last executing test programs: 5.626355232s ago: executing program 2 (id=9547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc, 0x2010000}, @call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 5.3993028s ago: executing program 2 (id=9550): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4e}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "ab6d042d"}, @NL80211_ATTR_KEY={0x74, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7c477a1803dcaf63a1ca418c1c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "549bc2e665654a95dd3036bb6a"}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "1dfa614aee"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x80010) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x1d, 0x2, 0x6) (async) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) sendmmsg$inet(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="efca8dfa1c9f9ad3d1c3f20a581fc124b83de5c7614a51b3ec0d853a97b52d9e29aa1fded98ec176721c28b50d2df614a0ff8da1650127ce67cfd575371c95778508257f2078f03c81f9d4aa3cd0", 0x4e}, {0x0}, {0x0}], 0x4}}], 0x1, 0x6ef8eb021116f258) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000440)={{r5, &(0x7f00000001c0)='\x00', 0x42000, &(0x7f0000000200)={@align=0x9, {0x0, 0x200, 0x2, 0xa7d}}, 0xfffffffa, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x97be}, {[0x800, 0xf, 0xaff5, 0x1de5]}, 0x2, 0xfe, &(0x7f0000000340)=""/254}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x5, 0x0, 0x4, 0x400, r7, 0x1, '\x00', r9, r11, 0x4, 0x5, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x5, 0x0, 0x4, 0x400, r7, 0x1, '\x00', r9, r11, 0x4, 0x5, 0x5}, 0x50) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r14, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r14, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x68}}, 0x2000c084) recvmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002022) (async) recvmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002022) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) 4.75333629s ago: executing program 4 (id=9560): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0a4c00400010001c000e002023a7fb3d009b0000", @ANYRES32=0x0, @ANYBLOB="05030200000000002c00128009000100626f6e64000000001c0002800500010001000000080003001000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) 4.628531349s ago: executing program 1 (id=9563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8", 0x4}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map=r0, 0xd, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80000000, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback=r0, r0, 0x1e, 0x24, 0x0, @void, @void, @void, @value=r2, r1}, 0x20) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x82, &(0x7f0000000000)="0004000003000000", 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r6, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x5a) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r9}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009c00000000001000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) socket(0xc, 0x6, 0xd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r13, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r15, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x1d, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe28, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x3a4, 0xc5, &(0x7f0000000940)=""/197, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x4, 0x8, 0x9}, 0x10, r15, r9, 0x4, &(0x7f0000000a80)=[r7, r7], &(0x7f0000000ac0)=[{0x3, 0x4, 0xd, 0x8}, {0x3, 0x3, 0xe}, {0x1, 0x1, 0xc, 0x5}, {0x3, 0x5, 0x5, 0x2}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES64=r8, @ANYRES32=r4, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.628378342s ago: executing program 4 (id=9564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe, &(0x7f0000002480)=[{&(0x7f0000000080)="08002b117c507f24", 0x8}, {0x0}], 0x2}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00", @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 4.52886858s ago: executing program 1 (id=9566): r0 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001431dbd7002fadbdf2506"], 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0)=0x800, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb393) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, 0x0, 0x5a}, 0x10) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r4, &(0x7f00000000c0)='\x00', 0x200400, &(0x7f0000000140)={@align=0x8, {0x10, 0x9, 0x75}}, 0xaec, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x7}) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001}, 0x0) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r8, 0x0, {0x1, 0x0, 0x1}, 0xfe}, 0x18) (async) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000807a0fdf3193f290d5f34c0c4ace", @ANYRES16=r11, @ANYBLOB="01002bbd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000900000006001600030000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x14, 0x0, 0x0, 0x4, 0xc8}}, 0x1c}}, 0x0) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (rerun: 64) 4.467014902s ago: executing program 4 (id=9567): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x43}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.392625718s ago: executing program 1 (id=9568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) (async) r1 = socket(0xa, 0x3, 0x42) getsockname$packet(r1, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000016c0)={&(0x7f00000006c0)=""/4096, 0x1000, 0x1800, 0x8, 0x3}, 0x20) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xb403, @local, 0x5}, @in6={0xa, 0x4e20, 0x4, @empty, 0x10}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, @in6={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x13}, 0x6}, @in={0x2, 0x4e20, @loopback}], 0xc0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001800)={r0, &(0x7f0000000180)="7ce0bfb90f41002969647ba490b849238419ae91e5d290d8da2da3e5d08c4b39601c0d57207e20405a38516631e764b99410bb948f92e250d8d5548c9cef63a52ed5d3ad7c367293d23ee50487c580f9b9ad36a790eb18422ff174ac7f4eb607a26e9798af98439fe5a64ea7e94babdb4efb8ba3e908fb1990438fbd65e1481ca0809d73dcfcadaed50553a52bcdfc1208c3363ea3cdf8d4953b218cfa5f927c3b159beea26d2a5d0bbbd0ca784abc64a63a4a470c3e178d50883ab9e7892295701b25f8dcc0db757141238d3cbe9bc437554e12b90af7952258f4b64676", &(0x7f0000001700)=""/242}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xc00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.377736955s ago: executing program 4 (id=9569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x68, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x68}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000100180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f00000007c0)=""/3, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4(r1, 0x0, 0x0, 0x0) (async) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="90", 0x1}, {0x0}], 0x2}, 0x0) (async) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async, rerun: 32) sendmmsg$alg(r7, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x2, 0x0, 0x0, 0x40088c0}], 0x2, 0x40800) (rerun: 32) ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x8915, &(0x7f00000000c0)) listen(r7, 0x8) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'gretap0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) 4.343288188s ago: executing program 3 (id=9570): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) syz_emit_ethernet(0x4a, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffe36}, 0x1, 0x0, 0x0, 0x8044}, 0x40000081) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='\b\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@newqdisc={0x178, 0x24, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff1, 0x10}, {0x5, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}, @qdisc_kind_options=@q_red={{0x8}, {0x134, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x81}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xe0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xd, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4, 0x2, 0x3}}]}, 0x9}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) 4.180462478s ago: executing program 4 (id=9571): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r5 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x29, 0x24, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r4, r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)={0x10}) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f0000000140)={0x7, 0x874d0, 0xffff, 0x5}) ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f0000000400)) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) 4.179923629s ago: executing program 2 (id=9572): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000080) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002800)) unshare(0x26020480) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x0, 0x0}}, 0x10) 4.135534347s ago: executing program 1 (id=9573): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x3, 'wrr\x00', 0x9, 0x821}, 0x2c) 4.038979867s ago: executing program 1 (id=9575): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000340fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000340fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0xd9, 0x7, 0x1, 0x0, "2eb8aae7596d37eac295edb17a43c16cdb654656457f2e725a5568fd0bf4149a73ee631332366452010555a32ae1e94bbf9ab25d7d96df9a70a378c799b06a1bdd35643431cb7ab6051b8cc5df5f347a74cc8644e379e2f544fd7fd48aed8ec71ae7a802e606259c8b79250c200320b0a5be5592c64000186f74fb58caa7854b929b371a4f3ee2591e0da7a7a294762fb565608c0b18e8c5311c73bdd5843d1b969e6f8084af8262cb76e5fdf1e9f60e75031e1baaed20cc0cf84342ca5a4e3925f30da700ba29783dc6b902c0006a950ad8dd01da"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={r6, @broadcast, @multicast2}, 0xc) (async) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={r6, @broadcast, @multicast2}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES8=r2, @ANYRES64=r3, @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000003000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000003000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r9, 0x0, 0xd3, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffffffffffffff, "424927d0ce453eef81831f9eb800474e2c30943e214c89af3ae7093438ff56b4", 0x800004, 0x2, 0x1, 0x5}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.99228415s ago: executing program 3 (id=9576): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001cc0)={'gre0\x00', &(0x7f0000001bc0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x4, 0x989, {{0x32, 0x4, 0x1, 0x3e, 0xc8, 0x68, 0x0, 0xe, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x4, 0xfb, 0x3, 0xc}, @generic={0x89, 0xe, "680696971d23363a24ee2972"}, @timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x8, [{@multicast2, 0x7}, {@private=0xa010101, 0x8e2f}, {@local, 0xffff}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x12, "7eb3c568a341ca29e46a4c4000bd69b2"}, {0x6, 0xd, "5926922c49ac05a2875eea"}, {0x4, 0x9, "8c4be5427dcd5b"}, {0x5, 0xd, "8b26060c51db1d00cbc829"}, {0x2, 0xa, "420fc01051b2b24a"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xdd, 0x1, 0x6, [{@local, 0x4}, {@loopback, 0xaa7c}, {@remote}, {@remote, 0x6}, {@multicast2, 0x2}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="57fdc78626fa8658006b90e75940fad8c62eacc91195e26ee12281b7d42c8748e49459f9f93aebede28a51f7b5f1f01bf700bd726ebb3abd1290ccc9cb1e3b14d3da184210bfc0dbd6f248389c21d08d2a91a1458fc9d8aa97451a23c52e94e0", 0x60}, {&(0x7f0000000300)="39ad887e4177347f45f002d7a25a376626a3b7efdb181576a39fedb40cc17f9926d712a271000ea9d29f235a5fa1953453d746b66aef741991ed4cfade5921af104cfd7a26a54def8020ee4daa87de72415f5bfff85551448144a4bb04bd3d93f1445624fb114b8f69c7edc84381ae83d46ad32b1ab25fa6d71fbba4a9f0e786cc7edbcdaf48eaabd7f0b0e25fedd07c583f18309a325f69357601be36419bb707b6ad864b7ed2800bdff98461619b93965df75910c6ab8f080535e2c1a711b262b58a4b3d4692d892fb4bfc2918459ac8c29cb0b13155ed8cf9f2756a00c2579932d177fdbb1f794c483bf7fff57303561b6e2d", 0xf4}, {&(0x7f0000000400)="02b80825e1c7d7f0ea907974e904625db69d1874f2c81cbe8baa6243c09c41b67c181611f90288cc705e94be298b4c7f93b13b2ef18349f5c432aa54834aa21d2789a441ed283c231036957fe040f0ac68b612ce3bda55457b2402a78d4627d6cc59839169cce0d28ef5d52ffafe54c235418f39ff43311770a7d2edc82b7d29a785deb83de9aa45c77c025bfb50b710814169691219b07bd9480dfe40e5b5d1383ddd07ede762d971ac1cefb01c0f0b", 0xb0}, {&(0x7f00000004c0)="25beff7a2290ccf5928287f851c688ddcd0122d63ba15aba0a1b066aa44bccfe41c8524d1d6726e4b0639cc3f426c495d4ebaa56fd0388d510e7cacc17e92061c9a59ed86986b0d2e2380f8f9ce81bb16e9c4efdbdfa2950a2c72dae44985cf803fda8f583bafb255ce2ca26e3148ac99fbdd75c75b884e54d30a22692ad320a062df002453ede19cf7b3b1b19495ecf7743c45e6237", 0x96}, {&(0x7f0000000580)="2f593cea55c3ab74cf18badd689fff6d2a78850bcf2de4a7aefc2b4a7f29ac81e9057aa71bbd5c5a33c40446f932adc40a1214ca66d52f4345c1c2cb3e48b9755ec93a26fb47a83918df7fdf989ec2b9c6ebc5d0a26f8e64476c3a608b25458725e532a551582c2ab275", 0x6a}, {&(0x7f0000000600)="d1071be8066e538d197f522a7b3c0e13d4221a8e93d387bb8e76a5", 0x1b}, {&(0x7f0000000640)="5a0f0c2ee625cd66117c6a88a2ebb83ad4eae602b260ac876ecc16747833d87ad35642a106aa1a29354c60211fffe73990713c5d592db7e10fa8c81535cffee990535820a9b28ed83e4c9d91dbc4a4baa8e56f867199285dff760fd6c5c8d51cf73d7b2195fe62f7131ea7247f702eb35adf71b091cd365b9466919ac676393861b853431fade4093fa35ee98c3ba608a56ee214e9718cd53ca8e7a2d76fcabbb7f4e16c6c1d2abbf7bf31ce565dbb9074a58ef0d74f5792a77ba10420c78fb686fee89d3cbf00e662b09f88966154028f", 0xd1}], 0x7, &(0x7f00000007c0)=[@tclass={{0x14, 0x29, 0x43, 0x7f}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x40}}, {{&(0x7f0000000800)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffff8}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000840)="46b48fbcc798d712682a36dddee852e5d49abc9b33131cf7e44297157dbfaca91e625f96b2ec7f72325122ba25fe10e285e01e7a09c95d66cfdfe02609a89885961658a6398beb0e623cb01d33230b4bdf592e11c221cfca1fea0e5d1d83c40be4c1701fd22080128b095fcb79e1347f70ca1d4997390ab253e8a15cd343b01700361473f6338a09f50a4c5c29a19b9c61e7353129c2a0933ef6b49870eac671875fafcb40733cda2e9d0f44bc6929c937fb465f01cf53bf5d6b136b70db064b1847e525f1ee5af053cc96fbeb3c265b1458ae1c326b2f159a481b7fc1675a6b5becc669e830df300fb6d849f4d7bb5c2f1d5afbda418679b40c142e072e79c45f97405828d1f66f5b20b48032b8c2b5d25e940f9b603699cb2e15fbae8057e14a1c06f7fbbf39617f0a28c9bbcf18d8d3d1d8256ccdbe878e1a57910eb2179035b05b5a881d9d80815d73b4adc4370f2ba799290049971af4880a162eaf8e93eecb1168e5ac08d17c7f9695cce99a3883189aebf22963211835238901c541569e70b156da0976680b81a0836c7c0cc54dcf35fe044a8cabb3a799259a763f2c77258cefda0f322705d81e1197e7fa9c375035cbc37def5d6f2d000758db104e49a82afabae04003512ba26e00d66da0118f801e86aa419d0f00b1a03a8f9a0fe850feb7c1a04e43ff0cd5f0bb694ffc43cab78220dc124c9d2de09340b3098ab28dd9eb6f7fd076500463a6d583d07de52627f7de26ba93ab1a219be2e3584a4c34b3979fb18e543dc5e5ad29353495ab88bab8ad804e06344d57e5c7baa4026eca64207a38bdbf88a8562035a3cf6a0fcb0def083e035f6bc769302fba5e7ec4bb6361c2d85c00442b65e8ff8195622daa67457c01a3ec14139513557893b99be3ae4cd8729b95723bef498811a8c736bdeaba2037704548eca7a92b0501a2dba5766e89f058eee764c4cc49a5c11f86a6364e11a9d9521213353c955bf2de5ea77008ec43907a66cff879e88c5a801966f1c233c49294ecf28775b2b0ee6dd72603775211b337a85c5dda41d62bfcf71d81277a62348c3ab4a446da81dbd65cf296f8f65cb740e9ac719dfd6a7d4186f8eddabbc23f2de2636fd382dbcee8c4cb4b18e639160d6042160cd8083e6da2fa50e502cec7289d5844a61483a1908272f2a2e88db05dbd0c964cbd8316d420c9c53e6201b172cb9cd75d4eaf682e02502435c1fead5e7f20479be9f17030dc58caffc1f872282e592713695662df7f34a26305b66323f73ddc50e26d51668a74081b1a96f92aafcacdfdfc9fa1de77921873d8bdb7f1a3bba0556d63142d4974cf76b8210a4d76f27af37cd739afea970e1cfb197a56d2a8a801252f9476f6f89262314f64a8b08a59fa3f2ae2f9f1cabdcbcbaa2d9d158c75f4f2be753b3d0c2508c1debc67de4281f8508102a321840d5b36ac89396558c63c2dd41e122791be5975e5ba266eeab4c9780db9c6e9b0f3a7bbfbc5905984d26fa9ef7ce07845e9d2c228d7260e11e2519c721827bda1b211865012c7357248ff10637fe45b3af4127efad94e8b9ea0d7ffc60ec861f9b535bd327802762e43ace01e2c4d552948025c7b915979a1bb2a7e423cbc6590ef69b04f4dafed130650489eeb0d6739ec4fe353bc97704f22a40b8770bf31ee958353d85682d206ea03a1cb09b1aa858120b2db1d22b90ceccf10cbe1d8e8add6914e14214e78dcda7974113a675a51dd8b1d9f068f6967bcfe7ab9e93059a5456bd5cde4d6e4a0d4e10ce8f119b6dc85dd023bef758abd36a1f9f36151e1b37baef81acda4cba30eca9e12a0894958d31e0410fe9c4d9a955b971fb37dba979aaa9c056021f667639c55d38ed22ddb72266c4d8fb183e0fa8520975d53067bbc3ce3765f7f826bec2427c86e10453fc92c73badd4c7bd9b82381ec3adcd7f232eb6f363bc3fbfc3b9d427d0894c14ed470f7fc605a65e602c588ae07f118a1412e3c7289f29b8fad9333bdafdfb7b676f1387878eb0731ba1ad3e92e6e7f59dbd5dc93b17aa4079be028215b9089f72cf884054a221faa6339b209fa0b01ceba431e5f3a9d4300a8d6c180fcbe30b2ac978ac03d4fa89fef44d0d6f0b99bfcb4e24180c2fdcd46b89f6ccc1f73a461c05f01cff794a1b19ed180aec669acce4f5d9bba2c92312a13a3050d21aac6b02a34d00367449646968aa2d7c18b205874ce377f66d145f69cbb8b2c96a9754dfaccf900ae10ac4f61a3c738cc7f9ceaa63ed099eba53ef8d4ec4396d39a602b837e1aa0dd3ec103633ca52a6c9094529a00d8fdf442a54115e5f89ffe626d954ba7d12a5daaadafc5b4abfb43f245b4f58f6bbd8db9de3856acb4048f7f3602730457139997037ee04a064ce56d8069c7fc424a3fad5d5030cb7e53ce89a8746c5ad0b6e23c1845df9ba736eabc8a3e2cea2bfc07c15062564458de574f354ad117beb0b9b33efe2b2718fd3d624e1f1c5ce7d8702a63aef038e2bce458f2884c9836fe18334cefebc326dc8c516139e514375851ca9a8cb43f9c8a5f71ee2def0139b9dce69f1efa246fe6e609579c417949f151e02071c00b9cdd3e1cddfee3926d3d0fd03801f41774745cef4fbbb8d099ded792b080306d8bb852835b22c8a979c00f7563749acde0a4e8b44ddcda7c98e744a8e1d0ce014f46b3b6e867719f10d79941dd3a9dad05ab1cb9f90840e8ac314b5311104c1b8739cd70cdb8db62ddfb6e109ad9bd7643115896fbf33e567ab6921b03efa20812755c2bac49963bb72097ba871673b1b7b82fa67bda60dc900c79dd3854e22118afcbac0b5faf23e68b576da75327def360d070f076780d8a47a25443ec925ee5c8dcf418c51154d55fc3775b1dc9c422102a64b2cd5d292be778bc3be7cf13e4826d15488e32691a827a7174fec566499796613fa9710d6173561fe648f4bba46ba416bc0334cc3a8641fa8010b590e18c97da1892e12413303bdc17f0a160e394e80151101aba9f917279444e51b11c5222fe52ab7f6363a65341a07618a0db014fae647710aa7f002cdbee785a71d911d1d40e5d36a81f77a8de377af528da9b559206f4d43ae95b41f7a273b4135454b86a5b74f6acfbc8a0ad096fc5010c17acb8c27f7159f658f5541e662c48327e05f17d47496e39ab623dfb9cfb6c51b61b9d3bc7823106edb6268cfe088d1c5ca2116101ef1ae1744536a5fdffdce382df0672637bd02023dfa6d3243699abca355c5ee0c1549f140c20c78ce84817f09ad3d81f282edf0e2391021a82764acf3ff85475785d662143cbd3cb421e45a0e6cbab10c02fbe1a27941e126f0db9e2cdf336d8601ba4aab0a5a97048984cc6e58963652a17222c6387cc02b4c73c6fe5493b36245212f15b0d05f98eee3b7bc3102c41adb91c408cf2609a9a8786c10aa74ba6f0599cd1e04c4dae83f64e182dafd2f2f0a4e62e48e1e02c91699d378ba44dbec46d18c1eef278d3e140cca7d8148c231e6f6c0b3d0421a33da6a6f4cbf9949cfb0a413b01d624ed687b8ee634ee59efe65a46d2ed3f77994a01186e6f14a67cb02f635140c737d91a90c7eacd6fc93c63cc164f84e00f627343ee3b18dbf9b1baf687b33ee296752d480f07f5e2a6f41b797436ce94373b3ea001479616ae39fbb83a58eb5ce5e43b9b26167b4a5803995fe9bd8feb1efbaa367e1510d742241d4a77616f6b80b17154d695d7e6b9472c357b67210cc272346aa8772a9857c08e56ff9be99e6f9c169949aa852ed76da03ed48d62d00bcb60d786d2dd03ba9d4f0e2d7360733b54563ff22bd8c6ab80722ae0ddcb615c033f6583e5f24641b41704d4210b5fd2818c75fd8538dcb4687964fe8b3a3240ca84fd92eea52abf0c878216c04ddd7a394419a7f5a33071a5477b0a6d17f04f7f5e418c60ba434c8f9706d1efb124ba6dc1249d6d0075097ab6998aa449e33bebec6ee57f5428e4bfe95f95b7fd8d50d563805a9bf3da5a6b0bb14e7c075d49c2bd5fc714f97329ef635424d673ca3033a88f561ce5d2de306a02a5f07e785bee7258f7c827dc4b471e7ad32ef434e81dd88db85e1c833bbef43e6d57074290b74a1c1f0cf235c67b9ccb4a8888e999abbb4c5b434a03b77fef6d64232cebb9f213616888a2d9a350ca06601858359b4ee9a5786d9e88147acd0d2954087e85aa621022c01f0e9e0b9b16d5918374d1a49b8c2c696f56ab6ccc3a3037a9d7618648c9e5e3cf7312d9bb8b555a983f2bceb9c07956ffd26b6cc6a4c2a2b3ad7815c1cadab29cefd662ffe34cebba659fd376ad59ba0f8d353c347e3519d091504cd75f5c28124e34cee8cf5b7897c1b61c2bb916bd94e14c032f566ad2bb1f308d7b09752694887755754ced50532c4bb13e4c46fc0352631049a9271116eb637b34c0fec5318b4f8e60cd54e5b8b551757f3a43c538f019af1434ca570f03975c60c7c8d1391535f5b47bf1ac399db7bd00592415ee982ae2f41002181cbf25d84bbc94f25af83cb33829c54f7f12d0f58d3977e3d3fadd3dafb3c4ef037631468468bb8844e1ac31c5456e98c08930f7ff38a6f9a7d856cb41167ef69e45e7050f44035601c71739c2cbd51ad61873781f92736b12a7e1b2179019b72ba40a8ca63f93565ab96fba7bf3172315ee02cf55b3f6b278476f498ddfc1184c1669de38fa924c0051424d41089f4079a212ddc1d5e49404c7b7ae32e65a95abd78b3b19bea8bbe753eed3854516b8b0365875a622ff1856062ebed080ba0540a2aca9f3cbac003f50e2fa161b98d836d15925a0d22dff3b3a060528ea729dc9f3a13ee464ba97ed1db0020ea9ecc7e45fd9fbddbb62bcab938140a703f8f9098260751cc86e1d8918888d3618e776e34df2cd67a2d879c53829a7b5dd1943c8db01434d85029fc01e42fbb782e2b924eb9409d33dc6d70c809fa170339c76da50407b131e45982e6d54f2978b9f07e037f1a3516b874e5ab94706a627ef02058f0a86d9871b1644b5f7abb978a871edc7f3f4321eac31de6e343dc8a44820a29b9864e0777416c117530a606270448d1ebb046a646302a2acbd0e8772404818da295ba6a7b9b40817a0723a8741f3d5d7a644fc9214a78e53c0b47848e7c965294c193f81d59c072d682da21d6c746adf7522574c86bc8e758c17794b35696a871d3084fcfa3f4d7008eed48463095e800fccf8fa224e793a20df58797ca7e615ed540552e1f74422e9f68c94534b2654349fc163c47270ec28d2375e2afe6147c8278d6667090514c789750ac3d1f91a50807d904a3a90d9ce563081daf1bcbb48f5d09b0e00ed4176531d62dfd613920d41d538343331594f480399a4bbc7050f3d5fe65de247966d7f2f6c776f14d58498c0516bee1122f2a65f7e67abe81e0d775ceda7f1128b9ffa83373c08a9d293989d86701bef18e39521de590e8a7524cb496ebb65c9b9e680da5c8c17618c5248ee1a12cb5be9cab802533e6d98e0634c848fe86e61fd0e3ba78f6bfdb767f9a1cd36344de47676f60d6436b98ad4bdae1cea99870ed0c2ce1f188cae0b7d65df066991ff07051e3bd52f190fe1eabb298aa0b609a2670da6246e312cdd3f8a9377046a38fd73e1ba77469a93edd2fe276b6e6304c253e73eedd03761cfba6c69f9ba65a3440b19f074e7a78cc49a5834e53728385740dcdc001c49be5196b725b03257b9936e811d57155be95874082a094456bd4bb9e68661ea0f8808bad277df3860231a713d235c48b03f4a1519d21dc2f02c0d54", 0x1000}, {&(0x7f0000001840)="41378b977c28e0b423c5b371b12c102d1fad1759e94da6b7e21e9f89430b7a20c0e639467c187636d1", 0x29}], 0x2, &(0x7f00000018c0)=[@rthdr={{0x48, 0x29, 0x39, {0x8, 0x6, 0x2, 0xdc, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}, @empty, @loopback]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x506}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x2, 0x5a, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x37}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xbc}}, @dstopts={{0xc0, 0x29, 0x37, {0x2b, 0x14, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0xa, 0xa1, "726566a084d8e3ba057363f55574f12bf27a4f6a60892339a1e9ecebf166f4fab3144df9ee74d8f1060cd466502f0785a272772034557cc42fd43eebbc7892299cdc7d650eb2aa60823d8d13c98dcdb6c6a9748b1ee48be871cfd1e160dd47426537e2fab32d201aa9599a96966368fd8005dbab4e2b0433f447e071f97cc223b3f5e7054a720cf5c1aa662b23dfeb1650f8d88b0e13c57bad3f55ba785c94b304"}]}}}], 0x190}}, {{&(0x7f0000001a80)={0xa, 0x4e21, 0x8502, @empty, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001ac0)="1222d3527c90be0d1cf859e02ce9695f8a5e3b0e48cda2b5b18c3339fb112297cfe5b6f5194cb9a7cc77c230dc7dc725988a7983e05f7bac0183bccf49d4b347a50ea9426b9ec4155a0af0fd50cb27004a9a85e8db5cade80e9c45d93112123f0d7839c33c1d8a7816d1451e4ecbf15bf7f301b83388ce1e8ee7d3f0c8fdf1f1e51128", 0x83}, {&(0x7f0000001ec0)="c9ffcad37cddb76e51b28c63ce22c00927d6b3df4a2a286acacddca659919056a39f13bb7ac54a3217868bca98697ec50d67287d1d78fa4bd6625106dcbf68cf3b509bab1f48d02a33896fc8884e498a0c6866b8c50c6f9dd5f1f578e23fc5525b2e2a629ceb37f8bf7fea3bf214ea08ac384d69fe4d1730d2c75f9fe26bda2aea1c675ccb1b5096f02931", 0x8b}, {&(0x7f0000001f80)="0bea5d2b1d5c562ae3c55cd236e99ca789e60e6a526e6cdb2470098997c317ae325c3a5ed52f60ca82b19cf4e3947c3895ea26b995d1d113f694d97c60", 0x3d}], 0x3, &(0x7f0000001d00)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r1}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x1, 0xd, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x89, 0x4, '\x00', [@enc_lim, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffff01}}], 0xd8}}], 0x3, 0x60088c0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1, 0x8, 0x7ff, 0x800, 0xd, 0x2, 0x0, {0x0, @in6={{0xa, 0x4e21, 0xdb0, @mcast1, 0x7}}, 0x0, 0x3, 0xd1c0, 0x5, 0x6}}, &(0x7f0000000240)=0xb0) 3.989624071s ago: executing program 2 (id=9577): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x193f0, 0xa00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 3.969690374s ago: executing program 0 (id=9578): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000002100010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) 3.884379686s ago: executing program 3 (id=9579): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) close(r1) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c48f82c7a89d5da"], 0x18}}, 0x2404c0c0) 3.837243146s ago: executing program 0 (id=9580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x4c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x420, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4040001) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010028bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="8a430100000000001800168014000180eeff0500648d0000060000000902000014000300776c616e300400190000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc010) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r13], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r8) sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="02002dbd7000fddbdf25020000000800080000000000cca0d4739d3f879ae6d65cba6d2cf000087f542af334270d9001801d1d532699cfdd021f9ab3c966b804b619bf56"], 0x1c}, 0x1, 0x0, 0x0, 0x4008045}, 0x4000004) sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="38800000021400062abd70f3fdf2bf25050054000000000008fc4300", @ANYRES32, @ANYBLOB="080001000000000005005400000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250300000008000100000000000c0006"], 0x28}, 0x1, 0x0, 0x0, 0x40097}, 0x40000) 3.836521915s ago: executing program 2 (id=9581): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x10000080) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x1d28f000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) 3.704623415s ago: executing program 3 (id=9582): r0 = socket(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0xfe, 0xff, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x1, 0xf5, 0x2}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0f538dcd0863c8ce"}, 0x1}}]}, 0x154}}, 0x240448c8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) 3.405352793s ago: executing program 3 (id=9583): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x4}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x19079}}], 0x48}, 0x0) 3.393490868s ago: executing program 0 (id=9584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f00000001c0)='syzkaller\x00', 0x20000, &(0x7f0000000200)={@align=0x7, {0xb1, 0x8, 0x14000000, 0x40}}, 0xae, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x3}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4004001) 3.297232572s ago: executing program 0 (id=9585): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0xff00, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x3, 'wrr\x00', 0x9, 0x821}, 0x2c) 3.293645731s ago: executing program 4 (id=9586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@mcast2, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in6=@remote, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x1}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r8, @ANYRES32=r11, @ANYRESHEX=r6], 0x50) 3.270822548s ago: executing program 0 (id=9587): bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000007000000010001000900000005"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r1}, 0x38) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r1}, 0x38) (async, rerun: 64) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0], 0x34}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c28}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2000000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000002940), &(0x7f0000000500)=""/145}, 0x20) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 3.237428987s ago: executing program 3 (id=9588): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x80000001, 0x9, 0x8}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r3, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c000280050007004000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r1, &(0x7f0000000200)="001adefeae804b4d45f3003b3100", 0xe, 0x44, &(0x7f0000000280)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @remote}, 0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', r3, r0}, 0x4c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000005000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901004100000095000000000000003d00020000000000bf91000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 3.096915251s ago: executing program 1 (id=9589): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041dfffff00000000080020409111c5000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000563b0001dcdf2501000000000000008000"], 0x14}}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x2, 0x3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@RTM_NEWMDB={0x98, 0x54, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x4, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x6, 0x2, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x4, {@ip4=@loopback, 0x18367}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r8], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x54, 0xff, 0x0, 0x8}, {0x6, 0x74, 0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) 3.032071689s ago: executing program 0 (id=9590): socket$kcm(0x1e, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffa0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004801c0001800a00010072656469720000000c000280080003400000002e0c000180070001007274"], 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x24000080) socket$inet(0xa, 0x801, 0x84) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="000829bd7000fddbdf250100000008000200080000000800040007"], 0x70}, 0x1, 0x0, 0x0, 0x4000020}, 0x44010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x6, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000680)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, 0x4e24, 0x0, 0x4e23, 0xa30, 0xa, 0x20, 0x20, 0x2e, r3, r4}, {0xfff, 0xffffffffffffffff, 0x0, 0xc, 0x8, 0x5, 0x1000, 0x800}, {0x49, 0x6, 0x100000000, 0x2}, 0x80000001, 0x6e6bb5, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0xd, 0x32}, 0xa, @in6=@local, 0x3500, 0x1, 0x3, 0x0, 0x6, 0xf8fe, 0x879}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2a060400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x66, 0x0, &(0x7f00000000c0)) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003b0001031bbd7002fadbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x310bb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008010) 0s ago: executing program 2 (id=9591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a000000080002"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x40) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00ff00", @ANYRES16=r6, @ANYBLOB="01002ebd7000fedbdf2512000000180001801400020076657468315f746f5f626f6e6400000008000700020000000800060002000000"], 0x3c}}, 0x400c810) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x10, 0x4, 0x8000, 0x7b, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8010, 0x1, 0x400}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x7, 0x8, 0x41, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x400, 0x80000000}}) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x8, 0x0, 0x0}}, 0x10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000500)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r13, 0x8927, &(0x7f00000000c0)={'veth0\x00', @ifru_addrs=@sco={0x1f, @none}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xff, 0x0, 0x4, @private0, @loopback, 0x700, 0x1, 0xffffffff, 0x2}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="3fab00000000000000002e0000000e0001"], 0x50}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x205000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xdc, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2c, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x5}, [@nested={0x18, 0xd2, 0x0, 0x1, [@typed={0x14, 0x101, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) kernel console output (not intermixed with test programs): [ T6878] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8442'. [ 1163.812208][ T6886] lo: entered allmulticast mode [ 1163.825660][ T6886] tunl0: entered allmulticast mode [ 1163.853387][ T6886] gre0: entered allmulticast mode [ 1163.864862][ T6886] gretap0: entered allmulticast mode [ 1163.883393][ T6886] erspan0: entered allmulticast mode [ 1163.904338][ T6886] ip_vti0: entered allmulticast mode [ 1163.912524][ T6892] --map-set only usable from mangle table [ 1163.931416][ T6886] ip6_vti0: entered allmulticast mode [ 1163.950571][ T6886] wlan0: entered allmulticast mode [ 1163.980258][ T6886] ip6tnl0: entered allmulticast mode [ 1163.988295][ T6897] x_tables: duplicate underflow at hook 2 [ 1164.001606][ T6886] ip6gre0: entered allmulticast mode [ 1164.002685][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8449'. [ 1164.021234][ T6886] syz_tun: entered allmulticast mode [ 1164.031557][ T6886] ip6gretap0: entered allmulticast mode [ 1164.059770][ T6886] bridge0: entered allmulticast mode [ 1164.068753][ T6886] vcan0: entered allmulticast mode [ 1164.074965][ T6886] bond0: entered allmulticast mode [ 1164.080300][ T6886] bond_slave_0: entered allmulticast mode [ 1164.087802][ T6886] bond_slave_1: entered allmulticast mode [ 1164.095315][ T6886] team0: entered allmulticast mode [ 1164.100554][ T6886] team_slave_0: entered allmulticast mode [ 1164.107761][ T6886] team_slave_1: entered allmulticast mode [ 1164.114773][ T6886] dummy0: entered allmulticast mode [ 1164.120417][ T6886] nlmon0: entered allmulticast mode [ 1164.126974][ T6886] batadv0: entered allmulticast mode [ 1164.132633][ T6886] vxcan0: entered allmulticast mode [ 1164.138662][ T6886] vxcan1: entered allmulticast mode [ 1164.146257][ T6886] veth0: entered allmulticast mode [ 1164.151679][ T6886] veth1: entered allmulticast mode [ 1164.158169][ T6886] wg0: entered allmulticast mode [ 1164.164904][ T6886] wg1: entered allmulticast mode [ 1164.170793][ T6886] wg2: entered allmulticast mode [ 1164.177961][ T6886] veth0_to_bridge: entered allmulticast mode [ 1164.185705][ T6886] veth1_to_bridge: entered allmulticast mode [ 1164.192594][ T6886] veth0_to_bond: entered allmulticast mode [ 1164.200054][ T6886] veth1_to_bond: entered allmulticast mode [ 1164.207552][ T6886] veth0_to_team: entered allmulticast mode [ 1164.214371][ T6886] veth1_to_team: entered allmulticast mode [ 1164.220620][ T6886] veth0_to_batadv: entered allmulticast mode [ 1164.231802][ T6886] batadv_slave_0: entered allmulticast mode [ 1164.238963][ T6886] veth1_to_batadv: entered allmulticast mode [ 1164.246371][ T6886] batadv_slave_1: entered allmulticast mode [ 1164.252647][ T6886] xfrm0: entered allmulticast mode [ 1164.259272][ T6886] veth0_to_hsr: entered allmulticast mode [ 1164.267507][ T6886] hsr_slave_0: entered allmulticast mode [ 1164.273935][ T6886] veth1_to_hsr: entered allmulticast mode [ 1164.280027][ T6886] hsr_slave_1: entered allmulticast mode [ 1164.309950][ T6886] hsr0: entered allmulticast mode [ 1164.318019][ T6886] veth1_virt_wifi: entered allmulticast mode [ 1164.324908][ T6886] veth0_virt_wifi: entered allmulticast mode [ 1164.331039][ T6886] virt_wifi0: entered allmulticast mode [ 1164.337237][ T6886] veth1_vlan: entered allmulticast mode [ 1164.344379][ T6886] veth0_vlan: entered allmulticast mode [ 1164.350061][ T6886] vlan0: entered allmulticast mode [ 1164.355622][ T6886] vlan1: entered allmulticast mode [ 1164.360839][ T6886] macvlan0: entered allmulticast mode [ 1164.366454][ T6886] macvlan1: entered allmulticast mode [ 1164.371964][ T6886] ipvlan1: entered allmulticast mode [ 1164.378155][ T6886] geneve0: entered allmulticast mode [ 1164.384249][ T6886] geneve1: entered allmulticast mode [ 1164.389697][ T6886] mac80211_hwsim hwsim64 wlan0: entered allmulticast mode [ 1164.397488][ T6886] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 1164.405183][ T6886] ip6tnl1: entered allmulticast mode [ 1164.410567][ T6886] vxlan0: entered allmulticast mode [ 1164.416416][ T6886] bond1: entered allmulticast mode [ 1164.421628][ T6886] bond2: entered allmulticast mode [ 1164.427862][ T6886] bridge1: entered allmulticast mode [ 1164.433835][ T6886] bond3: entered allmulticast mode [ 1164.439151][ T6886] gre1: entered allmulticast mode [ 1164.444978][ T6886] gtp0: entered allmulticast mode [ 1164.450197][ T6886] bond4: entered allmulticast mode [ 1164.455452][ T6886] bridge2: entered allmulticast mode [ 1164.460816][ T6886] bridge3: entered allmulticast mode [ 1164.467285][ T6886] veth2: entered allmulticast mode [ 1164.472677][ T6886] veth3: entered allmulticast mode [ 1164.478594][ T6886] bond5: entered allmulticast mode [ 1164.484587][ T6886] mac80211_hwsim hwsim68 wlan2: entered allmulticast mode [ 1164.503726][ T6886] macvlan2: entered allmulticast mode [ 1164.509318][ T6886] macvlan3: entered allmulticast mode [ 1164.524349][ T6886] bond6: entered allmulticast mode [ 1164.529729][ T6886] gretap1: entered allmulticast mode [ 1164.536211][ T6886] bond7: entered allmulticast mode [ 1164.541653][ T6886] bridge4: entered allmulticast mode [ 1164.549085][ T6886] macvlan4: entered allmulticast mode [ 1164.555195][ T6886] macvlan5: entered allmulticast