last executing test programs: 9m47.759750355s ago: executing program 3 (id=2844): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) (fail_nth: 2) 9m47.383462147s ago: executing program 3 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in6=@loopback, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r5 = accept$alg(r4, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001840)={{r5, &(0x7f0000000000)='){\x00', 0x2000, &(0x7f0000000140)={@align=0x7, {0x7ff, 0x4, 0xa, 0x8000000000000000}}, 0x1, &(0x7f0000000180), &(0x7f00000001c0)}, {[0x1, 0x3, 0xa, 0x60]}, 0x3, 0x1000, &(0x7f0000000840)=""/4096}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000018c0)=0x1) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24040081}], 0x1, 0x4000000) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=""/39, 0x27}], 0x1}, 0x8dff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="6f0b000081000000000000000000"], 0x14}}, 0x0) 9m47.213129833s ago: executing program 3 (id=2937): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000f00000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 9m47.052191696s ago: executing program 3 (id=2941): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x38}}, 0x44004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4004010) 9m46.942257911s ago: executing program 3 (id=2942): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x1d, 0x2}, @float={0xb, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x61, 0x2e, 0x2e, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000440)=""/13, 0x3c, 0xd, 0x1, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x13, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e19, @remote}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x62, @local, 0x4e23, 0x2, 'nq\x00', 0x22, 0xa, 0x5a}, 0x2c) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5c000}, 0x4000004) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd8, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4014}, 0x2000000) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x30}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000680)=r6, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000100000000000"], 0x48}}, 0x410) (async) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1, 0x0, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x3, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x20000090) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r9, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 9m46.737428536s ago: executing program 3 (id=2946): syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) (async) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) (async, rerun: 32) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000340)={0x80}) (async, rerun: 32) unshare(0x40000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_LINK_NETNSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 9m31.64968512s ago: executing program 32 (id=2946): syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) (async) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) (async, rerun: 32) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000340)={0x80}) (async, rerun: 32) unshare(0x40000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_LINK_NETNSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 9.958393306s ago: executing program 4 (id=7186): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x1003, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x20002000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x3a, 0x0, 0x4, 0x0, 0x7, 0x50, 0x61}}}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000000c0)=""/153, &(0x7f0000000080)=0x15) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 9.355097412s ago: executing program 4 (id=7194): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000001000010028bc70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cf2020000000000140003006e657464657673696d300000000000000800280055220000480016804400018040000c"], 0x84}, 0x1, 0x0, 0x0, 0x8091}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x408, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000140)=0x3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f0000000100), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffd5f, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="e8000000130008002bbd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100000000900000008000400090000000400140048001980000002001400040015c7ff1c01ecde5a79184f4f08a921fc140005009bad55403f349f2588277f85a6e953b5140004001f0b14f7aaf9b0bcb6e696ccdba8bebf1f00220029fbbec5766407616c7f0d2aafc0ee71aef2eb4365335ef37729220000000500", @ANYRES32=r4, @ANYBLOB="1400140076657468305f766972745f77696669001600220043313c25d0cdae5fedae2e27c729ad47fdc84b39f4059468ef6443e7000019800000060009000000000005003c7d5eba5464aaecf77934092e8ccc4a00000600f8000000180034801400350076657468305f746f5f626f6e640000000d4f76489074c1380764b1fa8ae674257b2fd9600d1eb1ba638f0a0c3ccd7d2706fe673af6f9b7abd6fac67a5d2c14c1"], 0xe8}, 0x1, 0x0, 0x0, 0x4040840}, 0x4044) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000007000000040000000108000001000000", @ANYRES32=r5, @ANYBLOB="b415f016c440e611a1752beb730100fcd4000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x18}}, 0x24000051) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)="a77370f191d70dbd1e11381619f679afb22c334438ce0655d5a3ac36520ae84e73b5438d6abe933e5aac9f57fac814e2889e60913d2c9994de83d186aec1bac1ecdb82505b707177802272089a3c0f028a7e44d6a8d42fcfaac5895f76bae7c01a05c2f134a02fdb059eb6b19ce9e35e008197998786e2db3240c97fb3f01ebb32d23142a95d929efda8f9c46579624073c012123b56a6714918780a28fc95a26bd5ba995e342cc638cce86f221e4791e503df16420039a9b70b8e5168d2463d2083207b363bda2aeed67eb35febe503e4465270ef8d37e912cd0dfdcdbc88c2354c3a868282cf4d000000000000"}, 0x20) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000009000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fe25634c0d1724b3636f7a36c5c8e71c"], 0x48) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1084}, {r9, 0x47499ed3816fcef0}], 0x2, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) ioctl(r1, 0xe83, &(0x7f0000000040)="99fbdc54840e1b691d17b55c5d11dbb8787bec47135803b36625c4469b7088c94ad68828470b0f3128eb75b9772bea175c7d36544a5dd12dde8377fe6e7ab97f40792311985e200b878084240974") r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r10, 0x0, 0xcd, &(0x7f0000000580)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "52e4cd2ef5292156c059096777083003030fec03c16c9ce30e4d037ecd2ad1af", 0x8, 0x3, 0x7, 0xe}, 0x3c) 8.696402442s ago: executing program 5 (id=7202): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x3d, 0x4, 0x8, 0xffeffffc}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x648c205b1cae7a70}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8001}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x638}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0x44a9cfece8537212, 0x2}}}}]}, 0x40}}, 0x0) 8.552055639s ago: executing program 0 (id=7203): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061186e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac706cfb9169be, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="974501000000000001008cc5ffffff", 0xf}, {&(0x7f0000000000)="38b993aad48c4171e6b0b8494f", 0xd}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0xc884) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000e9fffffeffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffefff0000000001000601000000004400050000001100000000000000000000000001000000003c0000000200000000000000000000000000000000000001060000000403000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r6, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="600000000206010100940000000000000100000002095473f014000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f727400000012e35b4d5c88ea47868d3bd42251fa6e3bed2682147a38bb24ec9241b6"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4000) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="b39c86a67ca32329d30b7913595b5b4137708c88baa8fb4272ebe688c5bae171f13f1d2142b8e0ae2f127d46", 0x2c}, {&(0x7f0000000180)="3857e42fa35ab8157d7c9a0ca163b24d1559bc3ad321238e8fdd61e1baa6a04f67486df8bbd959346b37a07cb9137eb485626be6cae5de184dd451061cd2c5062bff4f5f3a2e", 0x46}, {&(0x7f00000002c0)="59a9963b64157ce2a81fa7565c1a814c88976d5ddc", 0x15}, {0x0}], 0x4}, 0x10000) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8.406465572s ago: executing program 4 (id=7205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0000) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000002540)=0x1) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000280), 0x4) (async) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000280), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000300)="da094cd98f13885ef9", 0x9}, {&(0x7f00000003c0)="a4c95ee2839573e75ebcf2538d08f2fc1804421920ecc95e78b887e2d36658acbd981dafc7340521d351a8b30bcd0fe02b13c12fd0c41c0cc718e528fee3088c2aaba1ec43e6078000d3936022232bd5bbaf0ebec8d84f74b50240158281d9b2fa7d5e203ab21486afc30fe549719bed41d6c91c2a91ddf4ba83488744d5", 0x7e}, {&(0x7f0000000740)="788d70a2a1bd00787114c57af429322cd6ffc08f8009eec413cd8667cba1f9a58a57e5e4119f2043b35445b5a39faddc951417d6b4e24e909feea040bd039e86e382559d9a4a63bcad249a", 0x4b}, {&(0x7f00000007c0)="dd10bd5f7d601368544e2b8bea08c20dd8309100ec1bd200f3cab62610480b78750dec4b86f3d5a56b1677022ffa218151d266273d71196c6330dca36efd3e34f194e6291ca4dd24fb315a4ce1c02753b4980860c3ac98577d5af25bb55161602dffb8b0844e1c2c3052f20fe27515609e6186da45106ddb1ed6db6eda3d2e117a1e97ca6995760fb2b8faa4235cb86266f02e751dfd321132eefe1a4012fc058613c340e774d1944bd068feb204bb11011df69133a3cffcbafb9de8785da4ea434f0b5fb5668b5599a9d628157c5b37d2c32b96e78933f8b17b073cd272a5033d1c72b8e9", 0xe5}, {&(0x7f00000008c0)="63d4e9fe4cd4f0e7b4763c1bdb618ad36ce30ba5b8f5a45a8ca1c3cb0ee98c447c4f9dff0dad0146a02ccf0e99e2a1647ac26e0c28008132d2", 0x39}, {&(0x7f0000000900)="dec2b6c3df233ee545095ba12439f4a8dc048056265448f0767bfb2dd8b237de8e073b7b397b5f386293ca4009e416f1f76c47e30405b887fd356c0e6fd724cb1f3a2d21503c38ce700bed1b24ebd2ea367ea255b6156bc76fe94b1597600f8fb44f5c466a315e3a68f7b7adb5437d794dff095d6d6faa4d322b4fb47a6b3247950ac69189ea75e0eea66aa9c31e3073081b79f3679c781b097f149c3c14df2561f8bfdbc4d3e1c5e75b663115eff1f7a29b6d0c566d3d364a38a730f381d1ea5fc0d9a8adb3bc1dbf544b58fdbb7b92f39be4e3e827e3cf48bd6fde298b4059456d3f7e8def2c92e98efaaea5042f336eb0", 0xf2}, {&(0x7f0000000a00)="ee63637902d73373772b909d19eb90288d8ff474f3a27bd75d1f6dd6f061d7069377849be8a9097dba4e0c7f90e7cee7c643e830347f99b3bc348d7c29529e38e69ffa7b1678a851c64494520ad59c323091a28fbf42453f01d711e6f13b21eb076248177b836328113759de0c240e6c2d189ac2916b9ce7fe874c01cebbc07647d4cd37a62ba8419b6c991e2b23058fc8bb8b0e597f034c83cbf5f32e6143eb7b462b324f0697a87bceb5c12448a9455aac5b911fe0b3fdc3ef2535", 0xbc}, {&(0x7f0000000ac0)="b29f41bb03156de050adb95a8d18ab20c450116093029b0e2021f7efe792d10b96accefc2fbb59d16bc0fc6207c5302fb3512596d404cf70fb201d74fc1469fa7a2ad8a5f08d793efdb063e59afa054037931679e0d43aa9f69f0e1319d1119d0b30ca626719f7e0984916093d3329c5abf091c4588bd05d7fb9d5296d096353b2f26bfcded58e0b3b77884276096ecfeed5e6ada87c5c19d421d4dd77f46e4f5ea03cb9a311f1150dc7f3b6d39db51a442aeca752721ca89d1db9135e5e634a62b41e8e16bdbe444e1fdd16543d49f53bd680376001e7348d588d6406", 0xdd}, {&(0x7f0000000bc0)="0a474fb8c07b68efdb714eeb2f2150b27f2449b7361f6b2b827b660534647afebfb0211b45dc3478", 0x28}], 0x9) (async) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000300)="da094cd98f13885ef9", 0x9}, {&(0x7f00000003c0)="a4c95ee2839573e75ebcf2538d08f2fc1804421920ecc95e78b887e2d36658acbd981dafc7340521d351a8b30bcd0fe02b13c12fd0c41c0cc718e528fee3088c2aaba1ec43e6078000d3936022232bd5bbaf0ebec8d84f74b50240158281d9b2fa7d5e203ab21486afc30fe549719bed41d6c91c2a91ddf4ba83488744d5", 0x7e}, {&(0x7f0000000740)="788d70a2a1bd00787114c57af429322cd6ffc08f8009eec413cd8667cba1f9a58a57e5e4119f2043b35445b5a39faddc951417d6b4e24e909feea040bd039e86e382559d9a4a63bcad249a", 0x4b}, {&(0x7f00000007c0)="dd10bd5f7d601368544e2b8bea08c20dd8309100ec1bd200f3cab62610480b78750dec4b86f3d5a56b1677022ffa218151d266273d71196c6330dca36efd3e34f194e6291ca4dd24fb315a4ce1c02753b4980860c3ac98577d5af25bb55161602dffb8b0844e1c2c3052f20fe27515609e6186da45106ddb1ed6db6eda3d2e117a1e97ca6995760fb2b8faa4235cb86266f02e751dfd321132eefe1a4012fc058613c340e774d1944bd068feb204bb11011df69133a3cffcbafb9de8785da4ea434f0b5fb5668b5599a9d628157c5b37d2c32b96e78933f8b17b073cd272a5033d1c72b8e9", 0xe5}, {&(0x7f00000008c0)="63d4e9fe4cd4f0e7b4763c1bdb618ad36ce30ba5b8f5a45a8ca1c3cb0ee98c447c4f9dff0dad0146a02ccf0e99e2a1647ac26e0c28008132d2", 0x39}, {&(0x7f0000000900)="dec2b6c3df233ee545095ba12439f4a8dc048056265448f0767bfb2dd8b237de8e073b7b397b5f386293ca4009e416f1f76c47e30405b887fd356c0e6fd724cb1f3a2d21503c38ce700bed1b24ebd2ea367ea255b6156bc76fe94b1597600f8fb44f5c466a315e3a68f7b7adb5437d794dff095d6d6faa4d322b4fb47a6b3247950ac69189ea75e0eea66aa9c31e3073081b79f3679c781b097f149c3c14df2561f8bfdbc4d3e1c5e75b663115eff1f7a29b6d0c566d3d364a38a730f381d1ea5fc0d9a8adb3bc1dbf544b58fdbb7b92f39be4e3e827e3cf48bd6fde298b4059456d3f7e8def2c92e98efaaea5042f336eb0", 0xf2}, {&(0x7f0000000a00)="ee63637902d73373772b909d19eb90288d8ff474f3a27bd75d1f6dd6f061d7069377849be8a9097dba4e0c7f90e7cee7c643e830347f99b3bc348d7c29529e38e69ffa7b1678a851c64494520ad59c323091a28fbf42453f01d711e6f13b21eb076248177b836328113759de0c240e6c2d189ac2916b9ce7fe874c01cebbc07647d4cd37a62ba8419b6c991e2b23058fc8bb8b0e597f034c83cbf5f32e6143eb7b462b324f0697a87bceb5c12448a9455aac5b911fe0b3fdc3ef2535", 0xbc}, {&(0x7f0000000ac0)="b29f41bb03156de050adb95a8d18ab20c450116093029b0e2021f7efe792d10b96accefc2fbb59d16bc0fc6207c5302fb3512596d404cf70fb201d74fc1469fa7a2ad8a5f08d793efdb063e59afa054037931679e0d43aa9f69f0e1319d1119d0b30ca626719f7e0984916093d3329c5abf091c4588bd05d7fb9d5296d096353b2f26bfcded58e0b3b77884276096ecfeed5e6ada87c5c19d421d4dd77f46e4f5ea03cb9a311f1150dc7f3b6d39db51a442aeca752721ca89d1db9135e5e634a62b41e8e16bdbe444e1fdd16543d49f53bd680376001e7348d588d6406", 0xdd}, {&(0x7f0000000bc0)="0a474fb8c07b68efdb714eeb2f2150b27f2449b7361f6b2b827b660534647afebfb0211b45dc3478", 0x28}], 0x9) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffc, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010102, 0x10000}, {@private}, {@dev}, {@remote}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc0100"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0xa0000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xf}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000640)=""/114}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012) (async) sendmmsg$inet6(r8, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="019fc89d49"], 0xd) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) 5.484591031s ago: executing program 0 (id=7206): unshare(0x24060400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x2164, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13, @ANYRESHEX=r1], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffe", 0x32}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000007c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3734fe035bbb095873048b70cf3c81901427217f9546cfbe532291f632edf79d157ed57a89cddffcc62b527b3100a0726ea0bb4d2bdcd3a8cbe21fa279931ca4ea52669810985bb9b43", 0x8c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14080000", @ANYRES16=r10, @ANYBLOB="330728bd7000ffdbdf254a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 5.465572937s ago: executing program 1 (id=7207): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x15, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaac3156beaa737920f3edd42aaaaaa080045000024fffd00a4a7119078ac1e0001e0000001000017c100"], 0x0) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0x1, 0x70bd2c, 0x25dfdbbe, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0xfff2}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0x4, 0x0, 0x2, 0x1, 0x4}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x2004880) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000500)=@xdp={0x2c, 0x2, r6, 0xd}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r11, @ANYBLOB="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"], 0xdc}}, 0x0) getsockopt(r2, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, {0xa, 0x4e21, 0x8, @private2, 0x6}, 