last executing test programs: 5m32.487997732s ago: executing program 1 (id=1473): ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf250400"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20044000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 5m31.498910271s ago: executing program 1 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x8085) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd07000000000000000000000000000000000000080000"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd07000000000000000000000000000000000000080000"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 5m31.385802379s ago: executing program 1 (id=1489): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYRES64=r0], 0x48}}, 0x20010445) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYRES64=r0], 0x48}}, 0x20010445) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f000000ce80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000980)="c714", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000002d00)="05", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="100056410c80000006000000650b002010000000000000000000000001000000ed2c961138c28387180ba37d8717ba7aededcd43a0eb4e4a0172e18010d5482fc230c55a"], 0x20}}], 0x2, 0x880) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9b884480e43a1a28134f4dadd89247d86458e7c81f16eb1eb0318133054cdd4f94571cb44659deb08bb53fd52de7b97c38dacdcd1d18cc90103fb5c20a4a3231a5684f32919ec9dae4756aec3b6aa807b88ca7fce3deec4aa81d83b344ad136dd4a81deb823b908fb670fefbae91de5cd934f94c8d225d06b97fe0a4bf9bbec5b7980e8c62760e74f741e5e1e58921206620ddbb0d94254a26f4ffdc2bc327cc9068a266e20dcd5d1c61f9cf377cab7bbd9d4a250dfe151b8fb1bc58b63bbd521b8180c4043be127a593fcc09a2c273d0838e049b5881acc4affdc39cc948f891e4a9572"], 0x54}, 0x1, 0x0, 0x0, 0x2004004}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9b884480e43a1a28134f4dadd89247d86458e7c81f16eb1eb0318133054cdd4f94571cb44659deb08bb53fd52de7b97c38dacdcd1d18cc90103fb5c20a4a3231a5684f32919ec9dae4756aec3b6aa807b88ca7fce3deec4aa81d83b344ad136dd4a81deb823b908fb670fefbae91de5cd934f94c8d225d06b97fe0a4bf9bbec5b7980e8c62760e74f741e5e1e58921206620ddbb0d94254a26f4ffdc2bc327cc9068a266e20dcd5d1c61f9cf377cab7bbd9d4a250dfe151b8fb1bc58b63bbd521b8180c4043be127a593fcc09a2c273d0838e049b5881acc4affdc39cc948f891e4a9572"], 0x54}, 0x1, 0x0, 0x0, 0x2004004}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x10000) r4 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) (async) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) socketpair(0x15, 0xa, 0x8, &(0x7f0000000240)) (async) socketpair(0x15, 0xa, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)=r5}, 0x22) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)=r5}, 0x22) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74, 0x0, 0x0, @pid}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x38, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74, 0x0, 0x0, @pid}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x38, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000500)={r3}) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000380)={0x4, 0x3, 0x80000001, 0x1ff}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r13], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r13], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x8000, 0x4) 5m31.148575169s ago: executing program 1 (id=1491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000000c0), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r10], 0x50}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r14], 0x50}}, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r15, {}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5m30.612853747s ago: executing program 1 (id=1496): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000080)={0x9, {{0xa, 0x3, 0x800000, @mcast1={0xff, 0x7}, 0x40008a}}, {{0xa, 0x5, 0x10001, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000540)={0x32, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e22, 0x4, 'fo\x00', 0x2a, 0x3ff, 0x65}, 0x2c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x6}]}, 0x10) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000001c0)) (async) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0xfc, 0x11, 0x0, 0x5, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa800}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x2d, 0x0, &(0x7f0000000b40)) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x80, @private1, 0xfffffffb}}}, 0x108) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f0000000500)=0x8, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x0, 0x41, 0x61, 0x8, 0x0, 0x0}}, 0x10) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x7, {{0xa, 0x4e21, 0xfff, @local, 0x4}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x7}}, {{0xa, 0x4e20, 0x8001, @mcast1, 0xffffffff}}]}, 0x190) close(0x3) 5m30.267286278s ago: executing program 1 (id=1500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000d18", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x2}}}}}}}, 0x0) 5m15.162735276s ago: executing program 32 (id=1500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000d18", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x2}}}}}}}, 0x0) 2m32.658592066s ago: executing program 3 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c0003800400010004000500180001801400020076657468305f746f5f626f6e64000000"], 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0x7a) 2m32.502297566s ago: executing program 3 (id=2646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async, rerun: 64) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @void}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES8=r2], 0x5c}}, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) (rerun: 32) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r9}, 0x4) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000b7080000000000007b8af8ff00000000b7080000260a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r10, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r12) (async) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) writev(r6, &(0x7f0000003b00)=[{&(0x7f0000000580)="c24e", 0x2}], 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r6, 0x0) (async) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000240)='|w') (async) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000700)=@raw=[@jmp={0x5, 0x1, 0x5, 0x9, 0xd, 0xfffffffffffffffe, 0xfffffffffffffff0}, @ldst={0x2, 0x0, 0x1, 0x4, 0xb, 0x2, 0xfffffffffffffffc}, @alu={0x0, 0x0, 0x9, 0x3, 0x9, 0xfffffffffffffff0, 0x8}, @call={0x85, 0x0, 0x0, 0x44}, @jmp={0x5, 0x0, 0xb, 0x5, 0xa, 0x50, 0x7fffffffffffffec}, @ldst={0x3, 0x1, 0x1, 0x4, 0xb, 0x80, 0xfffffffffffffffc}], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 2m32.403520134s ago: executing program 3 (id=2647): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"dbce28c77b53b668c2fae71306921cf8", 0x0, 0x0, {0xff, 0x80000001}, {0x8, 0x9}, 0x4, [0x6, 0x4a3, 0x0, 0x5, 0x79b2, 0x4, 0x1, 0x6, 0x3, 0x8, 0x7, 0x9, 0x1, 0x3, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"835b12eb8db797cd0c4cc1903f44f589", r1, r2, {0x9, 0x692}, {0x80000000, 0x9}, 0x4, [0x8, 0x100, 0x800, 0x13, 0x3, 0x80000000, 0x5, 0x1, 0x4, 0x1ff, 0x492080000, 0x6, 0x10, 0x0, 0x5b54, 0xff]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000240)=0x3) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000280)={'veth1_to_bridge\x00', {0x2, 0x0, @local}}) r4 = socket$inet(0x2, 0x4, 0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x5}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000003c0)={0x7, 0x1, 0x8, 0x4, r5}, &(0x7f0000000400)=0x10) r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @netrom}, [@default, @default, @remote, @default, @default, @remote, @default, @netrom]}, &(0x7f00000004c0)=0x48, 0x800) getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000500)=0xa54, &(0x7f0000000540)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) write(r7, &(0x7f00000005c0)="868da94a3daf75a5317bc6e5ef3abf7779fe6596e68999ad224bcd3662f5aaa6edaec3613751cfea4021b8e32ee16e52684c0e79bcb81655cc3e4919a4f973ed7b8f955250b5b841d3a24efc2fd56a2f9ebb594511eb30a6a2a177fafa4f36d33cad8e84504f7e7be078613d2c972e1bc6020cda77e7dbb0c007385951282db9631eec7a08fcbedd14af16371e647e5b6840ff8aa22282c91fd06d2473d5c419b6ed298f9827f857dc0e4dbe924aad4e", 0xb0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000680)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x4, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x83c}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x17e0}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x54}, 0x1, 0x0, 0x0, 0x18010}, 0xc004) r10 = accept4(r4, &(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000880)=0x80, 0x100000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r10, 0x110, 0x5, &(0x7f00000008c0)=[0x0, 0x3], 0x2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$MRT6(r10, 0x29, 0xce, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000b00)={0x9, 0x20, '\x00', 0x1, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0]}) r11 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x20010, r11, 0xde25000) setsockopt$inet6_int(r10, 0x29, 0x3, &(0x7f0000000b40)=0x1000, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000b80)=0x3312, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1d, 0x15, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@alu={0x7, 0x1, 0xb, 0x4, 0xa, 0x40, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='GPL\x00', 0x5, 0x57, &(0x7f0000000d40)=""/87, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0xa, 0x3e11063c, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd1f}, 0x94) 2m32.203241107s ago: executing program 3 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x4) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000500)=0xd0) (async) sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)="2838f3", 0x3}], 0x1}}], 0x1, 0x8004) (async) r4 = socket(0x23, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000a704000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) getsockname$packet(r4, 0x0, &(0x7f0000001480)) (async) listen(r0, 0x0) (async) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d0000", 0x32}], 0x1, 0x5, 0x0) (async) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'pimreg1\x00'}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) (async) setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) pread64(r8, &(0x7f0000000680)=""/233, 0xe9, 0x2) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYBLOB="1c16c8291d69b5417870242e94f759", @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r9) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m32.070238287s ago: executing program 3 (id=2652): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x9, 0x8, 0x1, 0x401, 0xfffffffffffffffb}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8}, @TCA_NETEM_RATE64={0xc, 0x8, 0x94fd89ef1cb5f7ca}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m31.90650731s ago: executing program 3 (id=2655): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x20) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r4, 0x5, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r6, 0x6896, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x20) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r4, 0x5, 0x5}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r6, 0x6896, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) (async) 2m16.88021948s ago: executing program 33 (id=2655): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x20) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r4, 0x5, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r6, 0x6896, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x20) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r4, 0x5, 0x5}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r6, 0x6896, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) (async) 2.862652196s ago: executing program 5 (id=3568): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc829}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0xffffffffffffff92, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x60}}, 0xd4) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}) close(r3) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 2.250268441s ago: executing program 0 (id=3583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x94, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0xe823}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000fa"], 0xfdef) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000140)=0xfb78, 0x4) shutdown(r1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYBLOB="200001"], 0x38}}, 0x40840) 2.126815081s ago: executing program 2 (id=3585): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611000000000000063000200000000009500000000000000ee5368e40d7ee4ea82ffb58122edbc6595f74eda8a485d6e6692cef15ce7a5115c727c7128cc36c423bd20ab3f193159d180753b534a14a8e631679ba430f07132eccf02e311e297d24107ae450439aea1c888d2fb8e1041317a7ebd458ea9910665224ecb795fe941f49b71d8d883fe1cad"], &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r0, 0x0, r0}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) 2.062668488s ago: executing program 0 (id=3586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x54) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3a6, 0x10, 0x1, 0xd76}, &(0x7f00000000c0)=0x18) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) sendfile(r6, r5, 0x0, 0x10000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x2) 2.058175236s ago: executing program 2 (id=3587): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x184, 0x4, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x95, 0xc, "0315a96df30b624b81e28752b8165c209980663fec93b9562bd0ce333fc6260cd499818bf53a43d5493f24a11e651640d2060a2e4c83de84ccce680c0e7d12ee6a92f1befe87025ead8c7bda3894f8c8e5f1b7edba7a43e95b863702652d34575f9eb4cd1278c9bf825ba3d584566510513a1b84497e71a9e1611912012c7144b6cef04d93aa1fdae7be19795574bc6112"}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x66, 0xc, "839e3d8fa15588cb732fc41ca369678eee41cb4c5bd29a89999a8dcd569445009c925e9366cdce4b0c0da6bb3b802567e6cec9b47898ff4deaf9b8fc336f79599cb5e9520df22740bad76d20538200f284252d9914dfa7a9f688e31f54952c07e6c8"}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x45}, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1, 0x5, [0x9, 0x7ff, 0x9, 0x0, 0x4]}, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x4000800) 2.002819505s ago: executing program 5 (id=3589): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0xd938, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) 1.913075785s ago: executing program 5 (id=3590): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/130, &(0x7f00000000c0)=0x82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1a8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x31}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xbd3000}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4800}, 0x80) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000380)={0x1, 0x8, 0xf614}) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000400}, 0x20000804) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000540)={0x1}) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x124, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x716ddb88}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000881}, 0x4000010) socket$unix(0x1, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000780)=0xfffffffffffffffe) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000007c0)) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000800)=0x0) connect$nfc_raw(r6, &(0x7f0000000840)={0x27, r7, 0x1, 0x5}, 0x10) getsockopt(r3, 0x6, 0x5, &(0x7f0000000880)=""/90, &(0x7f0000000900)=0x5a) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000a40)={r1, 0x4, 0x101, 0x2}) ioctl$int_out(r8, 0x5462, &(0x7f0000000a80)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000ac0)) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000b00)=@cgroup={0x3, r8, 0xffffffffffff7fff}, 0x10}}, 0x20) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000000b80)={0x0, 0xa, 0x9}) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000c00)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x38e0d2fbe8e0b800, 0x0, 0x0, 0x0, 0x33, &(0x7f0000000bc0)='wlan0\x00', 0xb10, 0x6, 0x6}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d80)={r8, &(0x7f0000000c80)="804c40de6d515e1568b2004888b154376ef6e318fe28192579762f792ff38132719fce00a7085438163263d9019086f6bfd186de06ea0a8842b25829cfc7a61791ed1ed85770348807291d364a914a62ba05a1676056f620549005019cf101b164ba75d2e1177a44bccf8ac8ee757451b1e8f032114012ae7401c6b283ed9786", &(0x7f0000000d00)=""/108, 0x4}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@rand_addr=0x64010100, @in=@local, 0x4e21, 0x8001, 0x4e20, 0x6, 0x0, 0x20, 0x20, 0x0, 0x0, 0xee00}, {0x2, 0xe9d, 0x3, 0xf, 0xb, 0x4, 0x5e0a, 0x6}, {0xffff, 0x3, 0x4, 0x7}, 0x401, 0x6e6bbf, 0x2, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d6, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x2, 0x3, 0x2, 0x7, 0x8, 0x364005dd}}, 0xe8) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9b}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.667279647s ago: executing program 2 (id=3592): r0 = socket$inet(0x2, 0x1, 0x3) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x7864, 0x5, 0xe]}, &(0x7f0000000100)=0x44) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) 1.477780397s ago: executing program 5 (id=3594): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa4}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.234859377s ago: executing program 2 (id=3596): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.210426641s ago: executing program 0 (id=3597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000001a80)=0x5, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0xd, @empty, 0x9}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="828f27bd7000fcdbdf25080000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40100}, 0x4054) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@private, @multicast2, 0x0}, &(0x7f00000003c0)=0xc) pipe(&(0x7f0000000400)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7a}, @generic={0x1d, 0x4, 0xb, 0x7ff, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x6, 0x8, 0x1, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x30992, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000580)=[{0x2, 