mode [ 1164.560764][ T6886] mac80211_hwsim hwsim64 nicvf0: entered allmulticast mode [ 1164.568797][ T6886] netdevsim netdevsim1 eth0: entered allmulticast mode [ 1164.576086][ T6886] netdevsim netdevsim1 eth1: entered allmulticast mode [ 1164.583528][ T6886] netdevsim netdevsim1 eth2: entered allmulticast mode [ 1164.590604][ T6886] netdevsim netdevsim1 eth3: entered allmulticast mode [ 1164.604258][ T6886] gre2: entered allmulticast mode [ 1164.610952][ T6886] memory.events: entered allmulticast mode [ 1164.618299][ T6886] gtp1: entered allmulticast mode [ 1164.624229][ T6886] syztnl2: entered allmulticast mode [ 1164.629720][ T6886] bond8: entered allmulticast mode [ 1164.645677][ T6901] tipc: Enabled bearer , priority 10 [ 1164.702242][ T6908] syzkaller0: entered promiscuous mode [ 1164.708081][ T6908] syzkaller0: entered allmulticast mode [ 1165.030158][ T6930] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1165.207906][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1165.229509][ T6943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8460'. [ 1165.237894][ T6946] x_tables: duplicate underflow at hook 3 [ 1165.245901][ T6944] vlan0: entered promiscuous mode [ 1165.251042][ T6944] bond_slave_1: entered promiscuous mode [ 1165.494321][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8466'. [ 1165.656883][ T6943] syzkaller1: entered promiscuous mode [ 1165.662515][ T6943] syzkaller1: entered allmulticast mode [ 1166.153509][ T6994] netlink: 'syz.2.8472': attribute type 7 has an invalid length. [ 1166.316174][ T7012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1166.322698][ T7013] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8475'. [ 1166.335995][ T6997] netlink: 'syz.3.8475': attribute type 19 has an invalid length. [ 1166.350228][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8475'. [ 1166.364071][ T6997] netlink: 'syz.3.8475': attribute type 19 has an invalid length. [ 1166.380586][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8475'. [ 1166.859528][ T7046] ip6t_srh: unknown srh invflags 4000 [ 1167.151399][ T7058] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1167.665066][ T7086] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1167.799087][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1167.819283][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1167.837886][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1167.848967][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1167.861238][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1168.052174][ T4938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1168.063922][ T4938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1168.072937][ T4938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1168.080997][ T4938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1168.089365][ T4938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1168.331061][ T7097] FAULT_INJECTION: forcing a failure. [ 1168.331061][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.354862][ T7097] CPU: 0 UID: 0 PID: 7097 Comm: syz.1.8504 Not tainted syzkaller #0 PREEMPT(full) [ 1168.354888][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1168.354903][ T7097] Call Trace: [ 1168.354911][ T7097] [ 1168.354920][ T7097] dump_stack_lvl+0xe8/0x150 [ 1168.354956][ T7097] should_fail_ex+0x40c/0x560 [ 1168.354985][ T7097] _copy_from_user+0x2d/0xb0 [ 1168.355014][ T7097] __sys_sendto+0x2a9/0x5a0 [ 1168.355042][ T7097] ? ksys_write+0x1e6/0x270 [ 1168.355075][ T7097] ? __pfx___sys_sendto+0x10/0x10 [ 1168.355097][ T7097] ? __mutex_unlock_slowpath+0x731/0x900 [ 1168.355153][ T7097] ? __pfx_ksys_write+0x10/0x10 [ 1168.355186][ T7097] __x64_sys_sendto+0xde/0x100 [ 1168.355211][ T7097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.355233][ T7097] do_syscall_64+0x174/0x580 [ 1168.355256][ T7097] ? trace_irq_disable+0x3b/0x140 [ 1168.355279][ T7097] ? clear_bhb_loop+0x40/0x90 [ 1168.355304][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.355322][ T7097] RIP: 0033:0x7f58e959de59 [ 1168.355340][ T7097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.355355][ T7097] RSP: 002b:00007f58ea3bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1168.355375][ T7097] RAX: ffffffffffffffda RBX: 00007f58e9825fa0 RCX: 00007f58e959de59 [ 1168.355388][ T7097] RDX: 000000000000ff88 RSI: 0000200000000180 RDI: 0000000000000003 [ 1168.355400][ T7097] RBP: 00007f58ea3bf090 R08: 0000200000000140 R09: 0000000000000014 [ 1168.355413][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.355424][ T7097] R13: 00007f58e9826038 R14: 00007f58e9825fa0 R15: 00007fffb4b8e868 [ 1168.355455][ T7097] [ 1168.722742][ T7106] __nla_validate_parse: 5 callbacks suppressed [ 1168.722760][ T7106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8505'. [ 1169.850186][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.857606][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.864891][ T7091] bridge_slave_0: entered allmulticast mode [ 1169.871872][ T7091] bridge_slave_0: entered promiscuous mode [ 1169.884477][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.892671][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.900419][ T7091] bridge_slave_1: entered allmulticast mode [ 1169.908251][ T7091] bridge_slave_1: entered promiscuous mode [ 1169.938168][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.951876][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.984544][ T7091] team0: Port device team_slave_0 added [ 1169.992128][ T7091] team0: Port device team_slave_1 added [ 1170.017827][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.025610][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.052252][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.066888][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.074445][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.100687][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.116385][ T5637] Bluetooth: hci4: command tx timeout [ 1170.163976][ T7091] hsr_slave_0: entered promiscuous mode [ 1170.170754][ T7091] hsr_slave_1: entered promiscuous mode [ 1170.178655][ T7091] debugfs: 'hsr0' already exists in 'hsr' [ 1170.185484][ T7091] Cannot create hsr debugfs directory [ 1170.367357][ T7091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1170.449303][ T7091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1170.525531][ T7091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1170.614137][ T7091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.768768][ T7114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1171.824364][ T7091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1171.870674][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.920808][ T7091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1171.940725][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1171.952255][ T7165] tipc: New replicast peer: 255.255.255.255 [ 1171.963209][ T7165] tipc: Enabled bearer , priority 10 [ 1171.969939][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8518'. [ 1171.971257][ T7091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1171.990525][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1172.001808][ T7091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1172.002339][ T7165] netlink: 'syz.4.8518': attribute type 1 has an invalid length. [ 1172.034908][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1172.084303][ T7165] bond6: entered promiscuous mode [ 1172.095083][ T7165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1172.127876][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8518'. [ 1172.183314][ T5637] Bluetooth: hci4: command tx timeout [ 1172.254888][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.299297][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.321618][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.328816][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.359284][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.366486][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.525091][ T7197] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1172.547093][ T7197] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1172.631128][ T7197] nbd: couldn't find a device at index 0 [ 1174.012386][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8528'. [ 1174.136395][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8529'. [ 1174.273606][ T5637] Bluetooth: hci4: command tx timeout [ 1174.291057][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.401282][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1174.410734][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1174.588197][ T7091] veth0_vlan: entered promiscuous mode [ 1174.640905][ T7091] veth1_vlan: entered promiscuous mode [ 1174.699887][ T7261] vlan2: entered allmulticast mode [ 1174.706859][ T7261] bond0: entered allmulticast mode [ 1174.712355][ T7262] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8534'. [ 1174.722991][ T7261] bond_slave_0: entered allmulticast mode [ 1174.728838][ T7261] bond_slave_1: entered allmulticast mode [ 1174.774909][ T7262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.796793][ T7262] bond_slave_0: left allmulticast mode [ 1174.810665][ T7262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.830843][ T7262] bond_slave_1: left allmulticast mode [ 1174.838575][ T7262] bond0 (unregistering): Released all slaves [ 1174.908185][ T7091] veth0_macvtap: entered promiscuous mode [ 1174.938861][ T7091] veth1_macvtap: entered promiscuous mode [ 1174.992347][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.042247][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.066705][ T1180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.082350][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8537'. [ 1175.098824][ T1180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.119038][ T1180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.155092][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8537'. [ 1175.167812][ T1180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.207077][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8537'. [ 1175.256227][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8537'. [ 1175.319905][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8537'. [ 1175.355184][ T7278] openvswitch: netlink: IP tunnel TTL not specified. [ 1175.377206][ T7278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1175.398158][T30651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.421638][T30651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.521535][ T7282] erspan0: left promiscuous mode [ 1175.571019][ T7289] netlink: 'syz.1.8543': attribute type 15 has an invalid length. [ 1175.580126][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.591310][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.639233][ T7282] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1175.666438][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.674965][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.343019][ T5637] Bluetooth: hci4: command tx timeout [ 1176.365674][ T7284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1176.685627][ T7318] netlink: 'syz.4.8549': attribute type 1 has an invalid length. [ 1176.850283][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.974789][ T7320] bond0: (slave veth7): Enslaving as an active interface with a down link [ 1177.150726][ T1320] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.180515][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1177.291957][ T7323] bond0: (slave batadv2): making interface the new active one [ 1177.338361][ T7323] batadv2: entered promiscuous mode [ 1177.359747][ T7323] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 1177.427474][ T7354] lo: entered promiscuous mode [ 1177.446567][ T7354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1177.613601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.681574][ T7370] bond0: (slave bond_slave_1): Releasing backup interface [ 1177.733017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.217315][ T7390] tipc: Enabled bearer , priority 0 [ 1178.270172][ T7387] tipc: Disabling bearer [ 1178.423162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.620290][ T7417] tipc: Invalid UDP bearer configuration [ 1178.620344][ T7417] tipc: Enabling of bearer rejected, failed to enable media [ 1178.684170][ T7417] bond13: Removing last arp target with arp_interval on [ 1179.103798][ T7445] netlink: 'syz.4.8579': attribute type 1 has an invalid length. [ 1179.339235][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880687c5000: rx timeout, send abort [ 1179.348228][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880687c5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1179.524053][ T7455] __nla_validate_parse: 5 callbacks suppressed [ 1179.524070][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'. [ 1179.548992][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'. [ 1180.084938][ T7474] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1180.615211][ T7507] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8597'. [ 1180.632983][ T7507] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1181.090648][ T7518] syzkaller1: entered promiscuous mode [ 1181.096845][ T7528] FAULT_INJECTION: forcing a failure. [ 1181.096845][ T7528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.135765][ T7518] syzkaller1: entered allmulticast mode [ 1181.171019][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.3.8603 Not tainted syzkaller #0 PREEMPT(full) [ 1181.171046][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.171059][ T7528] Call Trace: [ 1181.171064][ T7528] [ 1181.171069][ T7528] dump_stack_lvl+0xe8/0x150 [ 1181.171094][ T7528] should_fail_ex+0x40c/0x560 [ 1181.171118][ T7528] _copy_from_iter+0x1d3/0x1660 [ 1181.171149][ T7528] ? _copy_from_iter+0x21b/0x1660 [ 1181.171174][ T7528] ? __pfx__copy_from_iter+0x10/0x10 [ 1181.171196][ T7528] ? __pfx__copy_from_iter+0x10/0x10 [ 1181.171214][ T7528] copy_page_from_iter+0x219/0x2d0 [ 1181.171230][ T7528] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1181.171314][ T7528] packet_sendmsg+0x36ab/0x5040 [ 1181.171370][ T7528] ? aa_file_perm+0x18b/0x15f0 [ 1181.171398][ T7528] ? __lock_acquire+0x683/0x2cf0 [ 1181.171422][ T7528] ? __pfx_packet_sendmsg+0x10/0x10 [ 1181.171440][ T7528] ? __might_fault+0xaf/0x130 [ 1181.171452][ T7528] ? __pfx_aa_sk_perm+0x10/0x10 [ 1181.171469][ T7528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1181.171482][ T7528] ? __pfx_packet_sendmsg+0x10/0x10 [ 1181.171491][ T7528] sock_sendmsg_nosec+0x13a/0x180 [ 1181.171505][ T7528] __sys_sendto+0x408/0x5a0 [ 1181.171520][ T7528] ? ksys_write+0x1e6/0x270 [ 1181.171537][ T7528] ? __pfx___sys_sendto+0x10/0x10 [ 1181.171550][ T7528] ? __mutex_unlock_slowpath+0x731/0x900 [ 1181.171580][ T7528] ? __pfx_ksys_write+0x10/0x10 [ 1181.171598][ T7528] __x64_sys_sendto+0xde/0x100 [ 1181.171613][ T7528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.171624][ T7528] do_syscall_64+0x174/0x580 [ 1181.171638][ T7528] ? trace_irq_disable+0x3b/0x140 [ 1181.171652][ T7528] ? clear_bhb_loop+0x40/0x90 [ 1181.171664][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.171675][ T7528] RIP: 0033:0x7f74dd79de59 [ 1181.171686][ T7528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.171695][ T7528] RSP: 002b:00007f74de600028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1181.171708][ T7528] RAX: ffffffffffffffda RBX: 00007f74dda25fa0 RCX: 00007f74dd79de59 [ 1181.171716][ T7528] RDX: 000000000000ff88 RSI: 0000200000000180 RDI: 0000000000000003 [ 1181.171723][ T7528] RBP: 00007f74de600090 R08: 0000200000000140 R09: 0000000000000014 [ 1181.171729][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.171736][ T7528] R13: 00007f74dda26038 R14: 00007f74dda25fa0 R15: 00007ffef41a74b8 [ 1181.171751][ T7528] [ 1181.562484][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8607'. [ 1181.797542][ T7554] netlink: 'syz.1.8611': attribute type 4 has an invalid length. [ 1181.940547][ T7561] macsec0: entered promiscuous mode [ 1181.946781][ T7561] erspan0: entered promiscuous mode [ 1181.952211][ T7561] macsec0: entered allmulticast mode [ 1181.966617][ T7561] erspan0: left promiscuous mode [ 1182.005986][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8615'. [ 1182.172651][ T7576] netlink: 'syz.1.8618': attribute type 1 has an invalid length. [ 1182.181732][ T7576] netlink: 'syz.1.8618': attribute type 11 has an invalid length. [ 1182.239374][ T7570] bond7 (unregistering): Released all slaves [ 1182.253558][ T7580] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1182.263134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.497757][ T7587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.511866][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8621'. [ 1182.674274][ T7596] veth0_macvtap: left promiscuous mode [ 1182.918210][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.926468][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.935398][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.943592][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.192377][ T7607] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8625'. [ 1183.380373][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8626'. [ 1183.453877][ T7619] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1185.145891][ T7578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1186.285943][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1186.342249][ T5284] veth0_macvtap: entered promiscuous mode [ 1186.655684][ T7697] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1186.659639][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 1186.761253][ T7702] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8643'. [ 1186.858222][ T7702] team_slave_0: left promiscuous mode [ 1186.881290][ T7702] team_slave_1: left promiscuous mode [ 1187.188263][ T7702] team0 (unregistering): Port device team_slave_0 removed [ 1187.207206][ T7702] team0 (unregistering): Port device team_slave_1 removed [ 1187.240636][ T7712] ªªªªª!: renamed from virt_wifi0 [ 1187.499489][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8650'. [ 1187.637400][T20663] IPVS: starting estimator thread 0... [ 1187.660905][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8653'. [ 1187.752939][ T7742] IPVS: using max 30 ests per chain, 72000 per kthread [ 1187.882664][ T7740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1188.310515][ T7764] netlink: 'syz.2.8657': attribute type 1 has an invalid length. [ 1188.357257][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1188.384994][ T7764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8657'. [ 1188.500788][ T7767] xt_l2tp: invalid flags combination: 