last executing test programs: 4.911601654s ago: executing program 1 (id=4071): unshare(0x22020400) unshare(0x2c020400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl(r1, 0x8b29, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket(0x10, 0x3, 0x0) close(0x3) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) writev(r5, &(0x7f0000002000)=[{&(0x7f00000004c0)="562906418a936ecc6ea4a695b354fa5be07b375e5cd2b4ee917274b6eec7986397cf48cbc866052189fdec1811c0cac633b21d5572deb55fcf", 0x39}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r10, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x3}, 0x10}, 0x94) 4.729255972s ago: executing program 2 (id=4073): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffc, 0x3000000, @mcast2, 0x9}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x76, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xcf, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0xa, [@restrict={0x8, 0x0, 0x0, 0xb, 0x3}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x9}, @union={0xd, 0x5, 0x0, 0x5, 0x0, 0x9, [{0x10, 0x0, 0x2}, {0x5, 0x1, 0x7e}, {0xb, 0x5, 0x9}, {0x5, 0x5, 0x1}, {0x2, 0x4, 0xe34}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2}, {0xa, 0x5}, {0x1, 0x2}]}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0xf, 0x5}, {0x2, 0x68c}, {0x3, 0xfffffff8}, {0x1, 0x8000}, {0x9, 0x261b}, {0x2, 0x10}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x0, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000001880)=""/215, 0xe6, 0xd7, 0x1, 0x80000000, 0x10000}, 0x28) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000021c0)={{r0, &(0x7f0000000280)='#&})\x00', 0x40, &(0x7f00000002c0)={@align=0x8f5f, {0x7, 0xfff3, 0x1, 0x7f}}, 0x9a68, &(0x7f0000000380), &(0x7f0000000400)}, 0x7, &(0x7f00000020c0)=[{0x2, 0x4c1, &(0x7f0000000440)='\x00', &(0x7f00000019c0)="4ae38fbd97588e1df389a1747eb037e01413dffcfc14d76cd24f0ae60d1adc991f36411854b9ec9c9c8a4114f4b37d13c1b2f3a859a0bedd00a1985d2da8c5876121f663a8da191c9bfb5757136dfcb052f1c8f61605d9e4f489b1945d6ca91f38bb41bb3bf5897098b8b35ac0e90a2ceede8174b5e0b7f25c5e69d2b05149d95da6685e028695daa9ade8dbbad195644668a0e76a5a51a8745d52a3069f0ec26b4063c0fd1e9a6aeb279c80113e0a304f3b0aad7df729b74ef0c7a3ec56907bd3da3e1c0a50e1", 0xc7, 0x10}, {0x1, 0xf, &(0x7f0000001ac0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000001b00)="27678e759ab89eecbbe760c71811bb068380d92fa1748819b9a7a86986257592abe6652f9c42507e220a893c04f33e87e97f7c54f0384d9f704ca08271a26caaf793ab553530c517685839aef0c0608a5977cb5f9059d8c449ba39cee72b7ccf0a3b669dc5b788fd7289edd1802416755a9d7484eaf13486758110f58b975a15d1fddb224f6835f3663feca5d54e7d1488c48d7f9835e8d0eab8ac4344e75d2699c5094d58666de6fc6a56d46da9ef0a3cd09941d91b23aec95f816abd450543110e9ebac0e2fa238fbb7911f45f754af0bb04bd195dc26a5ffad8f672240095f9814c15e8475c56e18771cadfe207", 0xef, 0x20}, {0x2, 0xb8, &(0x7f0000001c00)='bridge0\x00', &(0x7f0000001c40)="c1f0a54719153b646f54d7d7b867e876484b4aa22d04d6590fb9f884973933f7db00c3cd1411fbed47b025b1051c01783993434bafc33b54cd2fdbdc11fc038075d42b70", 0x44, 0x1a}, {0x2, 0xfff, &(0x7f0000001cc0)='#)]%#/\x00', &(0x7f0000001d00)="14dc9e830abddad48f5ecf5982ff0a3ccecd80f21dce102ee91538cf938234bc36634731f07a16587725596421a3a0279ece770125a4a449e0ce28711b4d421d0e0b59153f9c2833d40f424d37e59521a2fa118657a3799d06b89d5d567f0b4e0db1aaf03994945d067e110aa75d6424f5d49e7ea65584488e2ad85a55e38b7803c6c9d00cc13e64263d4bd906363be1f72cd250c379d362185b0fe8971bbea90758462f836f8c0ce3b2297bbf06f638b48bad622b2270c4fae19505a8773d272a3bcd7a910925a595a0ec54f27392f40c6e8168ba141dc9d58b0ab0bd876b621107f776487934a84a6474c210bd", 0xee}, {0x3, 0x0, &(0x7f0000001e00)='syzkaller\x00', &(0x7f0000001e40)="dfc7cee6b8d8fe54fa741b6cf13fbd5082d056bf2f633fd76aecfc7bb08a2a280719d8b0b2dbed0331807793c0bb5e728b755c9d33ad81eb08d59709cc9f2d6da957eb849cebab698012d78187086899043461cd6e5a32a15bb742a5112f263a6aac84929ace35dcfc59dea488365399c830eb5172205f31e4df70adc53b6396ac0e164788a9a07715fd1bda9bb045e490a81d9e21f735d67f8b017cd5eafc81816c59fc1a36c3c30f9677f60d5d0318e2e9fb768e87f58c266f8792af0103d304879df7d046f90c175efe2f75a54282cbf0e26754d901485c0758200db1ace98880221cdcaa86061e053745fcb9b5762f75c6ff8e3a808a14", 0xf9, 0x18}, {0x3, 0x1ff, &(0x7f0000001f40)='\x00', &(0x7f0000001f80), 0x0, 0x32}, {0x3, 0xb6ee, &(0x7f0000001fc0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000002000)="55199782196d3061f08eeed8befe74968c467eb19006e8b33d6f5c7bcbd0dfca2cda9c7996595d6cbf637c3fef3885ed6164966abb50637e6d3fc11a0f0ea2323f2ae2eb48457af5a00284e33135f2b66a7f5a88ff7d63a4779be7b9e334f59d62e24ca70dc255cc72126d90ed38589e703f68fa41d376fd0782db0443304ff3ef78a59b26ffcaff7097aa50b54e87a37d3eb8cd3aa99ddbe3a1bfbbaab2", 0x9e, 0x18}]}) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x3, 0x3d, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, r4, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xfffffffffffffffe, 0xd) r7 = socket(0x28, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r8 = socket(0x8, 0x3, 0x3) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x6180, 0x0) sendmmsg$alg(r8, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1", 0x2}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) sendto$packet(r7, &(0x7f0000000600)="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", 0x1000, 0x0, &(0x7f0000001600)={0x11, 0x8, r1, 0x1, 0x5, 0x6, @local}, 0x14) listen(r7, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) 4.487258917s ago: executing program 1 (id=4076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebae55130000000000000005be6d55b57cb15e63c15c46099d0fb04ce9b861d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$inet6(0xa, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x28) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x43, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{@in6=@mcast1}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2}}}, 0xe4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x9, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x40}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="040000003a00000000000000b453e345f2760f8bf7b3544201d8635de583808d8cdadad2fc126fe66a9a84a308a11630f4f7cadcfcb15b9a9d7a8a52d76d7c626adf33eff01cf7b761659c9f116cbbfb7016ce882213c449f1faf0d254e5ebfd78304140bf3dc83d4858dceee4276180c5116f9c8e276118f9", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r2], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r5, &(0x7f0000000880), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @private=0xa010101}, 0x10) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r12, 0x0, 0x0, 0x800) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c801}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35, 0x0, 0x1, 0xb1000000}, {}, {0x3, 0x0, 0x0, 0x6000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x4, &(0x7f0000000400)=""/192, &(0x7f00000004c0)=0xc0) 4.476252611s ago: executing program 3 (id=4077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdb7f, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) 4.326789959s ago: executing program 4 (id=4078): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000003000000070000000e06000040500600", @ANYRESHEX=r0, @ANYBLOB="06000000000000000000000000eb00000000000000", @ANYRES64, @ANYRES32=r0, @ANYBLOB="030000000100800000000900000000cd82b9d2a034e57b6c0c0000001e00"/39], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1000000706010800faffffffffff02000000000500010006000000"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f0000001640)=""/4083, 0xff3}, {&(0x7f00000003c0)=""/8, 0x8}, {&(0x7f0000002680)=""/96, 0x60}, {&(0x7f0000002700)=""/159, 0x9f}, {&(0x7f00000027c0)=""/4, 0x4}, {&(0x7f0000000800)=""/211, 0xd3}], 0x7}, 0x201}], 0x1, 0x20, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30, 0x80}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r7, @ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaa05aa0600000000000000080045000020000200f6278451d1368d970c90784100"/46], 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r4) 3.71615843s ago: executing program 2 (id=4085): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000078c0)=[{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001740)="0936801827c8e43abaa22d9b48a386f6464f6e2fb314aacb76bb52b2d06b5bcb1353c43ed3ddb1463c65d65b27b9e17bbef385f6acd4fbe0ca949862ac86a21fdc227394e26bce5ad39f589aaf81cc60d2bc008735dbda8c3ad88b5bf4ec", 0x5e}, {&(0x7f00000018c0)="8d48fd71310fda5021fa78329f48e56cf6d74115c6b33ad1004d7c8e3ec0549566028a89f0123092cb37d4230f86105f4ca2f2e6e6f53b10f61bc39e59f9b8db4ba7c5cf12100c0ab289ae1e691c90c5f02c488a67356bab877d82ff85929769dc993d", 0x63}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x4040) recvmsg$can_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/175, 0xaf}, {&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}], 0x3}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x80, @mcast2, 0x2}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x80, @mcast2, 0x2}, 0x1c) socket$inet6(0xa, 0x800, 0x7) (async) r5 = socket$inet6(0xa, 0x800, 0x7) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000020900010073797a30000000002c000000030a010100000000000000000500000000030073797a300000000054000000060a010400000000000000000500000408000b40000000002c00048010000180080001006c6f6700040002801800018008000100647570000c00028008000240000000120900010073797a3000000000140000001100010000000000000000000000000a00"/200], 0xc8}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) 3.39684176s ago: executing program 2 (id=4088): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b00000000000000000700", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) 1.414233685s ago: executing program 4 (id=4090): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.386368708s ago: executing program 3 (id=4091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x64a) accept4$inet(r1, 0x0, &(0x7f0000000000), 0x0) 1.316758706s ago: executing program 0 (id=4092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aeaa000000000000711011000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x7, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x706, 0x4}}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x00', 0x400300, &(0x7f0000000100)={@align, {0x80, 0x3, 0xff, 0x9}}, 0x6, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1000}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x51, 0x1, 0x5}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000340)='\x00', 0x1) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000100)=0xffffffff, 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', 0x0, r3, 0x3, 0x1, 0x2}, 0x50) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003680)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000080)="c5c45a34a05548ff05d8ba07060a195305cb3f53e22b098a176b2167b688c10da3e4c5614a2e0d28e0cac8d36474856023b5fb4d72dbad9e", 0x38}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="c0039683a41ceb02", 0x8}, {&(0x7f0000001700)="40fc25682f756ad198fd7d11c3b4314fd7324c2f146d575d33518d2e0e3df888b3ebfa52252c5c69b4646b9b4735826ec980239ad414a47c84e886868b9bccd7baaf224eec586a9ab54ffccfa6c05d675aa7a4aa1523118d567e26501156b1a40a00adb96e4d7f4053672f99706fc5b22d6bcc08d6cd56f634892ab75197a02ca79c366d6939e937823febdc240a392d973ba1e27e0c624309afc0706b57ab5c6d78c424aaf62c1acb8c45913bfbe9df60d364fd259b551ea308b285c9b218a1cfe86036cf0854b0a7b9b176ad53a0387d", 0xd1}, {&(0x7f0000001800)="d838f6e48bfde8c91cca1822282e4a71c48a41bc799cd2907b1371c87672ea8c975c9d27987922e3de17809a1b4cf83dd2f527f3fa", 0x35}, {&(0x7f0000001840)="ef0aa44102787c6a74d1c8a0efe2195bb552bc857d5e8e82d057e58ca56b40ac51c1df83", 0x24}], 0x6, &(0x7f00000019c0)=[@ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x34, 0x2, [{0x0, 0xe, "5694894abcdcf83c565e9e48"}, {0x2, 0x5, "ef5c13"}, {0x0, 0x8, "844031600565"}, {0x6, 0x2}, {0x1, 0x11, "5a73f63b9519354e5b022a88fb7b66"}]}, @generic={0x83, 0xf, "95e0424447c3efa1ee44603e5c"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x44}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @cipso={0x86, 0x18, 0x0, [{0x0, 0x2}, {0x0, 0x10, "8742368adcc35f05be124c1f4b89"}]}, @lsrr={0x83, 0xf, 0xb6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x395}}], 0x158}}, {{&(0x7f0000001b40)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001b80)="bcc8db830db8999a31bdbecc73932887cf5feff984d095908599527c9e00bacf61d03f64e5e5207b0e1b017212efdb9ccbd8124e0f391d045ddf27b262fba21ddbea8a8998dad7aac66c7a6f36bb465ecd8dfadae7c1ff6bbbd8adf25573a0d5df0a26f15a36f3c1f0a76eb00e13aee17798", 0x72}, {&(0x7f0000001c00)="1516", 0x2}, {&(0x7f0000001c40)="7abee2ee170105192f2e0a0d10de3b8886afd2649e6f3fea6a8078d1e49bb6d9712b88bc56ba8bea71f5cdd82ca51390fd3742c400ffb4511739edac7a2373e5fc371763350bf8b9de9e9db0f79c5e18a4b58ca84e66051b7e5ae4dd9a5ffa859d913db0a07603cd9430a3e748df8f300a74db8d6f547c7fdb839a3a1863d3cb1c925c72e9d9de96b0d72aada5b3af852f65460f31cd58486d46c3ba0a5a7ab44675968f8e0f2750669c40649377c3918fffd3338a", 0xb5}, {&(0x7f0000001d00)="c87cbb44846953f2fd0e4ab37acaf8dfadf0eb4e077f34e120591268600cc40d6a1513f5120cb4a7e4bc73912e3c9962a62f2842c42af3b75413d71030", 0x3d}], 0x4, &(0x7f0000001d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}], 0x18}}, {{&(0x7f0000001dc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001e00)="dcb97335108bb9f45e22d84faa118887e3b2eb16b2a2930e75c70b1a3d62dcf590456aacf31af097f728a66d2769a37deb52616ecb68502b3e3f0305f62508cf0c060b3177037b43254023", 0x4b}], 0x1, &(0x7f0000001ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f0000001f40)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000001f80)="c5e29ec74aef2f74be2b804b97", 0xd}, {&(0x7f0000001fc0)="9b2f36c766f022d290d2165ab9650f43c78199076a7eb1f4340bded1690608732966ea75df9c318816e5cbbedea513740e846cd3058351c8708beeef00e04c4107303c98adba88da1cd49f9078cdac9044c9727458509b18fe9c895c2a00bed349c44534f21491df92c4d1c04f6aa8b587530a26aaff79ef3fc651c4bc94e94a726f5088d6c5eef9955ec0992493cb09e844c9194743cd417f79118d89550ee083e4c72fb75095662475d2e575278ab8194edbd778b72ccccafa5f206b66419a0bb87fb508f7e70e0b2561a60e8953047bab3c45f8494776fb097078c78fe91f616ee17d321819177256b6e5b5bfbe3cf6c80a", 0xf3}], 0x2, &(0x7f0000002100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x30}}, {{&(0x7f0000002140)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002180)="d4ec540e3f88d7ab51713f97ff6e3e4c1f2a451b1f28f8019f0e75504fe8035a715f506c0b860495c04f5819bd7748daa1fe2f776d2ba6063cc51aad8500f08c60a2dfbdeb55326542e65332d8070af910e80be7deab404e02259c8f933696db534507259e956bd08d4d7b94ef11097a5119715d7a44e81e7442b00a9b697f548fa99b3f25fbbda2c8d5ad1aa6d7be9029868cd97209dbe21f41b6cc1a38d43a38da07c7808af780df576cafa0c2c1cde6eb76cb", 0xb4}, {&(0x7f0000002240)="40a6b9edb17cd0c3e22c4a", 0xb}], 0x2}}, {{&(0x7f00000022c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003600)=[{&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="dbdcf31879101daa6ec6a5c5fc23fcb78477293133a5d1238dd227eb2a397792d730b7714c44fd8acb16153ea583dc5431ddc719318c105a5caf7b8d726b9d25dbaef4b7985981d73dfb69300c30778c148ef9bf7eb5d2db224b5ee3a6f3631e04bb4b57d95bfa2320852862154f6c0950cf67c8faf91d20d65c0ef329f9b3e1aa6134e148", 0x85}, {&(0x7f00000033c0)="2ca7666c9c6536fd503a8c50f13e2a094d5ab176aeb95cd19e07972a4c88e6f44310a75b87d9d5273ad702adac931ba39bed2e3e5b917e780d3a1abde030d51dddb5e72837d54fecea297d3e358dc9fced7ffdc20c302f3eb317831d83c951dd2d8a5c08f9aec0c5f007b9a0ae54c8654724fd002859b3d4e665c4f8fa39", 0x7e}, {&(0x7f0000003440)="66d6a24cab7271bd6872dfc7a0ad121189daf7d3d8bbbb937d055fbe79d7713556963267170a39de74d7ce6294a3262b99f8cd7ae0ed70c9de703fb7cf1caba6a02833e502eb53a81669301a6d15d770def239d57fe955446a3d3bd6f8df42ae780806fcee5fec2876be95b5e5a24ed69d49a67988a6fde22e4686b83ae8958ccf0324d4056e6c9399c454a8a610828ff55e5a78e61ddd56a33c6a6469caba4cbe5bce78c7aa732b83da43ea0072f426342a3160a0fb6c83a5f848f7e761d669d3fb0904973730", 0xc7}, {&(0x7f0000003540)="8d620ec8b70236e071e77e5dc927fef10dd9cdf65fa71a752392b7803f622601842d09821ab1e2d2ce5998f1680e846e19a3c01490e7e81556dbe11f0dfd7bc28162dae848488caf3c7c8317fec923fb04516723085ccaf669b74aadf318bd7b0e9afe09555ffa06053ce586b09271a6af2f132b9fbabad2517356cc2f77a16834bcc74b6e", 0x85}], 0x5}}], 0x6, 0x4008800) 1.314890892s ago: executing program 1 (id=4093): socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001a00)={&(0x7f0000000a00)=""/4096, 0x210000, 0x1800, 0x3}, 0x20) 1.205737781s ago: executing program 4 (id=4094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xff3b}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8000280) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) close(0x3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x4c, r4, 0x5f70f9e3ec9918f8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0xc4) unshare(0x50000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r12, 0x25, 0x0, @val=@tcx}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x8a8, 0x470, 0x0, 0x540, 0x540, 0x470, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@rt={{0x138}, {0x101, [0x2, 0x4], 0x1, 0x20, 0x6, [@mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, @local, @loopback, @private2, @private0={0xfc, 0x0, '\x00', 0x5}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @private1, @local, @rand_addr=' \x01\x00'], 0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@remote, 0x1a, 0x8, 0xb}}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x10000, [0x1ff, 0x37], 0x40, 0x30, 0x0, [@dev={0xfe, 0x80, '\x00', 0x24}, @private2, @remote, @local, @empty, @local, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x12}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x15}, @private1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}], 0x6}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7fff, 0x200, @ipv6=@private0, 0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x27}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@empty, 0xa, 0x2d, 0x9}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, [0x0, 0xff000000, 0xff], [0xff, 0xff000000, 0xffffff00, 0xffffffff], 'veth1_virt_wifi\x00', 'macvlan0\x00', {0xff}, {}, 0x1d, 0xf, 0x2}, 0x0, 0x138, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@physdev={{0x68}, {'caif0\x00', {}, 'bond0\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@private=0xa010102, 0x16, 0x7, 0xbe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a000000000000000000001200ffffe0000012fe8000"/51], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000140)={r3, &(0x7f0000000040)='*\'\x00', 0x2000, &(0x7f0000000080)={@align=0x1, {0x8000, 0x41, 0x9}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"/1731], 0x614}, 0x1, 0x0, 0x0, 0x10}, 0x904) 1.201293952s ago: executing program 3 (id=4095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000480)=0x100000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES8=r4], 0xa0}}, 0x0) pwritev(r1, &(0x7f0000000780)=[{&(0x7f0000000540)="ced617ee9fa7556196fef53d97a4cb1d0b85087b02b9a60184a6895ec01cbf631fd89fb0bf90dc0ba409312523ece408a411dad0a3ed1d4de19ae98645d8b3f89ab974547cde7d7c9e67742c62c73c3c76a61c524029433a37bc61dd9eb134ee940c8a82bf507aa9b0dc7a514786e5a7031009809b61c7cefd4b4fcf83aafd5f589cf240248d931581700cecf299453a5c2000e33a0ffc510b8a08e59f8f74a514156df676d30f4f846c9bb1024c73b41145239e6befb6fb86b130ae4f72ca1114ebde38a181932c", 0xc8}, {&(0x7f0000000640)="0ff747ee497a8bcec11022138e9eea79cf5933a400a0e5f2b9b4720d44b6be7dcd95a1ee71b3e64ce3083dbc8a7504fce47d80b9fa30dc75edd271640caadb1932a8f2", 0x43}, {&(0x7f00000006c0)="bf86181d063599fedcb0b516f4f5af08c09c7deba39a8e71b07fbcbbae752ec2391f93e887a3929fc5782a02fabbb53f867c23c0803fc23fcaabb51f4314f8835eb7c6139f1535beed048a147097f67dacc4b1619e5b1381", 0x58}, {&(0x7f0000000740)="c049f7af3ba4e4", 0x7}], 0x4, 0xfffffffc, 0x2) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0xaaf, 0x9, 0x8000, 0x100032de, 0xc254}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x7fffffff, 0x0, 0x3}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) r11 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1af}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c", 