0x5, 0xd, 0x4}, {0x4, 0x2, 0x6, 0x8}, {0x2, 0x1, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8}, {0x1, 0x3, 0xe, 0x3}, {0x3, 0x4, 0x4, 0x2}], 0x10, 0x6}, 0x94) 1.117471155s ago: executing program 0 (id=3599): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0xc6db, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}], 0x2c) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c000008000180d8ba7c430c0003"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x8) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$sock(r4, &(0x7f0000000680)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, 0x0}, 0x8080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000850000000e00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000980)="639a520f1ae99a0fb7ec33c9e900", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, 0x0) (async, rerun: 64) sendto(r1, &(0x7f0000000480)="120000001200e7ef007b00000000000000a1b95f53fab36c13", 0x19, 0x84, 0x0, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}, 0x1000}], 0x1, 0x42042000, &(0x7f0000003700)={0x77359400}) 1.007824738s ago: executing program 5 (id=3601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r5) (async) epoll_create1(0x80000) write$cgroup_subtree(r5, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000780), 0x12) (async) socket$kcm(0x29, 0x4, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x18, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x89, [@broadcast, @multicast1]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@remote}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@multicast2}]}]}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x12}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) recvmsg(r10, &(0x7f0000000580)={&(0x7f0000000340)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/193, 0xc1}], 0x2, &(0x7f0000000240)=""/64, 0x40}, 0x40000002) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r11, 0x25, 0x4, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0xc}}, 0x30) 927.216634ms ago: executing program 0 (id=3602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1105000040000000000009000000380003800600040069d7000008000300000000001400020076657468305f746f5f626f6e64000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x14, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, 0x22) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xeffff00c}, {0x6}]}, 0x10) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1105000040000000000009000000380003800600040069d7000008000300000000001400020076657468305f746f5f626f6e64000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x14, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, 0x22) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xeffff00c}, {0x6}]}, 0x10) (async) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) (async) 926.933818ms ago: executing program 2 (id=3603): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x1c, "4f27d9a3165cc31e2334c6dbf5b41771cbcf21603a1dc89c65c082ef"}}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x400}}, 0xc, 0x4000}, &(0x7f0000000080)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xf, 0xa5, &(0x7f0000000200)=""/165, 0x0, 0x42}, 0x94) 916.961616ms ago: executing program 5 (id=3604): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003400000004a08000640000000010800044000000002"], 0x94}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="02070009", 0x4}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='macvlan0\x00', 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x72) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x4, 0x6, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) 802.67596ms ago: executing program 6 (id=3606): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x70, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xf61}], 0x1) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x20000800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500080800000085000000a500006555d4e9fd2a5a360384119dca8ef15fdc797f00f82a3cb7dd31c538fbc4f43ddb6df0e88b2b4745d4b6489db240b639fb8b3939faedd5a2c8b0718d4b47507402f43b68b35e2e8ec977017bec01f65fc4687e019d73b22b026e495ab090519030378020cdea8d989cd4223197b068665c8c6a8124453c34a351daebf6cd3be8f78b86b58bf96f7d9ce25053851ce16c"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) 741.42533ms ago: executing program 0 (id=3607): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x1, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x2c, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@typed={0x4, 0x71, 0x0, 0x0, @binary}, @generic="8c"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r0, 0x0, 0x0, 0x121, 0x0, 0x0) 686.405934ms ago: executing program 4 (id=3608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 627.062174ms ago: executing program 6 (id=3609): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r3, 0x4, 0xff, 0x0, 0x5, 0x40, @private1, @empty, 0x1, 0x7, 0xb03, 0xe}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r3, 0x4, 0x7, 0x6, 0xff, 0x34, @rand_addr=' \x01\x00', @local, 0x10, 0x20, 0x10000, 0xe60}}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES64=r0, @ANYBLOB="010102000000000008000500", @ANYRES32=r7, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a800000c00020005000000000000000600050088a800001000"], 0x90}, 0x1, 0xba01}, 0x810) 626.155441ms ago: executing program 4 (id=3610): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_emit_ethernet(0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffff6511b6301900ffff88a8100081"], 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0x9, 0x0, &(0x7f0000000080)="c1dfb080cd21d30809", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000780), 0x12) (async) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x79ac, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={r5, 0x4, 0x7, [0x7, 0x2, 0x1, 0x6, 0x7, 0x7f, 0x7]}, 0x16) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) r7 = socket(0x2c, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000)="fc00", 0x2) splice(r8, 0x0, r7, 0x0, 0x9, 0x5) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000004900020073797a310000000020000000000a03000000000000000000050000070900010473797a31000028c1b2dc3bcf7ea9010000000000000000000151e41f"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 546.220653ms ago: executing program 4 (id=3611): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 524.76164ms ago: executing program 6 (id=3612): socket$netlink(0x10, 0x3, 0x7) (async) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0xfffffffd, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) 379.200904ms ago: executing program 6 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @map_idx={0x18, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x5, 0x5, 0x6fb1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[{0x2, 0x1, 0x2}, {0x3, 0x3, 0x8, 0xc}, {0x3, 0x4, 0x3, 0x4}, {0x1, 0x5, 0x0, 0x3}], 0x10, 0x7}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000001a40)=""/86, 0x56, 0x0, &(0x7f0000001ac0)=""/89, 0x59}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 357.570275ms ago: executing program 4 (id=3614): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000083"], 0x0, 0x5a}, 0x28) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYRES32=0x41424344, @ANYBLOB='P@'], 0x7a) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(r3, 0x0, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd}, 0x1c) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4, @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 333.723481ms ago: executing program 6 (id=3615): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r2}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="00000000000000abce1d567eac819b00b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x3, r4, 0x6}, 0x10) 187.227825ms ago: executing program 4 (id=3616): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c0010800400058004000b800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000180001002abf70001bdcdf2502008004fd00fe0000080000100000000c00010000080105e3870000030000000000000018511cc0e311f24d35dd24fe0a0709a677b07398731e2b9d9ebb9953c5252cf1759d0c2e16d0db0198a9abdd7d9a05f926242dc6d32367f14d5ec510b1a655ccc098cfcf61915ab941b0de7b10556b7d5214a300b2a57a2e97b63d50948ea07b12b879"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x400080c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be0044"], 0xfdef) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x90a8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x1a0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x14}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x400}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x67}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe3}}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3cf504ff}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) 186.651423ms ago: executing program 6 (id=3617): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_stats={0x48}}) syz_emit_ethernet(0x6e, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=0x0, @ANYRESDEC=r0], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004000600"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e6e17b21ce555a2094a5d6920bd5b3cf7d243ed3886ec6d8f32ee7907d743771f16be7b9201669f9cc1957a7bfc577f1eb2d971243062dee3f4953543c381a0ad8dcfec258acb4a5c42ffd9912d949f5749174b051b177e62b3d5ea8b4cd0982855122596e1c0dd6feca74e945f68624cdecd01427eea85217a6b01b647d16fe4256179911dab9af86d4530ef009d550d02300"/182, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) listen(r2, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x278, 0xc8, 0x8, 0x0, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xf7, 0x0, 0x1}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [0xff000000, 0x100fffe00, 0xff, 0xffffff00], @ipv6=@mcast2, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0x0, 0xffffff00, 0x0, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff, 0xffffff00], 0x6cd, 0x7ff, 0x5e, 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x400}, 0x41, 0x0, 0x4e21, 0x4e22, 0x4e21, 0x4e21}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="0c080000000000000000000006000000181100007a91e286c7f49fd35332acc8f45ab08589210e8e34fd2690033499ad53c7ad297b3847efa5f7a845eaae420e6d692c83d64950420de6ca1fe40d613397ef179705cd4f52c492f6364f0268ec7a1a2bf0ea801e62b1", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRESOCT, @ANYBLOB="00000000fffffff3b7050000080000004608f0ff760000005e92f8ff0000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x20000002, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x8}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="6bef27bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000026c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 115.447006ms ago: executing program 4 (id=3618): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) syz_emit_ethernet(0x2a, &(0x7f0000000780)={@link_local={0x5}, @link_local, @void, {@arp={0x806, @generic={0x311, 0x9300, 0x6, 0x6, 0x1, @empty, "4c0f351e6419", @empty, "8f50"}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20005276c81402000000000800030003000000e5cacdc4827c3a54ecca566433cafd96f8e524"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0x0) r3 = socket(0x18, 0x2, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0xffffffff, 0x44, 0x6}, 0x10) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c00080008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14) write(r6, &(0x7f0000000240)="f349acd4ad460441c58d574492a2", 0xe) ioctl$sock_netdev_private(r6, 0x89f0, &(0x7f0000000380)="b841d6566a4a7a4488d6a94f83c4b0aa14a347") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00'}) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000180)=""/60, 0x3c}], 0x2, &(0x7f0000000200)=""/237, 0xed}, 0x2160) 0s ago: executing program 2 (id=3619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x60, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0xf, 0x7, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x68, 0x0, 0x9, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@end, @timestamp_prespec={0x44, 0x1c, 0x18, 0x3, 0xf, [{@multicast1, 0x10000}, {@multicast1, 0xf}, {@local, 0xb}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a00)={0x0, @initdev, @multicast2}, &(0x7f0000000a40)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000c00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x120, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20044090}, 0x44850) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x300, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001) kernel console output (not intermixed with test programs): e [ 298.267661][T14365] netlink: 'syz.2.2172': attribute type 21 has an invalid length. [ 298.279260][T14366] netlink: 'syz.5.2167': attribute type 10 has an invalid length. [ 298.287891][T14365] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2172'. [ 298.544515][T14377] can: request_module (can-proto-5) failed. [ 298.625435][T14379] netlink: 'syz.3.2176': attribute type 2 has an invalid length. [ 298.665580][T14379] : entered promiscuous mode [ 298.678320][T14383] netlink: 'syz.3.2176': attribute type 2 has an invalid length. [ 298.697421][T14383] : left promiscuous mode [ 298.763599][T14387] netlink: 'syz.2.2178': attribute type 15 has an invalid length. [ 298.987311][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.996731][ C1] lec:lec_tx_timeout: lec0 [ 299.002129][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 299.103334][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2182'. [ 299.131763][T14407] syzkaller1: entered promiscuous mode [ 299.137892][T14407] syzkaller1: entered allmulticast mode [ 299.188252][T14414] mÿ5nè‹Ò: entered promiscuous mode [ 299.441502][T14425] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 299.442744][ T5920] net_ratelimit: 137 callbacks suppressed [ 299.442759][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.507056][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 299.511217][T14425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.546735][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 299.566150][T14431] bond6: (slave gretap2): making interface the new active one [ 299.575073][T14431] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 299.747732][T14440] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2191'. [ 299.813066][T14442] nbd: couldn't find device at index 2 [ 299.822698][T14438] nbd: must specify a size in bytes for the device [ 299.883091][ T30] audit: type=1800 audit(1770521985.301:9): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2190" name="memory.events" dev="tmpfs" ino=2356 res=0 errno=0 [ 300.102839][ T6037] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 300.104159][T14456] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 300.195798][T14462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.209784][T14463] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2196'. [ 300.236260][T14462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.266035][T14458] fido_id[14458]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 300.432811][T14456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.444795][T14456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.480581][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.561525][T14472] netlink: 'syz.4.2199': attribute type 29 has an invalid length. [ 300.570699][T14473] netlink: 'syz.4.2199': attribute type 29 has an invalid length. [ 300.589946][ T1157] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.618959][ T1157] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.661689][T14479] netlink: 'syz.5.2200': attribute type 13 has an invalid length. [ 300.663888][ T1157] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.682934][ T1157] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.236642][T14495] tipc: Enabling of bearer rejected, failed to enable media [ 301.281776][T14495] sch_tbf: burst 256 is lower than device syzkaller0 mtu (313) ! [ 301.394071][T14498] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.395603][T14507] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 301.522612][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.622465][T14498] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.758129][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.850451][T14498] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.019348][T14498] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.144819][T14539] geneve3: entered promiscuous mode [ 302.154574][T14539] geneve3: entered allmulticast mode [ 302.327741][ T5983] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.400662][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.409758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.443233][T14560] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 302.465974][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.491141][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.519107][T14557] tipc: Enabling of bearer rejected, failed to enable media [ 302.539283][T14553] bridge_slave_0: left allmulticast mode [ 302.545052][T14553] bridge_slave_0: left promiscuous mode [ 302.557137][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.565291][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.578857][T14553] bridge_slave_1: left allmulticast mode [ 302.585346][T14553] bridge_slave_1: left promiscuous mode [ 302.592066][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.616016][T14553] bond0: (slave 30): Releasing backup interface [ 302.632085][T14553] bond0: (slave bond_slave_1): Releasing backup interface [ 302.663718][T14553] team0: Port device team_slave_0 removed [ 302.691084][T14553] team0: Port device team_slave_1 removed [ 302.707522][T14553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.738998][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.749261][ T30] audit: type=1107 audit(1770521988.171:10): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 302.753448][T14553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.896088][T14571] sch_tbf: burst 256 is lower than device syzkaller0 mtu (313) ! [ 302.933960][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.141421][T14595] __nla_validate_parse: 151 callbacks suppressed [ 303.141440][T14595] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2225'. [ 