last executing test programs: 12.660991106s ago: executing program 3 (id=6439): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000001280)=0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0x18}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) 10.906172837s ago: executing program 3 (id=6458): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000003b00010324bd7002fadbdf2507000000d54556f1c8e8a56dfd2bd2b277064e710860968e60db9f65e3715b540a38eff0accaf8dcbbb10bf6c5af740d69751e68c0be34998393c5e89372f9"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r3, &(0x7f00000002c0)="04", 0x1) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)={0xdb7b, 0x77, 0x2, 0xfff, 0x3, 0x0, [{0x6, 0xffffffffffffffff, 0x80, '\x00', 0x101}, {0x992c, 0xffffffffffffffff, 0x9, '\x00', 0x3684}, {0xfffffffffffffff8, 0x3, 0x5, '\x00', 0x2}]}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)={0xdb7b, 0x77, 0x2, 0xfff, 0x3, 0x0, [{0x6, 0xffffffffffffffff, 0x80, '\x00', 0x101}, {0x992c, 0xffffffffffffffff, 0x9, '\x00', 0x3684}, {0xfffffffffffffff8, 0x3, 0x5, '\x00', 0x2}]}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @initdev={0xac, 0x1e, 0x0, 0x0}}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840), 0x0, 0x21, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) 10.472499877s ago: executing program 4 (id=6465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xfffb, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 10.251855596s ago: executing program 3 (id=6468): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000001280)=0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0x18}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) 9.533904344s ago: executing program 4 (id=6470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x8, 0x10000002000006, 0x4, 0x8}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000000000fdffffffffffffff09000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000006000000c06b6e000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40880) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010829bd7000000000000700000014000800948c1f76657468305f746f5f68737200"], 0x28}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 9.414184613s ago: executing program 3 (id=6471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="0702000000000000000001000000840008803c00078008000600ce000000080005008c49bab508000500fda9a47d080006004100000008000600f0000000020006000300000008000600b40000001c00078008000500ef12443c07fb05002e164530080006005d00000014000780080005006db6d1210800050025590b6d1400078008000600870000000800050025bb6a230400048008000100030000000800020001000000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000280), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x40884}, 0x20040840) 3.023992005s ago: executing program 4 (id=6478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r8, &(0x7f0000000540), 0x0}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) 2.994494998s ago: executing program 3 (id=6479): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0x20, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000000)={0x2, 0xffffffffffffff7f, 0x1}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x20) socket$inet_sctp(0x2, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) r6 = socket$netlink(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0x6, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x770, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) 2.936496837s ago: executing program 0 (id=6480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x28a, 0x4) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xffff8002, @remote}, 0x1c, 0x0}}], 0x1, 0x4004804) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), 0x0}, 0x20) r8 = epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r8, &(0x7f00000000c0)=[{}, {}], 0x2, 0x401, &(0x7f0000000180)={[0x7f]}, 0x8) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xfffffffffffffd7c}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r10, 0x0, 0x4041080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r10) 2.626428792s ago: executing program 1 (id=6482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x13b, &(0x7f0000000540)={@broadcast, @random, @void, {@ipv4={0x800, @igmp={{0x31, 0x4, 0x2, 0x6, 0x12d, 0x67, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@rr={0x7, 0x23, 0x53, [@multicast2, @multicast2, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x4, 0xe1}, @rr={0x7, 0x1f, 0x4b, [@multicast1, @rand_addr=0x64010102, @multicast1, @loopback, @multicast1, @rand_addr=0x64010101, @loopback]}, @cipso={0x86, 0x23, 0x0, [{0x0, 0x11, "25283c79d61ce8efe42e1611674cb4"}, {0x2, 0x2}, {0x1, 0xa, "323d863198759377"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0x0, [{@remote, 0x4}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xd, "498a939fc63b8192da2189"}, {0x7, 0x8, "3b3e64792de6"}, {0x1, 0xb, "5c1b899dad26a82a96"}, {0x6, 0xb, "016c36a48c658f5b9b"}]}, @noop, @end, @generic={0x83, 0x2}]}}, {0x11, 0x5, 0x0, @rand_addr=0x64010100, "d78936f8dada21329797edfd44edb65b3fbecdb74420c5b00967707233fe25a5cfc2b110280788fdcbcf29bd816f946d182b9ddc0b0f4878391b67442d5040a2d13278350744a24c4ad235a6c789a3fdd4a804fb1ffef62b12a9b465456229378b"}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000002580)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000000800)=""/139, 0x8b}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/138, 0x8a}, {&(0x7f0000002440)}], 0x6, &(0x7f0000002500)=""/69, 0x45}, 0x2000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000380)=0x1e) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 2.123144921s ago: executing program 4 (id=6484): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x8}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/174, 0xae}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="c927d9ceda7045612153a6e4796c286aaed9cb167cdfe6505018"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x24000004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={r9, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r9, 0x800}, 0x8) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r4, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.706651793s ago: executing program 0 (id=6485): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:netutils_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000484}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 1.655380094s ago: executing program 2 (id=6486): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18, 0x68000000}, 0x0) (async) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (async) r2 = socket$kcm(0x21, 0x2, 0xa) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (rerun: 64) 1.654451961s ago: executing program 1 (id=6487): r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0xfff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$key(r1, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100030a0000002cbd7000ffdbdf25030006003c00000002004e20e0000001000000000019000003000500ff3300000002004e3064010102000000000000000002001300020000002c351017e16a40915416f84fe13c4c499c782e3330cfe66573d44a2d033ef95cb2f3950a07becbc843910c71adff3953db16d58a51ca4f594ea3d1bd0179752188bfd6853621a3ec0300000000000000fb79955c10"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000010000000002000000", @ANYRES32=0x0, @ANYBLOB="2000ee000a000100aaaaaaaaaa3900000600150001"], 0x30}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000006060102000000000000000000df634efc000001050001000700b2040000"], 0x1c}, 0x1, 0x0, 0x0, 0x8052}, 0x4000800) 1.498635992s ago: executing program 1 (id=6488): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x201c}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000001c0)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa000001c}) r5 = socket$kcm(0x21, 0x2, 0x2) unshare(0x600) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ffff2cbd700100800000340000000800b800000000020800030070636900110002"], 0x38}, 0x1, 0x0, 0x0, 0x6008010}, 0x20000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x8010) 1.498150011s ago: executing program 2 (id=6489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="0702000000000000000001000000840008803c00078008000600ce000000080005008c49bab508000500fda9a47d080006004100000008000600f0000000020006000300000008000600b40000001c00078008000500ef12443c07fb05002e164530080006005d00000014000780080005006db6d1210800050025590b6d1400078008000600870000000800050025bb6a230400048008000100030000000800020001000000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000280), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x40884}, 0x20040840) 1.433413056s ago: executing program 2 (id=6490): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x46, "5c83276f6cee07000500000000f0090000726e41e35502bea200f7cbec3ea02759de95720fb6370000000000a200000000000000c2d4055a4459c42954ed4a01000000000000"}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r3 = accept(r0, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0x18, 0x4, @broadcast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.284622541s ago: executing program 2 (id=6491): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x9, 0xf25f, 0x1, 0x2, 0x3}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r1, 0xfffffffa}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x861d, 0x5495}, 0x8) close(r0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth1\x00', 0x1000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x280901, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={r2, 0x8}, &(0x7f0000000280)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x12c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x883}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff5}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffe308}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x47761a3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6ec}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x12c}}, 0x8014) r7 = accept(r5, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000580)=0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f00000005c0)=0x5, 0x4) pread64(r7, &(0x7f0000000600)=""/79, 0x4f, 0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000680)={r1, 0x7}, &(0x7f00000006c0)=0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000800)={r0, &(0x7f0000000700)='skcipher\x00', 0x40, &(0x7f0000000740)={@align=0x9b6, {0x375f, 0xf, 0x4}}, 0x3647, &(0x7f0000000780), &(0x7f00000007c0)=0x9}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000940)=[@in6={0xa, 0x4e20, 0xa93, @mcast2, 0x2}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e22, 0xfffffffa, @private1, 0x4}, @in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}, @in6={0xa, 0x4e22, 0xfb9, @private1, 0x3}, @in6={0xa, 0x4e20, 0x7, @local, 0x3}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x4}, @in6={0xa, 0x4e22, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}], 0xf0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000ac0)={{0x2f, @remote, 0x4e23, 0x4, 'lblcr\x00', 0x3, 0xfffffffb, 0x27}, {@empty, 0x4e21, 0x2000, 0x9, 0x6, 0x6}}, 0x44) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000b40)={0x0, @adiantum, 0x0, @desc1}) sendmsg$AUDIT_TRIM(r8, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x10, 0x3f6, 0x400, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4000080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r9, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x488d0}, 0x4100) sendfile(r0, r4, &(0x7f0000000e00)=0xfffffffffffffff4, 0x5) pipe(&(0x7f0000000e40)) 1.236615061s ago: executing program 1 (id=6492): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x40084) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 1.115931522s ago: executing program 1 (id=6493): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580"], 0x40}}, 0x810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) close(r9) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r11, 0x6f6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20005, 0x4) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x16, 0x0, "a1873b93b3cfcd06eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2f948772be305b9cdf57387e4d1af1630d46f6aa5d2e5a5e6cebac5c58f2bb310057db2d80d50ca891462a59e1900"}, 0xd8) sendto$inet(r12, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 1.027695836s ago: executing program 4 (id=6494): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x8b}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="710602040202"], 0x6f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0xf, 0x80000000, 0x400, r1, 0x5, '\x00', 0x0, r2, 0x5, 0x3, 0x2, 0xa}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000002000)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000b00)={0x14ac, 0x14, 0x2, 0x70bd27, 0x25dfdbff, {0x1c}, [@nested={0xce, 0x9d, 0x0, 0x1, [@generic="074428d488020f1e59d46179aa43355c98397f29ee82935f89356722600d5ddfe347a589ba4ac007df54a0", @generic="e3f4f4099bae9281a4834ca8602bae88496acdcfba8043c70b26d5d4bcf1b4899c519aad511057e8d3275b44666c1a543e5b0c4dc7e7a7027b4db0e45d9bc50a80f94b844b3f273ff75c8331a885cef2ef68d917dd840a7c695a491accff91a45e31805c4a59d44fbd60ad7318df0e361c26130b2c45b58aaf0ae4febe595be97d29c5a768c75002a34093b1d7ebfa8031456be7ec79b8d51078c4", @nested={0x4, 0x6}]}, @nested={0xd2, 0x6e, 0x0, 0x1, [@typed={0x14, 0xc0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="7f7f45d80f5acb1ec78bc2a79906f2216b95e29bd98b8118c11c68830669260a84ba8e0dd62b01cc5f25ef73722be49647442ecdd24e0ba08ac140c3a1d862c49132e4548e789f21d16aa96ca8e7322e50007413dec05135c4a56a051f37422cef8252b2090a29facb7cbbf4df670126a71211ec6e304576b91a3ce13da5c4e8ea12f3f8083c9425c1a69caa4df0cf33a68778e9cb57156b58b6733c62d30f059e62e39b2e27b63826316c405d3ccccf4fd04c0fc289bf52a8d7"]}, @typed={0x4, 0x164}, @nested={0xe2, 0x18, 0x0, 0x1, [@generic="0b5d971ff4cb587577ced0d048eed04a4a180f5b81235855b8f08f15197d917c7a93b92fe0e694c6e8d6aefe15cb6e3883a4fa7645e3097efb12f9195abe293a6abef4493636dc2c48d3ad940c75ab7c363b87abbba4128185c43a28bc1db81c622848ef077b94f98da5c76a557f761972478f7e69760e97ed338a5320653747d5b1dc66674c0b79c25b13b13fe505790a4ca77923780ba4a59ac6880fa243a824b9fe4f53689d684807206fcb5177eb007365fce91cf964d029add6edfc4630d35327412d9998305f540fc1539926d0eb9c7e7e6238a8cbf652eb7fedc9"]}, @generic="68b881323b6a248b6bced6873950d9432371bc00d1790e642a502abcdc8a734cabf3c8878d93b4694cc276196315d9017a3ee6257408732e01c84a1ba31f68", @typed={0x5, 0x46, 0x0, 0x0, @str='\x00'}, @nested={0x11c1, 0x44, 0x0, 0x1, [@generic="d700d4a79db7d995e069f6932b5fc6a516b4239405c1faa73716ab7900d860623428dfbf0d33fe36c91de2f500103aa0ed313e61e5a60a61b708b679ccc3d192e00d6dd3fc13af308d17330c99adeb84fed29758756c596e770fa4f7ec3cc0fec69672d0aee24983905e34a89db4116fa2ce13", @typed={0x1004, 0x11c, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x12}, @nested={0x4, 0x358d}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x9}, @generic="554660278259bd51a5171104964fd70b1bae416c1a82feed5ff829510ef44b20fa70a8079eac064f8f43334ba157096fa1a77f270976e29299c35093c8156a00efa872ef2533689cf3f79f27db133c1a8c8c363ced06cd059691af8d4fc1d1e3fdc535e0586c5405f79d61f3ec76ada47fc0cb5763c1198c435d39e119af38c3b6d68674e72af82aae2febe21dd20fd46d0648546b595579e2e1", @generic="2246b9b1f8a41e8b63e52ca7f329c1c5130aac2d7d50c850056c7cba014a203444a6a960adc1c91e4a61e2fa80f1d8aef1fe8b13210e3061463ae03a3c0cbca991d6283d95cc75fbd6f6a0356205cdd0b5a5835276ec6083130072cf054dc9b616f87160e2151ab6387ad6d9d4fe9f522622291550f02df74db74ae7ca1247412c21cd2e37e674fff30d68ef1765acb9e91c1f21c373325c9f91211b"]}]}, 0x14ac}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.023050537s ago: executing program 2 (id=6495): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002580)={0x0, 0xfffffffffffffff8}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400)=0xfffffffc, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000050000000100"/28], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000380)={r4, &(0x7f0000000280)='\x00', 0x100, &(0x7f00000002c0)={@align=0x5707, {0x0, 0x3, 0x0, 0x6}}, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x103}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3f00}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xfc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x17, 0x6, "a33ce9fbb623269080838fd8bb01537928dbf3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "379b68b9a00d6b19140abcf29a667bd8191bcf9196b4981f21cde4c3decf815ca56cd56b437bc6262a326933931ede35288348d747989f383273cec3af528e4f25da24f910ad03d5ead2791d48083a469fb68dbc4f6a64bb6e748cc3948e5610e953fd7d12664b34659fc653da7cb3829d4a59671b512ea2efcd353af1d05f5258e67136dfe788b90d4e211b5f2c648fa7e47f7b870054e3ed34c47e79b7bcf5ed50b5e5a367aa306d5961cb"}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 671.650285ms ago: executing program 0 (id=6496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r8, &(0x7f0000000540), 0x0}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) 664.616274ms ago: executing program 4 (id=6497): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x28a, 0x4) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xffff8002, @remote}, 0x1c, 0x0}}], 0x1, 0x4004804) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), 0x0}, 0x20) r8 = epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r8, &(0x7f00000000c0)=[{}, {}], 0x2, 0x401, &(0x7f0000000180)={[0x7f]}, 0x8) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xfffffffffffffd7c}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r10, 0x0, 0x4041080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r10) 518.480886ms ago: executing program 3 (id=6498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x13b, &(0x7f0000000540)={@broadcast, @random, @void, {@ipv4={0x800, @igmp={{0x31, 0x4, 0x2, 0x6, 0x12d, 0x67, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@rr={0x7, 0x23, 0x53, [@multicast2, @multicast2, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x4, 0xe1}, @rr={0x7, 0x1f, 0x4b, [@multicast1, @rand_addr=0x64010102, @multicast1, @loopback, @multicast1, @rand_addr=0x64010101, @loopback]}, @cipso={0x86, 0x23, 0x0, [{0x0, 0x11, "25283c79d61ce8efe42e1611674cb4"}, {0x2, 0x2}, {0x1, 0xa, "323d863198759377"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0x0, [{@remote, 0x4}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xd, "498a939fc63b8192da2189"}, {0x7, 0x8, "3b3e64792de6"}, {0x1, 0xb, "5c1b899dad26a82a96"}, {0x6, 0xb, "016c36a48c658f5b9b"}]}, @noop, @end, @generic={0x83, 0x2}]}}, {0x11, 0x5, 0x0, @rand_addr=0x64010100, "d78936f8dada21329797edfd44edb65b3fbecdb74420c5b00967707233fe25a5cfc2b110280788fdcbcf29bd816f946d182b9ddc0b0f4878391b67442d5040a2d13278350744a24c4ad235a6c789a3fdd4a804fb1ffef62b12a9b465456229378b"}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000002580)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000000800)=""/139, 0x8b}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/138, 0x8a}, {&(0x7f0000002440)}], 0x6, &(0x7f0000002500)=""/69, 0x45}, 0x2000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000380)=0x1e) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 448.248874ms ago: executing program 0 (id=6499): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="0e5aa742862fdc06b2b58b54fd50111555b98f1e67eeb7e54d9aa0f89b1f2d426231e106998f0561270808d1523604ca6ea852de3ca6b6f8342f61cf125bc93a6739e3de05aa5109b336a107bfb0ddf046dd79790213ad664f219f83c91672d907d90abe9ada80beb6dd014641c3cabefe7db4e156ebaf3ac662", @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x60}}, 