0x110 [ 699.766635][T21759] ? __local_bh_enable_ip+0xd0/0x130 [ 699.766668][T21759] inet_listen+0xa5/0x110 [ 699.766693][T21759] __x64_sys_listen+0x1c7/0x240 [ 699.766720][T21759] do_syscall_64+0x14d/0xf80 [ 699.766748][T21759] ? trace_irq_disable+0x3b/0x150 [ 699.766766][T21759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.766786][T21759] ? clear_bhb_loop+0x40/0x90 [ 699.766812][T21759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.766832][T21759] RIP: 0033:0x7f86ecd9c819 [ 699.766861][T21759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.766879][T21759] RSP: 002b:00007f86edb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 699.766901][T21759] RAX: ffffffffffffffda RBX: 00007f86ed015fa0 RCX: 00007f86ecd9c819 [ 699.766916][T21759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 699.766928][T21759] RBP: 00007f86edb81090 R08: 0000000000000000 R09: 0000000000000000 [ 699.766941][T21759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.766953][T21759] R13: 00007f86ed016038 R14: 00007f86ed015fa0 R15: 00007ffd9831f758 [ 699.766989][T21759] [ 699.966998][T21749] lo speed is unknown, defaulting to 1000 [ 699.975684][T21723] lo speed is unknown, defaulting to 1000 [ 699.982716][ T5908] IPVS: starting estimator thread 0... [ 700.078336][T21761] IPVS: using max 28 ests per chain, 67200 per kthread [ 700.091642][T21765] FAULT_INJECTION: forcing a failure. [ 700.091642][T21765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.107978][T21765] CPU: 1 UID: 0 PID: 21765 Comm: syz.4.4013 Not tainted syzkaller #0 PREEMPT(full) [ 700.108010][T21765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 700.108022][T21765] Call Trace: [ 700.108030][T21765] [ 700.108039][T21765] dump_stack_lvl+0xe8/0x150 [ 700.108074][T21765] should_fail_ex+0x412/0x560 [ 700.108109][T21765] _copy_from_user+0x2d/0xb0 [ 700.108133][T21765] vmemdup_user+0x5e/0xd0 [ 700.108161][T21765] map_lookup_elem+0x3c6/0x9b0 [ 700.108190][T21765] __sys_bpf+0x513/0x950 [ 700.108211][T21765] ? __pfx___sys_bpf+0x10/0x10 [ 700.108248][T21765] ? ksys_write+0x242/0x270 [ 700.108274][T21765] ? __pfx_ksys_write+0x10/0x10 [ 700.108306][T21765] __x64_sys_bpf+0x7c/0x90 [ 700.108335][T21765] do_syscall_64+0x14d/0xf80 [ 700.108362][T21765] ? trace_irq_disable+0x3b/0x150 [ 700.108380][T21765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.108400][T21765] ? clear_bhb_loop+0x40/0x90 [ 700.108425][T21765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.108445][T21765] RIP: 0033:0x7f86ecd9c819 [ 700.108466][T21765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.108483][T21765] RSP: 002b:00007f86edb81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.108506][T21765] RAX: ffffffffffffffda RBX: 00007f86ed015fa0 RCX: 00007f86ecd9c819 [ 700.108520][T21765] RDX: 0000000000000020 RSI: 0000200000000780 RDI: 0000000000000001 [ 700.108533][T21765] RBP: 00007f86edb81090 R08: 0000000000000000 R09: 0000000000000000 [ 700.108546][T21765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.108558][T21765] R13: 00007f86ed016038 R14: 00007f86ed015fa0 R15: 00007ffd9831f758 [ 700.108591][T21765] [ 700.345330][T21768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4014'. [ 701.125634][T21790] FAULT_INJECTION: forcing a failure. [ 701.125634][T21790] name failslab, interval 1, probability 0, space 0, times 0 [ 701.144569][T21790] CPU: 0 UID: 0 PID: 21790 Comm: syz.5.4021 Not tainted syzkaller #0 PREEMPT(full) [ 701.144599][T21790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 701.144612][T21790] Call Trace: [ 701.144620][T21790] [ 701.144629][T21790] dump_stack_lvl+0xe8/0x150 [ 701.144664][T21790] should_fail_ex+0x412/0x560 [ 701.144699][T21790] should_failslab+0xa8/0x100 [ 