303.188706][T14594] syzkaller1: entered promiscuous mode [ 303.204496][T14594] syzkaller1: entered allmulticast mode [ 303.591078][T14610] netlink: 'syz.4.2229': attribute type 62 has an invalid length. [ 304.014759][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2232'. [ 304.023862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 304.023898][ C1] lec:lec_tx_timeout: lec0 [ 304.032760][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.280034][T14640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2236'. [ 304.320271][T14643] tipc: Enabling of bearer rejected, failed to enable media [ 304.358329][T14643] sch_tbf: burst 256 is lower than device syzkaller0 mtu (313) ! [ 304.459895][T14649] net_ratelimit: 1 callbacks suppressed [ 304.459913][T14649] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 304.642861][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.859473][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 304.868880][T14676] netlink: 261 bytes leftover after parsing attributes in process `syz.3.2246'. [ 305.276764][T14686] tipc: Enabled bearer , priority 0 [ 305.286728][T14686] syzkaller0: entered promiscuous mode [ 305.292536][T14686] syzkaller0: entered allmulticast mode [ 305.313800][T14686] tipc: Resetting bearer [ 305.321539][T14685] tipc: Resetting bearer [ 305.340500][T14685] tipc: Disabling bearer [ 305.469042][T14688] tipc: Enabling of bearer rejected, failed to enable media [ 305.487993][T14688] syzkaller0: entered promiscuous mode [ 305.493768][T14688] syzkaller0: entered allmulticast mode [ 305.505938][T14688] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 305.533901][T14690] netlink: 'syz.0.2251': attribute type 4 has an invalid length. [ 305.571595][T14690] netlink: 'syz.0.2251': attribute type 4 has an invalid length. [ 305.686542][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.863059][T14713] netlink: 'syz.3.2259': attribute type 3 has an invalid length. [ 305.906657][T14714] tipc: Enabled bearer , priority 0 [ 305.914117][T14714] syzkaller0: entered promiscuous mode [ 305.919994][T14714] syzkaller0: entered allmulticast mode [ 305.928500][T14715] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 305.951745][T14714] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 305.971031][T14712] tipc: Resetting bearer [ 305.999504][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 306.002093][T14712] tipc: Disabling bearer [ 306.030579][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 306.487492][ T5893] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 306.522149][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2268'. [ 306.724103][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.880722][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.889783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.007209][ T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 307.205411][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 307.215328][T14730] tipc: Resetting bearer [ 307.318547][T14798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2274'. [ 307.441068][ T5983] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 307.517738][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.657708][T14816] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 307.762700][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.133461][T14834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.343560][T14845] __nla_validate_parse: 4 callbacks suppressed [ 308.343579][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 308.432784][T14845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.500963][ T5983] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 308.555241][ T5983] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 308.566928][ T5827] Bluetooth: hci5: command 0x0405 tx timeout [ 308.969922][ T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 309.048001][T14876] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2286'. [ 309.387940][T14884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2287'. [ 309.473305][T14895] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2289'. [ 309.525059][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 309.589385][T14899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2289'. [ 309.601062][T14899] nbd: illegal input index 38656 [ 309.615525][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 309.766575][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2291'. [ 309.842856][ T24] net_ratelimit: 5 callbacks suppressed [ 309.842873][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.871810][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 309.908833][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 309.938907][T14913] xt_hashlimit: max too large, truncated to 1048576 [ 309.954710][T14913] xt_bpf: check failed: parse error [ 309.956863][T14898] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 310.021535][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2294'. [ 310.076982][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 310.083692][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.085087][ C1] lec:lec_tx_timeout: lec0 [ 310.097036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.190064][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.231073][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.244632][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.338034][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.346326][T14898] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.591696][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 310.618513][T14943] netlink: 'syz.4.2300': attribute type 11 has an invalid length. [ 310.681335][T14941] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.729609][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 310.890119][T14941] bond6 (unregistering): Released all slaves [ 310.919909][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.230557][T14969] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 311.444195][T14985] syzkaller0: entered promiscuous mode [ 311.454978][T14985] syzkaller0: entered allmulticast mode [ 311.849912][T15018] TCP: TCP_TX_DELAY enabled [ 311.962751][T15022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.997006][T15031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.007207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.010207][T15023] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 312.021045][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.072041][T15031] netlink: 'syz.0.2319': attribute type 4 has an invalid length. [ 312.309031][T15052] vlan1: entered promiscuous mode [ 312.321804][T15052] `: entered promiscuous mode [ 312.477462][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 312.641739][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.650310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.653458][T15069] team0: left promiscuous mode [ 312.676748][T15069] team0: left allmulticast mode [ 312.697862][T15069] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.938486][T15096] bridge1: entered promiscuous mode [ 312.965557][T15099] bridge0: port 1(syz_tun) entered blocking state [ 312.977423][T15099] bridge0: port 1(syz_tun) entered disabled state [ 312.996004][T15099] syz_tun: entered promiscuous mode [ 313.043630][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.278842][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.288853][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.492613][T15123] tipc: Enabling of bearer rejected, already enabled [ 313.626201][T15129] __nla_validate_parse: 17 callbacks suppressed [ 313.626222][T15129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2342'. [ 313.654512][T15127] xt_CT: No such helper "snmp_trap" [ 313.846705][T15088] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.949854][T15153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 313.964919][T15150] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2349'. [ 314.005251][T15151] tipc: New replicast peer: 255.255.255.255 [ 314.021903][T15151] tipc: Enabled bearer , priority 10 [ 314.333533][T15173] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2356'. [ 314.432530][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 314.587488][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 314.672080][T15189] netlink: 'syz.3.2360': attribute type 1 has an invalid length. [ 314.695555][T15189] netlink: 'syz.3.2360': attribute type 3 has an invalid length. [ 314.706374][T15189] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2360'. [ 314.798045][T15201] netlink: 'syz.0.2366': attribute type 1 has an invalid length. [ 314.833341][T15201] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.850506][T15200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2366'. [ 314.872341][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'. [ 314.928217][T15200] bond8: (slave gretap4): making interface the new active one [ 314.939649][T15200] net_ratelimit: 4 callbacks suppressed [ 314.939665][T15200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.944289][T15207] netlink: 'syz.3.2367': attribute type 1 has an invalid length. [ 314.947496][T15200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.970526][T15200] bond8: (slave gretap4): Enslaving as an active interface with an up link [ 314.986731][T15201] bond8 (unregistering): (slave gretap4): Releasing active interface [ 314.998832][T15201] bond8 (unregistering): Released all slaves [ 315.119868][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.176890][T15215] netlink: 'syz.4.2370': attribute type 30 has an invalid length. [ 315.212267][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.221289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.408335][T15231] netlink: 'syz.3.2375': attribute type 7 has an invalid length. [ 315.416241][T15231] netlink: 'syz.3.2375': attribute type 8 has an invalid length. [ 315.424420][T15231] netlink: 'syz.3.2375': attribute type 8 has an invalid length. [ 315.455898][T15231] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.2375'. [ 315.836990][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 315.845060][ C1] lec:lec_tx_timeout: lec0 [ 315.850184][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.914474][T15208] virt_wifi0 speed is unknown, defaulting to 1000 [ 316.163352][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.815100][T15315] validate_nla: 2 callbacks suppressed [ 316.815117][T15315] netlink: 'syz.3.2400': attribute type 37 has an invalid length. [ 316.831803][T15315] netlink: 'syz.3.2400': attribute type 2 has an invalid length. [ 317.079003][T15321] geneve0: entered promiscuous mode [ 317.118310][T15321] geneve0: entered allmulticast mode [ 317.123477][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135152][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.197672][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.989072][T15385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.167529][T15385] macsec1: entered promiscuous mode [ 318.255337][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.269930][T15328] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.286875][T15389] tipc: Enabled bearer , priority 0 [ 318.355369][T15402] syzkaller0: entered promiscuous mode [ 318.362572][T15402] syzkaller0: entered allmulticast mode [ 318.370009][T15402] tipc: Resetting bearer [ 318.399761][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.408232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.605107][T15415] delete_channel: no stack [ 318.699913][T15421] __nla_validate_parse: 17 callbacks suppressed [ 318.699935][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'. [ 318.725791][T15421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2422'. [ 318.887177][T15388] tipc: Resetting bearer [ 318.914384][T15434] sctp: [Deprecated]: syz.2.2424 (pid 15434) Use of int in max_burst socket option. [ 318.914384][T15434] Use struct sctp_assoc_value instead [ 319.555365][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 319.564449][T15455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2428'. [ 320.319772][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 320.328264][ T6106] net_ratelimit: 4 callbacks suppressed [ 320.328280][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.341992][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.350098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.834469][T15388] tipc: Disabling bearer [ 320.867219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 320.875327][ C1] lec:lec_tx_timeout: lec0 [ 320.880116][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.016865][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2429'. [ 321.287837][T15479] netlink: 'syz.3.2436': attribute type 6 has an invalid length. [ 321.357965][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.510643][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 321.571877][T15495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2440'. [ 321.602739][T15505] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 321.634059][T15505] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 321.642333][T15505] netlink: 'syz.2.2443': attribute type 2 has an invalid length. [ 321.650530][T15505] netlink: 'syz.2.2443': attribute type 2 has an invalid length. [ 321.711825][T15515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2444'. [ 321.822862][T15530] xt_hashlimit: size too large, truncated to 1048576 [ 321.958657][T15533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2447'. [ 322.034026][T15536] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2450'. [ 322.463701][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.869880][T15588] netlink: 'syz.0.2458': attribute type 21 has an invalid length. [ 323.123097][T15541] virt_wifi0 speed is unknown, defaulting to 1000 [ 323.256245][T15603] netlink: 'syz.2.2466': attribute type 9 has an invalid length. [ 323.256685][T15605] netlink: 'syz.5.2467': attribute type 62 has an invalid length. [ 323.411835][T15612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.414985][T15614] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.526079][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.791023][T15632] dummy0: entered allmulticast mode [ 323.824889][T15635] __nla_validate_parse: 10 callbacks suppressed [ 323.824908][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2476'. [ 324.172049][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.180210][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.318621][T15653] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2481'. [ 324.328520][T15659] syzkaller0: entered promiscuous mode [ 324.334035][T15659] syzkaller0: entered allmulticast mode [ 324.354673][T15661] syzkaller1: entered promiscuous mode [ 324.361049][T15661] syzkaller1: entered allmulticast mode [ 324.543827][T15673] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2485'. [ 324.568918][T15672] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 324.584081][T15673] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2485'. [ 324.634021][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 324.913888][T15700] netlink: 'syz.4.2495': attribute type 58 has an invalid length. [ 324.951897][T15700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2495'. [ 325.007075][T15701] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2494'. [ 325.035965][T15708] netlink: 184020 bytes leftover after parsing attributes in process `syz.2.2498'. [ 325.237324][T15725] netlink: 'syz.2.2501': attribute type 10 has an invalid length. [ 325.377378][T15725] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2501'. [ 325.386398][T15725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.398558][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2497'. [ 325.407551][T15725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.407586][T15725] hsr0: entered promiscuous mode [ 325.409074][T15725] bridge0: port 1(hsr0) entered blocking state [ 325.439910][ T1157] net_ratelimit: 5 callbacks suppressed [ 325.439929][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.453933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.465744][T15725] bridge0: port 1(hsr0) entered disabled state [ 325.533431][T15725] hsr0: entered allmulticast mode [ 325.558645][T15725] hsr_slave_0: entered allmulticast mode [ 325.609098][T15725] hsr_slave_1: entered allmulticast mode [ 325.857050][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.887239][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 325.895268][ C1] lec:lec_tx_timeout: lec0 [ 325.899905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 326.338358][T15738] syzkaller0: entered promiscuous mode [ 326.344072][T15738] syzkaller0: entered allmulticast mode [ 326.594745][T15760] netlink: 'syz.4.2508': attribute type 4 has an invalid length. [ 326.888060][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.929706][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.292416][T15772] 0ªî{X¹¦: renamed from gretap0 [ 328.314441][T15772] 0ªî{X¹¦: entered allmulticast mode [ 328.323662][T15772] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 328.957488][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.036193][T15782] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.278478][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.286848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.356368][T15778] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.883081][T15827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.918463][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.975682][T15827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.034856][T15809] virt_wifi0 speed is unknown, defaulting to 1000 [ 330.098994][ T5893] hid-generic 0005:04F3:5508.0002: item fetching failed at offset 0/1 [ 330.108017][ T5893] hid-generic 0005:04F3:5508.0002: probe with driver hid-generic failed with error -22 [ 330.462296][T15851] rdma_rxe: rxe_newlink: failed to add lo [ 330.662927][T15860] net_ratelimit: 3 callbacks suppressed [ 330.662946][T15860] openvswitch: netlink: IP tunnel dst address not specified [ 330.679341][T15863] openvswitch: netlink: IP tunnel dst address not specified [ 330.772268][T15867] xt_ecn: cannot match TCP bits for non-tcp packets [ 330.778136][T15866] delete_channel: no stack [ 330.814870][T15870] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 330.887310][T15872] __nla_validate_parse: 5 callbacks suppressed [ 330.887329][T15872] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2539'. [ 330.907432][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 330.915463][ C1] lec:lec_tx_timeout: lec0 [ 330.920108][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 331.044375][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.056334][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2541'. [ 331.220709][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.229143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.078705][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.326279][T15937] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2552'. [ 333.117473][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.157417][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.397698][T15891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.589393][T15991] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2560'. [ 334.653090][T15990] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.010494][T15996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.033577][T15996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.171707][T16019] tipc: Enabled bearer , priority 0 [ 335.178626][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.187610][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.201170][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.212793][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.231986][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.245377][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.285972][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.305335][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.398121][T16019] tipc: Disabling bearer [ 335.578063][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2571'. [ 335.617434][T16039] geneve2: entered promiscuous mode [ 335.635979][ T6104] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.645439][ T6104] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.661295][ T6104] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.690523][ T6104] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.881586][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 335.927279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 335.935519][ C1] lec:lec_tx_timeout: lec0 [ 335.940565][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 336.014570][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 336.037404][T16062] netlink: 'syz.2.2579': attribute type 21 has an invalid length. [ 336.244972][T16076] netlink: 'syz.4.2582': attribute type 9 has an invalid length. [ 336.296566][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2583'. [ 336.317149][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.449975][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 336.584321][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2587'. [ 336.625201][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.694409][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2588'. [ 336.783970][T14775] udevd[14775]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 336.997806][T16107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.491105][T16113] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 337.505754][T16113] netlink: 'syz.2.2592': attribute type 2 has an invalid length. [ 337.513817][T16113] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 337.533393][T16113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2592'. [ 337.631667][T16119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2593'. [ 337.641815][T16118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2593'. [ 337.678303][T16119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.685607][T16119] IPv6: NLM_F_CREATE should be set when creating new route [ 337.692906][T16119] IPv6: NLM_F_CREATE should be set when creating new route [ 337.701637][T16119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.888539][T16132] syzkaller0: entered promiscuous mode [ 337.894145][T16132] syzkaller0: entered allmulticast mode [ 337.992381][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'. [ 338.500330][T16125] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.956902][T16132] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.965399][T16134] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.947282][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 340.955315][ C1] lec:lec_tx_timeout: lec0 [ 340.960055][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.967168][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 345.975180][ C1] lec:lec_tx_timeout: lec0 [ 345.979978][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.987382][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 350.995416][ C1] lec:lec_tx_timeout: lec0 [ 351.000090][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.007222][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 356.015237][ C1] lec:lec_tx_timeout: lec0 [ 356.019847][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.837042][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 361.845076][ C1] lec:lec_tx_timeout: lec0 [ 361.849965][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 366.857454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 366.865829][ C0] lec:lec_tx_timeout: lec0 [ 366.870697][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.037271][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 371.877309][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 371.885318][ C1] lec:lec_tx_timeout: lec0 [ 371.890227][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.897362][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 376.905364][ C1] lec:lec_tx_timeout: lec0 [ 376.910051][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.559690][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.566004][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.917316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 381.925339][ C1] lec:lec_tx_timeout: lec0 [ 381.930239][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.937299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 386.945311][ C1] lec:lec_tx_timeout: lec0 [ 386.950028][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.957454][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 391.965480][ C1] lec:lec_tx_timeout: lec0 [ 391.970076][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.977277][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.985292][ C1] lec:lec_tx_timeout: lec0 [ 396.990176][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.089554][T16169] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2607'. [ 399.099721][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2603'. [ 399.141096][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 399.167434][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2604'. [ 399.279471][T16183] nbd: must specify an index to disconnect [ 399.341526][T16192] vti0: left promiscuous mode [ 399.346259][T16192] vti0: left allmulticast mode [ 399.367469][T16192] vlan2: left allmulticast mode [ 399.372523][T16192] dummy0: left allmulticast mode [ 399.591846][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'. [ 399.713608][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 399.868451][T16229] netlink: 'syz.3.2623': attribute type 11 has an invalid length. [ 399.876305][T16229] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2623'. [ 399.903582][T16231] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 399.917683][T16231] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 400.096541][T16248] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 400.159513][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2630'. [ 400.176796][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2629'. [ 400.186273][T16256] block nbd6: Unsupported socket: should be TCP or UNIX. [ 400.529370][T16281] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2638'. [ 401.062584][ T5485] veth0_vlan: left promiscuous mode [ 401.092521][ T5485] veth0_vlan: entered promiscuous mode [ 401.308450][T16333] openvswitch: netlink: IP tunnel dst address not specified [ 401.391077][T16338] macvtap1: entered allmulticast mode [ 401.396507][T16338] veth0_macvtap: entered allmulticast mode [ 401.582577][T16354] netlink: 'syz.5.2653': attribute type 29 has an invalid length. [ 401.604723][T16354] netlink: 'syz.5.2653': attribute type 29 has an invalid length. [ 401.997034][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 402.005088][ C1] lec:lec_tx_timeout: lec0 [ 402.010152][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 403.015468][T16420] netlink: 'syz.5.2668': attribute type 1 has an invalid length. [ 403.151137][T16429] nbd: nbd2 already in use [ 403.229382][T16439] netlink: 'syz.5.2672': attribute type 39 has an invalid length. [ 403.479693][T16461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.490264][T16461] bond0: (slave bond2): Enslaving as an active interface with a down link [ 403.745532][T16471] openvswitch: netlink: Missing key (keys=40, expected=100) [ 403.918244][T16485] pim6reg99999999: entered allmulticast mode [ 403.995174][T16488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.002507][T16488] IPv6: NLM_F_CREATE should be set when creating new route [ 404.015534][T16488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.022844][T16488] IPv6: NLM_F_CREATE should be set when creating new route [ 404.680298][T16504] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 404.857104][T16515] __nla_validate_parse: 8 callbacks suppressed [ 404.857123][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2692'. [ 404.884097][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2692'. [ 405.054973][T16490] virt_wifi0 speed is unknown, defaulting to 1000 [ 405.586758][T16499] virt_wifi0 speed is unknown, defaulting to 1000 [ 405.873932][T16548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.046702][T16552] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2699'. [ 406.231902][T16562] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 406.505625][T16574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2706'. [ 406.519733][T16575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2707'. [ 406.551329][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'. [ 407.017046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 407.025135][ C1] lec:lec_tx_timeout: lec0 [ 407.034579][T16606] sctp: [Deprecated]: syz.0.2713 (pid 16606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.034579][T16606] Use struct sctp_sack_info instead [ 407.078402][T16606] xt_policy: output policy not valid in PREROUTING and INPUT [ 408.423245][T16609] virt_wifi0 speed is unknown, defaulting to 1000 [ 408.745189][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'. [ 408.812085][T16673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'. [ 408.832416][T16672] veth0_to_team: entered promiscuous mode [ 408.852861][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'. [ 408.874052][T16672] veth0_to_team: left promiscuous mode [ 408.914612][T16673] veth0_to_team: entered promiscuous mode [ 408.925295][T16673] veth0_to_team: left promiscuous mode [ 408.976110][T16676] veth0_to_team: entered promiscuous mode [ 409.017721][T16676] veth0_to_team: left promiscuous mode [ 409.088772][T16621] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.501492][T16690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2727'. [ 410.269733][T16710] netlink: 'syz.2.2734': attribute type 2 has an invalid length. [ 410.302609][T16710] : entered promiscuous mode [ 410.326101][T16710] netlink: 'syz.2.2734': attribute type 142 has an invalid length. [ 410.372912][T16710] bond6: option arp_all_targets: invalid value (129) [ 410.407157][T16710] bond6 (unregistering): Released all slaves [ 410.503433][T16718] __nla_validate_parse: 1 callbacks suppressed [ 410.503453][T16718] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2735'. [ 410.600112][T16720] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2736'. [ 410.619241][T16720] netlink: 163948 bytes leftover after parsing attributes in process `syz.2.2736'. [ 410.788967][T16728] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2738'. [ 410.848561][T16729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2739'. [ 411.069752][T16716] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.323224][T16247] udevd[16247]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 411.421156][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 411.455430][T16748] bond3: option broadcast_neighbor: invalid value (30) [ 411.488290][T16748] bond3 (unregistering): Released all slaves [ 411.760059][T16756] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 412.302510][T16772] syzkaller0: entered promiscuous mode [ 412.317476][T16772] syzkaller0: entered allmulticast mode [ 412.327236][T16775] netlink: 'syz.2.2748': attribute type 29 has an invalid length. [ 412.335640][T16776] netlink: 'syz.2.2748': attribute type 29 has an invalid length. [ 412.349975][T16772] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2748'. [ 412.378837][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2750'. [ 412.509865][T16779] vlan4: entered promiscuous mode [ 412.514914][T16779] team0: entered promiscuous mode [ 414.612524][T16758] virt_wifi0 speed is unknown, defaulting to 1000 [ 414.848376][T16790] xt_hashlimit: size too large, truncated to 1048576 [ 414.867647][T16790] xt_hashlimit: invalid interval [ 415.976549][T16831] Bluetooth: MGMT ver 1.23 [ 416.009011][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2761'. [ 416.027141][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2761'. [ 416.036039][T16831] netlink: 'syz.5.2761': attribute type 14 has an invalid length. [ 416.078962][T16831] netlink: 'syz.5.2761': attribute type 15 has an invalid length. [ 416.296480][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2764'. [ 416.453345][T16842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2766'. [ 416.471967][T16842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2766'. [ 416.513412][T16842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2766'. [ 416.618288][T16850] netlink: 'syz.2.2768': attribute type 16 has an invalid length. [ 416.677440][T16850] netlink: 'syz.2.2768': attribute type 17 has an invalid length. [ 416.739010][T16850] erspan0: left promiscuous mode [ 416.815811][T16850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.847959][T16850] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.880496][T16850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.024636][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2765'. [ 417.063187][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 417.077889][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 417.086556][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 417.099970][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 417.128840][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 417.237920][T16879] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.2775'. [ 417.371273][T16881] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2776'. [ 417.658976][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 418.638063][T16871] virt_wifi0 speed is unknown, defaulting to 1000 [ 418.982419][T16871] chnl_net:caif_netlink_parms(): no params data found [ 419.156672][T16889] virt_wifi0 speed is unknown, defaulting to 1000 [ 419.202178][ T5827] Bluetooth: hci6: command tx timeout [ 419.222021][T16871] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.229627][T16871] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.237775][T16871] bridge_slave_0: entered allmulticast mode [ 419.246125][T16871] bridge_slave_0: entered promiscuous mode [ 419.281269][T16871] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.289773][T16871] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.297833][T16871] bridge_slave_1: entered allmulticast mode [ 419.306906][T16871] bridge_slave_1: entered promiscuous mode [ 419.490306][T16871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.538455][T16871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.764429][T16940] bond6 (unregistering): Released all slaves [ 419.966024][T16871] team0: Port device team_slave_0 added [ 420.036193][T16871] team0: Port device team_slave_1 added [ 420.186550][T16871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.196073][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.234493][T16871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.267766][T16871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.281885][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.317505][T16871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.454100][T16871] hsr_slave_0: entered promiscuous mode [ 420.470989][T16871] hsr_slave_1: entered promiscuous mode [ 420.498955][T16871] debugfs: 'hsr0' already exists in 'hsr' [ 420.515020][T16871] Cannot create hsr debugfs directory [ 420.633844][T16967] syzkaller0: entered promiscuous mode [ 420.646430][T16967] syzkaller0: entered allmulticast mode [ 420.675345][T16967] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 420.757364][T16971] netlink: 'syz.5.2800': attribute type 3 has an invalid length. [ 421.008055][T16984] netlink: 'syz.2.2804': attribute type 2 has an invalid length. [ 421.041271][T16986] netlink: 'syz.2.2804': attribute type 2 has an invalid length. [ 421.083989][T16987] __nla_validate_parse: 9 callbacks suppressed [ 421.084006][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.129708][T16986] 9: entered promiscuous mode [ 421.152915][T16997] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2808'. [ 421.181211][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.218865][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.244328][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.286358][ T5827] Bluetooth: hci6: command tx timeout [ 421.313746][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.365635][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.392213][T17006] rdma_op ffff88807a1ba9f0 conn xmit_rdma 0000000000000000 [ 421.413321][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.421105][T17008] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 