0x0) 325.963725ms ago: executing program 0 (id=6500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={@remote, 0x13, r3}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000240)={'caif0\x00', 0x5}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x4c, 0x5, 0x42, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x8, 0xc, 0x2000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x7, 0xffffffff, {{0x23, 0x4, 0x2, 0x22, 0x8c, 0x68, 0x0, 0xb7, 0x29, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4}, @cipso={0x86, 0x3f, 0x2, [{0x6, 0x2}, {0x7, 0x3, ']'}, {0x2, 0x9, "361a18d3052d32"}, {0x6, 0x9, "bca407b63e3787"}, {0x1, 0x10, "f7ac7c2c0616809743c9f2b39bd8"}, {0x2, 0x12, "1e04fd0d29eca6e206019a10686e7df2"}]}, @rr={0x7, 0x1b, 0xd, [@rand_addr=0x64010100, @multicast2, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x13, 0x2e, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0xe, 0x7f, 0x5, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x80, 0x8000, 0xe2c7271, 0x1a}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @remote, @remote}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@deltfilter={0xdc4, 0x2d, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0x8, 0x7}, {0xc, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xd88, 0x2, [@TCA_U32_SEL={0x1a4, 0x5, {0x9, 0x0, 0x6e, 0x10, 0xffff, 0x1cc, 0xfffd, 0x5, [{0x4, 0x2, 0x0, 0x4}, {0x1, 0x4, 0x5, 0x9}, {0x9b, 0x3, 0xfffffffd}, {0x6, 0x5, 0xb, 0x77c}, {0x7fffffff, 0x3a3, 0xffffffff, 0x3}, {0x2, 0x400, 0x8, 0xe38}, {0x8, 0x8, 0xfff, 0x8}, {0xc7fb, 0x9, 0xfffffffe, 0x10}, {0x6, 0x2, 0x5, 0x40}, {0x5, 0x2, 0x80000000, 0x6}, {0x39e9, 0x5, 0x1c604864}, {0x800, 0x10, 0xfffffffb, 0x7fffffff}, {0x1, 0xfffffff9, 0x3, 0x1}, {0x0, 0x6, 0x7, 0x7}, {0x4, 0x1ff, 0x10, 0x9}, {0x6, 0xff, 0x859, 0xc4e4}, {0x53f, 0x6, 0xfffffffb, 0x1}, {0x0, 0xb, 0x9, 0x7}, {0x2, 0x1, 0x5580000, 0x74}, {0xffff, 0x6f9, 0x1, 0xfff}, {0x5, 0x10001, 0x3, 0x1}, {0x6, 0x0, 0x7fffffff, 0x9}, {0x3, 0x2, 0xbb, 0x51b}, {0x2a8, 0x1, 0xfd8c, 0x2}, {0x6, 0x4, 0x600000, 0x400}]}}, @TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_HASH={0x8, 0x2, 0x6}, @TCA_U32_MARK={0x10, 0xa, {0x3ff, 0x436c22e9}}, @TCA_U32_MARK={0x10, 0xa, {0xffffffff, 0x2}}, @TCA_U32_POLICE={0x838, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3e2904b2, 0x5, 0x6, 0x7, 0xc, 0xe905, 0x1, 0xfffffff4, 0xfffff8d1, 0x3, 0x0, 0x7, 0x80, 0x7f, 0x3ff, 0x0, 0x80, 0x5549, 0x1, 0x8d, 0xc, 0x6, 0xe557, 0x4, 0x5, 0x4, 0x1ff, 0x3, 0x4, 0x8, 0x4, 0xd1c3, 0x6, 0x7fffffff, 0x8, 0x9, 0x1ff, 0x8000000, 0x3, 0x7fffffff, 0x4, 0xda, 0x8, 0xa33, 0x7ff, 0x2, 0x1, 0xffffffff, 0x101, 0x0, 0x9, 0x6, 0xd, 0x7, 0x65a2, 0xb, 0x3, 0x100, 0x9, 0x1, 0x3, 0x939, 0x4, 0x400, 0x0, 0x523f, 0x3, 0x2, 0x3, 0x6, 0x7, 0xd, 0x200, 0x1ff, 0x3, 0x10001, 0x500, 0x78f, 0x29, 0x401, 0x8, 0x6367, 0x2, 0x10, 0x9, 0x6, 0x7, 0xfffffffa, 0x8, 0x0, 0x7fffffff, 0x3, 0x2, 0x1, 0x6, 0x8, 0x1, 0x2, 0x3, 0x4, 0x80000001, 0x6, 0x3, 0x0, 0x0, 0xcf, 0x1ff, 0x0, 0xcfc2, 0x3, 0x5, 0x400, 0x4, 0x6a7, 0xff, 0x9, 0x0, 0x57a, 0xfff, 0x9, 0x12b, 0x10000, 0x97f, 0x4030, 0x6, 0x7, 0xe, 0x6, 0x800, 0x3d448c6, 0x7, 0xb, 0x7, 0x8, 0x10001, 0x2, 0xb, 0x3ff, 0x3, 0x400, 0x7, 0x4, 0x7b10dde5, 0x1b, 0x6, 0x10, 0x7, 0x9, 0x5, 0xd, 0x3, 0x2, 0xffffff7e, 0x6, 0x1ff, 0x8, 0x1, 0x3ff, 0x9, 0xc7c, 0xab, 0xf2, 0x2, 0x6, 0x2, 0x7041, 0x8, 0x1f7a, 0x3, 0x4, 0xfffffff9, 0x0, 0x4, 0xfffffff7, 0x4, 0x9, 0x2, 0x0, 0x10000, 0x5, 0xfff, 0x4, 0x97b, 0x7, 0x800, 0x0, 0x87, 0xf4, 0x5, 0x7ff, 0xc, 0xb26, 0x10001, 0xd59b, 0x80000000, 0x800, 0x200, 0x80, 0xfffffff8, 0x9, 0x7, 0x9d6, 0x3, 0x40, 0x1ff, 0x3, 0x7fff, 0x0, 0x6, 0x3, 0x4, 0x80, 0x6, 0x143, 0x80000001, 0x0, 0x9, 0x6, 0x3, 0x8, 0xffff, 0x1, 0x1, 0x101, 0x8, 0x1f2b1380, 0x0, 0x3, 0x9, 0x7, 0x1, 0x7, 0x10000, 0x4, 0xfff, 0x12, 0x53, 0xfff, 0xfffffff7, 0x101, 0x4, 0x0, 0xffff, 0x6fcb, 0x74, 0x0, 0x6, 0x7, 0x7, 0x5, 0x2, 0xefee, 0x0, 0x6, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff4d1e, 0x2071, 0x1, 0x7f, 0xc0000, 0x6, 0x8, 0xfff, 0x2, 0x5, 0x4, 0xe16, 0x6, 0x7, 0x3, 0x7912, 0xffffff01, 0x8, 0x9, 0x4, 0x3, 0x2, 0x2, 0x4, 0x3, 0x9, 0xef95, 0x80000, 0x6, 0xd726, 0x0, 0x8, 0x2, 0x2, 0x8001, 0x17f, 0x5, 0x9, 0x6, 0x80000001, 0x8, 0xfff, 0x3ff, 0x6, 0x6, 0x3ff, 0x1, 0xc7, 0x6, 0x9, 0x3, 0x3, 0xff, 0xf, 0x1, 0x80, 0x7, 0x3, 0x8, 0x6, 0x3, 0x6, 0x3, 0x400, 0xfffffff7, 0xb, 0x100, 0x2, 0xca, 0xa29, 0xeff, 0x4, 0x80, 0x6, 0xc, 0x5, 0x6d, 0x3, 0x2, 0x4, 0x7ff, 0x7fffffff, 0xd, 0x9, 0xf, 0x5, 0x4, 0x8, 0x8, 0x5, 0x2, 0x9, 0xcd2, 0xc, 0x4, 0x8, 0xfffffffc, 0xfffffffb, 0x7, 0x4, 0x1000, 0x8, 0x14, 0x3be, 0x7, 0x9, 0xc, 0x5, 0x9, 0x4, 0x4, 0x4, 0x5, 0x3, 0x5, 0x3, 0x7, 0x9, 0x0, 0x2, 0x40, 0x7fffffff, 0x3, 0xff, 0xe, 0x6, 0x5, 0xfff, 0x3, 0x2, 0xfffffff7, 0x9, 0x1, 0xfffffffe, 0xdc33, 0x9, 0x0, 0x1, 0x6, 0x7, 0x6, 0x2, 0xffffffff, 0x7, 0x3, 0x8, 0x6419, 0x4, 0x0, 0xffffffff, 0x1, 0x5c88, 0x5, 0x3, 0x8, 0x1, 0x0, 0x1, 0x9, 0x2, 0x1, 0xa, 0xcd84, 0x9, 0xef, 0x3ff, 0x200, 0x8001, 0x1, 0x2, 0xa, 0xc, 0x3, 0x400, 0x5, 0x1, 0xbb, 0x5, 0x81, 0xc7, 0x9, 0x3ff, 0xffffc925, 0x4, 0x8, 0xc6, 0x2, 0x1, 0x2, 0x1, 0x6, 0x9, 0x5, 0x3, 0xb9dc, 0x5, 0xfffff801, 0x4, 0x6, 0x3, 0x2, 0x8, 0x9, 0x3, 0x988d, 0x401, 0x8, 0x10, 0xfffff2f0, 0x5, 0x5, 0x5, 0x800, 0x9, 0x7fffffff, 0x668, 0x0, 0x5, 0x2, 0x4, 0x1ff, 0x7, 0x4, 0x5, 0x4, 0x8, 0xfffffff9, 0xc5b, 0x6, 0x2, 0x9, 0x4, 0xb5, 0xc, 0x4, 0xfbd, 0x6e1b2d49, 0x9, 0x9, 0x7ff, 0x81, 0x100, 0x62bbc2e6, 0x328, 0x4, 0x5, 0x80000000, 0xfffffc01, 0x6, 0x1, 0xffffffff, 0x35, 0xffffffff, 0xffff8000, 0x5, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x37e9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_U32_ACT={0x1f4, 0x7, [@m_mirred={0x1f0, 0x3, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x3, 0x8, 0xfffffffa, 0x4}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8f, 0x9, 0x0, 0x1ff, 0x9}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x39, 0xffff, 0x10000000, 0x1, 0x4}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6f, 0x16, 0x9, 0xd4}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x483, 0x1, 0x70000000, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x5, 0x0, 0x4}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x4, 0x1ff, 0x401}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0xffffffffefffffff, 0x5, 0x407}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x26ae, 0x9, 0x0, 0x200, 0x3}, 0x1, r13}}]}, {0xa4, 0x6, "882cc60f6e9deeb6d836b558725431b12958e379a6c86d84167a0c6985c709bf57d015f1b10eb44b56293772045e6e026d6a391e328d41288e0ba550c28ef311c63fa2aa04695145ec21b463103a8cb6037f94f6f0b2424a2476e164932b4190b96e3a96ba8a7ae169cb6926669a22e2a774a6c1333f64e82509f2c5c671042bdf8a61bea2de5896f22a423657d51b611c52250bb3bcc0dbafabe28dfc713707"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x184, 0x5, {0x0, 0x62, 0x1, 0xb, 0x4, 0xff, 0x9, 0x0, [{0x6, 0xae, 0x1ff, 0x80000001}, {0x0, 0xff, 0x4, 0xffe00000}, {0x9, 0x40, 0xfffffffd, 0x9}, {0x518, 0x4, 0x0, 0x18000000}, {0x8, 0x10001, 0x6, 0x9}, {0x1ff, 0x3, 0x628, 0xff}, {0x1, 0x7, 0xfffffffe, 0x526470d6}, {0xfffffffe, 0x1, 0x80, 0x9}, {0x9, 0x10001, 0xba33, 0x800}, {0x56, 0x7, 0x10, 0x8000}, {0xfff, 0x2, 0x8, 0x7fff}, {0x2, 0x9, 0x5, 0xf553}, {0x4, 0x4, 0x7, 0x3}, {0x80000000, 0x140000, 0x0, 0xfffffffd}, {0x9, 0x53b, 0x2, 0x30000}, {0x9, 0x2, 0xa36}, {0x5b, 0x8, 0x4, 0x5}, {0x6, 0xfffffa32, 0x6, 0x9}, {0x4, 0x5, 0x9, 0xa3}, {0x0, 0x40, 0x7fff, 0x1}, {0x9, 0x8000, 0x9, 0xcdc}, {0x34, 0xc, 0x3, 0x7}, {0x3, 0xf41, 0x1, 0x3}]}}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0xdc4}}, 0x0) 324.550642ms ago: executing program 2 (id=6501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0xc4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340), 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r6, 0x0, 0xf38, 0x0) close(r7) write$tun(r8, 0x0, 0xffe) write(r5, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x1bc8, 0x4) readv(r10, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x2}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r11, 0x11, 0x1, &(0x7f0000000180)=""/21, &(0x7f00000001c0)=0x15) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x40000006, 0x7, 0x8000000}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x24}}, 0x0) ioctl$sock_netdev_private(r4, 0x89f9, &(0x7f0000000080)="966d2ddab57f89cfd4323965fc3086a2b82782abf97037f0b98ce8802c43a5b317e11a490f37475c76b6bd20") 383.836µs ago: executing program 0 (id=6502): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x201c}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000001c0)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa000001c}) r5 = socket$kcm(0x21, 0x2, 0x2) unshare(0x600) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ffff2cbd700100800000340000000800b800000000020800030070636900110002"], 0x38}, 0x1, 0x0, 0x0, 0x6008010}, 0x20000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x8010) 0s ago: executing program 1 (id=6503): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800) kernel console output (not intermixed with test programs): 72 - 0 [ 959.748786][T28052] bond6 (unregistering): Released all slaves [ 959.804332][T28060] syzkaller0: entered promiscuous mode [ 959.810104][T28060] syzkaller0: entered allmulticast mode [ 959.810983][T28066] netlink: 'syz.2.5393': attribute type 1 has an invalid length. [ 959.836971][T26489] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 959.845760][T26489] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 959.859105][T28064] geneve2: entered promiscuous mode [ 959.864521][T28064] geneve2: entered allmulticast mode [ 959.879772][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 959.982044][T26489] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.990294][T26489] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.020878][T26489] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.040705][T26489] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.155407][T28070] bond12: (slave bridge8): making interface the new active one [ 960.200305][T28070] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 960.251882][T28070] __nla_validate_parse: 5 callbacks suppressed [ 960.251899][T28070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5393'. [ 960.314744][T28070] 8021q: adding VLAN 0 to HW filter on device bond12 [ 960.357201][T26497] bond12: (slave bridge8): link status definitely down, disabling slave [ 960.390271][T26497] bond12: now running without any active interface! [ 960.390881][T28085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5399'. [ 960.457587][T28088] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5400'. [ 960.780722][T28102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5405'. [ 960.858441][T28105] lo speed is unknown, defaulting to 1000 [ 961.028448][T28117] syzkaller0: entered promiscuous mode [ 961.050331][T28117] syzkaller0: entered allmulticast mode [ 961.185162][T28127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5411'. [ 961.212777][T28125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5411'. [ 961.288533][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5411'. [ 961.300370][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5411'. [ 961.309870][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5411'. [ 961.319015][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5411'. [ 961.328033][T28105] lo speed is unknown, defaulting to 1000 [ 961.343508][T28105] wlan1 speed is unknown, defaulting to 1000 [ 961.695659][T28144] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 961.744058][T28144] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 961.751662][T28144] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 961.787391][T28151] netlink: 'syz.4.5417': attribute type 1 has an invalid length. [ 961.921839][T28159] unsupported nlmsg_type 40 [ 961.932085][T28161] netlink: 'syz.4.5421': attribute type 21 has an invalid length. [ 961.946547][T28161] netlink: 'syz.4.5421': attribute type 20 has an invalid length. [ 961.954654][T28157] netlink: 'syz.3.5420': attribute type 8 has an invalid length. [ 962.109018][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 962.120486][T28170] syzkaller0: entered promiscuous mode [ 962.126019][T28170] syzkaller0: entered allmulticast mode [ 962.551120][T28177] xt_hashlimit: size too large, truncated to 1048576 [ 963.286171][T28200] netlink: 'syz.1.5430': attribute type 4 has an invalid length. [ 963.962202][T28233] vlan2: entered promiscuous mode [ 963.971827][T28233] hsr0: entered promiscuous mode [ 963.974521][T28234] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 964.005460][T28233] vlan2: entered allmulticast mode [ 964.014425][T28233] hsr0: entered allmulticast mode [ 964.021416][T28233] hsr_slave_0: entered allmulticast mode [ 964.027906][T28233] hsr_slave_1: entered allmulticast mode [ 964.205915][T28245] netlink: 'syz.2.5442': attribute type 1 has an invalid length. [ 964.353687][T28254] netlink: 'syz.3.5444': attribute type 4 has an invalid length. [ 964.684796][T28245] bond13: entered promiscuous mode [ 964.693331][T28245] 8021q: adding VLAN 0 to HW filter on device bond13 [ 965.776359][T28298] syzkaller0: entered promiscuous mode [ 965.791939][T28298] syzkaller0: entered allmulticast mode [ 966.131466][T28307] lo speed is unknown, defaulting to 1000 [ 966.176526][T28327] __nla_validate_parse: 10 callbacks suppressed [ 966.176543][T28327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5460'. [ 966.479731][T28307] lo speed is unknown, defaulting to 1000 [ 966.486617][T28307] wlan1 speed is unknown, defaulting to 1000 [ 966.874212][T28357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5467'. [ 966.983057][T28357] tipc: Enabled bearer , priority 0 [ 967.010339][T28357] syzkaller0: entered promiscuous mode [ 967.027198][T28357] syzkaller0: entered allmulticast mode [ 967.154467][T28357] tipc: Resetting bearer [ 967.233368][T28364] vlan4: entered allmulticast mode [ 967.248899][T28364] bond0: entered allmulticast mode [ 967.258666][T28364] bond_slave_0: entered allmulticast mode [ 967.267696][T28364] bond_slave_1: entered allmulticast mode [ 967.283886][T28364] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 967.310604][T28356] tipc: Resetting bearer [ 967.432871][T28356] tipc: Disabling bearer [ 967.883750][T28392] vlan2: entered promiscuous mode [ 967.888859][T28392] bridge0: entered promiscuous mode [ 967.952508][T28394] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5476'. [ 967.977369][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5476'. [ 968.036382][T28400] netlink: 'syz.2.5479': attribute type 2 has an invalid length. [ 968.045064][T28392] erspan0: left promiscuous mode [ 968.045092][T28392] erspan0: left allmulticast mode [ 968.060884][T28392] : left promiscuous mode [ 968.088296][T28392] vlan0: left promiscuous mode [ 968.094104][T28392] bridge3: left promiscuous mode [ 968.339844][T28392] ip6gre2: left promiscuous mode [ 968.344861][T28392] ip6gre2: left allmulticast mode [ 968.379267][T28412] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5484'. [ 968.399465][T28392] bond14: left promiscuous mode [ 968.404393][T28392] bridge8: left promiscuous mode [ 968.422084][T28392] ipvlan0: left allmulticast mode [ 968.427360][T28392] ipvlan1: left allmulticast mode [ 968.443456][T28392] bond14: left allmulticast mode [ 968.448484][T28392] bridge8: left allmulticast mode [ 968.519647][T28392] geneve2: left promiscuous mode [ 968.524710][T28392] geneve2: left allmulticast mode [ 968.544857][T26497] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.553270][T26497] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.563021][T26497] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.571591][T26497] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.620844][T26497] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.632274][T26497] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.724593][T28432] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 968.786959][T28432] bond5 (unregistering): Released all slaves [ 968.858462][T26497] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.866886][T26497] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.109219][T28436] lo speed is unknown, defaulting to 1000 [ 969.412435][T28449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5494'. [ 969.556635][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5492'. [ 969.960335][T28436] lo speed is unknown, defaulting to 1000 [ 969.967955][T28436] wlan1 speed is unknown, defaulting to 1000 [ 970.889668][T28536] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5511'. [ 971.730072][T28441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 972.151086][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5515'. [ 972.328877][T28592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 972.359600][T28597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 972.366721][T28597] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 972.377606][T28597] bond6: (slave vti0): Error -95 calling set_mac_address [ 972.498937][T28592] bond6: (slave dummy0): Error -99 calling set_mac_address [ 972.543456][T28609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 972.615294][T28609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5519'. [ 972.928972][T28629] Unknown options in mask 6 [ 973.375236][T28645] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5525'. [ 973.423236][T28646] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5523'. [ 974.079681][T28600] xfrm0: left allmulticast mode [ 974.364635][T28600] veth0_macvtap: left promiscuous mode [ 974.464818][T28600] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 974.992741][T28600] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 975.022086][T28600] vlan2: left allmulticast mode [ 975.037852][T28600] hsr0: left allmulticast mode [ 975.042778][T28600] hsr_slave_0: left allmulticast mode [ 975.048550][T28600] hsr_slave_1: left allmulticast mode [ 975.279314][T28650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.302514][T28650] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.359522][T28650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.490353][T28666] netlink: 'syz.1.5526': attribute type 15 has an invalid length. [ 975.525694][T28669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5527'. [ 975.530701][T28650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.545853][T28666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5526'. [ 975.573708][T28650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.595438][T28650] veth1_vlan: left promiscuous mode [ 975.612224][T28650] veth1_vlan: entered promiscuous mode [ 975.637167][T28650] veth0_macvtap: left promiscuous mode [ 975.646109][T28650] veth0_macvtap: entered promiscuous mode [ 975.667945][T28650] 8021q: adding VLAN 0 to HW filter on device €Â [ 975.675760][T28650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 975.692294][T28650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.701395][T28650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 975.715682][T28650] batman_adv: batadv0: Interface activated: gretap1 [ 975.723897][T28650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.761710][T28671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5526'. [ 975.849741][T28650] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 