0x91}, {0x0}], 0x3, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x40}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000240000400007800c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r12], 0x6c}}, 0x4004800) 1.14498506s ago: executing program 0 (id=4096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0xffd0}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1c00}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.090449744s ago: executing program 2 (id=4097): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000d0429bd700000009f486865cf3b6612aa33658b7d16000000000000", @ANYRES32=0x0, @ANYBLOB="0000000019500000240012800c0001006d6163766c616e001400028006000200010000000800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x500fc) r2 = socket$inet6(0xa, 0x800, 0x7f) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$netlink(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000300), 0x12) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r10, 0x401, 0x70bd2b, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendfile(r7, r7, 0x0, 0x10001) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) getpeername$packet(r4, 0x0, &(0x7f0000002740)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000600000000009c1c0000daa06637b2822f47816cd7693bc519486b48de28b1249de97d8b9e85a92f94f13a"], 0x50) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000a00000c0000000c000000020000000000000000000013040000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB="0400cf45e1ff0000d4", @ANYRES32=0x0, @ANYRESOCT=r8, @ANYBLOB="010000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2000d42b8e6b24c96b3acfbf182868eed300000a008293977e16574affeae6d6e3ad926e3ec9abce88fa629d9d8aea9339c7871131e830c9bde00bf0ae5b98114704344a3e3709ac29025b068578eabc8e73c1cb9b6bb773a98f9502a2fdfe06a2c04494e0a288c79449e6cb1851c405ccf82cc1e521e667d1ecbf4f80beab10e4bf1d2748cf104a62a7d8a3d355adcf000ca4b62bbe1394860d9cd1e63625aa0a54e2625c86f4f4bf713e75ef6f5d46c74eaf70fadbfe5da8897dca29901f3ae3cf3f7e7c212e4fce7095f65f"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) 1.054026649s ago: executing program 1 (id=4098): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x290800, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1f0bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb89261cb20081"], 0x1c}, 0x1, 0xfff0}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f0000000140)='Q\r\x00\x00\x00\x00\x00', 0x7}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6gretap0\x00'}) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000100000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000000e080002400000000208000340000000050900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 960.470565ms ago: executing program 0 (id=4099): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c"], 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r2, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11}, {0x4, 0x1b}}]}]}, 0x48}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x76, 0x1, 0x40000002, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000004800000000000000000000711001000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 890.860053ms ago: executing program 1 (id=4100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x40000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x77}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 834.701894ms ago: executing program 1 (id=4101): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) pipe(&(0x7f0000000380)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r6, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x0, 0xe, 0xa, 0x801, 0x0, 0x0, {0x762e759ef0d6568c, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xeb8b1e2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f205ac0}]}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}}], {0xfffffffffffffc88, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x118}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r4], 0x44}}, 0x8000) 600.186495ms ago: executing program 0 (id=4102): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r2, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r2, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB="1c005a1b03335d09679ed53f11f4df1caf76d7801800018014000300"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB="1c005a1b03335d09679ed53f11f4df1caf76d7801800018014000300"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x288, 0xff, {{0xb, 0x4, 0x1, 0xf, 0x2c, 0x67, 0x0, 0xe2, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x5c, 0x0, 0xd, [0xd8]}, @rr={0x7, 0xb, 0x83, [@multicast1, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001600100029bd7000fddbdf250a087100", @ANYRES32=r10, @ANYBLOB="14000100fc01000000000000000000080009000400000014000600ff03000009000000060000000900000014000100ff0100000000000000000000800000010000000315620ca6d1b22f719d"], 0x64}}, 0x0) 598.759951ms ago: executing program 2 (id=4103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefe, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x8}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x3, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x0, 0x2, 0x1, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x2004c805}, 0x40880) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0xf2, 0x4e, 0x7, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, 0x40, 0x8, 0x1, 0x4}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x1, 0xb}, {0x10, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001280)={'gre0\x00', &(0x7f0000001180)={'gretap0\x00', 0x0, 0xf807, 0x8, 0x60c, 0x0, {{0x2f, 0x4, 0x1, 0x4, 0xbc, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}, {[@cipso={0x86, 0x4d, 0x3, [{0x0, 0x2}, {0x7, 0x12, "8a57efc5fc468173229f6e40843aa6c3"}, {0x2, 0x2}, {0x6, 0x2}, {0x0, 0xd, "5ff4024fe43881ca11a6ff"}, {0x2, 0x11, "3685022b096e0113312c42505e1baa"}, {0x2, 0x11, "c1099820cffd382d689810c8ff04ab"}]}, @lsrr={0x83, 0x17, 0x83, [@multicast1, @rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x2a, 0x1, 0x7, [{@rand_addr=0x64010100, 0x2}, {@multicast1, 0x7}]}, @lsrr={0x83, 0x13, 0x57, [@multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102, @rand_addr=0x8000]}, @ssrr={0x89, 0x1b, 0xe, [@loopback, @empty, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) sendmmsg$inet(r1, &(0x7f0000001800)=[{{&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="ece51196bee786abfbe52bdacebb84a194b02fb0dd825534c03dce867829aa3efc88f3bfb155c7db55ba7858e8ad81991b23eecbba82aa1d7c94ccc30572ed5fad6896f48f57b9c492312897f106e3e2c379ffb9daa23d726c", 0x59}, {&(0x7f0000000280)="f61f4c4ef88d88e15bc436d846034f8674", 0x11}, {&(0x7f00000002c0)="90ad3264f78c163a917f2c255f8f19175692d3b94d1313d956a4435685402da64e66e8d5d0cd69849448d45547cd5b9338ae6255ed92caa1c252ca03fdd23e376943819c4494b49836559610af0caa4b903adac617bdc3a366b09ec22da57dabd91852dd32a5c02f134c6060c5c4282b6800632c241cc8602d4274bd569e0b6b24b485df535be0ea11f2", 0x8a}, {&(0x7f0000000380)="b9234bcd35a3", 0x6}, {&(0x7f00000003c0)="5deceb763e7182", 0x7}, {&(0x7f0000000400)="c8ab51ba9f939e07156c6cfa92de7a731580c181ce91240b18053c6130d67c209d79418d9a51748571ff4b19065519b06858264cfe640a25d28ec59eb88cca5d523e8f104e7312d986b66a26282558b0034ba206ba6b6ed093656ced1b030404fc20737f4f596dd5ff73ca8865b38923c055612a74995f7e656fe05bf310026dd978d198bfd6bc906eee8528392e689f9f4799969d2905200e1953c1", 0x9c}, {&(0x7f00000004c0)="7bf9813d834de8e768f47e2338dfea36ff11fab58d73dfefbe9b967bbf8df1e8dec7d62cacd27f9c9a8d4111083f4426468cb6bf494c5dbdc20f5a44b2400d627b", 0x41}], 0x7, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x94, 0xc, "e1acc6ec6033fb808910"}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0x13, 0x98, [@dev={0xac, 0x14, 0x14, 0x1c}, @empty, @loopback, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0x8, [{@private=0xa010100, 0xf}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffff7}]}, @timestamp_prespec={0x44, 0x1c, 0x26, 0x3, 0x2, [{@local, 0x5e}, {@multicast1, 0x178}, {@loopback, 0xd4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x3f, 0x2, [{0x0, 0xc, "16b6e2520ae4b08c809c"}, {0x1, 0x12, "1e90ca6213d938da1a4e1c2becfa648d"}, {0x0, 0xf, "6f603fed49d154b5fdc0c348e4"}, {0x2, 0xc, "9cfa6ea4b0ec38922b68"}]}, @timestamp={0x44, 0x8, 0x68, 0x0, 0x7, [0x9]}, @lsrr={0x83, 0x1b, 0x8d, [@multicast2, @broadcast, @broadcast, @broadcast, @rand_addr=0x64010100, @remote]}, @generic={0x86, 0xc, "161eb7a0b3ae62931e74"}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x178}}, {{&(0x7f0000000980)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="de7ace7c7b76489ca6c2db91d3084f97b5fd6dfa2080b743896ad8d0ec72983ec2ed6580bbd4025221052cbdae9c87cd1577bba6bcdfa7ab2ed6448e474de6d6f2597c01b2f3b559c0a136cd6a4b5cf7351c0e6dd34579087ff01f24afea5114e2b742334f507c76c7e1c4f9d1c5b00c8abd460c29b91cd6f06c5da63533c1179a1c68426a94ee878549854cb923111a5f17e07a6d447c4a1b922eca9a6c573e06c4757d26349a5b508af510ef59a3a7c8975c44bb016eae48ed701a0fd8c7caf3bf27b9d82906ebc35d4d259de4f965851741a7fa7ac234bee4cbd417f61ea5a58806eee9ca", 0xe6}], 0x1, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x1c, 0x1, 0xe, [{@rand_addr=0x64010100, 0xfffffbff}, {@local, 0x9}, {@private=0xa010100, 0x76e}, {@multicast1, 0x6}, {@local, 0xe00000}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x5}, {@broadcast, 0x40}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0xe8}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000010c0)=[{0xfffffffffffffffd}, {&(0x7f0000000c40)="663b27eed7dc2529beb94504558daf9197a8880729fa201d7f0189ee551cf3ca4e1d1f8e99d7c7a2768d94f75efd89e44e081a417596afa154ef3d0c8d8c9a21228c585b4418543e23ec5b71e3c0b82c9dfc9aab7962f4b2ddd4bff7bad1", 0x5e}, {&(0x7f0000000cc0)="86ffb83315907111a63486fbbee7caf1474477360cee76dcbbecaa8d4ddaac0dee235aeba0c255ad784e35b5f2a14d6f4b3221249e2c49", 0x37}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)="8ee07c7939b0e50922be454b6e4b2335532fa4c1a59ce630eb51b84fa921ac7524a44424ab77b607b1144436960e6e268a3d81b87cfb7b3fe14efd3c4edce8360a0452dfe53af36e62315eb6181e66cf3bc4ca41f052ea4dfeabde5eaad33586bff38110778ace1def50d2e076261b0cd2641c14d7aebcec53e1cf7a99ecb08363f320def66edd1b549d1e31f43e4716be2998b9687b85cef4d6104ad30dffddeea808fdf36c56574ef1d4a33fb982546d5e1af3520967ced59a4a4ca57748d42c16d3d2305bc2137e5cf44869ad7e401ad223f0a911d2922c71eb7feab1d1175015948bb49cb53cd164f403ef8605ded7d0bcfc48", 0xf5}, {&(0x7f0000000e40)="371e99687abce4fddf11677e24faeb175e530391e7068e2153db06195e32156a2063663fc63180e2191e04bbb8c4418cb8f240a119ad1851d2fd4b3ed36a9c114785b38db3f68353c80a0b544623bf7e746551c520bb58acf2b6f786aa353b03901ba2d29065722511f9a7cf7926d58d19a3323eceaf060ab4c5e75813d0d84f43b1054b7269362de167c9bb6f3a22e935c61dfe4617c36913261cc6eb855640fd8f3ef4fb1cb6304f2c129b0b007bc4b232002b", 0xb4}, {&(0x7f0000000f00)="1a8f12adfa8d4e6d40aa7294f86c2a86bab2d49a42e229e68df794538f51fb04f765c3bf5bda5956e330fe5d7e36beca710b69f0427e42e99a35a3fe7f7649ae5afb9f1eafcd293265de2553310f7d139ffff95d15588ce055f25a0af5da5e7d9d2a7d", 0x63}, {&(0x7f0000000f80)="9e5ddfca3b28c389a1d8dbf88a6105d19148a6dc320a9ac6c1ef67ac0b654832efd1300395ad2d4ba7", 0x29}, {&(0x7f0000000fc0)="e0eb6e99bf0b5f67f5fe01c369e824a137563d756bc1ebc82d2351687db0e78c6e303036903f5dc2d567101db49ac554b6bb4d6b5f56c0ded1f3dc607b242aaef9ea92d0c9d8896488e89b59e090c16b622046b7ea7a043833026cda2f4ecd6e66050100def3b8725b45571261ecf1f4196e03eef64d796f9191aaff7257230e112325845c6c5d917c530b1e8836581ecee871f19e16396ec70fec7c017f68ea86a2b5c9b775ab804f2f52bd7ed5889ba32258bd0411dd7146edd18d76269d03049c111b23818156b3c993eb92d181fe19edaf1fbf5bb6ef3da7b06c2232aab4fd4f3d5eecb1dc3cbf83917108e2f2ae1b7b0b16a4247517c8b1f54b97d9", 0xfe}], 0x9, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x18}, @loopback}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0xd5, 0x3, 0x2, [{@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@multicast1, 0x2}, {@loopback, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0xb9}, {@multicast1, 0x5}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x3}]}, @ra={0x94, 0x4}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @private=0xa010101}}}], 0xa8}}, {{&(0x7f0000001380)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001540)=[{&(0x7f00000013c0)="2c60492fa41ee0bd19ed4c3af214c9e39af816f9e3a494943d75db1b8d635ee9bab04122f06b59a71e8e235596da2469a4a62c7f7147113316dbb8e6a12e5cbc3d683f92d918ff21b95d79daceee", 0x4e}, {&(0x7f0000001440)="a4c15bc8d162c1a9d24c6a119fc1b3b70da182f94e47da698079da2146af0f67ba3e4ca06baed354b0280a9ea82da5f9f92931e79b41d0ba0965d7362ba7d4d531fa8f034a8909fc259477", 0x4b}, {&(0x7f00000014c0)="c85194381d9797ec28dc6ec35bb7c54efcb558d7983f42a5708e863ae146290e650da6ed2cde746b3b667fd5f6159c989b2940e03ffc655a5e959e677913ec76f77fc4184d488f1eb2d6951b8103686a68530435616cc871499f9f9452b3084fc6e1cbbacda6101ae7ba365216", 0x6d}], 0x3, &(0x7f0000001580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xd, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @rand_addr=0x64010102]}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="1045bb12877a39c3e3cef4c334e263b40db10ef0a22dd81194e8d0ca94ea6bc9bfc761ca08559d686cfbee19703234bf3536dbf310e5deffba765717b8810e046a0a22842235c07954eef67c4679bd792f7e2c5df10a43e3eb35a727954751eaf63dab8b748b4b129445637495e6d560625d372143f436dd7a24ed8c12c3a310baa082c63d87d0ed8d66669961900915ace2419f406461078da772515b09b83efc981a0cf02ceb105dc57a0ce22a8d54998c6eeab32e42c4951648f94b8ab85717ca0edb54fa832d8412c99fd4958a0b80ad7a917677bad9506fe707030f5acbfeb37d5098dedf0438d045341a6d4432ebbcea99e87c2034d3", 0xf9}, {&(0x7f0000001740)="878ff3a45d75f1ab7f843a829ef3fa617de1ef9e6e5a96836a22204b23d77fca1f830fc3fe3d562d", 0x28}], 0x2, &(0x7f00000017c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @loopback}}}], 0x38}}], 0x5, 0x4003) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 553.401752ms ago: executing program 4 (id=4104): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 404.382107ms ago: executing program 4 (id=4105): r0 = socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000200)="7c139f6ece67bc3d0db15d43a86b1613e9986ffe7ec9d9e90eace6268b60b2f8a18c0e98d3f290bd90dafc5dec55f85afb23b3c04bacc5d37091af8fbc9deda35b0f0b06fac521473b02e2149b1ed1d1a2e8b851e02a8bab6d20e168048472f1d2bed5bd", 0x64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0={0xfc, 0x0, '\x00', 0x2}}}}, 0x3a) r4 = socket(0x29, 0x3, 0xd) write(r4, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r5 = socket(0xb, 0x1, 0x5) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 398.768961ms ago: executing program 0 (id=4106): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="800000000000000100000000000000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000a7080000000000007b8a20ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x80, 0x40, 0x4, 0x5, {{0x29, 0x4, 0x1, 0x8, 0xa4, 0x64, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x44, 0x7b, 0x3, 0x8, [{@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x5}, {@empty, 0x80000001}, {@rand_addr=0x64010100, 0x1475}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @cipso={0x86, 0x28, 0x3, [{0x1, 0xd, "dc328d10929d2d191b11fe"}, {0x0, 0x9, "5c402e58dd1c9c"}, {0x3, 0x9, "143c8022bbb8e0"}, {0x7, 0x3, '#'}]}, @end, @rr={0x7, 0x23, 0xed, [@remote, @rand_addr=0x64010102, @broadcast, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x34, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe52, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @ldst={0x2, 0x2, 0x3, 0xa, 0x3, 0xfffffffffffffffc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x8, 0x1, 0x6, 0x1, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x8, 0x25, &(0x7f0000000980)=""/37, 0x100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0x8001, 0x2}, 0x10, 0x224b7, r2, 0x6, &(0x7f0000000a00)=[r0, r0, r1, r1, r0, r1, r1, r1], &(0x7f0000000a40)=[{0x2, 0x2, 0x7, 0xc}, {0x0, 0x1, 0xd, 0x4}, {0x0, 0x1, 0x10, 0xc}, {0x0, 0x1, 0xd, 0x5}, {0x1, 0x5, 0xa, 0xf}, {0x3, 0x2, 0x1, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x0, 0xc, 0x9, 0x8, 0x8}, @jmp={0x5, 0x1, 0x5, 0x2, 0x7, 0xc, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x22, &(0x7f0000000300)=""/34, 0x41100, 0x21, '\x00', r4, 0x18, r5, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xc, 0x7fffffff, 0xffffffff}, 0x10, 0x280af, r6, 0x2, &(0x7f0000000b80)=[r0, r1, r0, r0, r0, r0, r1], &(0x7f0000000bc0)=[{0x2, 0x4, 0xa, 0xa}, {0x5, 0x4, 0x3, 0x7}], 0x10, 0x621e}, 0x94) 379.248444ms ago: executing program 3 (id=4107): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000040)=""/217, &(0x7f0000000140)=0xd9) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x1}}, 0x6c) (async) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x1}}, 0x6c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 224.080052ms ago: executing program 4 (id=4108): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b00000000000000000700", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) 223.482517ms ago: executing program 3 (id=4109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0xffff}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1c00}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 121.04729ms ago: executing program 0 (id=4110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x4, {0x0, 0x0, 0x4, r2, 0x4300, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x22}]}}}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x8044) 87.679777ms ago: executing program 3 (id=4111): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00032bbd7000fbdbdf251900000017d9ea8269bfb2094a4a3d0e603574f8894995b50eedc9b8f580ca20d185174e7409b220e8eff22bbf0b54a434f6d9508d6eb696f0752b726fb0e72575a4827b5b8409cbb9cae656abec57e67dd3aab40678229c950e1493b7d15665b74dfbdc1cc08c08c26d5376bf0e45cc87af930b51fe7fa0ff2dc4740dd7f2665a229cb12cf3cb78dde222d9f199c0f121c282349c"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40010, 0x0, 0x0) read$alg(r2, &(0x7f0000000700)=""/244, 0xf4) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x98, @remote, 0x1}, @in={0x2, 0x4e23, @local}], 0x2c) sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r7, r8, 0x4, 0x0, @void}, 0x10) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=4112): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000c000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000002000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.2.2572'. [ 375.526673][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.548083][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 375.571492][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.593423][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 375.616234][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.634721][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 375.656245][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.677202][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 375.698708][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.715988][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 375.733525][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.750965][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 375.800632][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.819845][T16521] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.679160][T16565] netlink: 'syz.3.2582': attribute type 14 has an invalid length. [ 376.721406][T16565] netlink: 'syz.3.2582': attribute type 14 has an invalid length. [ 376.942906][T16579] team_slave_1: Caught tx_queue_len zero misconfig [ 377.192974][T16590] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.020496][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 378.028586][ C1] lec:lec_tx_timeout: lec0 [ 378.033583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.697878][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.533205][T16691] __nla_validate_parse: 34 callbacks suppressed [ 379.533225][T16691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2609'. [ 380.094489][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'. [ 