421.443617][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.504622][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 421.629898][T17020] netlink: 'syz.2.2813': attribute type 3 has an invalid length. [ 421.719808][T16871] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.751558][T16871] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.810992][T16871] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.862317][T16871] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.097933][T17060] netlink: 'syz.2.2821': attribute type 2 has an invalid length. [ 422.195794][T17070] tipc: Enabled bearer , priority 0 [ 422.228064][T17069] tipc: Enabling of bearer rejected, already enabled [ 422.237296][T17069] syzkaller0: entered promiscuous mode [ 422.242792][T17069] syzkaller0: entered allmulticast mode [ 422.271405][T17073] netlink: 'syz.2.2824': attribute type 13 has an invalid length. [ 422.406852][T16871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.449367][T16871] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.537161][T17069] tipc: Resetting bearer [ 422.609470][T17069] tipc: Disabling bearer [ 422.658580][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.665796][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.701712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.708927][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.844280][T17100] bond0: (slave team0): Releasing backup interface [ 422.860332][T17100] team0 (unregistering): left promiscuous mode [ 422.866787][T17100] team_slave_0: left promiscuous mode [ 422.880149][T17100] team_slave_1: left promiscuous mode [ 422.927423][T17100] team0 (unregistering): Port device team_slave_0 removed [ 422.939398][T17100] team0 (unregistering): Port device team_slave_1 removed [ 422.950330][T17100] team0 (unregistering): Port device bridge3 removed [ 423.234583][T17123] veth5: left allmulticast mode [ 423.241811][T17123] veth5: left promiscuous mode [ 423.247014][T17123] bridge0: port 3(veth5) entered disabled state [ 423.268472][T17123] veth0_to_bond: left allmulticast mode [ 423.268859][T17132] netlink: 'syz.5.2837': attribute type 1 has an invalid length. [ 423.274064][T17123] veth0_to_bond: left promiscuous mode [ 423.274313][T17123] bridge0: port 2(veth0_to_bond) entered disabled state [ 423.315778][T17123] veth3: left allmulticast mode [ 423.340894][T17123] veth3: left promiscuous mode [ 423.362168][ T5827] Bluetooth: hci6: command tx timeout [ 423.374908][T17123] bridge0: port 1(veth3) entered disabled state [ 423.613136][T16871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.391223][T16871] veth0_vlan: entered promiscuous mode [ 424.436589][T16871] veth1_vlan: entered promiscuous mode [ 424.468835][T17180] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 424.477991][T17180] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 424.485079][T17180] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 424.511792][T16871] veth0_macvtap: entered promiscuous mode [ 424.545003][T16871] veth1_macvtap: entered promiscuous mode [ 424.586929][T16871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.622609][T16871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.670565][ T6106] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.697746][ T6106] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.886085][T17183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.918805][ T6106] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.971255][T17191] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 424.982794][T17191] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 425.003878][T17196] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 425.017677][T17196] bond3 (unregistering): Released all slaves [ 425.034665][ T6106] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.055972][T17157] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.263559][ T6106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.277809][ T6106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.346170][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.362948][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.438352][ T5827] Bluetooth: hci6: command tx timeout [ 425.518822][T17234] netlink: 'syz.5.2856': attribute type 12 has an invalid length. [ 426.439071][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 426.449873][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 426.458367][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 426.468078][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 426.488356][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 427.176771][ T5829] syz_tun (unregistering): left allmulticast mode [ 427.184517][ T5829] syz_tun (unregistering): left promiscuous mode [ 427.195150][T17273] __nla_validate_parse: 71 callbacks suppressed [ 427.195169][T17273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2869'. [ 427.204827][ T5829] bridge0: port 1(syz_tun) entered disabled state [ 427.262947][T17272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2869'. [ 427.412953][ T9797] lec:lec_start_xmit: lec0:No lecd attached [ 427.510794][T17241] virt_wifi0 speed is unknown, defaulting to 1000 [ 427.957733][T17258] virt_wifi0 speed is unknown, defaulting to 1000 [ 428.508372][T17258] chnl_net:caif_netlink_parms(): no params data found [ 428.565015][ T52] Bluetooth: hci7: command tx timeout [ 428.641935][T17301] tipc: Invalid UDP bearer configuration [ 428.641986][T17301] tipc: Enabling of bearer rejected, failed to enable media [ 428.734645][T17258] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.751270][T17258] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.769086][T17286] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 428.775624][T17258] bridge_slave_0: entered allmulticast mode [ 428.799417][T17258] bridge_slave_0: entered promiscuous mode [ 428.833284][T17258] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.850736][T17258] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.871842][T17258] bridge_slave_1: entered allmulticast mode [ 428.888086][T17258] bridge_slave_1: entered promiscuous mode [ 428.920605][T17306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2876'. [ 428.948611][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 428.965289][T17258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.993272][T17258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.092014][T17258] team0: Port device team_slave_0 added [ 429.129572][T17258] team0: Port device team_slave_1 added [ 429.227627][T17258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.236415][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.264388][T17258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.289268][T17314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2877'. [ 429.348905][T17258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.364436][T17314] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2877'. [ 429.387196][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.387876][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 429.413993][T17258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.561494][T17258] hsr_slave_0: entered promiscuous mode [ 429.568557][T17258] hsr_slave_1: entered promiscuous mode [ 429.575006][T17258] debugfs: 'hsr0' already exists in 'hsr' [ 429.581318][T17258] Cannot create hsr debugfs directory [ 429.595689][T17325] netlink: 'syz.0.2882': attribute type 5 has an invalid length. [ 429.618245][T17325] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.2882'. [ 429.660487][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.729561][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.736443][T17337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'. [ 429.757504][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.761862][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.815385][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.860075][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.880884][T17338] : renamed from veth0_to_bond (while UP) [ 429.906696][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.996285][T17343] syzkaller0: entered promiscuous mode [ 430.002567][T17343] syzkaller0: entered allmulticast mode [ 430.008884][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 430.019238][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.095629][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.130968][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.653309][ T52] Bluetooth: hci7: command tx timeout [ 430.817550][T17369] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2890'. [ 431.780583][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.016045][T17258] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.028291][T17380] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 432.032633][T17384] netlink: 'syz.6.2893': attribute type 2 has an invalid length. [ 432.053346][T17380] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 432.111566][T17258] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.156385][T17391] netlink: 'syz.2.2896': attribute type 9 has an invalid length. [ 432.202398][T17258] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.293925][T17258] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.595391][T17407] lo: entered allmulticast mode [ 432.608455][T17258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.648957][T17258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.665946][T17407] lo: left allmulticast mode [ 432.674963][T17258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.702915][T17409] xfrm1: entered allmulticast mode [ 432.714346][T17258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.733708][ T52] Bluetooth: hci7: command tx timeout [ 432.797158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 432.805275][ C1] lec:lec_tx_timeout: lec0 [ 433.022478][T17425] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 433.131564][T17258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.172940][T17258] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.196457][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.203708][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.250289][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.257504][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.289397][T17440] __nla_validate_parse: 5 callbacks suppressed [ 433.289416][T17440] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2911'. [ 433.312187][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.319629][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.352307][T17447] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2911'. [ 433.596077][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.603410][T17447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.611013][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.618201][T17447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.712203][T17447] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2911'. [ 433.732380][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.739794][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.835998][T17459] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2913'. [ 433.861113][T17459] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2913'. [ 433.948743][T17462] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2914'. [ 433.981502][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2913'. [ 434.161888][T17462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2914'. [ 434.249718][T17466] team_slave_0: entered promiscuous mode [ 434.254042][T17472] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2915'. [ 434.255801][T17466] team_slave_1: entered promiscuous mode [ 434.318844][T17466] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.524460][T17258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.542546][T17482] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2916'. [ 434.570264][T17484] delete_channel: no stack [ 434.574814][T17484] delete_channel: no stack [ 434.800963][ T52] Bluetooth: hci7: command tx timeout [ 435.246518][T17258] veth0_vlan: entered promiscuous mode [ 435.269808][T17258] veth1_vlan: entered promiscuous mode [ 435.339965][T17258] veth0_macvtap: entered promiscuous mode [ 435.374619][T17258] veth1_macvtap: entered promiscuous mode [ 435.410880][T17258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.444681][T17258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.471924][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.481442][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.504511][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.524104][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.798725][T17515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.805348][T17515] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 435.840894][T17515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 435.857249][T17515] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 435.877539][T17515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 435.883849][T17515] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 435.900702][T17515] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 435.906758][T17515] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 435.955338][T17515] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 435.972739][T17515] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 436.053490][T17515] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 436.061915][T17515] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 436.134098][T17531] netlink: 'syz.2.2930': attribute type 2 has an invalid length. [ 436.164666][T17531] !©9: entered promiscuous mode [ 436.300671][ T6104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.315345][ T6104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.359139][T17542] netlink: 'syz.0.2932': attribute type 5 has an invalid length. [ 436.374197][T17543] netlink: 'syz.0.2932': attribute type 5 has an invalid length. [ 436.432593][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.461242][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.653899][T17553] team0: Port device bridge9 added [ 436.869504][T17558] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.877433][T17558] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.061498][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.071745][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.080877][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.088887][T17558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.096544][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.109599][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.131779][T17558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.458595][T17581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.475613][ T6106] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.489338][ T6106] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.562458][ T6106] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.573177][ T6106] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.708407][T17586] macsec0: entered allmulticast mode [ 437.714029][T17587] veth1_macvtap: entered allmulticast mode [ 437.740642][T17587] macsec0: left allmulticast mode [ 437.750663][T17587] veth1_macvtap: left allmulticast mode [ 438.296451][T17603] tipc: Started in network mode [ 438.301904][T17603] tipc: Node identity de96dd0218a3, cluster identity 4711 [ 438.310480][T17603] tipc: Enabled bearer , priority 0 [ 438.339992][T17603] syzkaller0: entered promiscuous mode [ 438.345492][T17603] syzkaller0: entered allmulticast mode [ 438.468372][T17603] tipc: Resetting bearer [ 438.537739][T17602] tipc: Resetting bearer [ 438.634933][T17602] tipc: Disabling bearer [ 438.788607][T17570] virt_wifi0 speed is unknown, defaulting to 1000 [ 439.198145][ T5827] Bluetooth: hci3: command tx timeout [ 439.385581][T17570] chnl_net:caif_netlink_parms(): no params data found [ 439.655645][T17598] virt_wifi0 speed is unknown, defaulting to 1000 [ 439.662948][T17632] __nla_validate_parse: 6 callbacks suppressed [ 439.662968][T17632] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2954'. [ 439.688153][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.695314][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.714426][T17570] bridge_slave_0: entered allmulticast mode [ 439.727394][T17570] bridge_slave_0: entered promiscuous mode [ 439.768315][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.775561][T17570] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.781453][T17632] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2954'. [ 439.787366][T17570] bridge_slave_1: entered allmulticast mode [ 439.809355][T17570] bridge_slave_1: entered promiscuous mode [ 439.900284][T17570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.011486][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.020697][T17570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.030271][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.042421][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 440.173526][T17570] team0: Port device team_slave_0 added [ 440.254811][T17570] team0: Port device team_slave_1 added [ 440.484213][T17570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.509809][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.621294][T17570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.658034][T17653] netlink: 'syz.6.2960': attribute type 39 has an invalid length. [ 440.744143][T17570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.754378][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.799716][T17570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.840052][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2961'. [ 440.966052][T17570] hsr_slave_0: entered promiscuous mode [ 440.978575][T17570] hsr_slave_1: entered promiscuous mode [ 440.995589][T17570] debugfs: 'hsr0' already exists in 'hsr' [ 441.002177][T17570] Cannot create hsr debugfs directory [ 441.225736][T17570] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.250332][T17570] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.277382][ T5827] Bluetooth: hci3: command tx timeout [ 441.293818][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2962'. [ 