975.871818][T28679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5526'. [ 975.898732][T26495] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.907670][T26495] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 50517 - 0 [ 975.945733][T23432] batman_adv: batadv0: Interface activated: vlan3 [ 976.862966][T26495] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.904807][T26495] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 50517 - 0 [ 976.913873][T26495] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.922760][T26495] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 50517 - 0 [ 976.931968][T28620] lo speed is unknown, defaulting to 1000 [ 976.951368][T26495] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.960379][T26495] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 50517 - 0 [ 977.523243][T28620] lo speed is unknown, defaulting to 1000 [ 977.591754][T28620] wlan1 speed is unknown, defaulting to 1000 [ 978.925459][T28743] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5541'. [ 979.030176][T28743] vlan0: entered allmulticast mode [ 979.035377][T28743] erspan0: entered allmulticast mode [ 979.586254][T28766] tipc: Enabled bearer , priority 0 [ 979.662686][T28771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5549'. [ 979.686408][T28771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5549'. [ 979.786459][T28775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.841022][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5549'. [ 979.965675][T28783] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 979.998517][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 980.023034][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.043574][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 980.065689][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.086907][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 980.110785][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.133463][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 980.158449][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.171988][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 980.181247][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.189183][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 980.209525][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.227118][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.235343][T28784] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 980.409248][T28760] tipc: Disabling bearer [ 980.522991][T28794] syzkaller0: entered promiscuous mode [ 980.529466][T28794] syzkaller0: entered allmulticast mode [ 980.548876][T28794] validate_nla: 24 callbacks suppressed [ 980.548897][T28794] netlink: 'syz.2.5555': attribute type 8 has an invalid length. [ 981.309426][T28804] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 981.346418][T28804] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 981.380942][T28804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 981.434014][T28805] IPVS: Unknown mcast interface: pim6reg [ 981.470532][T28811] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 981.769463][T28823] syz_tun: entered allmulticast mode [ 981.876385][T28829] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 981.891352][T28823] syz_tun (unregistering): left allmulticast mode [ 982.385061][T28857] netlink: 'syz.0.5573': attribute type 3 has an invalid length. [ 982.400512][T28862] 0: reclassify loop, rule prio 0, protocol 700 [ 982.407965][T28857] netlink: 'syz.0.5573': attribute type 1 has an invalid length. [ 982.415814][T28857] netlink: 'syz.0.5573': attribute type 2 has an invalid length. [ 982.556600][ T9] hid-generic 0005:10CF:8000.0002: item fetching failed at offset 0/1 [ 982.566154][ T9] hid-generic 0005:10CF:8000.0002: probe with driver hid-generic failed with error -22 [ 982.680696][T28875] geneve2: entered promiscuous mode [ 982.695259][T26487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.767003][T28876] gretap1: entered promiscuous mode [ 982.779262][T26487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.803970][T26487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.824490][T26487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.060125][T28902] syzkaller0: entered promiscuous mode [ 983.076111][T28902] syzkaller0: entered allmulticast mode [ 983.198663][T28907] netlink: 'syz.1.5586': attribute type 1 has an invalid length. [ 983.471506][T28920] 8021q: adding VLAN 0 to HW filter on device bond16 [ 983.481372][T28929] netlink: 'syz.3.5592': attribute type 1 has an invalid length. [ 983.538291][T28933] netlink: 'syz.0.5593': attribute type 2 has an invalid length. [ 983.675587][T28929] 8021q: adding VLAN 0 to HW filter on device bond14 [ 983.779337][T28936] bond14: (slave veth11): Enslaving as an active interface with a down link [ 984.258541][T28962] syzkaller0: entered promiscuous mode [ 984.275911][T28962] syzkaller0: entered allmulticast mode [ 984.700533][T28971] __nla_validate_parse: 43 callbacks suppressed [ 984.700555][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5605'. [ 984.984105][T28990] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5606'. [ 985.094932][T28994] IPVS: sh: FWM 3 0x00000003 - no destination available [ 985.304172][T28999] tipc: Enabling of bearer rejected, failed to enable media [ 985.311359][T29001] netlink: 'syz.3.5611': attribute type 1 has an invalid length. [ 985.325131][T29001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.363900][T29001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'. [ 985.446426][T29007] IPVS: sh: FWM 3 0x00000003 - no destination available [ 985.470819][T29009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'. [ 985.700013][T29020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5619'. [ 985.709025][T29020] nbd: must specify a size in bytes for the device [ 985.736156][T29020] block nbd0: NBD_DISCONNECT [ 985.740829][T29020] block nbd0: Send disconnect failed -32 [ 985.747735][T29020] block nbd0: Send disconnect failed -32 [ 985.751916][T29023] erspan0: entered promiscuous mode [ 985.753404][T29020] block nbd0: Send disconnect failed -32 [ 985.760451][T29021] erspan0: left promiscuous mode [ 985.764255][T29020] block nbd0: shutting down sockets [ 985.804520][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5620'. [ 985.897912][T29029] sctp: [Deprecated]: syz.0.5619 (pid 29029) Use of int in max_burst socket option deprecated. [ 985.897912][T29029] Use struct sctp_assoc_value instead [ 985.994426][T29031] syzkaller0: entered promiscuous mode [ 985.999975][T29031] syzkaller0: entered allmulticast mode [ 986.050830][T29027] netlink: 'syz.0.5619': attribute type 1 has an invalid length. [ 986.380753][T26496] vlan4: left allmulticast mode [ 986.389937][T26496] geneve0: left allmulticast mode [ 986.415616][T26496] bridge0: port 1(vlan4) entered disabled state [ 986.599064][T26496] pim6reg: left allmulticast mode [ 987.164135][T29070] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5627'. [ 987.252059][T26496] bond6 (unregistering): (slave gretap1): Releasing active interface [ 987.397384][T26496] team0: Port device bridge0 removed [ 987.418484][T26496] bond1 (unregistering): (slave bridge2): Releasing active interface [ 987.430911][T26496] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 987.490316][T26496] bond0 (unregistering): Released all slaves [ 987.503529][T26496] bond1 (unregistering): Released all slaves [ 987.522178][T26496] bond2 (unregistering): Released all slaves [ 987.541355][T26496] bond3 (unregistering): Released all slaves [ 987.560309][T26496] bond4 (unregistering): Released all slaves [ 987.591313][T26496] bond5 (unregistering): Released all slaves [ 987.604384][T26496] bond6 (unregistering): Released all slaves [ 987.618581][T26496] bond7 (unregistering): (slave veth5): Releasing active interface [ 987.626522][T26496] batadv1: entered promiscuous mode [ 987.633943][T26496] bond7 (unregistering): (slave batadv1): Releasing active interface [ 987.643037][T26496] bond7 (unregistering): Released all slaves [ 987.656085][T26496] bond8 (unregistering): Released all slaves [ 987.669364][T26496] bond9 (unregistering): Released all slaves [ 987.748887][T26496] bond10 (unregistering): (slave dummy0): Releasing active interface [ 987.771400][T26496] bond10 (unregistering): Released all slaves [ 987.793941][T26496] bond11 (unregistering): Released all slaves [ 987.815847][T26496] bond12 (unregistering): Released all slaves [ 987.844018][T26496] bond13 (unregistering): Released all slaves [ 987.871179][T29037] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 987.882459][T29037] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 987.896023][T29037] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 988.249870][T26496] tipc: Disabling bearer [ 988.259110][T26496] tipc: Disabling bearer [ 988.306599][T26496] tipc: Left network mode [ 988.530131][T29085] syzkaller0: entered promiscuous mode [ 988.558795][T29085] syzkaller0: entered allmulticast mode [ 988.562205][T29089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5635'. [ 988.583342][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5632'. [ 988.849344][T29088] wg0: left allmulticast mode [ 988.942008][T29088] bond9: left allmulticast mode [ 989.445442][T26495] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 60387 - 0 [ 989.458237][T26495] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 989.467583][T26495] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.505829][T26495] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 60387 - 0 [ 989.515913][T26495] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 989.525517][T26495] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.536421][T26495] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 60387 - 0 [ 989.546846][T26495] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 989.577207][T26495] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.715393][T26495] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 60387 - 0 [ 989.724666][T26495] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 989.745038][T26495] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.814741][T29131] syzkaller0: entered promiscuous mode [ 989.820758][T29131] syzkaller0: entered allmulticast mode [ 989.965162][T29139] syzkaller0: entered promiscuous mode [ 989.970699][T29139] syzkaller0: entered allmulticast mode [ 990.155688][T29144] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5648'. [ 990.413037][T29152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5651'. [ 990.533489][T29158] netlink: 'syz.2.5652': attribute type 30 has an invalid length. [ 990.570681][T29158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5652'. [ 990.772307][T29168] netlink: 'syz.4.5656': attribute type 21 has an invalid length. [ 990.816915][T29158] bond14: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 990.918855][T29158] bond14 (unregistering): Released all slaves [ 991.009657][T29168] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5656'. [ 992.556990][T29214] syzkaller0: entered promiscuous mode [ 992.562942][T29214] syzkaller0: entered allmulticast mode [ 992.639897][T29230] syzkaller0: entered promiscuous mode [ 992.645492][T29230] syzkaller0: entered allmulticast mode [ 993.382763][T29281] netlink: 'syz.4.5679': attribute type 1 has an invalid length. [ 993.431260][T29281] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5679'. [ 993.473600][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5679'. [ 993.636518][T26468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.651067][T26468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.805984][T26496] IPVS: stop unused estimator thread 0... [ 994.006875][T29314] netlink: 'syz.3.5686': attribute type 1 has an invalid length. [ 994.163851][T29314] 8021q: adding VLAN 0 to HW filter on device bond15 [ 994.291565][T29335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5688'. [ 994.356170][T29328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.414498][T29328] bond15: (slave batadv0): making interface the new active one [ 994.426801][T29328] bond15: (slave batadv0): Enslaving as an active interface with an up link [ 994.976596][T29350] syzkaller0: entered promiscuous mode [ 995.002576][T29350] syzkaller0: entered allmulticast mode [ 995.330337][T29384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5699'. [ 995.355752][T29388] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5698'. [ 995.509321][T29383] macvlan0: entered allmulticast mode [ 995.524737][T29383] batadv_slave_1: entered allmulticast mode [ 995.548975][T29383] batman_adv: batadv0: Adding interface: macvlan0 [ 995.563244][T29383] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.595361][T29383] batman_adv: batadv0: Interface activated: macvlan0 [ 996.175707][T29430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5708'. [ 996.428075][T29448] --map-set only usable from mangle table [ 996.682470][T29455] netlink: 'syz.1.5715': attribute type 4 has an invalid length. [ 996.687374][T29459] netlink: 'syz.0.5716': attribute type 1 has an invalid length. [ 996.773732][T29455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.790284][T29455] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.832494][T29455] batadv_slave_1: entered promiscuous mode [ 996.845108][T29455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 996.855728][T29455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 996.883663][T29455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 996.893996][T29455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 996.902655][T29455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 996.915750][T29455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 996.926164][T29455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 996.940790][T29455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 996.958015][T29455] 8021q: adding VLAN 0 to HW filter on device eth0 [ 996.967883][T29455] 8021q: adding VLAN 0 to HW filter on device eth1 [ 996.977952][T29455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 996.990091][T29455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 997.007806][T29455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 997.019355][T29455] 8021q: adding VLAN 0 to HW filter on device bond8 [ 997.027117][T29455] 8021q: adding VLAN 0 to HW filter on device bond9 [ 997.037193][T29455] 8021q: adding VLAN 0 to HW filter on device bond10 [ 997.047333][T29455] 8021q: adding VLAN 0 to HW filter on device bond11 [ 997.065178][T29455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 997.073707][T29455] 8021q: adding VLAN 0 to HW filter on device bond13 [ 997.084613][T29455] 8021q: adding VLAN 0 to HW filter on device bond14 [ 997.094678][T29455] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 997.105849][T29455] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 997.111493][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5713'. [ 997.117145][T29455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.134729][T29455] 8021q: adding VLAN 0 to HW filter on device bond15 [ 997.143636][T29455] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 997.172137][T29466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5713'. [ 997.338873][T26479] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.360175][T26479] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.373757][T26479] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.407905][T26479] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.481312][T26496] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 997.530320][T26496] bond5: (slave veth3): making interface the new active one [ 997.549895][T26496] bond5: active interface up! [ 997.644531][T29470] bond13: (slave veth0_to_bond): Releasing backup interface [ 997.684001][T29470] bond0: (slave bond_slave_0): Releasing backup interface [ 997.701726][T29470] bond_slave_0: left allmulticast mode [ 997.710946][T29470] team0: Port device team_slave_1 removed [ 997.735408][T29495] xt_l2tp: invalid flags combination: 8 [ 997.741723][T29470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 997.760106][T26479] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.771191][T26479] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.782059][T26479] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.791011][T26479] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.914492][T29497] syzkaller0: entered promiscuous mode [ 997.940674][T29497] syzkaller0: entered allmulticast mode [ 998.009402][T29507] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5726'. [ 998.299955][T29515] sctp: [Deprecated]: syz.3.5729 (pid 29515) Use of int in maxseg socket option. [ 998.299955][T29515] Use struct sctp_assoc_value instead [ 998.362046][T29515] wireguard0: entered promiscuous mode [ 998.368081][T29515] wireguard0: entered allmulticast mode [ 998.502900][T29524] netlink: 'syz.2.5732': attribute type 1 has an invalid length. [ 998.543806][T29524] 8021q: adding VLAN 0 to HW filter on device bond14 [ 998.577316][T29524] bond14: (slave veth11): Enslaving as an active interface with a down link [ 998.737145][T29535] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5735'. [ 998.776731][T29535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5735'. [ 998.800434][T29535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5735'. [ 998.862616][T29540] syzkaller0: entered promiscuous mode [ 998.875928][T29540] syzkaller0: entered allmulticast mode [ 999.344278][T29552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5741'. [ 999.681248][T29572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.989857][T29581] syzkaller0: entered promiscuous mode [ 1000.010357][T29581] syzkaller0: entered allmulticast mode [ 1000.050905][T29583] FAULT_INJECTION: forcing a failure. [ 1000.050905][T29583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.073711][T29583] CPU: 0 UID: 0 PID: 29583 Comm: syz.0.5748 Not tainted syzkaller #0 PREEMPT(full) [ 1000.073739][T29583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1000.073752][T29583] Call Trace: [ 1000.073760][T29583] [ 1000.073770][T29583] dump_stack_lvl+0xe8/0x150 [ 1000.073810][T29583] should_fail_ex+0x40c/0x560 [ 1000.073840][T29583] _copy_from_user+0x2d/0xb0 [ 1000.073869][T29583] core_sys_select+0x509/0xb40 [ 1000.073893][T29583] ? get_pid_task+0x20/0x1f0 [ 1000.073981][T29583] ? __pfx_core_sys_select+0x10/0x10 [ 1000.074028][T29583] ? __pfx_set_user_sigmask+0x10/0x10 [ 1000.074054][T29583] ? kmem_cache_free+0x182/0x650 [ 1000.074085][T29583] ? fd_install+0x94/0x3d0 [ 1000.074117][T29583] __se_sys_pselect6+0x267/0x320 [ 1000.074147][T29583] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1000.074170][T29583] ? __pfx_ksys_write+0x10/0x10 [ 1000.074204][T29583] ? __x64_sys_pselect6+0x21/0xf0 [ 1000.074226][T29583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.074249][T29583] do_syscall_64+0x174/0x580 [ 1000.074285][T29583] ? trace_irq_disable+0x3b/0x140 [ 1000.074310][T29583] ? clear_bhb_loop+0x40/0x90 [ 1000.074334][T29583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.074354][T29583] RIP: 0033:0x7fa43a39de59 [ 1000.074374][T29583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.074394][T29583] RSP: 