380.147382][T16719] tipc: Enabled bearer , priority 10 [ 380.165478][T16716] vlan6: entered allmulticast mode [ 380.175023][T16716] bridge7: entered allmulticast mode [ 380.183443][T16716] bridge7: port 1(erspan0) entered blocking state [ 380.190220][T16716] bridge7: port 1(erspan0) entered disabled state [ 380.197658][T16716] erspan0: entered allmulticast mode [ 380.206214][T16716] erspan0: entered promiscuous mode [ 380.244947][T16716] bridge7: port 2(bond12) entered blocking state [ 380.253890][T16716] bridge7: port 2(bond12) entered disabled state [ 380.262107][T16716] bond12: entered allmulticast mode [ 380.270303][T16716] bond12: entered promiscuous mode [ 380.328388][T16724] netlink: 'syz.4.2619': attribute type 8 has an invalid length. [ 380.354728][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 380.916380][T16751] netlink: 'syz.3.2627': attribute type 10 has an invalid length. [ 380.938422][T16751] batman_adv: batadv0: Removing interface: dummy0 [ 381.032036][T16761] netlink: 'syz.4.2629': attribute type 3 has an invalid length. [ 381.176824][T16756] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 381.192759][T16756] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2630'. [ 381.233657][T16751] veth0: entered promiscuous mode [ 381.239139][T16766] bond0: entered promiscuous mode [ 381.262640][T16766] bond_slave_0: entered promiscuous mode [ 381.290861][T16766] bond_slave_1: entered promiscuous mode [ 381.298720][ T24] tipc: Node number set to 687732171 [ 381.365384][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2633'. [ 381.788902][T16747] bond0: left promiscuous mode [ 381.803664][T16747] bond_slave_0: left promiscuous mode [ 381.838002][T16747] bond_slave_1: left promiscuous mode [ 381.861818][T16747] veth0: left promiscuous mode [ 381.934246][T16797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2638'. [ 381.942413][T16788] netlink: 'syz.0.2636': attribute type 11 has an invalid length. [ 381.953163][T16797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2638'. [ 382.686794][T16841] netlink: 'syz.1.2648': attribute type 3 has an invalid length. [ 382.714570][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2649'. [ 382.763455][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 383.040695][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 383.048781][ C1] lec:lec_tx_timeout: lec0 [ 383.053517][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 383.514871][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2659'. [ 383.889992][T16888] netlink: 'syz.3.2663': attribute type 1 has an invalid length. [ 384.073138][T16888] bond13: entered allmulticast mode [ 384.093791][T16888] 8021q: adding VLAN 0 to HW filter on device bond13 [ 384.586537][T16937] syzkaller0: entered promiscuous mode [ 384.610650][T16937] syzkaller0: entered allmulticast mode [ 386.326248][T16941] __nla_validate_parse: 6 callbacks suppressed [ 386.326267][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 386.569442][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2689'. [ 386.626158][T16982] batadv_slave_0: Caught tx_queue_len zero misconfig [ 386.634198][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 386.644677][T16982] netlink: 'syz.3.2690': attribute type 5 has an invalid length. [ 386.652868][T16982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2690'. [ 386.830412][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 386.852659][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'. [ 386.862169][T16992] netlink: 'syz.0.2692': attribute type 14 has an invalid length. [ 386.864787][T16982] geneve4: entered promiscuous mode [ 386.870035][T16992] netlink: 'syz.0.2692': attribute type 11 has an invalid length. [ 386.897512][T16982] geneve4: entered allmulticast mode [ 386.921315][T10961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 387.020913][T10961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 387.029734][T10961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 387.075575][T10961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 387.098363][T17003] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2695'. [ 387.116531][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 387.154786][T17003] netlink: 'syz.3.2695': attribute type 1 has an invalid length. [ 387.214619][T17007] netlink: 'syz.1.2697': attribute type 21 has an invalid length. [ 387.240634][T17007] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2697'. [ 387.249757][T17007] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2697'. [ 387.325453][T17010] netlink: 'syz.3.2698': attribute type 2 has an invalid length. [ 387.372368][T17010] hmac(sha224): entered promiscuous mode [ 388.060484][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 388.068552][ C1] lec:lec_tx_timeout: lec0 [ 388.074378][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.957348][T17079] tipc: Enabled bearer , priority 0 [ 388.995787][T17079] syzkaller0: entered promiscuous mode [ 389.013434][T17079] syzkaller0: entered allmulticast mode [ 389.205230][T17085] tipc: Resetting bearer [ 389.420932][T17097] Bluetooth: MGMT ver 1.23 [ 389.499648][T17095] x_tables: duplicate underflow at hook 2 [ 389.695908][T17107] netlink: 'syz.0.2723': attribute type 1 has an invalid length. [ 389.893085][T17107] 8021q: adding VLAN 0 to HW filter on device bond13 [ 389.964909][T17114] bond13: (slave dummy0): making interface the new active one [ 389.991485][T17114] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 390.057458][T17118] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 390.073032][T17118] bond11 (unregistering): Released all slaves [ 390.079761][T17121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.087034][T17121] IPv6: NLM_F_CREATE should be set when creating new route [ 390.144495][T17121] lo: entered allmulticast mode [ 390.156197][T17121] tunl0: entered allmulticast mode [ 390.163759][T17121] gre0: entered allmulticast mode [ 390.201049][T17121] gretap0: entered allmulticast mode [ 390.230031][T17121] bridge5: port 1(erspan0) entered disabled state [ 390.245069][T17121] ip_vti0: entered allmulticast mode [ 390.267548][T17121] ip6_vti0: entered allmulticast mode [ 390.290014][T17121] sit0: entered allmulticast mode [ 390.312864][T17121] ip6tnl0: entered allmulticast mode [ 390.321449][T17121] ip6gre0: entered allmulticast mode [ 390.332289][T17121] ip6gretap0: entered allmulticast mode [ 390.355259][T17121] bridge0: entered allmulticast mode [ 390.368741][T17121] vcan0: entered allmulticast mode [ 390.376284][T17121] bond0: entered allmulticast mode [ 390.381652][T17121] bond_slave_0: entered allmulticast mode [ 390.387471][T17121] bond_slave_1: entered allmulticast mode [ 390.395175][T17121] dummy0: entered allmulticast mode [ 390.402391][T17121] nlmon0: entered allmulticast mode [ 390.408473][T17121] caif0: entered allmulticast mode [ 390.414838][T17121] batadv0: entered allmulticast mode [ 390.420886][T17121] veth0: entered allmulticast mode [ 390.426218][T17121] veth1: entered allmulticast mode [ 390.431950][T17121] wg0: entered allmulticast mode [ 390.437081][T17121] wg1: entered allmulticast mode [ 390.442749][T17121] wg2: entered allmulticast mode [ 390.447879][T17121] veth0_to_bridge: entered allmulticast mode [ 390.455401][T17121] veth1_to_bridge: entered allmulticast mode [ 390.462599][T17121] : entered allmulticast mode [ 390.467698][T17121] veth1_to_bond: entered allmulticast mode [ 390.481612][T17121] veth0_to_team: entered allmulticast mode [ 390.487723][T17121] team_slave_0: entered allmulticast mode [ 390.494306][T17121] veth1_to_team: entered allmulticast mode [ 390.502699][T17121] team_slave_1: entered allmulticast mode [ 390.508706][T17121] veth0_to_batadv: entered allmulticast mode [ 390.515360][T17121] batadv_slave_0: entered allmulticast mode [ 390.522613][T17121] veth1_to_batadv: entered allmulticast mode [ 390.528691][T17121] batadv_slave_1: entered allmulticast mode [ 390.535265][T17121] xfrm0: entered allmulticast mode [ 390.540897][T17121] veth0_to_hsr: entered allmulticast mode [ 390.546853][T17121] hsr_slave_0: entered allmulticast mode [ 390.553276][T17121] veth1_to_hsr: entered allmulticast mode [ 390.559193][T17121] hsr_slave_1: entered allmulticast mode [ 390.565225][T17121] hsr0: entered allmulticast mode [ 390.570997][T17121] veth1_virt_wifi: entered allmulticast mode [ 390.577323][T17121] virt_wifi0: entered allmulticast mode [ 390.584130][T17121] veth1_macvtap: entered allmulticast mode [ 390.590255][T17121] veth0_macvtap: entered allmulticast mode [ 390.596709][T17121] macvtap0: entered allmulticast mode [ 390.602758][T17121] macsec0: entered allmulticast mode [ 390.608278][T17121] geneve0: entered allmulticast mode [ 390.617468][T17121] geneve1: entered allmulticast mode [ 390.624727][T17121] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 390.634172][T17121] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 390.646306][T17121] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 390.654428][T17121] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 390.662391][T17121] xfrm1: entered allmulticast mode [ 390.667754][T17121] bond1: left promiscuous mode [ 390.674741][T17121] bond2: entered allmulticast mode [ 390.679904][T17121] bridge1: entered allmulticast mode [ 390.687801][T17121] veth2: entered allmulticast mode [ 390.695306][T17121] veth3: entered allmulticast mode [ 390.701189][T17121] bridge2: entered allmulticast mode [ 390.706647][T17121] bridge3: entered allmulticast mode [ 390.712663][T17121] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 390.720204][T17121] veth4: entered allmulticast mode [ 390.726671][T17121] veth5: entered allmulticast mode [ 390.733110][T17121] macsec1: entered allmulticast mode [ 390.738684][T17121] vlan2: left promiscuous mode [ 390.748755][T17121] bridge0: left promiscuous mode [ 390.756407][T17121] vlan2: entered allmulticast mode [ 390.762759][T17121] macsec2: left promiscuous mode [ 390.769606][T17121] macsec2: entered allmulticast mode [ 390.776530][T17121] bond3: left promiscuous mode [ 390.782040][T17121] bond3: entered allmulticast mode [ 390.787645][T17121] bridge4: entered allmulticast mode [ 390.794308][T17121] macvtap1: entered allmulticast mode [ 390.800858][T17121] sit1: entered allmulticast mode [ 390.806369][T17121] bond4: entered allmulticast mode [ 390.812875][T17121] bond5: left promiscuous mode [ 390.817823][T17121] bond5: entered allmulticast mode [ 390.823737][T17121] syztnl1: entered allmulticast mode [ 390.829329][T17121] bond6: entered allmulticast mode [ 390.834775][T17121] geneve2: entered allmulticast mode [ 390.840770][T17121] vlan0: entered allmulticast mode [ 390.846117][T17121] ip6tnl1: entered allmulticast mode [ 390.852009][T17121] veth6: entered allmulticast mode [ 390.857254][T17121] veth7: entered allmulticast mode [ 390.863059][T17121] bond7: entered allmulticast mode [ 390.870291][T17121] veth8: entered allmulticast mode [ 390.876516][T17121] veth9: entered allmulticast mode [ 390.883156][T17121] @: entered allmulticast mode [ 390.889275][T17121] bond8: entered allmulticast mode [ 390.894808][T17121] geneve3: entered allmulticast mode [ 390.900344][T17121] ip6tnl2: entered allmulticast mode [ 390.907122][T17121] veth10: entered allmulticast mode [ 390.912840][T17121] veth11: entered allmulticast mode [ 390.918170][T17121] veth12: entered allmulticast mode [ 390.923965][T17121] veth13: entered allmulticast mode [ 390.929265][T17121] gtp0: entered allmulticast mode [ 390.934912][T17121] mac80211_hwsim hwsim36 wlan3: entered allmulticast mode [ 390.942835][T17121] bond9: left promiscuous mode [ 390.947616][T17121] bond9: entered allmulticast mode [ 390.954006][T17121] vti0: entered allmulticast mode [ 390.959825][T17121] bond10: entered allmulticast mode [ 390.965705][T17121] bond11: left promiscuous mode [ 390.971031][T17121] wireguard0: left promiscuous mode [ 390.976362][T17121] bond11: entered allmulticast mode [ 390.981601][T17121] wireguard0: entered allmulticast mode [ 390.989613][T17121] gtp1: entered allmulticast mode [ 390.998211][T17121] vlan3: entered allmulticast mode [ 391.004987][T17121] tipc: Resetting bearer [ 391.011214][T17121] syzkaller0: left promiscuous mode [ 391.017664][T17121] bridge6: entered allmulticast mode [ 391.024889][T17121] veth14: entered allmulticast mode [ 391.030197][T17121] veth15: entered allmulticast mode [ 391.035882][T17121] batadv1: entered allmulticast mode [ 391.042445][T17121] sit2: entered allmulticast mode [ 391.048798][T17121] geneve4: left promiscuous mode [ 391.055998][T17121] hmac(sha224): entered allmulticast mode [ 391.104203][ T3542] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.145241][ T3542] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 391.170288][ T3542] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.186646][ T3542] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 391.211297][ T3542] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.220362][ T3542] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 391.262504][ T3542] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.300754][ T3542] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 391.892681][T17181] __nla_validate_parse: 9 callbacks suppressed [ 391.892704][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 392.167212][T17196] netlink: 'syz.2.2742': attribute type 1 has an invalid length. [ 392.186367][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 392.187197][T17196] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2742'. [ 392.975060][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2748'. [ 393.000912][T17237] net_ratelimit: 23 callbacks suppressed [ 393.000930][T17237] openvswitch: netlink: Invalid VLAN frame [ 393.048402][T17235] netlink: 'syz.0.2748': attribute type 13 has an invalid length. [ 393.080675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 393.088731][ C1] lec:lec_tx_timeout: lec0 [ 393.093723][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 393.099002][T17243] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2749'. [ 393.100955][T17235] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2748'. [ 393.166556][T17235] syz_tun: refused to change device tx_queue_len [ 393.173483][T17235] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 393.351854][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2752'. [ 393.409973][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'. [ 393.439815][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'. [ 393.448073][T17259] syzkaller0: entered promiscuous mode [ 393.620825][T17274] xt_hashlimit: max too large, truncated to 1048576 [ 393.727869][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'. [ 393.761146][T17267] netlink: 'syz.4.2755': attribute type 5 has an invalid length. [ 394.159933][T17290] syzkaller0: entered promiscuous mode [ 394.192029][T17290] syzkaller0: entered allmulticast mode [ 394.520653][T17300] xt_bpf: check failed: parse error [ 396.134687][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 396.379534][T17326] netlink: 'syz.4.2765': attribute type 1 has an invalid length. [ 396.837662][T17353] netlink: 'syz.2.2773': attribute type 3 has an invalid length. [ 397.341132][T17373] __nla_validate_parse: 9 callbacks suppressed [ 397.341155][T17373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'. [ 397.359752][T17373] tipc: Invalid UDP bearer configuration [ 397.359814][T17373] tipc: Enabling of bearer rejected, failed to enable media [ 397.488562][T17383] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2780'. [ 397.502558][T17381] netlink: 'syz.4.2779': attribute type 1 has an invalid length. [ 397.730174][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 397.745081][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'. [ 397.827511][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 397.868794][ T8247] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.868928][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 397.887274][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'. [ 397.897400][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 397.899822][ T8247] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.966021][ T8247] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.977947][ T8247] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.100720][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 398.108802][ C1] lec:lec_tx_timeout: lec0 [ 398.113921][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 398.191326][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2792'. [ 398.197799][T17416] xt_hashlimit: size too large, truncated to 1048576 [ 398.235721][T17423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2791'. [ 398.293968][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.311011][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.342668][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 398.352784][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.392493][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.412977][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.296030][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.321440][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.347545][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.356628][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.368963][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.076898][T17471] chnl_net:caif_netlink_parms(): no params data found [ 400.097016][T17506] syzkaller1: entered promiscuous mode [ 400.102737][T17506] syzkaller1: entered allmulticast mode [ 400.206154][T17471] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.215389][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.223491][T17471] bridge_slave_0: entered allmulticast mode [ 400.232193][T17471] bridge_slave_0: entered promiscuous mode [ 400.242227][T17471] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.249566][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.257222][T17471] bridge_slave_1: entered allmulticast mode [ 400.265804][T17471] bridge_slave_1: entered promiscuous mode [ 400.323245][T17471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.350313][T17471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.430232][T17471] team0: Port device team_slave_0 added [ 400.454057][T17471] team0: Port device team_slave_1 added [ 400.661319][T17471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.668495][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.750859][T17471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.805075][T17471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.838889][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.874074][T17471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.993503][T17540] netlink: 'syz.1.2822': attribute type 27 has an invalid length. [ 401.006128][T17471] hsr_slave_0: entered promiscuous mode [ 401.014886][T17471] hsr_slave_1: entered promiscuous mode [ 401.021720][T17471] debugfs: 'hsr0' already exists in 'hsr' [ 401.027652][T17471] Cannot create hsr debugfs directory [ 401.055027][T17540] ipvlan0: left allmulticast mode [ 401.064758][T17540] veth0_vlan: left allmulticast mode [ 401.076692][T17540] vxlan0: left promiscuous mode [ 401.083225][T17540] bridge1: left promiscuous mode [ 401.094049][T17540] bridge1: left allmulticast mode [ 401.104412][T17540] macvtap0: left promiscuous mode [ 401.109482][T17540] macvtap0: left allmulticast mode [ 401.154299][T17540] ipip1: left promiscuous mode [ 401.159554][T17540] ip6erspan0: left allmulticast mode [ 401.365380][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.391874][T17548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.410623][ T5828] Bluetooth: hci5: command tx timeout [ 