0x0, {[0xda1b, 0x1, 0x1, 0x8, 0x200, 0x1000]}}, 0x5c) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r12, &(0x7f0000000000)='syz0\x00', 0x1ff) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000180)={0x0, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x108) 5.362717592s ago: executing program 5 (id=7208): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41100}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000740)=ANY=[@ANYBLOB="dff1cabf40400c5e96d333336f2d4ebe08ff8da73816b5989f29d87106924d49b72562edba6c1e73513eb0e7c70690b193ef63e037ebc7bf88231c245be66fe243c735241e344fbff76029341090face4e142687aa7dfcbe3a2f34c2b4d09c35220479c7afddf94ee337af0520ce45faba9a95d4f547f63a7c5bc6a07d12dd882f52ce98e3ab512af46f79c9b0f6cc23569ec48e68f66c2c977578e35d293dd1f2ee0f6ad1b700750444dbfd0a1c50c756dc808c420c"], 0x18) unshare(0x6020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={0x0, r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) r4 = socket$kcm(0x10, 0x2, 0x0) connect$bt_rfcomm(r1, &(0x7f00000002c0)={0x1f, @none, 0x8}, 0xa) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xfffe}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32=r0, @ANYBLOB="deb3af21db8f556e326ac2dde24c350bc3ae962be84cdd948af293aa2dad00cc8c09605e71e87579b288ab23a6198fa4623f1beea18a2c7dea19067a17df9d737f62fb0977bdfcfdc4f2f270304aee8f47062a77767cd9edbea3577e7722d30fd3f8bda7d755f5", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=0xffffffffffffffff, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="1800000072006bcd9e3fe3de6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3800ca494ed6000000009f0160052250681f04d6b0457776488f1296688108ca0568fb1f5dc8b0b2d58aafc4f6bc964a4e27cffde928badacf3887c797cdab6f5cd0544026bf34bb6ebd4e351159f3a4fe802db3572645e60092e6732e6a89641b4014bd908fae612e8698aa06a61c", @ANYRES16=r8, @ANYBLOB="0000000000000000180012800b00010069703667726500000800028004001200", @ANYRESHEX=r6], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20040044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xdb, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x75bf5aedbc5aea4d}], 0x1}}], 0x1, 0x4c040) 5.113598292s ago: executing program 4 (id=7209): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002, 0x800, 0xffffffffffffffff, 0x4}, 0x50) close(0xffffffffffffffff) close(0x3) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r0, &(0x7f0000000100)="70256e83e2e5d57c68214e26", 0xc, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) 5.092339535s ago: executing program 5 (id=7210): r0 = socket(0x28, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000020603000000000000efffff06000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket(0x28, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000020603000000000000efffff06000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) 5.041412551s ago: executing program 2 (id=7211): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xacdc1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a500000000c1c10f5887eba988cc0d8c3a1100a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000240003801c4000800c00018006000100d10300000c000440000000002df31ab3000300801400000011000131dc22dc4026d9e449afc039f30785e7fc8466d34d09e0244d9d0f5b182ac7573fcb04739cd4b921de8fddccd673afacb25669ae0f0b1e0f17176d5da8f4eca282d6b176df81e7d974df421aa8ec4ea907b1433e4e86d7718ab32a1bc4bde383aed6ba0442d5c944e664a447cc357c536ba1613b706a36e5b4936e0659a0578b6b107cd0d0f24d074bd640c6249b0bab1ba91065718cbe7c4cf4648c24831eb7ad5aef9f"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000020000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000040a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000200"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r4}) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async) bind$inet6(r8, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) (async) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) socket$rxrpc(0x21, 0x2, 0x2) 4.986759594s ago: executing program 0 (id=7212): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r3 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 4.877851344s ago: executing program 2 (id=7213): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000001010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 4.754462095s ago: executing program 2 (id=7214): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f0000000380)="000039a4c1", 0x5) (async) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) (async) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)="0000144500", 0x5}], 0x1, 0x9) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x40000, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x70}}, 0x24000000) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080) 4.511446116s ago: executing program 2 (id=7215): r0 = socket(0x2b, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1f000000000000dc7b00000000000010000000004baf3449de104c3e97ae1bf19902000141d41fd2e8cd62abe1"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xc3}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x408, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000140)=0x3, 0x4) 1.14528466s ago: executing program 4 (id=7216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0x0, 0x1ed, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0xfffffffe, 0x200089ff]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "2abf777d4c5b62f4", "e58112aace4cf4c4e9a03848fab4d4c1646c212ec952cc730906b256c4e61653", "fb9b68c7", "c9f9f5d7f02e30d4"}, 0x38) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.101910776s ago: executing program 0 (id=7217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) pwrite64(r1, &(0x7f0000000040)="44ba171c4f9dd176e7756551dd459bb7303693d0e9f4fd55d2c265c8d31907d8e9d828ab246e6e0a718b5c6e58792589daf358a5206cb09463ccffc694ccadc9dfc8bcc2f4cbe17223aa53f4ad8741b2b30b8e287b4f0cfb91a2ddbdc0e6605ac5c1b5c8bbcb40f1df5375384bc784376d60313ce741dc369985b84a71db07d49bbfb71227045288424ccf699f53c6f035e21b318e1c9e5a9a0097d83355e18a63f262f59fe31978e3f5a1caa362f709bff3c700a9f7b4433f228037c61b5fd9058692a032c74dc0d8debaaa122b", 0xce, 0x8) 1.034707861s ago: executing program 5 (id=7218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 1.03362044s ago: executing program 2 (id=7219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000080)=[0x3, 0xfffffffffffffffa]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0019000e"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x2, 0xfffffffc) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, r6, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x0, 0x4000, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x8, {[@eol]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000080)=[0x3, 0xfffffffffffffffa]) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="16000000000000000100000007"], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0019000e"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x2, 0xfffffffc) (async) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, r6, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x0, 0x4000, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x8, {[@eol]}}}}}}}, 0x0) (async) 1.033077352s ago: executing program 1 (id=7220): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket(0x10, 0x80002, 0x2) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0707070000002bbd7000fddbdf2505001a00ac1414bbddffffffffffffff00000000fe80000000000000000000000000000c260014ca"], 0x38}}, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x5, {{0x2d, 0x4, 0x2, 0x1b, 0xb4, 0x68, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@lsrr={0x83, 0x13, 0xc3, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}, @cipso={0x86, 0x65, 0x2, [{0x6, 0xc, "159a7b19a71b89640f6e"}, {0x0, 0x3, "8c"}, {0x6, 0x5, 'Or1, &(0x7f0000000340)='F\x00', 0x80, &(0x7f00000006c0)={@align=0x2, {0x7, 0x1d2, 0xff, 0x101}}, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x9}, 0x2, &(0x7f0000000980)=[{0x2, 0x8, &(0x7f0000000780)='wg2\x00', &(0x7f00000007c0)="d2ab6970346cf5d604a9095f9c01d1bc34bb49c701a838b261bea09353a601f861a9100522635fcc1cfbb8a94040715b25b28865f1fe211141d55e351e11ef3b8fdab90656968f7dd96b6f02733c1c9da979157233c836ff72f0de3a2db85478034848ab61b0f10e18177b212b39072df21f8d7d085f4b92d6bae5c6f75889cb3e9bb9445e444384bb5d40d091962312867da8f41314d9ace4726da4f6a474dd198d6ee42415b103b64247f39285ad08ea4fa4d47932517478119429", 0xbc}, {0x1, 0xff, &(0x7f0000000880)='&/)\x00', &(0x7f00000008c0)="a745481e2346b5b305cf5b0c77c97440b8fa6435b5e6acf7fdcc59179756c2f17cb15d613b7b4875a9808115214b34133a64f7eb862e550478c54dd77d950b2ab5b4bb3bd5bfb29177027a8fed7989b0e4c3dfd19a5c120465d62c7001c3f7416742f1503c40ad8afdb2d11c004fba6759c2f50ca31dd0eecbd88e277d2bb1204d33ba", 0x83}]}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x80000001}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000040)={0x20000014}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x17, &(0x7f0000000ac0)=@raw=[@exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x3, 0xb, 0x3, 0x10, 0xfffffffffffffffc}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x13}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0xfffffffb, 0xcd, &(0x7f00000003c0)=""/205, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x9, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000580)=[{0x1, 0x1, 0x3, 0x1}, {0x2, 0x3, 0x7, 0x2}, {0x3, 0x2, 0x1, 0x5}]}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r8, r9, 0x17, 0x0, @void}, 0x10) r10 = socket(0x1, 0x2, 0x0) getsockopt$sock_buf(r10, 0x1, 0xe, &(0x7f00000002c0)=""/250, &(0x7f0000000400)=0xfa) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) 846.493865ms ago: executing program 5 (id=7222): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x22, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080010000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) recvmmsg$unix(r2, &(0x7f0000001700)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/181, 0xb5}], 0x4, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/93, 0x5d}, {&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000a40)=""/170, 0xaa}, {&(0x7f0000000b00)=""/180, 0xb4}, {&(0x7f0000000bc0)=""/24, 0x18}, {&(0x7f0000000c00)=""/144, 0x90}], 0x7, &(0x7f0000000d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/218, 0xda}], 0x1}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001040)=""/239, 0xef}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/103, 0x67}, {&(0x7f0000001200)=""/152, 0x98}], 0x4, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/75, 0x4b}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/193, 0xc1}], 0x4}}], 0x5, 0x40000000, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030029bd70000e00000001000000080001009f823df97131615a7a1e9acfe522c02e2cf5ebff99ecbfae475f2ca0feb4b93c96c980e2bf20dabf26419fcb37e9b98a30e1e9a6f0a9ee929c670b3a6a512a06826020db83919dbf01c7574d19bd3d1c93539be83aaec7f81754aaf537ccf13b0c58d0eca9825d7e0607fc7a9c78a4d4b0c46128f702be721b16", @ANYRES32=r3, @ANYBLOB="08000200000000000c0003000400000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 795.389126ms ago: executing program 0 (id=7223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getpeername$l2tp6(r5, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000040)=[0x1, 0x9]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@mcast1, 0x4e21, 0x7, 0x4e24, 0x6, 0x8, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0x8, 0x6, 0x4, 0x4d091f28, 0x9, 0x5, 0xffff, 0x6622}, {0x8001, 0xfff, 0x6f0f, 0xb}, 0x2, 0x6e6bb9, 0x2, 0x0, 0x3}, {{@in6=@mcast2, 0x4d6, 0xff}, 0x4, @in=@private=0xa010101, 0x34ff, 0x0, 0x1, 0x3, 0x8, 0x7, 0x1ff}}, 0xe8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4044884) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300400000fcdbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="03b7be016ffdffffffd773c7ce8ff0a8b4f4c6a51ca1d5f36251ac7b5345f11434b83d88e1fc8ba546197ef3ffd4b8ed8322401db7d8603a0d33225d5d47257447f22a163c2da3fd2b8826968594954bdf0cc59edcd7dd8d0bde22094ff47678bd1f81123f9ac04b0cf36764ab28e58fcaa58c768473d97cf7b6582688aa9b2c910c9c1e9000d79a88468d3071a69fb1929ad652a6dea2d86c64ac477c0fa0911ba678fc6d2cfc52854a9051aea4916b44d01f3fa25bb3045882beae9528c2689df058d3dc00000000000000000000e20000001638d406598108c7fef3509e49be2463cff61185f704cb5ee6baa77c9efec7070e28935ec3f685dd0d63ce3f8fefe792c1417e5bf4a3ea2a27e3d9c58d7cc30043944d7d7f763d71bbc501c5701dd23235dae692aaa82081e5e2a9822326c65c0de845cb006365f40867995302f5a07da3db23724f9a96469db4048d6b466375b1c34bb14219fa6a5173f8d4c2f6d9e0f0345b27438bf78f17e059"], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 583.771979ms ago: executing program 1 (id=7224): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000002010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 496.923232ms ago: executing program 1 (id=7225): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES8=r1], 0x44}}, 0x8000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x0, 0xe8, 0x1f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x8000, {0x62f}}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0xff, 0x6, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x3f7a3df749853847, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, {[0xff, 0xff, 0xff, 0xff]}}, 0x8000, 0xd, 0x3, 0x52a0, 0xdb, 0x1, 'veth0_vlan\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x188}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "69c3678d11539641f2beb920f3683faeb898b5d19506512a082a560b3b87"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x428) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)={'bridge0', 0x32, 0x36}, 0xa) 319.493981ms ago: executing program 1 (id=7226): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r3, 0x0, 0x20000000002) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x80480a1) 239.416626ms ago: executing program 0 (id=7227): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffd, @multicast, 'veth0_virt_wifi\x00'}}, 0x1e) r3 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 165.224115ms ago: executing program 4 (id=7228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmsg$inet(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)="7fb8", 0x2}], 0x1}, 0x40400c1) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000180)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0xc, 0x4, 0x7, 0x6, 0x1], 0x6, 0x6}, {0x2, [0x4, 0x2, 0x4, 0x3, 0x0, 0x2], 0x1, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r6) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f9ff00000000000008007000fdccdf250800e600020000007aa036a79201a661f830580d57e875810ff6377c1fbcb76013b2233e4e842750413da25fd24865c01e93d69737e7541dee3a5219ffaed075fa1ecbb092d47b2701e06fd941fdd199f2a7795b4179152a39d8ab93f36217bffa1ecccff07156fa9156fb4814092a1d"], 0x18}, 0x1, 0x0, 0x0, 0x6000}, 0x40408a1) 51.349814ms ago: executing program 2 (id=7229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x4, "1fe473a8"}, &(0x7f0000000700)=0xc) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, &(0x7f0000000040)="d93937f5a4264335cdef726eb393eb56a2ec451dc4ecb1f447fac3129349ab1be7bb6772192b174c3443191a0c2a997d70b6cc8cbbb600796b48b39e808cd5f73f2c20ad2db514ded8a28b9cfcdfc11c1f7a8c44330a1db2c47a58a96f2b41f27ad6ed51f2e8dc8ae1f3116f11fc10710b926e7906be81a1749e9713a65f214e28fa14dca5d1ee203643176e4de37cd60b9f4d28ec3753ca01c9120519bf5b1b1a3be60c32b4453d9895eeb7a9a5d1ef0b7fc0aa8f4f3f50205bf5a16619a70224821ffd8348e85b7339c33738d64b6fc7", 0xd1, 0x4, &(0x7f0000000200)={0x23, 0x46, 0x6, 0xc5}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0020b1141a7c71c4f894ec4eae000000004e00003b306d5be1470f8ec77b688358f69344eac45ff9acb55fd947a2a675cc4ef6d514f26fc6c0014dddc12d5d8aca9fb740599c1524bf0bc61787fa3ea806264c10bc31027d0ee1b6c21201c2f378319d4090ac95e7f8189629f8be881333f9627fbb6774070f8c748c51278e0750c77a1bf04883", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000001000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7e}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000380)=0x80000080, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) listen(r5, 