last executing test programs: 4.326753765s ago: executing program 2 (id=2866): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000040)) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000006b00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8ea}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.138711949s ago: executing program 2 (id=2870): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x1d5, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x1d5, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000500)={r0, &(0x7f0000000480)='Z\x18u\xee<\xc0+', 0x2a0b80, &(0x7f00000008c0)={@_ha_fsid={[0x6, 0x4]}, {0x8, 0x1a04, 0xa, 0x9}}, 0x4, &(0x7f0000000900), &(0x7f0000000940)=0x4897}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='cgroup.events\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000500"/19], 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000500"/19], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000200000007000000830b040a0101027f00000100000000001c000000000000001100"], 0x40}, 0x20008024) (async) sendmsg$inet(r7, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000200000007000000830b040a0101027f00000100000000001c000000000000001100"], 0x40}, 0x20008024) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10, r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) (async) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) write$cgroup_pid(r11, &(0x7f0000000000), 0xffffff98) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000d40)={{r1, &(0x7f0000000b40)='\x00', 0x292440, &(0x7f0000000b80)={@align=0x8000000000000000, {0xfff0, 0xe, 0x6, 0xffffffff}}, 0xfffffff8, &(0x7f0000000bc0)={@_ha_fsid}, &(0x7f0000000c00)=0xffffffff}, {[0x51f8, 0x9d, 0x5, 0xfffffffc]}, 0x4, 0xd9, &(0x7f0000000c40)=""/217}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1b, 0x8, &(0x7f0000000700)=@raw=[@alu={0x3, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffff4, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x4, 0x6, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xd, 0x6, 0x9, 0xfffffffffffffff8, 0x1}, @ldst={0x2, 0x1, 0x2, 0xa, 0x7, 0xffffffffffffffff, 0x4}], &(0x7f0000000740)='GPL\x00', 0x8000, 0x6a, &(0x7f0000000780)=""/106, 0x41000, 0x40, '\x00', r3, @fallback=0x28, r4, 0x8, &(0x7f00000009c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x8, &(0x7f0000000e00)=[0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8, r11, r12, r13], &(0x7f0000000e40)=[{0x4, 0x2, 0x0, 0x3}, {0x1, 0x1, 0x10, 0xc}, {0x5, 0x2, 0xf, 0x4}, {0x4, 0x3, 0xd, 0x2}, {0x5, 0x2, 0x0, 0x7}, {0x0, 0x4, 0xf, 0x4}, {0x5, 0x1, 0xf}, {0x2, 0x2, 0xd, 0x1}], 0x10, 0x80}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1b, 0x8, &(0x7f0000000700)=@raw=[@alu={0x3, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffff4, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x4, 0x6, 0xfffffffffffffff0, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xd, 0x6, 0x9, 0xfffffffffffffff8, 0x1}, @ldst={0x2, 0x1, 0x2, 0xa, 0x7, 0xffffffffffffffff, 0x4}], &(0x7f0000000740)='GPL\x00', 0x8000, 0x6a, &(0x7f0000000780)=""/106, 0x41000, 0x40, '\x00', r3, @fallback=0x28, r4, 0x8, &(0x7f00000009c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x8, &(0x7f0000000e00)=[0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8, r11, r12, r13], &(0x7f0000000e40)=[{0x4, 0x2, 0x0, 0x3}, {0x1, 0x1, 0x10, 0xc}, {0x5, 0x2, 0xf, 0x4}, {0x4, 0x3, 0xd, 0x2}, {0x5, 0x2, 0x0, 0x7}, {0x0, 0x4, 0xf, 0x4}, {0x5, 0x1, 0xf}, {0x2, 0x2, 0xd, 0x1}], 0x10, 0x80}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r9, 0xc038943b, &(0x7f0000002000)={0x7fffffffffffffff, 0x8, '\x00', 0x1, &(0x7f0000000f80)=[0x0]}) sendto$inet6(r1, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcaeb}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcaeb}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x42}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000020000026000400"}, {0x2, 0x18, "fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x34e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000020000026000400"}, {0x2, 0x18, "fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 3.402486698s ago: executing program 2 (id=2874): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x2, 0x29, 0xfffffff6}, {0x30, 0x10, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 3.211433641s ago: executing program 2 (id=2877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a850000000000000000000500000a0900010073797a300000000044000000030a01030000000000000000050000000900010073797a300000000008000b4000000002140004800800024000000012080001"], 0x8c}}, 0x24004000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x801) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="2080000041c30eabb50007012dbd7000fedbdf000000"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024000180"], 0x64}}, 0x2000884c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) close(r1) 2.81779871s ago: executing program 2 (id=2880): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000008c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x200000, 0x0, 0xff, 0x1, 0x4}, 0xd88e1248643216d7) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000240)=0x20000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000080)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void, {0x8100, 0x0, 0x0, 0xffd}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x9c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9f8a2077fd5281aeb6ea4f616d9c91f1002c254e72266d2b4d44102cd459896a", "100e955e8ad8d10f65d5cfe6b035e8f212d00062e2a1ffdd7dc91b12eef4631666b5c797ff4ec87c811ef332bc4f57de", "e29443b7d47338652bda64fca3c0e545216f0ff63df3426d1d02a89c", {"85cd7e00264ce53000", "ba5f76ec0debe93b9a050c5cc02c033b"}}}}}}}}, 0x0) sendto(r0, &(0x7f0000000000)="6800000032000505010000000000000000000000540001805000018009001f006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f00000002c0)={{[0x2, 0x1ff, 0xb33, 0x3]}, 0x0, 0x2, 0xa0, 0x0, &(0x7f0000000280)=[{{@_ha_fsid={[0xfff]}, {0x9, 0x8000, 0x40, 0x1}}, 0x5, 0x0, '\xaa\xaa\xaa\xaa\xaa'}]}) 2.530110764s ago: executing program 2 (id=2881): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x2}]}}}]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x1, 0x3, {{0x11, 0x4, 0x3, 0x14, 0x44, 0x68, 0x0, 0xb, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x14, 0x58, 0x0, 0x8, [0x7e3c, 0x7, 0x9, 0x8]}, @lsrr={0x83, 0x1b, 0xd9, [@empty, @remote, @broadcast, @loopback, @loopback, @multicast2]}]}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) vmsplice(r3, &(0x7f0000000440), 0x0, 0xf) splice(r2, 0x0, r3, 0x0, 0xc, 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-5lx \x00'}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000000000000000"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x2, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, &(0x7f0000000040), &(0x7f0000000080)='syzkaller\x00', 0x8, 0x26, &(0x7f00000000c0)=""/38, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2a, r4, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xf, 0x81, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[r7, r8, 0x1, r9], &(0x7f00000004c0)=[{0x1, 0x1, 0x10, 0x9}, {0x0, 0x3, 0xd, 0x3}, {0x2, 0x5, 0x2, 0xb8b5ea73f60cb4f4}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x9, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000}, [@jmp={0x5, 0x1, 0xa, 0x1, 0x5, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @generic={0x7f, 0xb, 0xb, 0x2088, 0xffffffff}]}, &(0x7f0000000880)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x10, 0xae, 0x659fd6ae}, 0x10, 0x2cf5f, r10, 0x3, 0x0, &(0x7f00000001c0)=[{0x4, 0x2, 0x7}, {0x0, 0x4, 0xf, 0x1}, {0x3, 0x1, 0xf, 0xc}], 0x10, 0x8001}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r11, &(0x7f0000000800)=ANY=[], 0x141) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd7000ffdbdf25030000002400018008000700", @ANYRES32=0x0, @ANYBLOB="06000100020a010101060005004e220000"], 0x38}, 0x1, 0x0, 0x0, 0x40812}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x10, r11, 0x130000) 2.147626759s ago: executing program 4 (id=2883): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x2c020400) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000004c0)) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0xd3, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0x5, "045359"}, @window={0x3, 0x3, 0x10}]}}}}}}}, 0x0) 1.921991476s ago: executing program 4 (id=2885): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6d}}, 0x30) syz_emit_ethernet(0x11, &(0x7f00000009c0)={@random="000000e3ff00", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xfc, 0x2, "02"}}}}}}, 0x0) 1.803857553s ago: executing program 1 (id=2886): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) write$cgroup_int(r2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x10}}, 0x14}}, 0x4044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 1.778148416s ago: executing program 4 (id=2887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)="0e5a255d1ea207afe7bccb4c96d7", 0xe}], 0x1}}], 0x1, 0x40015) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="06"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x4a014) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x6, 0x1) 1.722836985s ago: executing program 3 (id=2888): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000090000003c0003801400020062617461647630000000000000000000080001"], 0x50}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}]}}]}, 0x50}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x84, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbc779c08db5f8913}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44001000100037c100000000628a7e0ab669a4ff", @ANYRES32=0x0, @ANYBLOB="c304050000000000240012800b000100627269646765000014000280080004000900000005002b0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, 0x0, 0x25, 0x10, @void}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) 1.590537116s ago: executing program 0 (id=2890): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0xff05, 0x8000000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x20000840) bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="181000000300000000007b2aa4f80a675d5d000000000000f8bef4b8cd0c1434cac65b85f3df5154589cc0d7d1be07fd1384d1fa05e984cc1a8cfb2939279d81bd6baca87f153c304562cb6501ab163a58b1425f91f2b2537fe53ff5adb9ab4e0a602dfff722dc1b927a4c06ca36d7ddac9f14b973ee0ead479b6a4211556cc078613875d706000000000000b3ccf10944"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r12, 0x5421, &(0x7f0000000100)=0x100000001) 1.547985918s ago: executing program 3 (id=2891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x2, '\x00', 0x0, r0, 0x3, 0x0, 0x2}, 0x50) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000002c0)={0x1, [0x0]}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000200)=""/4, &(0x7f0000000240)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r1, 0xd, 0x9, 0x3}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x94, r8, 0x200, 0x0, 0xfffffffd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) 1.323802506s ago: executing program 4 (id=2892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x4003, {0x0, 0xff, 0x2}, 0xfd}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000080), &(0x7f0000000400)=r3}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c092}, 0x4008050) 1.242317267s ago: executing program 3 (id=2893): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'veth0_to_batadv\x00', @broadcast}) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x5, 0x1, 0x2, 0x1, 0x1}, 0x8) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) writev(r7, &(0x7f0000001a80)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x541b, &(0x7f0000000940)={r9}) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="000225bd7000fedbdf2506000000050021000000000014000800736974300000000000000000000000000c001000cb0e000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x3, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0xff, 0x0, 0x2000003}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.147924675s ago: executing program 0 (id=2894): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async, rerun: 32) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$kcm(0x10, 0x400000002, 0x0) (async) syz_emit_ethernet(0xe4, &(0x7f0000000140)={@remote, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x1}}, {@llc_tr={0x11, {@llc={0x80, 0xfe, 'f', "16fa4e341a04171eac3e65cd6f3936f4810c2f84851cec99a8cc7ae9f45f4a2fe9ba1f53187a0d602cb0b5d3f9c115a4f2719874e8a6975e58b2fa7445baa726f2436758f29d5700a2c3151331f4123a4c9b1875df9c9faee99a952ef7332141eeffd5d2417e2228c3f23944cda3fd178afa8b07f47388ce54edb2f053079fe3487b5c9df91af32e5f17f9fb4a015c6e731807fcb8700928930b67e890c3b6a0fa16eef1b9e9188fb2157370466bc233577451a2a7819e3824855a8af6a92b3449d19d2c4873b6053761cc"}}}}}, &(0x7f0000000240)={0x1, 0x2, [0xf4c, 0x60f, 0x71, 0xd1f]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x39b}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x41) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 1.139273607s ago: executing program 3 (id=2895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x23}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.030088211s ago: executing program 0 (id=2896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000480)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f00000009c0)=""/4108, 0x100c}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f0000000500)=""/115, 0x73}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x2062, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x64004004) (async) sendmsg$nl_route(r5, 0x0, 0x64004004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xff, 0x0, &(0x7f0000000700)="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", 0x0, 0xbf49, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f00000004c0)=0x1, 0x4) (async) setsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f00000004c0)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3d86dd60ecff8000181100fc000000000000000000000000000000ff02000000000000000000000000000100004e22001890"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3d86dd60ecff8000181100fc000000000000000000000000000000ff02000000000000000000000000000100004e22001890"], 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd6a000406000004"], 0x18}, 0x1, 0x0, 0x0, 0x1000a804}, 0x2810) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 946.103606ms ago: executing program 3 (id=2897): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6d}}, 0x30) syz_emit_ethernet(0x11, &(0x7f00000009c0)={@random="000000e3ff00", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xfc, 0x2, "02"}}}}}}, 0x0) 850.220236ms ago: executing program 1 (id=2898): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000100180100002020642500000000002020207b1af8ff00000000bf0708000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x0, 0xa, 0x41, 0x7}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000020a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074657374"], 0x104}}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x1}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000001000)) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a40)=@bpf_ext={0x1c, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f0000850000000600000044860400f0ffffff18360000030000000000000000000000182300007711fa099a1c537a7505e214c290dd97b72f14cd7e07ce4e10b2de269a98fb1566ade50456dfcc66bf3cb46f7ab504e91607260dde9ac8ac24afa0e8bf613098923bd999ffe9ec4352a6835e", @ANYRES32=r2, @ANYBLOB="00000000ff7f0000186600000f00000000000000090000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x2, 0x1000, &(0x7f0000001940)=""/4096, 0x100, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002940)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002980)={0x5, 0xa, 0xfdde, 0x800}, 0x10, 0x17dae, 0xffffffffffffffff, 0x2, &(0x7f00000029c0)=[r2, 0xffffffffffffffff, r2, r2, r2], &(0x7f0000002a00)=[{0x5, 0x5, 0x8, 0x4}, {0x4, 0x3, 0xe, 0x7}], 0x10, 0x24000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d00)={r11, 0x0, 0x53, 0x33, &(0x7f0000002b00)="2aa26348067608c0a56a5f9fd63d027001d6051776d819b9474bd453e1100b0aafc55260284a980e39fee4d99bab870764b6c306a9d68eb92d3f40e83219e7c80ad5cc97aff1c9d4af660d5d3d439555617759", &(0x7f0000002b80)=""/51, 0x7, 0x0, 0x91, 0x7d, &(0x7f0000002bc0)="b187939aaa24338ae00befec928bc177a5d024a449e8637bb2ec33a00d653bba4ebdd80500f47c82ad0d3792294e9e879b73dceba650e476d676e998218323d1fd258cae52f53e66f9c9064838389e54d0c60682c184bdd8ba2c15772119b25d3e733f80615629fe07ca358833f3ff9ed2f6b413d48ba9822ff553751f45db3917a8cc390e7ba82e4b58ee67f9265b6ab5", &(0x7f0000002c80)="2079485b4d9192284656cbb01ca9442badcaa676932f3470e4e0e9e84843922e6d171417a9f0f19157eed2aca9aacc42a61fd66905ff9022fc08ae5f710487b692fa624610aff1b34c3cb830a5213517e2a29d2299f3ed5b4762cffbfc7544179c9d6156801a237ed2c766c45aa586e97b4ef38ca872ac7587a0ee6c6e", 0x2, 0x0, 0x8}, 0x50) (async) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000680)={@loopback, r10}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 814.408511ms ago: executing program 3 (id=2899): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x14, &(0x7f00000004c0)=""/41, &(0x7f0000000500)=0x29) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24b, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c00000006"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59eda", 0x4b}, {&(0x7f0000000640)="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"/342, 0x156}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000014c0)="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", 0xd7f}], 0x5) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000002c0)=0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 630.422394ms ago: executing program 0 (id=2900): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x8}, 0x14) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="0201140088dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="000011000a0001000180c2000000000008000f0005"], 0x30}}, 0x0) 630.113604ms ago: executing program 1 (id=2901): close(0x4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, 0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20008000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000100)=0x1) 563.414964ms ago: executing program 0 (id=2902): close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) unshare(0x22020400) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map, 