441.307909][T17658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.348766][T17658] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 441.439468][T17570] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.455014][T17570] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.543573][T17661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.552810][T17661] bond0: (slave bond1): Enslaving as an active interface with an up link [ 441.573378][T17570] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.589230][T17670] netlink: 'syz.0.2964': attribute type 10 has an invalid length. [ 441.617291][T17570] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.769129][T17570] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.798760][T17570] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.912495][T17676] syzkaller0: entered promiscuous mode [ 441.933592][T17676] syzkaller0: entered allmulticast mode [ 442.121387][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 442.191235][T17570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.222113][T17660] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.222488][T17570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.260302][T17570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.310626][T17570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.516182][T17720] netlink: 'syz.4.2977': attribute type 13 has an invalid length. [ 442.535130][T17720] netlink: 'syz.4.2977': attribute type 13 has an invalid length. [ 442.543102][ T6107] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.543158][ T6107] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.543191][ T6107] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.589602][ T6107] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.746833][T17725] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2979'. [ 442.761074][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.766542][T17725] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 442.824651][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.856198][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.863406][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.921778][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.928989][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.140884][T17738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2983'. [ 443.173567][T17738] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 443.205980][T17738] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 443.215176][T17738] hsr0: left promiscuous mode [ 443.224331][T17738] bond5: left promiscuous mode [ 443.231364][T17738] bridge3: left promiscuous mode [ 443.236561][T17738] geneve2: left promiscuous mode [ 443.242154][T17738] batadv4: left promiscuous mode [ 443.248731][T17738] geneve3: left promiscuous mode [ 443.363343][ T5827] Bluetooth: hci3: command tx timeout [ 443.405972][T17570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.492510][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2986'. [ 443.520013][T17758] syzkaller1: entered promiscuous mode [ 443.529957][T17758] syzkaller1: entered allmulticast mode [ 443.602434][T17766] netlink: 'syz.5.2989': attribute type 4 has an invalid length. [ 443.610543][T17760] netlink: 'syz.5.2989': attribute type 4 has an invalid length. [ 443.673117][T17570] veth0_vlan: entered promiscuous mode [ 443.685938][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 443.709841][T17570] veth1_vlan: entered promiscuous mode [ 443.729353][T17770] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 443.779457][T17570] veth0_macvtap: entered promiscuous mode [ 443.802182][T17570] veth1_macvtap: entered promiscuous mode [ 443.831424][T17570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.854567][T17570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.902203][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.925749][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.953585][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.971214][ T1157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.108589][ T6106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.225502][ T6106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.308502][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.326736][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.585820][T17791] virt_wifi0: mtu less than device minimum [ 444.630045][T17767] virt_wifi0 speed is unknown, defaulting to 1000 [ 445.173104][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.183108][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.192455][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.233073][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.241013][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.283101][T17809] xt_ecn: cannot match TCP bits for non-tcp packets [ 445.302623][T17761] virt_wifi0 speed is unknown, defaulting to 1000 [ 445.437311][ T5827] Bluetooth: hci3: command tx timeout [ 445.837114][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 445.845235][ C1] lec:lec_tx_timeout: lec0 [ 446.043625][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.123607][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.150722][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.325129][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'. [ 446.464958][ T49] ip6gretap0 (unregistering): left promiscuous mode [ 446.629343][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 446.659093][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3000'. [ 446.670123][ T49] gretap0 (unregistering): left promiscuous mode [ 446.697998][ T49] bond3 (unregistering): (slave gretap1): Releasing active interface [ 446.724600][ T49] bond6 (unregistering): (slave gretap2): Releasing active interface [ 446.805289][ T49] dvmrp0 (unregistering): left allmulticast mode [ 446.890458][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 447.009310][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 447.343667][ T49] bond0 (unregistering): left promiscuous mode [ 447.350276][ T49] bond_slave_0: left promiscuous mode [ 447.356098][ T49] bond_slave_1: left promiscuous mode [ 447.362502][ T49] veth1_to_hsr: left promiscuous mode [ 447.367334][ T5827] Bluetooth: hci2: command tx timeout [ 447.375522][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.390523][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.400848][ T49] bond0 (unregistering): (slave veth1_to_hsr): Releasing backup interface [ 447.410543][ T49] bond0 (unregistering): Released all slaves [ 447.420894][ T49] bond1 (unregistering): Released all slaves [ 447.431840][ T49] bond2 (unregistering): Released all slaves [ 447.444924][ T49] bond3 (unregistering): Released all slaves [ 447.462443][ T49] bond4 (unregistering): (slave batadv2): Releasing active interface [ 447.473898][ T49] bond4 (unregistering): Released all slaves [ 447.491325][ T49] bond5 (unregistering): Released all slaves [ 447.506044][ T49] bond6 (unregistering): Released all slaves [ 447.519905][ T49] bond7 (unregistering): Released all slaves [ 447.534269][ T12] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.553229][T17815] syzkaller1: entered promiscuous mode [ 447.567662][T17815] syzkaller1: entered allmulticast mode [ 447.753306][ T49] : left promiscuous mode [ 447.978004][T17806] virt_wifi0 speed is unknown, defaulting to 1000 [ 448.061249][ T49] tipc: Disabling bearer [ 448.085177][ T49] tipc: Left network mode [ 448.239498][ T49] IPVS: stopping backup sync thread 16248 ... [ 448.959704][T17887] syzkaller0: entered promiscuous mode [ 448.991218][T17887] syzkaller0: entered allmulticast mode [ 449.029250][T17900] netlink: 'syz.6.3012': attribute type 21 has an invalid length. [ 449.231594][T17900] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3012'. [ 449.340866][T17806] chnl_net:caif_netlink_parms(): no params data found [ 449.439752][ T5827] Bluetooth: hci2: command tx timeout [ 449.444931][T17920] netlink: 'syz.5.3016': attribute type 3 has an invalid length. [ 449.453302][T17920] netlink: 'syz.5.3016': attribute type 1 has an invalid length. [ 449.477184][T17920] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3016'. [ 449.522656][T17924] netlink: 'syz.4.3019': attribute type 2 has an invalid length. [ 449.563543][T17923] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3020'. [ 449.745029][T17806] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.753026][T17806] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.761451][T17806] bridge_slave_0: entered allmulticast mode [ 449.771723][T17806] bridge_slave_0: entered promiscuous mode [ 449.797460][T17806] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.820779][T17806] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.843507][T17806] bridge_slave_1: entered allmulticast mode [ 449.861635][T17806] bridge_slave_1: entered promiscuous mode [ 450.082197][T17806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.149173][T17806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.513375][T17806] team0: Port device team_slave_0 added [ 450.584815][T17806] team0: Port device team_slave_1 added [ 450.626200][T17970] netlink: 'syz.4.3028': attribute type 1 has an invalid length. [ 450.950176][T17970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.079669][T17806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.120029][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.143323][T17990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3031'. [ 451.184097][T17990] openvswitch: netlink: Flow key attr not present in new flow. [ 451.187084][T17806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.245088][T17806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.252746][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.280147][T17806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.315928][ T49] macvlan0: left promiscuous mode [ 451.350222][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.368419][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.395104][ T49] veth0_vlan: left promiscuous mode [ 451.417340][ T49] pim6reg99999999 (unregistering): left allmulticast mode [ 451.517733][ T5827] Bluetooth: hci2: command tx timeout [ 452.230371][ T5880] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 452.348667][T17806] hsr_slave_0: entered promiscuous mode [ 452.355787][T17806] hsr_slave_1: entered promiscuous mode [ 452.370012][T17806] debugfs: 'hsr0' already exists in 'hsr' [ 452.382165][T18029] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3039'. [ 452.413504][T17806] Cannot create hsr debugfs directory [ 452.454505][T18028] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 452.499467][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3040'. [ 452.529938][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'. [ 452.578418][T18028] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3040'. [ 452.582863][T18035] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 452.867495][T10471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 452.929266][T18055] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 452.960436][ T1157] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 453.098094][T18064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3048'. [ 453.211484][ T49] IPVS: stop unused estimator thread 0... [ 453.228182][T17806] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.363901][T18082] netlink: 'syz.5.3051': attribute type 4 has an invalid length. [ 453.378371][T18080] netlink: 'syz.6.3050': attribute type 10 has an invalid length. [ 453.428562][T17806] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.448400][T18088] netlink: 'syz.5.3051': attribute type 4 has an invalid length. [ 453.520072][T18080] x_tables: duplicate underflow at hook 1 [ 453.526933][T18080] siw: device registration error -23 [ 453.599192][ T5827] Bluetooth: hci2: command tx timeout [ 453.659258][T17806] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.696644][T18102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3055'. [ 453.772486][T17806] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.030297][ T6107] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 454.046180][ T6107] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 454.086311][T17806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.160858][T17806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.186809][T17806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.226232][T17806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.537323][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 454.591192][T18141] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 454.601198][T17806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.613462][T18141] netlink: 'syz.4.3061': attribute type 2 has an invalid length. [ 454.716491][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3063'. [ 454.734837][T17806] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.763564][T18147] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3063'. [ 454.792723][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.799896][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.895166][T18150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3063'. [ 454.909524][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.916720][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.944485][T18150] ipt_ECN: cannot use operation on non-tcp rule [ 455.159612][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 455.203060][T18160] netlink: 'syz.4.3065': attribute type 22 has an invalid length. [ 455.217462][T18163] netlink: 'syz.5.3066': attribute type 4 has an invalid length. [ 455.266305][T18163] netlink: 'syz.5.3066': attribute type 4 has an invalid length. [ 455.325873][T18166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.382261][T18163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.405856][T18166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.528752][T18168] ip6_vti0: entered promiscuous mode [ 455.564263][T18170] bond0: entered promiscuous mode [ 455.573768][T18170] bond_slave_0: entered promiscuous mode [ 455.582268][T18170] bond_slave_1: entered promiscuous mode [ 455.590887][T18170] batadv0: entered promiscuous mode [ 455.606032][T18170] debugfs: 'hsr1' already exists in 'hsr' [ 455.624892][T18170] Cannot create hsr debugfs directory [ 455.642731][T18170] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 455.663979][T18170] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 455.685881][T18170] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 455.707432][T18170] bond0: left promiscuous mode [ 455.725042][T18170] bond_slave_0: left promiscuous mode [ 455.738375][T18170] bond_slave_1: left promiscuous mode [ 455.747623][T18170] batadv0: left promiscuous mode [ 455.784127][T17806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.949808][T18195] netlink: 'syz.4.3071': attribute type 5 has an invalid length. [ 456.010856][T17806] veth0_vlan: entered promiscuous mode [ 456.052267][T17806] veth1_vlan: entered promiscuous mode [ 456.145279][T17806] veth0_macvtap: entered promiscuous mode [ 456.169454][T17806] veth1_macvtap: entered promiscuous mode [ 456.174946][T18203] netlink: 'syz.4.3072': attribute type 2 has an invalid length. [ 456.211304][T18203] : entered promiscuous mode [ 456.236235][T17806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.306284][T17806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.343327][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.372343][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.425965][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.448748][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.547553][T18218] netlink: 'syz.5.3075': attribute type 1 has an invalid length. [ 456.897475][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.905360][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.021511][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.045138][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.296289][T18237] netlink: 'syz.0.2994': attribute type 9 has an invalid length. [ 457.520065][T18250] xt_hashlimit: size too large, truncated to 1048576 [ 457.917957][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 458.002934][T18276] __nla_validate_parse: 6 callbacks suppressed [ 458.002953][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3088'. [ 458.234363][T18291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3090'. [ 458.547910][T18296] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3093'. [ 459.256001][T18334] tipc: Enabling of bearer rejected, failed to enable media [ 459.649268][T18354] sctp: [Deprecated]: syz.2.3104 (pid 18354) Use of int in maxseg socket option. [ 459.649268][T18354] Use struct sctp_assoc_value instead [ 460.002305][T18377] netlink: 'syz.4.3109': attribute type 10 has an invalid length. [ 460.028512][T18377] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.051132][T18377] bond0: (slave team0): Enslaving as an active interface with an up link [ 460.099276][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'. [ 460.130019][T18377] netlink: 'syz.4.3109': attribute type 1 has an invalid length. [ 460.165593][T18385] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 460.480459][T18410] tipc: Started in network mode [ 460.494656][T18410] tipc: Node identity 4eab880f0249, cluster identity 4711 [ 460.510819][T18410] tipc: Enabled bearer , priority 0 [ 460.539825][T18410] syzkaller0: entered promiscuous mode [ 460.547342][T18410] syzkaller0: entered allmulticast mode [ 460.648300][T18410] tipc: Resetting bearer [ 460.697432][T18419] x_tables: duplicate underflow at hook 1 [ 461.162998][T18439] netlink: 'syz.6.3119': attribute type 12 has an invalid length. [ 461.171995][T18439] netlink: 'syz.6.3119': attribute type 29 has an invalid length. [ 461.185229][T18439] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3119'. [ 461.206256][T18439] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3119'. [ 461.229740][T18400] tipc: Resetting bearer [ 461.253275][T18439] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3119'. [ 461.298324][T18400] tipc: Disabling bearer [ 461.498487][T18439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.691752][T18456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3123'. [ 461.733290][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3122'. [ 