0x0) sendmmsg$inet6(r5, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r7}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@empty, @private0, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000040000a60000000500000002010100", @ANYRES32=r3, @ANYBLOB='\n\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0200"/13, @ANYRES32, @ANYBLOB], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="060000000000000000000000008000004da10000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, r11}, 0xc) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES64=r12, @ANYRES32=r12, @ANYRES32=r5], 0x80}}, 0x4000805) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 0s ago: executing program 5 (id=7230): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x2b3c2a1e4a4c63e8, 0x800, 0x7ff, 0x6}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), 0xffffffffffffffff) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): 1238.832784][T19667] dvmrp0: left allmulticast mode [ 1238.939122][ T5673] Bluetooth: hci4: command tx timeout [ 1239.175527][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1239.325201][ T6343] smc: removing ib device syz0 [ 1239.467136][ T6343] smbdirect: ib_dev[syz0] removed [ 1239.545621][T29229] __nla_validate_parse: 9 callbacks suppressed [ 1239.545646][T29229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1239.587958][T29229] nbd: must specify at least one socket [ 1239.597871][T29229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1239.625218][T29229] nbd: must specify at least one socket [ 1239.653638][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1239.670622][T19667] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1240.694083][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1241.023892][ T5673] Bluetooth: hci4: command tx timeout [ 1241.735508][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1242.773842][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1242.945653][T19667] bond2 (unregistering): (slave gre2): Releasing backup interface [ 1243.012251][T19667] bridge1 (unregistering): left promiscuous mode [ 1243.021232][T19667] bridge1 (unregistering): left allmulticast mode [ 1243.029106][T19667] team0: Port device bridge1 removed [ 1243.112855][T19667] bond10 (unregistering): (slave bridge10): Releasing backup interface [ 1243.121701][ T5673] Bluetooth: hci4: command tx timeout [ 1243.128450][T19667] bond10 (unregistering): (slave bridge10): the permanent HWaddr of slave - 2a:ac:8e:a9:57:b5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1243.156975][T19667] bond0 (unregistering): Released all slaves [ 1243.176182][T19667] bond1 (unregistering): Released all slaves [ 1243.191761][T19667] bond2 (unregistering): Released all slaves [ 1243.212961][T19667] bond3 (unregistering): (slave veth7): Releasing active interface [ 1243.221754][T19667] bond3 (unregistering): Released all slaves [ 1243.237468][T19667] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1243.246966][T19667] bond4 (unregistering): Released all slaves [ 1243.270895][T19667] bond5 (unregistering): Released all slaves [ 1243.289280][T19667] bond6 (unregistering): (slave lo): Releasing backup interface [ 1243.297588][T19667] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1243.310342][T19667] bond6 (unregistering): Released all slaves [ 1243.328243][T19667] bond7 (unregistering): (slave veth9): Releasing active interface [ 1243.338061][T19667] batadv0: entered promiscuous mode [ 1243.347203][T19667] bond7 (unregistering): (slave batadv0): Releasing active interface [ 1243.357190][T19667] bond7 (unregistering): Released all slaves [ 1243.371962][T19667] bond8 (unregistering): Released all slaves [ 1243.387182][T19667] bond9 (unregistering): Released all slaves [ 1243.410541][T19667] bond10 (unregistering): (slave team0): Releasing backup interface [ 1243.420320][T19667] bond10 (unregistering): Released all slaves [ 1243.435705][T19667] bond11 (unregistering): Released all slaves [ 1243.457026][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1243.749530][T29262] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1243.813526][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1243.962213][T29265] Bluetooth: MGMT ver 1.23 [ 1243.988224][T29274] batadv_slave_1: entered promiscuous mode [ 1244.080043][T29283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6072'. [ 1244.138749][T29279] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1244.190010][T29049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.199924][T29049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.228938][T29049] bridge_slave_0: entered allmulticast mode [ 1244.260320][T29049] bridge_slave_0: entered promiscuous mode [ 1244.385713][T29283] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1244.420699][T29049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.450309][T29049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.473291][T29049] bridge_slave_1: entered allmulticast mode [ 1244.482499][T29049] bridge_slave_1: entered promiscuous mode [ 1244.499159][T19667] tipc: Left network mode [ 1244.534814][T29282] batadv_slave_1: left promiscuous mode [ 1244.672417][T29049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.690692][ T30] audit: type=1800 audit(1783468128.010:12): pid=29302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6074" name="memory.events" dev="tmpfs" ino=3052 res=0 errno=0 [ 1244.759257][T29049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.795471][T29307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6075'. [ 1244.805127][ T30] audit: type=1804 audit(1783468128.020:13): pid=29302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6074" name="/newroot/593/memory.events" dev="tmpfs" ino=3052 res=1 errno=0 [ 1244.855352][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1245.002371][T29049] team0: Port device team_slave_0 added [ 1245.053138][T29049] team0: Port device team_slave_1 added [ 1245.206372][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1245.281270][T29325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6082'. [ 1245.351436][T29049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.363729][T29049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.372909][T29334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1245.417069][T29049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.450473][T29049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.461600][T29336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1245.464768][T29049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.549560][T29049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.893673][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1245.993995][T29049] hsr_slave_0: entered promiscuous mode [ 1246.026613][T29049] hsr_slave_1: entered promiscuous mode [ 1246.044166][T29049] debugfs: 'hsr0' already exists in 'hsr' [ 1246.050063][T29049] Cannot create hsr debugfs directory [ 1246.407325][T29366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6090'. [ 1246.429708][T29366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6090'. [ 1246.479976][T19667] hsr_slave_0: left promiscuous mode [ 1246.940249][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1246.961380][T29386] No such timeout policy "syz0" [ 1247.054011][T29390] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6095'. [ 1247.216669][T29395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6096'. [ 1247.483576][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1247.746559][T29403] lo speed is unknown, defaulting to 1000 [ 1247.784602][T29403] lo speed is unknown, defaulting to 1000 [ 1247.833249][T29403] lo speed is unknown, defaulting to 1000 [ 1247.861476][T29403] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1247.920181][T29403] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1247.973535][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1247.995859][T29403] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1248.144414][T29403] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 1248.206719][T29424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6102'. [ 1248.357963][T19667] IPVS: stop unused estimator thread 0... [ 1248.378989][T29403] lo speed is unknown, defaulting to 1000 [ 1248.418864][T29403] lo speed is unknown, defaulting to 1000 [ 1248.457305][T29403] lo speed is unknown, defaulting to 1000 [ 1248.489106][T29403] lo speed is unknown, defaulting to 1000 [ 1248.606817][T29403] lo speed is unknown, defaulting to 1000 [ 1248.618006][T29430] netlink: 'syz.0.6103': attribute type 4 has an invalid length. [ 1248.620996][T29403] lo speed is unknown, defaulting to 1000 [ 1248.654173][T29403] lo speed is unknown, defaulting to 1000 [ 1248.715042][T29430] netlink: 'syz.0.6103': attribute type 4 has an invalid length. [ 1248.811866][ T8201] lo speed is unknown, defaulting to 1000 [ 1248.822005][T29439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1248.832221][ T8201] syz2: Port: 1 Link ACTIVE [ 1249.014129][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1249.555483][T29466] netlink: 'syz.2.6112': attribute type 1 has an invalid length. [ 1249.761395][T17431] IPVS: starting estimator thread 0... [ 1249.772834][T29466] bond1: entered promiscuous mode [ 1249.805573][T29466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1249.888139][T29478] IPVS: using max 26 ests per chain, 62400 per kthread [ 1250.053600][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1250.194489][T29484] syzkaller1: entered promiscuous mode [ 1250.200684][T29484] syzkaller1: entered allmulticast mode [ 1250.256292][T29049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1250.305885][T29049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1250.440675][T29049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1250.490959][T29049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1250.531362][T29049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1250.578597][T29049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1250.623851][T29049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1250.668196][T29049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1250.682525][T29504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1250.713301][T29503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6118'. [ 1250.887300][T29517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6122'. [ 1251.019790][T29519] syzkaller0: entered promiscuous mode [ 1251.029481][T29519] syzkaller0: entered allmulticast mode [ 1251.049799][T29522] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1251.094029][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1251.124538][T29049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.350004][T29541] netlink: 'syz.5.6126': attribute type 2 has an invalid length. [ 1251.362478][T29541] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6126'. [ 1251.675425][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6127'. [ 1252.133543][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1253.174053][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1254.213553][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1255.261092][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1255.801627][T29049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.850544][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.857826][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.905499][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.912715][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.964970][T29610] x_tables: duplicate underflow at hook 2 [ 1256.007030][T29618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1256.254062][T29630] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6134'. [ 1256.293558][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1256.328068][T29630] tipc: Resetting bearer [ 1256.418478][T29642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6136'. [ 1256.440886][T29645] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1256.615177][T29642] ipvlan2: entered allmulticast mode [ 1256.629299][T29642] erspan0: entered allmulticast mode [ 1256.955739][T29663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6140'. [ 1257.239297][T29667] syzkaller0: entered promiscuous mode [ 1257.252149][T29667] syzkaller0: entered allmulticast mode [ 1257.334195][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1257.557338][T29669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6140'. [ 1258.329239][T29690] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1258.374324][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1258.406384][T29691] netlink: 'syz.4.6144': attribute type 3 has an invalid length. [ 1258.414891][T29691] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1259.414102][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1260.453576][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1261.437732][T29049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.493887][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1261.597615][T29049] veth0_vlan: entered promiscuous mode [ 1261.648039][T29049] veth1_vlan: entered promiscuous mode [ 1261.731705][T29049] veth0_macvtap: entered promiscuous mode [ 1261.759438][T29049] veth1_macvtap: entered promiscuous mode [ 1261.829732][T29049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.861733][T29049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.907039][ T6353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.929002][ T6353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.959949][ T6353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.970389][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6155'. [ 1261.980152][ T6353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.214697][T29725] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6155'. [ 1262.263673][T29725] bond14 (unregistering): Released all slaves [ 1262.450900][T29743] syzkaller0: entered promiscuous mode [ 1262.461349][T29743] syzkaller0: entered allmulticast mode [ 1262.533621][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1262.779625][T29750] netlink: 'syz.5.6157': attribute type 1 has an invalid length. [ 1263.412812][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.435932][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.450414][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.462347][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.475025][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.487846][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.503407][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.515197][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.541585][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.555088][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.566366][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.574407][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1263.578469][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.597109][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.608941][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.620371][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.632780][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.644088][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.658433][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.670800][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.682586][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.695291][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.707107][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.719187][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.730269][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.742138][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.754512][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.766754][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.780444][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.792200][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.805100][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.817789][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.831520][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.842779][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.854871][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.866240][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.877966][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.890772][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.916410][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.941497][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.952709][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.976399][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.000220][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.011590][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.037893][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.062335][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.073600][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.085142][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.096499][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.107821][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.119572][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.130981][T29770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.613885][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1265.654268][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1266.661138][T29747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1266.684683][T29747] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len [ 1266.693973][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1266.780635][T19678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.818278][T19678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.939125][T29782] bond14: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1266.967950][T29793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6167'. [ 1266.990628][T29793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6167'. [ 1267.048675][T29797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1267.061477][T29782] bond14 (unregistering): Released all slaves [ 1267.217879][ T6353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.244952][ T6353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.272756][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6167'. [ 1267.379688][T29809] netlink: 'syz.4.6172': attribute type 2 has an invalid length. [ 1267.499807][T29815] netlink: 'syz.5.6174': attribute type 40 has an invalid length. [ 1267.738685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1267.762033][T29820] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1268.102607][T28319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1268.125473][T28319] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1268.154953][T28319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1268.163129][T28319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1268.175630][T28319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1268.746951][T29869] netlink: 'syz.0.6186': attribute type 1 has an invalid length. [ 1268.773830][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1268.790475][T29869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6186'. [ 1268.896043][T29878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6189'. [ 1268.925294][T29871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.933220][T29871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.945732][T29880] xt_policy: neither incoming nor outgoing policy selected [ 1269.072172][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6190'. [ 1269.118045][T29871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.140310][T29871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.222753][T29873] ±ÿ: renamed from team_slave_1 [ 1269.307166][T29878] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1269.359073][T29884] bond1 (unregistering): Released all slaves [ 1269.421641][T19690] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.439531][T19690] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.449385][T19690] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.462945][T29841] lo speed is unknown, defaulting to 1000 [ 1269.469402][T19690] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.481038][T29841] lo speed is unknown, defaulting to 1000 [ 1269.814019][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1269.939753][T29915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6195'. [ 1270.104592][T29915] bond13: entered promiscuous mode [ 1270.114030][T29915] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1270.215027][T28319] Bluetooth: hci3: command tx timeout [ 1270.218755][T29841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.265167][T29841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.285154][T29841] bridge_slave_0: entered allmulticast mode [ 1270.316183][T29841] bridge_slave_0: entered promiscuous mode [ 1270.354520][T29841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.380371][T29841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.400752][T29841] bridge_slave_1: entered allmulticast mode [ 1270.424502][T29841] bridge_slave_1: entered promiscuous mode [ 1270.542929][T29841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.573115][T29841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.711258][T29941] sctp: [Deprecated]: syz.2.6201 (pid 29941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1270.711258][T29941] Use struct sctp_sack_info instead [ 1270.749118][T29841] team0: Port device team_slave_0 added [ 1270.760166][T29841] team0: Port device team_slave_1 added [ 1270.835716][T29943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6202'. [ 1270.853680][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1270.917975][T29841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.923748][T29949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6202'. [ 1270.953435][T29841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.016681][T29841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.044199][T29841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.063491][T29841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.100540][T29841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.188662][T29841] hsr_slave_0: entered promiscuous mode [ 1271.199653][T29841] hsr_slave_1: entered promiscuous mode [ 1271.214856][T29841] debugfs: 'hsr0' already exists in 'hsr' [ 1271.221108][T29841] Cannot create hsr debugfs directory [ 1271.499824][T29968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6210'. [ 1271.668037][ T6343] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.696766][ T6343] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.769837][T29977] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1271.781500][T29977] bond15 (unregistering): Released all slaves [ 1271.812441][ T6343] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.825706][ T6343] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.836562][T29985] tipc: Started in network mode [ 1271.841743][T29985] tipc: Node identity ff35, cluster identity 4711 [ 1271.851391][T29985] tipc: Enabling of bearer rejected, failed to enable media [ 1271.894152][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1272.293944][T28319] Bluetooth: hci3: command tx timeout [ 1272.656698][T30024] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 1272.707256][T29841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1272.724382][T29841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1272.735344][T30026] bond0: entered promiscuous mode [ 1272.741045][T30026] bond_slave_0: entered promiscuous mode [ 1272.747804][T30026] bond_slave_1: entered promiscuous mode [ 1272.754734][T30026] bond0: entered allmulticast mode [ 1272.762279][T30026] bond_slave_0: entered allmulticast mode [ 1272.769398][T30026] bond_slave_1: entered allmulticast mode [ 1272.779087][T30026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.787845][T29841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1272.809455][T29841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1272.827845][T29841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1272.839742][T29841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1272.850163][T30028] lo speed is unknown, defaulting to 1000 [ 1272.850701][T29841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1272.872928][T29841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1272.930868][T30028] lo speed is unknown, defaulting to 1000 [ 1272.936809][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1273.207511][T30047] netlink: 'syz.2.6232': attribute type 1 has an invalid length. [ 1273.319369][T30047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1273.427538][T30057] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 1273.512422][T30066] tipc: Enabled bearer , priority 30 [ 1273.529484][T30066] __nla_validate_parse: 3 callbacks suppressed [ 1273.529505][T30066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1273.556380][T30068] netlink: 'syz.0.6236': attribute type 9 has an invalid length. [ 1273.569201][T29841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.647557][T30074] netlink: 'syz.2.6239': attribute type 1 has an invalid length. [ 1273.658444][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1273.678863][T30075] netlink: 'syz.2.6239': attribute type 1 has an invalid length. [ 1273.691434][T30070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1273.707766][T30078] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6238'. [ 1273.717560][T30080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1273.737499][T30080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1273.771893][T30079] gretap1: entered allmulticast mode [ 1273.784067][T30079] bond3: (slave gretap1): making interface the new active one [ 1273.793157][T30079] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1273.837059][T29841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.865024][T19674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.872201][T19674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.921560][T19674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.928835][T19674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.945529][T30093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6240'. [ 1273.960338][T30089] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1273.974165][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1274.020974][T30074] lo speed is unknown, defaulting to 1000 [ 1274.083769][T30074] lo speed is unknown, defaulting to 1000 [ 1274.379222][T28319] Bluetooth: hci3: command tx timeout [ 1275.014334][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1275.289423][T30150] batman_adv: batadv0: Adding interface: vlan2 [ 1275.319745][T30150] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.350659][T30150] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1275.395864][T30155] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6256'. [ 1275.429578][T30155] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6256'. [ 1275.616773][T30169] netlink: 'syz.2.6259': attribute type 3 has an invalid length. [ 1275.718838][T29841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.054031][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1276.072443][T30192] syzkaller1: entered promiscuous mode [ 1276.092224][T30192] syzkaller1: entered allmulticast mode [ 1276.175046][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6268'. [ 1276.239998][T30201] syzkaller0: entered promiscuous mode [ 1276.267022][T30201] syzkaller0: entered allmulticast mode [ 1276.456950][T28319] Bluetooth: hci3: command tx timeout [ 1276.586721][T29841] veth0_vlan: entered promiscuous mode [ 1276.653167][T29841] veth1_vlan: entered promiscuous mode [ 1276.755961][T29841] veth0_macvtap: entered promiscuous mode [ 1276.792382][T29841] veth1_macvtap: entered promiscuous mode [ 1276.858467][T29841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.949092][T30228] geneve3: entered promiscuous mode [ 1276.961387][T30228] geneve3: entered allmulticast mode [ 1276.974905][T19674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.990331][T29841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.999977][T30232] bond0: entered promiscuous mode [ 1277.006181][T30232] bond_slave_0: entered promiscuous mode [ 1277.012278][T30232] bond_slave_1: entered promiscuous mode [ 1277.019295][T30232] bond0: entered allmulticast mode [ 1277.025151][T30232] bond_slave_0: entered allmulticast mode [ 1277.031023][T30232] bond_slave_1: entered allmulticast mode [ 1277.038204][T19674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.063608][T19674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.093578][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1277.131231][T19674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.181008][T19690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.204500][T19690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.236706][T30241] netlink: 'syz.5.6282': attribute type 7 has an invalid length. [ 1277.266629][T30241] netlink: 'syz.5.6282': attribute type 8 has an invalid length. [ 1277.296998][T19690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.328627][T19690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.641701][T19690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.675839][T19690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.720331][T19678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.734378][T19678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.998861][T30263] syzkaller1: entered promiscuous mode [ 1278.020269][T30263] syzkaller1: entered allmulticast mode [ 1278.134144][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1278.484063][ T5673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1278.499889][ T5673] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1278.514696][ T5673] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1278.524189][ T5673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1278.531995][ T5673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1278.809537][T30296] __nla_validate_parse: 6 callbacks suppressed [ 1278.809559][T30296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6298'. [ 1279.072422][T30311] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6303'. [ 1279.138909][T30311] vti0: entered promiscuous mode [ 1279.258352][T30319] sctp: [Deprecated]: syz.5.6303 (pid 30319) Use of int in maxseg socket option. [ 1279.258352][T30319] Use struct sctp_assoc_value instead [ 1279.286096][ T6353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1279.552196][ T6353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1279.587039][T30332] veth0: entered promiscuous mode [ 1279.604868][T30331] batman_adv: batadv0: Adding interface: gretap0 [ 1279.612846][T30331] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.656968][T30331] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 1279.834262][T30330] veth0: left promiscuous mode [ 1279.842513][T30347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1279.860146][T30288] lo speed is unknown, defaulting to 1000 [ 1279.904615][T30288] lo speed is unknown, defaulting to 1000 [ 1280.007621][ T6353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.282138][ T6353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.294790][T30354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6315'. [ 1280.616090][T28319] Bluetooth: hci5: command tx timeout [ 1281.136563][ T6353] bond5: left allmulticast mode [ 1281.151157][ T6353] bond5: left promiscuous mode [ 1281.160420][ T6353] bridge0: port 1(bond5) entered disabled state [ 1281.190512][ T6353] dvmrp0: left allmulticast mode [ 1282.144567][ T6353] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 1282.214142][ T6353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.236745][ T6353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.252279][ T6353] bond0 (unregistering): Released all slaves [ 1282.268966][ T6353] bond1 (unregistering): Released all slaves [ 1282.298704][ T6353] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1282.308563][ T6353] bond2 (unregistering): Released all slaves [ 1282.341916][ T6353] bond3 (unregistering): (slave veth7): Releasing active interface [ 1282.356839][ T6353] bond3 (unregistering): Released all slaves [ 1282.387003][ T6353] bond4 (unregistering): (slave