0xffffffffffffffff, 0x2c}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000feff00007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0fe000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 538.922205ms ago: executing program 1 (id=2903): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="690000000000000069105c000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x1e8, 0x100, 0x2d0, 0x2d0, 0x2d0, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x9, {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@empty, @multicast1, 0x0, 0xffffffff, 0xb, 0x10, {@mac=@random="af0631d193f7", {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x4, 0x3, 0x8, 0x1, 0x7, 'vcan0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0xffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="03827307167f209b8157f08e2d9fc91800", 0x0, 0x0, 0x0, 0xfffffffe}, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000140)='syzkaller\x00', 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000037000000004100000000000000000000008cc516e8d87a074086a4167d5e0db5c6944c8ebd875f4251b504b840144649aabebd1c8fe4c2bd6d747638dc048b1e99581ab0a918546838dfbbde2f8e86dd52264777979b42cb4167ee1d0b19b5034af62c79fac3f3d5d40c2f8aa1d453fa", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100000000009500000000000000180000000400000000000000fcffffffdd90040000000000bf91000000000000b70200000a0e4b7d850000002a000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x52}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x4908d13283d17e5f}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e63}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) connect(0xffffffffffffffff, &(0x7f00000002c0)=@can, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x22}, 0x94) socket$inet(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="690000000000000069105c000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x1e8, 0x100, 0x2d0, 0x2d0, 0x2d0, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x9, {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@empty, @multicast1, 0x0, 0xffffffff, 0xb, 0x10, {@mac=@random="af0631d193f7", {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x4, 0x3, 0x8, 0x1, 0x7, 'vcan0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0xffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="03827307167f209b8157f08e2d9fc91800", 0x0, 0x0, 0x0, 0xfffffffe}, 0x4) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000140)='syzkaller\x00', 0xa) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000037000000004100000000000000000000008cc516e8d87a074086a4167d5e0db5c6944c8ebd875f4251b504b840144649aabebd1c8fe4c2bd6d747638dc048b1e99581ab0a918546838dfbbde2f8e86dd52264777979b42cb4167ee1d0b19b5034af62c79fac3f3d5d40c2f8aa1d453fa", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100000000009500000000000000180000000400000000000000fcffffffdd90040000000000bf91000000000000b70200000a0e4b7d850000002a000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x52}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x4908d13283d17e5f}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e63}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) connect(0xffffffffffffffff, &(0x7f00000002c0)=@can, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x22}, 0x94) (async) 394.185271ms ago: executing program 4 (id=2904): epoll_create(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2e000000010002", 0x7) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}, 0x20008010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x7, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdb2}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r8, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000dd1000/0x1000)=nil, 0x1000, 0x2, 0x31, r9, 0x90fb3000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r8, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000540)=[{}], 0x8, 0xe, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r8, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000540)=[{}], 0x8, 0xe, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000007910480000fdffffff040000003dd42efb6ae6fd7400b970c91f0c52476d6a99560fd338d4a033d9931811c8c5841da365a01db8eee46f0ee3be72d9f801120bbcb3af389a2029e5158493c4379482225a5d675d32728d3ff4612fa7611da9492196937a0f1d34471c30819fd0a1f2fdeac7155d5c350a5fd5c0e0df731c31cd62dbe3bd83f0b667ba92edca0578e9d548cb57508aaa51cd0f457631fd35e26569e549b36d38f7b89fdb24cec12d93", @ANYRESHEX=r8], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc7, &(0x7f0000000c80)=""/199, 0x0, 0xe, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000007910480000fdffffff040000003dd42efb6ae6fd7400b970c91f0c52476d6a99560fd338d4a033d9931811c8c5841da365a01db8eee46f0ee3be72d9f801120bbcb3af389a2029e5158493c4379482225a5d675d32728d3ff4612fa7611da9492196937a0f1d34471c30819fd0a1f2fdeac7155d5c350a5fd5c0e0df731c31cd62dbe3bd83f0b667ba92edca0578e9d548cb57508aaa51cd0f457631fd35e26569e549b36d38f7b89fdb24cec12d93", @ANYRESHEX=r8], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc7, &(0x7f0000000c80)=""/199, 0x0, 0xe, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 361.065064ms ago: executing program 1 (id=2905): epoll_create(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x209e38ce531065d3, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000000010000", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000580)=@deltaction={0x98, 0x31, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000104)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000480)=@udp=r2}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x134}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fe88000000000000000000000000000120010000000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d86c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000003c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff000000000000000000080000000000000100000000000000030000000a000000000000002abd700004350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100010000000800180000000000"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r4, &(0x7f0000000200)="52020c967b8655bbab99266f09c92c6613d7ff292b01a7fc22e66f4293262ba41b757fc7e1a4961739b33dd46c46f00466b337c7fa4823c5f8f122a12d37b68657b8482b7a8f3043df557b8037cf5a023f708eff3d4ef67ce2", &(0x7f0000000380)=""/246}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 255.001617ms ago: executing program 0 (id=2906): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40003}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000700)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000c0000001800018014000200766574683000000000000000000000007c0003806c000380790001800400030004000300040003000c000200257468158fcb180008000100090000001800018004000300080001000600000008000100050000002c000180040003000000020000000000b5ff0200000000000000010000000010080001004400000004000300050002000000000004000500080002000400000031f935a817dc52a734de2e75df8f91d64ada820fb6a5a995d3fbb28be3c4"], 0xa8}}, 0x4040004) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff3, 0x9}, {}, {0x10, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x4, 0x3, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x184, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\xa3,![\x06+#,,[-$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$@\\}}(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7480}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':]{^-][\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x184}, 0x1, 0x0, 0x0, 0x20004080}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000018000280140001"], 0x48}}, 0x0) 1.292666ms ago: executing program 1 (id=2907): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3b"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r4, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r10, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 0s ago: executing program 4 (id=2908): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000000}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1015, &(0x7f0000002240)=""/4117, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x409}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f00000002c0)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)="43210098") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) unshare(0x22020400) recvmsg$unix(r0, 0x0, 0x2001) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="80000000080211000001081100000008021100000000000000000000000000640001000406020202020202010882848b960c121824fd7a4787cf4ffb3105fb83342bffd2ee6894ad0abe5fb6252233ee49da0eacf15cf63451a251476188dfd49c771250b1ff08f0ba9419dffe64e2a1b66fa36e8ca200e2606689c719b05062756a4aa71a23e28f10911be322565abfa9874a530a2a54a69a4464dfb1f76ddedc9b9f382a6d6164d39ade2cbdb7307b40c2efd01799d4abdc8569e982fc5c1b41b62196b8e7596da0326f1279e64ba10d5f03962ff304e784"], 0x36) kernel console output (not intermixed with test programs): [ 679.904808][T11092] netlink: 'syz.1.1335': attribute type 6 has an invalid length. [ 679.982118][T11086] netlink: 524 bytes leftover after parsing attributes in process `syz.2.1334'. [ 680.020776][T11095] vlan3: entered allmulticast mode [ 680.030999][T11095] bridge_slave_0: entered allmulticast mode [ 680.084081][T11097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1339'. [ 680.138934][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 680.213016][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 680.226574][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'. [ 680.429070][T11120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.446883][T11120] IPVS: set_ctl: invalid protocol: 31684 255.255.255.255:20003 [ 680.640438][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 680.655190][T11135] block nbd1: Unsupported socket: should be TCP or UNIX. [ 681.202452][T11151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'. [ 681.244443][T11151] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 682.143799][T11170] block nbd1: Unsupported socket: should be TCP or UNIX. [ 682.336306][ T5666] net_ratelimit: 50 callbacks suppressed [ 682.336324][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.492343][T11183] tipc: New replicast peer: 255.255.255.255 [ 682.500456][T11181] TC_ACT_REPEAT abuse ? [ 682.505389][T11183] tipc: Enabled bearer , priority 10 [ 682.526336][T11183] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 682.817041][ T7693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.825740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.920875][T11191] block nbd1: Unsupported socket: should be TCP or UNIX. [ 683.426564][T11210] nbd: must specify a size in bytes for the device [ 683.478047][T11210] netlink: 'syz.2.1369': attribute type 2 has an invalid length. [ 683.564057][T11220] veth1_vlan: entered allmulticast mode [ 683.670051][ T5666] tipc: Node number set to 57082408 [ 683.878370][T11225] syzkaller0: entered promiscuous mode [ 683.887508][T11225] syzkaller0: entered allmulticast mode [ 683.919901][T11229] syzkaller0: entered promiscuous mode [ 683.938649][T11229] syzkaller0: entered allmulticast mode [ 684.057856][T11242] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20001 [ 684.109027][T11241] block nbd1: Unsupported socket: should be TCP or UNIX. [ 685.378049][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.386533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.403645][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.017215][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.511055][T11268] __nla_validate_parse: 11 callbacks suppressed [ 686.511076][T11268] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1384'. [ 686.596504][T11269] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 686.630389][T11268] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1384'. [ 686.642082][T11275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1388'. [ 686.652091][T11273] netlink: 'syz.3.1387': attribute type 4 has an invalid length. [ 686.661330][T11276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1388'. [ 686.670982][T11273] netlink: 'syz.3.1387': attribute type 4 has an invalid length. [ 686.907125][T11289] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 687.125268][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'. [ 687.153072][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 687.227106][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'. [ 687.279265][T11296] 8021q: adding VLAN 0 to HW filter on device bond7 [ 687.303178][T11296] bond6: (slave bond7): Enslaving as an active interface with an up link [ 687.414803][T11305] xfrm0 speed is unknown, defaulting to 1000 [ 687.759577][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 688.419261][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.579411][ T7689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.588018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.671191][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 688.688193][T11354] ip6gretap1: entered allmulticast mode [ 688.696965][T11354] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 688.716683][T11354] batman_adv: batadv0: Adding interface: ip6gretap1 [ 688.757143][T11354] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.795091][T11354] batman_adv: batadv0: Interface activated: ip6gretap1 [ 688.830939][T11358] syz_tun: entered allmulticast mode [ 688.858815][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.872900][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.904265][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 688.918512][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.940080][T11355] netlink: 'syz.1.1404': attribute type 18 has an invalid length. [ 688.954715][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.963615][T11358] netlink: 'syz.1.1404': attribute type 18 has an invalid length. [ 688.978308][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.996162][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.009055][T11352] syz_tun: left allmulticast mode [ 689.016319][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.310846][T11366] batadv_slave_0: Caught tx_queue_len zero misconfig [ 689.325823][ T7692] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.345877][ T7692] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.388851][ T7693] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.408263][ T7699] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.780860][T11377] bond7: option downdelay: invalid value (18446744073709551487) [ 689.815720][T11377] bond7: option downdelay: allowed values 0 - 2147483647 [ 689.868120][T11377] bond7 (unregistering): Released all slaves [ 689.963210][T11385] block nbd1: Unsupported socket: should be TCP or UNIX. [ 691.008634][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.017569][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.126750][T11423] bridge0: entered allmulticast mode [ 691.696685][T11436] __nla_validate_parse: 5 callbacks suppressed [ 691.696706][T11436] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1424'. [ 691.774277][T11436] 0·: renamed from hsr0 (while UP) [ 691.804501][T11436] 0·: entered allmulticast mode [ 691.826698][T11436] hsr_slave_0: entered allmulticast mode [ 691.863613][ T5652] Bluetooth: hci4: link tx timeout [ 691.870768][ T5652] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 692.164502][T11430] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 692.580197][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1434'. [ 692.613731][T11468] syzkaller0: entered promiscuous mode [ 692.620677][T11468] syzkaller0: entered allmulticast mode [ 692.889279][T11472] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 692.924587][T11474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1437'. [ 693.081595][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1436'. [ 693.124488][T11475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 693.138659][T11475] bond8: (slave bond9): making interface the new active one [ 693.153408][T11475] bond8: (slave bond9): Enslaving as an active interface with an up link [ 693.280010][T11479] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 693.314899][T11483] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.359076][T11488] C: renamed from veth1_to_team (while UP) [ 693.375852][ T5652] Bluetooth: hci0: command 0x0401 tx timeout [ 693.391432][T11488] netlink: 'syz.4.1440': attribute type 4 has an invalid length. [ 693.413205][T11488] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1440'. [ 693.434969][T11489] net_ratelimit: 153 callbacks suppressed [ 693.434990][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.475903][T11488] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 693.515971][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.525202][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.561451][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.614847][T11492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.631388][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.665012][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.690243][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.723196][T11497] netlink: 'syz.0.1443': attribute type 2 has an invalid length. [ 693.735793][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.837033][T11499] netlink: 'syz.3.1442': attribute type 14 has an invalid length. [ 693.937585][ T5652] Bluetooth: hci4: command 0x0405 tx timeout [ 694.309287][T11509] syzkaller0: entered promiscuous mode [ 694.324474][T11509] syzkaller0: entered allmulticast mode [ 694.333451][T11491] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 694.548181][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 694.920819][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 695.068465][T11530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 695.077767][T11530] IPv6: NLM_F_CREATE should be set when creating new route [ 695.085292][T11530] IPv6: NLM_F_CREATE should be set when creating new route [ 695.092664][T11530] IPv6: NLM_F_CREATE should be set when creating new route [ 695.535730][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 696.484897][T11545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 696.702909][T11547] netlink: 'syz.2.1455': attribute type 2 has an invalid length. [ 699.362818][ T7689] IPVS: starting estimator thread 0... [ 699.430403][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 