461.753423][T18439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.054837][T18439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.150400][T18476] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3125'. [ 462.311494][T18439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.736119][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.877886][ T6107] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.903748][T18514] x_tables: duplicate underflow at hook 1 [ 462.928720][ T1157] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.043292][ T1157] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.621984][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3141'. [ 463.641926][T18556] batadv1: entered promiscuous mode [ 463.651872][T18556] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 463.826852][T18569] x_tables: duplicate underflow at hook 2 [ 464.066535][T18575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.261890][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.269375][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.408039][T18607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3151'. [ 464.461863][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.499018][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.676460][T18604] syzkaller0: entered promiscuous mode [ 464.692804][T18604] syzkaller0: entered allmulticast mode [ 464.704901][ T6106] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.714721][ T6106] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.741325][T18575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.881963][T18620] syzkaller0: entered promiscuous mode [ 464.889705][T18620] syzkaller0: entered allmulticast mode [ 464.897653][T18619] tipc: Started in network mode [ 464.907606][T18619] tipc: Node identity , cluster identity 4711 [ 464.917230][T18619] tipc: Failed to obtain node identity [ 464.929519][T18619] tipc: Enabling of bearer rejected, failed to enable media [ 465.032132][T18631] tipc: Enabled bearer , priority 0 [ 465.050260][T18625] syzkaller0: entered promiscuous mode [ 465.072920][T18625] syzkaller0: entered allmulticast mode [ 465.124577][T18625] tipc: Resetting bearer [ 465.149257][T18623] tipc: Resetting bearer [ 465.184447][T18623] tipc: Disabling bearer [ 465.546417][T18647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3161'. [ 465.607532][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 465.887506][ T6107] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.903490][ T6107] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.927944][T18663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'. [ 465.947345][T18663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'. [ 465.956404][ T6107] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.965535][ T6107] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.975654][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'. [ 465.997214][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'. [ 466.007435][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'. [ 466.017158][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3166'. [ 466.297763][T18676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3168'. [ 466.561344][T18686] Bluetooth: MGMT ver 1.23 [ 466.779376][T18698] netlink: 'syz.6.3175': attribute type 1 has an invalid length. [ 466.788361][T18698] netlink: 'syz.6.3175': attribute type 2 has an invalid length. [ 466.818931][T18698] netlink: 'syz.6.3175': attribute type 1 has an invalid length. [ 466.826786][T18698] netlink: 'syz.6.3175': attribute type 2 has an invalid length. [ 467.244419][T18712] sctp: [Deprecated]: syz.6.3179 (pid 18712) Use of int in max_burst socket option. [ 467.244419][T18712] Use struct sctp_assoc_value instead [ 467.572474][T18729] tc_dump_action: action bad kind [ 467.601175][T18732] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 467.706322][T18732] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 468.241302][T18759] syzkaller1: entered promiscuous mode [ 468.257174][T18759] syzkaller1: entered allmulticast mode [ 468.845071][T18789] netlink: 'syz.5.3200': attribute type 1 has an invalid length. [ 469.166553][T18801] __nla_validate_parse: 8 callbacks suppressed [ 469.166571][T18801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3202'. [ 469.175901][T18805] netlink: 'syz.2.3204': attribute type 10 has an invalid length. [ 469.197693][T18805] netlink: 115 bytes leftover after parsing attributes in process `syz.2.3204'. [ 469.216162][T18805] veth0_vlan: left promiscuous mode [ 469.249466][T18805] veth0_vlan: entered promiscuous mode [ 469.256558][T18805] team0: Device veth0_vlan failed to register rx_handler [ 469.284824][T18808] netlink: 'syz.4.3205': attribute type 2 has an invalid length. [ 469.302279][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 469.546817][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 469.551343][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 469.604829][T18820] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 469.751937][T18831] xt_TPROXY: Can be used only with -p tcp or -p udp [ 470.213225][T18865] openvswitch: netlink: Actions may not be safe on all matching packets [ 470.372679][T18872] tipc: Enabling of bearer rejected, failed to enable media [ 470.634416][T18884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.643481][T18889] xt_hashlimit: max too large, truncated to 1048576 [ 470.643481][T18888] xt_hashlimit: max too large, truncated to 1048576 [ 470.643501][T18889] xt_hashlimit: overflow, try lower: 13/0 [ 470.650359][T18888] xt_hashlimit: overflow, try lower: 13/0 [ 470.659185][T18884] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.698391][T18884] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 470.805942][ T5873] IPVS: starting estimator thread 0... [ 470.840657][T18892] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 470.913652][T18892] bond2 (unregistering): Released all slaves [ 470.967678][T18897] IPVS: using max 39 ests per chain, 93600 per kthread [ 471.078023][T18905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3228'. [ 471.103188][T18905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3228'. [ 471.408323][T18928] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3235'. [ 471.428395][T18928] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3235'. [ 471.568591][T18940] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 471.895866][T18955] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.912461][T18955] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.191951][T18955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.226630][T18955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.607166][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.638057][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.654278][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.740292][T18985] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.838873][T19008] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3252'. [ 473.053864][ T24] IPVS: starting estimator thread 0... [ 473.201623][T19038] IPVS: using max 32 ests per chain, 76800 per kthread [ 473.636805][T19059] tipc: Started in network mode [ 473.645423][T19059] tipc: Node identity 9a501f4b0292, cluster identity 4711 [ 473.671431][T19059] tipc: Enabled bearer , priority 0 [ 473.722097][T19059] syzkaller0: entered promiscuous mode [ 473.727765][T19059] syzkaller0: entered allmulticast mode [ 473.734746][T19059] tipc: Resetting bearer [ 473.749822][T19058] tipc: Resetting bearer [ 475.411420][T19058] tipc: Disabling bearer [ 475.443821][T19072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.569914][ T24] tipc: Node number set to 2562858827 [ 475.615961][T19088] ip6t_rpfilter: unknown options [ 475.771894][T19102] 8021q: VLANs not supported on ip_vti0 [ 475.929000][T19111] __nla_validate_parse: 4 callbacks suppressed [ 475.929017][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3280'. [ 476.039242][T19111] bond3: entered promiscuous mode [ 476.054470][T19111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.065503][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3282'. [ 476.099068][T19114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.111510][T19114] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 476.123926][T19114] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 476.136267][T19118] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3282'. [ 476.302855][T19122] C: renamed from team_slave_0 [ 476.310728][T19124] netlink: 'syz.0.3285': attribute type 11 has an invalid length. [ 476.328928][T19124] netlink: 'syz.0.3285': attribute type 11 has an invalid length. [ 476.336887][T19124] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3285'. [ 476.348501][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3285'. [ 476.392308][T19122] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3284'. [ 476.454133][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3286'. [ 476.485048][T19127] nbd: couldn't find a device at index 0 [ 476.577329][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3288'. [ 476.591036][T19133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.741072][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 477.146610][T19165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3294'. [ 477.224523][T19176] geneve4: entered promiscuous mode [ 477.243344][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.334236][T19176] bond4: option lp_interval: invalid value (0) [ 477.341838][T19176] bond4: option lp_interval: allowed values 1 - 2147483647 [ 477.359672][T19176] bond4 (unregistering): Released all slaves [ 477.389569][ T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.403933][T19193] netlink: 'syz.4.3301': attribute type 12 has an invalid length. [ 477.412050][ T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.412146][T19193] netlink: 'syz.4.3301': attribute type 11 has an invalid length. [ 477.432435][ T6107] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.590685][T19197] tipc: Started in network mode [ 477.595704][T19197] tipc: Node identity 1af7e5ea8eb8, cluster identity 4711 [ 477.604653][T19197] tipc: Enabled bearer , priority 0 [ 477.620839][T19197] syzkaller0: entered promiscuous mode [ 477.626346][T19197] syzkaller0: entered allmulticast mode [ 477.663430][T19197] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 477.713113][T19197] tipc: Resetting bearer [ 477.728463][T19196] tipc: Resetting bearer [ 477.766826][T19196] tipc: Disabling bearer [ 477.802341][ T1157] bond0: (slave bond1): link status definitely down, disabling slave [ 477.907242][T19217] netlink: 'syz.6.3308': attribute type 1 has an invalid length. [ 477.997873][T19222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.365921][T19227] netlink: 'syz.0.3313': attribute type 3 has an invalid length. [ 478.558254][T19236] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 478.689211][T19244] team0: entered promiscuous mode [ 478.694296][T19244] team_slave_0: entered promiscuous mode [ 478.707576][T19244] team_slave_1: entered promiscuous mode [ 478.714688][T19244] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.733858][T19244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 479.144053][T19269] tipc: Enabled bearer , priority 0 [ 479.176773][T19269] syzkaller0: entered promiscuous mode [ 479.184672][T19269] syzkaller0: entered allmulticast mode [ 479.208132][T19269] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 479.292537][T19278] openvswitch: netlink: Key type 195 is out of range max 32 [ 479.318862][T19275] tipc: Resetting bearer [ 479.336339][T19263] tipc: Resetting bearer [ 479.421586][ T5827] block nbd2: Receive control failed (result -32) [ 479.448840][T19263] tipc: Disabling bearer [ 479.717836][T19295] team0: Device gtp0 is of different type [ 479.790126][ T49] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 480.123455][T19311] pim6reg: entered allmulticast mode [ 480.136702][T19306] pim6reg: left allmulticast mode [ 480.239596][T18986] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.248232][T18986] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.256799][T18986] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.280742][T18986] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.362848][T19325] syzkaller1: entered promiscuous mode [ 480.368792][T19325] syzkaller1: entered allmulticast mode [ 480.381472][T19325] bond0: entered promiscuous mode [ 480.388352][T19325] bond_slave_0: entered promiscuous mode [ 480.394813][T19325] bond_slave_1: entered promiscuous mode [ 480.403822][T19325] macvlan0: entered promiscuous mode [ 480.412008][T19325] debugfs: 'hsr1' already exists in 'hsr' [ 480.418270][T19325] Cannot create hsr debugfs directory [ 480.423666][T19325] hsr1: entered promiscuous mode [ 480.474752][T19328] netlink: 'syz.0.3341': attribute type 1 has an invalid length. [ 480.579519][T19332] bond4: (slave bridge1): making interface the new active one [ 480.598371][T19332] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 480.759464][T19348] netlink: 'syz.4.3347': attribute type 10 has an invalid length. [ 480.780554][T19348] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 480.910338][T19358] netlink: 'syz.2.3350': attribute type 1 has an invalid length. [ 481.015002][T19363] xt_hashlimit: size too large, truncated to 1048576 [ 481.072252][T19367] __nla_validate_parse: 19 callbacks suppressed [ 481.072270][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3353'. [ 481.108853][T19365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3354'. [ 481.162893][T19375] ¾x9ÿ: renamed from bridge_slave_0 [ 481.317856][T19385] netlink: 'syz.5.3358': attribute type 2 has an invalid length. [ 481.474253][T19395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.490953][T19395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.994411][ T9797] lec:lec_start_xmit: lec0:No lecd attached [ 496.007267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 496.015297][ C1] lec:lec_tx_timeout: lec0 [ 501.441059][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.447605][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.455078][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 506.797042][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.805128][ C1] lec:lec_tx_timeout: lec0 [ 531.296355][T19424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3368'. [ 531.305717][T19421] netlink: 'syz.0.3365': attribute type 1 has an invalid length. [ 531.351805][T19421] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.360135][T19424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3368'. [ 531.377769][T19427] syzkaller0: entered promiscuous mode [ 531.397668][T19427] syzkaller0: entered allmulticast mode [ 531.450280][T19433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3365'. [ 531.510024][T19421] 8021q: adding VLAN 0 to HW filter on device bond6 [ 531.530373][T19421] bond5: (slave bond6): Enslaving as an active interface with a down link [ 531.565871][T19433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.630172][T19436] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3369'. [ 531.731968][T19452] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3374'. [ 531.816797][T19454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.847646][T19454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.872787][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3378'. [ 531.893953][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3378'. [ 531.903386][T19454] vlan0: entered promiscuous mode [ 532.004885][T19467] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 532.027823][T19470] netlink: 'syz.6.3381': attribute type 6 has an invalid length. [ 532.046018][T19470] netlink: 'syz.6.3381': attribute type 6 has an invalid length. [ 532.058435][T19470] netlink: 'syz.6.3381': attribute type 58 has an invalid length. [ 532.066420][T19470] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3381'. [ 532.288019][T19485] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 532.340083][T19491] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 532.376016][T19492] netlink: 'syz.2.3387': attribute type 1 has an invalid length. [ 532.437817][T19492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3387'. [ 532.502577][T19492] bond2: (slave bridge1): making interface the new active one [ 532.515038][T19492] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 532.538551][T19498] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 532.561923][T19492] macvlan2: entered promiscuous mode [ 532.587442][T19492] macvlan2: entered allmulticast mode [ 532.593760][T19492] bond2: entered promiscuous mode [ 532.608506][T19492] bridge1: entered promiscuous mode [ 532.615281][T19492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 532.625032][T19502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3390'. [ 532.636629][T19492] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 532.658208][T19492] bond2: left promiscuous mode [ 532.663017][T19492] bridge1: left promiscuous mode [ 532.682272][T19508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 533.067794][T19532] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 533.118034][T19532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.730714][T19551] bond2: option mode: invalid value (254) [ 533.740357][T19551] bond2 (unregistering): Released all slaves [ 533.923889][T19556] team0: Device vlan2 is already an upper device of the team interface [ 534.325223][T19564] bridge2: port 1(veth3) entered blocking state [ 534.331871][T19564] bridge2: port 1(veth3) entered disabled state [ 534.350360][T19564] veth3: entered allmulticast mode [ 534.386666][T19564] veth3: entered promiscuous mode [ 534.415256][T19567] bridge2: port 2(veth0_to_bond) entered blocking state [ 534.427200][T19567] bridge2: port 2(veth0_to_bond) entered disabled state [ 534.434603][T19567] veth0_to_bond: entered allmulticast mode [ 534.463072][T19567] veth0_to_bond: entered promiscuous mode [ 534.535671][T19575] bridge2: port 3(veth5) entered blocking state [ 534.544360][T19575] bridge2: port 3(veth5) entered disabled state [ 534.566409][T19575] veth5: entered allmulticast mode [ 534.574723][T19575] veth5: entered promiscuous mode [ 