002b:00007fa43b281028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1000.074415][T29583] RAX: ffffffffffffffda RBX: 00007fa43a625fa0 RCX: 00007fa43a39de59 [ 1000.074429][T29583] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000040 [ 1000.074442][T29583] RBP: 00007fa43b281090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.074454][T29583] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1000.074467][T29583] R13: 00007fa43a626038 R14: 00007fa43a625fa0 R15: 00007ffc74c8ff68 [ 1000.074499][T29583] [ 1000.657316][T29592] netlink: 'syz.0.5750': attribute type 12 has an invalid length. [ 1000.733821][T29599] __nla_validate_parse: 4 callbacks suppressed [ 1000.733840][T29599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5749'. [ 1000.778943][T29597] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1000.807572][T29592] netlink: 'syz.0.5750': attribute type 1 has an invalid length. [ 1000.817914][T29592] netlink: 'syz.0.5750': attribute type 7 has an invalid length. [ 1000.826785][T29592] netlink: 'syz.0.5750': attribute type 8 has an invalid length. [ 1000.835909][T29592] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5750'. [ 1000.846445][T29592] NCSI netlink: No device for ifindex 1073545264 [ 1001.653197][T29624] syzkaller0: entered promiscuous mode [ 1001.671547][T29624] syzkaller0: entered allmulticast mode [ 1002.004060][T29644] netlink: 'syz.0.5764': attribute type 2 has an invalid length. [ 1002.877453][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.221216][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.234268][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.256556][T29636] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1003.275092][T29636] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1003.295771][T29636] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1003.322648][T29636] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1003.366608][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.382180][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.401827][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.412848][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.425650][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.434879][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.444816][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.454098][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.464853][T29636] wlan0 speed is unknown, defaulting to 1000 [ 1003.566143][T29669] netlink: 'syz.2.5767': attribute type 1 has an invalid length. [ 1003.585412][T29669] netlink: 'syz.2.5767': attribute type 2 has an invalid length. [ 1003.600308][T29669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1003.612890][T29669] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1003.649892][T29669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1003.670380][T23432] wlan0 speed is unknown, defaulting to 1000 [ 1003.676637][T26477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.686039][T26477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.720689][T13731] wlan0 speed is unknown, defaulting to 1000 [ 1003.729359][T13731] syz0: Port: 1 Link ACTIVE [ 1003.834690][T29674] syzkaller0: entered promiscuous mode [ 1003.846287][T29674] syzkaller0: entered allmulticast mode [ 1003.877170][T29674] tipc: Enabled bearer , priority 0 [ 1003.915500][T29674] tipc: Resetting bearer [ 1004.063693][T29673] tipc: Resetting bearer [ 1004.214949][T29673] tipc: Disabling bearer [ 1004.461527][T29700] netlink: 'syz.2.5775': attribute type 2 has an invalid length. [ 1004.509097][T29710] syzkaller0: entered promiscuous mode [ 1004.515263][T29710] syzkaller0: entered allmulticast mode [ 1004.733305][T29713] netlink: 'syz.2.5777': attribute type 1 has an invalid length. [ 1004.761431][T29713] netlink: 'syz.2.5777': attribute type 2 has an invalid length. [ 1005.044005][T29724] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1005.640677][T29744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1005.705722][T29748] netlink: 'syz.2.5785': attribute type 1 has an invalid length. [ 1005.922641][T29755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1005.966588][T29744] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1005.996220][T23434] wlan1 speed is unknown, defaulting to 1000 [ 1006.087800][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1006.124851][T29744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1006.165812][T29748] macvlan5: entered promiscuous mode [ 1006.178918][T29748] macvlan5: entered allmulticast mode [ 1006.186995][T29748] bond15: entered promiscuous mode [ 1006.195998][T29748] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1006.290056][T29748] bond15: left promiscuous mode [ 1006.400330][T29761] syzkaller0: entered promiscuous mode [ 1006.420985][T29761] syzkaller0: entered allmulticast mode [ 1006.755414][T29776] netlink: 'syz.4.5792': attribute type 1 has an invalid length. [ 1006.914500][T29778] bond7: (slave geneve4): making interface the new active one [ 1006.983723][T29778] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1007.013118][T26480] netdevsim netdevsim4 €Â: set [1, 1] type 2 family 0 port 20000 - 0 [ 1007.033067][T26480] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1007.079609][T26480] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1007.092898][T26480] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1007.771945][T29810] geneve1: Caught tx_queue_len zero misconfig [ 1007.915227][T29814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1007.987109][T29819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1008.083040][T29821] syzkaller0: entered promiscuous mode [ 1008.089661][T29821] syzkaller0: entered allmulticast mode [ 1008.139708][T29827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5803'. [ 1008.217897][T29829] netlink: 'syz.0.5804': attribute type 1 has an invalid length. [ 1008.337309][T26477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.350337][T26477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.362375][T26477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.374429][T26477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.446018][T29837] xt_l2tp: v2 doesn't support IP mode [ 1008.628279][T29833] nbd0: detected capacity change from 0 to 63 [ 1008.667863][T29836] block nbd0: NBD_DISCONNECT [ 1008.695224][T29842] netlink: 'syz.4.5808': attribute type 8 has an invalid length. [ 1008.711892][T29836] block nbd0: Disconnected due to user request. [ 1008.720187][T29842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1008.743690][T29836] block nbd0: shutting down sockets [ 1008.771737][ C1] blk_print_req_error: 110 callbacks suppressed [ 1008.771762][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.787332][ C1] buffer_io_error: 138 callbacks suppressed [ 1008.787350][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1008.833448][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.842642][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1008.856973][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.866183][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1008.874007][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.883178][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1008.891436][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1008.902319][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1008.910253][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1008.918353][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1008.926199][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1008.934695][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1008.944791][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1008.952735][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1008.965793][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1008.975614][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1008.986067][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1008.995985][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1009.006526][T29785] ldm_validate_partition_table(): Disk read failed. [ 1009.019306][T29785] Dev nbd0: unable to read RDB block 0 [ 1009.040099][T29785] nbd0: unable to read partition table [ 1009.076329][T29785] ldm_validate_partition_table(): Disk read failed. [ 1009.099787][T29785] Dev nbd0: unable to read RDB block 0 [ 1009.107843][T29785] nbd0: unable to read partition table [ 1009.119447][T29847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5809'. [ 1009.154524][T29849] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1009.182782][T29849] netlink: 'syz.2.5810': attribute type 8 has an invalid length. [ 1009.200189][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1009.242446][T29851] netlink: 'syz.2.5810': attribute type 8 has an invalid length. [ 1009.311009][T29851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1009.482094][T29863] syzkaller0: entered promiscuous mode [ 1009.491106][T29863] syzkaller0: entered allmulticast mode [ 1009.540979][T29865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1009.752222][T29871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5818'. [ 1009.884310][T29878] netlink: 'syz.4.5820': attribute type 2 has an invalid length. [ 1010.375111][T29911] lo speed is unknown, defaulting to 1000 [ 1010.657070][T29924] syzkaller0: entered promiscuous mode [ 1010.666851][T29924] syzkaller0: entered allmulticast mode [ 1010.833052][T29911] lo speed is unknown, defaulting to 1000 [ 1010.840960][T29911] wlan1 speed is unknown, defaulting to 1000 [ 1011.151545][T29911] wlan0 speed is unknown, defaulting to 1000 [ 1011.182234][T29935] netlink: 'syz.2.5833': attribute type 21 has an invalid length. [ 1011.201923][T29935] netlink: 'syz.2.5833': attribute type 20 has an invalid length. [ 1011.616753][T29947] __nla_validate_parse: 2 callbacks suppressed [ 1011.616772][T29947] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5837'. [ 1011.634836][T29947] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5837'. [ 1011.946066][T29949] syzkaller0: entered promiscuous mode [ 1011.953886][T29949] syzkaller0: entered allmulticast mode [ 1018.351502][T30000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5847'. [ 1018.602177][T30019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5852'. [ 1018.992506][T30018] syzkaller0: entered promiscuous mode [ 1018.998690][T30018] syzkaller0: entered allmulticast mode [ 1019.115129][T30047] netlink: 'syz.1.5855': attribute type 1 has an invalid length. [ 1019.153520][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5856'. [ 1019.295239][T30054] syzkaller0: entered promiscuous mode [ 1019.301804][T30054] syzkaller0: entered allmulticast mode [ 1019.669013][T30069] syzkaller0: entered promiscuous mode [ 1019.674715][T30069] syzkaller0: entered allmulticast mode [ 1019.966716][T30076] block nbd0: not configured, cannot reconfigure [ 1020.042897][T30081] xt_TCPMSS: Only works on TCP SYN packets [ 1020.129595][T30089] netlink: 'syz.1.5871': attribute type 4 has an invalid length. [ 1020.151444][T30087] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5872'. [ 1020.244957][T30098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5874'. [ 1020.338788][T30098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1020.383033][T30098] netlink: 'syz.4.5874': attribute type 10 has an invalid length. [ 1020.407019][T30103] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1020.416870][T30098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5874'. [ 1020.431175][T30098] dummy0: entered promiscuous mode [ 1020.444229][T30098] bond8: (slave dummy0): Releasing backup interface [ 1020.742774][T30121] syzkaller0: entered promiscuous mode [ 1020.759025][T30121] syzkaller0: entered allmulticast mode [ 1020.822124][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5864'. [ 1020.841072][T30104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5864'. [ 1021.267189][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1021.296180][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1021.308240][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1021.325069][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1021.333159][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1021.589935][T30157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1021.694676][T30165] x_tables: duplicate underflow at hook 1 [ 1022.276653][T30144] lo speed is unknown, defaulting to 1000 [ 1022.291485][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1022.639312][T30184] lo speed is unknown, defaulting to 1000 [ 1022.645841][T30214] xt_HMARK: spi-set and port-set can't be combined [ 1022.655226][T30144] lo speed is unknown, defaulting to 1000 [ 1022.675068][T30214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1022.735545][T30144] wlan1 speed is unknown, defaulting to 1000 [ 1023.101679][T30184] lo speed is unknown, defaulting to 1000 [ 1023.140001][T30185] lo speed is unknown, defaulting to 1000 [ 1023.353714][T30144] wlan0 speed is unknown, defaulting to 1000 [ 1023.354216][T30184] wlan1 speed is unknown, defaulting to 1000 [ 1023.470476][ T50] Bluetooth: hci0: command tx timeout [ 1023.511264][T30240] pim6reg: entered allmulticast mode [ 1023.716114][T30185] lo speed is unknown, defaulting to 1000 [ 1023.751743][T30185] wlan1 speed is unknown, defaulting to 1000 [ 1023.762527][T30184] wlan0 speed is unknown, defaulting to 1000 [ 1024.210084][T30261] netlink: 'syz.0.5912': attribute type 21 has an invalid length. [ 1024.237939][T30261] __nla_validate_parse: 1 callbacks suppressed [ 1024.237959][T30261] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1024.346846][T30185] wlan0 speed is unknown, defaulting to 1000 [ 1024.346952][T30261] netlink: 'syz.0.5912': attribute type 5 has an invalid length. [ 1024.414157][T30261] netlink: 'syz.0.5912': attribute type 6 has an invalid length. [ 1024.449930][T30261] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1024.509881][T30144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.547883][T30144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.570934][T30144] bridge_slave_0: entered allmulticast mode [ 1024.584864][T30144] bridge_slave_0: entered promiscuous mode [ 1024.644341][T30271] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5913'. [ 1024.702199][T30144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.717851][T30144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.726574][T30144] bridge_slave_1: entered allmulticast mode [ 1024.746719][T30144] bridge_slave_1: entered promiscuous mode [ 1024.994928][T30144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.019690][T30144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.176757][T30294] netlink: 'syz.2.5921': attribute type 1 has an invalid length. [ 1025.441553][T30295] gretap3: entered allmulticast mode [ 1025.477245][T30144] team0: Port device team_slave_0 added [ 1025.514106][T30144] team0: Port device team_slave_1 added [ 1025.533391][ T50] Bluetooth: hci0: command tx timeout [ 1025.748974][T30144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.780960][T30144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.839228][T30144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.894089][T30144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.901917][T30144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.931367][T30144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.944006][T30321] syzkaller0: entered promiscuous mode [ 1025.951887][T30321] syzkaller0: entered allmulticast mode [ 1026.001580][T30324] openvswitch: netlink: Message has 20 unknown bytes. [ 1026.010261][T30144] hsr_slave_0: entered promiscuous mode [ 1026.017862][T30144] hsr_slave_1: entered promiscuous mode [ 1026.033268][T30144] debugfs: 'hsr0' already exists in 'hsr' [ 1026.048553][T30144] Cannot create hsr debugfs directory [ 1026.285026][T30338] netlink: 'syz.4.5931': attribute type 1 has an invalid length. [ 1026.349326][T30338] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1026.580252][T30144] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.596028][T30144] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.677979][T30342] lo speed is unknown, defaulting to 1000 [ 1026.746004][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5934'. [ 1026.864228][T30144] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.894249][T30144] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.093842][T30144] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.121035][T30144] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.239767][T30342] lo speed is unknown, defaulting to 1000 [ 1027.247898][T30342] wlan1 speed is unknown, defaulting to 1000 [ 1027.302165][T30366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1027.332860][T30366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1027.512042][T30342] wlan0 speed is unknown, defaulting to 1000 [ 1027.609436][ T50] Bluetooth: hci0: command tx timeout [ 1028.351102][T30144] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.361886][T30144] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.098048][T30390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1029.337749][T30144] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1029.362852][T30144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.372192][T30144] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1029.398054][T30144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.413269][T30144] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1029.435688][T30144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.453154][T30144] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1029.476882][T30144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.693814][ T50] Bluetooth: hci0: command tx timeout [ 1029.727610][T30144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.799548][T30144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.867370][T26479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.874615][T26479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.891092][T26477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.898348][T26477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.217985][T30437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1030.236343][T30437] sctp: [Deprecated]: syz.2.5954 (pid 30437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1030.236343][T30437] Use struct sctp_sack_info instead [ 1030.327424][T30450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5956'. [ 1030.549611][T30461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.670056][T30464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1030.961594][T30144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.141330][T30144] veth0_vlan: entered promiscuous mode [ 1031.156683][T30144] veth1_vlan: entered promiscuous mode [ 1031.164819][T30485] syzkaller0: entered promiscuous mode [ 1031.171719][T30485] syzkaller0: entered allmulticast mode [ 1031.332573][T30144] veth0_macvtap: entered promiscuous mode [ 1031.358865][T30144] veth1_macvtap: entered promiscuous mode [ 1031.533874][T30144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.560867][T30496] syzkaller0: mtu greater than device maximum [ 