701.144729][T21790] __kmalloc_noprof+0xe8/0x760 [ 701.144752][T21790] ? sk_prot_alloc+0xe7/0x210 [ 701.144783][T21790] sk_prot_alloc+0xe7/0x210 [ 701.144805][T21790] ? sk_alloc+0x27/0x390 [ 701.144831][T21790] sk_alloc+0x3a/0x390 [ 701.144860][T21790] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 701.144897][T21790] ? __fget_files+0x2a/0x420 [ 701.144926][T21790] ? __fget_files+0x3a0/0x420 [ 701.144954][T21790] ? __fget_files+0x2a/0x420 [ 701.144989][T21790] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 701.145020][T21790] bpf_prog_test_run+0x2c7/0x340 [ 701.145047][T21790] __sys_bpf+0x643/0x950 [ 701.145069][T21790] ? __pfx___sys_bpf+0x10/0x10 [ 701.145106][T21790] ? ksys_write+0x242/0x270 [ 701.145132][T21790] ? __pfx_ksys_write+0x10/0x10 [ 701.145165][T21790] __x64_sys_bpf+0x7c/0x90 [ 701.145196][T21790] do_syscall_64+0x14d/0xf80 [ 701.145224][T21790] ? trace_irq_disable+0x3b/0x150 [ 701.145242][T21790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.145263][T21790] ? clear_bhb_loop+0x40/0x90 [ 701.145289][T21790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.145309][T21790] RIP: 0033:0x7fc19319c819 [ 701.145328][T21790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.145347][T21790] RSP: 002b:00007fc193f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.145370][T21790] RAX: ffffffffffffffda RBX: 00007fc193415fa0 RCX: 00007fc19319c819 [ 701.145385][T21790] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 701.145398][T21790] RBP: 00007fc193f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 701.145411][T21790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.145423][T21790] R13: 00007fc193416038 R14: 00007fc193415fa0 R15: 00007ffd45f3fb98 [ 701.145457][T21790] [ 701.539607][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4023'. [ 701.697688][T21797] syzkaller1: entered promiscuous mode [ 701.707881][T21797] syzkaller1: entered allmulticast mode [ 701.767536][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4023'. [ 701.777350][T21797] IPVS: Unknown mcast interface: veth0_to_bond [ 702.295543][T21807] wg1 speed is unknown, defaulting to 1000 [ 702.782885][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4032'. [ 703.047313][T21807] lo speed is unknown, defaulting to 1000 [ 703.233382][T21846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4038'. [ 703.435771][T21858] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 703.489365][T21860] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4041'. [ 703.498622][T21860] netlink: 'syz.4.4041': attribute type 2 has an invalid length. [ 703.592661][T21863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4042'. [ 703.609972][T21863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.720157][T21863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.861464][T21866] vcan0: entered promiscuous mode [ 703.888706][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4042'. [ 703.900417][T21829] wg1 speed is unknown, defaulting to 1000 [ 704.393931][T21829] lo speed is unknown, defaulting to 1000 [ 704.472656][T21894] netlink: 'syz.1.4048': attribute type 1 has an invalid length. [ 704.570597][T21894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.593598][T21894] IPVS: length: 24 != 18456 [ 704.684745][T21898] bond3: (slave geneve2): making interface the new active one [ 704.694271][T21898] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 705.253835][T21917] vxcan3: entered allmulticast mode [ 705.400089][T21933] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.407355][T21933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.920628][T21960] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 706.149490][T21971] xt_socket: unknown flags 0x50 [ 706.218833][T21976] netlink: 