veth9): Releasing active interface [ 1282.397363][ T6353] bond4 (unregistering): Released all slaves [ 1282.422808][ T6353] bond5 (unregistering): Released all slaves [ 1282.439395][ T6353] bond6 (unregistering): Released all slaves [ 1282.459273][ T6353] bond7 (unregistering): Released all slaves [ 1282.473252][T30432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6335'. [ 1282.495789][ T6353] bond8 (unregistering): Released all slaves [ 1282.527862][ T6353] bond9 (unregistering): Released all slaves [ 1282.555414][ T6353] bond10 (unregistering): Released all slaves [ 1282.582374][ T6353] bond11 (unregistering): Released all slaves [ 1282.606843][ T6353] bond12 (unregistering): Released all slaves [ 1282.641650][ T6353] bond13 (unregistering): Released all slaves [ 1282.700516][T28319] Bluetooth: hci5: command tx timeout [ 1282.755869][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1282.774936][T30288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.795314][T30288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.832300][T30288] bridge_slave_0: entered allmulticast mode [ 1282.849284][T30288] bridge_slave_0: entered promiscuous mode [ 1282.894234][T30288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.901433][T30288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.916434][T30288] bridge_slave_1: entered allmulticast mode [ 1282.951862][T30288] bridge_slave_1: entered promiscuous mode [ 1282.964104][ T6353] : left promiscuous mode [ 1283.067843][ T6353] þ: left promiscuous mode [ 1283.091504][T30442] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6338'. [ 1283.153912][ T6353] tipc: Disabling bearer [ 1283.164774][ T6353] tipc: Disabling bearer [ 1283.195356][ T6353] tipc: Left network mode [ 1283.204751][T30288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.339341][T30288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.378275][T30450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1283.635273][T30288] team0: Port device team_slave_0 added [ 1283.845443][T30288] team0: Port device team_slave_1 added [ 1283.949713][T30469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1284.250058][T30288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.265735][T30288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.300058][T30288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.360140][T30288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.381714][T30288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.457451][T30288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.504455][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6350'. [ 1284.781844][T30497] bond1: Removing last ns target with arp_interval on [ 1284.784270][T28319] Bluetooth: hci5: command tx timeout [ 1284.789431][T30504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6351'. [ 1284.904968][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1284.911653][T30513] netlink: 'syz.2.6352': attribute type 21 has an invalid length. [ 1284.920210][T30513] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6352'. [ 1284.968382][T30288] hsr_slave_0: entered promiscuous mode [ 1284.977252][T30288] hsr_slave_1: entered promiscuous mode [ 1284.983940][T30288] debugfs: 'hsr0' already exists in 'hsr' [ 1284.989755][T30288] Cannot create hsr debugfs directory [ 1284.997646][T30513] netlink: 'syz.2.6352': attribute type 4 has an invalid length. [ 1285.009207][T30513] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6352'. [ 1285.021593][T19678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.034921][T19678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.382575][ T6353] hsr_slave_0: left promiscuous mode [ 1285.395714][ T6353] hsr_slave_1: left promiscuous mode [ 1285.427761][T30534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6358'. [ 1285.810070][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6357'. [ 1286.556720][ T6345] smbdirect: ib_dev[syz2] removed [ 1286.577845][T30529] tipc: Invalid UDP bearer configuration [ 1286.577909][T30529] tipc: Enabling of bearer rejected, failed to enable media [ 1286.603186][T29079] lo speed is unknown, defaulting to 1000 [ 1286.623443][T29079] infiniband syz2: ib_query_port failed (-19) [ 1286.673294][T30559] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6359'. [ 1286.754785][T30561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1286.761204][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1286.895775][T28319] Bluetooth: hci5: command tx timeout [ 1287.500112][T30588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1287.606420][T30597] syzkaller0: entered promiscuous mode [ 1287.616417][T30597] syzkaller0: entered allmulticast mode [ 1287.979042][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6375'. [ 1287.995332][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6375'. [ 1288.183294][ T6353] IPVS: stop unused estimator thread 0... [ 1288.382118][T30625] tipc: Enabled bearer , priority 10 [ 1288.393699][T30625] netlink: 'syz.2.6376': attribute type 10 has an invalid length. [ 1288.502015][T30625] team0: Port device vlan0 added [ 1288.649592][T30635] netlink: 'syz.5.6379': attribute type 8 has an invalid length. [ 1289.079548][T30658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.152811][T30658] x_tables: unsorted entry at hook 2 [ 1289.174785][T30666] netlink: 'syz.4.6386': attribute type 1 has an invalid length. [ 1289.207608][T30666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1289.280634][T30658] xt_hashlimit: size too large, truncated to 1048576 [ 1289.599811][T17431] tipc: Node number set to 4281663488 [ 1289.725613][T30689] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1290.409261][T30721] batman_adv: batadv0: Adding interface: vlan2 [ 1290.415474][T30721] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.462279][T30721] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1290.518063][T30727] netlink: 'syz.1.6401': attribute type 1 has an invalid length. [ 1290.833751][T30736] __nla_validate_parse: 2 callbacks suppressed [ 1290.833776][T30736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6403'. [ 1290.861085][T30717] bond2: (slave geneve2): making interface the new active one [ 1290.878784][T30717] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1290.893496][T19689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1291.010399][T30739] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6404'. [ 1291.062859][T30748] netlink: 'syz.1.6406': attribute type 7 has an invalid length. [ 1291.069379][T30736] bond15: entered promiscuous mode [ 1291.076745][T30736] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1291.079475][T30748] netlink: 'syz.1.6406': attribute type 3 has an invalid length. [ 1291.094185][T19689] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1291.121011][T30748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6406'. [ 1291.172533][T30741] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1291.179907][T30741] bond15: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 1291.191137][T30741] bond15: (slave ip6gre4): Error -95 calling set_mac_address [ 1291.323431][T30739] team0 (unregistering): Port device team_slave_0 removed [ 1291.342489][T30739] team0 (unregistering): Port device team_slave_1 removed [ 1291.356765][T19689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1291.369491][T19689] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1291.445406][T30288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1291.471433][T30288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1291.491251][T30288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1291.524006][T30288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1291.539087][T30288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1291.540912][T30766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1291.589445][T30288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1291.615611][T30766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1291.664367][T30288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1291.676568][T30288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1292.385838][T30288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.489803][T30288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.542336][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.549756][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.592905][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.600275][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.769661][T30811] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1292.775756][T30811] syzkaller1: linktype set to 0 [ 1292.867180][T30811] bond2 (unregistering): Released all slaves [ 1293.071645][T30288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.175426][T30816] syzkaller0: entered promiscuous mode [ 1293.181146][T30816] syzkaller0: entered allmulticast mode [ 1297.608930][T30831] tipc: Started in network mode [ 1297.614149][T30831] tipc: Node identity 6253c64cd7fd, cluster identity 4711 [ 1297.621581][T30831] tipc: Enabled bearer , priority 0 [ 1297.629191][T30834] syzkaller0: entered promiscuous mode [ 1297.634729][T30834] syzkaller0: entered allmulticast mode [ 1297.666036][T30846] tipc: Resetting bearer [ 1297.680053][T30830] tipc: Resetting bearer [ 1297.720493][T30830] tipc: Disabling bearer [ 1297.743646][T30859] batman_adv: batadv0: Adding interface: vlan2 [ 1297.749871][T30859] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.775819][T30859] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1297.898540][T30865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6426'. [ 1297.907729][T30865] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6426'. [ 1297.916897][T30865] netlink: 'syz.2.6426': attribute type 6 has an invalid length. [ 1297.924657][T30865] netlink: 'syz.2.6426': attribute type 5 has an invalid length. [ 1298.017149][T30865] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6426'. [ 1298.071298][T30869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.319653][T30288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.476808][T30288] veth0_vlan: entered promiscuous mode [ 1298.528481][T30288] veth1_vlan: entered promiscuous mode [ 1298.594267][T30288] veth0_macvtap: entered promiscuous mode [ 1298.612023][T30288] veth1_macvtap: entered promiscuous mode [ 1298.653276][T30288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.684016][T30288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.716787][T19690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.741041][T19690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.759689][T19690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.798110][T19690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.831264][T30900] syzkaller0: entered promiscuous mode [ 1298.864337][T30900] syzkaller0: entered allmulticast mode [ 1299.245616][ T6345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.265421][ T6345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.322920][ T6345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.349143][ T6345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.471244][T30938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1299.601350][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6452'. [ 1299.719886][T30946] syzkaller0: entered promiscuous mode [ 1299.730671][T30946] syzkaller0: entered allmulticast mode [ 1299.921814][T30960] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1300.106738][T30957] xt_l2tp: v2 doesn't support IP mode [ 1300.228637][ T5673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1300.254014][ T5673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1300.264687][ T5673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1300.272788][ T5673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1300.280680][ T5673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1300.643559][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.901751][T30999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1301.045568][T31011] tipc: Enabled bearer , priority 0 [ 1301.053054][T31011] syzkaller0: entered promiscuous mode [ 1301.058641][T31011] syzkaller0: entered allmulticast mode [ 1301.075168][T31011] xfrm1: entered allmulticast mode [ 1301.138311][T31011] tipc: Resetting bearer [ 1301.172456][T31012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6469'. [ 1301.237239][T31017] tipc: Resetting bearer [ 1301.287553][T31017] tipc: Disabling bearer [ 1301.366563][T30969] lo speed is unknown, defaulting to 1000 [ 1301.459453][T31025] syzkaller0: entered promiscuous mode [ 1301.465006][T31025] syzkaller0: entered allmulticast mode [ 1301.554072][T31031] netlink: 'syz.2.6475': attribute type 4 has an invalid length. [ 1301.574979][T31031] netlink: 'syz.2.6475': attribute type 4 has an invalid length. [ 1301.697899][T31036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6476'. [ 1301.716770][T31036] netlink: 'syz.4.6476': attribute type 12 has an invalid length. [ 1301.830486][T31040] netlink: 'syz.4.6477': attribute type 4 has an invalid length. [ 1301.916173][T31040] netlink: 'syz.4.6477': attribute type 4 has an invalid length. [ 1301.976460][T31053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6480'. [ 1302.059219][T30969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.067240][T30969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.075275][T30969] bridge_slave_0: entered allmulticast mode [ 1302.084134][T30969] bridge_slave_0: entered promiscuous mode [ 1302.094715][T30969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.104535][T30969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.117516][T30969] bridge_slave_1: entered allmulticast mode [ 1302.127279][T30969] bridge_slave_1: entered promiscuous mode [ 1302.194554][T30969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.220849][T30969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.248246][T31059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6482'. [ 1302.264856][T30969] team0: Port device team_slave_0 added [ 1302.272821][T30969] team0: Port device team_slave_1 added [ 1302.278648][T31058] tipc: Enabling of bearer rejected, failed to enable media [ 1302.290079][T31059] atomic_op ffff88803348c198 conn xmit_atomic 0000000000000000 [ 1302.299727][T31058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6483'. [ 1302.318727][T30969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.340922][T30969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.366958][T30969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.373561][T28319] Bluetooth: hci0: command tx timeout [ 1302.391317][T31058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1302.406883][T30969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.470525][T30969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.522614][T30969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.621742][T30969] hsr_slave_0: entered promiscuous mode [ 1302.629212][T30969] hsr_slave_1: entered promiscuous mode [ 1302.636986][T30969] debugfs: 'hsr0' already exists in 'hsr' [ 1302.643168][T30969] Cannot create hsr debugfs directory [ 1302.937457][T31068] netlink: 'syz.4.6486': attribute type 9 has an invalid length. [ 1303.620882][T30969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.900177][T31090] __nla_validate_parse: 2 callbacks suppressed [ 1303.900200][T31090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6491'. [ 1303.961294][T30969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.166833][T31098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6495'. [ 1304.182724][T31097] xt_TCPMSS: Only works on TCP SYN packets [ 1304.211144][T31100] netlink: 'syz.2.6494': attribute type 13 has an invalid length. [ 1304.228534][T31100] netlink: 'syz.2.6494': attribute type 17 has an invalid length. [ 1304.341254][T31100] bond0: left promiscuous mode [ 1304.346887][T31100] bond_slave_0: left promiscuous mode [ 1304.358084][T31100] bond_slave_1: left promiscuous mode [ 1304.366709][T31100] bond0: left allmulticast mode [ 1304.371742][T31100] bond_slave_0: left allmulticast mode [ 1304.380424][T31100] bond_slave_1: left allmulticast mode [ 