699.475617][T11557] IPVS: using max 28 ests per chain, 67200 per kthread [ 699.504190][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1458'. [ 699.694430][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 699.711961][T11568] block nbd1: Unsupported socket: should be TCP or UNIX. [ 699.847383][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 700.035169][T11589] macsec1: entered allmulticast mode [ 700.049800][T11589] dummy0: entered allmulticast mode [ 700.060103][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1464'. [ 700.091925][T11589] dummy0: left allmulticast mode [ 700.098077][ T7689] net_ratelimit: 1023 callbacks suppressed [ 700.098095][ T7689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.112812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.243554][T11563] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 700.576400][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.696138][T11607] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1469'. [ 700.752917][T11607] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1469'. [ 700.796036][T11610] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 701.187460][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 701.295328][T11636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.315861][T11636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.324660][T11636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.333639][T11636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.344943][T11636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.369405][T11636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.379335][ T7918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.538016][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 701.693721][T11646] bridge_slave_0: Caught tx_queue_len zero misconfig [ 701.709237][T11646] xt_hashlimit: size too large, truncated to 1048576 [ 701.797246][T11649] ÿ: renamed from bond_slave_0 (while UP) [ 701.869802][T11651] bridge_slave_0: left allmulticast mode [ 701.898133][T11651] bridge_slave_0: left promiscuous mode [ 701.920168][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.971258][ T5657] cgroup: fork rejected by pids controller in [ 701.972217][T11651] bridge_slave_1: left allmulticast mode [ 701.974619][ T5657] /syz4 [ 701.991815][T11651] bridge_slave_1: left promiscuous mode [ 702.001077][ T5657] [ 702.037607][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.117612][T11651] bond0: (slave bond_slave_0): Releasing backup interface [ 702.148823][T11651] bond0: (slave bond_slave_1): Releasing backup interface [ 702.215383][T11651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.251789][T11651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.297260][T11665] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 702.326714][T11665] netlink: 'syz.0.1488': attribute type 2 has an invalid length. [ 702.341121][T11665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1488'. [ 702.589236][T11679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1492'. [ 702.849213][ T7693] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.042320][ T7693] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.199747][ T7693] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.428097][ T7693] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.454028][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 703.471130][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 703.481805][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 703.490497][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 703.498940][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 703.502267][T11705] netlink: 'syz.1.1501': attribute type 1 has an invalid length. [ 703.731755][T11705] bond10: entered promiscuous mode [ 703.737731][T11706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.742695][T11705] 8021q: adding VLAN 0 to HW filter on device bond10 [ 703.781844][T11709] vlan2: entered allmulticast mode [ 703.787204][T11709] bond10: entered allmulticast mode [ 703.851936][ T50] block nbd1: Receive control failed (result -32) [ 703.894677][T11716] bond10: (slave bridge1): making interface the new active one [ 703.903361][T11716] bridge1: entered promiscuous mode [ 703.909433][T11716] bridge1: entered allmulticast mode [ 703.924803][T11716] bond10: (slave bridge1): Enslaving as an active interface with an up link [ 704.041627][T11726] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 704.448797][T11739] netlink: 'syz.3.1507': attribute type 2 has an invalid length. [ 704.476451][T11739] __nla_validate_parse: 2 callbacks suppressed [ 704.476474][T11739] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1507'. [ 704.513467][ T7693] vlan2: left allmulticast mode [ 704.531619][T11738] SET target dimension over the limit! [ 704.538795][ T7693] geneve0: left allmulticast mode [ 704.560232][ T7693] vlan2: left promiscuous mode [ 704.576031][ T7693] geneve0: left promiscuous mode [ 704.594182][ T7693] bridge0: port 2(vlan2) entered disabled state [ 704.640331][ T7693] veth0: left allmulticast mode [ 704.660989][ T7693] veth0: left promiscuous mode [ 704.675339][ T7693] bridge0: port 1(veth0) entered disabled state [ 704.729090][ T7693] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 704.954238][ T7693] batman_adv: batadv0: Removing interface: ip6gretap1 [ 705.198688][ T7693] bond1 (unregistering): (slave gretap1): Releasing active interface [ 705.222732][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 30 seconds [ 705.238658][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 30 seconds [ 705.249938][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 30 seconds [ 705.265124][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 30 seconds [ 705.472124][ T7693] bond0 (unregistering): Released all slaves [ 705.479754][ T7918] tipc: Subscription rejected, illegal request [ 705.492131][ T7693] bond1 (unregistering): Released all slaves [ 705.508754][ T7693] bond2 (unregistering): Released all slaves [ 705.527322][ T7693] bond3 (unregistering): Released all slaves [ 705.566378][T11743] erspan0: left allmulticast mode [ 705.633502][ T50] Bluetooth: hci4: command tx timeout [ 705.650847][T11743] bridge0: left allmulticast mode [ 705.772881][T11743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.785703][T11743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.803299][T11743] 0·: left allmulticast mode [ 705.808559][T11743] hsr_slave_0: left allmulticast mode [ 705.928988][T11743] gretap2: left allmulticast mode [ 705.937225][T11739] syzkaller0: entered promiscuous mode [ 705.942987][T11739] syzkaller0: entered allmulticast mode [ 705.955996][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.021524][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 706.107825][ T7693] tipc: Disabling bearer [ 706.124422][ T7693] tipc: Left network mode [ 706.131021][ T7692] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.163829][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 706.178380][ T7918] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.197048][ T24] syz0: Port: 1 Link DOWN [ 706.242549][ T7918] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.295142][ T5660] xfrm0 speed is unknown, defaulting to 1000 [ 706.353098][T11704] xfrm0 speed is unknown, defaulting to 1000 [ 706.360056][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 706.378023][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 706.608897][T11786] x_tables: duplicate underflow at hook 2 [ 706.631297][T11778] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 706.731404][T11793] tipc: Enabled bearer , priority 0 [ 706.910138][T11801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'. [ 707.116027][T11801] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 707.164930][T11801] bond3 (unregistering): Released all slaves [ 707.292516][T11818] netlink: 'syz.1.1521': attribute type 11 has an invalid length. [ 707.470011][T11810] vlan2: entered allmulticast mode [ 707.484591][T11810] bond0: entered allmulticast mode [ 707.506111][T11810] ÿ: entered allmulticast mode [ 707.516317][T11810] bond_slave_1: entered allmulticast mode [ 707.698407][ T50] Bluetooth: hci4: command tx timeout [ 707.723286][T11820] bridge0: left promiscuous mode [ 707.732880][T11820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.778867][T11820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 707.790005][T11820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.800830][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 707.812363][T11820] veth1_vlan: left promiscuous mode [ 707.819602][T11820] veth0_vlan: left promiscuous mode [ 707.827344][T11820] veth0_vlan: entered promiscuous mode [ 707.834835][T11820] veth1_vlan: entered promiscuous mode [ 707.846931][T11820] veth0_macvtap: left promiscuous mode [ 707.854211][T11820] veth0_macvtap: entered promiscuous mode [ 707.864717][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 707.877265][T11820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.886972][T11820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.896168][T11820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 707.904384][T11820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.916173][T11820] net_ratelimit: 104 callbacks suppressed [ 707.916193][T11820] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 708.028148][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 708.296004][ T7692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.446252][T11842] syzkaller0: entered promiscuous mode [ 708.453764][T11842] syzkaller0: entered allmulticast mode [ 708.659753][ T7685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.703902][T11866] ip_tables: iptables: counters copy to user failed while replacing table [ 708.717475][ T7699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.769505][ T7699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.353120][T11877] veth0_macvtap: entered allmulticast mode [ 709.374863][T11877] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 709.500788][T11901] sit0: Caught tx_queue_len zero misconfig [ 709.538404][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 709.708553][T11905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 709.778022][ T50] Bluetooth: hci4: command tx timeout [ 709.831155][T11913] macvlan3: entered promiscuous mode [ 709.839215][T11913] macvlan3: entered allmulticast mode [ 709.852178][T11913] bond7: entered promiscuous mode [ 709.871491][T11913] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 709.900896][T11913] bond7: left promiscuous mode [ 709.992083][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 710.322119][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1541'. [ 710.523680][T11939] syzkaller0: entered promiscuous mode [ 710.529304][T11939] syzkaller0: entered allmulticast mode [ 710.760893][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.785207][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.803750][T11704] bridge_slave_0: entered allmulticast mode [ 710.838551][T11704] bridge_slave_0: entered promiscuous mode [ 711.086845][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.134878][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.179376][T11704] bridge_slave_1: entered allmulticast mode [ 711.211106][T11704] bridge_slave_1: entered promiscuous mode [ 711.289323][T11981] netlink: 'syz.2.1545': attribute type 2 has an invalid length. [ 711.322450][ T7693] hsr_slave_0: left promiscuous mode [ 711.396675][ T7693] veth1_macvtap: left promiscuous mode [ 711.417530][ T7693] veth0_macvtap: left promiscuous mode [ 711.425198][ T7693] veth0_vlan: left promiscuous mode [ 711.866274][ T50] Bluetooth: hci4: command tx timeout [ 712.220848][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 712.233237][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.367728][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 712.388392][T12009] Bluetooth: hci0: unsupported parameter 5135 [ 712.394706][T12009] Bluetooth: hci0: unsupported parameter 65 [ 712.401260][T12009] Bluetooth: hci0: unsupported parameter 5135 [ 712.408007][T12009] Bluetooth: hci0: unsupported parameter 65 [ 715.210457][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.412751][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 715.475255][T11704] team0: Port device team_slave_0 added [ 715.505750][T11704] team0: Port device team_slave_1 added [ 715.523707][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 715.550398][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 715.722816][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.744089][ T7693] IPVS: stop unused estimator thread 0... [ 715.763286][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.831397][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.847045][T12041] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 715.869908][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.890861][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.960954][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.992904][T12042] syzkaller0: entered promiscuous mode [ 716.008079][T12042] syzkaller0: entered allmulticast mode [ 716.177169][T11704] hsr_slave_0: entered promiscuous mode [ 716.194334][T11704] hsr_slave_1: entered promiscuous mode [ 716.219657][T11704] debugfs: 'hsr0' already exists in 'hsr' [ 716.237089][T11704] Cannot create hsr debugfs directory [ 716.422120][T12053] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1560'. [ 716.724166][T12074] smc: removing ib device syz0 [ 716.755978][T12078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1567'. [ 716.885809][T12074] smbdirect: ib_dev[syz0] removed [ 717.743423][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 717.770437][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 717.792627][T12113] netlink: 'syz.0.1572': attribute type 11 has an invalid length. [ 717.801777][T12113] netlink: 'syz.0.1572': attribute type 14 has an invalid length. [ 717.882219][T12112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1571'. [ 717.937919][T12112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1571'. [ 718.164285][T12125] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 718.172238][T12122] netlink: 'syz.2.1574': attribute type 21 has an invalid length. [ 718.191377][T12122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1574'. [ 718.216268][T12127] netlink: 'syz.0.1576': attribute type 1 has an invalid length. [ 718.261457][T12125] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.356543][T12125] bond0: (slave team0): Enslaving as an active interface with an up link [ 718.591076][T12127] bond8: entered promiscuous mode [ 718.596286][T12127] bond8: entered allmulticast mode [ 718.602188][T12127] 8021q: adding VLAN 0 to HW filter on device bond8 [ 718.660587][T12132] erspan2: entered allmulticast mode [ 718.710062][T12132] bond8: (slave erspan2): making interface the new active one [ 718.739938][T12132] erspan2: entered promiscuous mode [ 718.760599][T12132] bond8: (slave erspan2): Enslaving as an active interface with an up link [ 718.835167][T12140] syz.0.1576 (12140) used obsolete PPPIOCDETACH ioctl [ 719.017864][T12151] tipc: Enabling of bearer rejected, failed to enable media [ 719.477098][T12164] syzkaller1: entered promiscuous mode [ 719.502191][T12164] syzkaller1: entered allmulticast mode [ 719.555988][T12164] syzkaller1: left promiscuous mode [ 719.586081][T12164] syzkaller1: left allmulticast mode [ 719.613707][T11704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 719.812570][T11704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.880235][T11704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 719.954440][T11704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.044727][T12200] netlink: 'syz.0.1581': attribute type 2 has an invalid length. [ 720.095356][T11704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 720.153085][T11704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.196543][T11704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 720.234057][T11704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.562226][T12217] __nla_validate_parse: 2 callbacks suppressed [ 720.562249][T12217] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1584'. [ 720.607319][T12219] netlink: 'syz.1.1585': attribute type 4 has an invalid length. [ 720.660774][T12221] netlink: 'syz.1.1585': attribute type 4 has an invalid length. [ 720.670663][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'. [ 720.904989][T12225] xt_bpf: check failed: parse error [ 721.034561][T11704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.129635][T11704] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.161616][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1588'. [ 721.193878][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.201159][ T7691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.208472][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 721.291898][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.299146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.509711][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1591'. [ 721.551495][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'. [ 721.564032][T12255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.639711][T12253] netlink: 'syz.2.1591': attribute type 3 has an invalid length. [ 721.693415][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'. [ 721.722620][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 721.998657][T12274] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.1595'. [ 722.043730][T12274] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 722.964609][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.034990][T12323] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1602'. [ 723.165324][T12321] tipc: Started in network mode [ 723.209761][T12321] tipc: Node identity ac1414aa, cluster identity 4711 [ 723.280663][T12321] tipc: Enabled bearer , priority 10 [ 723.724929][T12350] netlink: 'syz.1.1610': attribute type 1 has an invalid length. [ 723.946762][T12373] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 723.956469][T12350] bond11: entered promiscuous mode [ 723.977346][T12350] 8021q: adding VLAN 0 to HW filter on device bond11 [ 724.039542][T12361] 8021q: adding VLAN 0 to HW filter on device