8 [ 1188.552634][ T7767] netlink: 'syz.3.8658': attribute type 1 has an invalid length. [ 1188.675564][ T48] batadv2: left promiscuous mode [ 1189.228291][ T7797] netlink: 'syz.2.8665': attribute type 9 has an invalid length. [ 1189.278149][ T7798] netlink: 'syz.2.8665': attribute type 9 has an invalid length. [ 1189.304822][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1189.428191][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1189.655067][ T7814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8672'. [ 1190.441337][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8672'. [ 1190.525064][ T7842] syzkaller0: entered promiscuous mode [ 1190.557987][ T7842] syzkaller0: entered allmulticast mode [ 1190.920442][ T7860] bond9: entered promiscuous mode [ 1191.238180][ T7876] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 1191.297156][ T7885] __nla_validate_parse: 8 callbacks suppressed [ 1191.297173][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8686'. [ 1191.305935][ T7887] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 1191.332581][ T7887] netlink: 'syz.3.8687': attribute type 2 has an invalid length. [ 1191.354392][ T7887] : entered promiscuous mode [ 1191.869049][ T7904] netlink: 'syz.3.8694': attribute type 15 has an invalid length. [ 1192.025507][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8695'. [ 1192.087974][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8695'. [ 1192.100856][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8696'. [ 1192.132423][ T7884] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1192.309030][ T7931] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8700'. [ 1192.472373][ T7943] nbd: socks must be embedded in a SOCK_ITEM attr [ 1192.550753][ T7943] batadv_slave_1: entered promiscuous mode [ 1192.603885][ T7943] nbd: couldn't find a device at index 0 [ 1192.725395][ T7952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1192.780655][ T7094] udevd[7094]: inotify_add_watch(7, /dev/nbd6, 10) failed: No such file or directory [ 1192.829306][ T7954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8708'. [ 1193.082629][ T7958] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8710'. [ 1193.212472][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8710'. [ 1193.354860][ T7972] netlink: 'syz.1.8714': attribute type 2 has an invalid length. [ 1193.371890][ T7972] netlink: 'syz.1.8714': attribute type 2 has an invalid length. [ 1193.393246][ T7972] netlink: 'syz.1.8714': attribute type 4 has an invalid length. [ 1193.418015][ T7972] netlink: 'syz.1.8714': attribute type 8 has an invalid length. [ 1193.443813][ T7972] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8714'. [ 1193.477147][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8714'. [ 1193.805964][ T7943] batadv_slave_1: left promiscuous mode [ 1193.921499][ T7999] xt_TCPMSS: Only works on TCP SYN packets [ 1194.750038][ T8043] netlink: 'syz.0.8733': attribute type 13 has an invalid length. [ 1194.761487][ T8043] netlink: 'syz.0.8733': attribute type 17 has an invalid length. [ 1194.782745][ T8043] lo: left promiscuous mode [ 1194.849056][ T8043] wlan0: left allmulticast mode [ 1194.929754][ T8043] veth1_virt_wifi: left allmulticast mode [ 1194.953998][ T8043] veth0_macvtap: left promiscuous mode [ 1194.960504][ T8043] veth0_macvtap: entered promiscuous mode [ 1194.970318][ T8057] netlink: 'syz.2.8738': attribute type 1 has an invalid length. [ 1194.986981][ T8043] veth1_macvtap: entered promiscuous mode [ 1194.996247][ T8058] netlink: 'syz.3.8737': attribute type 4 has an invalid length. [ 1195.012303][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1195.025507][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1195.037946][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1195.059524][ T8043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1195.069859][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1195.081376][ T8043] veth0_to_team: entered promiscuous mode [ 1195.089334][ T8043] ip6gre1: left allmulticast mode [ 1195.099797][ T8043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1195.125770][ T8043] bond3: left promiscuous mode [ 1195.131021][ T8043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1195.139514][ T8043] erspan0: entered promiscuous mode [ 1195.146713][ T8043] erspan0: entered allmulticast mode [ 1195.152423][ T8043] macvlan4: left allmulticast mode [ 1195.157892][ T8043] erspan0: left allmulticast mode [ 1195.167697][ T8043] bond4: left promiscuous mode [ 1195.172598][ T8043] bond4: left allmulticast mode [ 1195.177994][ T8043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1195.227593][ T8043] bridge0: port 3(vlan2) entered blocking state [ 1195.234030][ T8043] bridge0: port 3(vlan2) entered forwarding state [ 1195.265329][ T8043] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1195.322608][ T8053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.369857][ T8053] bond0 (unregistering): Released all slaves [ 1195.442159][ T8057] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1195.442423][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.512420][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.531956][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.738699][ T8071] syzkaller0: entered promiscuous mode [ 1195.767738][ T8071] syzkaller0: entered allmulticast mode [ 1196.843612][ T8113] __nla_validate_parse: 7 callbacks suppressed [ 1196.843630][ T8113] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8745'. [ 1199.316495][ T1180] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1199.753901][ T8179] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8753'. [ 1199.781720][ T8180] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8753'. [ 1199.798425][ T8177] vlan0: entered promiscuous mode [ 1199.832792][ T8177] gretap0: entered promiscuous mode [ 1200.028001][ T8190] syzkaller0: entered promiscuous mode [ 1200.052011][ T8190] syzkaller0: entered allmulticast mode [ 1200.126227][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8757'. [ 1200.141860][ T8194] tipc: Enabled bearer , priority 0 [ 1200.225436][ T8194] tipc: Resetting bearer [ 1200.309992][ T8207] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1200.331237][ T8210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8760'. [ 1200.344877][ T8194] tipc: Disabling bearer [ 1200.356717][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1200.517222][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1200.544446][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1200.565969][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1200.595011][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1200.681353][ T8235] syzkaller1: entered promiscuous mode [ 1200.690093][ T8235] syzkaller1: entered allmulticast mode [ 1200.900736][ T8252] sctp: [Deprecated]: syz.4.8773 (pid 8252) Use of int in maxseg socket option. [ 1200.900736][ T8252] Use struct sctp_assoc_value instead [ 1201.534606][ T8257] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1201.682099][ T8279] netlink: 'syz.3.8782': attribute type 1 has an invalid length. [ 1201.959796][ T8279] bond0: entered promiscuous mode [ 1202.003390][ T8279] bond0: entered allmulticast mode [ 1202.058719][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.125027][ T8281] erspan1: entered allmulticast mode [ 1202.155014][ T8281] bond0: (slave erspan1): making interface the new active one [ 1202.180051][ T8281] erspan1: entered promiscuous mode [ 1202.203745][ T8281] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 1202.691430][ T8321] netlink: 'syz.2.8789': attribute type 1 has an invalid length. [ 1203.314244][ T8353] veth0: entered promiscuous mode [ 1203.335708][ T8353] veth0: left promiscuous mode [ 1203.463483][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1203.646789][ T8375] __nla_validate_parse: 105 callbacks suppressed [ 1203.646809][ T8375] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.8801'. [ 1203.678773][ T8375] netlink: 'syz.3.8801': attribute type 1 has an invalid length. [ 1203.772015][ T8383] netlink: 'syz.0.8802': attribute type 1 has an invalid length. [ 1203.781225][ T8385] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1203.794680][ T8383] netlink: 'syz.0.8802': attribute type 2 has an invalid length. [ 1203.899877][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8803'. [ 1204.001098][ T8390] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1204.187944][ T8392] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1204.215349][ T8392] bond2 (unregistering): Released all slaves [ 1204.280139][ T8396] sch_fq: defrate 4294967293 ignored. [ 1207.864037][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1212.343459][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1228.983013][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1236.085913][ T8431] SET target dimension over the limit! [ 1236.105233][ T8432] tipc: Disabling bearer [ 1236.218381][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8813'. [ 1236.230841][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8817'. [ 1236.419382][ T8452] netlink: 'syz.3.8819': attribute type 5 has an invalid length. [ 1236.470316][ T8457] bond14: entered promiscuous mode [ 1236.484971][ T8457] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1236.527348][ T8453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8820'. [ 1236.626114][ T8465] wlan0: entered promiscuous mode [ 1236.631462][ T8465] wlan0: entered allmulticast mode [ 1236.644240][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1236.654384][ T8465] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1236.741007][ T8471] nbd: couldn't find a device at index 0 [ 1236.892022][ T8474] wlan0: entered promiscuous mode [ 1236.911644][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8824'. [ 1236.925685][ T8474] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1237.028254][ T8482] nbd: couldn't find a device at index 0 [ 1237.150209][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1237.268440][ T8485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1237.630858][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8831'. [ 1237.634748][ T8518] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1237.676621][ T8521] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1237.708682][ T8529] netlink: 'syz.2.8833': attribute type 1 has an invalid length. [ 1237.952368][ T8533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1237.980613][T20663] team_slave_0: entered promiscuous mode [ 1237.986409][T20663] team_slave_1: entered promiscuous mode [ 1238.046213][ T8545] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1238.070729][ T8533] nbd: couldn't find a device at index 0 [ 1238.250600][ T8556] netlink: 'syz.3.8840': attribute type 4 has an invalid length. [ 1238.522883][ T8570] bond0: ARP target 0.0.0.2 is already present [ 1238.529172][ T5637] Bluetooth: hci4: link tx timeout [ 1238.539569][ T5637] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1238.551737][ T5637] Bluetooth: hci4: link tx timeout [ 1238.556965][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1238.585023][ T1320] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1238.597508][ T8570] bond0: option arp_ip_target: invalid value (33554432) [ 1239.519660][ T8601] nbd: couldn't find a device at index 0 [ 1239.740700][ T8619] SET target dimension over the limit! [ 1239.835201][ T8625] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 1239.851866][ T8625] mac80211_hwsim hwsim74 wlan0: entered allmulticast mode [ 1239.881168][ T8625] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1240.030362][ T8637] geneve5: entered promiscuous mode [ 1240.469322][ T8667] nbd: couldn't find a device at index 0 [ 1240.583360][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 1241.298276][ T8678] __nla_validate_parse: 13 callbacks suppressed [ 1241.299948][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8874'. [ 1241.414612][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1241.450563][ T60] tipc: Subscription rejected, illegal request [ 1241.746742][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8881'. [ 1241.784970][ T8704] netlink: 'syz.3.8881': attribute type 1 has an invalid length. [ 1242.176919][ T8719] sctp: [Deprecated]: syz.4.8884 (pid 8719) Use of int in maxseg socket option. [ 1242.176919][ T8719] Use struct sctp_assoc_value instead [ 1242.312372][ T8723] netlink: zone id is out of range [ 1242.318646][ T8723] netlink: zone id is out of range [ 1242.325100][ T8723] netlink: zone id is out of range [ 1242.330738][ T8723] netlink: zone id is out of range [ 1242.336690][ T8723] netlink: zone id is out of range [ 1242.342002][ T8723] netlink: zone id is out of range [ 1242.347945][ T8723] netlink: zone id is out of range [ 1242.353622][ T8723] netlink: get zone limit has 4 unknown bytes [ 1242.451051][ T8725] netlink: 'syz.2.8885': attribute type 1 has an invalid length. [ 1242.551223][ T8725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1242.607609][ T8727] bond5: up delay (1128530568) is not a multiple of miimon (100), value rounded to 1128530500 ms [ 1242.704843][ T8727] bond5: entered allmulticast mode [ 1242.783157][ T8725] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1242.849484][ T30] audit: type=1804 audit(1783652992.441:21): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8888" name="/newroot/84/cgroup.controllers" dev="tmpfs" ino=446 res=1 errno=0 [ 1242.884985][ T8735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1242.895735][ T8735] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1242.896149][ T30] audit: type=1800 audit(1783652992.441:22): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8888" name="cgroup.controllers" dev="tmpfs" ino=446 res=0 errno=0 [ 1242.927451][ T8735] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8889'. [ 1243.315554][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 1243.757649][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8896'. [ 1243.768658][ T8764] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1244.025686][ T8767] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8897'. [ 1244.207090][ T8773] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1244.238811][ T8771] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1244.288356][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8902'. [ 1244.325280][ T8776] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1244.347010][ T8781] nbd: couldn't find device at index 1694498816 [ 1244.374626][ T8776] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1244.402186][ T8776] nbd: couldn't find a device at index 0 [ 1244.522710][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8906'. [ 1245.026125][ T8818] netlink: 'syz.3.8912': attribute type 1 has an invalid length. [ 1245.066739][ T8819] netlink: 'syz.3.8912': attribute type 1 has an invalid length. [ 1245.090095][ T8818] netlink: 'syz.3.8912': attribute type 2 has an invalid length. [ 1245.108312][ T8819] netlink: 'syz.3.8912': attribute type 2 has an invalid length. [ 1245.679583][ T8848] netlink: 'syz.3.8919': attribute type 10 has an invalid length. [ 1245.789989][ T8848] geneve3: entered promiscuous mode [ 1245.812215][ T8848] geneve3: entered allmulticast mode [ 1246.053955][ T8866] netlink: 'syz.3.8926': attribute type 1 has an invalid length. [ 1246.082758][ T8870] netlink: 'syz.3.8926': attribute type 1 has an invalid length. [ 1246.279547][ T8866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1246.420576][ T8893] netlink: 'syz.0.8932': attribute type 21 has an invalid length. [ 1246.446894][ T8893] IPv6: NLM_F_CREATE should be specified when creating new route [ 1246.566581][ T8898] wlan0: entered promiscuous mode [ 1246.581645][ T8898] wlan0: entered allmulticast mode [ 1246.604786][ T8898] __nla_validate_parse: 8 callbacks suppressed [ 1246.604811][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1246.658095][ T8898] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1246.708484][ T8898] nbd: couldn't find a device at index 0 [ 1246.736364][ T8900] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 1246.751384][ T8894] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 1246.790981][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8936'. [ 1246.794340][ T8906] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1246.817246][ T8906] bond3 (unregistering): Released all slaves [ 1246.826603][ T8915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8939'. [ 1247.097879][ T8921] syzkaller0: entered promiscuous mode [ 1247.113128][ T8921] syzkaller0: entered allmulticast mode [ 1247.279157][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8947'. [ 1247.406682][ T8955] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8949'. [ 1247.487246][ T8961] wlan0: left promiscuous mode [ 1247.547794][ T8961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.566798][ T8965] netlink: 'syz.1.8952': attribute type 1 has an invalid length. [ 1247.675401][ T8961] team_slave_0: entered promiscuous mode [ 1247.686390][ T8961] team_slave_1: entered promiscuous mode [ 1247.726617][ T8961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1247.742744][ T8961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1247.765895][ T8961] veth1_macvtap: left promiscuous mode [ 1247.773066][ T8961] veth0_macvtap: left promiscuous mode [ 1247.779951][ T8961] veth0_macvtap: entered promiscuous mode [ 1247.795018][ T8961] veth1_macvtap: entered promiscuous mode [ 1247.820765][ T8961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1247.832244][ T8982] nbd: couldn't find a device at index 0 [ 1247.872093][ T8961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1247.881311][ T8961] veth0_to_team: entered promiscuous mode [ 1247.890633][ T8961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1247.899645][ T8961] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1247.909808][ T8961] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1247.921642][ T8961] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1247.930584][ T8961] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1247.944956][ T8961] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1247.954523][ T8961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.961719][ T8961] geneve4: left promiscuous mode [ 1247.970863][ T8961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1247.978950][ T8961] bond6: left promiscuous mode [ 1247.987403][ T8961] syzkaller0: left promiscuous mode [ 1248.032366][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8951'. [ 1248.042726][ T8970] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1248.058745][ T8967] dummy0: left allmulticast mode [ 1248.067373][ T8965] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1248.075020][T30659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.090592][T30659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.101495][T30659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.108663][T30659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.158630][ T1180] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1248.168549][ T1180] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1248.183357][T20672] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1248.206344][ T60] bond0: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1248.244213][ T1180] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1248.408011][ T1180] bridge0: port 3(wlan1) entered blocking state [ 1248.414432][ T1180] bridge0: port 3(wlan1) entered forwarding state [ 1248.467613][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1248.488196][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1248.497078][T20663] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1248.686897][T20673] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1248.710116][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8961'. [ 1248.725854][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1248.749421][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8961'. [ 1248.787978][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1249.145362][T20672] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1249.234772][T20672] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1249.465657][T20663] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1249.482519][ T9055] tipc: Invalid UDP bearer configuration [ 1249.482593][ T9055] tipc: Enabling of bearer rejected, failed to enable media [ 1249.611222][ T9064] xt_TCPMSS: Only works on TCP SYN packets [ 1249.898880][ T9077] netlink: 'syz.3.8973': attribute type 1 has an invalid length. [ 1249.940587][ T9077] bond3: entered promiscuous mode [ 1249.946570][ T9077] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1249.998215][ T9077] bond3: (slave bridge1): making interface the new active one [ 1250.045801][ T9077] bridge1: entered promiscuous mode [ 1250.075738][ T9077] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1250.100509][ T9083] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 1250.109768][ T9083] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 1250.136424][ T9083] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1250.735593][ T9114] wlan0: left promiscuous mode [ 1250.741038][ T9114] wlan0: left allmulticast mode [ 1250.918160][ T9114] xfrm0: left allmulticast mode [ 1250.994334][ T9114] macvlan0: left promiscuous mode [ 1251.089842][ T9114] vlan2: left promiscuous mode [ 1251.100853][ T9114] bond1: left promiscuous mode [ 1251.109425][ T9114] vlan2: left allmulticast mode [ 1251.114674][ T9114] bond1: left allmulticast mode [ 1251.155023][ T9114] ip6tnl2: left allmulticast mode [ 1251.164192][ T9114] geneve4: left promiscuous mode [ 1251.171508][ T9114] geneve5: left promiscuous mode [ 1251.181663][ T9114] bond5: left allmulticast mode [ 1251.191551][ T9124] netlink: 'syz.4.8984': attribute type 3 has an invalid length. [ 1251.244456][ T48] netdevsim netdevsim2 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.277673][ T48] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.369488][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.407255][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.430665][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.453316][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.474115][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.492999][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.510888][ T9140] netlink: 'syz.0.8986': attribute type 1 has an invalid length. [ 1251.537524][ T9140] netlink: 'syz.0.8986': attribute type 3 has an invalid length. [ 1251.572113][ T9140] netlink: 'syz.0.8986': attribute type 1 has an invalid length. [ 1251.604124][ T9140] netlink: 'syz.0.8986': attribute type 1 has an invalid length. [ 1251.625083][ T9149] netlink: 'syz.2.8990': attribute type 3 has an invalid length. [ 1251.642192][ T9149] __nla_validate_parse: 5 callbacks suppressed [ 1251.642210][ T9149] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8990'. [ 1251.687204][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8991'. [ 1251.753775][ T9149] syzkaller0: entered promiscuous mode [ 1251.780402][ T9149] syzkaller0: entered allmulticast mode [ 1251.831322][ T9149] tipc: Enabled bearer , priority 0 [ 1251.899536][ T9148] tipc: Resetting bearer [ 1251.933542][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8994'. [ 1251.994085][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8994'. [ 1252.018530][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1252.019455][ T9170] xt_TCPMSS: Only works on TCP SYN packets [ 1252.034069][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1252.037855][ T9148] tipc: Disabling bearer [ 1252.050561][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1252.063525][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1252.072363][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1252.508569][ T9186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.535246][ T9187] netlink: 'syz.1.8995': attribute type 5 has an invalid length. [ 1252.807582][ T9195] netlink: zone id is out of range [ 1252.823393][ T9195] netlink: zone id is out of range [ 1252.838743][ T9195] netlink: zone id is out of range [ 1252.850383][ T9195] netlink: zone id is out of range [ 1252.865535][ T9195] netlink: zone id is out of range [ 1252.880904][ T9195] netlink: zone id is out of range [ 1252.892486][ T9195] netlink: zone id is out of range [ 1252.976304][T30659] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.216439][T30659] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.229361][ T9201] netlink: 'syz.2.9000': attribute type 26 has an invalid length. [ 1253.496388][T30659] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.555079][ T9209] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9002'. [ 1253.579737][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9002'. [ 1253.592037][ T9211] netlink: 'syz.1.9003': attribute type 7 has an invalid length. [ 1253.718028][T30659] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.755775][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9004'. [ 1254.126294][ T9238] netlink: 'syz.4.9007': attribute type 9 has an invalid length. [ 1254.183552][ T4938] Bluetooth: hci2: command tx timeout [ 1254.281183][T30270] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.363684][T30271] batadv0: left promiscuous mode [ 1254.396566][T30270] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.493342][ T9247] syzkaller0: entered promiscuous mode [ 1254.499990][ T9247] syzkaller0: entered allmulticast mode [ 1254.542057][T30270] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.649775][T30271] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.844103][ T9259] netlink: 'syz.3.9010': attribute type 83 has an invalid length. [ 1254.972409][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9009'. [ 1256.264208][ T4938] Bluetooth: hci2: command tx timeout [ 1257.301624][ T9270] net_ratelimit: 21 callbacks suppressed [ 1257.301645][ T9270] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1257.369327][ T9167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.377032][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.384773][ T9167] bridge_slave_0: entered allmulticast mode [ 1257.391679][ T9167] bridge_slave_0: entered promiscuous mode [ 1257.399995][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.411688][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.419719][ T9167] bridge_slave_1: entered allmulticast mode [ 1257.427761][ T9167] bridge_slave_1: entered promiscuous mode [ 1257.563527][ T9260] vlan4: entered promiscuous mode [ 1257.598105][T30659] vlan2: left allmulticast mode [ 1257.616734][T30659] geneve0: left allmulticast mode [ 1257.628269][T30659] bridge0: port 3(vlan2) entered disabled state [ 1257.748286][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9015'. [ 1257.966024][ T9294] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9016'. [ 1258.080713][T30659] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1258.178171][T30659] bond7 (unregistering): (slave bridge2): Removing an active aggregator [ 1258.191302][T30659] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 1258.201671][T30659] bond7 (unregistering): (slave bridge2): the permanent HWaddr of slave - 7e:16:34:fc:76:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1258.221041][T30659] bridge2 (unregistering): left promiscuous mode [ 1258.227490][T30659] bridge2 (unregistering): left allmulticast mode [ 1258.237946][T30659] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 1258.246509][T30659] bridge3 (unregistering): left promiscuous mode [ 1258.253628][T30659] bridge3 (unregistering): left allmulticast mode [ 1258.267901][T30659] bond0 (unregistering): Released all slaves [ 1258.280775][T30659] bond1 (unregistering): Released all slaves [ 1258.294787][T30659] bond2 (unregistering): Released all slaves [ 1258.308596][T30659] bond3 (unregistering): Released all slaves [ 1258.321965][T30659] bond4 (unregistering): Released all slaves [ 1258.343100][ T4938] Bluetooth: hci2: command tx timeout [ 1258.347311][T30659] bond5 (unregistering): Released all slaves [ 1258.361811][T30659] bond6 (unregistering): Released all slaves [ 1258.376539][T30659] bond7 (unregistering): Released all slaves [ 1258.390283][T30659] bond8 (unregistering): Released all slaves [ 1258.406800][T30659] bond9 (unregistering): Released all slaves [ 1258.436941][T30659] bond10 (unregistering): Released all slaves [ 1258.451138][T30659] bond11 (unregistering): Released all slaves [ 1258.470607][T30659] bond12 (unregistering): Released all slaves [ 1258.483234][T30659] bond13 (unregistering): Released all slaves [ 1258.497303][T30659] bond14 (unregistering): Released all slaves [ 1258.510973][T30659] bond15 (unregistering): Released all slaves [ 1258.525763][T30659] bond16 (unregistering): Released all slaves [ 1258.540475][T30659] bond17 (unregistering): Released all slaves [ 1258.557195][T30659] bond18 (unregistering): Released all slaves [ 1258.619622][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1258.659283][ T9300] netlink: 'syz.4.9017': attribute type 3 has an invalid length. [ 1258.708364][ T9167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.779845][ T9167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.855463][ T9303] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1259.029494][ T9167] team0: Port device team_slave_0 added [ 1259.051942][ T9167] team0: Port device team_slave_1 added [ 1259.077883][T30659] : left promiscuous mode [ 1259.321075][T30659] tipc: Left network mode [ 1259.339587][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.358002][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.412934][ T9167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.467401][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.486802][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9027'. [ 1259.490831][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.561612][ T9167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.630714][ T9326] bond0: entered promiscuous mode [ 1259.639699][ T9340] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9026'. [ 1259.648855][ T9326] bond0: left promiscuous mode [ 1259.672222][ T9346] netlink: 'syz.4.9028': attribute type 2 has an invalid length. [ 1259.695538][ T9325] bond0: entered promiscuous mode [ 1259.701689][ T9325] bond0: left promiscuous mode [ 1259.898614][ T9167] hsr_slave_0: entered promiscuous mode [ 1259.907616][ T9167] hsr_slave_1: entered promiscuous mode [ 1259.914613][ T9167] debugfs: 'hsr0' already exists in 'hsr' [ 1259.920439][ T9167] Cannot create hsr debugfs directory [ 1260.012652][ T9351] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 1260.043208][ T9358] can: request_module (can-proto-0) failed. [ 1260.100358][ T9365] tipc: Enabling of bearer rejected, failed to enable media [ 1260.123853][ T9351] nbd: couldn't find a device at index 0 [ 1260.133758][ T9353] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 1260.202041][ T9358] batman_adv: batadv0: Adding interface: dummy0 [ 1260.216574][ T9358] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.259958][ T9358] batman_adv: batadv0: Interface activated: dummy0 [ 1260.290384][ T9368] batadv0: mtu less than device minimum [ 1260.300081][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.312209][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.323848][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.335556][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.343041][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1260.343057][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1260.347204][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.352207][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1260.360477][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.388712][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.400297][ T9368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.427810][ T4938] Bluetooth: hci2: command tx timeout [ 1260.468791][ T9378] netlink: 'syz.3.9033': attribute type 4 has an invalid length. [ 1260.476780][ T9378] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9033'. [ 1260.534477][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1260.594292][ T9384] sctp: [Deprecated]: syz.4.9034 (pid 9384) Use of int in max_burst socket option deprecated. [ 1260.594292][ T9384] Use struct sctp_assoc_value instead [ 1260.662761][ T9390] syz.2.9036: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1260.708733][ T9390] CPU: 1 UID: 0 PID: 9390 Comm: syz.2.9036 Not tainted syzkaller #0 PREEMPT(full) [ 1260.708758][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1260.708769][ T9390] Call Trace: [ 1260.708777][ T9390] [ 1260.708787][ T9390] dump_stack_lvl+0xe8/0x150 [ 1260.708819][ T9390] warn_alloc+0x24c/0x270 [ 1260.708841][ T9390] ? stack_depot_save_flags+0x33/0x800 [ 1260.708862][ T9390] ? __pfx_warn_alloc+0x10/0x10 [ 1260.708882][ T9390] ? kasan_save_track+0x3e/0x80 [ 1260.708901][ T9390] ? __kasan_kmalloc+0x93/0xb0 [ 1260.708921][ T9390] ? xsk_setsockopt+0x52a/0x960 [ 1260.708940][ T9390] ? do_sock_setsockopt+0x17c/0x1b0 [ 1260.708961][ T9390] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1260.708980][ T9390] ? do_syscall_64+0x174/0x580 [ 1260.709000][ T9390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.709024][ T9390] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1260.709065][ T9390] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1260.709086][ T9390] ? __kasan_kmalloc+0x93/0xb0 [ 1260.709107][ T9390] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1260.709128][ T9390] ? __kmalloc_cache_noprof+0x150/0x660 [ 1260.709149][ T9390] vmalloc_user_noprof+0xad/0xe0 [ 1260.709168][ T9390] ? xskq_create+0xbf/0x170 [ 1260.709187][ T9390] xskq_create+0xbf/0x170 [ 1260.709208][ T9390] xsk_init_queue+0x8a/0xe0 [ 1260.709228][ T9390] xsk_setsockopt+0x52a/0x960 [ 1260.709245][ T9390] ? __fget_files+0x2a/0x420 [ 1260.709267][ T9390] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1260.709284][ T9390] ? __pfx_aa_sk_perm+0x10/0x10 [ 1260.709310][ T9390] ? aa_sock_opt_perm+0xff/0x1a0 [ 1260.709328][ T9390] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1260.709345][ T9390] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1260.709364][ T9390] do_sock_setsockopt+0x17c/0x1b0 [ 1260.709396][ T9390] __x64_sys_setsockopt+0x13d/0x1b0 [ 1260.709419][ T9390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.709435][ T9390] do_syscall_64+0x174/0x580 [ 1260.709455][ T9390] ? trace_irq_disable+0x3b/0x140 [ 1260.709474][ T9390] ? clear_bhb_loop+0x40/0x90 [ 1260.709493][ T9390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.709508][ T9390] RIP: 0033:0x7fea1159de59 [ 1260.709523][ T9390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.709537][ T9390] RSP: 002b:00007fea1238a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1260.709555][ T9390] RAX: ffffffffffffffda RBX: 00007fea11826090 RCX: 00007fea1159de59 [ 1260.709566][ T9390] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1260.709576][ T9390] RBP: 00007fea11633e6f R08: 0000000000000004 R09: 0000000000000000 [ 1260.709586][ T9390] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.709595][ T9390] R13: 00007fea11826128 R14: 00007fea11826090 R15: 00007ffd61a19908 [ 1260.709621][ T9390] [ 1260.709692][ T9390] Mem-Info: [ 1261.002693][ T9390] active_anon:7524 inactive_anon:0 isolated_anon:0 [ 1261.002693][ T9390] active_file:0 inactive_file:44008 isolated_file:0 [ 1261.002693][ T9390] unevictable:768 dirty:220 writeback:0 [ 1261.002693][ T9390] slab_reclaimable:12898 slab_unreclaimable:166591 [ 1261.002693][ T9390] mapped:31310 shmem:1930 pagetables:1430 [ 1261.002693][ T9390] sec_pagetables:0 bounce:0 [ 1261.002693][ T9390] kernel_misc_reclaimable:0 [ 1261.002693][ T9390] free:1242389 free_pcp:9104 free_cma:0 [ 1261.048599][ T9390] Node 0 active_anon:31496kB inactive_anon:0kB active_file:0kB inactive_file:175828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126440kB dirty:880kB writeback:0kB shmem:7284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16404kB pagetables:5584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1261.102499][ T9390] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1261.141993][ T9393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1261.152951][ T9390] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.184334][ T9390] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1261.216215][ T9390] Node 0 DMA32 free:1009200kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34896kB inactive_anon:0kB active_file:0kB inactive_file:175828kB unevictable:1536kB writepending:880kB zspages:0kB present:3129332kB managed:2548816kB mlocked:0kB bounce:0kB free_pcp:36032kB local_pcp:14668kB free_cma:0kB [ 1261.325383][ T9390] lowmem_reserve[]: 0 0 0 0 0 [ 1261.358569][ T9390] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.479634][ T9390] lowmem_reserve[]: 0 0 0 0 0 [ 1261.485120][ T9390] Node 1 Normal free:3941936kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.503466][ T9404] bond0: entered promiscuous mode [ 1261.557162][ T9390] lowmem_reserve[]: 0 0 0 0 0 [ 1261.570160][ T9404] bond_slave_0: entered promiscuous mode [ 1261.576437][ T9390] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1261.576573][ T9390] Node 0 DMA32: 3007*4kB (UM) 688*8kB (UME) 505*16kB (UME) 456*32kB (UME) 116*64kB (UME) 68*128kB (UME) 13*256kB (UME) 12*512kB (UME) 4*1024kB (ME) [ 