'syz.4.4072': attribute type 10 has an invalid length. [ 706.227370][T21976] veth0_vlan: left promiscuous mode [ 706.249183][T21976] veth0_vlan: entered promiscuous mode [ 706.257523][T21976] team0: Device veth0_vlan failed to register rx_handler [ 706.315705][T21976] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4072'. [ 706.341574][T21976] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4072'. [ 706.588368][T22000] gtp1: entered promiscuous mode [ 706.593452][T22000] gtp1: entered allmulticast mode [ 706.733853][T22012] FAULT_INJECTION: forcing a failure. [ 706.733853][T22012] name failslab, interval 1, probability 0, space 0, times 0 [ 706.767101][T22012] CPU: 0 UID: 0 PID: 22012 Comm: syz.1.4086 Not tainted syzkaller #0 PREEMPT(full) [ 706.767131][T22012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 706.767144][T22012] Call Trace: [ 706.767152][T22012] [ 706.767161][T22012] dump_stack_lvl+0xe8/0x150 [ 706.767197][T22012] should_fail_ex+0x412/0x560 [ 706.767233][T22012] should_failslab+0xa8/0x100 [ 706.767261][T22012] __kmalloc_noprof+0xe8/0x760 [ 706.767285][T22012] ? security_sk_alloc+0x52/0x360 [ 706.767314][T22012] security_sk_alloc+0x52/0x360 [ 706.767341][T22012] sk_prot_alloc+0x101/0x210 [ 706.767365][T22012] ? sk_alloc+0x27/0x390 [ 706.767391][T22012] sk_alloc+0x3a/0x390 [ 706.767420][T22012] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 706.767455][T22012] ? __fget_files+0x2a/0x420 [ 706.767484][T22012] ? __fget_files+0x3a0/0x420 [ 706.767512][T22012] ? __fget_files+0x2a/0x420 [ 706.767547][T22012] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 706.767569][T22012] bpf_prog_test_run+0x2c7/0x340 [ 706.767595][T22012] __sys_bpf+0x643/0x950 [ 706.767617][T22012] ? __pfx___sys_bpf+0x10/0x10 [ 706.767654][T22012] ? ksys_write+0x242/0x270 [ 706.767679][T22012] ? __pfx_ksys_write+0x10/0x10 [ 706.767711][T22012] __x64_sys_bpf+0x7c/0x90 [ 706.767749][T22012] do_syscall_64+0x14d/0xf80 [ 706.767777][T22012] ? trace_irq_disable+0x3b/0x150 [ 706.767794][T22012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.767820][T22012] ? clear_bhb_loop+0x40/0x90 [ 706.767844][T22012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.767864][T22012] RIP: 0033:0x7f37adf9c819 [ 706.767884][T22012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.767902][T22012] RSP: 002b:00007f37aef0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 706.767924][T22012] RAX: ffffffffffffffda RBX: 00007f37ae215fa0 RCX: 00007f37adf9c819 [ 706.767939][T22012] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 706.767952][T22012] RBP: 00007f37aef0d090 R08: 0000000000000000 R09: 0000000000000000 [ 706.767964][T22012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.767976][T22012] R13: 00007f37ae216038 R14: 00007f37ae215fa0 R15: 00007ffe4c281c58 [ 706.768009][T22012] [ 706.774588][T22014] netlink: 'syz.3.4084': attribute type 21 has an invalid length. [ 706.887078][T22017] netlink: 'syz.3.4084': attribute type 1 has an invalid length. [ 707.039936][T22017] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4084'. [ 707.079419][T22014] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4084'. [ 707.102900][T22030] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4091'. [ 707.171566][T22026] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 707.184176][T22026] bond3 (unregistering): Released all slaves [ 707.240652][T22014] netlink: 'syz.3.4084': attribute type 4 has an invalid length. [ 707.296425][T22036] sock: sock_timestamping_bind_phc: sock not bind to device [ 708.054491][T22060] vlan0: entered promiscuous mode [ 708.060266][T22060] gretap0: entered promiscuous mode [ 708.241922][T22084] sock: sock_timestamping_bind_phc: sock