bond11 [ 724.076327][T12361] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 724.139848][T12361] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 724.180682][T12361] bond11: (slave ip6gre1): making interface the new active one [ 724.189828][T12361] ip6gre1: entered promiscuous mode [ 724.198012][T12361] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 724.406230][ T5897] tipc: Node number set to 2886997162 [ 724.579741][T12391] bond1 (unregistering): Released all slaves [ 724.677209][T11704] veth0_vlan: entered promiscuous mode [ 724.749769][T11704] veth1_vlan: entered promiscuous mode [ 724.823525][T11704] veth0_macvtap: entered promiscuous mode [ 724.836708][T11704] veth1_macvtap: entered promiscuous mode [ 724.866946][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.895108][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.976751][ T7693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.010378][T12415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.081243][ T7692] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.155793][ T7692] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.169698][ T7692] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.204776][ T7692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.234951][ T7692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.321192][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.345791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.571009][T12430] __nla_validate_parse: 6 callbacks suppressed [ 725.571032][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1624'. [ 725.644668][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1493'. [ 725.693735][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 725.727183][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 726.204580][T12450] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 726.219274][T12450] pim6reg0: persist disabled [ 726.237614][T12450] x_tables: duplicate underflow at hook 2 [ 726.981109][T12480] netlink: 'syz.0.1633': attribute type 142 has an invalid length. [ 727.162693][T12490] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 727.239043][T12495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1636'. [ 727.329785][T12495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.337547][T12495] bridge0: port 1(bond1) entered blocking state [ 727.344137][T12495] bridge0: port 1(bond1) entered disabled state [ 727.351749][T12495] bond1: entered allmulticast mode [ 727.360163][T12495] bond1: entered promiscuous mode [ 727.391446][T12496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1637'. [ 727.408725][T12502] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 727.451779][T12502] netlink: 'syz.3.1638': attribute type 2 has an invalid length. [ 727.496431][T12502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1638'. [ 727.514485][T12506] openvswitch: netlink: Actions may not be safe on all matching packets [ 728.111432][T12530] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 728.234877][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 728.457151][T12548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.609851][T12556] sctp: [Deprecated]: syz.1.1649 (pid 12556) Use of int in max_burst socket option. [ 728.609851][T12556] Use struct sctp_assoc_value instead [ 729.139948][ T5271] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 729.356000][T12574] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1654'. [ 729.430090][T12577] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1654'. [ 729.698810][T12585] tipc: Resetting bearer [ 729.847503][ T7689] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.886611][ T7689] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.918978][ T7689] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.972357][ T7689] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.121518][T12610] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 730.172764][T12610] netlink: 'syz.2.1663': attribute type 2 has an invalid length. [ 730.377472][T12618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.390010][T12618] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.214979][T12659] __nla_validate_parse: 1 callbacks suppressed [ 731.214999][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1670'. [ 731.469097][T12666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1670'. [ 731.575034][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 731.613372][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 731.677638][T12685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'. [ 731.740008][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 731.845864][T12688] netlink: 'syz.3.1679': attribute type 142 has an invalid length. [ 731.932835][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 732.267793][T12723] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 732.430833][T12722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1686'. [ 732.610074][T12707] bond10: left promiscuous mode [ 732.615231][T12707] bridge1: left promiscuous mode [ 732.623750][T12707] vlan2: left allmulticast mode [ 732.629739][T12707] bond10: left allmulticast mode [ 732.635030][T12707] bridge1: left allmulticast mode [ 732.652955][T12707] bond11: left promiscuous mode [ 732.660990][T12707] ip6gre1: left promiscuous mode [ 732.687270][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.708253][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.731244][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.767100][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.826194][ T7685] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.848421][ T7685] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.974705][T12747] netlink: 'syz.0.1694': attribute type 13 has an invalid length. [ 733.009581][T12736] tipc: Resetting bearer [ 733.077289][ T7692] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.111510][ T7692] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.226246][T12741] syzkaller0: entered promiscuous mode [ 733.235664][T12741] syzkaller0: entered allmulticast mode [ 733.886447][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1702'. [ 733.951799][T12776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1702'. [ 734.571658][T12797] syzkaller0: entered promiscuous mode [ 734.589528][T12797] syzkaller0: entered allmulticast mode [ 735.299973][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 60 seconds [ 735.321010][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 60 seconds [ 735.332044][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 60 seconds [ 735.343751][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 60 seconds [ 737.305639][T12840] __nla_validate_parse: 1 callbacks suppressed [ 737.305659][T12840] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1716'. [ 737.563077][T12851] netlink: 632 bytes leftover after parsing attributes in process `syz.0.1719'. [ 737.709946][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1718'. [ 737.749051][T12865] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1722'. [ 738.011344][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 738.022640][T12870] syzkaller0: entered promiscuous mode [ 738.042668][T12870] syzkaller0: entered allmulticast mode [ 738.050110][T12885] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1718'. [ 738.080965][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 738.272062][T12890] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 738.306217][T12890] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1725'. [ 738.337149][T12890] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 738.724386][T12904] openvswitch: netlink: Message has 8 unknown bytes. [ 741.803121][ T4976] udevd[4976]: worker [10600] /devices/virtual/block/nbd3 is taking a long time [ 742.612790][T12890] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 742.615104][T12891] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1725'. [ 742.837376][T12917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1731'. [ 742.867064][T12919] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1730'. [ 742.922387][T12923] netlink: 'syz.3.1733': attribute type 4 has an invalid length. [ 742.935165][T12925] netlink: 'syz.3.1733': attribute type 4 has an invalid length. [ 742.985251][T12920] syzkaller0: entered promiscuous mode [ 743.014064][T12920] syzkaller0: entered allmulticast mode [ 743.029513][T12930] netlink: 'syz.2.1734': attribute type 2 has an invalid length. [ 743.095082][T12930] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1734'. [ 743.562387][T12953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1738'. [ 743.698062][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 743.728469][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1741'. [ 743.775217][T12965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1742'. [ 744.080901][T12982] xt_CT: No such helper "snmp_trap" [ 744.179830][T12987] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1746'. [ 744.293599][T12988] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1747'. [ 744.857088][T13013] netlink: 'syz.2.1753': attribute type 30 has an invalid length. [ 745.171477][T13023] netlink: 'syz.1.1755': attribute type 13 has an invalid length. [ 745.252647][T13028] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 745.520944][T13047] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 745.562075][T13042] tipc: Enabled bearer , priority 0 [ 745.603303][T13044] syzkaller0: entered promiscuous mode [ 745.691509][T13044] syzkaller0: entered allmulticast mode [ 745.979456][T13067] netlink: 'syz.2.1765': attribute type 12 has an invalid length. [ 746.175190][T13082] xt_l2tp: invalid flags combination: 0 [ 746.834833][T13119] netlink: 'syz.2.1776': attribute type 1 has an invalid length. [ 747.058141][T13123] openvswitch: netlink: Key type 62 is out of range max 32 [ 747.513387][T13139] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 747.583028][T13139] bond2: entered promiscuous mode [ 747.589355][T13139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 747.616601][T13139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 747.628494][T13139] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 747.638904][T13139] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 747.651361][T13139] bond2: (slave xfrm1): making interface the new active one [ 747.660661][T13139] xfrm1: entered promiscuous mode [ 747.687686][T13139] xfrm1: left promiscuous mode [ 765.387336][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 90 seconds [ 765.398351][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 90 seconds [ 765.410791][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 90 seconds [ 765.422175][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 90 seconds [ 795.457204][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 120 seconds [ 795.468146][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 120 seconds [ 795.479413][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 120 seconds [ 795.490680][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 120 seconds [ 825.537322][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 150 seconds [ 825.548168][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 150 seconds [ 825.559582][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 150 seconds [ 825.570772][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 150 seconds [ 826.335646][ T5652] Bluetooth: hci4: command 0x0406 tx timeout [ 830.691983][T13213] netlink: 'syz.0.1783': attribute type 12 has an invalid length. [ 830.729205][T13214] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 830.820452][T13219] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 831.077294][T13237] netlink: 'syz.3.1794': attribute type 4 has an invalid length. [ 831.653193][T13264] __nla_validate_parse: 4 callbacks suppressed [ 831.653213][T13264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1800'. [ 831.699905][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'. [ 831.732323][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 831.800259][T13264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1800'. [ 832.075150][T13282] v: renamed from veth0_vlan [ 832.127466][ T29] audit: type=1804 audit(1787803307.877:3): pid=13284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1804" name="/newroot/372/cgroup.controllers" dev="tmpfs" ino=1924 res=1 errno=0 [ 832.193181][T13287] netlink: 'syz.2.1805': attribute type 2 has an invalid length. [ 832.207903][T13284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1804'. [ 832.208629][ T29] audit: type=1800 audit(1787803307.887:4): pid=13284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1804" name="cgroup.controllers" dev="tmpfs" ino=1924 res=0 errno=0 [ 832.281208][T13284] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1804'. [ 832.310352][T13290] syzkaller0: entered promiscuous mode [ 832.312221][T13284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1804'. [ 832.316070][T13290] syzkaller0: entered allmulticast mode [ 832.375847][ T29] audit: type=1804 audit(1787803308.127:5): pid=13284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1804" name="/newroot/372/cgroup.controllers" dev="tmpfs" ino=1924 res=1 errno=0 [ 832.746702][T13293] 8021q: VLANs not supported on syzkaller0 [ 832.810463][T13300] syzkaller0: left promiscuous mode [ 832.888535][T13300] syzkaller0: left allmulticast mode [ 832.966193][T13316] xt_addrtype: ipv6 does not support BROADCAST matching [ 833.102760][T13320] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 833.221448][T13326] tipc: New replicast peer: 172.20.20.187 [ 833.253269][T13326] tipc: Enabled bearer , priority 10 [ 833.523109][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1817'. [ 833.541464][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 833.589942][T13337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 833.657571][T13340] x_tables: duplicate underflow at hook 2 [ 833.717627][T13341] x_tables: duplicate underflow at hook 2 [ 833.749457][T13337] wg2 speed is unknown, defaulting to 1000 [ 833.767132][T13337] wg2 speed is unknown, defaulting to 1000 [ 833.782474][T13337] wg2 speed is unknown, defaulting to 1000 [ 833.808746][T13337] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 833.887552][T13337] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 833.927234][T13337] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 833.957223][T13337] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 834.082632][T13337] wg2 speed is unknown, defaulting to 1000 [ 834.091019][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 834.101698][T13337] wg2 speed is unknown, defaulting to 1000 [ 834.119859][T13337] wg2 speed is unknown, defaulting to 1000 [ 834.127859][T13337] wg2 speed is unknown, defaulting to 1000 [ 834.136102][T13337] wg2 speed is unknown, defaulting to 1000 [ 834.151983][T13356] syzkaller0: entered promiscuous mode [ 834.210537][T13356] syzkaller0: entered allmulticast mode [ 834.688614][T13384] gretap0: left promiscuous mode [ 834.751576][T13379] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 834.755960][T13377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.946416][T13389] wg2 speed is unknown, defaulting to 1000 [ 835.066230][T13405] xt_nfacct: accounting object `syz0' does not exist [ 835.319936][T13417] ip6_vti0: Caught tx_queue_len zero misconfig [ 835.759453][T13431] syzkaller0: entered promiscuous mode [ 835.796429][T13431] syzkaller0: entered allmulticast mode [ 836.273002][T13470] sctp: [Deprecated]: syz.3.1848 (pid 13470) Use of int in maxseg socket option. [ 836.273002][T13470] Use struct sctp_assoc_value instead [ 837.018371][T13516] xt_hl: Unknown TTL match mode: 237 [ 837.105393][T13515] __nla_validate_parse: 2 callbacks suppressed [ 837.117564][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1862'. [ 837.138907][T13523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.152019][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 837.172987][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 837.201141][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 837.284890][T13530] netlink: 'syz.3.1865': attribute type 2 has an invalid length. [ 837.329919][T13530] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 837.350753][T13530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1865'. [ 837.472268][T13539] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 837.513232][T13539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.616021][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'. [ 838.158394][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 838.194997][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 838.537207][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'. [ 838.602937][T13581] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1880'. [ 838.664708][T13590] bridge: RTM_NEWNEIGH with invalid ether address [ 838.938025][T13595] netlink: 'syz.4.1882': attribute type 22 has an invalid length. [ 839.190308][T13619] tipc: Enabling of bearer rejected, failed to enable media [ 839.623077][T13641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.672253][T13648] lo: Caught tx_queue_len zero misconfig [ 839.991994][T13666] netlink: 'syz.2.1900': attribute type 1 has an invalid length. [ 840.126198][T13666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 840.173847][T13672] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 840.451967][T13688] netlink: 'syz.3.1907': attribute type 13 has an invalid length. [ 840.636274][T13692] syzkaller0: Caught tx_queue_len zero misconfig [ 840.711654][T13699] 8021q: VLANs not supported on sit0 [ 840.995293][T13716] team0: entered promiscuous mode [ 841.018425][T13716] team_slave_0: entered promiscuous mode [ 841.034566][T13716] team_slave_1: entered promiscuous mode [ 841.042199][T13716] team0: entered allmulticast mode [ 841.050029][T13719] netlink: 'syz.0.1915': attribute type 9 has an invalid length. [ 841.062396][T13716] team_slave_0: entered allmulticast mode [ 841.071603][T13716] team_slave_1: entered allmulticast mode [ 841.078847][T13716] team0: Cannot enslave team device to itself [ 841.856045][ T5652] Bluetooth: hci4: command 0x0406 tx timeout [ 841.878146][T13752] trusted_key: syz.1.1923 sent an empty control message without MSG_MORE. [ 842.296894][T13765] __nla_validate_parse: 