1261.611753][ T9404] bond_slave_1: entered promiscuous mode [ 1261.628962][ T9390] 4*2048kB (ME) 226*4096kB (UM) = 1003788kB [ 1261.629010][ T9390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1261.689922][ T9404] bond0: left promiscuous mode [ 1261.690216][ T9390] Node 1 Normal: 2*4kB (UM) [ 1261.695435][ T9404] bond_slave_0: left promiscuous mode [ 1261.705559][ T9390] 3*8kB (UM) 7*16kB (UM) 3*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3941936kB [ 1261.722282][ T9404] bond_slave_1: left promiscuous mode [ 1261.734347][ T9390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.748593][ T9390] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1261.769908][ T9390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.786447][ T9390] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1261.802927][ T9390] 48179 total pagecache pages [ 1261.826490][ T9390] 0 pages in swap cache [ 1261.845471][ T9390] Free swap = 124996kB [ 1261.870421][ T9390] Total swap = 124996kB [ 1261.885828][ T9390] 2097051 pages RAM [ 1261.889941][ T9390] 0 pages HighMem/MovableOnly [ 1261.895016][ T9390] 428165 pages reserved [ 1261.899203][ T9390] 0 pages cma reserved [ 1262.057820][ T9415] netlink: 'syz.1.9040': attribute type 1 has an invalid length. [ 1262.073420][ T9167] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.135725][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9040'. [ 1262.745703][ T9421] bond11: entered promiscuous mode [ 1262.753209][ T9421] bond11: entered allmulticast mode [ 1262.785626][ T9421] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1262.868022][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1262.891721][T30659] hsr_slave_0: left promiscuous mode [ 1262.913949][T30659] hsr_slave_1: left promiscuous mode [ 1262.930619][T30659] veth0_to_team: left promiscuous mode [ 1262.937345][T30659] veth1_macvtap: left promiscuous mode [ 1262.945708][T30659] veth0_macvtap: left promiscuous mode [ 1263.611876][ T9167] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.828162][ T9167] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.936545][ T9458] netlink: 'syz.2.9046': attribute type 13 has an invalid length. [ 1263.957246][ T9458] netlink: 'syz.2.9046': attribute type 27 has an invalid length. [ 1264.099840][ T9167] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.356355][T30659] IPVS: stop unused estimator thread 0... [ 1264.419792][ T9466] xt_limit: Overflow, try lower: 324382443/0 [ 1264.458448][ T9464] syzkaller0: entered promiscuous mode [ 1264.468616][ T9464] syzkaller0: entered allmulticast mode [ 1267.629023][ T9167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1267.660984][ T9167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1267.674168][ T9534] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.9051'. [ 1267.701284][ T9167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1267.742091][ T9167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1267.813000][ T9167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1267.842113][ T9167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1267.861730][ T9167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1267.865761][ T9545] nbd: couldn't find a device at index 0 [ 1267.896707][ T9167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1268.082785][ T9561] dvmrp0: entered allmulticast mode [ 1268.102652][ T9563] netlink: 'syz.4.9057': attribute type 9 has an invalid length. [ 1268.214016][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.242590][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9057'. [ 1268.279920][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9057'. [ 1268.309151][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9057'. [ 1268.336020][ T9167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.359687][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9057'. [ 1268.370832][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9057'. [ 1268.401250][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9057'. [ 1268.416415][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.423608][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.437137][ T3144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.444354][ T3144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.570016][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1268.606522][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1268.636590][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1268.876695][ T9595] netlink: 'syz.2.9066': attribute type 63 has an invalid length. [ 1269.226169][ T9614] netlink: 'syz.1.9071': attribute type 10 has an invalid length. [ 1269.243016][ T9614] batadv0: left allmulticast mode [ 1269.248561][ T9614] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 1269.275463][ T9614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.296828][ T9614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.322084][ T9614] bond0 (unregistering): Released all slaves [ 1269.445236][ T9167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.546452][ T9167] veth0_vlan: entered promiscuous mode [ 1269.801837][ T9167] veth1_vlan: entered promiscuous mode [ 1269.909091][ T9167] veth0_macvtap: entered promiscuous mode [ 1269.921028][ T9167] veth1_macvtap: entered promiscuous mode [ 1269.948915][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.968334][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.011535][ T3144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.034927][ T3144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.055939][ T3144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.076303][ T3144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.314247][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.345795][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.641158][T30659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.652690][T30659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.506930][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1271.527588][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1271.537142][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1271.549718][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1271.564616][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1272.070802][ T9673] syzkaller0: entered promiscuous mode [ 1272.098864][ T9673] syzkaller0: entered allmulticast mode [ 1272.125873][ T9689] Cannot find add_set index 2 as target [ 1272.170057][ T9694] netlink: 'syz.0.9091': attribute type 1 has an invalid length. [ 1272.267250][T30270] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.277812][ T9696] ip6gretap0: entered promiscuous mode [ 1272.288501][ T9696] ip6gretap0: entered allmulticast mode [ 1272.389959][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.400020][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.467754][T30270] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.500516][T30651] mac80211_hwsim hwsim61 wlan1: left allmulticast mode [ 1272.516413][T30651] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 1272.525627][T30651] bridge0: port 3(wlan1) entered disabled state [ 1272.537999][T30651] bridge_slave_1: left allmulticast mode [ 1272.544244][T30651] bridge_slave_1: left promiscuous mode [ 1272.550180][T30651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.571194][T30651] bridge_slave_0: left allmulticast mode [ 1272.577313][T30651] bridge_slave_0: left promiscuous mode [ 1272.584000][T30651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.552727][T30651] team0: Port device bridge2 removed [ 1273.623181][ T5637] Bluetooth: hci1: command tx timeout [ 1273.646405][T30651] bond1 (unregistering): Released all slaves [ 1273.689171][T30651] bond2 (unregistering): Released all slaves [ 1273.739046][T30651] bond3 (unregistering): Released all slaves [ 1273.792712][T30651] bond4 (unregistering): (slave veth5): Releasing active interface [ 1273.811301][T30651] batadv0: entered promiscuous mode [ 1273.832348][T30651] bond4 (unregistering): (slave batadv0): Releasing active interface [ 1273.855633][T30651] bond4 (unregistering): Released all slaves [ 1273.892414][T30651] bond5 (unregistering): Released all slaves [ 1273.930830][T30651] bond6 (unregistering): Released all slaves [ 1273.997723][T30651] bond0 (unregistering): (slave veth7): Releasing active interface [ 1274.015136][T30651] batadv2: entered promiscuous mode [ 1274.040672][T30651] bond0 (unregistering): (slave batadv2): Releasing active interface [ 1274.061614][T30651] bond0 (unregistering): Released all slaves [ 1274.332692][ T9719] lo: left allmulticast mode [ 1274.371169][ T9719] tunl0: left allmulticast mode [ 1274.390481][ T9719] gre0: left allmulticast mode [ 1274.444102][ T9719] gretap0: left allmulticast mode [ 1274.503561][ T9719] erspan0: left allmulticast mode [ 1274.543054][ T9719] ip_vti0: left allmulticast mode [ 1274.573082][ T9719] ip6_vti0: left allmulticast mode [ 1274.587947][ T9719] wlan0: left allmulticast mode [ 1274.604685][ T9719] ip6tnl0: left allmulticast mode [ 1274.633554][ T9719] ip6gre0: left allmulticast mode [ 1274.645372][ T9719] syz_tun: left allmulticast mode [ 1274.681396][ T9719] ip6gretap0: left allmulticast mode [ 1274.700458][ T9719] bridge0: left allmulticast mode [ 1274.721518][ T9719] vcan0: left allmulticast mode [ 1274.727348][ T9719] team0: left allmulticast mode [ 1274.732615][ T9719] batman_adv: batadv0: Interface deactivated: dummy0 [ 1274.752409][ T9719] nlmon0: left allmulticast mode [ 1274.771552][ T9719] veth0: left allmulticast mode [ 1274.788446][ T9719] veth1: left allmulticast mode [ 1274.813049][ T9719] wg0: left allmulticast mode [ 1274.824457][ T9719] wg1: left allmulticast mode [ 1274.842447][ T9719] wg2: left allmulticast mode [ 1274.854432][ T9719] veth0_to_bridge: left allmulticast mode [ 1274.875540][ T9719] veth1_to_bridge: left allmulticast mode [ 1274.890729][ T9719] veth0_to_bond: left allmulticast mode [ 1274.906117][ T9719] bond_slave_0: left allmulticast mode [ 1274.923286][ T9719] veth1_to_bond: left allmulticast mode [ 1274.939323][ T9719] bond_slave_1: left allmulticast mode [ 1274.955354][ T9719] veth0_to_team: left allmulticast mode [ 1274.968421][ T9719] team_slave_0: left allmulticast mode [ 1274.982011][ T9719] veth1_to_team: left allmulticast mode [ 1274.997607][ T9719] team_slave_1: left allmulticast mode [ 1275.011083][ T9719] veth0_to_batadv: left allmulticast mode [ 1275.025416][ T9719] batadv_slave_0: left allmulticast mode [ 1275.038619][ T9719] veth1_to_batadv: left allmulticast mode [ 1275.052327][ T9719] batadv_slave_1: left allmulticast mode [ 1275.073696][ T9719] xfrm0: left allmulticast mode [ 1275.084446][ T9719] veth0_to_hsr: left allmulticast mode [ 1275.098539][ T9719] veth1_to_hsr: left allmulticast mode [ 1275.111340][ T9719] hsr0: left allmulticast mode [ 1275.116655][ T9719] hsr_slave_0: left allmulticast mode [ 1275.122518][ T9719] hsr_slave_1: left allmulticast mode [ 1275.128946][ T9719] veth1_virt_wifi: left allmulticast mode [ 1275.135622][ T9719] veth0_virt_wifi: left allmulticast mode [ 1275.142089][ T9719] virt_wifi0: left allmulticast mode [ 1275.148700][ T9719] veth1_vlan: left allmulticast mode [ 1275.164298][ T9719] vlan0: left allmulticast mode [ 1275.174975][ T9719] vlan1: left allmulticast mode [ 1275.186723][ T9719] macvlan0: left allmulticast mode [ 1275.195474][ T9719] macvlan1: left allmulticast mode [ 1275.201057][ T9719] ipvlan1: left allmulticast mode [ 1275.208617][ T9719] veth0_vlan: left allmulticast mode [ 1275.215531][ T9719] geneve0: left allmulticast mode [ 1275.221754][ T9719] geneve1: left allmulticast mode [ 1275.229310][ T9719] mac80211_hwsim hwsim64 wlan0: left allmulticast mode [ 1275.236779][ T9719] mac80211_hwsim hwsim65 wlan1: left allmulticast mode [ 1275.245002][ T9719] ip6tnl1: left allmulticast mode [ 1275.250318][ T9719] vxlan0: left allmulticast mode [ 1275.256284][ T9719] bond1: left allmulticast mode [ 1275.261430][ T9719] bond2: left allmulticast mode [ 1275.267589][ T9719] bridge1: left allmulticast mode [ 1275.279151][ T9745] __nla_validate_parse: 7 callbacks suppressed [ 1275.279167][ T9745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9101'. [ 1275.298436][ T9719] bond3: left allmulticast mode [ 1275.309135][ T9719] gre1: left allmulticast mode [ 1275.320711][ T9719] gtp0: left allmulticast mode [ 1275.333026][ T9719] bond4: left allmulticast mode [ 1275.343329][ T9719] bridge2: left allmulticast mode [ 1275.352997][ T9719] bridge3: left allmulticast mode [ 1275.364513][ T9719] veth2: left allmulticast mode [ 1275.383420][ T9719] veth3: left allmulticast mode [ 1275.388504][ T9719] bond5: left allmulticast mode [ 1275.394800][ T9719] mac80211_hwsim hwsim68 wlan2: left allmulticast mode [ 1275.413348][ T9719] macvlan2: left allmulticast mode [ 1275.419984][ T9719] macvlan3: left allmulticast mode [ 1275.433056][ T9719] bond6: left allmulticast mode [ 1275.443326][ T9719] gretap1: left allmulticast mode [ 1275.453068][ T9719] bond7: left allmulticast mode [ 1275.463047][ T9719] bridge4: left allmulticast mode [ 1275.482358][ T9719] macvlan4: left allmulticast mode [ 1275.493064][ T9719] macvlan5: left allmulticast mode [ 1275.503319][ T9719] mac80211_hwsim hwsim64 nicvf0: left allmulticast mode [ 1275.523094][ T9719] netdevsim netdevsim1 eth0: left allmulticast mode [ 1275.534813][ T9719] netdevsim netdevsim1 eth1: left allmulticast mode [ 1275.550899][ T9719] netdevsim netdevsim1 eth2: left allmulticast mode [ 1275.557919][ T9719] netdevsim netdevsim1 eth3: left allmulticast mode [ 1275.564855][ T9719] gre2: left allmulticast mode [ 1275.571165][ T9719] memory.events: left allmulticast mode [ 1275.577294][ T9719] gtp1: left allmulticast mode [ 1275.582222][ T9719] syztnl2: left allmulticast mode [ 1275.587690][ T9719] bond8: left allmulticast mode [ 1275.602735][ T9719] bond9: left promiscuous mode [ 1275.608940][ T9719] bond11: left promiscuous mode [ 1275.611574][ T9749] xt_hashlimit: size too large, truncated to 1048576 [ 1275.613910][ T9719] bond11: left allmulticast mode [ 1275.620838][T30651] : left promiscuous mode [ 1275.649663][ T9735] netlink: 774 bytes leftover after parsing attributes in process `syz.0.9101'. [ 1275.672639][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1275.725446][ T5637] Bluetooth: hci1: command tx timeout [ 1275.744276][T30651] tipc: Disabling bearer [ 1275.749860][T30651] tipc: Left network mode [ 1276.308027][ T9776] netlink: 'syz.0.9107': attribute type 16 has an invalid length. [ 1276.336336][ T9776] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1276.566432][ T9773] syzkaller0: entered promiscuous mode [ 1276.585594][ T9773] syzkaller0: entered allmulticast mode [ 1276.674697][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.687999][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.695719][ T9677] bridge_slave_0: entered allmulticast mode [ 1276.726637][ T9677] bridge_slave_0: entered promiscuous mode [ 1276.938001][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.948097][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.973493][ T9677] bridge_slave_1: entered allmulticast mode [ 1276.989290][ T9677] bridge_slave_1: entered promiscuous mode [ 1277.050253][ T9816] net_ratelimit: 13 callbacks suppressed [ 1277.050272][ T9816] openvswitch: netlink: Message has 8 unknown bytes. [ 1277.219419][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.234661][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1277.261612][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.361969][ T9677] team0: Port device team_slave_0 added [ 1277.374282][T20672] IPVS: starting estimator thread 0... [ 1277.395550][ T9677] team0: Port device team_slave_1 added [ 1277.481888][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.491633][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.518439][ T9832] IPVS: using max 32 ests per chain, 76800 per kthread [ 1277.532875][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.551402][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.575763][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.605231][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.793399][ T5637] Bluetooth: hci1: command tx timeout [ 1277.830377][ T9677] hsr_slave_0: entered promiscuous mode [ 1277.865094][ T9677] hsr_slave_1: entered promiscuous mode [ 1277.900708][ T9677] debugfs: 'hsr0' already exists in 'hsr' [ 1277.921350][ T9677] Cannot create hsr debugfs directory [ 1278.147872][T30651] hsr_slave_0: left promiscuous mode [ 1278.169651][T30651] hsr_slave_1: left promiscuous mode [ 1278.196557][T30651] veth0_to_team: left promiscuous mode [ 1278.202739][T30651] veth1_macvtap: left promiscuous mode [ 1278.209533][T30651] veth0_macvtap: left promiscuous mode [ 1278.225499][ T9857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1278.329810][ T9864] netlink: 34 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1278.687973][T30651] team0 (unregistering): Port device team_slave_1 removed [ 1278.706768][T30651] team0 (unregistering): Port device team_slave_0 removed [ 1278.850191][ T9858] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.9122'. [ 1278.886147][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1279.245904][ T9882] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9129'. [ 1279.309406][ T9677] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.467963][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1279.504739][T30651] IPVS: stop unused estimator thread 0... [ 1279.512399][ T9897] netlink: 'syz.1.9133': attribute type 4 has an invalid length. [ 1279.582163][ T9900] netlink: 'syz.1.9133': attribute type 4 has an invalid length. [ 1279.675477][ T9677] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.745938][ T9899] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1279.867687][ T5637] Bluetooth: hci1: command tx timeout [ 1279.898732][ T9677] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.111338][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9136'. [ 1280.166991][ T9677] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.443530][ T9940] netlink: 'syz.3.9138': attribute type 25 has an invalid length. [ 1280.656817][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9140'. [ 1280.685120][ T9954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9140'. [ 1280.960768][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9140'. [ 1281.055260][ T9677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1281.109302][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1281.138405][ T9677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1281.183832][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9144'. [ 1281.251626][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1281.288621][ T9677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1281.340327][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1281.362018][ T9677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1281.395354][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1281.567249][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.631005][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1281.668464][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.675645][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.726552][T30651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.733739][T30651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.101952][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.848890][ T9677] veth0_vlan: entered promiscuous mode [ 1283.902295][ T9677] veth1_vlan: entered promiscuous mode [ 1284.007688][ T9677] veth0_macvtap: entered promiscuous mode [ 1284.050126][ T9677] veth1_macvtap: entered promiscuous mode [ 1284.107588][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.157026][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.200341][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.247902][T10085] dvmrp8: entered allmulticast mode [ 1284.269098][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.288508][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.320896][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.638829][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9160'. [ 1284.745529][T10109] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.9163'. [ 1284.829989][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.866312][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.038142][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9164'. [ 1285.076831][T10114] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1285.229145][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.261952][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.505752][T10131] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1285.513544][ T7816] IPVS: starting estimator thread 0... [ 1285.522735][T10131] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1285.552234][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1285.614123][T10132] IPVS: using max 32 ests per chain, 76800 per kthread [ 1285.809918][T10154] bond4 (unregistering): Released all slaves [ 1285.994991][T10167] netlink: 51 bytes leftover after parsing attributes in process `syz.4.9173'. [ 1286.298962][T10186] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1286.823943][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9188'. [ 1286.982047][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9192'. [ 1287.124524][T10226] macvtap1: entered promiscuous mode [ 1287.129981][T10226] bridge0: entered promiscuous mode [ 1287.274788][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9196'. [ 1287.464255][T20673] syzkaller0: tun_net_xmit 76 [ 1287.476759][T20673] syzkaller0: tun_net_xmit 76 [ 1290.464025][T10293] netlink: 'syz.2.9207': attribute type 1 has an invalid length. [ 1290.482049][T10293] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9207'. [ 1290.493398][T10293] workqueue: Failed to create a rescuer kthread for wq "phy8": -EINTR [ 1290.522457][T10306] lo: Caught tx_queue_len zero misconfig [ 1290.541745][T10306] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1290.622212][T10312] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9212'. [ 1290.650942][T10314] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9213'. [ 1290.772567][T10323] xt_cgroup: invalid path, errno=-2 [ 1292.889983][T10413] openvswitch: netlink: Missing valid actions attribute. [ 1292.921716][T10413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1293.273690][T10419] ip6gretap0: left promiscuous mode [ 1293.300413][T10419] ip6gretap0: left allmulticast mode [ 1293.308200][T10429] netlink: 'syz.4.9243': attribute type 1 has an invalid length. [ 1293.322983][T10431] openvswitch: netlink: IP tunnel dst address not specified [ 1293.328002][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.337962][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.819906][T10419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1293.862554][T10419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1293.884917][T10454] IPVS: length: 250 != 24 [ 1293.943875][ T5637] Bluetooth: hci1: command tx timeout [ 1294.077294][T10419] macvtap1: left promiscuous mode [ 1294.118097][ T3144] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.150094][ T3144] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.172642][ T3144] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.182017][ T3144] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.241276][T10461] netlink: 124 bytes leftover after parsing attributes in process `syz.3.9251'. [ 1294.290697][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9254'. [ 1294.809649][T10383] udevd[10383]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1294.897859][T10512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.137796][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9267'. [ 1295.265248][T10533] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9270'. [ 1295.267633][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1295.449594][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1295.466361][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1295.479400][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1295.489419][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1295.500381][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1296.039189][T10571] syzkaller0: entered promiscuous mode [ 1296.066928][T10571] syzkaller0: entered allmulticast mode [ 1296.108150][T10570] tipc: Started in network mode [ 1296.129128][T10570] tipc: Node identity c29b8cbf3c4a, cluster identity 4711 [ 1296.154462][T10570] tipc: Enabled bearer , priority 0 [ 1296.193031][T10571] syzkaller0: left allmulticast mode [ 1296.221880][T10572] tipc: Resetting bearer [ 1296.238630][T10579] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9282'. [ 1296.254475][T10569] tipc: Resetting bearer [ 1296.298378][T10569] tipc: Disabling bearer [ 1296.505137][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9284'. [ 1296.680502][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1296.737826][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1296.866904][T10602] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1296.874253][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1296.906878][T10611] netlink: 'syz.0.9288': attribute type 3 has an invalid length. [ 1296.967164][T10610] veth5: entered allmulticast mode [ 1296.977020][T10611] netlink: 'syz.0.9288': attribute type 10 has an invalid length. [ 1296.992294][T10610] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1297.027903][T10595] bond4 (unregistering): (slave veth5): Releasing backup interface [ 1297.049167][T10595] bond4 (unregistering): Released all slaves [ 1297.107246][T10615] pim6reg: entered allmulticast mode [ 1297.191767][T10589] syzkaller0: entered promiscuous mode [ 1297.202145][T10589] syzkaller0: entered allmulticast mode [ 1297.245706][T10621] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1297.419707][T10637] netlink: 'syz.0.9293': attribute type 18 has an invalid length. [ 1297.490639][T30651] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.510190][T30651] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.528021][T30651] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.543945][ T5637] Bluetooth: hci3: command tx timeout [ 1297.552470][T30651] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.678700][T10541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.698920][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.725276][T10541] bridge_slave_0: entered allmulticast mode [ 1297.738805][T10541] bridge_slave_0: entered promiscuous mode [ 1297.765255][T10541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.790663][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.803415][T10541] bridge_slave_1: entered allmulticast mode [ 1297.811214][T10541] bridge_slave_1: entered promiscuous mode [ 1297.910794][T10541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.925499][T10669] netlink: 'syz.3.9301': attribute type 1 has an invalid length. [ 1297.932188][T10541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.058582][T10669] bond4: entered promiscuous mode [ 1298.065529][T10669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1298.080498][T10541] team0: Port device team_slave_0 added [ 1298.102495][T10670] bond4: entered allmulticast mode [ 1298.165446][T10669] bond4: (slave bridge3): making interface the new active one [ 1298.193329][T10669] bridge3: entered promiscuous mode [ 1298.208916][T10669] bridge3: entered allmulticast mode [ 1298.221352][T10669] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1298.249847][T10541] team0: Port device team_slave_1 added [ 1298.354550][T10541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.372216][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.432935][T10541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.465286][T10541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.479970][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.538361][T10541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.763729][T10541] hsr_slave_0: entered promiscuous mode [ 1298.785396][T10541] hsr_slave_1: entered promiscuous mode [ 1298.795913][T10541] debugfs: 'hsr0' already exists in 'hsr' [ 1298.802652][T10541] Cannot create hsr debugfs directory [ 1299.185700][T10708] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1299.261276][T10712] __nla_validate_parse: 10 callbacks suppressed [ 1299.261294][T10712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9312'. [ 1299.284543][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1299.623166][ T5637] Bluetooth: hci3: command tx timeout [ 1299.720080][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1299.753813][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1299.877791][T10722] No such timeout policy "syz1" [ 1299.979322][T10743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9320'. [ 1300.030534][ T1320] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.091251][T10750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9322'. [ 1300.272148][T10763] bond0: (slave bond_slave_1): Releasing backup interface [ 1300.386830][T10541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1300.415663][T10541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1300.432688][T10541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1300.446597][T10541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1300.464255][T10771] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1300.482147][T10541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1300.499158][T10774] netlink: 'syz.0.9330': attribute type 8 has an invalid length. [ 1300.501127][T10541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1300.533037][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9330'. [ 1300.533744][T10541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1300.555353][T10541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1300.600699][T10774] bond0: entered promiscuous mode [ 1300.606485][T10774] bond_slave_0: entered promiscuous mode [ 1300.612370][T10774] bond_slave_1: entered promiscuous mode [ 1300.627618][T10774] gretap0: entered promiscuous mode [ 1300.635023][T10774] veth0_to_batadv: entered promiscuous mode [ 1300.641940][T10774] hsr1: entered promiscuous mode [ 1300.698205][T10781] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1300.711340][T10781] bond0 (unregistering): Released all slaves [ 1300.726844][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9334'. [ 1301.105271][T10541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.139834][T10808] batadv_slave_1: entered promiscuous mode [ 1301.160145][T10808] nbd: couldn't find a device at index 0 [ 1301.162390][T10541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.227558][T30654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.234767][T30654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.276463][T30651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.283639][T30651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.343501][T10817] xt_socket: unknown flags 0x8 [ 1301.365952][T10817] Cannot find del_set index 4 as target [ 1301.552026][T10824] netlink: 'syz.0.9342': attribute type 4 has an invalid length. [ 1301.557285][T10826] netlink: 'syz.3.9343': attribute type 8 has an invalid length. [ 1301.607355][T10824] netlink: 'syz.0.9342': attribute type 4 has an invalid length. [ 1301.704603][ T5637] Bluetooth: hci3: command tx timeout [ 1302.182783][T10856] netlink: 'syz.4.9348': attribute type 4 has an invalid length. [ 1302.259492][T10541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.265414][T10856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9348'. [ 1302.463538][T10870] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1302.499098][T10808] batadv_slave_1: left promiscuous mode [ 1302.682441][T10541] veth0_vlan: entered promiscuous mode [ 1302.726698][T10875] netlink: 'syz.0.9353': attribute type 1 has an invalid length. [ 1302.748273][T10541] veth1_vlan: entered promiscuous mode [ 1302.996316][T10541] veth0_macvtap: entered promiscuous mode [ 1303.785021][ T5637] Bluetooth: hci3: command tx timeout [ 1305.490135][T10541] veth1_macvtap: entered promiscuous mode [ 1305.544010][T10541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.570235][T10541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1305.613920][T10908] __nla_validate_parse: 1 callbacks suppressed [ 1305.613938][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1305.635560][T30654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.665711][T30654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.685090][ T1180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.720506][ T1180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.037011][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1306.055840][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1306.084844][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.114843][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.208815][T30270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.229443][T30270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.427157][T10942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9268'. [ 1306.620943][T10951] batadv_slave_1: entered promiscuous mode [ 1306.638632][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9372'. [ 1306.692246][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9372'. [ 1306.768738][T10955] netlink: 'syz.2.9372': attribute type 11 has an invalid length. [ 1306.811657][T10955] netlink: 'syz.2.9372': attribute type 4 has an invalid length. [ 1306.832346][T10955] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9372'. [ 1306.880773][T10948] batadv_slave_1: left promiscuous mode [ 1307.018280][T10962] netlink: get zone limit has 8 unknown bytes [ 1307.025218][T10964] tipc: Started in network mode [ 1307.030792][T10964] tipc: Node identity a6cbe3e1b955, cluster identity 4711 [ 1307.042110][T10964] tipc: Enabled bearer , priority 0 [ 1307.164517][T10964] syzkaller0: entered promiscuous mode [ 1307.177826][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1307.188345][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1307.195299][T10964] syzkaller0: entered allmulticast mode [ 1307.254022][T10970] tipc: Resetting bearer [ 1307.350277][T10976] hsr1: left promiscuous mode [ 1307.371518][T30651] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1307.404495][T30651] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1307.439910][T10970] tipc: Resetting bearer [ 1307.498205][T10970] tipc: Disabling bearer [ 1307.779519][T30651] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1307.789889][T10983] netlink: 'syz.3.9382': attribute type 4 has an invalid length. [ 1307.868109][T30651] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1307.923950][T10999] netlink: 'syz.2.9384': attribute type 12 has an invalid length. [ 1307.939613][T10999] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1308.089036][T11010] wlan0: entered promiscuous mode [ 1308.112221][T11010] wlan0: entered allmulticast mode [ 1308.144900][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1308.187176][T11010] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1308.252107][T11001] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 1308.275796][T11015] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 1308.308369][T11001] nbd: couldn't find a device at index 0 [ 1308.527108][T11041] wlan0: left promiscuous mode [ 1308.549838][T11041] wlan0: left allmulticast mode [ 1308.579972][T11046] netlink: 'syz.1.9395': attribute type 5 has an invalid length. [ 1309.059704][T11073] wlan0: renamed from sit0 (while UP) [ 1309.072301][T11073] wlan0: entered promiscuous mode [ 1309.078628][T11073] wlan0: entered allmulticast mode [ 1309.101467][T11073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1309.157403][T11077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1309.212406][ T7818] team_slave_0: entered promiscuous mode [ 1309.218189][ T7818] team_slave_1: entered promiscuous mode [ 1309.229343][T11073] nbd: couldn't find a device at index 0 [ 1309.265770][T11067] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1309.330544][T11075] veth9: entered allmulticast mode [ 1309.367891][T11075] bond0: (slave veth9): Enslaving as an active interface with an up link [ 1309.432563][T11081] bond0 (unregistering): (slave veth9): Releasing backup interface [ 1309.470854][T11081] bond0 (unregistering): Released all slaves [ 1309.490061][T11098] netlink: 'syz.4.9414': attribute type 1 has an invalid length. [ 1309.602458][T11101] bond1: entered promiscuous mode [ 1309.616162][T11105] netlink: 'syz.3.9415': attribute type 1 has an invalid length. [ 1309.629899][T11101] bond1: entered allmulticast mode [ 1309.643777][T11101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1309.683610][T11098] bridge1: entered promiscuous mode [ 1309.689782][T11098] bridge1: entered allmulticast mode [ 1309.696600][T11098] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1309.722945][T30654] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1309.747448][T11105] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1309.795008][T11101] bridge2: entered promiscuous mode [ 1309.800399][T11101] bridge2: entered allmulticast mode [ 1309.806916][T11101] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 1309.839532][T11105] bond5: (slave ip6gretap1): making interface the new active one [ 