1304.420218][T31115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1304.455886][T28319] Bluetooth: hci0: command tx timeout [ 1304.627015][T31123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1304.684368][T31100] bond1: left promiscuous mode [ 1304.761227][T31100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1304.780626][T31100] gretap1: left allmulticast mode [ 1304.812483][T31100] batman_adv: batadv0: Interface activated: vlan2 [ 1304.822564][T31100] xfrm1: left allmulticast mode [ 1304.875396][T30969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.200830][T31117] lo speed is unknown, defaulting to 1000 [ 1305.409870][T30969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.541960][T31155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6503'. [ 1306.037164][T31163] bridge0: port 3(vlan3) entered blocking state [ 1306.085200][T31163] bridge0: port 3(vlan3) entered disabled state [ 1306.127062][T31163] vlan3: entered allmulticast mode [ 1306.150419][T31163] geneve0: entered allmulticast mode [ 1306.201008][T31163] vlan3: entered promiscuous mode [ 1306.226497][T31163] geneve0: entered promiscuous mode [ 1306.314462][T31168] syzkaller1: entered promiscuous mode [ 1306.355134][T31168] syzkaller1: entered allmulticast mode [ 1306.533802][T28319] Bluetooth: hci0: command tx timeout [ 1306.700166][T31182] syzkaller0: entered promiscuous mode [ 1306.713467][T31182] syzkaller0: entered allmulticast mode [ 1306.722194][T30969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1306.747994][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1306.765045][T30969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1306.777571][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1307.215350][T31201] can: request_module (can-proto-0) failed. [ 1308.616211][T28319] Bluetooth: hci0: command tx timeout [ 1310.759136][T30969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1310.769755][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1310.787059][T30969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1310.832639][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1311.164476][T31238] netlink: 'syz.4.6521': attribute type 30 has an invalid length. [ 1311.187555][T31238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1311.208641][T30969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.290385][T31238] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1311.309518][T31238] bond2 (unregistering): Released all slaves [ 1311.423131][T30969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.450556][T19667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.457858][T19667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.527287][T19667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.534617][T19667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.551630][T31248] lo speed is unknown, defaulting to 1000 [ 1311.614988][T31253] netlink: 'syz.1.6526': attribute type 11 has an invalid length. [ 1311.755620][T31258] sctp: [Deprecated]: syz.1.6527 (pid 31258) Use of int in max_burst socket option. [ 1311.755620][T31258] Use struct sctp_assoc_value instead [ 1312.380005][T31272] syzkaller0: entered promiscuous mode [ 1312.386111][T31272] syzkaller0: entered allmulticast mode [ 1312.526152][T30969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.008421][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.034379][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.055142][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.074898][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.104376][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.126983][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.186533][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.206062][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.226463][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.239307][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.283236][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.310925][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.330855][T31292] syzkaller1: entered promiscuous mode [ 1313.343640][T31292] syzkaller1: entered allmulticast mode [ 1313.358980][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.381293][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.395176][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.406786][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.422868][T31282] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1313.433138][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.446242][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.471812][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.488868][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.508844][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.527970][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.549869][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.569587][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.581148][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.620308][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.642235][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.664136][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.718275][T31282] tipc: Enabling of bearer rejected, media not registered [ 1313.756432][T30969] veth0_vlan: entered promiscuous mode [ 1313.849116][T30969] veth1_vlan: entered promiscuous mode [ 1313.956194][T30969] veth0_macvtap: entered promiscuous mode [ 1313.996488][T30969] veth1_macvtap: entered promiscuous mode [ 1314.038818][T30969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.074208][T30969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.136880][T19667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.166313][T19667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.188088][T19667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.215200][T19667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.240829][T31315] syzkaller0: entered promiscuous mode [ 1314.248425][T31315] syzkaller0: entered allmulticast mode [ 1314.591231][T31332] lo speed is unknown, defaulting to 1000 [ 1314.766391][T19678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.794012][T19678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.931168][T19667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.957137][T19667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.322193][T31355] bond0: entered promiscuous mode [ 1315.344997][T31355] bond_slave_0: entered promiscuous mode [ 1315.358382][T31355] bond_slave_1: entered promiscuous mode [ 1315.370373][T31355] bond0: left promiscuous mode [ 1315.389154][T31355] bond_slave_0: left promiscuous mode [ 1315.399557][T31355] bond_slave_1: left promiscuous mode [ 1315.475173][T31356] bond0: entered promiscuous mode [ 1315.500693][T31356] bond_slave_0: entered promiscuous mode [ 1315.514946][T31356] bond_slave_1: entered promiscuous mode [ 1315.533603][T31356] bond0: left promiscuous mode [ 1315.538490][T31356] bond_slave_0: left promiscuous mode [ 1315.553856][T31356] bond_slave_1: left promiscuous mode [ 1315.706473][T31350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1315.759679][T31365] syzkaller0: entered promiscuous mode [ 1315.773199][T31365] syzkaller0: entered allmulticast mode [ 1316.253046][T31393] __nla_validate_parse: 20 callbacks suppressed [ 1316.253069][T31393] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1316.525368][T31397] netlink: 'syz.5.6565': attribute type 1 has an invalid length. [ 1316.534829][T31397] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6565'. [ 1316.740420][T31400] Cannot find set identified by id 65535 to match [ 1316.860722][T31401] netlink: 'syz.5.6566': attribute type 1 has an invalid length. [ 1316.871938][T31401] netlink: 'syz.5.6566': attribute type 2 has an invalid length. [ 1316.938896][T28319] Bluetooth: hci0: command 0x0c1a tx timeout [ 1319.985853][T31403] lo: entered allmulticast mode [ 1320.006041][T31403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1320.069585][T31407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1320.140562][T31413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6570'. [ 1320.155554][T31409] Bluetooth: MGMT ver 1.23 [ 1320.279787][T31417] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6573'. [ 1320.307982][T31417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 1320.323044][T31417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6573'. [ 1320.340817][T31417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 1320.359749][T31417] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6573'. [ 1320.378637][T31430] netlink: zone id is out of range [ 1320.385973][T31430] netlink: zone id is out of range [ 1320.398076][T31430] netlink: zone id is out of range [ 1320.408191][T31430] netlink: zone id is out of range [ 1320.420395][T31430] netlink: zone id is out of range [ 1320.436407][T31417] veth0: entered promiscuous mode [ 1320.446101][T31430] netlink: zone id is out of range [ 1320.474589][T31430] netlink: zone id is out of range [ 1320.491089][T31417] veth0: left promiscuous mode [ 1320.514844][T31430] netlink: zone id is out of range [ 1320.526722][T31430] netlink: zone id is out of range [ 1320.536745][T31430] netlink: set zone limit has 8 unknown bytes [ 1320.616074][T31442] syzkaller0: entered promiscuous mode [ 1320.632600][T31442] syzkaller0: entered allmulticast mode [ 1320.839980][T31450] netlink: 'syz.5.6582': attribute type 30 has an invalid length. [ 1320.891911][ T6343] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1320.906641][T31450] netlink: 'syz.5.6582': attribute type 30 has an invalid length. [ 1320.919594][ T6343] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1320.935613][ T6343] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1320.962584][ T6343] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.371809][T31492] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1321.639172][T31489] syzkaller0: entered promiscuous mode [ 1321.665071][T31489] syzkaller0: entered allmulticast mode [ 1321.795888][T31491] __nla_validate_parse: 8 callbacks suppressed [ 1321.795913][T31491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6592'. [ 1321.853523][T31494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6592'. [ 1325.811857][T31491] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1326.008242][T31532] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1326.066835][T31532] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1326.239537][T31548] batadv0: entered promiscuous mode [ 1326.254064][T31548] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1326.504803][ T30] audit: type=1804 audit(1783468209.840:14): pid=31562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6609" name="/newroot/157/cgroup.controllers" dev="tmpfs" ino=827 res=1 errno=0 [ 1326.557237][ T30] audit: type=1800 audit(1783468209.840:15): pid=31562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6609" name="cgroup.controllers" dev="tmpfs" ino=827 res=0 errno=0 [ 1326.867330][T31567] syzkaller0: entered promiscuous mode [ 1326.878856][T31567] syzkaller0: entered allmulticast mode [ 1327.372065][T31563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.376728][T31571] syzkaller0: entered promiscuous mode [ 1327.388556][T31571] syzkaller0: entered allmulticast mode [ 1328.192477][T31576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6615'. [ 1328.509233][T31595] xt_bpf: check failed: parse error [ 1328.667502][T31607] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6622'. [ 1328.807214][T31614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6624'. [ 1328.855466][T31608] bond2: (slave erspan0): Releasing backup interface [ 1328.878326][T31608] bridge_slave_0: left allmulticast mode [ 1328.886264][T31608] bridge_slave_0: left promiscuous mode [ 1328.892605][T31608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.909678][T31608] bridge_slave_1: left allmulticast mode [ 1328.915860][T31608] bridge_slave_1: left promiscuous mode [ 1328.921770][T31608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.940499][T31608] vlan3: left promiscuous mode [ 1328.951023][T31608] geneve0: left promiscuous mode [ 1328.965175][T31608] bond0: (slave bond_slave_0): Releasing backup interface [ 1328.994529][T31608] bond0: (slave bond_slave_1): Releasing backup interface [ 1329.027235][T31608] team0: Port device team_slave_0 removed [ 1329.062407][T31608] team0: Port device team_slave_1 removed [ 1329.072286][T31608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.080443][T31608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.089686][T31608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1329.099324][T31608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.124629][T31608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1329.522465][T31626] syzkaller0: entered promiscuous mode [ 1329.539453][T31626] syzkaller0: entered allmulticast mode [ 1329.572308][T31638] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1329.886213][T31656] siw: device registration error -23 [ 1329.904530][T31658] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1329.908794][T31659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6634'. [ 1333.619574][T31661] ±ÿ: renamed from lo (while UP) [ 1333.824572][T31676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6638'. [ 1333.854835][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6640'. [ 1333.982031][T31689] IPv6: Can't replace route, no match found [ 1334.112751][T31695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1334.182851][T31698] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1334.299938][T31698] netlink: 'syz.0.6647': attribute type 3 has an invalid length. [ 1334.314773][T31702] syzkaller0: entered promiscuous mode [ 1334.325108][T31698] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1334.329434][T31702] syzkaller0: entered allmulticast mode [ 1334.590406][T31705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6649'. [ 1334.632138][T31705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6649'. [ 1334.899595][T31715] xt_TCPMSS: Only works on TCP SYN packets [ 1335.360074][T31727] batadv_slave_1: entered promiscuous mode [ 1335.474791][T31726] batadv_slave_1: left promiscuous mode [ 1335.582837][T31738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6660'. [ 1335.785247][T31752] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1335.798903][T31748] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1336.069525][T29085] IPVS: starting estimator thread 0... [ 1336.183581][T31766] IPVS: using max 24 ests per chain, 57600 per kthread [ 1336.239446][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1336.262997][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1336.488054][T31783] netlink: 'syz.0.6671': attribute type 1 has an invalid length. [ 1336.655367][T31783] bond1: entered promiscuous mode [ 1336.692747][T31783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1336.815954][T31790] veth3: entered promiscuous mode [ 1336.837874][T31790] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1336.920187][T31796] netlink: 'syz.4.6674': attribute type 1 has an invalid length. [ 1337.052776][T31802] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1337.100263][T31796] bond2: entered promiscuous mode [ 1337.119517][T31796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1337.269651][T31805] bond2: (slave bridge1): making interface the new active one [ 1337.289111][T31805] bridge1: entered promiscuous mode [ 1337.315116][T31805] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1337.441904][T31813] syzkaller0: entered promiscuous mode [ 1337.461506][T31813] syzkaller0: entered allmulticast mode [ 1337.541897][T31821] netlink: 'syz.4.6681': attribute type 22 has an invalid length. [ 1337.563201][T19674] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.572898][T31821] netlink: 'syz.4.6681': attribute type 22 has an invalid length. [ 1337.586532][T19674] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.609790][T19674] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.714852][T19674] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.829346][T31827] netlink: ct family unspecified [ 1337.853676][T31827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.944228][T31838] netlink: 'syz.1.6683': attribute type 1 has an invalid length. [ 1337.976745][T31837] netlink: 'syz.0.6685': attribute type 1 has an invalid length. [ 1338.511720][T31868] gretap1: entered promiscuous mode [ 1338.541513][T28319] Bluetooth: hci1: command 0x0406 tx timeout [ 1338.999905][T31882] __nla_validate_parse: 10 callbacks suppressed [ 1338.999922][T31882] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6695'. [ 1339.044572][T31882] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6695'. [ 1339.300261][T31891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6699'. [ 1339.583920][T31915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6705'. [ 1339.604248][T31917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6705'. [ 1339.625550][T31917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6705'. [ 1339.721626][T31922] netlink: 'syz.5.6707': attribute type 1 has an invalid length. [ 1339.728382][T31925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1339.795055][T31922] bond1 (unregistering): Released all slaves [ 1339.904484][T31939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1339.907013][T31941] batman_adv: batadv0: Adding interface: vlan2 [ 1339.928710][T31941] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.976312][T31941] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1340.288237][T31949] bond3: option miimon: invalid value (18446744073709551607) [ 1340.301101][T31949] bond3: option miimon: allowed values 0 - 2147483647 [ 1340.317952][T31949] bond3 (unregistering): Released all slaves [ 1340.358839][T31939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1340.389744][T31946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6713'. [ 1340.395176][T31960] netlink: 'syz.4.6716': attribute type 2 has an invalid length. [ 1340.436730][T31960] netlink: 'syz.4.6716': attribute type 2 has an invalid length. [ 1340.482725][T31946] syzkaller0: entered promiscuous mode [ 1340.510762][T31946] syzkaller0: entered allmulticast mode [ 1340.557370][T31960] xt_CT: No such helper "netbios-ns" [ 1340.930842][T31981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.938770][T31981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.954140][T31981] bridge0: entered allmulticast mode [ 1341.314061][T31995] tipc: Enabled bearer , priority 0 [ 1341.379771][T31994] tipc: Disabling bearer [ 1341.563939][T32013] netlink: 'syz.4.6730': attribute type 1 has an invalid length. [ 1341.621617][T32002] can: request_module (can-proto-0) failed. [ 1341.661780][T32013] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1342.721412][T32062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1342.747501][T32062] team0: entered allmulticast mode [ 1342.754630][T32062] team_slave_0: entered allmulticast mode [ 1342.760580][T32062] ±ÿ: entered allmulticast mode [ 1343.729998][T32073] netlink: 'syz.1.6743': attribute type 33 has an invalid length. [ 1344.361966][T32086] IPv6: Can't replace route, no match found [ 1344.392415][T32009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.479497][T32088] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1345.029080][T32096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.070075][T32096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1345.357089][T32096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.368904][T32096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1345.628909][T32096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.660931][T32096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1345.807618][T32096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.819105][T32096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1345.931017][T32141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.934119][T32143] __nla_validate_parse: 13 callbacks suppressed [ 1345.934139][T32143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6765'. [ 1345.938385][T32141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.961357][T32141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.969129][T32141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.387928][T32149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1346.491502][T32152] bond3: option mode: invalid value (254) [ 1346.550515][T32152] bond3 (unregistering): Released all slaves [ 1346.632303][T32163] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6771'. [ 1346.680444][T32163] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6771'. [ 1346.813979][T32171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6774'. [ 1346.861381][T19690] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1346.881945][T19690] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1346.920676][T32170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1346.937595][T32177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6775'. [ 1346.959536][T32177] nbd: must specify at least one socket [ 1347.048961][T19690] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.071410][T19690] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1347.141239][T19690] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.153046][T32170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1347.164167][T32170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1347.172096][T19690] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1347.244085][T19674] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.264164][T19674] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1347.401787][T32189] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6776'. [ 1347.474045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.486598][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 1347.736358][T32200] netlink: 'syz.5.6782': attribute type 32 has an invalid length. [ 1347.766903][T32200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6782'. [ 1347.828071][T32203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.835933][T32203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.852334][T32213] netlink: 'syz.5.6782': attribute type 23 has an invalid length. [ 1347.989486][T32203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1348.018373][T32203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.387491][T32200] bond1: option coupled_control: invalid value (255) [ 1348.430914][T32228] netlink: 'syz.1.6786': attribute type 2 has an invalid length. [ 1348.451845][T32200] bond1 (unregistering): Released all slaves [ 1348.487722][T32233] sctp: [Deprecated]: syz.1.6786 (pid 32233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1348.487722][T32233] Use struct sctp_sack_info instead [ 1348.500686][T32208] team0: Port device syz_tun added [ 1348.512548][ T6343] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.540928][ T6343] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.605355][ T6343] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.627511][ T6343] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.637584][ T6343] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.663357][ T6343] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.679947][ T6343] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.704654][ T6343] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.724100][ T6343] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.738890][ T6343] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.781612][ T6343] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.818042][ T6343] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.924229][T32251] geneve2: entered promiscuous mode [ 1348.938748][T32253] netlink: 'syz.1.6788': attribute type 2 has an invalid length. [ 1349.002597][T32253] : entered promiscuous mode [ 1349.210137][T32267] netlink: 'syz.4.6794': attribute type 1 has an invalid length. [ 1349.352441][T32267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1349.379130][T32266] bridge1: entered promiscuous mode [ 1349.384714][T32266] bridge1: entered allmulticast mode [ 1349.437665][T32282] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1349.487854][T32274] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1349.570115][T32278] batman_adv: batadv0: Interface activated: gretap0 [ 1349.635512][T32278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.681715][T32278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.743170][T32296] netlink: 'syz.5.6798': attribute type 2 has an invalid length. [ 1349.770661][T32296] netlink: 'syz.5.6798': attribute type 2 has an invalid length. [ 1349.933124][T32278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1349.945543][T32278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.961579][T32278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1349.974160][T32278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1349.996507][T32278] veth1_vlan: left promiscuous mode [ 1350.004296][T32278] veth0_vlan: left promiscuous mode [ 1350.012501][T32278] veth0_vlan: entered promiscuous mode [ 1350.025868][T32278] veth1_vlan: entered promiscuous mode [ 1350.051030][T32278] veth1_macvtap: left promiscuous mode [ 1350.059130][T32278] veth0_macvtap: left promiscuous mode [ 1350.066852][T32278] veth0_macvtap: entered promiscuous mode [ 1350.075468][T32278] veth1_macvtap: entered promiscuous mode [ 1350.091088][T32278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.100095][T32278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1350.109858][T32278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1350.118560][T32278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1350.129414][T32278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1350.139381][T32278] batman_adv: batadv0: Interface activated: vlan2 [ 1350.169550][T32278] bond2: left promiscuous mode [ 1350.175611][T32278] bridge1: left promiscuous mode [ 1350.182372][T32278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1350.207263][T32281] bridge0: port 3(batadv1) entered blocking state [ 1350.218287][T32281] bridge0: port 3(batadv1) entered disabled state [ 1350.225821][T32281] batadv1: entered allmulticast mode [ 1350.233181][T32281] batadv1: entered promiscuous mode [ 1350.288678][T32267] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1350.308944][T32267] bond3: (slave batadv1): making interface the new active one [ 1350.318875][T32267] batadv1: entered promiscuous mode [ 1350.326647][T32267] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1350.350640][T19690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.358084][T19690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.370864][T19690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.378165][T19690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.479865][T19689] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.501744][T19689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.522738][T19689] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.564781][T19689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.600014][T19689] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.630481][T19689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.649018][T19689] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.664948][T19689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.679556][ T6343] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1350.689020][ T6343] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1350.704325][ T8201] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1350.712181][T19689] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1350.722788][T19689] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1350.727300][T32323] netlink: 'syz.0.6806': attribute type 1 has an invalid length. [ 1350.760510][ T6343] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1350.854446][ T8201] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1350.909539][T32329] tipc: Enabling of bearer rejected, failed to enable media [ 1350.949700][T32331] bond2: entered promiscuous mode [ 1350.976770][T32320] bond2: left promiscuous mode [ 1351.019294][T32342] lo speed is unknown, defaulting to 1000 [ 1351.096036][T32346] netlink: 'syz.0.6812': attribute type 1 has an invalid length. [ 1351.165851][T32346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1351.191909][T32344] sctp: [Deprecated]: syz.4.6809 (pid 32344) Use of int in max_burst socket option. [ 1351.191909][T32344] Use struct sctp_assoc_value instead [ 1351.240030][T32356] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1351.307531][T32363] __nla_validate_parse: 9 callbacks suppressed [ 1351.307552][T32363] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6814'. [ 1351.342252][T32356] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1351.351854][T32356] bond3: (slave batadv2): making interface the new active one [ 1351.361340][T32356] batadv2: entered promiscuous mode [ 1351.367474][T32356] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 1351.413917][ T5773] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1351.526690][T32369] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1351.551084][T32370] syzkaller0: entered promiscuous mode [ 1351.556930][T32370] syzkaller0: entered allmulticast mode [ 1354.089912][T32346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1354.331290][T32389] netlink: 'syz.5.6821': attribute type 1 has an invalid length. [ 1354.382609][T32389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1354.431067][T32398] netlink: 'syz.1.6822': attribute type 1 has an invalid length. [ 1354.462114][T32398] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1354.479130][T32398] netlink: 'syz.1.6822': attribute type 1 has an invalid length. [ 1354.569207][T32397] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1354.605242][T32396] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6823'. [ 1354.615326][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1354.709541][T32389] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1354.728144][T32389] bond1: (slave batadv1): making interface the new active one [ 1354.738488][T32389] batadv1: entered promiscuous mode [ 1354.744600][T32389] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1354.820101][T32403] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1355.104356][T32429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1355.128430][T32405] netlink: 'syz.2.6824': attribute type 9 has an invalid length. [ 1355.149733][T32426] lo speed is unknown, defaulting to 1000 [ 1355.165567][T32432] netlink: 'syz.5.6829': attribute type 3 has an invalid length. [ 1355.350545][T32439] netlink: 'syz.0.6832': attribute type 11 has an invalid length. [ 1355.667487][T32457] netlink: 'syz.1.6836': attribute type 1 has an invalid length. [ 1355.745753][T32457] bond3: entered promiscuous mode [ 1355.751498][T32457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.819130][T32457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.845877][T32457] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1355.860460][T32457] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1355.904998][T32457] bond3: (slave xfrm1): making interface the new active one [ 1355.915424][T32457] xfrm1: entered promiscuous mode [ 1355.928210][T32457] xfrm1: left promiscuous mode [ 1355.945582][T32464] x_tables: duplicate underflow at hook 2 [ 1356.173532][T32470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6841'. [ 1356.216927][T32470] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6841'. [ 1356.315975][T32476] syzkaller0: entered promiscuous mode [ 1356.321750][T32476] syzkaller0: entered allmulticast mode [ 1356.465857][T32480] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1356.476167][ T8201] IPVS: starting estimator thread 0... [ 1356.538283][T32482] tipc: Enabled bearer , priority 0 [ 1356.570980][T32482] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1356.583485][T32486] IPVS: using max 29 ests per chain, 69600 per kthread [ 1356.662289][T32481] tipc: Disabling bearer [ 1356.721347][T32501] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1356.743518][T32501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1356.978470][T32511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1357.074734][T32520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6855'. [ 