1031.585993][T30144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.633362][T12383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.666561][T12383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.707542][T12383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.727359][T12383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.047048][T26477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.058742][T26477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.556959][T26477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.580712][T26477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.725122][T30514] lo speed is unknown, defaulting to 1000 [ 1032.757269][T30509] netlink: 'syz.0.5972': attribute type 1 has an invalid length. [ 1032.785772][T30509] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.5972'. [ 1033.197673][T30514] lo speed is unknown, defaulting to 1000 [ 1033.226908][T30514] wlan1 speed is unknown, defaulting to 1000 [ 1033.250704][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1033.273132][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1033.286327][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1033.304829][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1033.321422][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1033.342612][T30539] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1033.354612][T30539] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1034.036165][T30514] wlan0 speed is unknown, defaulting to 1000 [ 1034.088812][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1034.304443][T26484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.324512][T26484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1034.373747][T30555] bridge10: entered promiscuous mode [ 1034.379435][T30555] bridge10: entered allmulticast mode [ 1034.545090][T30568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1034.571548][T30562] netlink: 'syz.2.5984': attribute type 4 has an invalid length. [ 1034.654462][T26484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.664957][T26484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1034.772878][T30538] lo speed is unknown, defaulting to 1000 [ 1034.930737][T26484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.941577][T26484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1035.115873][T26484] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.135465][T26484] netdevsim netdevsim4 €Â (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1035.203649][T30538] lo speed is unknown, defaulting to 1000 [ 1035.263016][T30538] wlan1 speed is unknown, defaulting to 1000 [ 1035.268233][T30580] netlink: 'syz.2.5988': attribute type 1 has an invalid length. [ 1035.450646][ T5621] Bluetooth: hci5: command tx timeout [ 1035.502740][T30582] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 1035.970085][T30538] wlan0 speed is unknown, defaulting to 1000 [ 1036.263443][T30588] syzkaller0: entered promiscuous mode [ 1036.271179][T30588] syzkaller0: entered allmulticast mode [ 1037.528874][ T5621] Bluetooth: hci5: command tx timeout [ 1039.615876][ T5621] Bluetooth: hci5: command tx timeout [ 1041.689584][ T5621] Bluetooth: hci5: command tx timeout [ 1042.195709][T26484] dvmrp0: left allmulticast mode [ 1042.209638][T26484] batman_adv: batadv0: Interface deactivated: gretap1 [ 1042.733550][T26484] batman_adv: batadv0: Removing interface: gretap1 [ 1042.781094][T26484] bond7 (unregistering): (slave geneve4): Releasing active interface [ 1042.915673][T26484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.924973][T26484] bond_slave_0: left allmulticast mode [ 1042.932945][T26484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.943750][T26484] bond_slave_1: left allmulticast mode [ 1042.953930][T26484] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 1042.963875][T26484] mac80211_hwsim hwsim27 wlan0: left allmulticast mode [ 1042.982184][T26484] bond0 (unregistering): Released all slaves [ 1042.993477][T26484] bond1 (unregistering): Released all slaves [ 1043.007292][T26484] bond2 (unregistering): Released all slaves [ 1043.021929][T26484] bond3 (unregistering): Released all slaves [ 1043.037062][T26484] bond4 (unregistering): Released all slaves [ 1043.054177][T26484] bond5 (unregistering): Released all slaves [ 1043.076660][T26484] bond6 (unregistering): Released all slaves [ 1043.105050][T26484] bond7 (unregistering): Released all slaves [ 1043.121350][T26484] bond8 (unregistering): Released all slaves [ 1043.135751][T26484] bond9 (unregistering): Released all slaves [ 1043.166430][T30603] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1043.182934][T30603] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1043.384216][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1043.499495][T30615] syzkaller0: entered promiscuous mode [ 1043.534971][T30615] syzkaller0: entered allmulticast mode [ 1043.707990][T30656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6000'. [ 1043.876059][T26484] : left promiscuous mode [ 1044.142360][T30677] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1044.201858][T26484] tipc: Disabling bearer [ 1044.210758][T26484] tipc: Left network mode [ 1044.286388][T30674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1044.314365][T30685] sctp: [Deprecated]: syz.2.6004 (pid 30685) Use of int in maxseg socket option. [ 1044.314365][T30685] Use struct sctp_assoc_value instead [ 1044.330588][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1044.647022][T30693] netlink: 'syz.0.6006': attribute type 1 has an invalid length. [ 1044.764861][T30699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1044.896337][T30693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1044.943729][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1044.954657][T30699] bond5: entered allmulticast mode [ 1044.974334][T30692] mac80211_hwsim hwsim34 wlan0: left allmulticast mode [ 1044.981832][T30692] vlan2: left allmulticast mode [ 1044.986928][T30692] hsr0: left allmulticast mode [ 1044.992212][T30692] hsr_slave_0: left allmulticast mode [ 1045.040256][T30692] macvtap1: left allmulticast mode [ 1045.115808][T30692] ip6gretap0: left allmulticast mode [ 1045.345858][T30692] macvlan1: left allmulticast mode [ 1045.623650][T30692] wireguard0: left allmulticast mode [ 1045.659638][T26471] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.670522][T26471] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.772957][T26471] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.782352][T26471] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.274813][T30538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.283784][T30538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.291802][T30538] bridge_slave_0: entered allmulticast mode [ 1046.303585][T30538] bridge_slave_0: entered promiscuous mode [ 1046.316223][T30538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.324657][T30538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.333330][T30538] bridge_slave_1: entered allmulticast mode [ 1046.341718][T30538] bridge_slave_1: entered promiscuous mode [ 1046.505278][T30538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.561618][T30538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.809347][T26471] smc: removing ib device syz1 [ 1046.895685][T30782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1046.896348][T23432] wlan1 speed is unknown, defaulting to 1000 [ 1047.249706][T30775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.268045][T26471] smbdirect: ib_dev[syz1] removed [ 1047.269900][T30775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.321031][T30775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.385664][T30775] veth1_to_batadv: left promiscuous mode [ 1047.402689][T30775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1047.415711][T30775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1047.434418][T30775] veth1_vlan: left promiscuous mode [ 1047.441776][T30775] veth0_vlan: left promiscuous mode [ 1047.452521][T30775] veth0_vlan: entered promiscuous mode [ 1047.463063][T30775] veth1_vlan: entered promiscuous mode [ 1047.477482][T30775] veth1_macvtap: left promiscuous mode [ 1047.486118][T30775] veth0_macvtap: entered promiscuous mode [ 1047.493747][T30775] veth1_macvtap: entered promiscuous mode [ 1047.505811][T30775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.515054][T30775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1047.526147][T30775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.540216][T30775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.548510][T30775] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 1047.560241][T30775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1047.574414][T30775] veth1_to_batadv: entered promiscuous mode [ 1047.589079][T30775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1047.695754][T30775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1047.705102][T30775] hsr1: left promiscuous mode [ 1047.712520][T30775] macsec4: left promiscuous mode [ 1047.721357][T30775] bond3: left promiscuous mode [ 1047.726690][T30775] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1047.737853][T30775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1047.753910][T30775] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1047.765715][T30775] vlan2: left promiscuous mode [ 1047.773228][T30775] hsr0: left promiscuous mode [ 1047.783481][T30775] gretap1: left promiscuous mode [ 1047.812252][T30538] team0: Port device team_slave_0 added [ 1047.830691][T30783] syzkaller0: entered promiscuous mode [ 1047.836487][T30783] syzkaller0: entered allmulticast mode [ 1047.864582][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1047.946781][T26474] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 54014 - 0 [ 1047.957570][T26474] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 54014 - 0 [ 1048.061237][T30800] tipc: MTU too low for tipc bearer [ 1048.069951][T30538] team0: Port device team_slave_1 added [ 1048.196104][T26474] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 54014 - 0 [ 1048.367304][T30812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6029'. [ 1048.376747][T30812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6029'. [ 1048.428285][T30813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6029'. [ 1048.457205][T30813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6029'. [ 1048.551601][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6031'. [ 1048.669519][T23432] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1048.876247][T30538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.884362][T30538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.924137][T30538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.936367][T26474] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 54014 - 0 [ 1049.060350][T30538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.089844][T30538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.196446][T30538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.450278][T23432] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1049.463310][T30832] netlink: 'syz.1.6035': attribute type 28 has an invalid length. [ 1049.547372][T26480] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1049.860706][T30832] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1050.183878][T30538] hsr_slave_0: entered promiscuous mode [ 1050.209779][T30538] hsr_slave_1: entered promiscuous mode [ 1050.231825][T30538] debugfs: 'hsr0' already exists in 'hsr' [ 1050.237952][T30538] Cannot create hsr debugfs directory [ 1050.331626][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1050.796760][T26480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1050.820914][T30880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1050.856466][T30880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1050.909143][T30882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1050.919901][T30882] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1052.104867][T30875] veth0_macvtap: left promiscuous mode [ 1052.796731][T30875] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1052.939380][T30875] bond5: left allmulticast mode [ 1053.047280][T26479] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.073972][T26479] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 54014 - 0 [ 1053.083938][T26479] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.085485][T13731] wlan0 speed is unknown, defaulting to 1000 [ 1053.093295][T26479] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 54014 - 0 [ 1053.100360][T26479] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.100396][T26479] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 54014 - 0 [ 1053.100573][T26479] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.100599][T26479] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 54014 - 0 [ 1053.151584][T13731] syz0: Port: 1 Link DOWN [ 1053.254463][T30930] netlink: 'syz.1.6046': attribute type 33 has an invalid length. [ 1053.439020][T30943] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1053.484678][T30942] xt_hashlimit: size too large, truncated to 1048576 [ 1053.737411][T30951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1054.027050][T30961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6051'. [ 1054.153905][T26484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.171914][T26484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.233117][T30969] netlink: 'syz.1.6053': attribute type 1 has an invalid length. [ 1054.246909][T26484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.269911][T30969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1054.270876][T26484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.313274][T26484] batman_adv: batadv0: Interface deactivated: vlan3 [ 1054.338271][T26484] batman_adv: batadv0: Removing interface: vlan3 [ 1054.387697][T26484] veth0_macvtap: left promiscuous mode [ 1054.415517][T26484] veth1_vlan: left promiscuous mode [ 1054.541580][T30991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6056'. [ 1054.553044][T30991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6056'. [ 1054.594057][T30995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6056'. [ 1054.657676][T30994] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1055.747159][T26484] team0 (unregistering): Port device team_slave_1 removed [ 1055.777367][T26484] team0 (unregistering): Port device team_slave_0 removed [ 1056.243268][T31045] netlink: 'syz.2.6060': attribute type 2 has an invalid length. [ 1056.257877][T31045] netlink: 'syz.2.6060': attribute type 1 has an invalid length. [ 1056.267903][T31045] __nla_validate_parse: 1 callbacks suppressed [ 1056.267999][T31045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6060'. [ 1056.285262][T31045] nbd: illegal input index -120127480 [ 1056.522390][T31060] syzkaller0: entered promiscuous mode [ 1056.538673][T31060] syzkaller0: entered allmulticast mode [ 1056.672906][T31065] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6064'. [ 1056.789335][T31076] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6064'. [ 1056.881898][T31076] 0ªî{X¹¦: renamed from gretap0 [ 1056.893938][T31076] 0ªî{X¹¦: entered allmulticast mode [ 1056.932508][T31076] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1057.013375][T31081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6068'. [ 1057.119863][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1057.142763][T31086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1057.194349][T31087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1057.209109][T31087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1057.821150][T26484] IPVS: stop unused estimator thread 0... [ 1057.846690][T31112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6077'. [ 1057.916150][T31117] FAULT_INJECTION: forcing a failure. [ 1057.916150][T31117] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.975291][T31117] CPU: 1 UID: 0 PID: 31117 Comm: syz.0.6078 Not tainted syzkaller #0 PREEMPT(full) [ 1057.975319][T31117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1057.975330][T31117] Call Trace: [ 1057.975339][T31117] [ 1057.975348][T31117] dump_stack_lvl+0xe8/0x150 [ 1057.975384][T31117] should_fail_ex+0x40c/0x560 [ 1057.975412][T31117] should_failslab+0xa8/0x100 [ 1057.975450][T31117] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1057.975475][T31117] ? __nf_conntrack_alloc+0x81/0x3e0 [ 1057.975623][T31117] ? __nf_conntrack_alloc+0x81/0x3e0 [ 1057.975655][T31117] __nf_conntrack_alloc+0x81/0x3e0 [ 1057.975687][T31117] init_conntrack+0x170/0x1080 [ 1057.975751][T31117] ? __pfx_init_conntrack+0x10/0x10 [ 1057.975786][T31117] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 1057.975810][T31117] ? sock_alloc_send_pskb+0x896/0x990 [ 1057.975832][T31117] ? is_bpf_text_address+0x292/0x2b0 [ 1057.975859][T31117] ? __siphash_unaligned+0x25c/0x3e0 [ 1057.975928][T31117] nf_conntrack_in+0xbc3/0x15a0 [ 1057.975976][T31117] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1057.976011][T31117] ? ipt_do_table+0x2b9/0x15d0 [ 1057.976080][T31117] ? nf_hook+0xa1/0x3a0 [ 1057.976138][T31117] ? nf_hook+0xa1/0x3a0 [ 1057.976159][T31117] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 1057.976212][T31117] ? ipv4_conntrack_local+0x126/0x210 [ 1057.976234][T31117] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 1057.976261][T31117] nf_hook_slow+0xc5/0x220 [ 1057.976318][T31117] ? __pfx_dst_output+0x10/0x10 [ 1057.976339][T31117] nf_hook+0x22a/0x3a0 [ 1057.976363][T31117] ? nf_hook+0xa1/0x3a0 [ 1057.976382][T31117] ? __pfx_nf_hook+0x10/0x10 [ 1057.976405][T31117] ? __pfx_dst_output+0x10/0x10 [ 1057.976439][T31117] ? __ip_local_out+0x152/0x6a0 [ 1057.976463][T31117] __ip_local_out+0x558/0x6a0 [ 1057.976483][T31117] ? __pfx_dst_output+0x10/0x10 [ 1057.976508][T31117] ip_local_out+0x2a/0x190 [ 1057.976531][T31117] ip_send_skb+0x45/0xc0 [ 1057.976558][T31117] udp_send_skb+0x7f7/0xfb0 [ 1057.976662][T31117] udp_sendmsg+0x1971/0x2140 [ 1057.976707][T31117] ? __pfx_udp_sendmsg+0x10/0x10 [ 1057.976738][T31117] ? tomoyo_supervisor+0x4d2/0x1560 [ 1057.976821][T31117] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.976847][T31117] ? get_random_u32+0x13a/0x8b0 [ 1057.976941][T31117] ? get_random_u32+0x4ce/0x8b0 [ 1057.976967][T31117] udpv6_sendmsg+0x915/0x2610 [ 1057.977007][T31117] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1057.977027][T31117] ? udp_lib_get_port+0x177b/0x1c60 [ 1057.977052][T31117] ? udp_lib_get_port+0x177b/0x1c60 [ 1057.977098][T31117] ? inet_send_prepare+0x1b4/0x260 [ 1057.977159][T31117] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.977185][T31117] ? inet_send_prepare+0x1b4/0x260 [ 1057.977209][T31117] ? __local_bh_enable_ip+0xd0/0x130 [ 1057.977233][T31117] ? inet_send_prepare+0x1b4/0x260 [ 1057.977261][T31117] ? inet6_sendmsg+0xe4/0x120 [ 1057.977280][T31117] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1057.977298][T31117] sock_sendmsg_nosec+0x90/0x180 [ 1057.977324][T31117] ____sys_sendmsg+0x54e/0x850 [ 1057.977360][T31117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1057.977399][T31117] ? import_iovec+0x73/0xa0 [ 1057.977439][T31117] ___sys_sendmsg+0x2a5/0x360 [ 1057.977467][T31117] ? __lock_acquire+0x683/0x2cf0 [ 1057.977496][T31117] ? __pfx____sys_sendmsg+0x10/0x10 [ 1057.977559][T31117] ? __fget_files+0x2a/0x420 [ 1057.977581][T31117] ? __fget_files+0x3a2/0x420 [ 1057.977610][T31117] __x64_sys_sendmsg+0x1b1/0x290 [ 1057.977637][T31117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1057.977677][T31117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.977695][T31117] do_syscall_64+0x174/0x580 [ 1057.977720][T31117] ? trace_irq_disable+0x3b/0x140 [ 1057.977753][T31117] ? clear_bhb_loop+0x40/0x90 [ 1057.977777][T31117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.977795][T31117] RIP: 0033:0x7fa43a39de59 [ 1057.977814][T31117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.977831][T31117] RSP: 002b:00007fa43b281028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1057.977850][T31117] RAX: ffffffffffffffda RBX: 00007fa43a625fa0 RCX: 00007fa43a39de59 [ 1057.977864][T31117] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1057.977876][T31117] RBP: 00007fa43b281090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.977892][T31117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.977901][T31117] R13: 00007fa43a626038 R14: 00007fa43a625fa0 R15: 00007ffc74c8ff68 [ 1057.977928][T31117] [ 1058.484264][T30538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1058.604472][T30538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1058.614615][T30538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1058.631412][T30538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1058.641122][T30538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1058.683303][T30538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1058.836329][T31114] syzkaller0: entered promiscuous mode [ 1058.845647][T31114] syzkaller0: entered allmulticast mode [ 1058.862338][T30538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1058.879140][T30538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1059.232340][T30538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.253269][T31163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6084'. [ 1059.274944][T30538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.654380][T26480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.661744][T26480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.776540][T31153] lo speed is unknown, defaulting to 1000 [ 1060.079699][T31188] syzkaller0: entered promiscuous mode [ 1060.085275][T31188] syzkaller0: entered allmulticast mode [ 1060.119515][T26484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.126730][T26484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.846767][T31153] lo speed is unknown, defaulting to 1000 [ 1066.859735][T31153] wlan0 speed is unknown, defaulting to 1000 [ 1066.988537][T31247] __nla_validate_parse: 5 callbacks suppressed [ 1066.988558][T31247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6093'. [ 1067.021855][T31250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6094'. [ 1067.034199][T31250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6094'. [ 1067.083959][ T5621] block nbd0: Receive control failed (result -1) [ 1067.812300][T31279] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1067.856631][T31279] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1068.090910][T31284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6098'. [ 1068.339410][T30538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.386745][T31298] netlink: 'syz.0.6103': attribute type 160 has an invalid length. [ 1068.396396][T31298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6103'. [ 1068.401817][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6101'. [ 1068.417978][T31299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1068.477215][T31308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1068.710305][T31314] bridge0: entered allmulticast mode [ 1068.752619][T31299] bridge_slave_0: left allmulticast mode [ 1068.760121][T31299] bridge_slave_0: left promiscuous mode [ 1068.766472][T31299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.965177][T31329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.022104][T31329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.105808][T31333] erspan0: entered promiscuous mode [ 1069.205734][T30538] veth0_vlan: entered promiscuous mode [ 1069.243229][T30538] veth1_vlan: entered promiscuous mode [ 1069.296354][T31339] netlink: 'syz.1.6111': attribute type 1 has an invalid length. [ 1069.330883][T30538] veth0_macvtap: entered promiscuous mode [ 1069.436524][T30538] veth1_macvtap: entered promiscuous mode [ 1069.481034][T31345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1069.507383][T30538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.553723][T30538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.586355][T12383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.615643][T12383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.643860][T12383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.731563][T12383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.984417][T31356] netlink: 'syz.2.6115': attribute type 10 has an invalid length. [ 1069.991094][T26496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.029712][T26496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.063720][T31356] veth0_to_bond: entered promiscuous mode [ 1070.206070][T26479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.225189][T26479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.269739][T31365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1070.335730][ T30] audit: type=1804 audit(1784241151.038:16): pid=31365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6118" name="/newroot/47/cgroup.controllers" dev="tmpfs" ino=262 res=1 errno=0 [ 1070.380667][ T30] audit: type=1800 audit(1784241151.038:17): pid=31365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6118" name="cgroup.controllers" dev="tmpfs" ino=262 res=0 errno=0 [ 1070.661647][T31378] xt_hashlimit: size too large, truncated to 1048576 [ 1070.812624][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1070.836135][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1070.846270][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1070.864421][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1070.881756][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1071.630307][T31384] lo speed is unknown, defaulting to 1000 [ 1071.749569][T31397] netlink: 'syz.4.6124': attribute type 13 has an invalid length. [ 1072.137386][T31410] __nla_validate_parse: 13 callbacks suppressed [ 1072.137406][T31410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6127'. [ 1072.181290][T31384] lo speed is unknown, defaulting to 1000 [ 1072.211602][T31384] wlan0 speed is unknown, defaulting to 1000 [ 1072.826261][T31448] IPv6: NLM_F_CREATE should be specified when creating new route [ 1072.885280][T31453] netlink: 'syz.4.6138': attribute type 1 has an invalid length. [ 1072.887841][T31384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.897889][T31453] sctp: [Deprecated]: syz.4.6138 (pid 31453) Use of int in maxseg socket option. [ 1072.897889][T31453] Use struct sctp_assoc_value instead [ 1072.911920][T31384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.948886][T31384] bridge_slave_0: entered allmulticast mode [ 1072.956030][T31384] bridge_slave_0: entered promiscuous mode [ 1072.970782][T31384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.985794][T31384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.999887][T31384] bridge_slave_1: entered allmulticast mode [ 1073.012469][T31384] bridge_slave_1: entered promiscuous mode [ 1073.049017][ T5621] Bluetooth: hci1: command tx timeout [ 1073.087299][T31384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.108061][T31384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.171911][T31384] team0: Port device team_slave_0 added [ 1073.186918][T31384] team0: Port device team_slave_1 added [ 1073.257638][T31384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.270605][T31384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.303514][T31384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.316320][T31384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.323874][T31384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.357208][T31384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.429832][T31384] hsr_slave_0: entered promiscuous mode [ 1073.443707][T31384] hsr_slave_1: entered promiscuous mode [ 1073.451006][T31384] debugfs: 'hsr0' already exists in 'hsr' [ 1073.456889][T31384] Cannot create hsr debugfs directory [ 1074.171861][T31472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6144'. [ 1074.284384][T31477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6146'. [ 1074.392374][T31480] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6146'. [ 1074.669009][T31495] syzkaller0: entered promiscuous mode [ 1074.674701][T31495] syzkaller0: entered allmulticast mode [ 1074.837761][T31505] netlink: 'syz.3.6152': attribute type 1 has an invalid length. [ 1075.000564][T31505] bond17: entered promiscuous mode [ 1075.006541][T31505] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1075.019970][T31505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1075.039828][T31511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6155'. [ 1075.144440][ T5621] Bluetooth: hci1: command tx timeout [ 1075.493534][T31530] 0ªî{X¹¦: left allmulticast mode [ 1075.773198][T31545] tipc: Enabled bearer , priority 0 [ 1075.796296][T31384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1075.827951][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.844546][T31384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1075.866530][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.876565][T31384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.902356][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.938982][T31546] syzkaller0: entered promiscuous mode [ 1075.947072][T31546] syzkaller0: entered allmulticast mode [ 1075.956297][T31384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1075.974820][T31384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.983825][T31545] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1076.362287][T31384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.417262][T31546] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1076.442960][T31574] syzkaller0: entered promiscuous mode [ 1076.449349][T31574] syzkaller0: entered allmulticast mode [ 1076.460900][T31575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6168'. [ 1076.471303][T31574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6168'. [ 1076.482889][T31384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.538777][T26471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.546001][T26471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.617671][T31545] lo speed is unknown, defaulting to 1000 [ 1076.629551][T31544] tipc: Resetting bearer [ 1076.777976][T31544] tipc: Disabling bearer [ 1076.801092][T31589] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1076.840646][T26479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.847799][T26479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.086392][T31598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6176'. [ 1077.156241][T31598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1077.180080][T31604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1077.187404][T31604] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1077.204788][T31605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 1077.214623][ T5621] Bluetooth: hci1: command tx timeout [ 1077.221911][T31604] bond1: (slave vti0): Error -95 calling set_mac_address [ 1077.263809][T31598] bond1: (slave dummy0): Error -99 calling set_mac_address [ 1077.432649][T31613] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6178'. [ 1077.687704][T31384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.837734][T31384] veth0_vlan: entered promiscuous mode [ 1077.885163][T31629] can: request_module (can-proto-0) failed. [ 1077.895455][T31384] veth1_vlan: entered promiscuous mode [ 1077.976274][T31384] veth0_macvtap: entered promiscuous mode [ 1077.996760][T31384] veth1_macvtap: entered promiscuous mode [ 1078.039765][T31384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.071241][T31637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1078.074127][T31384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.084485][T31637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1078.113032][T26484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.136613][T26484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.149591][T26484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.151890][T31638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1078.161538][T26484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.182804][T31638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1078.190036][T31613] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1078.509338][T31647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1078.556862][T31642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.564350][T31642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.733591][T31642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.752878][T31642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.924422][T31545] lo speed is unknown, defaulting to 1000 [ 1078.944101][T26480] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.964235][T26480] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.978900][T26471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.987712][T26471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.020393][T26480] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.043378][T26480] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.094350][T26496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.117457][T26496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.120287][T31545] wlan0 speed is unknown, defaulting to 1000 [ 1079.289032][ T5621] Bluetooth: hci1: command tx timeout [ 1079.321332][T31658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.329118][T31658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.471836][T31658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.589941][T31658] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1079.685965][T31661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6191'. [ 1079.721748][T26480] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.731261][T26480] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.748005][T31661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6191'. [ 1079.761840][T26480] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.771300][T26480] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.838201][T26480] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.849127][T26480] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.867606][T26480] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.880534][T26480] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.986622][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6194'. [ 1080.159107][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1080.187121][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1080.204988][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1080.223751][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1080.232340][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1080.266866][T31670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1080.603551][T31690] Bluetooth: MGMT ver 1.23 [ 1080.609689][T31690] netlink: 'syz.4.6196': attribute type 3 has an invalid length. [ 1080.885422][T31679] lo speed is unknown, defaulting to 1000 [ 1081.358408][T31679] lo speed is unknown, defaulting to 1000 [ 1081.365837][T31679] wlan0 speed is unknown, defaulting to 1000 [ 1081.450201][T31722] lo speed is unknown, defaulting to 1000 [ 1081.573908][T31727] IPVS: Scheduler module ip_vs_sip not found [ 1081.934211][T31722] lo speed is unknown, defaulting to 1000 [ 1081.977441][T31722] wlan0 speed is unknown, defaulting to 1000 [ 1082.118023][T31679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.127459][T31679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.136398][T31679] bridge_slave_0: entered allmulticast mode [ 1082.144064][T31679] bridge_slave_0: entered promiscuous mode [ 1082.206117][T31679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.231728][T31679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.243391][T31755] __nla_validate_parse: 10 callbacks suppressed [ 1082.243429][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1082.265179][T31679] bridge_slave_1: entered allmulticast mode [ 1082.283632][T31679] bridge_slave_1: entered promiscuous mode [ 1082.409027][ T5621] Bluetooth: hci3: command tx timeout [ 1082.495460][T31679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.539164][T31679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.617694][T31679] team0: Port device team_slave_0 added [ 1082.627818][T31679] team0: Port device team_slave_1 added [ 1082.702461][T31679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.710472][T31679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.744891][T31679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.760206][T31679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.779440][T31679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.807822][T31679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.877684][T31679] hsr_slave_0: entered promiscuous mode [ 1082.886449][T31679] hsr_slave_1: entered promiscuous mode [ 1082.894859][T31679] debugfs: 'hsr0' already exists in 'hsr' [ 1082.903692][T31679] Cannot create hsr debugfs directory [ 1083.033747][T31767] lo speed is unknown, defaulting to 1000 [ 1083.514338][T31777] netlink: 'syz.2.6214': attribute type 26 has an invalid length. [ 1083.565550][T31781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1083.966017][T31767] lo speed is unknown, defaulting to 1000 [ 1083.975086][T31767] wlan0 speed is unknown, defaulting to 1000 [ 1084.032377][T31679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.498882][ T5621] Bluetooth: hci3: command tx timeout [ 1084.561254][T31795] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1084.587474][T31679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.622472][T31799] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1084.887474][T31798] tipc: Started in network mode [ 1084.899891][T31798] tipc: Node identity 6e07a91830af, cluster identity 4711 [ 1084.919254][T31798] tipc: Enabled bearer , priority 0 [ 1084.994077][T31679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.047633][T31810] netlink: 'syz.1.6223': attribute type 1 has an invalid length. [ 1085.118629][T31812] netlink: 'syz.1.6223': attribute type 1 has an invalid length. [ 1085.155349][T31802] syzkaller0: entered promiscuous mode [ 1085.162360][T31802] syzkaller0: entered allmulticast mode [ 1085.172979][T31806] tipc: Resetting bearer [ 1085.233496][T31815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1085.266944][T31796] tipc: Resetting bearer [ 1085.343948][T31796] tipc: Disabling bearer [ 1085.410621][T31815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1085.430605][T31813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1085.443404][T31815] bond2: (slave batadv1): making interface the new active one [ 1085.476106][T31815] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1085.557330][T31810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1085.575964][T31810] bond2: (slave bond3): Enslaving as a backup interface with an up link [ 1085.603423][T31812] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1085.701067][T31679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.751974][T31813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1085.781308][T31825] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1086.047739][T31839] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1086.081360][T31845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1086.096383][T31839] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1086.213755][T31679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1086.270301][T31679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.289654][T31679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1086.426827][T31679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.531863][T31679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1086.553033][T31679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.569693][ T5621] Bluetooth: hci3: command tx timeout [ 1086.620262][T31679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1086.655039][T31679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1086.870561][T31894] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1088.687287][ T5621] Bluetooth: hci3: command tx timeout [ 1092.993280][T31679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.051332][T31679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.085306][T12383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.092557][T12383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.123840][T12383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.131107][T12383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.352368][T31928] bridge1: entered promiscuous mode [ 1093.358766][T31928] bridge1: entered allmulticast mode [ 1093.371600][T31928] team0: Port device bridge1 added [ 1093.381393][T31924] netlink: 'syz.1.6251': attribute type 9 has an invalid length. [ 1093.443774][T31931] __nla_validate_parse: 2 callbacks suppressed [ 1093.443796][T31931] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6251'. [ 1093.501214][T23433] IPVS: starting estimator thread 0... [ 1093.525597][T31936] tipc: Enabled bearer , priority 0 [ 1093.537874][T31936] syzkaller0: entered promiscuous mode [ 1093.562014][T31936] syzkaller0: entered allmulticast mode [ 1093.601202][T31934] IPVS: using max 32 ests per chain, 76800 per kthread [ 1093.755942][T31936] ip6_vti0: mtu less than device minimum [ 1093.799314][T31935] tipc: Resetting bearer [ 1093.843789][T31948] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1093.867424][T31948] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1093.877857][T31948] IPv6: Can't replace route, no match found [ 1093.949477][T31935] tipc: Disabling bearer [ 1093.957095][T31953] IPv6: NLM_F_CREATE should be specified when creating new route [ 1094.164167][T31679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.202823][T31965] netlink: 'syz.3.6260': attribute type 1 has an invalid length. [ 1094.302678][T31971] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1094.354533][T31974] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1094.367331][T31965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6260'. [ 1094.413566][T31977] netlink: 'syz.1.6265': attribute type 6 has an invalid length. [ 1094.440850][T31972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.448578][T31972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.531466][T31972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.545955][T31972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.682556][T31973] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1094.714565][T31965] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1094.742146][T12383] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.776035][T12383] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.804711][T12383] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.829902][T12383] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.945025][T31679] veth0_vlan: entered promiscuous mode [ 1094.980563][T31991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6269'. [ 1095.004439][T31679] veth1_vlan: entered promiscuous mode [ 1095.013184][T31991] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6269'. [ 1095.076236][T31679] veth0_macvtap: entered promiscuous mode [ 1095.087738][T31679] veth1_macvtap: entered promiscuous mode [ 1095.132398][T31679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.170302][T31679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.232980][T12383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.250705][T12383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.267244][T12383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.288571][T12383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.301872][T32004] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.6273'. [ 1095.319551][T32004] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.6273'. [ 1095.406330][T32004] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6273'. [ 1095.548610][T32011] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6277'. [ 1095.677616][T26479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.705198][T26479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.810983][T26468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.827379][T32017] siw: device registration error -23 [ 1095.834938][T26468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.847138][T32009] tipc: Enabling of bearer rejected, failed to enable media [ 1096.115888][T32034] netlink: 'syz.2.6282': attribute type 10 has an invalid length. [ 1096.151355][T32034] geneve2: entered promiscuous mode [ 1096.166211][T32034] geneve2: entered allmulticast mode [ 1096.187360][T26496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.201026][T26496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.234689][T26496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.244552][T26496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.394018][T32046] netlink: 'syz.2.6286': attribute type 1 has an invalid length. [ 1096.830669][T32069] netlink: 'syz.1.6291': attribute type 4 has an invalid length. [ 1096.844391][T32069] x_tables: duplicate underflow at hook 3 [ 1096.861702][T32069] netlink: 'syz.1.6291': attribute type 4 has an invalid length. [ 1097.130120][T32085] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1097.151988][T32076] bond1: entered promiscuous mode [ 1097.163308][T32076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1097.430290][T32100] IPv6: NLM_F_CREATE should be specified when creating new route [ 1098.594396][T32155] __nla_validate_parse: 14 callbacks suppressed [ 1098.594418][T32155] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1098.652173][T32155] netlink: 'syz.1.6315': attribute type 1 has an invalid length. [ 1099.366832][T32181] batadv_slave_1: entered promiscuous mode [ 1099.487363][T32184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1099.498841][T32184] openvswitch: netlink: Flow key attribute not present in set flow. [ 1099.602826][T32188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6324'. [ 1099.630192][T32188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6324'. [ 1099.801543][T32197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6328'. [ 1099.825991][T32195] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1099.844893][T32195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6327'. [ 1099.876314][T32195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6327'. [ 1100.026588][T32204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6329'. [ 1100.184392][T32206] tipc: Resetting bearer [ 1100.197533][T32206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.217073][T32206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.286416][T32206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1100.309599][T32206] veth1_macvtap: left promiscuous mode [ 1100.320635][T32206] veth0_macvtap: left promiscuous mode [ 1100.328006][T32206] veth0_macvtap: entered promiscuous mode [ 1100.346922][T32206] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 1100.360527][T32206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1100.371379][T32206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1100.386254][T32206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1100.397967][T32206] veth1_macvtap: entered promiscuous mode [ 1100.451968][T32206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1100.477585][T32206] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1100.485519][T26484] bond2: (slave gretap1): link status up again after 0 ms [ 1100.510972][ T7949] bond2: (slave gretap1): link status up again after 0 ms [ 1100.522877][T32206] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1100.533061][T32206] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1100.539460][T26484] bond4: (slave bridge5): link status up again after 0 ms [ 1100.540545][ T7949] bond2: (slave gretap1): link status up again after 0 ms [ 1100.560570][ T7949] bond4: (slave bridge5): link status up again after 0 ms [ 1100.569311][T12390] bond2: (slave gretap1): link status up again after 0 ms [ 1100.588945][T26481] bond2: (slave gretap1): link status up again after 0 ms [ 1100.596197][ T7949] bond4: (slave bridge5): link status up again after 0 ms [ 1100.599404][T32206] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1100.618790][T26481] bond2: (slave gretap1): link status up again after 0 ms [ 1100.630973][T32206] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1100.640549][T32206] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1100.653860][T32206] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1100.664937][T32206] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1100.674405][T32206] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1100.683792][T32206] vlan2: left promiscuous mode [ 1100.689272][T32206] hsr0: left promiscuous mode [ 1100.713012][T32206] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1100.723206][T32206] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1100.733910][T32206] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1100.743082][T32206] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1100.752995][T21302] lo speed is unknown, defaulting to 1000 [ 1100.759758][T21302] syz2: Port: 1 Link ACTIVE [ 1100.778876][T32176] batadv_slave_1: left promiscuous mode [ 1100.785290][T26496] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1100.794313][T26496] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.811636][T26466] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.820467][T26466] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.838997][T13731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.927220][T26496] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1100.939806][T26496] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.950529][T32214] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6334'. [ 1100.976807][T26496] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1100.992403][T26496] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.011577][T26496] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.036637][T26496] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.123022][T26495] bond18: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1101.140184][T21302] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1101.167882][T26495] bond18: (slave veth0_to_bond): making interface the new active one [ 1101.213981][T26495] bond18: active interface up! [ 1101.412782][T32235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6340'. [ 1101.432641][T32230] syzkaller0: entered promiscuous mode [ 1101.444022][T32230] syzkaller0: entered allmulticast mode [ 1101.614477][T32222] Cannot find add_set index 2 as target [ 1101.691182][T13731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1101.792727][ T5621] block nbd9: Wrong magic (0x3e000000) [ 1102.136132][T32261] geneve2: left allmulticast mode [ 1102.280542][T26497] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.290617][T32266] netlink: 'syz.0.6350': attribute type 8 has an invalid length. [ 1102.376580][T32272] netlink: 'syz.1.6352': attribute type 7 has an invalid length. [ 1102.393083][T32272] netlink: 'syz.1.6352': attribute type 3 has an invalid length. [ 1102.402572][T26497] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.413900][T26497] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.432868][T26497] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.643233][T32285] lo speed is unknown, defaulting to 1000 [ 1103.111715][T32285] lo speed is unknown, defaulting to 1000 [ 1103.141617][T32285] wlan0 speed is unknown, defaulting to 1000 [ 1103.457084][T32327] xt_connbytes: Forcing CT accounting to be enabled [ 1103.469275][T32327] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1104.474363][T32356] __nla_validate_parse: 17 callbacks suppressed [ 1104.474385][T32356] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6374'. [ 1104.541093][T32356] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6374'. [ 1104.584345][T32356] net_ratelimit: 88 callbacks suppressed [ 1104.584366][T32356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1104.602940][T26495] bond4: (slave bridge5): failed to get link speed/duplex [ 1104.628785][T26497] bond2: (slave gretap1): failed to get link speed/duplex [ 1104.657812][T32363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6374'. [ 1104.701172][T32376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6377'. [ 1104.725745][T32378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1104.743422][T32378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1104.812048][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1104.823447][T32382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1104.833262][T32382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1105.005286][T32398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6383'. [ 1105.058997][T26497] bond2: (slave gretap1): failed to get link speed/duplex [ 1105.080028][T26497] bond4: (slave bridge5): failed to get link speed/duplex [ 1105.179798][T26495] bond2: (slave gretap1): failed to get link speed/duplex [ 1105.202253][T32403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1105.215225][T26496] bond4: (slave bridge5): failed to get link speed/duplex [ 1105.302598][T21297] IPVS: starting estimator thread 0... [ 1105.303122][T32399] syzkaller0: entered promiscuous mode [ 1105.314671][T32399] syzkaller0: entered allmulticast mode [ 1105.338535][T26497] bond4: (slave bridge5): failed to get link speed/duplex [ 1105.351323][T32414] netlink: 'syz.0.6387': attribute type 1 has an invalid length. [ 1105.399048][T32415] IPVS: using max 38 ests per chain, 91200 per kthread [ 1112.064444][T26496] bond4: (slave bridge5): failed to get link speed/duplex [ 1112.088663][T26496] bond2: (slave gretap1): failed to get link speed/duplex [ 1112.102331][T32447] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 1112.118587][T32447] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 1112.178701][T26489] bond4: (slave bridge5): failed to get link speed/duplex [ 1112.239415][T32458] __nla_validate_parse: 2 callbacks suppressed [ 1112.239435][T32458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1112.264364][T32458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1112.291272][T32463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1112.300474][T26466] bond4: (slave bridge5): failed to get link speed/duplex [ 1112.308910][T26466] bond2: (slave gretap1): failed to get link speed/duplex [ 1112.317520][T32463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1112.559758][T32470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6397'. [ 1112.578588][T32470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6397'. [ 1112.580592][T26466] bond4: (slave bridge5): failed to get link speed/duplex [ 1112.654482][T26489] bond2: (slave gretap1): failed to get link speed/duplex [ 1112.719053][T26466] bond4: (slave bridge5): failed to get link speed/duplex [ 1112.770666][T26489] bond2: (slave gretap1): failed to get link speed/duplex [ 1112.808323][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1112.851101][T26495] bond4: (slave bridge5): failed to get link speed/duplex [ 1113.284573][T32495] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1113.310501][T32496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6405'. [ 1113.321779][T32496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6405'. [ 1114.234709][T32528] ipvlan2: entered promiscuous mode [ 1114.248859][T32528] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1114.273395][T32528] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1114.284704][T32528] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1114.394643][T32538] xt_hashlimit: size too large, truncated to 1048576 [ 1114.512850][T32545] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 1114.522119][T32545] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 1114.703308][T32541] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 1114.758315][T32541] netlink: 'syz.0.6417': attribute type 2 has an invalid length. [ 1114.771781][T32555] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6420'. [ 1114.818445][T32555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6420'. [ 1116.102146][T26489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.126059][T26489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.220722][T32603] xt_hashlimit: size too large, truncated to 1048576 [ 1116.429136][T26496] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 1117.548411][T26489] net_ratelimit: 64 callbacks suppressed [ 1117.548433][T26489] bond2: (slave gretap1): failed to get link speed/duplex [ 1117.588867][T26489] bond4: (slave bridge5): failed to get link speed/duplex [ 1117.688985][T26466] bond2: (slave gretap1): failed to get link speed/duplex [ 1117.721048][T26496] bond4: (slave bridge5): failed to get link speed/duplex [ 1117.730777][T32643] __nla_validate_parse: 6 callbacks suppressed [ 1117.730801][T32643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1117.748743][T32643] sctp: [Deprecated]: syz.0.6444 (pid 32643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1117.748743][T32643] Use struct sctp_sack_info instead [ 1117.798587][T26466] bond2: (slave gretap1): failed to get link speed/duplex [ 1117.850755][T26466] bond4: (slave bridge5): failed to get link speed/duplex [ 1117.914074][T26496] bond2: (slave gretap1): failed to get link speed/duplex [ 1117.969600][T26466] bond4: (slave bridge5): failed to get link speed/duplex [ 1118.048278][T26466] bond2: (slave gretap1): failed to get link speed/duplex [ 1118.100237][ T7949] bond4: (slave bridge5): failed to get link speed/duplex [ 1118.198642][T32678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1118.371661][T32687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6455'. [ 1118.451529][T32691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6459'. [ 1118.474351][T32691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6459'. [ 1118.494618][T32691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6459'. [ 