534.928593][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.944113][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.998625][T19612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.008881][T19613] netlink: 'syz.4.3419': attribute type 1 has an invalid length. [ 535.059796][T19613] bond2: entered promiscuous mode [ 535.080335][T19613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.174344][T19609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.239151][T19609] bond2: (slave bond3): making interface the new active one [ 535.246491][T19609] bond3: entered promiscuous mode [ 535.252749][T19609] bond2: (slave bond3): Enslaving as an active interface with an up link [ 535.262750][T19614] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 535.462687][T19635] vlan4: entered promiscuous mode [ 535.471200][T19635] bridge0: entered promiscuous mode [ 535.502290][T19637] netlink: 'syz.2.3430': attribute type 1 has an invalid length. [ 535.556549][T19637] bond3: (slave bridge3): making interface the new active one [ 535.567639][T19637] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 535.601106][T19643] netlink: 'syz.4.3429': attribute type 39 has an invalid length. [ 536.453712][T19670] openvswitch: netlink: Flow key attr not present in new flow. [ 536.510652][T19673] netlink: 'syz.6.3437': attribute type 4 has an invalid length. [ 536.548659][T19673] __nla_validate_parse: 35 callbacks suppressed [ 536.548678][T19673] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3437'. [ 536.631597][T19673] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3437'. [ 536.672432][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 536.707457][T19673] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 536.788659][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3441'. [ 536.798681][T19680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3440'. [ 536.812956][T19680] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3440'. [ 536.931049][T19695] ieee802154 phy0 wpan0: encryption failed: -90 [ 537.320863][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3448'. [ 537.518933][T19722] netlink: 'syz.2.3452': attribute type 41 has an invalid length. [ 537.605258][T19727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.621404][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'. [ 538.362662][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3456'. [ 538.451774][T19742] hsr_slave_0: left promiscuous mode [ 538.515358][T19742] hsr_slave_1: left promiscuous mode [ 538.556669][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3458'. [ 538.616547][T19756] geneve6: entered promiscuous mode [ 538.622088][T19756] geneve6: entered allmulticast mode [ 538.800203][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.809427][ T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.821411][ T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.077760][ T49] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.129118][T19770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.226781][T19775] xt_bpf: check failed: parse error [ 539.356742][T19779] netlink: 'syz.2.3467': attribute type 10 has an invalid length. [ 539.379641][T19779] dummy0: entered promiscuous mode [ 539.389575][T19779] bridge0: port 3(dummy0) entered blocking state [ 539.404353][T19779] bridge0: port 3(dummy0) entered disabled state [ 539.411584][T19779] dummy0: entered allmulticast mode [ 539.443511][T19779] bridge0: port 3(dummy0) entered blocking state [ 539.450055][T19779] bridge0: port 3(dummy0) entered forwarding state [ 539.647951][T19791] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 539.807534][T19794] bridge0: port 3(dummy0) entered disabled state [ 539.830723][T19794] dummy0 (unregistering): left allmulticast mode [ 539.847540][T19794] bridge0: port 3(dummy0) entered disabled state [ 540.188913][T19814] netlink: 'syz.5.3478': attribute type 4 has an invalid length. [ 540.197791][T19814] netlink: 'syz.5.3478': attribute type 8 has an invalid length. [ 540.254266][T19817] batadv_slave_0: entered promiscuous mode [ 540.291041][T19817] batadv2: entered promiscuous mode [ 540.388751][T19816] batadv_slave_0: left promiscuous mode [ 541.904208][ T30] audit: type=1804 audit(1770522227.321:11): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3492" name="/newroot/337/cgroup.controllers" dev="tmpfs" ino=1739 res=1 errno=0 [ 541.927458][ T30] audit: type=1800 audit(1770522227.321:12): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3492" name="cgroup.controllers" dev="tmpfs" ino=1739 res=0 errno=0 [ 543.264626][T19819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.470878][T19881] netlink: 'syz.4.3498': attribute type 11 has an invalid length. [ 543.496338][T19880] syzkaller0: entered promiscuous mode [ 543.512701][T19880] syzkaller0: entered allmulticast mode [ 543.520504][T19890] xt_policy: neither incoming nor outgoing policy selected [ 543.714125][T19899] __nla_validate_parse: 12 callbacks suppressed [ 543.714145][T19899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 543.965200][T19911] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3503'. [ 543.990899][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 544.046155][T19918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3506'. [ 544.568486][T19931] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3511'. [ 544.808493][T19938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3514'. [ 544.941310][T19944] ieee802154 phy0 wpan0: encryption failed: -22 [ 545.688090][T19959] xt_hashlimit: max too large, truncated to 1048576 [ 545.735186][T19960] netlink: 'syz.6.3520': attribute type 4 has an invalid length. [ 545.742732][T19959] netlink: 'syz.6.3520': attribute type 4 has an invalid length. [ 547.292108][T19993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3527'. [ 547.327061][T19993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3527'. [ 547.368254][T19993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3527'. [ 547.528065][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 547.616426][T20010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3532'. [ 547.664278][T20010] netlink: 'syz.0.3532': attribute type 3 has an invalid length. [ 547.700045][T20010] netlink: 'syz.0.3532': attribute type 2 has an invalid length. [ 547.735581][T20010] netlink: 'syz.0.3532': attribute type 2 has an invalid length. [ 548.511906][T20023] netlink: 'syz.5.3537': attribute type 1 has an invalid length. [ 548.735387][T20032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.755435][T20032] macvtap0: entered promiscuous mode [ 548.761458][T20032] dummy0: entered promiscuous mode [ 548.769257][T20032] team0: Device macvtap0 failed to register rx_handler [ 548.781951][T20032] dummy0: left promiscuous mode [ 549.190035][T20046] nbd: must specify at least one socket [ 549.456705][T20056] __nla_validate_parse: 5 callbacks suppressed [ 549.456725][T20056] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3546'. [ 549.473550][T20056] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3546'. [ 549.485058][T20056] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3546'. [ 550.103744][T20091] syzkaller0: entered promiscuous mode [ 550.113761][T20091] syzkaller0: entered allmulticast mode [ 550.126410][T20093] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3558'. [ 550.278367][T20099] syzkaller0: entered promiscuous mode [ 550.284032][T20099] syzkaller0: entered allmulticast mode [ 550.328919][T20101] sctp: [Deprecated]: syz.6.3560 (pid 20101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.328919][T20101] Use struct sctp_sack_info instead [ 550.581538][T20112] netlink: 'syz.5.3564': attribute type 2 has an invalid length. [ 550.598078][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'. [ 550.657396][T20123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3568'. [ 550.684665][T20119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.732768][T20124] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3568'. [ 551.592886][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3588'. [ 552.124309][T20199] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3593'. [ 552.191273][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'. [ 552.389786][T20212] macvlan2: entered allmulticast mode [ 552.592150][T20224] netlink: 'syz.5.3601': attribute type 1 has an invalid length. [ 553.330754][T20286] openvswitch: netlink: IP tunnel dst address not specified [ 553.356183][T20286] openvswitch: netlink: IP tunnel dst address not specified [ 553.456185][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.465137][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.474064][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.483888][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.562893][T20303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.577979][T20304] netlink: 'syz.2.3619': attribute type 1 has an invalid length. [ 555.197798][ T31] INFO: task syz.3.2655:16358 blocked for more than 143 seconds. [ 555.206319][ T9797] lec:lec_start_xmit: lec0:No lecd attached [ 555.207065][ T31] Not tainted syzkaller #0 [ 555.217562][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.226405][ T31] task:syz.3.2655 state:D stack:26648 pid:16358 tgid:16357 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 555.238904][ T31] Call Trace: [ 555.242267][ T31] [ 555.245188][ T31] __schedule+0x14ea/0x5050 [ 555.249954][ T31] ? __pfx___schedule+0x10/0x10 [ 555.254828][ T31] ? schedule+0x90/0x360 [ 555.259226][ T31] schedule+0x164/0x360 [ 555.263522][ T31] schedule_preempt_disabled+0x13/0x30 [ 555.269111][ T31] __mutex_lock+0x7fe/0x1300 [ 555.273882][ T31] ? __mutex_lock+0x5ac/0x1300 [ 555.278871][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 555.284638][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 555.289995][ T31] ? net_generic+0x1e/0x240 [ 555.294524][ T31] ? net_generic+0x1e/0x240 [ 555.299211][ T31] ? net_generic+0x1e/0x240 [ 555.303740][ T31] ? net_generic+0x1e/0x240 [ 555.308395][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 555.313968][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 555.319805][ T31] ? __asan_memcpy+0x40/0x70 [ 555.324412][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 555.330619][ T31] ? bpf_lsm_capable+0x9/0x20 [ 555.335305][ T31] ? security_capable+0x7e/0x2c0 [ 555.340379][ T31] genl_rcv_msg+0x61c/0x7a0 [ 555.344906][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.350032][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 555.356120][ T31] netlink_rcv_skb+0x232/0x4b0 [ 555.361172][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.366261][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.371681][ T31] ? genl_rcv+0x19/0x40 [ 555.375865][ T31] ? down_read+0x272/0x2e0 [ 555.380445][ T31] ? genl_rcv+0xd/0x40 [ 555.384533][ T31] genl_rcv+0x28/0x40 [ 555.388742][ T31] netlink_unicast+0x80f/0x9b0 [ 555.393683][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 555.399104][ T31] ? netlink_sendmsg+0x650/0xb40 [ 555.404051][ T31] ? skb_put+0x11b/0x210 [ 555.408432][ T31] netlink_sendmsg+0x813/0xb40 [ 555.413226][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.418826][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 555.423809][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 555.429474][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.434780][ T31] ____sys_sendmsg+0xa68/0xad0 [ 555.439867][ T31] ? __might_fault+0xaf/0x130 [ 555.444575][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.450018][ T31] ? import_iovec+0x73/0xa0 [ 555.454584][ T31] ___sys_sendmsg+0x2a5/0x360 [ 555.459403][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 555.464361][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.469755][ T31] ? futex_wake+0x4ac/0x580 [ 555.474286][ T31] ? __fget_files+0x2a/0x420 [ 555.478983][ T31] ? __fget_files+0x3a0/0x420 [ 555.483676][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.488737][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.494453][ T31] ? rcu_is_watching+0x15/0xb0 [ 555.499360][ T31] do_syscall_64+0xe2/0xf80 [ 555.503879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.513874][ T31] ? trace_irq_disable+0x37/0x100 [ 555.519030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 555.523718][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.529729][ T31] RIP: 0033:0x7f8ea879aeb9 [ 555.534166][ T31] RSP: 002b:00007f8ea971e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.542873][ T31] RAX: ffffffffffffffda RBX: 00007f8ea8a15fa0 RCX: 00007f8ea879aeb9 [ 555.550925][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 555.558950][ T31] RBP: 00007f8ea8808c1f R08: 0000000000000000 R09: 0000000000000000 [ 555.566925][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.575078][ T31] R13: 00007f8ea8a16038 R14: 00007f8ea8a15fa0 R15: 00007ffc661e11c8 [ 555.583367][ T31] [ 555.586487][ T31] [ 555.586487][ T31] Showing all locks held in the system: [ 555.594640][ T31] 1 lock held by khungtaskd/31: [ 555.599903][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 555.610101][ T31] 2 locks held by getty/5576: [ 555.614783][ T31] #0: ffff8880353510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 555.624679][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 555.634946][ T31] 2 locks held by syz.1.1500/11688: [ 555.640214][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.645313][T20230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.648728][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 555.648803][ T31] 2 locks held by syz.3.2655/16358: [ 555.648815][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.648865][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 555.648922][ T31] 1 lock held by syz.5.3604/20229: [ 555.677405][T20254] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 555.686470][ T31] 7 locks held by syz.0.3607/20254: [ 555.693002][T20254] __nla_validate_parse: 9 callbacks suppressed [ 555.693017][T20254] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3607'. [ 555.700996][ T31] 2 locks held by syz.6.3617/20292: [ 555.785245][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 555.795353][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 555.804458][ T31] 2 locks held by dhcpcd/20309: [ 555.809426][ T31] #0: ffff88805928c708 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 555.819686][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 555.830653][ T31] [ 555.876173][ T31] ============================================= [ 555.876173][ T31] [ 555.886721][ T31] NMI backtrace for cpu 1 [ 555.886742][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 555.886753][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 555.886760][ T31] Call Trace: [ 555.886764][ T31] [ 555.886769][ T31] dump_stack_lvl+0xe8/0x150 [ 555.886787][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 555.886799][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 555.886815][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 555.886827][ T31] sys_info+0x135/0x170 [ 555.886835][ T31] watchdog+0xf90/0xfe0 [ 555.886848][ T31] ? watchdog+0x209/0xfe0 [ 555.886862][ T31] kthread+0x726/0x8b0 [ 555.886875][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.886884][ T31] ? __pfx_kthread+0x10/0x10 [ 555.886896][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.886909][ T31] ? __pfx_kthread+0x10/0x10 [ 555.886919][ T31] ret_from_fork+0x51b/0xa40 [ 555.886930][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.886954][ T31] ? __switch_to+0xc82/0x1410 [ 555.886978][ T31] ? __pfx_kthread+0x10/0x10 [ 555.886995][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.887027][ T31] [ 556.001124][ T31] Sending NMI from CPU 1 to CPUs 0: [ 556.006480][ C0] NMI backtrace for cpu 0 [ 556.006496][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 556.006512][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 556.006521][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 556.006544][ C0] Code: 28 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 556.006557][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 556.006571][ C0] RAX: 00000000002566e9 RBX: ffffffff8199370d RCX: 0000000080000001 [ 556.006582][ C0] RDX: 0000000000000001 RSI: ffffffff8dcd0c10 RDI: ffffffff8c073a00 [ 556.006592][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 556.006603][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef4970 [ 556.006613][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 556.006623][ C0] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 556.006635][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.006645][ C0] CR2: 00007ff88ade3ad8 CR3: 0000000068fc0000 CR4: 00000000003526f0 [ 556.006658][ C0] Call Trace: [ 556.006664][ C0] [ 556.006670][ C0] default_idle+0x9/0x20 [ 556.006683][ C0] default_idle_call+0x72/0xb0 [ 556.006697][ C0] do_idle+0x1bd/0x500 [ 556.006710][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 556.006728][ C0] ? __pfx_do_idle+0x10/0x10 [ 556.006745][ C0] cpu_startup_entry+0x43/0x60 [ 556.006759][ C0] rest_init+0x2de/0x300 [ 556.006773][ C0] start_kernel+0x380/0x3d0 [ 556.006793][ C0] x86_64_start_reservations+0x24/0x30 [ 556.006810][ C0] x86_64_start_kernel+0x143/0x1c0 [ 556.006825][ C0] common_startup_64+0x13e/0x147 [ 556.006850][ C0] [ 556.011180][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 556.011196][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 556.011216][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 556.011228][ T31] Call Trace: [ 556.011236][ T31] [ 556.011244][ T31] vpanic+0x1e0/0x670 [ 556.011271][ T31] panic+0xc5/0xd0 [ 556.226557][ T31] ? __pfx_panic+0x10/0x10 [ 556.231000][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 556.236393][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 556.242552][ T31] watchdog+0xfda/0xfe0 [ 556.246709][ T31] ? watchdog+0x209/0xfe0 [ 556.251040][ T31] kthread+0x726/0x8b0 [ 556.255105][ T31] ? __pfx_watchdog+0x10/0x10 [ 556.259770][ T31] ? __pfx_kthread+0x10/0x10 [ 556.264357][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.269563][ T31] ? __pfx_kthread+0x10/0x10 [ 556.274163][ T31] ret_from_fork+0x51b/0xa40 [ 556.278752][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 556.283863][ T31] ? __switch_to+0xc82/0x1410 [ 556.288557][ T31] ? __pfx_kthread+0x10/0x10 [ 556.293137][ T31] ret_from_fork_asm+0x1a/0x30 [ 556.297926][ T31] [ 556.301399][ T31] Kernel Offset: disabled [ 556.305713][ T31] Rebooting in 86400 seconds..