402.085760][T17471] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.213293][T17471] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.327413][T17471] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.493738][T17471] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.540848][T17615] __nla_validate_parse: 16 callbacks suppressed [ 402.540871][T17615] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.2842'. [ 402.662945][T17621] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 402.715621][ T5938] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 402.951645][T17471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.997034][T17471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.042377][T17471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.052850][T17637] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 403.083257][T17471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.120519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 403.128614][ C1] lec:lec_tx_timeout: lec0 [ 403.133403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 403.388859][T17471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.396379][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 403.417811][ T8256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 403.479472][T17471] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.491258][ T5828] Bluetooth: hci5: command tx timeout [ 403.507920][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.515089][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.545727][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.552946][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.728727][T17674] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 403.763117][T17674] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.893467][T17471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.027494][T17681] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2861'. [ 404.451416][T10963] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.478082][T10963] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.665747][T17471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.818889][T17471] veth0_vlan: entered promiscuous mode [ 404.835128][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2871'. [ 404.863176][T17721] bridge_slave_0: left allmulticast mode [ 404.868871][T17721] bridge_slave_0: left promiscuous mode [ 404.891080][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.897156][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 404.924947][T17721] bridge_slave_1: left allmulticast mode [ 404.942505][T17721] bridge_slave_1: left promiscuous mode [ 404.950964][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.965630][T17721] team0: Port device team_slave_0 removed [ 404.968333][T17729] xt_l2tp: invalid flags combination: 8 [ 404.978587][T17721] team0: Port device team_slave_1 removed [ 404.982757][ T30] audit: type=1804 audit(1775598728.731:9): pid=17730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2875" name="/newroot/587/cgroup.controllers" dev="tmpfs" ino=3031 res=1 errno=0 [ 404.985199][T17721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.010777][T17729] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2875'. [ 405.023213][ T30] audit: type=1800 audit(1775598728.761:10): pid=17730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2875" name="cgroup.controllers" dev="tmpfs" ino=3031 res=0 errno=0 [ 405.047222][T17721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.057692][T17721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.077905][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 405.087853][T17723] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 405.096468][T17471] veth1_vlan: entered promiscuous mode [ 405.259505][T17471] veth0_macvtap: entered promiscuous mode [ 405.298217][T17471] veth1_macvtap: entered promiscuous mode [ 405.308876][T17748] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2880'. [ 405.329731][T17748] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 405.331167][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 405.359683][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 405.369558][T17744] syzkaller0: entered promiscuous mode [ 405.385683][T17744] syzkaller0: entered allmulticast mode [ 405.393657][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 405.427935][T17471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.479809][T17471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.523432][ T8256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.545702][ T8256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.565389][ T8256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.570656][ T5828] Bluetooth: hci5: command tx timeout [ 405.599557][ T8256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.772515][T17765] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 405.797817][T10962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.828952][T10962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.852654][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2885'. [ 405.862221][T17770] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.967742][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.983185][T17774] netlink: 'syz.3.2885': attribute type 58 has an invalid length. [ 405.991302][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.115426][T17781] xt_hashlimit: max too large, truncated to 1048576 [ 406.123200][T17781] xt_bpf: check failed: parse error [ 406.330183][T17783] syzkaller0: entered promiscuous mode [ 406.335779][T17783] syzkaller0: entered allmulticast mode [ 406.356692][T17790] Unknown options in mask 6 [ 406.434855][T17799] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 406.628627][T17807] SET target dimension over the limit! [ 406.903370][T17812] nbd: device at index 64 is going down [ 407.124615][T12067] udevd[12067]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 407.192096][T17836] xt_hashlimit: size too large, truncated to 1048576 [ 407.261506][T17837] netlink: 'syz.3.2898': attribute type 24 has an invalid length. [ 407.337138][T17846] netlink: zone id is out of range [ 407.342574][T17846] netlink: zone id is out of range [ 407.383871][T17846] netlink: zone id is out of range [ 407.389054][T17846] netlink: zone id is out of range [ 407.437510][T17846] netlink: zone id is out of range [ 407.463465][T17846] netlink: zone id is out of range [ 407.650679][ T5828] Bluetooth: hci5: command tx timeout [ 408.037682][T17867] team0 (unregistering): Port device team_slave_0 removed [ 408.122947][T17867] team0 (unregistering): Port device team_slave_1 removed [ 408.140731][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 408.148803][ C1] lec:lec_tx_timeout: lec0 [ 408.154321][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 408.211165][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 408.525321][T17890] __nla_validate_parse: 5 callbacks suppressed [ 408.525345][T17890] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2908'. [ 408.631853][T17894] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 408.831887][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 409.295989][T17913] netlink: 66752 bytes leftover after parsing attributes in process `syz.3.2913'. [ 409.411432][T17932] netlink: 'syz.1.2918': attribute type 13 has an invalid length. [ 410.130163][T17960] veth0: entered promiscuous mode [ 410.273794][T17967] netlink: 3584 bytes leftover after parsing attributes in process `syz.3.2922'. [ 410.321115][T17967] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 410.337908][T17960] veth0: left promiscuous mode [ 410.376774][T17972] sctp: [Deprecated]: syz.1.2926 (pid 17972) Use of int in max_burst socket option. [ 410.376774][T17972] Use struct sctp_assoc_value instead [ 410.917656][T17996] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 411.046590][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2932'. [ 411.108387][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.128749][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.138869][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.186745][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.201520][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.338700][T18010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.366766][T18013] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2935'. [ 411.423421][T18019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2935'. [ 411.654483][T18010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.861581][T18010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.939639][T18047] netlink: 'syz.1.2939': attribute type 83 has an invalid length. [ 412.033081][T18010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.116504][T18054] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2939'. [ 412.375983][ T8247] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.496706][T10963] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.519967][T10961] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.588322][T18060] syzkaller1: left promiscuous mode [ 412.597650][T18060] syzkaller1: left allmulticast mode [ 412.669726][ T8247] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.894467][T18060] syzkaller0: entered promiscuous mode [ 412.900104][T18060] syzkaller0: entered allmulticast mode [ 412.918018][T18064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.968970][T18006] chnl_net:caif_netlink_parms(): no params data found [ 413.065096][T18069] xt_hashlimit: size too large, truncated to 1048576 [ 413.153484][T18075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2947'. [ 413.241203][T18080] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2946'. [ 413.244805][T18074] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.261198][ T5828] Bluetooth: hci0: command tx timeout [ 413.286531][T18074] bridge_slave_0 (unregistering): left allmulticast mode [ 413.294445][T18074] bridge_slave_0 (unregistering): left promiscuous mode [ 413.303041][T18074] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.970484][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 413.978569][ C1] lec:lec_tx_timeout: lec0 [ 413.983380][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 415.033649][T18006] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.041433][T18006] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.048731][T18006] bridge_slave_0: entered allmulticast mode [ 415.057135][T18006] bridge_slave_0: entered promiscuous mode [ 415.066410][T18006] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.074289][T18006] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.083253][T18006] bridge_slave_1: entered allmulticast mode [ 415.094083][T18006] bridge_slave_1: entered promiscuous mode [ 415.152309][T18006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.197312][T18006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.283871][T18006] team0: Port device team_slave_0 added [ 415.304072][T18006] team0: Port device team_slave_1 added [ 415.332966][ T5828] Bluetooth: hci0: command tx timeout [ 415.348658][T18113] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2956'. [ 415.384045][T18111] syzkaller0: entered promiscuous mode [ 415.389602][T18111] syzkaller0: entered allmulticast mode [ 415.401421][T18006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.408595][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.438537][T18006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.453597][T18006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.460845][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.500201][T18006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.634064][T18006] hsr_slave_0: entered promiscuous mode [ 415.642316][T18006] hsr_slave_1: entered promiscuous mode [ 415.649117][T18006] debugfs: 'hsr0' already exists in 'hsr' [ 415.656103][T18006] Cannot create hsr debugfs directory [ 415.810704][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 416.048443][T18141] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2962'. [ 416.531051][T18153] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 416.549639][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 416.576612][T18154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2966'. [ 416.603026][T18153] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2968'. [ 416.685085][T10961] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.723426][T10961] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.813421][T10961] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.830766][T10961] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.881071][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2972'. [ 416.895789][T18167] netlink: 'syz.2.2971': attribute type 8 has an invalid length. [ 416.911519][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2973'. [ 416.943349][T18172] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2972'. [ 416.996169][T18175] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 417.004276][T18175] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2974'. [ 417.094329][T18006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.139184][T18006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.210136][T18006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 417.245542][T18006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 417.268912][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 417.304550][T18191] openvswitch: netlink: Actions may not be safe on all matching packets [ 417.420586][ T5828] Bluetooth: hci0: command tx timeout [ 417.480894][T18196] nbd: must specify a size in bytes for the device [ 417.514144][T18200] block nbd0: NBD_DISCONNECT [ 417.523491][T18200] block nbd0: Send disconnect failed -32 [ 417.553956][T18200] block nbd0: shutting down sockets [ 417.604037][T18006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.655970][T18006] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.685933][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.693187][T10961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.735674][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.742931][ T8247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.166679][T18232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.341484][T18240] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 418.361812][T18240] bond11 (unregistering): Released all slaves [ 418.466968][T18006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.654221][T18006] veth0_vlan: entered promiscuous mode [ 418.691511][T18006] veth1_vlan: entered promiscuous mode [ 418.723086][T18006] veth0_macvtap: entered promiscuous mode [ 418.734482][T18006] veth1_macvtap: entered promiscuous mode [ 418.760005][T18006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.775224][T18006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.818129][ T3542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.832236][ T3542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.841432][ T3542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.857032][ T8256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.990477][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 418.998548][ C1] lec:lec_tx_timeout: lec0 [ 419.003168][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.124344][T18261] x_tables: ip_tables: ah match: only valid for protocol 51 [ 419.490929][ T5828] Bluetooth: hci0: command tx timeout [ 421.121885][T18232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.278061][ T8256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.292849][ T8256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.451024][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.476342][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.540149][T18290] netlink: 'syz.4.3003': attribute type 13 has an invalid length. [ 421.559822][T18290] netlink: 'syz.4.3003': attribute type 17 has an invalid length. [ 421.705548][T18299] __nla_validate_parse: 9 callbacks suppressed [ 421.705569][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 421.756731][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 421.869094][T18290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.898949][T18290] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.928164][T18290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.183952][T18307] openvswitch: netlink: Flow actions attr not present in new flow. [ 422.184297][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 422.202127][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.212932][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.222974][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 422.241835][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.566948][T18305] bond1: option ad_select: invalid value (34) [ 422.575149][T18305] bond1 (unregistering): Released all slaves [ 422.625969][T18307] bond4: option miimon: invalid value (18446744073709551607) [ 422.639641][T18307] bond4: option miimon: allowed values 0 - 2147483647 [ 422.678488][T18307] bond4 (unregistering): Released all slaves [ 423.347278][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3017'. [ 423.669502][T18375] netlink: 'syz.0.3019': attribute type 2 has an invalid length. [ 423.746518][T18379] x_tables: duplicate underflow at hook 1 [ 423.775826][T18377] x_tables: duplicate underflow at hook 1 [ 423.868459][T18375] !: entered promiscuous mode [ 423.905741][T18376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.934728][T18385] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 424.012940][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.021056][ C1] lec:lec_tx_timeout: lec0 [ 424.027050][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.277346][T18311] chnl_net:caif_netlink_parms(): no params data found [ 424.291801][ T5145] Bluetooth: hci3: command tx timeout [ 424.677222][T18415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3027'. [ 424.975254][T18432] sctp: [Deprecated]: syz.0.3028 (pid 18432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.975254][T18432] Use struct sctp_sack_info instead [ 425.228056][T18311] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.240760][T18311] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.256331][T18311] bridge_slave_0: entered allmulticast mode [ 425.275151][T18311] bridge_slave_0: entered promiscuous mode [ 425.294216][T18311] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.311398][T18311] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.324910][T18311] bridge_slave_1: entered allmulticast mode [ 425.343504][T18311] bridge_slave_1: entered promiscuous mode [ 425.377956][T18453] netlink: 'syz.3.3033': attribute type 27 has an invalid length. [ 425.466182][T18462] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3036'. [ 425.494814][T18453] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.502635][T18453] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.568576][T18453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.587944][T18453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.700935][T18463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3037'. [ 425.741902][T10962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.752026][T10962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.806437][T18311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.832980][T10962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.855994][T18468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3038'. [ 425.857014][T10962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.882628][T18311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.983283][T18311] team0: Port device team_slave_0 added [ 425.993824][T18311] team0: Port device team_slave_1 added [ 426.047830][T18476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3042'. [ 426.091236][T18478] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 