1118.518737][T32691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6459'. [ 1118.623647][T32704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6463'. [ 1118.881179][T32705] syzkaller0: entered promiscuous mode [ 1118.902930][T32705] syzkaller0: entered allmulticast mode [ 1118.959937][T32716] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1119.353738][T32727] nbd: nbd1 already in use [ 1119.376288][T32727] block nbd1: NBD_DISCONNECT [ 1119.410680][T32727] block nbd1: Send disconnect failed -104 [ 1119.416507][T32727] block nbd1: shutting down sockets [ 1119.820933][T32733] netlink: 'syz.4.6470': attribute type 12 has an invalid length. [ 1125.423903][ T7949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.454634][T26495] net_ratelimit: 9 callbacks suppressed [ 1125.454653][T26495] bond2: (slave gretap1): failed to get link speed/duplex [ 1125.472356][ T7949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.507441][ T7949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.582676][ T7949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.662751][T32753] netlink: 'syz.1.6473': attribute type 1 has an invalid length. [ 1125.714067][T32755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1125.726076][T32755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1125.762876][T32756] bond5: (slave geneve2): making interface the new active one [ 1125.776131][T32756] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1125.786020][T32758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1125.793924][ T7949] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1125.797985][T32758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1125.841800][ T7949] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1125.882985][ T7949] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1125.900187][T32760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6475'. [ 1125.918005][ T7949] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1125.941143][T32760] netlink: 'syz.1.6475': attribute type 1 has an invalid length. [ 1125.998533][T26466] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.027899][T32765] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6476'. [ 1126.051870][T32766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6475'. [ 1126.095492][T26466] bond4: (slave bridge5): failed to get link speed/duplex [ 1126.120145][T26466] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.184658][T32737] netlink: 'syz.4.6470': attribute type 1 has an invalid length. [ 1126.198940][T32737] netlink: 'syz.4.6470': attribute type 7 has an invalid length. [ 1126.206911][T32737] netlink: 'syz.4.6470': attribute type 8 has an invalid length. [ 1126.211943][ T301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6477'. [ 1126.218086][T32737] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6470'. [ 1126.224184][T32737] NCSI netlink: No device for ifindex 1073545264 [ 1126.242497][T26495] bond4: (slave bridge5): failed to get link speed/duplex [ 1126.254684][T26495] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.262681][T32766] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6475'. [ 1126.348318][T26466] bond4: (slave bridge5): failed to get link speed/duplex [ 1126.380557][T26466] bond2: (slave gretap1): failed to get link speed/duplex [ 1126.410620][ T305] netlink: 'syz.4.6478': attribute type 1 has an invalid length. [ 1126.473561][ T305] bond2: entered promiscuous mode [ 1126.479755][ T305] bond2: entered allmulticast mode [ 1126.487436][ T305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1126.571522][T26495] bond4: (slave bridge5): failed to get link speed/duplex [ 1126.630350][T26489] bond2: (slave gretap1): failed to get link speed/duplex [ 1127.536202][ T356] nbd: nbd4 already in use [ 1127.553114][ T356] block nbd4: NBD_DISCONNECT [ 1127.566667][ T356] block nbd4: Send disconnect failed -32 [ 1127.586238][ T356] block nbd4: shutting down sockets [ 1128.168522][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1128.412922][ T395] lo speed is unknown, defaulting to 1000 [ 1128.443599][ T398] netlink: 'syz.2.6495': attribute type 1 has an invalid length. [ 1128.641525][ T400] netlink: 'syz.0.6496': attribute type 1 has an invalid length. [ 1128.726779][ T400] bond1: entered promiscuous mode [ 1128.752109][ T400] bond1: entered allmulticast mode [ 1128.762645][ T400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1128.776390][ T395] lo speed is unknown, defaulting to 1000 [ 1128.796992][ T395] wlan0 speed is unknown, defaulting to 1000 [ 1129.383165][ T425] [ 1129.385555][ T425] ====================================================== [ 1129.392627][ T425] WARNING: possible circular locking dependency detected [ 1129.399703][ T425] syzkaller #0 Not tainted [ 1129.404131][ T425] ------------------------------------------------------ [ 1129.411259][ T425] syz.1.6503/425 is trying to acquire lock: [ 1129.417177][ T425] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 1129.426668][ T425] [ 1129.426668][ T425] but task is already holding lock: [ 1129.434049][ T425] ffff8880870bb530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 1129.443322][ T425] [ 1129.443322][ T425] which lock already depends on the new lock. [ 1129.443322][ T425] [ 1129.453864][ T425] [ 1129.453864][ T425] the existing dependency chain (in reverse order) is: [ 1129.462893][ T425] [ 1129.462893][ T425] -> #8 (&idev->mc_lock){+.+.}-{4:4}: [ 1129.470609][ T425] __mutex_lock+0x19d/0x1550 [ 1129.475760][ T425] __ipv6_dev_mc_inc+0x4e/0xa40 [ 1129.481156][ T425] __ipv6_sock_mc_join+0x4f7/0x740 [ 1129.486814][ T425] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 1129.493099][ T425] do_ipv6_setsockopt+0x1768/0x3180 [ 1129.498875][ T425] ipv6_setsockopt+0x59/0x170 [ 1129.504103][ T425] do_sock_setsockopt+0x17c/0x1b0 [ 1129.509690][ T425] __x64_sys_setsockopt+0x13d/0x1b0 [ 1129.515448][ T425] do_syscall_64+0x174/0x580 [ 1129.520607][ T425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.527052][ T425] [ 1129.527052][ T425] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1129.534818][ T425] lock_sock_nested+0x41/0x100 [ 1129.540139][ T425] tls_sw_sendmsg+0x161/0x2860 [ 1129.545573][ T425] sock_sendmsg_nosec+0x90/0x180 [ 1129.551067][ T425] __sys_sendto+0x408/0x5a0 [ 1129.556127][ T425] __x64_sys_sendto+0xde/0x100 [ 1129.561447][ T425] do_syscall_64+0x174/0x580 [ 1129.566596][ T425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.573039][ T425] [ 1129.573039][ T425] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 1129.580550][ T425] __mutex_lock+0x19d/0x1550 [ 1129.585709][ T425] tls_sw_sendmsg+0x13c/0x2860 [ 1129.591027][ T425] sock_sendmsg_nosec+0x90/0x180 [ 1129.596516][ T425] sock_sendmsg+0x1ca/0x2d0 [ 1129.601571][ T425] __sock_xmit+0x245/0x4f0 [ 1129.606779][ T425] nbd_disconnect+0x3ad/0x560 [ 1129.612052][ T425] nbd_disconnect_and_put+0x32/0x280 [ 1129.617889][ T425] nbd_genl_disconnect+0x4af/0x590 [ 1129.623652][ T425] genl_family_rcv_msg_doit+0x233/0x340 [ 1129.629887][ T425] genl_rcv_msg+0x614/0x7a0 [ 1129.634940][ T425] netlink_rcv_skb+0x226/0x4a0 [ 1129.640263][ T425] genl_rcv+0x28/0x40 [ 1129.645020][ T425] netlink_unicast+0x7bb/0x940 [ 1129.650997][ T425] netlink_sendmsg+0x813/0xb40 [ 1129.656494][ T425] sock_sendmsg_nosec+0x13a/0x180 [ 1129.662448][ T425] ____sys_sendmsg+0x54e/0x850 [ 1129.667779][ T425] ___sys_sendmsg+0x2a5/0x360 [ 1129.673053][ T425] __x64_sys_sendmsg+0x1b1/0x290 [ 1129.678546][ T425] do_syscall_64+0x174/0x580 [ 1129.683693][ T425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.690135][ T425] [ 1129.690135][ T425] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1129.697813][ T425] __mutex_lock+0x19d/0x1550 [ 1129.702947][ T425] nbd_queue_rq+0x373/0x1150 [ 1129.708503][ T425] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1129.714805][ T425] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1129.723696][ T425] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1129.730214][ T425] blk_mq_run_work_fn+0x16c/0x300 [ 1129.735762][ T425] process_scheduled_works+0xa8e/0x14e0 [ 1129.741837][ T425] worker_thread+0xa47/0xfb0 [ 1129.746961][ T425] kthread+0x388/0x470 [ 1129.751579][ T425] ret_from_fork+0x514/0xb70 [ 1129.756744][ T425] ret_from_fork_asm+0x1a/0x30 [ 1129.762048][ T425] [ 1129.762048][ T425] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1129.769263][ T425] __mutex_lock+0x19d/0x1550 [ 1129.774485][ T425] nbd_queue_rq+0xc1/0x1150 [ 1129.779558][ T425] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1129.785636][ T425] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1129.792497][ T425] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1129.799010][ T425] blk_mq_run_work_fn+0x16c/0x300 [ 1129.804642][ T425] process_scheduled_works+0xa8e/0x14e0 [ 1129.810714][ T425] worker_thread+0xa47/0xfb0 [ 1129.816003][ T425] kthread+0x388/0x470 [ 1129.820599][ T425] ret_from_fork+0x514/0xb70 [ 1129.825719][ T425] ret_from_fork_asm+0x1a/0x30 [ 1129.831000][ T425] [ 1129.831000][ T425] -> #3 (set->srcu){.+.+}-{0:0}: [ 1129.838126][ T425] __synchronize_srcu+0xc9/0x2f0 [ 1129.843649][ T425] elevator_switch+0x1e8/0x7b0 [ 1129.849030][ T425] elevator_change+0x2fa/0x480 [ 1129.854403][ T425] elevator_set_default+0x375/0x440 [ 1129.860126][ T425] blk_register_queue+0x3f3/0x4e0 [ 1129.865743][ T425] __add_disk+0x6cb/0xe30 [ 1129.870639][ T425] add_disk_fwnode+0xfb/0x4b0 [ 1129.875842][ T425] nbd_dev_add+0x733/0xb60 [ 1129.880782][ T425] nbd_init+0x15f/0x1e0 [ 1129.885535][ T425] do_one_initcall+0x250/0x870 [ 1129.890829][ T425] do_initcall_level+0x10a/0x1a0 [ 1129.896302][ T425] do_initcalls+0x59/0xa0 [ 1129.901160][ T425] kernel_init_freeable+0x29d/0x3e0 [ 1129.906886][ T425] kernel_init+0x1d/0x1d0 [ 1129.911738][ T425] ret_from_fork+0x514/0xb70 [ 1129.916853][ T425] ret_from_fork_asm+0x1a/0x30 [ 1129.922140][ T425] [ 1129.922140][ T425] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1129.929959][ T425] __mutex_lock+0x19d/0x1550 [ 1129.935078][ T425] elevator_change+0x1af/0x480 [ 1129.940372][ T425] elevator_set_none+0xb5/0x140 [ 1129.945753][ T425] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1129.952087][ T425] nbd_start_device+0x189/0xb30 [ 1129.957469][ T425] nbd_genl_connect+0x1597/0x1c10 [ 1129.963020][ T425] genl_family_rcv_msg_doit+0x233/0x340 [ 1129.969092][ T425] genl_rcv_msg+0x614/0x7a0 [ 1129.974118][ T425] netlink_rcv_skb+0x226/0x4a0 [ 1129.979439][ T425] genl_rcv+0x28/0x40 [ 1129.983965][ T425] netlink_unicast+0x7bb/0x940 [ 1129.989257][ T425] netlink_sendmsg+0x813/0xb40 [ 1129.994549][ T425] sock_sendmsg_nosec+0x13a/0x180 [ 1130.000102][ T425] ____sys_sendmsg+0x54e/0x850 [ 1130.005400][ T425] ___sys_sendmsg+0x2a5/0x360 [ 1130.010606][ T425] __x64_sys_sendmsg+0x1b1/0x290 [ 1130.016077][ T425] do_syscall_64+0x174/0x580 [ 1130.021195][ T425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.027614][ T425] [ 1130.027614][ T425] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1130.036229][ T425] blk_alloc_queue+0x544/0x690 [ 1130.041565][ T425] __blk_mq_alloc_disk+0x194/0x390 [ 1130.047210][ T425] nbd_dev_add+0x494/0xb60 [ 1130.052152][ T425] nbd_init+0x15f/0x1e0 [ 1130.056826][ T425] do_one_initcall+0x250/0x870 [ 1130.062114][ T425] do_initcall_level+0x10a/0x1a0 [ 1130.067576][ T425] do_initcalls+0x59/0xa0 [ 1130.072433][ T425] kernel_init_freeable+0x29d/0x3e0 [ 1130.078158][ T425] kernel_init+0x1d/0x1d0 [ 1130.083007][ T425] ret_from_fork+0x514/0xb70 [ 1130.088217][ T425] ret_from_fork_asm+0x1a/0x30 [ 1130.093513][ T425] [ 1130.093513][ T425] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1130.100734][ T425] __lock_acquire+0x1520/0x2cf0 [ 1130.106116][ T425] lock_acquire+0x106/0x350 [ 1130.111144][ T425] fs_reclaim_acquire+0x71/0x100 [ 1130.116726][ T425] __kmalloc_cache_noprof+0x61/0x660 [ 1130.122535][ T425] __ipv6_dev_mc_inc+0x447/0xa40 [ 1130.127994][ T425] __ipv6_sock_mc_join+0x4f7/0x740 [ 1130.133628][ T425] inet6_addr_add+0x3a4/0xb50 [ 1130.138900][ T425] inet6_rtm_newaddr+0x9fc/0xe00 [ 1130.144361][ T425] rtnetlink_rcv_msg+0x802/0xc00 [ 1130.149907][ T425] netlink_rcv_skb+0x226/0x4a0 [ 1130.155461][ T425] netlink_unicast+0x7bb/0x940 [ 1130.160750][ T425] netlink_sendmsg+0x813/0xb40 [ 1130.166050][ T425] sock_sendmsg_nosec+0x13a/0x180 [ 1130.171602][ T425] ____sys_sendmsg+0x54e/0x850 [ 1130.176904][ T425] ___sys_sendmsg+0x2a5/0x360 [ 1130.182152][ T425] __x64_sys_sendmsg+0x1b1/0x290 [ 1130.187623][ T425] do_syscall_64+0x174/0x580 [ 1130.192741][ T425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.199159][ T425] [ 1130.199159][ T425] other info that might help us debug this: [ 1130.199159][ T425] [ 1130.209388][ T425] Chain exists of: [ 1130.209388][ T425] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 1130.209388][ T425] [ 1130.221993][ T425] Possible unsafe locking scenario: [ 1130.221993][ T425] [ 1130.229587][ T425] CPU0 CPU1 [ 1130.235009][ T425] ---- ---- [ 1130.240370][ T425] lock(&idev->mc_lock); [ 1130.244724][ T425] lock(sk_lock-AF_INET6); [ 1130.251747][ T425] lock(&idev->mc_lock); [ 1130.258683][ T425] lock(fs_reclaim); [ 1130.263201][ T425] [ 1130.263201][ T425] *** DEADLOCK *** [ 1130.263201][ T425] [ 1130.271441][ T425] 3 locks held by syz.1.6503/425: [ 1130.276544][ T425] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 1130.286015][ T425] #1: ffff88803162eda0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x394/0xb50 [ 1130.295897][ T425] #2: ffff8880870bb530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 1130.305570][ T425] [ 1130.305570][ T425] stack backtrace: [ 1130.311459][ T425] CPU: 0 UID: 0 PID: 425 Comm: syz.1.6503 Not tainted syzkaller #0 PREEMPT(full) [ 1130.311493][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1130.311512][ T425] Call Trace: [ 1130.311520][ T425] [ 1130.311529][ T425] dump_stack_lvl+0xe8/0x150 [ 1130.311557][ T425] print_circular_bug+0x2e1/0x300 [ 1130.311575][ T425] check_noncircular+0x12e/0x150 [ 1130.311602][ T425] __lock_acquire+0x1520/0x2cf0 [ 1130.311628][ T425] ? rcu_is_watching+0x15/0xb0 [ 1130.311652][ T425] ? trace_contention_end+0x3d/0x140 [ 1130.311668][ T425] ? __mutex_lock+0x30d/0x1550 [ 1130.311692][ T425] ? __kmalloc_cache_noprof+0x61/0x660 [ 1130.311712][ T425] lock_acquire+0x106/0x350 [ 1130.311731][ T425] ? __kmalloc_cache_noprof+0x61/0x660 [ 1130.311750][ T425] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 1130.311768][ T425] ? __pfx___mutex_lock+0x10/0x10 [ 1130.311791][ T425] fs_reclaim_acquire+0x71/0x100 [ 1130.311809][ T425] ? __kmalloc_cache_noprof+0x61/0x660 [ 1130.311828][ T425] __kmalloc_cache_noprof+0x61/0x660 [ 1130.311847][ T425] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 1130.311862][ T425] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 1130.311879][ T425] __ipv6_dev_mc_inc+0x447/0xa40 [ 1130.311899][ T425] __ipv6_sock_mc_join+0x4f7/0x740 [ 1130.311916][ T425] ? __local_bh_enable_ip+0xd0/0x130 [ 1130.311936][ T425] inet6_addr_add+0x3a4/0xb50 [ 1130.311955][ T425] inet6_rtm_newaddr+0x9fc/0xe00 [ 1130.311979][ T425] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1130.312002][ T425] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1130.312030][ T425] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1130.312051][ T425] rtnetlink_rcv_msg+0x802/0xc00 [ 1130.312070][ T425] ? netlink_sendmsg+0x5d4/0xb40 [ 1130.312087][ T425] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1130.312106][ T425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1130.312134][ T425] ? __lock_acquire+0x683/0x2cf0 [ 1130.312159][ T425] netlink_rcv_skb+0x226/0x4a0 [ 1130.312182][ T425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1130.312204][ T425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.312231][ T425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1130.312245][ T425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1130.312261][ T425] netlink_unicast+0x7bb/0x940 [ 1130.312286][ T425] netlink_sendmsg+0x813/0xb40 [ 1130.312304][ T425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.312320][ T425] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.312339][ T425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.312353][ T425] sock_sendmsg_nosec+0x13a/0x180 [ 1130.312373][ T425] ____sys_sendmsg+0x54e/0x850 [ 1130.312397][ T425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1130.312423][ T425] ? import_iovec+0x73/0xa0 [ 1130.312446][ T425] ___sys_sendmsg+0x2a5/0x360 [ 1130.312468][ T425] ? __lock_acquire+0x683/0x2cf0 [ 1130.312489][ T425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.312513][ T425] ? futex_wait+0x2a2/0x390 [ 1130.312573][ T425] ? __fget_files+0x2a/0x420 [ 1130.312593][ T425] ? __fget_files+0x3a2/0x420 [ 1130.312615][ T425] __x64_sys_sendmsg+0x1b1/0x290 [ 1130.312639][ T425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1130.312668][ T425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.312685][ T425] do_syscall_64+0x174/0x580 [ 1130.312708][ T425] ? trace_irq_disable+0x3b/0x140 [ 1130.312727][ T425] ? clear_bhb_loop+0x40/0x90 [ 1130.312744][ T425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.312761][ T425] RIP: 0033:0x7f7ac6b9de59 [ 1130.312777][ T425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.312792][ T425] RSP: 002b:00007f7ac7b41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1130.312808][ T425] RAX: ffffffffffffffda RBX: 00007f7ac6e25fa0 RCX: 00007f7ac6b9de59 [ 1130.312820][ T425] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1130.312830][ T425] RBP: 00007f7ac6c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1130.312841][ T425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.312850][ T425] R13: 00007f7ac6e26038 R14: 00007f7ac6e25fa0 R15: 00007fffb0421868 [ 1130.312869][ T425] [ 1130.718328][T26496] net_ratelimit: 48 callbacks suppressed [ 1130.718347][T26496] bond2: (slave gretap1): failed to get link speed/duplex [ 1130.749127][T26481] bond4: (slave bridge5): failed to get link speed/duplex [ 1130.838355][T26496] bond2: (slave gretap1): failed to get link speed/duplex [ 1130.858566][T26497] bond4: (slave bridge5): failed to get link speed/duplex [ 1130.958340][T26496] bond2: (slave gretap1): failed to get link speed/duplex [ 1130.969084][T26496] bond4: (slave bridge5): failed to get link speed/duplex [ 1131.078796][T12390] bond2: (slave gretap1): failed to get link speed/duplex [ 1131.098533][T12390] bond4: (slave bridge5): failed to get link speed/duplex [ 1131.188272][T12390] bond2: (slave gretap1): failed to get link speed/duplex [ 1131.209101][T12390] bond4: (slave bridge5): failed to get link speed/duplex [ 1135.770920][T26495] net_ratelimit: 80 callbacks suppressed [ 1135.770942][T26495] bond4: (slave bridge5): failed to get link speed/duplex [ 1135.788704][T12390] bond2: (slave gretap1): failed to get link speed/duplex [ 1135.889225][T26495] bond4: (slave bridge5): failed to get link speed/duplex [ 1135.898853][T26496] bond2: (slave gretap1): failed to get link speed/duplex [ 1135.998717][T12390] bond4: (slave bridge5): failed to get link speed/duplex [ 1136.009436][T26495] bond2: (slave gretap1): failed to get link speed/duplex [ 1136.108273][T26496] bond4: (slave bridge5): failed to get link speed/duplex [ 1136.118465][T26496] bond2: (slave gretap1): failed to get link speed/duplex [ 1136.218599][T26495] bond4: (slave bridge5): failed to get link speed/duplex [ 1136.229105][T26495] bond2: (slave gretap1): failed to get link speed/duplex