not bind to device [ 708.394258][T22088] __nla_validate_parse: 3 callbacks suppressed [ 708.394280][T22088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4107'. [ 708.772297][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4110'. [ 708.819542][T22098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4110'. [ 708.836088][T22098] ipvlan3: entered allmulticast mode [ 708.841858][T22098] syz_tun: entered allmulticast mode [ 709.254572][T22123] sock: sock_timestamping_bind_phc: sock not bind to device [ 709.728509][T22134] netlink: 'syz.3.4121': attribute type 29 has an invalid length. [ 710.178682][T22157] netlink: 'syz.1.4130': attribute type 12 has an invalid length. [ 710.653856][T22171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4136'. [ 710.838340][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4139'. [ 711.127038][T22194] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 711.353768][T22173] wg1 speed is unknown, defaulting to 1000 [ 712.029824][T22215] bond4: option lacp_active: invalid value (8) [ 712.058611][T22215] bond4 (unregistering): Released all slaves [ 712.139454][T22173] lo speed is unknown, defaulting to 1000 [ 712.155955][T22225] tipc: Invalid UDP bearer configuration [ 712.156018][T22225] tipc: Enabling of bearer rejected, failed to enable media [ 712.173613][T22223] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4154'. [ 712.189433][T22226] FAULT_INJECTION: forcing a failure. [ 712.189433][T22226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.231506][T22226] CPU: 1 UID: 0 PID: 22226 Comm: syz.1.4153 Not tainted syzkaller #0 PREEMPT(full) [ 712.231540][T22226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 712.231552][T22226] Call Trace: [ 712.231561][T22226] [ 712.231570][T22226] dump_stack_lvl+0xe8/0x150 [ 712.231604][T22226] should_fail_ex+0x412/0x560 [ 712.231639][T22226] _copy_to_user+0x31/0xb0 [ 712.231665][T22226] simple_read_from_buffer+0xe1/0x170 [ 712.231724][T22226] proc_fail_nth_read+0x1bb/0x230 [ 712.231756][T22226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.231789][T22226] ? rw_verify_area+0x2a6/0x4d0 [ 712.231810][T22226] ? __fget_files+0x2a/0x420 [ 712.231837][T22226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.231865][T22226] vfs_read+0x20c/0xa70 [ 712.231884][T22226] ? fdget_pos+0x246/0x320 [ 712.231908][T22226] ? __pfx___mutex_lock+0x10/0x10 [ 712.231938][T22226] ? __pfx_vfs_read+0x10/0x10 [ 712.231961][T22226] ? __fget_files+0x2a/0x420 [ 712.231994][T22226] ? __fget_files+0x3a0/0x420 [ 712.232020][T22226] ? __fget_files+0x2a/0x420 [ 712.232057][T22226] ksys_read+0x150/0x270 [ 712.232082][T22226] ? __pfx_ksys_read+0x10/0x10 [ 712.232115][T22226] do_syscall_64+0x14d/0xf80 [ 712.232142][T22226] ? trace_irq_disable+0x3b/0x150 [ 712.232160][T22226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.232179][T22226] ? clear_bhb_loop+0x40/0x90 [ 712.232203][T22226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.232222][T22226] RIP: 0033:0x7f37adf5d04e [ 712.232241][T22226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.232259][T22226] RSP: 002b:00007f37aef0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.232281][T22226] RAX: ffffffffffffffda RBX: 00007f37aef0d6c0 RCX: 00007f37adf5d04e [ 712.232296][T22226] RDX: 000000000000000f RSI: 00007f37aef0d0a0 RDI: 0000000000000004 [ 712.232309][T22226] RBP: 00007f37aef0d090 R08: 0000000000000000 R09: 0000000000000000 [ 712.232321][T22226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 712.232333][T22226] R13: 00007f37ae216038 R14: 00007f37ae215fa0 R15: 00007ffe4c281c58 [ 712.232368][T22226] [ 712.508445][T22230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4156'. [ 713.104527][T22252] ip6tnl2: entered