16 callbacks suppressed [ 842.296916][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 842.355923][ T7692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 842.375328][ T7692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 842.403530][ T7692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 842.435579][ T7692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 843.445926][T13800] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1940'. [ 843.608982][T13796] syzkaller0: entered promiscuous mode [ 843.614748][T13796] syzkaller0: entered allmulticast mode [ 846.314013][T13816] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 847.274586][T13881] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 847.591907][T13889] bond10: invalid NS target :: specified for addition [ 847.665566][T13889] bond10: option ns_ip6_target: invalid value (18446744073709551615) [ 847.692518][T13889] bond10 (unregistering): Released all slaves [ 847.853387][T13898] syzkaller0: Caught tx_queue_len zero misconfig [ 847.858015][T13894] netlink: 'syz.4.1961': attribute type 10 has an invalid length. [ 849.327954][T13960] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1978'. [ 849.338175][T13960] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1978'. [ 849.390216][T13958] syzkaller0: left promiscuous mode [ 849.407389][T13958] syzkaller0: left allmulticast mode [ 849.861318][T13968] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 850.233868][T14000] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1987'. [ 850.466397][T14003] syzkaller0: left promiscuous mode [ 850.491356][T14003] syzkaller0: left allmulticast mode [ 850.526810][T14013] 8021q: VLANs not supported on nlmon0 [ 850.546530][T14007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.135255][T14029] IPVS: Scheduler module ip_vs_sip not found [ 851.219963][T14037] syzkaller0: entered promiscuous mode [ 851.245516][T14037] syzkaller0: entered allmulticast mode [ 851.487941][T14047] netlink: 'syz.0.2001': attribute type 3 has an invalid length. [ 851.508530][T14050] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 851.582911][T14050] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'. [ 851.680367][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 851.750747][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 851.763886][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 851.782351][T14062] netlink: 'syz.3.2004': attribute type 12 has an invalid length. [ 851.792708][T14062] netlink: 'syz.3.2004': attribute type 14 has an invalid length. [ 852.384913][T14104] bridge_slave_1: Caught tx_queue_len zero misconfig [ 852.680446][T14115] veth8: entered promiscuous mode [ 852.730918][T14120] ip_tables: iptables: counters copy to user failed while replacing table [ 853.065157][T14141] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 853.212729][T14156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2023'. [ 853.484657][T14168] xt_cluster: node mask cannot exceed total number of nodes [ 854.054694][T14199] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 854.257119][T14189] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 854.562726][T14221] SET target dimension over the limit! [ 854.875310][T14235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2038'. [ 855.011861][T14230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.283321][T14230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.325922][T14230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.384940][T14230] veth1_vlan: left promiscuous mode [ 855.403573][T14230] veth0_vlan: left promiscuous mode [ 855.424057][T14230] veth0_vlan: entered promiscuous mode [ 855.464779][T14230] veth1_vlan: entered promiscuous mode [ 855.498253][T14230] veth0_macvtap: left promiscuous mode [ 855.510773][T14251] x_tables: duplicate underflow at hook 1 [ 855.511505][T14230] veth0_macvtap: entered promiscuous mode [ 855.535340][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 855.548381][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 855.569356][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 855.580161][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 855.596170][T14230] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 855.613551][T14253] sctp: [Deprecated]: syz.0.2041 (pid 14253) Use of int in maxseg socket option. [ 855.613551][T14253] Use struct sctp_assoc_value instead [ 855.632670][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 180 seconds [ 855.644083][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 180 seconds [ 855.655120][ T7693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.655217][ T7693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.674023][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 180 seconds [ 855.685724][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 180 seconds [ 855.708833][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2042'. [ 855.778804][ T7685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.832569][ T7685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.067083][T14266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 856.100242][T14266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 856.158195][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 856.224822][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2044'. [ 856.546346][T14286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2049'. [ 856.677071][T14293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2049'. [ 856.706463][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 856.721519][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 856.753561][T14306] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 857.142612][T14318] ip_tables: iptables: counters copy to user failed while replacing table [ 860.771303][T14351] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 860.860971][T14359] __nla_validate_parse: 1 callbacks suppressed [ 860.860992][T14359] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.2067'. [ 860.903257][T14354] syzkaller0: entered promiscuous mode [ 860.913822][T14354] syzkaller0: entered allmulticast mode [ 860.934401][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 861.010657][T14359] tunl0: Caught tx_queue_len zero misconfig [ 861.054414][T14351] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 861.066060][T14367] netlink: 'syz.3.2069': attribute type 11 has an invalid length. [ 861.106198][T14351] tipc: Enabling of bearer rejected, already enabled [ 861.274544][T14364] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.282376][T14364] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.336793][T14364] team0: left promiscuous mode [ 861.356791][T14364] team_slave_0: left promiscuous mode [ 861.367837][T14364] team_slave_1: left promiscuous mode [ 861.387339][T14364] team0: left allmulticast mode [ 861.406562][T14364] team_slave_0: left allmulticast mode [ 861.434870][T14364] team_slave_1: left allmulticast mode [ 861.662272][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.698203][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.998380][T14371] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 862.021150][T14371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 862.048547][T14371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 862.066451][ T7918] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.117825][ T7918] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.163777][ T7918] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.211475][ T7918] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.390341][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2080'. [ 862.472049][T14400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2080'. [ 862.643089][T14409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2081'. [ 862.762544][T14415] netlink: 'syz.0.2085': attribute type 5 has an invalid length. [ 863.064752][T14434] x_tables: duplicate underflow at hook 3 [ 863.540333][T14444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 864.026082][T14466] netlink: 'syz.2.2096': attribute type 2 has an invalid length. [ 864.225003][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 864.292185][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 864.519952][T14490] netlink: 'syz.2.2101': attribute type 5 has an invalid length. [ 864.730816][T14480] ovs-system: entered promiscuous mode [ 865.292594][T14526] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 865.808431][T14556] gretap1: entered allmulticast mode [ 865.924857][T14564] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 868.795659][ T7685] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.879424][T14636] ip6gretap1: entered allmulticast mode [ 868.890310][T14636] batman_adv: batadv0: Adding interface: ip6gretap1 [ 868.898242][T14636] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 868.935866][T14664] netlink: 'syz.1.2128': attribute type 9 has an invalid length. [ 868.943797][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 868.954221][T14636] batman_adv: batadv0: Interface activated: ip6gretap1 [ 868.962987][T14644] tipc: Enabling of bearer rejected, failed to enable media [ 868.992425][T14665] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2128'. [ 869.012512][ T7918] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.022945][T14648] syzkaller0: mtu less than device minimum [ 869.040357][ T7918] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.142070][T14664] bridge2: entered promiscuous mode [ 869.205608][ T7693] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.334532][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2131'. [ 869.397659][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 869.454549][T14673] wg2 speed is unknown, defaulting to 1000 [ 869.502162][T14671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.091786][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 870.457631][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'. [ 870.488452][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 870.632552][T14728] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 871.407514][T14753] wg2 speed is unknown, defaulting to 1000 [ 871.952103][T14778] netlink: 'syz.1.2157': attribute type 11 has an invalid length. [ 871.982053][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 872.278527][T14787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.427214][T14789] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2161'. [ 872.527190][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 872.908865][T14807] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 873.389115][T14819] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 873.407887][T14819] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 873.547371][T14825] netlink: 'syz.1.2174': attribute type 13 has an invalid length. [ 873.679789][T14823] wg2 speed is unknown, defaulting to 1000 [ 874.685584][T14868] x_tables: duplicate underflow at hook 2 [ 874.978810][T14873] __nla_validate_parse: 2 callbacks suppressed [ 874.978833][T14873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2189'. [ 875.185886][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2191'. [ 875.776148][T14916] sctp: [Deprecated]: syz.0.2198 (pid 14916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 875.776148][T14916] Use struct sctp_sack_info instead [ 876.363234][T14944] netlink: Conntrack attr has 8 unknown bytes [ 876.395040][T14944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.417901][T14939] xfrm0: Caught tx_queue_len zero misconfig [ 876.821791][T14961] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 876.847072][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 877.011854][T14957] 8021q: adding VLAN 0 to HW filter on device bond12 [ 877.068745][T14964] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 877.115822][T14971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2211'. [ 877.282019][T14981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.319776][T14986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.352134][T14981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2214'. [ 877.718276][T14996] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 877.859879][T15005] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.2222'. [ 877.986182][T15012] netlink: 'syz.2.2221': attribute type 4 has an invalid length. [ 878.050515][T15020] netlink: 'syz.2.2221': attribute type 4 has an invalid length. [ 880.521854][T15006] bridge2: left promiscuous mode [ 880.557916][T15023] hsr0: entered promiscuous mode [ 880.572334][T15023] hsr0: left promiscuous mode [ 880.639632][T15028] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 880.671688][T15028] syzkaller1: linktype set to 769 [ 880.694897][T15031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2227'. [ 880.739942][T15011] wg2 speed is unknown, defaulting to 1000 [ 881.077191][T15033] syzkaller0: entered promiscuous mode [ 881.096749][T15033] syzkaller0: entered allmulticast mode [ 881.702957][T15082] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 881.746888][T15082] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.2237'. [ 882.369839][T15116] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2245'. [ 882.421024][T15121] syzkaller0: left promiscuous mode [ 882.446670][T15122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2246'. [ 882.462342][T15121] syzkaller0: left allmulticast mode [ 882.489674][T15124] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2245'. [ 882.523403][T15126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2246'. [ 882.544477][T15122] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2246'. [ 882.803432][T15135] syzkaller0: entered promiscuous mode [ 882.839111][T15139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2251'. [ 882.849279][T15135] syzkaller0: entered allmulticast mode [ 882.867336][T15136] netlink: 'syz.0.2249': attribute type 4 has an invalid length. [ 882.909616][T15142] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2252'. [ 883.073922][ T7685] IPVS: starting estimator thread 0... [ 883.185592][T15149] IPVS: using max 25 ests per chain, 60000 per kthread [ 883.356455][T15162] xt_l2tp: v2 doesn't support IP mode [ 883.371740][T15163] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2256'. [ 883.461241][T15171] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 883.680498][T15183] veth1_vlan: left promiscuous mode [ 883.688401][T15183] veth1_vlan: entered promiscuous mode [ 883.694115][T15183] veth1_vlan: entered allmulticast mode [ 883.993779][T15198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 884.187762][T15204] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001 [ 884.832501][T15236] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.888860][T15236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.967993][T15236] veth0_to_team: left promiscuous mode [ 884.984577][T15236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.996446][T15236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.009408][T15236] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 885.028216][T15236] veth1_vlan: left promiscuous mode [ 885.035148][T15236] veth0_vlan: left promiscuous mode [ 885.043392][T15236] veth0_vlan: entered promiscuous mode [ 885.053012][T15236] veth1_vlan: entered promiscuous mode [ 885.063494][T15236] veth1_macvtap: left promiscuous mode [ 885.071334][T15236] veth0_macvtap: left promiscuous mode [ 885.080115][T15236] veth0_macvtap: entered promiscuous mode [ 885.088166][T15236] veth1_macvtap: entered promiscuous mode [ 885.100799][T15236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.109244][T15236] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 885.118428][T15236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.127752][T15236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.137099][T15236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.161713][T15236] veth0_to_team: entered promiscuous mode [ 885.169364][T15236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.182542][T15236] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 885.210136][T15236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 885.234212][T15236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 885.246518][T15236] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 885.257583][T15236] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 885.268274][T15236] bridge1: left promiscuous mode [ 885.278978][T15236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 885.297704][T15236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 885.319949][T15236] gretap0: entered promiscuous mode [ 885.333792][T15236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 885.353135][T15236] vlan2: left allmulticast mode [ 885.358648][T15236] bond0: left allmulticast mode [ 885.363982][T15236] ÿ: left allmulticast mode [ 885.369420][T15236] bond_slave_1: left allmulticast mode [ 885.390040][T15236] bond8: left promiscuous mode [ 885.395131][T15236] erspan2: left promiscuous mode [ 885.401252][T15236] bond8: left allmulticast mode [ 885.407439][T15236] erspan2: left allmulticast mode [ 885.417695][T15236] 8021q: adding VLAN 0 to HW filter on device bond9 [ 885.455624][T15238] vlan2: entered promiscuous mode [ 885.468249][T15238] ip6gretap0: entered promiscuous mode [ 885.518313][T14661] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 885.526097][T14661] bridge1: entered promiscuous mode [ 885.533550][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.540756][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.552493][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.559686][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.645976][ T7918] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.666347][ T7918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.715951][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 210 seconds [ 885.730352][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 210 seconds [ 885.743148][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 210 seconds [ 885.755131][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 210 seconds [ 885.779409][ T7692] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.853463][ T7692] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.992913][T15273] __nla_validate_parse: 6 callbacks suppressed [ 885.992936][T15273] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2290'. [ 886.001797][ T5897] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 886.059916][T15275] netlink: 'syz.4.2289': attribute type 2 has an invalid length. [ 886.072825][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 886.087060][T15273] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 886.186165][T15268] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2285'. [ 886.212389][T15268] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 886.256008][ T7693] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.265165][ T5897] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 886.270047][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'. [ 886.279572][ T7693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.286955][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 886.312146][T15284] syzkaller0: entered promiscuous mode [ 886.320839][T15284] syzkaller0: entered allmulticast mode [ 886.448257][T14661] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 886.461864][T15289] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2294'. [ 886.839241][ T7918] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.863357][ T7918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.889839][ T7918] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.926171][ T7918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.034913][T15307] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 887.063536][T15308] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 887.088020][T15308] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2299'. [ 887.139803][T15308] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 887.171698][T15311] syzkaller0: entered promiscuous mode [ 887.187970][T15311] syzkaller0: entered allmulticast mode [ 887.610755][T15307] wg2 speed is unknown, defaulting to 1000 [ 887.923265][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2308'. [ 888.022945][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2306'. [ 888.076784][T15340] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2307'. [ 888.830188][T15374] syzkaller0: entered promiscuous mode [ 888.863063][T15374] syzkaller0: entered allmulticast mode [ 889.327761][T13397] udevd[13397]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 889.811615][T15412] sock: sock_timestamping_bind_phc: sock not bind to device [ 890.015633][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 890.080246][T15418] tipc: Enabling of bearer rejected, failed to enable media [ 890.593144][T15439] xt_connbytes: Forcing CT accounting to be enabled [ 890.616310][T15439] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 890.720511][T15448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.981885][T15461] wg2 speed is unknown, defaulting to 1000 [ 891.170280][T15472] syzkaller1: entered promiscuous mode [ 891.180775][T15472] syzkaller1: entered allmulticast mode [ 891.331575][T15482] netlink: 'syz.4.2344': attribute type 1 has an invalid length. [ 891.352640][T15482] xt_l2tp: wrong L2TP version: 0 [ 891.379585][T15483] __nla_validate_parse: 4 callbacks suppressed [ 891.379607][T15483] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2345'. [ 891.933240][T15503] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 892.437578][T15531] syzkaller1: entered promiscuous mode [ 892.462992][T15531] syzkaller1: entered allmulticast mode [ 892.593202][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 892.642443][T15538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2358'. [ 893.304171][T15566] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 893.320673][T15566] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 893.669876][T15580] xt_CT: No such helper "snmp_trap" [ 893.739789][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2369'. [ 893.790281][T15588] xt_hl: Unknown Hop Limit match mode: 4 [ 894.236362][T15610] netlink: 'syz.4.2375': attribute type 11 has an invalid length. [ 894.257756][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'. [ 894.279971][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 894.292354][T15614] team0: No ports can be present during mode change [ 894.474894][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2379'. [ 894.653130][T15617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.669335][T15593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.242752][T15649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2386'. [ 895.653389][T15663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.663382][T15663] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.678505][T15663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.785792][T15663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.813760][T15663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.831627][T15663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 895.870910][T15663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.896202][T15684] sctp: [Deprecated]: syz.1.2390 (pid 15684) Use of int in max_burst socket option deprecated. [ 895.896202][T15684] Use struct sctp_assoc_value instead [ 895.926174][T15663] veth0_vlan: left promiscuous mode [ 895.933917][T15663] veth0_vlan: entered promiscuous mode [ 895.959046][T15663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.967790][T15663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.976316][T15663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 895.984921][T15663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.032065][T15663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 896.092528][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.099834][ T7685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.110842][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.118097][ T7685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.301039][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 896.316486][ T7918] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 896.344315][T14653] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 896.344325][ T7918] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 896.361367][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 896.519906][T15690] syzkaller0: entered promiscuous mode [ 896.526171][T15690] syzkaller0: entered allmulticast mode [ 896.545643][ T7692] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.587236][ T5897] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 896.641419][T15711] x_tables: duplicate underflow at hook 1 [ 897.307638][T14653] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 898.503293][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 899.465872][ T7693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.474674][ T7693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.594798][T15737] batadv_slave_1: entered promiscuous mode [ 899.627143][ T7918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.664336][T15736] batadv_slave_1: left promiscuous mode [ 899.934646][T15749] syzkaller0: entered promiscuous mode [ 899.940911][T15752] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 899.952484][T15749] syzkaller0: entered allmulticast mode [ 900.708451][T15770] syzkaller0: entered promiscuous mode [ 900.714141][T15770] syzkaller0: entered allmulticast mode [ 900.735626][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 901.375231][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 901.402114][T15803] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 901.420038][T15803] syz_tun: entered promiscuous mode [ 901.445215][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 901.460498][T15803] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 901.499079][T15803] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2412'. [ 901.525682][ T7693] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.542975][ T7693] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.563434][ T7693] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.582967][ T7693] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.035094][T15835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2420'. [ 902.090053][T15835] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 902.148891][T15835] 0ªî{X¹¦: entered allmulticast mode [ 902.169183][T15835] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 902.357021][T15844] syzkaller0: entered promiscuous mode [ 902.372489][T15844] syzkaller0: entered allmulticast mode [ 902.375361][T15847] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 902.398876][T15848] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 902.807658][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 902.864171][T15862] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2429'. [ 903.546000][T15892] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 904.018531][T15906] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2443'. [ 904.138906][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 904.258574][T15914] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2445'. [ 904.709164][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 904.740211][T15931] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.747944][T15931] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.928841][T15942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 905.090846][T15945] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 905.544368][T15938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.609285][T15963] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 905.619002][T15938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.862443][T15940] ip6tnl0: Caught tx_queue_len zero misconfig [ 905.993280][T15963] tipc: Enabling of bearer rejected, already enabled [ 906.098017][ T7918] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.186151][ T7693] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.216306][ T7918] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.242700][ T7918] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.303964][T15974] bridge_slave_0: left allmulticast mode [ 906.353905][T15974] bridge_slave_0: left promiscuous mode [ 906.398338][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.515481][T15989] __nla_validate_parse: 4 callbacks suppressed [ 906.515504][T15989] netlink: 1355 bytes leftover after parsing attributes in process `syz.0.2462'. [ 906.666991][T15974] bridge_slave_1: left allmulticast mode [ 906.687706][T15974] bridge_slave_1: left promiscuous mode [ 906.704014][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.747727][T15974] bond0: (slave bond_slave_0): Releasing backup interface [ 906.780576][T15974] bond0: (slave bond_slave_1): Releasing backup interface [ 906.814009][T15974] team0: Port device team_slave_0 removed [ 906.838590][T15974] team0: Port device team_slave_1 removed [ 906.856782][T15974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.889044][T15974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.912339][T15974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 907.310161][T16011] netlink: 'syz.0.2466': attribute type 5 has an invalid length. [ 907.332930][T16011] netlink: 'syz.0.2466': attribute type 9 has an invalid length. [ 907.362499][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 907.401146][T16015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2466'. [ 907.920211][T16028] 8021q: VLANs not supported on syzkaller1 [ 908.276064][T16043] veth1_to_bond: entered allmulticast mode [ 908.471499][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2474'. [ 908.603236][T16059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2479'. [ 908.623975][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2477'. [ 908.788123][T16063] netlink: 'syz.0.2482': attribute type 55 has an invalid length. [ 908.893089][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 908.908267][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2484'. [ 908.935940][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 908.948594][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2484'. [ 909.335875][ T7689] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.351105][ T7689] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.383899][ T7689] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.435737][ T7918] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.004793][T16120] ip6_vti0: Caught tx_queue_len zero misconfig [ 910.679604][T16164] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 910.835827][ T50] block nbd4: Receive control failed (result -32) [ 911.056339][ T7918] wlan1: Trigger new scan to find an IBSS to join [ 911.068316][T16182] pimreg: tun_chr_ioctl cmd 1074025677 [ 911.074764][T16182] pimreg: linktype set to 270 [ 911.109793][T16185] netlink: 'syz.2.2513': attribute type 1 has an invalid length. [ 911.145241][T16187] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 911.218902][T16189] bridge0: entered allmulticast mode [ 911.768913][T16213] __nla_validate_parse: 6 callbacks suppressed [ 911.768933][T16213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2522'. [ 911.970585][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 911.982470][T16225] netlink: 'syz.2.2526': attribute type 1 has an invalid length. [ 911.988708][T16229] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 911.990753][T16225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2526'. [ 912.148878][T16237] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 912.370858][T16247] bridge0: entered promiscuous mode [ 912.387267][T16247] bridge0: entered allmulticast mode [ 912.401540][T16247] netlink: 'syz.1.2532': attribute type 58 has an invalid length. [ 912.439210][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2532'. [ 912.856893][T16255] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 912.946836][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 912.979588][T16253] syz_tun: left promiscuous mode [ 912.992508][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.000026][T16253] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.094633][T16253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.128618][T16253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.217190][T16253] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 913.516547][ T7699] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.541897][ T7699] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.558922][ T7699] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.577058][ T7699] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.613862][T16266] wg2 speed is unknown, defaulting to 1000 [ 913.629098][ T7699] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.646510][ T7699] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.664545][ T7699] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.686941][ T7699] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.062474][T16305] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2546'. [ 914.072425][T16305] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2546'. [ 914.081700][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'. [ 914.096215][ T7693] wlan1: Trigger new scan to find an IBSS to join [ 914.701396][T16321] sctp: [Deprecated]: syz.1.2550 (pid 16321) Use of int in maxseg socket option. [ 914.701396][T16321] Use struct sctp_assoc_value instead [ 914.909259][T16330] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 914.928133][T16335] openvswitch: netlink: Unknown key attributes 1 [ 915.003317][T16339] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 915.032419][ T7687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.570028][T16364] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 915.589436][T16364] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 915.781196][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 240 seconds [ 915.792156][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 240 seconds [ 915.803752][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 240 seconds [ 915.814934][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 240 seconds [ 916.090143][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 917.232675][T16451] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2583'. [ 917.253182][T16451] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2583'. [ 918.262261][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'. [ 918.641486][T16485] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 920.646253][T16482] tipc: Enabling of bearer rejected, failed to enable media [ 920.657057][T16485] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 920.658710][T16486] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 920.717762][T16491] syzkaller0: entered promiscuous mode [ 920.741582][T16491] syzkaller0: entered allmulticast mode [ 920.858804][T16507] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 921.220126][T16530] netlink: 'syz.2.2597': attribute type 39 has an invalid length. [ 921.407331][T16535] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 923.890760][T16545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2600'. [ 923.900545][T16545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2600'. [ 923.911119][T16545] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2600'. [ 924.177831][T16563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2601'. [ 924.220378][T16563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2601'. [ 924.256752][T16560] ipvlan1: entered promiscuous mode [ 924.357681][T16567] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 924.439314][T16567] SET target dimension over the limit! [ 924.575705][T16573] xt_CT: No such helper "syz1" [ 924.777022][T16593] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 925.108488][T16607] netlink: 'syz.3.2613': attribute type 4 has an invalid length. [ 925.147507][T16614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2615'. [ 925.156856][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 925.181275][T16614] syzkaller0: entered promiscuous mode [ 925.193486][T16614] syzkaller0: entered allmulticast mode [ 925.215215][T16614] tipc: Enabled bearer , priority 0 [ 925.251243][T16614] tipc: Resetting bearer [ 925.284808][T16610] tipc: Resetting bearer [ 925.356725][T16610] tipc: Disabling bearer [ 925.553847][T16629] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 