426.098908][T18311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.106784][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.135231][T18311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.174912][T18482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3044'. [ 426.194378][T18311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.195045][T18482] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3044'. [ 426.211298][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.241217][T18483] x_tables: unsorted underflow at hook 4 [ 426.255620][T18311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.370985][ T5145] Bluetooth: hci3: command tx timeout [ 426.515642][T18311] hsr_slave_0: entered promiscuous mode [ 426.533151][T18311] hsr_slave_1: entered promiscuous mode [ 426.550014][T18311] debugfs: 'hsr0' already exists in 'hsr' [ 426.559233][T18311] Cannot create hsr debugfs directory [ 427.208940][T18521] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3054'. [ 427.219690][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 427.564335][T18540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3060'. [ 427.605737][T18541] netlink: 'syz.4.3059': attribute type 13 has an invalid length. [ 427.665491][T18545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3062'. [ 427.694722][T18545] sctp: [Deprecated]: syz.0.3062 (pid 18545) Use of int in maxseg socket option. [ 427.694722][T18545] Use struct sctp_assoc_value instead [ 427.710005][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 427.737307][T18545] bond1: option broadcast_neighbor: invalid value (30) [ 427.746779][T18545] bond1 (unregistering): Released all slaves [ 428.048161][T18311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.066477][T18311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.076391][T18311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.104990][T18311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.407298][ T30] audit: type=1800 audit(1775598752.151:11): pid=18572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3066" name=CB dev="tmpfs" ino=75 res=0 errno=0 [ 428.451066][ T5145] Bluetooth: hci3: command tx timeout [ 428.583878][T18577] bridge6: entered promiscuous mode [ 428.606638][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3065'. [ 428.615617][T18577] bridge6: entered allmulticast mode [ 428.800067][T18580] vlan2: entered promiscuous mode [ 428.849856][T18580] bridge0: entered promiscuous mode [ 428.998996][T18311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.040715][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 429.048840][ C1] lec:lec_tx_timeout: lec0 [ 429.053956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 429.140614][T18599] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3071'. [ 429.153933][T18311] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.165613][T18603] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3072'. [ 429.200017][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.207225][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.347711][T10967] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.354973][T10967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.008639][T18638] netlink: 'syz.4.3078': attribute type 3 has an invalid length. [ 430.365730][T18661] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 430.402950][T18661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 430.531967][ T5145] Bluetooth: hci3: command tx timeout [ 430.681914][T18311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.999509][T18311] veth0_vlan: entered promiscuous mode [ 431.014598][T18311] veth1_vlan: entered promiscuous mode [ 431.053036][T18311] veth0_macvtap: entered promiscuous mode [ 431.117717][T18311] veth1_macvtap: entered promiscuous mode [ 431.170708][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 431.361901][T18311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.418750][T18311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.423853][T18709] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 431.584783][T18709] 8021q: adding VLAN 0 to HW filter on device bond11 [ 431.628805][ T3542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.701405][T18722] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 431.731455][T18722] bond11: (slave batadv3): making interface the new active one [ 431.750046][T18722] bond11: (slave batadv3): Enslaving as an active interface with an up link [ 431.787105][ T3542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.806033][ T3542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.859382][ T3542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.081587][T18743] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.212478][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.220346][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.285987][T18748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3100'. [ 432.362122][T10963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.390522][T10963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.896698][T18776] tipc: Started in network mode [ 432.922259][T18776] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 432.970349][T18776] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 433.017337][T18776] tipc: Enabled bearer , priority 26 [ 433.219604][T18790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3108'. [ 433.267958][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 433.359434][T18788] syzkaller0: entered promiscuous mode [ 433.365447][T18788] syzkaller0: entered allmulticast mode [ 433.415032][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 433.424754][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 433.433645][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 433.448839][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 433.462277][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.060508][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 434.068567][ C1] lec:lec_tx_timeout: lec0 [ 434.077091][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 434.083706][T18813] IPVS: length: 47 != 24 [ 434.956290][T18841] netlink: 'syz.4.3115': attribute type 1 has an invalid length. [ 435.465272][ T10] tipc: Node number set to 1 [ 435.491282][ T5832] Bluetooth: hci4: command tx timeout [ 435.594727][T18843] netlink: 'syz.3.3116': attribute type 2 has an invalid length. [ 435.732509][T18848] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3118'. [ 435.861706][T18861] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3122'. [ 435.920515][T18857] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 435.928384][T18857] netlink: 'syz.4.3121': attribute type 2 has an invalid length. [ 435.937091][T18795] chnl_net:caif_netlink_parms(): no params data found [ 435.979918][T18862] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 436.013746][T18862] netlink: 'syz.4.3121': attribute type 2 has an invalid length. [ 436.058623][T18861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'. [ 436.299500][T18874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.396986][T18882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.436953][T18795] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.449576][T18795] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.460980][T18795] bridge_slave_0: entered allmulticast mode [ 436.469015][T18795] bridge_slave_0: entered promiscuous mode [ 436.511449][T18795] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.518703][T18795] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.532220][T18795] bridge_slave_1: entered allmulticast mode [ 436.552357][T18795] bridge_slave_1: entered promiscuous mode [ 436.660103][T18795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.699373][T18795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.823728][ T24] IPVS: starting estimator thread 0... [ 436.842569][T18795] team0: Port device team_slave_0 added [ 436.850322][T18795] team0: Port device team_slave_1 added [ 436.908294][T18902] netlink: 'syz.3.3132': attribute type 29 has an invalid length. [ 436.917669][T18905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 436.920807][T18900] IPVS: using max 51 ests per chain, 122400 per kthread [ 436.927246][T18905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 436.944235][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 436.954477][T18795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.962166][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.990286][T18795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.002227][T18902] netlink: 'syz.3.3132': attribute type 29 has an invalid length. [ 437.021566][T18795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.028878][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.055954][T18795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.127613][T18795] hsr_slave_0: entered promiscuous mode [ 437.134908][T18795] hsr_slave_1: entered promiscuous mode [ 437.142251][T18795] debugfs: 'hsr0' already exists in 'hsr' [ 437.148640][T18795] Cannot create hsr debugfs directory [ 437.325601][T18795] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.376360][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3137'. [ 437.395550][T18795] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.447854][T18795] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.519398][T18795] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.575244][ T5832] Bluetooth: hci4: command tx timeout [ 437.653199][T18932] ip6gre1: entered promiscuous mode [ 437.660861][T18932] ip6gre1: entered allmulticast mode [ 437.897057][T18943] tipc: Resetting bearer [ 438.064749][T18943] ip6gre1: left promiscuous mode [ 438.074380][T18943] ip6gre1: left allmulticast mode [ 438.125651][T18945] tipc: Started in network mode [ 438.147313][T18945] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 438.180769][T18945] tipc: Enabling of bearer rejected, failed to enable media [ 438.209433][ T8256] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.273703][ T8256] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.383012][ T8256] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.406033][ T8256] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.465797][T18957] tipc: New replicast peer: 255.255.255.255 [ 438.488298][T18957] tipc: Enabled bearer , priority 26 [ 438.518905][T18795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 438.592254][T18795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 438.630059][T18795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.654242][T18967] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 438.665621][T18795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.736763][T18976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3151'. [ 438.998534][T18795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.043481][T18795] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.060401][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3157'. [ 439.077363][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.084566][T10962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.090828][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 439.099828][ C1] lec:lec_tx_timeout: lec0 [ 439.105274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 439.118858][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3157'. [ 439.129073][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 439.139530][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 439.140311][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.153430][T18993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3156'. [ 439.155620][ T8256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.252660][T18795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.274420][T18795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.611907][ T10] tipc: Node number set to 4278255617 [ 439.651513][ T5832] Bluetooth: hci4: command tx timeout [ 439.675081][T18795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.724069][T18795] veth0_vlan: entered promiscuous mode [ 439.769197][T18795] veth1_vlan: entered promiscuous mode [ 439.876438][T18795] veth0_macvtap: entered promiscuous mode [ 439.912349][T18795] veth1_macvtap: entered promiscuous mode [ 439.976471][T18795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.021388][T18795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.038802][ T8256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.052822][ T8256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.070528][T19032] tipc: Can't bind to reserved service type 2 [ 440.135943][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.184963][ T8256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.297361][ T8256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.473954][T10963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.495312][T10963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.628061][ T8247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.645627][ T8247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.875459][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 441.231451][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.243181][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.252371][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.260854][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.280807][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.375679][T19085] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 441.539985][T19092] netlink: 'syz.3.3182': attribute type 3 has an invalid length. [ 441.549229][T19092] netlink: 'syz.3.3182': attribute type 3 has an invalid length. [ 441.731967][ T5828] Bluetooth: hci4: command tx timeout [ 441.826259][T19103] veth0: entered promiscuous mode [ 441.836832][T19100] geneve1: entered promiscuous mode [ 441.863295][T19101] veth0: left promiscuous mode [ 441.999798][T19108] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.3186'. [ 442.120963][T19079] chnl_net:caif_netlink_parms(): no params data found [ 442.593759][T19079] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.621358][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.641671][T19079] bridge_slave_0: entered allmulticast mode [ 442.649797][T19079] bridge_slave_0: entered promiscuous mode [ 442.681601][T19079] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.688875][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.718597][T19079] bridge_slave_1: entered allmulticast mode [ 442.739823][T19079] bridge_slave_1: entered promiscuous mode [ 442.878970][T19079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.928546][T19079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.061903][T19079] team0: Port device team_slave_0 added [ 443.113400][T19079] team0: Port device team_slave_1 added [ 443.163657][T19079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.172174][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.225348][T19079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.274162][T19079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.294420][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.337330][ T5828] Bluetooth: hci2: command tx timeout [ 443.367768][T19079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.410278][T19162] bond1: option mode: invalid value (254) [ 443.438733][T19162] bond1 (unregistering): Released all slaves [ 443.589847][T19172] wg1: entered promiscuous mode [ 443.645168][T19079] hsr_slave_0: entered promiscuous mode [ 443.654672][T19079] hsr_slave_1: entered promiscuous mode [ 443.661997][T19079] debugfs: 'hsr0' already exists in 'hsr' [ 443.668593][T19079] Cannot create hsr debugfs directory [ 443.709386][T19175] bond1 (unregistering): Released all slaves [ 443.942341][T19184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3203'. [ 444.120554][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 444.128649][ C1] lec:lec_tx_timeout: lec0 [ 444.133969][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 444.207051][T19196] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3207'. [ 444.233280][T19196] openvswitch: netlink: Duplicate key (type 3). [ 444.497199][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3209'. [ 444.523868][T19208] netlink: 'syz.3.3210': attribute type 3 has an invalid length. [ 444.549313][T19199] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 444.568292][T19199] bond1 (unregistering): Released all slaves [ 444.640290][T19206] netlink: 'syz.0.3208': attribute type 6 has an invalid length. [ 444.660647][T19206] netlink: 'syz.0.3208': attribute type 7 has an invalid length. [ 444.669018][T19206] netlink: 'syz.0.3208': attribute type 8 has an invalid length. [ 444.886787][T19221] syzkaller0: entered promiscuous mode [ 444.892453][T19221] syzkaller0: entered allmulticast mode [ 445.004312][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 445.089681][T19227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3214'. [ 445.089917][T19228] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3213'. [ 445.128910][T19227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3214'. [ 445.187175][T19228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.254768][T19228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.279926][T19228] bond0 (unregistering): Released all slaves [ 445.306970][T19079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.344653][T19079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.399765][T19079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.413096][ T5832] Bluetooth: hci2: command tx timeout [ 445.435173][T19079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.450205][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'. [ 445.470019][T19242] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 445.529069][T19248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3220'. [ 445.539625][T19248] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3220'. [ 445.750775][T19079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.804523][T19079] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.830493][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.837712][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.901123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.908315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.160782][T19283] netlink: 'syz.0.3228': attribute type 4 has an invalid length. [ 446.212500][T19283] .