promiscuous mode [ 713.111322][T22252] ip6tnl2: entered allmulticast mode [ 713.819894][T22273] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4168'. [ 713.829194][T22272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4169'. [ 714.320329][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 714.331915][T22309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4180'. [ 714.342111][T22309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4180'. [ 714.591078][T22286] wg1 speed is unknown, defaulting to 1000 [ 714.612840][T22318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4182'. [ 714.734633][ T1766] block nbd2: Possible stuck request ffff888026e90000: control (read@0,1024B). Runtime 60 seconds [ 714.746091][ T1766] block nbd2: Possible stuck request ffff888026e90200: control (read@1024,1024B). Runtime 60 seconds [ 714.763503][ T1766] block nbd2: Possible stuck request ffff888026e90400: control (read@2048,1024B). Runtime 60 seconds [ 714.776933][ T1766] block nbd2: Possible stuck request ffff888026e90600: control (read@3072,1024B). Runtime 60 seconds [ 714.813389][T22325] netlink: 'syz.1.4185': attribute type 10 has an invalid length. [ 714.828690][T22325] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4185'. [ 714.918046][T22325] hsr0: entered promiscuous mode [ 714.960356][T22325] bridge0: port 3(hsr0) entered blocking state [ 714.966810][T22325] bridge0: port 3(hsr0) entered disabled state [ 714.974398][T22325] hsr0: entered allmulticast mode [ 714.989606][T22325] hsr_slave_0: entered allmulticast mode [ 715.002126][T22325] hsr_slave_1: entered allmulticast mode [ 715.118506][T22325] bridge0: port 3(hsr0) entered blocking state [ 715.125018][T22325] bridge0: port 3(hsr0) entered forwarding state [ 715.420682][T22286] lo speed is unknown, defaulting to 1000 [ 715.451348][T22346] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.4188'. [ 715.632219][T22355] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4190'. [ 715.658492][T22358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4191'. [ 715.722761][T22360] pim6reg: entered allmulticast mode [ 715.846086][T22369] netlink: 'syz.5.4194': attribute type 9 has an invalid length. [ 715.979978][T22368] tap0: tun_chr_ioctl cmd 1074025677 [ 715.985599][T22368] tap0: linktype set to 781 [ 716.088119][ C0] [ 716.090605][ C0] ============================================ [ 716.096778][ C0] WARNING: possible recursive locking detected [ 716.102948][ C0] syzkaller #0 Not tainted [ 716.107395][ C0] -------------------------------------------- [ 716.113559][ C0] kworker/0:8/5920 is trying to acquire lock: [ 716.119727][ C0] ffff888085194fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 716.128874][ C0] [ 716.128874][ C0] but task is already holding lock: [ 716.136531][ C0] ffff8880af9ccfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 716.146866][ C0] [ 716.146866][ C0] other info that might help us debug this: [ 716.154956][ C0] Possible unsafe locking scenario: [ 716.154956][ C0] [ 716.162425][ C0] CPU0 [ 716.165726][ C0] ---- [ 716.169005][ C0] lock(&hsr->seqnr_lock); [ 716.173601][ C0] lock(&hsr->seqnr_lock); [ 716.178113][ C0] [ 716.178113][ C0] *** DEADLOCK *** [ 716.178113][ C0] [ 716.186346][ C0] May be due to missing lock nesting notation [ 716.186346][ C0] [ 716.194753][ C0] 10 locks held by kworker/0:8/5920: [ 716.200041][ C0] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 716.211049][ C0] #1: ffffc9000472fc40 ((work_completion)(&p->wq)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 716.222663][ C0] #2: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 716.232685][ C0] #3: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 716.241831][ C0] #4: ffff8880af9ccfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 716.252640][ C0] #5: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 716.262219][ C0] #6: ffffffff8e75e680 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 716.272614][ C0] #7: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 716.281984][ C0] #8: ffffffff8e75e680 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 716.292018][ C0] #9: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 716.301177][ C0] [ 716.301177][ C0] stack backtrace: [ 716.307075][ C0] CPU: 0 UID: 0 PID: 5920 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 716.307093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 716.307104][ C0] Workqueue: events delayed_vfree_work [ 716.307125][ C0] Call Trace: [ 716.307132][ C0] [ 716.307139][ C0] dump_stack_lvl+0xe8/0x150 [ 716.307160][ C0] print_deadlock_bug+0x279/0x290 [ 716.307182][ C0] __lock_acquire+0x253f/0x2cf0 [ 716.307203][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 716.307224][ C0] lock_acquire+0xf0/0x2e0 [ 716.307241][ C0] ? hsr_dev_xmit+0x237/0x360 [ 716.307258][ C0] ? hsr_dev_xmit+0x237/0x360 [ 716.307272][ C0] _raw_spin_lock_bh+0x36/0x50 [ 716.307290][ C0] ? hsr_dev_xmit+0x237/0x360 [ 716.307305][ C0] hsr_dev_xmit+0x237/0x360 [ 716.307319][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 716.307334][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 716.307359][ C0] __dev_queue_xmit+0x1557/0x3870 [ 716.307382][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 716.307401][ C0] ? __dev_queue_xmit+0x28b/0x3870 [ 716.307419][ C0] ? ebt_do_table+0x2665/0x2830 [ 716.307438][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 716.307456][ C0] ? ebt_do_table+0x2665/0x2830 [ 716.307477][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 716.307504][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 716.307526][ C0] br_dev_queue_push_xmit+0x370/0x4a0 [ 716.307543][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 716.307560][ C0] NF_HOOK+0x360/0x3f0 [ 716.307576][ C0] ? NF_HOOK+0xa2/0x3f0 [ 716.307592][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 716.307606][ C0] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 716.307625][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 716.307646][ C0] br_forward_finish+0xd3/0x130 [ 716.307661][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 716.307677][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 716.307694][ C0] NF_HOOK+0x360/0x3f0 [ 716.307710][ C0] ? NF_HOOK+0xa2/0x3f0 [ 716.307724][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 716.307740][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 716.307757][ C0] ? __skb_clone+0x483/0x7a0 [ 716.307775][ C0] ? br_handle_vlan+0x61/0x530 [ 716.307791][ C0] __br_forward+0x397/0x540 [ 716.307805][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 716.307826][ C0] br_flood+0x6ee/0xb80 [ 716.307847][ C0] ? br_dev_xmit+0x193/0x1980 [ 716.307867][ C0] br_dev_xmit+0x12bd/0x1980 [ 716.307886][ C0] ? br_dev_xmit+0x193/0x1980 [ 716.307907][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 716.307925][ C0] ? __skb_get_hash_net+0x13f/0x2e0 [ 716.307945][ C0] ? __pfx___skb_get_hash_net+0x10/0x10 [ 716.307963][ C0] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 716.307983][ C0] ? skb_network_protocol+0x234/0x3f0 [ 716.308002][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 716.308029][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 716.308053][ C0] __dev_queue_xmit+0x1557/0x3870 [ 716.308072][ C0] ? handle_softirqs+0x22a/0x870 [ 716.308091][ C0] ? debug_check_no_obj_freed+0x52e/0x550 [ 716.308112][ C0] ? process_scheduled_works+0xb6e/0x18c0 [ 716.308130][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 