925.578722][T16629] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 925.590836][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 925.785106][T16636] netlink: 'syz.1.2623': attribute type 21 has an invalid length. [ 925.794545][T16636] netlink: 'syz.1.2623': attribute type 6 has an invalid length. [ 925.808872][T16636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2623'. [ 925.844735][T16641] netlink: 'syz.1.2623': attribute type 21 has an invalid length. [ 925.857567][T16641] netlink: 'syz.1.2623': attribute type 6 has an invalid length. [ 925.876201][T16641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2623'. [ 925.929293][T16645] netlink: 'syz.3.2624': attribute type 5 has an invalid length. [ 925.938111][T16644] netlink: 'syz.3.2624': attribute type 5 has an invalid length. [ 926.217920][T16670] gre0: entered promiscuous mode [ 926.239994][T16670] gre0: entered allmulticast mode [ 927.099875][T16711] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 927.271647][T16718] tipc: Enabling of bearer rejected, media not registered [ 927.473551][T16727] netlink: NAT attribute has 8 unknown bytes [ 927.488069][T16725] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 927.511678][T16727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.606456][T16730] wg2 speed is unknown, defaulting to 1000 [ 928.134992][T16757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.171748][T16755] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 928.294864][T16755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 928.418505][T16766] bond2: (slave geneve2): making interface the new active one [ 928.453819][T16766] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 928.505246][T16766] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 928.697786][ T7692] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.745344][ T7692] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.790846][ T7692] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.836165][ T7692] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.883990][T16783] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 928.917965][T16786] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 929.370439][T16809] sctp: [Deprecated]: syz.0.2666 (pid 16809) Use of int in max_burst socket option. [ 929.370439][T16809] Use struct sctp_assoc_value instead [ 929.512896][T16815] __nla_validate_parse: 8 callbacks suppressed [ 929.512917][T16815] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2668'. [ 929.535325][T16815] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2668'. [ 929.871908][T16828] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 929.889577][T16829] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2673'. [ 929.998654][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2676'. [ 930.123677][T16836] netlink: 'syz.2.2676': attribute type 8 has an invalid length. [ 930.203841][T16845] netlink: 'syz.4.2679': attribute type 1 has an invalid length. [ 930.422849][T16845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 930.551919][T16846] bond3: (slave veth3): Enslaving as an active interface with a down link [ 930.597380][T16856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.617818][T16856] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.731258][T16856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 930.762819][T16856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.797172][T16856] veth1_vlan: left promiscuous mode [ 930.802461][T16856] veth1_vlan: left allmulticast mode [ 930.836917][T16856] veth0_vlan: left promiscuous mode [ 930.844256][T16856] veth0_vlan: entered promiscuous mode [ 930.871441][T16856] veth1_vlan: entered promiscuous mode [ 930.894412][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 930.915305][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 930.936908][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.957846][T16856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.972761][T16856] gretap1: left allmulticast mode [ 930.987900][T16856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.996400][T16856] batadv_slave_1: entered promiscuous mode [ 931.022390][T16862] veth0: entered promiscuous mode [ 931.237199][T16882] netlink: 'syz.1.2687': attribute type 4 has an invalid length. [ 931.268829][ T7692] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 931.302397][ T7692] bond3: (slave veth3): making interface the new active one [ 931.328853][ T7692] bond3: active interface up! [ 931.344613][T16861] veth0: left promiscuous mode [ 931.396126][T16882] bridge3: entered promiscuous mode [ 931.416263][T16889] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 931.431383][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 931.461228][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 931.700884][T16897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2690'. [ 931.821147][T16910] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 931.831003][T16911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 932.237262][T16888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 932.539813][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 932.564835][T16940] syzkaller0: entered promiscuous mode [ 932.585853][T16940] syzkaller0: entered allmulticast mode [ 932.696625][T16945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.939532][T16958] netlink: 'syz.3.2706': attribute type 10 has an invalid length. [ 933.039004][T16958] team0: Port device dummy0 added [ 933.125213][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2705'. [ 933.142728][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'. [ 933.174071][T16967] tipc: Resetting bearer [ 933.334129][T16970] Bluetooth: MGMT ver 1.23 [ 933.420267][T16967] tipc: Disabling bearer [ 933.441169][T16971] netlink: 'syz.4.2710': attribute type 3 has an invalid length. [ 933.686671][T16992] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 934.435870][T17013] wg2 speed is unknown, defaulting to 1000 [ 934.756847][ T29] audit: type=1804 audit(1787803410.517:6): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2722" name="/newroot/527/cgroup.controllers" dev="tmpfs" ino=2716 res=1 errno=0 [ 934.844124][ T29] audit: type=1800 audit(1787803410.547:7): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2722" name="cgroup.controllers" dev="tmpfs" ino=2716 res=0 errno=0 [ 937.810213][T17039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.133994][T17080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2736'. [ 938.171583][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 938.396525][T17072] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 938.418041][T17072] bond4 (unregistering): Released all slaves [ 938.463868][T17085] bond0: option min_links: invalid value (18446744073709551615) [ 938.481324][T17085] bond0: option min_links: allowed values 0 - 2147483647 [ 938.532704][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 938.601852][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 938.940318][T17120] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2744'. [ 939.486034][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2741'. [ 939.660264][T17144] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2747'. [ 939.791444][T17146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2749'. [ 939.827594][T17152] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2750'. [ 940.112859][T17161] batman_adv: batadv0: Adding interface: veth0 [ 940.148364][T17161] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.189758][T17161] batman_adv: batadv0: Interface activated: veth0 [ 940.281254][T17161] batman_adv: batadv0: Interface deactivated: veth0 [ 940.297675][T17161] batman_adv: batadv0: Removing interface: veth0 [ 940.540544][T17192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2756'. [ 941.851654][T17272] syzkaller0: entered promiscuous mode [ 941.858339][T17272] syzkaller0: entered allmulticast mode [ 942.453900][T17289] siw: device registration error -23 [ 942.481213][T17286] xfrm1: entered allmulticast mode [ 942.779982][T17304] syzkaller0: entered promiscuous mode [ 942.794555][T17304] syzkaller0: entered allmulticast mode [ 942.847828][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 942.867328][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 942.877373][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 942.940095][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 942.951621][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.082494][T17309] ipvlan2: entered allmulticast mode [ 943.095516][T17309] syz_tun: entered allmulticast mode [ 943.274815][T17318] vlan3: entered allmulticast mode [ 943.298831][T17318] bond0: entered allmulticast mode [ 943.539789][T17337] __nla_validate_parse: 7 callbacks suppressed [ 943.539812][T17337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2791'. [ 943.709140][T17345] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2793'. [ 943.984964][T17284] wg2 speed is unknown, defaulting to 1000 [ 944.119561][T17364] openvswitch: netlink: Multiple metadata blocks provided [ 944.438424][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 944.481088][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 944.503461][T17378] Bluetooth: hci0: unsupported parameter 5134 [ 944.520182][T17378] Bluetooth: hci0: unsupported parameter 8192 [ 944.541622][T17378] Bluetooth: hci0: unsupported parameter 5134 [ 944.559752][T17378] Bluetooth: hci0: unsupported parameter 8192 [ 944.571544][T17379] netlink: 'syz.1.2800': attribute type 3 has an invalid length. [ 944.706954][T17384] sctp: [Deprecated]: syz.1.2800 (pid 17384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 944.706954][T17384] Use struct sctp_sack_info instead [ 944.750624][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 944.766580][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 944.864162][T17393] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2805'. [ 945.060314][ T50] Bluetooth: hci5: command tx timeout [ 945.081094][T17284] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.089794][T17284] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.098010][T17284] bridge_slave_0: entered allmulticast mode [ 945.108314][T17284] bridge_slave_0: entered promiscuous mode [ 945.117710][T17284] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.128607][T17284] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.137268][T17284] bridge_slave_1: entered allmulticast mode [ 945.150209][T17284] bridge_slave_1: entered promiscuous mode [ 945.192082][T17410] xt_hashlimit: size too large, truncated to 1048576 [ 945.285287][T17284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.331310][T17415] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2809'. [ 945.368535][T17284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.402625][T17413] –: renamed from vxcan1 [ 945.563561][T17284] team0: Port device team_slave_0 added [ 945.592742][T17284] team0: Port device team_slave_1 added [ 945.645572][T17428] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2811'. [ 945.829762][T17284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.853502][T17284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.895193][ T25] block nbd3: Possible stuck request ffff88802754e000: control (read@0,1024B). Runtime 270 seconds [ 945.907127][ T25] block nbd3: Possible stuck request ffff88802754e1c0: control (read@1024,1024B). Runtime 270 seconds [ 945.918433][ T25] block nbd3: Possible stuck request ffff88802754e380: control (read@2048,1024B). Runtime 270 seconds [ 945.930078][ T25] block nbd3: Possible stuck request ffff88802754e540: control (read@3072,1024B). Runtime 270 seconds [ 945.948909][T17284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.973087][T17284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.980537][T17284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.013637][T17284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.088622][T17284] hsr_slave_0: entered promiscuous mode [ 946.107473][T17284] hsr_slave_1: entered promiscuous mode [ 946.115138][T17284] debugfs: 'hsr0' already exists in 'hsr' [ 946.147015][T17284] Cannot create hsr debugfs directory [ 946.326350][T17448] netlink: 'syz.2.2814': attribute type 11 has an invalid length. [ 946.343449][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2815'. [ 946.484403][T17458] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 946.950554][T17284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 947.138338][ T50] Bluetooth: hci5: command tx timeout [ 947.520887][T17492] bond13: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 947.579727][T17492] bond13 (unregistering): Released all slaves [ 947.752671][T17284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 947.963247][T17284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 948.121126][T17519] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 948.140729][T17284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 948.288594][T17519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 948.384933][T17527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 948.394864][T17527] bond5: (slave ipip1): The slave device specified does not support setting the MAC address [ 948.420392][T17527] bond5: (slave ipip1): Error -95 calling set_mac_address [ 948.590091][T17537] __nla_validate_parse: 4 callbacks suppressed [ 948.590112][T17537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2833'. [ 948.953105][T17284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 948.999348][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.022767][T17284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 949.062744][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.088399][T17284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 949.123266][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.153305][T17284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 949.188979][T17284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 949.216253][ T50] Bluetooth: hci5: command tx timeout [ 949.231699][T17566] tunl0: entered promiscuous mode [ 949.252674][T17566] netlink: 'syz.4.2839': attribute type 4 has an invalid length. [ 949.260660][T17566] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2839'. [ 949.304441][T17563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2839'. [ 949.359001][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 949.495227][T17284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.532030][T17581] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2843'. [ 949.548676][T17284] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.579990][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.587281][ T5677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.620846][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.628146][ T7691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.831188][T17595] syzkaller0: entered promiscuous mode [ 949.837510][T17595] syzkaller0: entered allmulticast mode [ 949.877742][T17592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.241500][T17613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 950.326480][T17619] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.2854'. [ 950.337973][T17620] tipc: Enabled bearer , priority 0 [ 950.349320][T17621] tipc: Enabling of bearer rejected, already enabled [ 950.371382][T17613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2853'. [ 950.383418][T17620] syzkaller0: entered promiscuous mode [ 950.405094][T17620] syzkaller0: entered allmulticast mode [ 950.430861][T17615] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 950.457264][T17623] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2855'. [ 950.473651][T17620] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 950.510456][T17615] tipc: Resetting bearer [ 950.534109][T17614] tipc: Resetting bearer [ 950.543545][T17625] FAULT_INJECTION: forcing a failure. [ 950.543545][T17625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.578718][T17625] CPU: 0 UID: 0 PID: 17625 Comm: syz.4.2855 Not tainted syzkaller #0 PREEMPT(full) [ 950.578750][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.578764][T17625] Call Trace: [ 950.578772][T17625] [ 950.578783][T17625] dump_stack_lvl+0xe8/0x150 [ 950.578830][T17625] should_fail_ex+0x410/0x560 [ 950.578872][T17625] _copy_from_user+0x2d/0xb0 [ 950.578896][T17625] ___sys_sendmsg+0x1c6/0x360 [ 950.578930][T17625] ? __lock_acquire+0x683/0x2cf0 [ 950.578968][T17625] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.579038][T17625] ? __fget_files+0x2a/0x420 [ 950.579130][T17625] ? __fget_files+0x3a2/0x420 [ 950.579171][T17625] __x64_sys_sendmsg+0x1b1/0x290 [ 950.579208][T17625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 950.579265][T17625] do_syscall_64+0x166/0x520 [ 950.579292][T17625] ? trace_irq_disable+0x3b/0x140 [ 950.579322][T17625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.579350][T17625] ? clear_bhb_loop+0x70/0xc0 [ 950.579377][T17625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.579399][T17625] RIP: 0033:0x7fa6ce19e0d9 [ 950.579420][T17625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.579440][T17625] RSP: 002b:00007fa6cf0cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.579464][T17625] RAX: ffffffffffffffda RBX: 00007fa6ce426090 RCX: 00007fa6ce19e0d9 [ 950.579480][T17625] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000007 [ 950.579495][T17625] RBP: 00007fa6cf0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 950.579509][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.579521][T17625] R13: 00007fa6ce426128 R14: 00007fa6ce426090 R15: 00007fffd40674a8 [ 950.579556][T17625] [ 950.807945][T17614] tipc: Disabling bearer [ 950.818744][T17631] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2857'. [ 951.296036][ T50] Bluetooth: hci5: command tx timeout [ 951.758572][T17284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.915232][T17675] netlink: 'syz.4.2869': attribute type 1 has an invalid length. [ 951.942768][T17284] veth0_vlan: entered promiscuous mode [ 951.967602][T17676] FAULT_INJECTION: forcing a failure. [ 951.967602][T17676] name failslab, interval 1, probability 0, space 0, times 1 [ 952.002089][T17284] veth1_vlan: entered promiscuous mode [ 952.021356][T17676] CPU: 1 UID: 0 PID: 17676 Comm: syz.0.2868 Not tainted syzkaller #0 PREEMPT(full) [ 952.021386][T17676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.021399][T17676] Call