1309.848878][T11105] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1309.887043][T30651] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1309.942795][T11118] netlink: 'syz.3.9420': attribute type 12 has an invalid length. [ 1309.992420][T11121] syzkaller0: entered promiscuous mode [ 1310.007770][T11121] syzkaller0: entered allmulticast mode [ 1310.248441][T11140] wlan0: entered promiscuous mode [ 1310.283383][T11140] wlan0: entered allmulticast mode [ 1310.304769][T11140] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1310.345735][T11137] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 1310.367679][T11140] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 1310.390703][T11137] nbd: couldn't find a device at index 0 [ 1310.546021][T11145] syzkaller0: entered promiscuous mode [ 1310.575564][T11145] syzkaller0: entered allmulticast mode [ 1310.756124][T11157] netlink: 'syz.2.9429': attribute type 1 has an invalid length. [ 1310.788713][T11157] __nla_validate_parse: 12 callbacks suppressed [ 1310.788733][T11157] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9429'. [ 1311.209109][T11174] dvmrp0: entered allmulticast mode [ 1311.640042][T11198] wlan0: renamed from sit0 (while UP) [ 1311.651111][T11198] wlan0: entered promiscuous mode [ 1311.675491][T11198] wlan0: entered allmulticast mode [ 1311.703686][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1311.736315][T11198] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1311.833328][T11210] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1311.851523][T11191] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1311.856855][T11198] nbd: couldn't find a device at index 0 [ 1311.934511][T11203] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1312.112085][T11214] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1312.139336][T11214] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1312.208094][T11219] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1312.242233][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9443'. [ 1312.271215][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9443'. [ 1312.300106][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9443'. [ 1312.341216][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9443'. [ 1312.708509][ T7818] IPVS: starting estimator thread 0... [ 1312.833755][T11246] IPVS: using max 31 ests per chain, 74400 per kthread [ 1312.901990][T11249] tipc: Enabled bearer , priority 0 [ 1312.935854][T11249] syzkaller0: entered promiscuous mode [ 1312.941752][T11249] syzkaller0: entered allmulticast mode [ 1312.962619][T11249] tipc: Resetting bearer [ 1312.981315][T11248] tipc: Resetting bearer [ 1312.985995][T11251] sctp: [Deprecated]: syz.2.9450 (pid 11251) Use of int in max_burst socket option. [ 1312.985995][T11251] Use struct sctp_assoc_value instead [ 1313.046756][T11248] tipc: Disabling bearer [ 1313.077353][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1313.110166][T11261] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1313.175372][T11253] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 1313.217541][T11253] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 1313.237349][T11253] nbd: couldn't find a device at index 0 [ 1313.455424][T11275] can: request_module (can-proto-0) failed. [ 1313.519952][T11278] batman_adv: batadv0: Adding interface: dummy0 [ 1313.537964][T11278] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.579529][T11278] batman_adv: batadv0: Interface activated: dummy0 [ 1313.606181][T11275] batadv0: mtu less than device minimum [ 1313.613314][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1313.625067][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1313.636757][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1313.648445][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1313.660114][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1313.671830][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1313.683543][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1313.695268][T11275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1314.066049][T11293] netlink: 'syz.1.9460': attribute type 1 has an invalid length. [ 1314.157118][T11296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9460'. [ 1314.261826][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.301353][T11301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.321147][T11301] bond0: (slave geneve2): making interface the new active one [ 1314.329740][T11301] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1314.369060][ T3144] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1314.381375][ T3144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1314.415296][ T3144] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1314.435587][ T3144] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1314.641520][T11303] syzkaller1: entered promiscuous mode [ 1314.652624][T11303] syzkaller1: entered allmulticast mode [ 1314.815822][T11322] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1314.855156][T11318] nbd: couldn't find a device at index 0 [ 1314.859389][T11314] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1315.048443][T11332] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20014 [ 1315.090483][T11333] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1316.069558][T11367] syzkaller0: entered promiscuous mode [ 1316.081883][T11371] __nla_validate_parse: 3 callbacks suppressed [ 1316.081954][T11371] netlink: 332 bytes leftover after parsing attributes in process `syz.4.9480'. [ 1316.084865][T11367] syzkaller0: entered allmulticast mode [ 1316.106456][T11371] netlink: 196 bytes leftover after parsing attributes in process `syz.4.9480'. [ 1316.882323][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9488'. [ 1316.902316][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9488'. [ 1319.419101][T11427] netlink: 'syz.0.9498': attribute type 3 has an invalid length. [ 1319.438678][T11428] netlink: 'syz.1.9500': attribute type 1 has an invalid length. [ 1319.449964][T11427] netlink: 666 bytes leftover after parsing attributes in process `syz.0.9498'. [ 1319.474347][T11433] netlink: 'syz.2.9502': attribute type 11 has an invalid length. [ 1319.525366][T11427] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9498'. [ 1319.537131][T11427] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9498'. [ 1319.550476][T11438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9503'. [ 1319.660946][T11428] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1319.797466][T11435] netlink: 'syz.1.9500': attribute type 30 has an invalid length. [ 1319.901316][T11428] syzkaller0: entered promiscuous mode [ 1319.929533][T11428] syzkaller0: entered allmulticast mode [ 1319.944330][T11456] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1319.959404][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1320.020094][T11440] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1322.888603][T11484] __nla_validate_parse: 1 callbacks suppressed [ 1322.888621][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9511'. [ 1322.911131][T11486] net_ratelimit: 12 callbacks suppressed [ 1322.911148][T11486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.347392][T11513] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9520'. [ 1323.407496][T11504] can: request_module (can-proto-0) failed. [ 1323.551751][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1323.566811][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1323.621073][T11528] bridge_slave_1: left allmulticast mode [ 1323.650605][T11528] bridge_slave_1: left promiscuous mode [ 1323.672225][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.712589][T11528] bridge_slave_0: left allmulticast mode [ 1323.715246][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1323.726404][T11528] bridge_slave_0: left promiscuous mode [ 1323.734714][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1323.746218][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.859310][T11531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9525'. [ 1323.872234][T11531] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1323.904993][T11531] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1323.921132][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1323.934314][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1323.945587][T11531] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1323.975609][T11531] nbd: couldn't find a device at index 0 [ 1324.296713][T11557] netlink: 'syz.2.9532': attribute type 1 has an invalid length. [ 1324.374584][T11563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1324.490021][T11568] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1324.716143][T11578] batman_adv: batadv0: Removing interface: dummy0 [ 1324.735722][T11578] bridge_slave_0: left promiscuous mode [ 1324.741601][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.896380][ T48] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 1325.246387][T11578] bridge_slave_1: left allmulticast mode [ 1325.252128][T11578] bridge_slave_1: left promiscuous mode [ 1325.258180][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.293443][T11578] bond12: (slave veth0_to_bond): Releasing active interface [ 1325.322570][T11578] team0: Port device team_slave_0 removed [ 1325.338383][T11578] team0: Port device team_slave_1 removed [ 1325.359177][T11578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.367533][T11578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.378668][T11578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1325.612543][T11585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1325.624740][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1325.940359][T11614] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1325.987269][T11615] bridge0: port 3(vlan3) entered blocking state [ 1326.003948][T11615] bridge0: port 3(vlan3) entered disabled state [ 1326.021471][T11615] vlan3: entered allmulticast mode [ 1326.046826][T11615] geneve0: entered allmulticast mode [ 1326.058423][T11615] vlan3: entered promiscuous mode [ 1326.064413][T11615] geneve0: entered promiscuous mode [ 1327.230291][T11681] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1327.301050][T11681] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 1327.338784][T11678] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 1327.352540][T11678] nbd: couldn't find a device at index 0 [ 1327.546285][T11704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.667279][T11712] Bluetooth: MGMT ver 1.23 [ 1327.955167][T11734] wlan0: renamed from sit0 [ 1328.075807][T11734] wlan0: entered promiscuous mode [ 1328.097310][T11734] wlan0: entered allmulticast mode [ 1328.107856][T11734] __nla_validate_parse: 24 callbacks suppressed [ 1328.107874][T11734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1328.127553][T11738] nbd: couldn't find a device at index 0 [ 1328.139994][T11734] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1328.206918][T11735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1328.252668][T11728] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1328.534140][T11749] netlink: 'syz.4.9586': attribute type 32 has an invalid length. [ 1328.600052][T11754] bridge4: entered promiscuous mode [ 1328.613852][T11754] bridge4: entered allmulticast mode [ 1436.722850][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1436.729849][ C1] rcu: 0-...!: (1 GPs behind) idle=3eec/1/0x4000000000000000 softirq=230717/230722 fqs=1 [ 1436.741054][ C1] rcu: (detected by 1, t=10502 jiffies, g=256997, q=712 ncpus=2) [ 1436.748880][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1436.748918][ C0] NMI backtrace for cpu 0 [ 1436.748938][ C0] CPU: 0 UID: 0 PID: 11768 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 1436.748958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1436.748969][ C0] RIP: 0010:preempt_count_add+0x42/0x190 [ 1436.749028][ C0] Code: 77 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d 9e 77 e3 18 00 75 07 65 8b 05 45 22 d8 11 65 01 3d 3e 22 d8 11 <48> c7 c0 80 55 77 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e5 00 [ 1436.749043][ C0] RSP: 0018:ffffc90000007ce0 EFLAGS: 00000082 [ 1436.749059][ C0] RAX: 0000000080010001 RBX: ffff8880275402a8 RCX: ffffffff9a775503 [ 1436.749072][ C0] RDX: 0000000000010000 RSI: ffffffff8c4bd260 RDI: 0000000000000001 [ 1436.749084][ C0] RBP: ffff888027540300 R08: ffffffff905768f7 R09: 1ffffffff20aed1e [ 1436.749103][ C0] R10: dffffc0000000000 R11: ffffffff89dc2e30 R12: 0000000000000000 [ 1436.749115][ C0] R13: ffff888027540000 R14: ffff888027540300 R15: dffffc0000000000 [ 1436.749128][ C0] FS: 0000000000000000(0000) GS:ffff888124f60000(0000) knlGS:0000000000000000 [ 1436.749143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1436.749155][ C0] CR2: 00007f0028870eb8 CR3: 000000002783e000 CR4: 00000000003526f0 [ 1436.749171][ C0] Call Trace: [ 1436.749180][ C0] [ 1436.749191][ C0] _raw_spin_lock+0x12/0x40 [ 1436.749271][ C0] advance_sched+0xc2/0xc80 [ 1436.749360][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1436.749378][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1436.749398][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1436.749415][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1436.749443][ C0] hrtimer_interrupt+0x448/0x910 [ 1436.749474][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1436.749504][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1436.749527][ C0] [ 1436.749533][ C0] [ 1436.749540][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1436.749560][ C0] RIP: 0010:stack_depot_save_flags+0x1b1/0x800 [ 1436.749583][ C0] Code: 10 8b 74 24 04 85 db 75 5d 4d 8b 3f 4d 39 e7 74 52 41 39 6f 10 75 f2 45 39 57 14 75 ec 31 c0 49 8b 0c c6 49 3b 4c c7 20 75 df <48> ff c0 41 39 c5 75 ed 83 fe 02 72 2f 49 8d 7f 1c 41 8b 5f 1c 85 [ 1436.749598][ C0] RSP: 0018:ffffc900041e7988 EFLAGS: 00000246 [ 1436.749613][ C0] RAX: 0000000000000002 RBX: 0000000000000c01 RCX: ffffffff82280580 [ 1436.749625][ C0] RDX: 000000009d9b9a1f RSI: 0000000000000001 RDI: 00000000d63d5d15 [ 1436.749636][ C0] RBP: 000000007ad5494c R08: 00000000b3ef0649 R09: 0000000052709327 [ 1436.749648][ C0] R10: 0000000000000008 R11: ffffffff8eb59c20 R12: ffff88823b3494c0 [ 1436.749660][ C0] R13: 0000000000000008 R14: ffffc900041e79e0 R15: ffff8880358a7890 [ 1436.749677][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1436.749702][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1436.749720][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1436.749742][ C0] ? arch_stack_walk+0x61/0x150 [ 1436.749774][ C0] kasan_save_track+0x4f/0x80 [ 1436.749796][ C0] ? kasan_save_track+0x3e/0x80 [ 1436.749816][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1436.749837][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1436.749855][ C0] ? do_getname+0x2e/0x250 [ 1436.749874][ C0] ? vfs_fstatat+0x45/0x170 [ 1436.749892][ C0] ? __x64_sys_newfstatat+0x151/0x200 [ 1436.749911][ C0] ? do_syscall_64+0x174/0x580 [ 1436.749934][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.749976][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1436.749999][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1436.750019][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1436.750038][ C0] ? do_getname+0x2e/0x250 [ 1436.750055][ C0] ? do_getname+0x2e/0x250 [ 1436.750077][ C0] do_getname+0x2e/0x250 [ 1436.750099][ C0] ? getname_flags+0x11/0x20 [ 1436.750119][ C0] vfs_fstatat+0x45/0x170 [ 1436.750139][ C0] __x64_sys_newfstatat+0x151/0x200 [ 1436.750161][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1436.750198][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.750216][ C0] do_syscall_64+0x174/0x580 [ 1436.750239][ C0] ? trace_irq_disable+0x3b/0x140 [ 1436.750260][ C0] ? clear_bhb_loop+0x40/0x90 [ 1436.750280][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.750298][ C0] RIP: 0033:0x7f0028b5aeaa [ 1436.750314][ C0] Code: b8 05 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 08 44 01 00 b8 ff ff ff ff c3 66 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 f7 d8 89 05 e0 43 01 00 [ 1436.750329][ C0] RSP: 002b:00007ffc8c7b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1436.750345][ C0] RAX: ffffffffffffffda RBX: 00007ffc8c7b604b RCX: 00007f0028b5aeaa [ 1436.750358][ C0] RDX: 00007ffc8c7b60f0 RSI: 00007ffc8c7b6040 RDI: 00000000ffffff9c [ 1436.750371][ C0] RBP: 00007ffc8c7b61b0 R08: 00007ffc8c7b6237 R09: 0000000000000000 [ 1436.750383][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 1436.750393][ C0] R13: 00007f0028b2f050 R14: 0000000000000000 R15: 0000000000000000 [ 1436.750414][ C0] [ 1436.750910][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g256997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1437.238631][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=101046 [ 1437.246605][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g256997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1437.258055][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1437.268017][ C1] rcu: RCU grace-period kthread stack dump: [ 1437.273896][ C1] task:rcu_preempt state:I stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1437.285829][ C1] Call Trace: [ 1437.289106][ C1] [ 1437.292043][ C1] __schedule+0x17d9/0x56c0 [ 1437.296558][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1437.301530][ C1] ? __pfx___schedule+0x10/0x10 [ 1437.306395][ C1] ? schedule+0x90/0x2b0 [ 1437.310647][ C1] schedule+0x164/0x2b0 [ 1437.314808][ C1] schedule_timeout+0x152/0x2c0 [ 1437.319659][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1437.325036][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1437.330325][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1437.336133][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1437.341713][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1437.346595][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1437.352500][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1437.357789][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1437.362998][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1437.368814][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1437.373417][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1437.378630][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1437.383572][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1437.388604][ C1] kthread+0x388/0x470 [ 1437.392679][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1437.397882][ C1] ? __pfx_kthread+0x10/0x10 [ 1437.402490][ C1] ret_from_fork+0x514/0xb70 [ 1437.407097][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1437.412215][ C1] ? __switch_to+0xc89/0x1420 [ 1437.416901][ C1] ? __pfx_kthread+0x10/0x10 [ 1437.421504][ C1] ret_from_fork_asm+0x1a/0x30 [ 1437.426287][ C1]