716.308151][ C0] ? __dev_queue_xmit+0x28b/0x3870 [ 716.308173][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 716.308195][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 716.308213][ C0] ? __asan_memcpy+0x40/0x70 [ 716.308226][ C0] ? __skb_clone+0x63/0x7a0 [ 716.308245][ C0] ? __skb_clone+0x483/0x7a0 [ 716.308262][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 716.308278][ C0] ? skb_clone+0x246/0x3a0 [ 716.308298][ C0] hsr_forward_skb+0x157b/0x2860 [ 716.308319][ C0] ? hsr_forward_skb+0xb3/0x2860 [ 716.308337][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 716.308353][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 716.308370][ C0] ? __asan_memset+0x22/0x50 [ 716.308383][ C0] ? __skb_pad+0x405/0x610 [ 716.308403][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 716.308424][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 716.308441][ C0] hsr_announce+0x1db/0x370 [ 716.308456][ C0] ? hsr_announce+0x89/0x370 [ 716.308471][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 716.308489][ C0] call_timer_fn+0x192/0x640 [ 716.308507][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 716.308521][ C0] ? call_timer_fn+0xd4/0x640 [ 716.308538][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 716.308560][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 716.308577][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 716.308592][ C0] __run_timer_base+0x652/0x8b0 [ 716.308608][ C0] ? ktime_get+0x45/0x200 [ 716.308625][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 716.308643][ C0] ? sched_clock_cpu+0x74/0x440 [ 716.308664][ C0] run_timer_softirq+0xb7/0x170 [ 716.308680][ C0] handle_softirqs+0x22a/0x870 [ 716.308699][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 716.308719][ C0] __irq_exit_rcu+0x5f/0x150 [ 716.308737][ C0] irq_exit_rcu+0x9/0x30 [ 716.308754][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 716.308775][ C0] [ 716.308780][ C0] [ 716.308786][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.308801][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 716.308821][ C0] Code: f7 e8 1d 61 ee f5 f7 c3 00 02 00 00 74 05 e8 10 c7 19 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 1d e0 f5 65 8b 05 0d e0 68 07 85 c0 74 18 5b 41 5e c3 cc cc [ 716.308835][ C0] RSP: 0018:ffffc9000472f970 EFLAGS: 00000206 [ 716.308848][ C0] RAX: 0000000000000002 RBX: 0000000000000286 RCX: 0000000080000001 [ 716.308859][ C0] RDX: 0000000000000006 RSI: ffffffff8df2736e RDI: 0000000000000001 [ 716.308868][ C0] RBP: 0000000000000000 R08: ffffffff901187b7 R09: 1ffffffff20230f6 [ 716.308878][ C0] R10: dffffc0000000000 R11: fffffbfff20230f7 R12: ffffc90012400000 [ 716.308889][ C0] R13: ffffc90011a00000 R14: ffffffff9a4e3678 R15: 000000000000081a [ 716.308906][ C0] debug_check_no_obj_freed+0x52e/0x550 [ 716.308930][ C0] remove_vm_area+0x1d3/0x300 [ 716.308947][ C0] vfree+0x63/0x400 [ 716.308961][ C0] delayed_vfree_work+0x55/0x80 [ 716.308977][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 716.308995][ C0] process_scheduled_works+0xb6e/0x18c0 [ 716.309028][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 716.309049][ C0] ? assign_work+0x3d5/0x5e0 [ 716.309068][ C0] worker_thread+0xa53/0xfc0 [ 716.309095][ C0] kthread+0x388/0x470 [ 716.309109][ C0] ? __pfx_worker_thread+0x10/0x10 [ 716.309126][ C0] ? __pfx_kthread+0x10/0x10 [ 716.309140][ C0] ret_from_fork+0x51e/0xb90 [ 716.309160][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 716.309177][ C0] ? __switch_to+0xc7d/0x1450 [ 716.309195][ C0] ? __pfx_kthread+0x10/0x10 [ 716.309208][ C0] ret_from_fork_asm+0x1a/0x30 [ 716.309233][ C0] [ 720.252042][ T5193] udevd[5193]: worker [19212] /devices/virtual/block/nbd2 is taking a long time