`: renamed from bond0 (while UP) [ 446.433610][T19079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.516249][T19306] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.651048][T19312] netlink: 'syz.3.3234': attribute type 29 has an invalid length. [ 446.906212][T19322] vlan3: entered allmulticast mode [ 446.925344][T19322] bridge1: entered allmulticast mode [ 446.972747][T19319] bridge1: port 1(erspan0) entered blocking state [ 446.979579][T19319] bridge1: port 1(erspan0) entered disabled state [ 446.988082][T19319] erspan0: entered allmulticast mode [ 446.996617][T19319] erspan0: entered promiscuous mode [ 447.003778][T19319] bridge1: port 1(erspan0) entered blocking state [ 447.010383][T19319] bridge1: port 1(erspan0) entered forwarding state [ 447.491135][ T5832] Bluetooth: hci2: command tx timeout [ 447.540237][T19322] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 447.597016][T19079] veth0_vlan: entered promiscuous mode [ 447.676013][T19079] veth1_vlan: entered promiscuous mode [ 447.799025][T19079] veth0_macvtap: entered promiscuous mode [ 447.814437][T19079] veth1_macvtap: entered promiscuous mode [ 447.887323][T19079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.939201][T19079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.994583][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.025424][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.049700][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.126418][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.296034][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.319893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.378590][T19356] netlink: 'syz.1.3249': attribute type 21 has an invalid length. [ 448.445097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.457726][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.638579][T19364] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 448.708631][T19367] bond1 (unregistering): Released all slaves [ 448.909350][T19376] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 449.140757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 449.148891][ C1] lec:lec_tx_timeout: lec0 [ 449.153912][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 449.162414][T19381] __nla_validate_parse: 11 callbacks suppressed [ 449.162432][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'. [ 449.189952][T19381] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 449.198344][T19381] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 449.570821][ T5832] Bluetooth: hci2: command tx timeout [ 449.832581][T19412] netlink: 'syz.0.3265': attribute type 13 has an invalid length. [ 449.846143][T19412] netlink: 'syz.0.3265': attribute type 17 has an invalid length. [ 449.958211][T19422] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 449.969482][T19423] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3265'. [ 449.986998][T19422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 449.998551][T19412] 8021q: adding VLAN 0 to HW filter on device .` [ 450.007609][T19422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3266'. [ 450.008621][T19420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.037619][T19412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.076371][T19425] bridge_slave_0: left allmulticast mode [ 450.084172][T19429] openvswitch: netlink: IP tunnel TTL not specified. [ 450.095871][T19425] bridge_slave_0: left promiscuous mode [ 450.107471][T19425] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.246761][T19425] bridge_slave_1: left allmulticast mode [ 450.254197][T19425] bridge_slave_1: left promiscuous mode [ 450.281256][T19425] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.312463][T19425] bond0: (slave bond_slave_0): Releasing backup interface [ 450.326571][T19425] bond0: (slave bond_slave_1): Releasing backup interface [ 450.352499][T19425] team0: Port device team_slave_0 removed [ 450.365210][T19425] team0: Port device team_slave_1 removed [ 450.373810][T19425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.384131][T19425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.394229][T19425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.402679][T19425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.415052][T19425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.568094][T19442] Cannot find set identified by id 0 to match [ 450.658147][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'. [ 450.712343][T19443] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3270'. [ 450.821849][T19451] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 450.912746][T19451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.935388][T19454] bond0: (slave dummy0): making interface the new active one [ 450.944819][T19454] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 451.159477][T19464] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.290136][T19474] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 451.410788][T19483] xt_connbytes: Forcing CT accounting to be enabled [ 451.761193][T19490] netlink: zone id is out of range [ 451.777540][T19490] netlink: zone id is out of range [ 451.788751][T19490] netlink: zone id is out of range [ 451.799765][T19490] netlink: zone id is out of range [ 451.809881][T19490] netlink: zone id is out of range [ 451.822530][T19490] netlink: zone id is out of range [ 452.031259][T19497] FAULT_INJECTION: forcing a failure. [ 452.031259][T19497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.060790][T19497] CPU: 1 UID: 0 PID: 19497 Comm: syz.0.3286 Not tainted syzkaller #0 PREEMPT(full) [ 452.060818][T19497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.060829][T19497] Call Trace: [ 452.060838][T19497] [ 452.060846][T19497] dump_stack_lvl+0xe8/0x150 [ 452.060877][T19497] should_fail_ex+0x412/0x560 [ 452.060912][T19497] _copy_from_iter+0x1d3/0x1670 [ 452.060934][T19497] ? unwind_next_frame+0xa5/0x23c0 [ 452.060971][T19497] ? __lock_acquire+0x6b5/0x2cf0 [ 452.060995][T19497] ? __pfx__copy_from_iter+0x10/0x10 [ 452.061033][T19497] tun_get_user+0x275/0x3ed0 [ 452.061070][T19497] ? aa_file_perm+0x192/0x15e0 [ 452.061102][T19497] ? aa_file_perm+0x50e/0x15e0 [ 452.061122][T19497] ? __pfx_tun_get_user+0x10/0x10 [ 452.061142][T19497] ? aa_file_perm+0x192/0x15e0 [ 452.061168][T19497] ? __lock_acquire+0x6b5/0x2cf0 [ 452.061202][T19497] ? ref_tracker_alloc+0x35c/0x4c0 [ 452.061225][T19497] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 452.061251][T19497] ? tun_get+0x1c/0x2f0 [ 452.061278][T19497] ? tun_get+0x1c/0x2f0 [ 452.061300][T19497] ? tun_get+0x1c/0x2f0 [ 452.061326][T19497] tun_chr_write_iter+0x113/0x200 [ 452.061351][T19497] vfs_write+0x61d/0xb90 [ 452.061382][T19497] ? __pfx_vfs_write+0x10/0x10 [ 452.061414][T19497] ? __fget_files+0x2a/0x420 [ 452.061441][T19497] ksys_write+0x150/0x270 [ 452.061465][T19497] ? __pfx_ksys_write+0x10/0x10 [ 452.061498][T19497] do_syscall_64+0x14d/0xf80 [ 452.061523][T19497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.061541][T19497] ? clear_bhb_loop+0x40/0x90 [ 452.061565][T19497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.061583][T19497] RIP: 0033:0x7f56d559c819 [ 452.061611][T19497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.061627][T19497] RSP: 002b:00007f56d6401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.061648][T19497] RAX: ffffffffffffffda RBX: 00007f56d5816180 RCX: 00007f56d559c819 [ 452.061662][T19497] RDX: 000000000000340a RSI: 0000200000000780 RDI: 0000000000000007 [ 452.061673][T19497] RBP: 00007f56d6401090 R08: 0000000000000000 R09: 0000000000000000 [ 452.061685][T19497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.061696][T19497] R13: 00007f56d5816218 R14: 00007f56d5816180 R15: 00007fff98dbf538 [ 452.061727][T19497] [ 453.239840][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3295'. [ 453.326419][T19528] syzkaller0: entered promiscuous mode [ 454.921592][T19553] netlink: 'syz.3.3298': attribute type 17 has an invalid length. [ 454.930454][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 454.938493][ C1] lec:lec_tx_timeout: lec0 [ 454.943593][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 455.273383][T19581] netlink: 'syz.2.3304': attribute type 1 has an invalid length. [ 455.432651][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 455.460062][T19595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 455.524254][T19603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3310'. [ 455.726546][T19609] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3311'. [ 455.765867][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3311'. [ 455.780599][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 455.992632][T19620] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3313'. [ 456.063002][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'. [ 456.410052][T19555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.420117][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 456.631817][T19636] block nbd0: server does not support multiple connections per device. [ 456.664998][T19636] block nbd0: shutting down sockets [ 456.684751][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 457.388222][T19674] gretap0: entered promiscuous mode [ 457.395254][T19674] macsec1: entered allmulticast mode [ 457.460804][T19674] gretap0: entered allmulticast mode [ 457.558084][T19674] gretap0: left allmulticast mode [ 457.574360][T19674] gretap0: left promiscuous mode [ 458.615627][T19741] net_ratelimit: 434 callbacks suppressed [ 458.615648][T19741] netlink: Unknown conntrack attr (0) [ 459.258593][T19770] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001 [ 459.308020][T19770] Unsupported ieee802154 address type: 0 [ 459.462981][T19777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.923085][T19796] syz.4.3356 uses old SIOCAX25GETINFO [ 459.971884][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 459.980015][ C1] lec:lec_tx_timeout: lec0 [ 459.984989][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 460.120247][T19799] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 460.355649][T19827] xfrm0: entered promiscuous mode [ 460.388606][T19827] xfrm0: entered allmulticast mode [ 460.612515][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 461.265494][T19864] netlink: 'syz.4.3371': attribute type 4 has an invalid length. [ 461.403607][T19878] : renamed from dummy0 (while UP) [ 461.598299][T19882] veth0: entered promiscuous mode [ 461.694603][T19891] bond0: (slave rose0): Enslaving as an active interface with an up link [ 461.703559][T19884] __nla_validate_parse: 26 callbacks suppressed [ 461.703578][T19884] netlink: 2912 bytes leftover after parsing attributes in process `syz.1.3374'. [ 461.740790][T19884] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 461.782659][T19889] veth0: left promiscuous mode [ 461.825088][T19897] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 462.061658][T19907] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.3379'. [ 462.115189][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 462.300966][T19919] netlink: 'syz.4.3381': attribute type 1 has an invalid length. [ 462.312664][T19921] netlink: 'syz.2.3385': attribute type 29 has an invalid length. [ 462.356772][T19927] team0 (unregistering): Port device team_slave_0 removed [ 462.386137][T19927] team0 (unregistering): Port device team_slave_1 removed [ 462.614206][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 462.615688][T19939] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3389'. [ 462.725113][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 462.958894][ T24] IPVS: starting estimator thread 0... [ 462.982018][T19958] netlink: 'syz.4.3395': attribute type 1 has an invalid length. [ 462.996021][T19958] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3395'. [ 463.008034][T19958] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3395'. [ 463.031478][T19958] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3395'. [ 463.051820][T19956] IPVS: using max 27 ests per chain, 64800 per kthread [ 463.076139][T19953] netlink: 'syz.2.3394': attribute type 39 has an invalid length. [ 463.082409][T19964] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3395'. [ 463.596947][T19996] siw: device registration error -23 [ 465.000526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 465.008605][ C1] lec:lec_tx_timeout: lec0 [ 465.014337][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 465.945707][T19962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.154649][T20057] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 466.256380][T20071] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 466.268029][T20071] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 466.413343][T20057] bond2: (slave gretap2): making interface the new active one [ 466.439303][T20057] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 467.398177][T20118] __nla_validate_parse: 3 callbacks suppressed [ 467.398199][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3432'. [ 467.473326][T20121] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 467.495304][T20118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.496291][T20124] IPVS: sh: FWM 3 0x00000003 - no destination available [ 467.509216][ T1172] IPVS: starting estimator thread 0... [ 467.545257][T20118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3432'. [ 467.556038][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 467.610725][T20125] IPVS: using max 29 ests per chain, 69600 per kthread [ 467.616181][T20118] bond0: entered promiscuous mode [ 467.652240][T20118] bond0: entered allmulticast mode [ 467.670908][T20124] IPVS: sh: FWM 3 0x00000003 - no destination available [ 467.678769][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 467.809904][T20118] macsec1: entered promiscuous mode [ 468.007235][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 468.169067][T20145] dvmrp1: entered allmulticast mode [ 468.204670][T20142] dvmrp1: left allmulticast mode [ 468.256575][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 468.310254][T20157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3438'. [ 468.808784][T20187] xt_TPROXY: Can be used only with -p tcp or -p udp [ 469.836912][T20233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3456'. [ 469.848052][T20234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3456'. [ 470.020736][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 470.028800][ C1] lec:lec_tx_timeout: lec0 [ 470.033609][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 470.157650][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 470.176064][T20247] n: the hash_elasticity option has been deprecated and is always 16 [ 470.188084][T20247] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 471.383763][T20299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3474'. [ 471.394351][T20299] netlink: 'syz.2.3474': attribute type 7 has an invalid length. [ 471.406663][T20299] netlink: 'syz.2.3474': attribute type 8 has an invalid length. [ 471.417051][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 471.536720][T20297] bond0: entered promiscuous mode [ 471.546977][T20297] dummy0: entered promiscuous mode [ 471.564943][T20292] bond0: left promiscuous mode [ 471.582384][T20292] dummy0: left promiscuous mode [ 471.870702][T20314] syzkaller1: entered promiscuous mode [ 471.882892][T20314] syzkaller1: entered allmulticast mode [ 471.913286][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802927fc00: rx timeout, send abort [ 471.919481][T20316] syzkaller0: entered promiscuous mode [ 471.940621][T20316] syzkaller0: entered allmulticast mode [ 472.413416][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802927f400: rx timeout, send abort [ 472.422761][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802927fc00: abort rx timeout. Force session deactivation [ 472.567413][T20346] __nla_validate_parse: 2 callbacks suppressed [ 472.567433][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3488'. [ 472.676635][T20346] hsr_slave_1 (unregistering): left promiscuous mode [ 472.716320][T20351] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3491'. [ 472.904291][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3495'. [ 472.921754][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802927f400: abort rx timeout. Force session deactivation [ 473.427952][T20382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3501'. [ 473.495471][T20384] xt_TCPMSS: Only works on TCP SYN packets [ 473.769266][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 474.355088][T20408] Bluetooth: MGMT ver 1.23 [ 475.040504][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 475.048565][ C1] lec:lec_tx_timeout: lec0 [ 475.053312][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 475.057258][T20441] netlink: 'syz.4.3516': attribute type 89 has an invalid length. [ 475.686029][T20461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3521'. [ 476.796045][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 477.184797][T20521] xt_l2tp: wrong L2TP version: 0 [ 477.419763][T20529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3539'. [ 477.501803][T20529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.772588][T20547] netlink: 'syz.4.3544': attribute type 12 has an invalid length. [ 477.791373][T20547] netlink: 'syz.4.3544': attribute type 29 has an invalid length. [ 477.801252][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'. [ 477.811057][T20547] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3544'. [ 477.820132][T20547] netlink: 'syz.4.3544': attribute type 1 has an invalid length. [ 478.056845][T20561] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.099286][T20561] bridge_slave_0 (unregistering): left allmulticast mode [ 478.108110][T20561] bridge_slave_0 (unregistering): left promiscuous mode [ 478.115513][T20561] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.391206][T20587] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.437799][T20589] ip6gretap0: entered promiscuous mode [ 478.450917][T20589] vlan4: entered promiscuous mode [ 478.501740][T20596] x_tables: ip_tables: ah match: only valid for protocol 51 [ 478.611591][T20602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.638551][T20601] rdma_op ffff8880467319f0 conn xmit_rdma 0000000000000000 [ 478.946177][T20601] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 478.969723][T20601] bond4 (unregistering): Released all slaves [ 479.567130][T20624] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 479.588770][T20624] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3563'. [ 479.898785][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 479.936308][T20637] sctp: [Deprecated]: syz.1.3567 (pid 20637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.936308][T20637] Use struct sctp_sack_info instead [ 480.060473][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 480.068556][ C1] lec:lec_tx_timeout: lec0 [ 480.075506][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 480.532769][T20668] netlink: 'syz.3.3574': attribute type 2 has an invalid length. [ 480.818917][T20673] gretap0: entered promiscuous mode [ 480.908335][T20673] gretap0: left promiscuous mode [ 481.407399][T20684] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 481.439563][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 481.584936][T20684] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 481.878469][T20701] tipc: Started in network mode [ 481.901125][T20701] tipc: Node identity a2d584eb302, cluster identity 4711 [ 481.910986][T20701] tipc: Enabled bearer , priority 0 [ 482.000003][T20705] tipc: Disabling bearer [ 482.015725][T20702] netlink: 'syz.2.3579': attribute type 93 has an invalid length. [ 482.239188][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3583'. [ 482.332739][T20714] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 482.342422][T20710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.621153][T20720] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.633007][T20720] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 482.688848][T20714] bond1: (slave gretap1): making interface the new active one [ 482.702658][T20714] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 482.755683][T20726] macvlan0: entered promiscuous mode [ 482.771867][T20726] macvlan0: entered allmulticast mode [ 482.783289][T20726] bond1: entered promiscuous mode [ 482.793612][T20726] gretap1: entered promiscuous mode [ 482.801938][T20726] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 482.818351][T20726] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 482.832545][T20726] bond1: left promiscuous mode [ 482.837543][T20726] gretap1: left promiscuous mode [ 482.879312][T20732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.148883][T20751] kthread_run failed with err -4 [ 483.220005][T20749] geneve2: entered promiscuous mode [ 483.229029][T20749] geneve2: entered allmulticast mode [ 483.563136][T20768] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3595'. [ 484.368133][T20818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3607'. [ 484.410013][T20824] netlink: 'syz.3.3609': attribute type 4 has an invalid length. [ 484.419581][T20798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3600'. [ 484.669229][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 