Trace: [ 952.021408][T17676] [ 952.021417][T17676] dump_stack_lvl+0xe8/0x150 [ 952.021454][T17676] should_fail_ex+0x410/0x560 [ 952.021497][T17676] should_failslab+0xa8/0x100 [ 952.021572][T17676] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 952.021609][T17676] ? local_lock_release+0x9c/0x160 [ 952.021642][T17676] ? __alloc_skb+0x1db/0x7a0 [ 952.021669][T17676] ? __alloc_skb+0x1db/0x7a0 [ 952.021706][T17676] __alloc_skb+0x1db/0x7a0 [ 952.021741][T17676] netlink_sendmsg+0x5d4/0xb40 [ 952.021853][T17676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.021880][T17676] ? aa_sock_msg_perm+0xf6/0x1c0 [ 952.021922][T17676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.021943][T17676] sock_sendmsg_nosec+0x13a/0x180 [ 952.021972][T17676] ____sys_sendmsg+0x54e/0x850 [ 952.022013][T17676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.022055][T17676] ? import_iovec+0x73/0xa0 [ 952.022120][T17676] ___sys_sendmsg+0x2a5/0x360 [ 952.022152][T17676] ? __lock_acquire+0x683/0x2cf0 [ 952.022188][T17676] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.022259][T17676] ? __fget_files+0x2a/0x420 [ 952.022289][T17676] ? __fget_files+0x3a2/0x420 [ 952.022355][T17676] __x64_sys_sendmsg+0x1b1/0x290 [ 952.022393][T17676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.022449][T17676] do_syscall_64+0x166/0x520 [ 952.022475][T17676] ? trace_irq_disable+0x3b/0x140 [ 952.022504][T17676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.022527][T17676] ? clear_bhb_loop+0x70/0xc0 [ 952.022554][T17676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.022577][T17676] RIP: 0033:0x7fe6dcf9e0d9 [ 952.022597][T17676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.022616][T17676] RSP: 002b:00007fe6ddefc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.022639][T17676] RAX: ffffffffffffffda RBX: 00007fe6dd226090 RCX: 00007fe6dcf9e0d9 [ 952.022655][T17676] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000007 [ 952.022669][T17676] RBP: 00007fe6ddefc090 R08: 0000000000000000 R09: 0000000000000000 [ 952.022682][T17676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.022695][T17676] R13: 00007fe6dd226128 R14: 00007fe6dd226090 R15: 00007fff33544678 [ 952.022727][T17676] [ 952.291989][T17284] veth0_macvtap: entered promiscuous mode [ 952.302822][T17284] veth1_macvtap: entered promiscuous mode [ 952.323280][T17284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.335056][T17284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.549532][ T7689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.616107][ T7689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.653184][ T7692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.665654][ T7689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.679661][ T7692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.697380][ T7689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.770905][ T7695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.779811][ T7695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.854676][T17704] bridge0: left promiscuous mode [ 952.868409][T17704] bridge0: left allmulticast mode [ 952.924884][T17704] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 952.948003][T17710] ip_tables: iptables: counters copy to user failed while replacing table [ 952.957490][T17704] xfrm1: left allmulticast mode [ 952.964202][T17704] vlan3: left allmulticast mode [ 952.987851][T17704] bond0: left allmulticast mode [ 953.081683][T17714] 8021q: VLANs not supported on syzkaller1 [ 953.441159][T17724] tc_dump_action: action bad kind [ 953.872027][T17730] __nla_validate_parse: 11 callbacks suppressed [ 953.872050][T17730] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2882'. [ 954.053435][T17736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2881'. [ 954.067716][T17738] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 954.081137][T17736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2881'. [ 954.437376][T17755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2888'. [ 954.452367][T17755] siw: device registration error -23 [ 954.623428][T17760] gre2: entered promiscuous mode [ 954.633332][T17760] gre2: entered allmulticast mode [ 955.075217][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034858400: rx timeout, send abort [ 955.099665][T17784] xt_hashlimit: size too large, truncated to 1048576 [ 955.157154][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'. [ 955.577212][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803485a000: rx timeout, send abort [ 955.587542][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034858400: abort rx timeout. Force session deactivation [ 955.752076][T17810] syzkaller0: entered promiscuous mode [ 955.758632][T17810] syzkaller0: entered allmulticast mode [ 955.864954][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 955.909356][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'. [ 955.967043][T17817] netlink: 'syz.0.2906': attribute type 1 has an invalid length. [ 956.007533][T17816] netlink: 'syz.0.2906': attribute type 2 has an invalid length. [ 956.017563][ T7689] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.043943][ T7689] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.063512][ T7689] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.078946][ T7689] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 956.088217][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803485a000: abort rx timeout. Force session deactivation [ 956.124541][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'. [ 956.218894][ T7689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.232591][ T7689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.266678][ C1] ------------[ cut here ]------------ [ 956.272342][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 956.282354][ C1] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#1: syz.1.2907/17821 [ 956.293258][ C1] Modules linked in: [ 956.299038][ C1] CPU: 1 UID: 0 PID: 17821 Comm: syz.1.2907 Not tainted syzkaller #0 PREEMPT(full) [ 956.308537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.318673][ C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 956.325008][ C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 956.344797][ C1] RSP: 0018:ffffc90000a088f8 EFLAGS: 00010246 [ 956.350960][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 956.359022][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7a60 [ 956.367181][ C1] RBP: ffff888052b80f40 R08: 0000000000000000 R09: 0000000000000000 [ 956.375205][ C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff88803399a3e8 [ 956.383350][ C1] R13: dffffc0000000000 R14: ffffffff906a7a60 R15: ffff888052b83258 [ 956.391498][ C1] FS: 00007f52a42426c0(0000) GS:ffff888125024000(0000) knlGS:0000000000000000 [ 956.400727][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.407401][ C1] CR2: 00007fa6ce1eb7c0 CR3: 000000007a84c000 CR4: 00000000003526f0 [ 956.415462][ C1] Call Trace: [ 956.418874][ C1] [ 956.421772][ C1] rate_control_send_low+0x1a7/0x7b0 [ 956.427159][ C1] rate_control_get_rate+0x20b/0x5d0 [ 956.432514][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 956.438520][ C1] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 956.444650][ C1] ? local_lock_release+0x9c/0x160 [ 956.449870][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 956.456318][ C1] ? __ieee80211_beacon_get+0xdcc/0x1920 [ 956.462022][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 956.467669][ C1] __ieee80211_beacon_get+0xe2b/0x1920 [ 956.473201][ C1] ? __lock_acquire+0x683/0x2cf0 [ 956.478246][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 956.483770][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 956.489971][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 956.495737][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 956.503016][ C1] __iterate_interfaces+0x2af/0x5a0 [ 956.508316][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 956.514447][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 956.521731][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 956.527889][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 956.534979][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 956.540979][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 956.546289][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 956.552167][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 956.557506][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 956.562681][ C1] handle_softirqs+0x226/0x860 [ 956.567565][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 956.572415][ C1] __irq_exit_rcu+0xcb/0x220 [ 956.577100][ C1] irq_exit_rcu+0x9/0x30 [ 956.581404][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 956.587136][ C1] [ 956.590116][ C1] [ 956.593088][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 956.599184][ C1] RIP: 0010:kasan_check_range+0x1d1/0x2c0 [ 956.604973][ C1] Code: 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 00 [ 956.624668][ C1] RSP: 0018:ffffc90005877500 EFLAGS: 00000256 [ 956.630852][ C1] RAX: 0000000000000001 RBX: 0000000000000010 RCX: ffffffff81db12ff [ 956.638926][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff888051c6a248 [ 956.646988][ C1] RBP: ffff888063d00000 R08: ffff888051c6a257 R09: 1ffff1100a38d44a [ 956.655014][ C1] R10: dffffc0000000000 R11: ffffed100a38d44b R12: ffffffff81db12ff [ 956.663082][ C1] R13: ffff888063d00878 R14: ffffffff8bf5f180 R15: ffff888051c6a248 [ 956.671238][ C1] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 956.676749][ C1] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 956.682223][ C1] __asan_memcpy+0x40/0x70 [ 956.686754][ C1] bpf_mark_reg_not_init+0x5f/0x1c0 [ 956.692024][ C1] bpf_is_state_visited+0x527/0x47e0 [ 956.697470][ C1] ? diag_append_history+0x136/0x520 [ 956.702883][ C1] do_check_common+0x2848/0x5d30 [ 956.707956][ C1] ? __pfx_do_check_common+0x10/0x10 [ 956.713354][ C1] bpf_check+0x2639/0x2e10 [ 956.717890][ C1] ? ktime_get_with_offset+0x93/0x2d0 [ 956.723425][ C1] ? __pfx_bpf_check+0x10/0x10 [ 956.728301][ C1] ? bpf_obj_name_cpy+0x194/0x1e0 [ 956.733427][ C1] bpf_prog_load+0x14d6/0x1c20 [ 956.738316][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 956.743520][ C1] ? trace_cgroup_notify_frozen+0x180/0x200 [ 956.749542][ C1] __sys_bpf+0xd0d/0xd90 [ 956.753953][ C1] ? trace_cgroup_notify_frozen+0x180/0x200 [ 956.759937][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 956.764773][ C1] ? hook_file_ioctl+0x1f0/0x5f0 [ 956.769902][ C1] ? trace_cgroup_notify_frozen+0x180/0x200 [ 956.775904][ C1] ? kfree+0x4d/0x640 [ 956.779941][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 956.785914][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 956.790860][ C1] __x64_sys_bpf+0xba/0xd0 [ 956.795339][ C1] do_syscall_64+0x166/0x520 [ 956.800040][ C1] ? trace_irq_disable+0x3b/0x140 [ 956.805127][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.811410][ C1] ? clear_bhb_loop+0x70/0xc0 [ 956.816184][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.822130][ C1] RIP: 0033:0x7f52a339e0d9 [ 956.826721][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.846849][ C1] RSP: 002b:00007f52a4242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 956.855328][ C1] RAX: ffffffffffffffda RBX: 00007f52a3625fa0 RCX: 00007f52a339e0d9 [ 956.863934][ C1] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 956.871995][ C1] RBP: 00007f52a3435024 R08: 0000000000000000 R09: 0000000000000000 [ 956.880063][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.888121][ C1] R13: 00007f52a3626038 R14: 00007f52a3625fa0 R15: 00007ffdf8e15538 [ 956.896207][ C1] [ 956.899293][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 956.906623][ C1] CPU: 1 UID: 0 PID: 17821 Comm: syz.1.2907 Not tainted syzkaller #0 PREEMPT(full) [ 956.916074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.926183][ C1] Call Trace: [ 956.929513][ C1] [ 956.932405][ C1] vpanic+0x56d/0xa60 [ 956.936491][ C1] ? __pfx__printk+0x10/0x10 [ 956.941133][ C1] ? __pfx_vpanic+0x10/0x10 [ 956.945700][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 956.951055][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 956.956333][ C1] panic+0xc5/0xd0 [ 956.960127][ C1] ? __pfx_panic+0x10/0x10 [ 956.964627][ C1] __warn+0x315/0x4c0 [ 956.968676][ C1] ? __rate_control_send_low+0x60c/0x8a0 [ 956.974369][ C1] ? __rate_control_send_low+0x60c/0x8a0 [ 956.980056][ C1] __report_bug+0x276/0x570 [ 956.984722][ C1] ? __kernel_text_address+0xd/0x30 [ 956.989973][ C1] ? __rate_control_send_low+0x60c/0x8a0 [ 956.995666][ C1] ? __pfx___report_bug+0x10/0x10 [ 957.000753][ C1] ? stack_trace_save+0xa9/0x100 [ 957.005752][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 957.011197][ C1] report_bug_entry+0x19b/0x290 [ 957.016121][ C1] ? __rate_control_send_low+0x638/0x8a0 [ 957.021812][ C1] ? __rate_control_send_low+0x63d/0x8a0 [ 957.027506][ C1] handle_bug+0xce/0x200 [ 957.031824][ C1] exc_invalid_op+0x1a/0x50 [ 957.036390][ C1] asm_exc_invalid_op+0x1a/0x20 [ 957.041466][ C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 957.047776][ C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 957.067435][ C1] RSP: 0018:ffffc90000a088f8 EFLAGS: 00010246 [ 957.073566][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 957.081617][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7a60 [ 957.089642][ C1] RBP: ffff888052b80f40 R08: 0000000000000000 R09: 0000000000000000 [ 957.097663][ C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff88803399a3e8 [ 957.105730][ C1] R13: dffffc0000000000 R14: ffffffff906a7a60 R15: ffff888052b83258 [ 957.113780][ C1] ? __rate_control_send_low+0x600/0x8a0 [ 957.119494][ C1] rate_control_send_low+0x1a7/0x7b0 [ 957.124857][ C1] rate_control_get_rate+0x20b/0x5d0 [ 957.130210][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 957.136082][ C1] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 957.142203][ C1] ? local_lock_release+0x9c/0x160 [ 957.147396][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 957.153805][ C1] ? __ieee80211_beacon_get+0xdcc/0x1920 [ 957.159502][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 957.165126][ C1] __ieee80211_beacon_get+0xe2b/0x1920 [ 957.170666][ C1] ? __lock_acquire+0x683/0x2cf0 [ 957.175686][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 957.181211][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 957.187351][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 957.192961][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 957.200236][ C1] __iterate_interfaces+0x2af/0x5a0 [ 957.205503][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 957.211631][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 957.218890][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 957.225021][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 957.232130][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 957.238006][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 957.243277][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 957.249153][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 957.254442][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 957.259624][ C1] handle_softirqs+0x226/0x860 [ 957.264466][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 957.269307][ C1] __irq_exit_rcu+0xcb/0x220 [ 957.273970][ C1] irq_exit_rcu+0x9/0x30 [ 957.278277][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 957.283974][ C1] [ 957.286941][ C1] [ 957.289917][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.295958][ C1] RIP: 0010:kasan_check_range+0x1d1/0x2c0 [ 957.301755][ C1] Code: 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 00 [ 957.321428][ C1] RSP: 0018:ffffc90005877500 EFLAGS: 00000256 [ 957.327554][ C1] RAX: 0000000000000001 RBX: 0000000000000010 RCX: ffffffff81db12ff [ 957.335580][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff888051c6a248 [ 957.343599][ C1] RBP: ffff888063d00000 R08: ffff888051c6a257 R09: 1ffff1100a38d44a [ 957.351614][ C1] R10: dffffc0000000000 R11: ffffed100a38d44b R12: ffffffff81db12ff [ 957.359636][ C1] R13: ffff888063d00878 R14: ffffffff8bf5f180 R15: ffff888051c6a248 [ 957.367921][ C1] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 957.373362][ C1] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 957.378800][ C1] __asan_memcpy+0x40/0x70 [ 957.383360][ C1] bpf_mark_reg_not_init+0x5f/0x1c0 [ 957.388624][ C1] bpf_is_state_visited+0x527/0x47e0 [ 957.393980][ C1] ? diag_append_history+0x136/0x520 [ 957.399350][ C1] do_check_common+0x2848/0x5d30 [ 957.404388][ C1] ? __pfx_do_check_common+0x10/0x10 [ 957.409741][ C1] bpf_check+0x2639/0x2e10 [ 957.414234][ C1] ? ktime_get_with_offset+0x93/0x2d0 [ 957.419676][ C1] ? __pfx_bpf_check+0x10/0x10 [ 957.424507][ C1] ? bpf_obj_name_cpy+0x194/0x1e0 [ 957.429598][ C1] bpf_prog_load+0x14d6/0x1c20 [ 957.434440][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 957.439633][ C1] ? trace_cgroup_notify_frozen+0x180/0x200 [ 957.445583][ C1] __sys_bpf+0xd0d/0xd90 [ 957.449902][ C1] ? trace_cgroup_notify_frozen+0x180/0x200 [ 957.455857][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 957.460679][ C1] ? hook_file_ioctl+0x1f0/0x5f0 [ 957.465675][ C1] ? trace_cgroup_notify_frozen+0x180/0x200 [ 957.471639][ C1] ? kfree+0x4d/0x640 [ 957.475674][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 957.481597][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 957.486522][ C1] __x64_sys_bpf+0xba/0xd0 [ 957.491007][ C1] do_syscall_64+0x166/0x520 [ 957.495665][ C1] ? trace_irq_disable+0x3b/0x140 [ 957.500750][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.506875][ C1] ? clear_bhb_loop+0x70/0xc0 [ 957.511619][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.517565][ C1] RIP: 0033:0x7f52a339e0d9 [ 957.522031][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.541690][ C1] RSP: 002b:00007f52a4242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 957.550167][ C1] RAX: ffffffffffffffda RBX: 00007f52a3625fa0 RCX: 00007f52a339e0d9 [ 957.558186][ C1] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 957.566335][ C1] RBP: 00007f52a3435024 R08: 0000000000000000 R09: 0000000000000000 [ 957.574361][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.582384][ C1] R13: 00007f52a3626038 R14: 00007f52a3625fa0 R15: 00007ffdf8e15538 [ 957.590428][ C1] [ 957.594177][ C1] Kernel Offset: disabled [ 957.598522][ C1] Rebooting in 86400 seconds..