484.700599][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 484.748525][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 484.750794][T10960] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.757532][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 484.836755][T10960] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.857619][T10960] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.889734][T10960] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.090760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 485.098876][ C1] lec:lec_tx_timeout: lec0 [ 485.104072][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.164124][T20855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3618'. [ 485.201442][T20855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3618'. [ 485.307207][T20859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.322304][T20867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3619'. [ 485.456204][T20866] "syz.3.3621" (20866) uses obsolete ecb(arc4) skcipher [ 485.509952][T20876] veth0_to_hsr: entered promiscuous mode [ 485.704347][T20881] C: renamed from team_slave_0 (while UP) [ 485.722580][T20881] netlink: 'syz.1.3624': attribute type 4 has an invalid length. [ 485.731705][T20881] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 485.769124][T20882] veth0_vlan: left promiscuous mode [ 485.775940][T20882] veth0_vlan: entered promiscuous mode [ 485.825723][ T13] tipc: Subscription rejected, illegal request [ 486.046781][T20899] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 486.215376][T20914] No such timeout policy "syz1" [ 486.302250][T20915] gtp0: entered promiscuous mode [ 486.360178][T20915] gtp0: entered allmulticast mode [ 486.669657][T20934] x_tables: ip_tables: osf match: only valid for protocol 6 [ 486.825943][T20950] netlink: 'syz.2.3641': attribute type 13 has an invalid length. [ 487.092343][T20960] hsr0: entered promiscuous mode [ 487.111354][T20960] macvlan2: entered allmulticast mode [ 487.122205][T20960] hsr0: entered allmulticast mode [ 487.139560][T20960] hsr_slave_0: entered allmulticast mode [ 487.160925][T20960] hsr_slave_1: entered allmulticast mode [ 487.189582][T20969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.509474][T20976] team0: entered promiscuous mode [ 487.516679][T20976] team0: entered allmulticast mode [ 487.523109][T20976] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.532658][T20977] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 487.596915][T20977] team1: entered promiscuous mode [ 487.602624][T20977] team1: entered allmulticast mode [ 487.608560][T20977] 8021q: adding VLAN 0 to HW filter on device team1 [ 487.811023][T21003] netlink: 'syz.2.3658': attribute type 1 has an invalid length. [ 487.956209][T21003] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.152082][T21023] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 488.389702][T21034] syz_tun: entered promiscuous mode [ 488.397973][T21034] macvtap1: entered promiscuous mode [ 488.414611][T21034] syz_tun: left promiscuous mode [ 488.446033][T21036] netlink: 'syz.0.3670': attribute type 2 has an invalid length. [ 488.488819][T21036] openvswitch: netlink: Message has 8 unknown bytes. [ 488.714967][T21042] __nla_validate_parse: 18 callbacks suppressed [ 488.714988][T21042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3671'. [ 488.911722][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3675'. [ 489.191955][T21072] netlink: 'syz.0.3680': attribute type 1 has an invalid length. [ 489.659636][T21106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3686'. [ 490.110480][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 490.119239][ C1] lec:lec_tx_timeout: lec0 [ 490.124621][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 490.337992][T21134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.385869][T21134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.587125][T21148] netlink: 'syz.0.3698': attribute type 13 has an invalid length. [ 491.932864][T21178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.245791][T21184] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3707'. [ 492.465250][T21190] bridge_slave_0: left allmulticast mode [ 492.474318][T21190] bridge_slave_0: left promiscuous mode [ 492.486913][T21190] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.516775][T21190] bridge_slave_1: left allmulticast mode [ 492.535746][T21190] bridge_slave_1: left promiscuous mode [ 492.561597][T21190] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.590043][T21190] bond0: (slave bond_slave_0): Releasing backup interface [ 492.604458][T21190] bond0: (slave bond_slave_1): Releasing backup interface [ 492.646581][T21190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.662369][T21190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.700159][T21190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.884425][T21212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3712'. [ 493.116096][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 493.546141][T21218] bridge1: port 1(erspan0) entered disabled state [ 493.967202][T21218] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.349781][T21258] netlink: 'syz.3.3724': attribute type 1 has an invalid length. [ 494.385052][T21258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.464980][T21218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.489831][T21218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.140695][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 495.148751][ C1] lec:lec_tx_timeout: lec0 [ 495.153543][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 495.197231][ T3542] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.249688][ T3542] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.300056][ T3542] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.369854][ T3542] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.376241][T21274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3730'. [ 495.685049][T21288] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3733'. [ 495.734810][T21288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 495.761608][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3733'. [ 495.766519][T21288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3733'. [ 496.226067][T21313] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 496.260031][T21313] bond1 (unregistering): Released all slaves [ 496.467412][T21335] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3745'. [ 496.499352][T21334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3746'. [ 496.571822][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 496.754363][T21351] syzkaller1: entered promiscuous mode [ 496.771697][T21351] syzkaller1: entered allmulticast mode [ 496.782775][T21353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3752'. [ 496.814662][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3753'. [ 496.863381][T21353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.991200][T21362] netlink: 'syz.4.3752': attribute type 1 has an invalid length. [ 497.022641][T21365] tipc: Started in network mode [ 497.027663][T21365] tipc: Node identity 621cd130b8bb, cluster identity 4711 [ 497.035652][T21365] tipc: Enabled bearer , priority 0 [ 497.056516][T21365] syzkaller0: entered promiscuous mode [ 497.062409][T21365] syzkaller0: entered allmulticast mode [ 497.106201][T21365] tipc: Resetting bearer [ 497.130146][T21364] tipc: Resetting bearer [ 497.193109][T21364] tipc: Disabling bearer [ 497.902501][T21403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.000255][T21407] vlan4: entered promiscuous mode [ 498.014193][T21407] bond2: entered promiscuous mode [ 498.019379][T21407] vlan4: entered allmulticast mode [ 498.061189][T21407] bond2: entered allmulticast mode [ 498.264087][T21414] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 498.282526][T21414] batadv1: entered promiscuous mode [ 498.307735][T21414] batadv1: entered allmulticast mode [ 498.314850][T21414] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 498.557193][T21439] netlink: 'syz.0.3770': attribute type 3 has an invalid length. [ 498.769971][T21447] veth1_to_hsr: entered promiscuous mode [ 498.792053][T21447] macvtap1: entered promiscuous mode [ 498.804367][T21447] macvtap1: entered allmulticast mode [ 498.818715][T21447] veth1_to_hsr: entered allmulticast mode [ 499.101187][T21466] geneve2: entered allmulticast mode [ 499.613569][T21483] ipt_rpfilter: unknown options [ 499.955674][T21503] sctp: [Deprecated]: syz.0.3789 (pid 21503) Use of int in maxseg socket option. [ 499.955674][T21503] Use struct sctp_assoc_value instead [ 500.258377][T21523] netlink: 'syz.4.3794': attribute type 5 has an invalid length. [ 500.397805][T21528] __nla_validate_parse: 26 callbacks suppressed [ 500.397825][T21528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3796'. [ 500.425764][T21528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3796'. [ 500.431145][T21512] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3791'. [ 500.438130][T21528] tc_dump_action: action bad kind [ 500.461332][T21512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3791'. [ 500.583167][T21533] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3797'. [ 500.739998][T21537] syzkaller0: entered promiscuous mode [ 500.752306][T21537] syzkaller0: entered allmulticast mode [ 500.907660][T21543] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 500.931062][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 500.939222][ C1] lec:lec_tx_timeout: lec0 [ 500.944619][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 500.954795][T21543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.036588][T21553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3806'. [ 501.128678][T21557] syzkaller1: entered promiscuous mode [ 501.135760][T21557] syzkaller1: entered allmulticast mode [ 501.277790][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3809'. [ 501.280658][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3810'. [ 501.286906][T21567] netlink: 'syz.2.3809': attribute type 29 has an invalid length. [ 501.310119][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 501.389803][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 501.765665][T21600] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 501.854030][T21605] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 501.891476][T21605] tipc: Enabled bearer , priority 26 [ 501.954558][T21596] veth3: entered promiscuous mode [ 502.029790][T21618] netlink: 'syz.0.3824': attribute type 13 has an invalid length. [ 502.589489][T21648] ksmbd: Unknown IPC event: 1, ignore. [ 502.734533][T21659] syzkaller0: entered promiscuous mode [ 502.740236][T21659] syzkaller0: entered allmulticast mode [ 503.011311][ T5938] tipc: Node number set to 3668431152 [ 503.458012][T21677] netlink: 'syz.4.3844': attribute type 4 has an invalid length. [ 503.476556][T21696] netlink: 'syz.0.3848': attribute type 10 has an invalid length. [ 503.498434][T21677] netlink: 'syz.4.3844': attribute type 4 has an invalid length. [ 503.956118][T21708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.145839][T21717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 504.476549][T21732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.665497][T21732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.858327][T21732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.028286][T21732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.215330][T21778] batadv_slave_0: Caught tx_queue_len zero misconfig [ 505.359310][ T8256] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.510567][ T8256] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.535636][ T8256] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.599619][T21793] ip6erspan0: entered allmulticast mode [ 505.607982][ T3542] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.621441][T21788] syzkaller0: entered promiscuous mode [ 505.641057][T21788] syzkaller0: entered allmulticast mode [ 505.742132][T21798] netlink: 'syz.1.3873': attribute type 1 has an invalid length. [ 505.842854][T21798] bond4: entered promiscuous mode [ 505.848485][T21798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.899493][T21809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.921481][T21809] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 505.937537][T21808] netlink: 'syz.4.3875': attribute type 1 has an invalid length. [ 505.970539][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 505.978746][ C1] lec:lec_tx_timeout: lec0 [ 505.983751][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 505.993798][T21809] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 506.009391][T21809] bond4: (slave vcan1): making interface the new active one [ 506.021991][T21809] vcan1: entered promiscuous mode [ 506.029098][T21809] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 506.066227][T21815] __nla_validate_parse: 15 callbacks suppressed [ 506.066249][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'. [ 506.155247][T21808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.276734][T21815] veth3: entered promiscuous mode [ 506.725555][T21837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3884'. [ 506.865420][T21845] pimreg: entered allmulticast mode [ 506.911003][T21845] pimreg: left allmulticast mode [ 506.974583][T21855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3887'. [ 507.244937][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3893'. [ 507.272278][T21875] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 507.481134][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 508.008414][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3905'. [ 508.176102][T21928] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 508.239741][T21928] tipc: Enabled bearer , priority 0 [ 508.339743][T21927] tipc: Disabling bearer [ 508.790717][T21962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.807524][T21962] batadv_slave_1: entered promiscuous mode [ 509.282579][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3915'. [ 510.990707][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 510.998929][ C1] lec:lec_tx_timeout: lec0 [ 511.003892][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 511.326431][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3925'. [ 511.378898][T22010] netlink: 'syz.4.3926': attribute type 11 has an invalid length. [ 511.385242][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3924'. [ 511.407500][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3924'. [ 511.422509][T22010] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3926'. [ 511.426530][T22009] syzkaller0: entered promiscuous mode [ 511.432565][T22010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3926'. [ 511.437470][T22009] syzkaller0: entered allmulticast mode [ 511.448270][T22010] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 511.506409][T22018] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 511.585252][T22018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.615132][ T3542] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 511.886632][T22040] syzkaller1: entered promiscuous mode [ 511.893728][T22040] syzkaller1: entered allmulticast mode [ 512.064466][T22047] nftables ruleset with unbound chain [ 512.089395][T22045] syzkaller1: entered promiscuous mode [ 512.115685][T22045] syzkaller1: entered allmulticast mode [ 512.385237][T22054] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 512.833814][T22061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3940'. [ 512.978967][T22071] netlink: 'syz.0.3943': attribute type 1 has an invalid length. [ 512.988467][T22071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.022244][T22071] block nbd0: not configured, cannot reconfigure [ 513.152964][T22074] netlink: 'syz.4.3946': attribute type 2 has an invalid length. [ 513.199476][T22074] !9: entered promiscuous mode [ 513.238338][T22074] netlink: 'syz.4.3946': attribute type 2 has an invalid length. [ 513.262795][T22074] !9: left promiscuous mode [ 513.616238][T22099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3953'. [ 513.649268][T22099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3953'. [ 513.659068][T22097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3954'. [ 513.678406][T22099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3953'. [ 514.178939][T22139] x_tables: duplicate entry at hook 3 [ 515.133995][T22181] : renamed from bond_slave_0 [ 515.705265][T22175] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 516.010512][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 516.018603][ C1] lec:lec_tx_timeout: lec0 [ 516.023257][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.491832][T22216] netlink: 'syz.1.3981': attribute type 11 has an invalid length. [ 516.656683][T22223] __nla_validate_parse: 6 callbacks suppressed [ 516.656703][T22223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3983'. [ 516.915443][T22242] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 516.974141][T22244] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 516.983623][T22233] 8021q: adding VLAN 0 to HW filter on device .` [ 517.016808][T22233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.475149][T22260] sctp: [Deprecated]: syz.3.3992 (pid 22260) Use of int in max_burst socket option. [ 517.475149][T22260] Use struct sctp_assoc_value instead [ 517.658033][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 517.661971][T22271] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.678370][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 517.949786][T22271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.206687][T22271] veth1_to_hsr: left allmulticast mode [ 518.268545][ T8256] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.281492][ T8256] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.306876][ T8256] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.336232][ T8256] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.586356][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4007'. [ 518.663353][T22308] hsr0 (unregistering): left allmulticast mode [ 518.966320][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4015'. [ 519.176359][T22355] netlink: 'syz.2.4020': attribute type 4 has an invalid length. [ 519.257411][T22357] netlink: 'syz.2.4020': attribute type 4 has an invalid length. [ 519.507530][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4026'. [ 519.615793][T22373] bridge2: entered promiscuous mode [ 519.621275][T22373] bridge2: entered allmulticast mode [ 519.633214][T22373] team0: Failed to send port change of device bridge2 via netlink (err -105) [ 519.647647][T22373] team0: Failed to send options change via netlink (err -105) [ 519.669328][T22373] team0: Port device bridge2 added [ 519.843174][T22380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4028'. [ 519.855985][T22384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4030'. [ 519.919730][T22384] netlink: 'syz.1.4030': attribute type 21 has an invalid length. [ 519.928921][T22384] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4030'. [ 519.954518][T22366] netlink: 'syz.3.4023': attribute type 1 has an invalid length. [ 519.979666][T22384] netlink: 'syz.1.4030': attribute type 4 has an invalid length. [ 519.988336][T22384] netlink: 'syz.1.4030': attribute type 5 has an invalid length. [ 519.996257][T22384] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4030'. [ 520.130320][T22366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.815264][T22403] team0: entered promiscuous mode [ 520.831083][T22403] team0: entered allmulticast mode [ 520.839880][T22403] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.901366][T22403] team1: entered promiscuous mode [ 520.906461][T22403] team1: entered allmulticast mode [ 520.912545][T22403] 8021q: adding VLAN 0 to HW filter on device team1 [ 520.943913][T22404] team2: entered promiscuous mode [ 520.948998][T22404] team2: entered allmulticast mode [ 520.954750][T22404] 8021q: adding VLAN 0 to HW filter on device team2 [ 521.030554][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 521.038653][T22403] team3: entered promiscuous mode [ 521.038669][ C1] lec:lec_tx_timeout: lec0 [ 521.038824][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 521.045333][T22403] team3: entered allmulticast mode [ 521.060936][T22403] 8021q: adding VLAN 0 to HW filter on device team3 [ 521.110010][T22404] team4: entered promiscuous mode [ 521.115844][T22404] team4: entered allmulticast mode [ 521.122723][T22404] 8021q: adding VLAN 0 to HW filter on device team4 [ 521.234153][T22403] team5: entered promiscuous mode [ 521.239304][T22403] team5: entered allmulticast mode [ 521.249087][T22403] 8021q: adding VLAN 0 to HW filter on device team5 [ 521.279813][T22403] team6: entered promiscuous mode [ 521.285173][T22403] team6: entered allmulticast mode [ 521.290997][T22403] 8021q: adding VLAN 0 to HW filter on device team6 [ 521.357078][T22404] team7: entered promiscuous mode [ 521.362579][T22404] team7: entered allmulticast mode [ 521.368038][T22404] 8021q: adding VLAN 0 to HW filter on device team7 [ 521.406115][T22404] team8: entered promiscuous mode [ 521.413014][T22404] team8: entered allmulticast mode [ 521.419230][T22404] 8021q: adding VLAN 0 to HW filter on device team8 [ 521.533643][T22403] team9: entered promiscuous mode [ 521.540030][T22438] sctp: [Deprecated]: syz.0.4043 (pid 22438) Use of int in maxseg socket option. [ 521.540030][T22438] Use struct sctp_assoc_value instead [ 521.543482][T22403] team9: entered allmulticast mode [ 521.576305][T22403] 8021q: adding VLAN 0 to HW filter on device team9 [ 521.639179][T22404] team10: entered promiscuous mode [ 521.648030][T22404] team10: entered allmulticast mode [ 521.657049][T22404] 8021q: adding VLAN 0 to HW filter on device team10 [ 521.666908][T22443] __nla_validate_parse: 14 callbacks suppressed [ 521.666926][T22443] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4046'. [ 521.683695][T22443] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4046'. [ 521.748902][T22443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4046'. [ 521.946703][T22454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4050'. [ 522.050612][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 522.119152][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 522.129971][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4054'. [ 522.154919][T22466] netlink: 'syz.0.4054': attribute type 11 has an invalid length. [ 522.182563][T22471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4056'. [ 522.192418][T22471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4056'. [ 522.197014][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 522.211269][ T134] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.220344][T10960] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.220532][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4054'. [ 522.229418][T22466] netlink: 'syz.0.4054': attribute type 11 has an invalid length. [ 522.253266][T10960] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.273935][T10960] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.223117][T22511] rdma_rxe: rxe_newlink: failed to add lo [ 524.077199][T22551] xt_limit: Overflow, try lower: 324382443/0 [ 525.035482][T22599] netlink: 'syz.0.4087': attribute type 6 has an invalid length. [ 526.050645][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 526.058686][ C1] lec:lec_tx_timeout: lec0 [ 526.063750][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.059429][T22551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.271363][T22619] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 527.392566][T22630] __nla_validate_parse: 11 callbacks suppressed [ 527.392587][T22630] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4094'. [ 527.420254][T22630] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4094'. [ 527.444320][T22630] netlink: 'syz.4.4094': attribute type 1 has an invalid length. [ 527.470333][T22630] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4094'. [ 527.478624][T22632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4097'. [ 527.479460][T22630] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4094'. [ 527.560961][T22630] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4094'. [ 527.572733][T22640] netem: change failed [ 527.664529][T22645] netlink: 'syz.0.4099': attribute type 13 has an invalid length. [ 527.673795][T22645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4099'. [ 527.783883][T22652] netlink: 'syz.1.4101': attribute type 5 has an invalid length. [ 527.801331][T22628] nbd0: detected capacity change from 0 to 77309411391 [ 527.808677][T22652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4101'. [ 527.818899][ T5828] block nbd0: Receive control failed (result -32) [ 527.820269][ T5832] block nbd0: Receive control failed (result -32) [ 527.855017][T12067] block nbd0: Dead connection, failed to find a fallback [ 527.869749][T12067] block nbd0: shutting down sockets [ 527.885511][T22652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.893368][T12067] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 527.905731][T12067] Buffer I/O error on dev nbd0, logical block 0, async page read [ 527.912144][ T58] bond0: (slave dummy0): link status definitely down, disabling slave [ 527.913840][T12067] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 527.934615][T12067] Buffer I/O error on dev nbd0, logical block 1, async page read [ 527.942575][T12067] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 527.953015][T12067] Buffer I/O error on dev nbd0, logical block 2, async page read [ 527.985618][ T58] bond0: now running without any active interface! [ 527.990476][T12067] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.018261][T12067] Buffer I/O error on dev nbd0, logical block 3, async page read [ 528.029184][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4102'. [ 528.047238][T12067] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.081097][T12067] Buffer I/O error on dev nbd0, logical block 0, async page read [ 528.088931][T12067] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.146988][T12067] Buffer I/O error on dev nbd0, logical block 1, async page read [ 528.169679][T12067] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.193434][T12067] Buffer I/O error on dev nbd0, logical block 2, async page read [ 528.214818][T12067] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.250699][T12067] Buffer I/O error on dev nbd0, logical block 3, async page read [ 528.267917][T12067] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.291489][T12067] Buffer I/O error on dev nbd0, logical block 0, async page read [ 528.312367][T12067] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.339179][T12067] Buffer I/O error on dev nbd0, logical block 1, async page read [ 528.361852][T12067] ldm_validate_partition_table(): Disk read failed. [ 528.380282][T12067] Dev nbd0: unable to read RDB block 0 [ 528.395963][T12067] nbd0: unable to read partition table [ 528.424821][T12067] ldm_validate_partition_table(): Disk read failed. [ 528.444457][T12067] Dev nbd0: unable to read RDB block 0 [ 528.466618][T12067] nbd0: unable to read partition table [ 528.539641][T22681] [ 528.542045][T22681] ====================================================== [ 528.549081][T22681] WARNING: possible circular locking dependency detected [ 528.556124][T22681] syzkaller #0 Not tainted [ 528.560565][T22681] ------------------------------------------------------ [ 528.567599][T22681] syz.3.4111/22681 is trying to acquire lock: [ 528.573717][T22681] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 528.583070][T22681] [ 528.583070][T22681] but task is already holding lock: [ 528.590475][T22681] ffff8880b3b945e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 528.600177][T22681] [ 528.600177][T22681] which lock already depends on the new lock. [ 528.600177][T22681] [ 528.610595][T22681] [ 528.610595][T22681] the existing dependency chain (in reverse order) is: [ 528.619609][T22681] [ 528.619609][T22681] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 528.627521][T22681] lock_sock_nested+0x41/0x100 [ 528.632820][T22681] do_tcp_setsockopt+0x8fb/0x2060 [ 528.638374][T22681] mptcp_setsockopt+0x1133/0x36a0 [ 528.643929][T22681] do_sock_setsockopt+0x17c/0x1b0 [ 528.649568][T22681] __x64_sys_setsockopt+0x13d/0x1b0 [ 528.655383][T22681] do_syscall_64+0x14d/0xf80 [ 528.660498][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.666913][T22681] [ 528.666913][T22681] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 528.674650][T22681] lock_sock_nested+0x41/0x100 [ 528.679939][T22681] inet_shutdown+0x6a/0x390 [ 528.685049][T22681] nbd_mark_nsock_dead+0x2e9/0x560 [ 528.690684][T22681] recv_work+0x1c7f/0x1d90 [ 528.695621][T22681] process_scheduled_works+0xb6e/0x18c0 [ 528.701693][T22681] worker_thread+0xa53/0xfc0 [ 528.706805][T22681] kthread+0x388/0x470 [ 528.711391][T22681] ret_from_fork+0x51e/0xb90 [ 528.716505][T22681] ret_from_fork_asm+0x1a/0x30 [ 528.721794][T22681] [ 528.721794][T22681] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 528.729439][T22681] __mutex_lock+0x19f/0x1300 [ 528.734551][T22681] nbd_queue_rq+0x37b/0x1100 [ 528.739661][T22681] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 528.745734][T22681] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 528.752600][T22681] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 528.759124][T22681] blk_mq_run_hw_queue+0x348/0x4f0 [ 528.764778][T22681] blk_mq_dispatch_list+0xd16/0xe10 [ 528.770564][T22681] blk_mq_flush_plug_list+0x48d/0x570 [ 528.776471][T22681] __blk_flush_plug+0x3ed/0x4d0 [ 528.781858][T22681] __submit_bio+0x28d/0x580 [ 528.786888][T22681] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 528.793050][T22681] block_read_full_folio+0x599/0x830 [ 528.798863][T22681] filemap_read_folio+0x137/0x3b0 [ 528.804412][T22681] do_read_cache_folio+0x358/0x590 [ 528.810045][T22681] read_part_sector+0xb6/0x2b0 [ 528.815329][T22681] adfspart_check_ICS+0xa5/0xa40 [ 528.820793][T22681] bdev_disk_changed+0x7ba/0x1550 [ 528.826344][T22681] blkdev_get_whole+0x380/0x510 [ 528.831716][T22681] bdev_open+0x31e/0xd30 [ 528.836481][T22681] blkdev_open+0x470/0x610 [ 528.841426][T22681] do_dentry_open+0x785/0x14e0 [ 528.846722][T22681] vfs_open+0x3b/0x340 [ 528.851322][T22681] path_openat+0x2e08/0x3860 [ 528.856438][T22681] do_file_open+0x23e/0x4a0 [ 528.861467][T22681] do_sys_openat2+0x113/0x200 [ 528.866668][T22681] __x64_sys_openat+0x138/0x170 [ 528.872053][T22681] do_syscall_64+0x14d/0xf80 [ 528.877166][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.883583][T22681] [ 528.883583][T22681] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 528.890806][T22681] __mutex_lock+0x19f/0x1300 [ 528.895936][T22681] nbd_queue_rq+0xc6/0x1100 [ 528.900974][T22681] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 528.907046][T22681] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 528.913916][T22681] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 528.920427][T22681] blk_mq_run_hw_queue+0x348/0x4f0 [ 528.926063][T22681] blk_mq_dispatch_list+0xd16/0xe10 [ 528.931787][T22681] blk_mq_flush_plug_list+0x48d/0x570 [ 528.937682][T22681] __blk_flush_plug+0x3ed/0x4d0 [ 528.943057][T22681] __submit_bio+0x28d/0x580 [ 528.948187][T22681] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 528.954365][T22681] block_read_full_folio+0x599/0x830 [ 528.960184][T22681] filemap_read_folio+0x137/0x3b0 [ 528.965738][T22681] do_read_cache_folio+0x358/0x590 [ 528.971378][T22681] read_part_sector+0xb6/0x2b0 [ 528.976676][T22681] adfspart_check_ICS+0xa5/0xa40 [ 528.982140][T22681] bdev_disk_changed+0x7ba/0x1550 [ 528.987695][T22681] blkdev_get_whole+0x380/0x510 [ 528.993074][T22681] bdev_open+0x31e/0xd30 [ 528.997844][T22681] blkdev_open+0x470/0x610 [ 529.002789][T22681] do_dentry_open+0x785/0x14e0 [ 529.008084][T22681] vfs_open+0x3b/0x340 [ 529.012684][T22681] path_openat+0x2e08/0x3860 [ 529.017796][T22681] do_file_open+0x23e/0x4a0 [ 529.022824][T22681] do_sys_openat2+0x113/0x200 [ 529.028031][T22681] __x64_sys_openat+0x138/0x170 [ 529.033412][T22681] do_syscall_64+0x14d/0xf80 [ 529.038526][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.044939][T22681] [ 529.044939][T22681] -> #3 (set->srcu){.+.+}-{0:0}: [ 529.052067][T22681] __synchronize_srcu+0xca/0x300 [ 529.057532][T22681] elevator_switch+0x1e8/0x7a0 [ 529.062821][T22681] elevator_change+0x2cc/0x450 [ 529.068109][T22681] elevator_set_default+0x36c/0x430 [ 529.073826][T22681] blk_register_queue+0x366/0x430 [ 529.079465][T22681] __add_disk+0x677/0xd50 [ 529.084319][T22681] add_disk_fwnode+0xfb/0x480 [ 529.089521][T22681] nbd_dev_add+0x72c/0xb50 [ 529.094464][T22681] nbd_init+0x168/0x1f0 [ 529.099145][T22681] do_one_initcall+0x250/0x8d0 [ 529.104437][T22681] do_initcall_level+0x104/0x190 [ 529.109901][T22681] do_initcalls+0x59/0xa0 [ 529.114760][T22681] kernel_init_freeable+0x2a6/0x3e0 [ 529.120484][T22681] kernel_init+0x1d/0x1d0 [ 529.125331][T22681] ret_from_fork+0x51e/0xb90 [ 529.130448][T22681] ret_from_fork_asm+0x1a/0x30 [ 529.135735][T22681] [ 529.135735][T22681] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 529.143560][T22681] __mutex_lock+0x19f/0x1300 [ 529.148677][T22681] elevator_change+0x1b3/0x450 [ 529.153962][T22681] elevator_set_none+0xb5/0x140 [ 529.159336][T22681] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 529.165672][T22681] nbd_start_device+0x17f/0xb10 [ 529.171049][T22681] nbd_genl_connect+0x165b/0x1cf0 [ 529.176593][T22681] genl_family_rcv_msg_doit+0x22a/0x330 [ 529.182668][T22681] genl_rcv_msg+0x61c/0x7a0 [ 529.187715][T22681] netlink_rcv_skb+0x232/0x4b0 [ 529.193005][T22681] genl_rcv+0x28/0x40 [ 529.197519][T22681] netlink_unicast+0x80f/0x9b0 [ 529.202799][T22681] netlink_sendmsg+0x813/0xb40 [ 529.208085][T22681] ____sys_sendmsg+0x972/0x9f0 [ 529.213375][T22681] ___sys_sendmsg+0x2a5/0x360 [ 529.218580][T22681] __x64_sys_sendmsg+0x1bd/0x2a0 [ 529.224051][T22681] do_syscall_64+0x14d/0xf80 [ 529.229171][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.235598][T22681] [ 529.235598][T22681] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 529.244212][T22681] blk_alloc_queue+0x546/0x680 [ 529.249504][T22681] __blk_mq_alloc_disk+0x197/0x390 [ 529.255143][T22681] nbd_dev_add+0x499/0xb50 [ 529.260085][T22681] nbd_init+0x168/0x1f0 [ 529.264758][T22681] do_one_initcall+0x250/0x8d0 [ 529.270045][T22681] do_initcall_level+0x104/0x190 [ 529.275511][T22681] do_initcalls+0x59/0xa0 [ 529.280368][T22681] kernel_init_freeable+0x2a6/0x3e0 [ 529.286097][T22681] kernel_init+0x1d/0x1d0 [ 529.290957][T22681] ret_from_fork+0x51e/0xb90 [ 529.296094][T22681] ret_from_fork_asm+0x1a/0x30 [ 529.301390][T22681] [ 529.301390][T22681] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 529.308616][T22681] __lock_acquire+0x15a5/0x2cf0 [ 529.314018][T22681] lock_acquire+0xf0/0x2e0 [ 529.318966][T22681] fs_reclaim_acquire+0x71/0x100 [ 529.324437][T22681] __kmalloc_cache_noprof+0x40/0x660 [ 529.330256][T22681] tcp_fastopen_defer_connect+0x250/0x390 [ 529.336509][T22681] tcp_v4_connect+0x10ac/0x19b0 [ 529.341892][T22681] tcp_v6_connect+0xbbb/0x1b10 [ 529.347182][T22681] __inet_stream_connect+0x25a/0xdd0 [ 529.352995][T22681] inet_stream_connect+0x66/0xa0 [ 529.358453][T22681] __sys_connect+0x312/0x450 [ 529.363567][T22681] __x64_sys_connect+0x7a/0x90 [ 529.368865][T22681] do_syscall_64+0x14d/0xf80 [ 529.374010][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.380437][T22681] [ 529.380437][T22681] other info that might help us debug this: [ 529.380437][T22681] [ 529.390673][T22681] Chain exists of: [ 529.390673][T22681] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 529.390673][T22681] [ 529.403629][T22681] Possible unsafe locking scenario: [ 529.403629][T22681] [ 529.411079][T22681] CPU0 CPU1 [ 529.416438][T22681] ---- ---- [ 529.421798][T22681] lock(k-sk_lock-AF_INET6); [ 529.426478][T22681] lock(sk_lock-AF_INET6); [ 529.433502][T22681] lock(k-sk_lock-AF_INET6); [ 529.440701][T22681] lock(fs_reclaim); [ 529.444687][T22681] [ 529.444687][T22681] *** DEADLOCK *** [ 529.444687][T22681] [ 529.452827][T22681] 1 lock held by syz.3.4111/22681: [ 529.457935][T22681] #0: ffff8880b3b945e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 529.468039][T22681] [ 529.468039][T22681] stack backtrace: [ 529.473929][T22681] CPU: 1 UID: 0 PID: 22681 Comm: syz.3.4111 Not tainted syzkaller #0 PREEMPT(full) [ 529.473947][T22681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.473957][T22681] Call Trace: [ 529.473963][T22681] [ 529.473969][T22681] dump_stack_lvl+0xe8/0x150 [ 529.473991][T22681] print_circular_bug+0x2e1/0x300 [ 529.474021][T22681] check_noncircular+0x12e/0x150 [ 529.474045][T22681] __lock_acquire+0x15a5/0x2cf0 [ 529.474066][T22681] ? __tcp_get_metrics+0x7ec/0x870 [ 529.474090][T22681] lock_acquire+0xf0/0x2e0 [ 529.474107][T22681] ? __kmalloc_cache_noprof+0x40/0x660 [ 529.474127][T22681] fs_reclaim_acquire+0x71/0x100 [ 529.474144][T22681] ? __kmalloc_cache_noprof+0x40/0x660 [ 529.474159][T22681] __kmalloc_cache_noprof+0x40/0x660 [ 529.474176][T22681] ? tcp_fastopen_defer_connect+0x250/0x390 [ 529.474199][T22681] tcp_fastopen_defer_connect+0x250/0x390 [ 529.474221][T22681] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 529.474244][T22681] ? sk_setup_caps+0x9ef/0xc40 [ 529.474265][T22681] ? sk_setup_caps+0x29/0xc40 [ 529.474284][T22681] tcp_v4_connect+0x10ac/0x19b0 [ 529.474311][T22681] ? __pfx_tcp_v4_connect+0x10/0x10 [ 529.474330][T22681] ? aa_label_sk_perm+0x52b/0x6e0 [ 529.474351][T22681] ? tcp_v6_connect+0x62d/0x1b10 [ 529.474371][T22681] tcp_v6_connect+0xbbb/0x1b10 [ 529.474389][T22681] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 529.474413][T22681] ? __pfx_tcp_v6_connect+0x10/0x10 [ 529.474435][T22681] __inet_stream_connect+0x25a/0xdd0 [ 529.474454][T22681] ? do_raw_spin_lock+0x12b/0x2f0 [ 529.474470][T22681] ? __pfx___inet_stream_connect+0x10/0x10 [ 529.474487][T22681] ? inet_stream_connect+0x51/0xa0 [ 529.474504][T22681] ? __local_bh_enable_ip+0xd0/0x130 [ 529.474525][T22681] inet_stream_connect+0x66/0xa0 [ 529.474542][T22681] __sys_connect+0x312/0x450 [ 529.474560][T22681] ? __pfx___sys_connect+0x10/0x10 [ 529.474581][T22681] ? rcu_is_watching+0x15/0xb0 [ 529.474604][T22681] __x64_sys_connect+0x7a/0x90 [ 529.474621][T22681] do_syscall_64+0x14d/0xf80 [ 529.474639][T22681] ? trace_irq_disable+0x3b/0x150 [ 529.474652][T22681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.474667][T22681] ? clear_bhb_loop+0x40/0x90 [ 529.474683][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.474697][T22681] RIP: 0033:0x7fd6daf9c819 [ 529.474711][T22681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.474724][T22681] RSP: 002b:00007fd6dbf21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 529.474739][T22681] RAX: ffffffffffffffda RBX: 00007fd6db215fa0 RCX: 00007fd6daf9c819 [ 529.474750][T22681] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000006 [ 529.474760][T22681] RBP: 00007fd6db032c91 R08: 0000000000000000 R09: 0000000000000000 [ 529.474769][T22681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.474778][T22681] R13: 00007fd6db216038 R14: 00007fd6db215fa0 R15: 00007ffd8f2c57d8 [ 529.474794][T22681] [ 529.846989][T22692] netlink: 'syz.2.4112': attribute type 10 has an invalid length. [ 529.855521][T22692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4112'. [ 531.070592][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 531.078606][ C1] lec:lec_tx_timeout: lec0 [ 531.083236][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 536.090427][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 536.098483][ C1] lec:lec_tx_timeout: lec0 [ 536.103190][ C1] lec:lec_start_xmit: lec0:No lecd attached