1357.106094][T32516] lo speed is unknown, defaulting to 1000 [ 1357.438995][T32534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6859'. [ 1357.609553][T31685] udevd[31685]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1357.660065][T32540] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1358.100647][T32556] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1358.302924][T32569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6871'. [ 1358.664012][T32588] sctp: [Deprecated]: syz.5.6876 (pid 32588) Use of int in max_burst socket option deprecated. [ 1358.664012][T32588] Use struct sctp_assoc_value instead [ 1358.690470][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6877'. [ 1358.702479][T32594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6878'. [ 1358.705071][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6877'. [ 1358.780860][T32595] syzkaller0: entered promiscuous mode [ 1358.791503][T32595] syzkaller0: entered allmulticast mode [ 1359.013734][ T5673] Bluetooth: hci4: command 0x0406 tx timeout [ 1359.280820][T32618] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1359.358083][T32621] netlink: 'syz.5.6886': attribute type 10 has an invalid length. [ 1359.435294][T32621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1359.455248][T32621] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1359.563174][T32630] IPVS: set_ctl: invalid protocol: 43690 170.170.255.255:65535 [ 1359.658280][T32634] syzkaller0: entered promiscuous mode [ 1359.664914][T32640] xt_TCPMSS: Only works on TCP SYN packets [ 1359.667559][T32634] syzkaller0: entered allmulticast mode [ 1359.697596][T32634] netlink: 'syz.1.6891': attribute type 29 has an invalid length. [ 1359.852806][T32648] pim6reg: entered allmulticast mode [ 1360.545712][T32681] netlink: 'syz.1.6903': attribute type 4 has an invalid length. [ 1360.581383][T32681] netlink: 'syz.1.6903': attribute type 4 has an invalid length. [ 1361.309663][T32711] syzkaller0: entered promiscuous mode [ 1361.316398][T32711] syzkaller0: entered allmulticast mode [ 1361.639229][T32732] TCP: TCP_TX_DELAY enabled [ 1361.748591][T32719] batman_adv: batadv0: Adding interface: vlan2 [ 1361.759876][T32719] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.785566][T32719] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1361.796948][T32740] __nla_validate_parse: 14 callbacks suppressed [ 1361.796971][T32740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6916'. [ 1361.838456][T19678] batadv1: left promiscuous mode [ 1361.971744][T32746] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1362.018341][T32746] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1362.026046][T32746] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1362.043084][T32747] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1362.060402][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1362.080962][T32749] tipc: Enabled bearer , priority 0 [ 1362.100924][T32749] syzkaller0: entered promiscuous mode [ 1362.114470][T32749] syzkaller0: entered allmulticast mode [ 1362.304478][T32762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1362.322946][T32763] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6923'. [ 1362.335472][T32762] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1362.346404][T32749] tipc: Resetting bearer [ 1362.378157][T32763] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1362.444816][T32748] tipc: Resetting bearer [ 1362.546707][T32748] tipc: Disabling bearer [ 1362.580811][ T311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6926'. [ 1362.684389][ T316] FAULT_INJECTION: forcing a failure. [ 1362.684389][ T316] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.709327][ T316] CPU: 1 UID: 0 PID: 316 Comm: syz.2.6927 Not tainted syzkaller #0 PREEMPT(full) [ 1362.709358][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1362.709372][ T316] Call Trace: [ 1362.709381][ T316] [ 1362.709392][ T316] dump_stack_lvl+0xe8/0x150 [ 1362.709431][ T316] should_fail_ex+0x40c/0x560 [ 1362.709460][ T316] should_failslab+0xa8/0x100 [ 1362.709488][ T316] __kmalloc_cache_node_noprof+0xaa/0x630 [ 1362.709518][ T316] ? __get_vm_area_node+0x136/0x300 [ 1362.709535][ T316] ? __get_vm_area_node+0x136/0x300 [ 1362.709559][ T316] __get_vm_area_node+0x136/0x300 [ 1362.709581][ T316] __vmalloc_node_range_noprof+0x358/0x1730 [ 1362.709602][ T316] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1362.709630][ T316] ? __lock_acquire+0x683/0x2cf0 [ 1362.709674][ T316] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1362.709694][ T316] ? aa_file_perm+0x18b/0x15f0 [ 1362.709722][ T316] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1362.709742][ T316] __vmalloc_noprof+0xd2/0x120 [ 1362.709762][ T316] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1362.709787][ T316] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1362.709808][ T316] ? bpf_prog_alloc+0x2a/0x1a0 [ 1362.709830][ T316] bpf_prog_alloc+0x3c/0x1a0 [ 1362.709862][ T316] bpf_prog_load+0x7f8/0x1c00 [ 1362.709895][ T316] ? __pfx_bpf_prog_load+0x10/0x10 [ 1362.709937][ T316] __sys_bpf+0xd0d/0xd90 [ 1362.709965][ T316] ? __pfx___sys_bpf+0x10/0x10 [ 1362.709995][ T316] ? __fget_files+0x2a/0x420 [ 1362.710033][ T316] ? ksys_write+0x242/0x270 [ 1362.710059][ T316] ? __pfx_ksys_write+0x10/0x10 [ 1362.710087][ T316] __x64_sys_bpf+0xba/0xd0 [ 1362.710105][ T316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.710125][ T316] do_syscall_64+0x174/0x580 [ 1362.710150][ T316] ? trace_irq_disable+0x3b/0x140 [ 1362.710171][ T316] ? clear_bhb_loop+0x40/0x90 [ 1362.710191][ T316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.710207][ T316] RIP: 0033:0x7f85b879de59 [ 1362.710225][ T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.710240][ T316] RSP: 002b:00007f85b69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1362.710259][ T316] RAX: ffffffffffffffda RBX: 00007f85b8a25fa0 RCX: 00007f85b879de59 [ 1362.710271][ T316] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1362.710282][ T316] RBP: 00007f85b69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.710293][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.710302][ T316] R13: 00007f85b8a26038 R14: 00007f85b8a25fa0 R15: 00007ffcaec27f38 [ 1362.710330][ T316] [ 1362.981201][ T316] syz.2.6927: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1362.998166][ T316] CPU: 1 UID: 0 PID: 316 Comm: syz.2.6927 Not tainted syzkaller #0 PREEMPT(full) [ 1362.998196][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1362.998210][ T316] Call Trace: [ 1362.998220][ T316] [ 1362.998231][ T316] dump_stack_lvl+0xe8/0x150 [ 1362.998269][ T316] warn_alloc+0x24c/0x270 [ 1362.998315][ T316] ? __kasan_kmalloc+0x22/0xb0 [ 1362.998363][ T316] ? __pfx_warn_alloc+0x10/0x10 [ 1362.998402][ T316] ? __get_vm_area_node+0x2af/0x300 [ 1362.998434][ T316] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1362.998463][ T316] ? __lock_acquire+0x683/0x2cf0 [ 1362.998517][ T316] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1362.998543][ T316] ? aa_file_perm+0x18b/0x15f0 [ 1362.998578][ T316] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1362.998604][ T316] __vmalloc_noprof+0xd2/0x120 [ 1362.998628][ T316] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1362.998658][ T316] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1362.998685][ T316] ? bpf_prog_alloc+0x2a/0x1a0 [ 1362.998714][ T316] bpf_prog_alloc+0x3c/0x1a0 [ 1362.998743][ T316] bpf_prog_load+0x7f8/0x1c00 [ 1362.998785][ T316] ? __pfx_bpf_prog_load+0x10/0x10 [ 1362.998841][ T316] __sys_bpf+0xd0d/0xd90 [ 1362.998877][ T316] ? __pfx___sys_bpf+0x10/0x10 [ 1362.998913][ T316] ? __fget_files+0x2a/0x420 [ 1362.998959][ T316] ? ksys_write+0x242/0x270 [ 1362.998993][ T316] ? __pfx_ksys_write+0x10/0x10 [ 1362.999030][ T316] __x64_sys_bpf+0xba/0xd0 [ 1362.999054][ T316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.999077][ T316] do_syscall_64+0x174/0x580 [ 1362.999106][ T316] ? trace_irq_disable+0x3b/0x140 [ 1362.999132][ T316] ? clear_bhb_loop+0x40/0x90 [ 1362.999164][ T316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.999185][ T316] RIP: 0033:0x7f85b879de59 [ 1362.999206][ T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.999222][ T316] RSP: 002b:00007f85b69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1362.999243][ T316] RAX: ffffffffffffffda RBX: 00007f85b8a25fa0 RCX: 00007f85b879de59 [ 1362.999258][ T316] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1362.999271][ T316] RBP: 00007f85b69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.999284][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.999297][ T316] R13: 00007f85b8a26038 R14: 00007f85b8a25fa0 R15: 00007ffcaec27f38 [ 1362.999332][ T316] [ 1362.999442][ T316] Mem-Info: [ 1363.252170][ T316] active_anon:9031 inactive_anon:0 isolated_anon:0 [ 1363.252170][ T316] active_file:0 inactive_file:43893 isolated_file:0 [ 1363.252170][ T316] unevictable:768 dirty:228 writeback:0 [ 1363.252170][ T316] slab_reclaimable:12528 slab_unreclaimable:217443 [ 1363.252170][ T316] mapped:30888 shmem:1305 pagetables:1457 [ 1363.252170][ T316] sec_pagetables:0 bounce:0 [ 1363.252170][ T316] kernel_misc_reclaimable:0 [ 1363.252170][ T316] free:1191270 free_pcp:10115 free_cma:0 [ 1363.334897][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1363.368923][ T316] Node 0 active_anon:36256kB inactive_anon:0kB active_file:0kB inactive_file:175380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123528kB dirty:940kB writeback:0kB shmem:3684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16924kB pagetables:5996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1363.406505][ T316] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1363.460124][ T316] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.497801][ T316] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1363.504622][ T316] Node 0 DMA32 free:804724kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36256kB inactive_anon:0kB active_file:0kB inactive_file:175380kB unevictable:1536kB writepending:940kB zspages:0kB present:3129332kB managed:2548816kB mlocked:0kB bounce:0kB free_pcp:40000kB local_pcp:16612kB free_cma:0kB [ 1363.573900][ T316] lowmem_reserve[]: 0 0 0 0 0 [ 1363.578799][ T316] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.625203][ T316] lowmem_reserve[]: 0 0 0 0 0 [ 1363.630253][ T316] Node 1 Normal free:3945324kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.663653][ T316] lowmem_reserve[]: 0 0 0 0 0 [ 1363.670709][ T316] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1363.683902][ T316] Node 0 DMA32: 863*4kB (UM) 1232*8kB (UME) 158*16kB (UM) 403*32kB (UME) 238*64kB (UME) 82*128kB (UME) 34*256kB (UME) 9*512kB (U) 18*1024kB (UME) 7*2048kB (UM) 172*4096kB (UM) = 805052kB [ 1363.704896][ T316] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1363.717583][ T316] Node 1 Normal: 1*4kB (M) 1*8kB (M) 6*16kB (UM) 2*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3945324kB [ 1363.742846][ T316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1363.755763][ T316] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1363.773098][T29080] tipc: Node number set to 3048130124 [ 1364.047350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1364.231808][ T324] geneve2: left promiscuous mode [ 1364.251431][ T324] bridge1: left promiscuous mode [ 1364.320468][ T316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.324922][ T324] batman_adv: batadv0: Interface activated: vlan2 [ 1364.467157][ T6343] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1364.490130][ T6343] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1364.557246][T19674] batadv2: left promiscuous mode [ 1364.628464][ T357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6938'. [ 1364.640973][ T316] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1365.016619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1365.150950][ T316] 45196 total pagecache pages [ 1365.157549][ T316] 0 pages in swap cache [ 1365.162885][ T316] Free swap = 124996kB [ 1365.188500][ T371] netlink: 'syz.0.6940': attribute type 21 has an invalid length. [ 1365.207072][ T371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1365.276984][ T316] Total swap = 124996kB [ 1365.282419][ T316] 2097051 pages RAM [ 1365.288089][ T316] 0 pages HighMem/MovableOnly [ 1365.297336][ T316] 428165 pages reserved [ 1365.301736][ T316] 0 pages cma reserved [ 1365.370104][ T388] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1365.754061][ T410] netlink: 'syz.1.6956': attribute type 1 has an invalid length. [ 1365.852238][ T410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1366.214964][T28319] Bluetooth: hci0: link tx timeout [ 1366.225598][T28319] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1366.502082][ T417] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1366.642486][ T410] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1366.683002][ T410] bond4: (slave batadv1): making interface the new active one [ 1366.709846][ T410] batadv1: entered promiscuous mode [ 1366.721944][ T6343] tipc: Subscription rejected, illegal request [ 1366.731266][ T410] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1366.833487][T19674] batadv1: left promiscuous mode [ 1367.000711][ T444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1367.926802][ T485] __nla_validate_parse: 1 callbacks suppressed [ 1367.926827][ T485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6973'. [ 1367.944262][ T485] netlink: 'syz.4.6973': attribute type 10 has an invalid length. [ 1367.954622][ T485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6973'. [ 1368.124101][ T494] netlink: 'syz.5.6978': attribute type 2 has an invalid length. [ 1368.134570][ T494] netlink: 'syz.5.6978': attribute type 2 has an invalid length. [ 1368.178934][ T491] lo speed is unknown, defaulting to 1000 [ 1368.198537][ T494] netlink: 'syz.5.6978': attribute type 2 has an invalid length. [ 1368.221503][ T494] netlink: 'syz.5.6978': attribute type 2 has an invalid length. [ 1368.231000][ T494] netlink: 'syz.5.6978': attribute type 2 has an invalid length. [ 1368.240387][ T494] netlink: 'syz.5.6978': attribute type 2 has an invalid length. [ 1368.251462][ T494] netlink: 'syz.5.6978': attribute type 2 has an invalid length. [ 1368.293980][T28319] Bluetooth: hci0: command 0x0c1a tx timeout [ 1368.423064][ T509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1368.428281][ T504] syzkaller0: entered promiscuous mode [ 1368.440446][ T504] syzkaller0: entered allmulticast mode [ 1368.583678][ T509] vxcan1: entered promiscuous mode [ 1368.603679][ T509] vxcan1: entered allmulticast mode [ 1368.620072][ T515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6982'. [ 1368.863709][ T519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1368.890871][ T531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1368.965540][ T519] bond5 (unregistering): Released all slaves [ 1369.092258][ T538] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6986'. [ 1369.370186][ T521] syzkaller0: entered promiscuous mode [ 1369.382162][ T521] syzkaller0: entered allmulticast mode [ 1369.718977][ T6353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.728568][ T6353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.791502][ T558] syz_tun: entered allmulticast mode [ 1369.802513][ T558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1369.815084][ T559] veth0_to_team: entered promiscuous mode [ 1369.847317][ T557] syz_tun: left allmulticast mode [ 1369.853229][ T559] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6992'. [ 1369.857676][ T561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6993'. [ 1370.015387][ T566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6993'. [ 1370.100666][ T569] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6996'. [ 1370.491465][ T584] bond0: (slave bond_slave_1): Releasing backup interface [ 1370.571504][ T586] validate_nla: 28 callbacks suppressed [ 1370.571528][ T586] netlink: 'syz.0.7002': attribute type 15 has an invalid length. [ 1371.368681][ T622] netlink: 'syz.0.7010': attribute type 9 has an invalid length. [ 1371.557564][ T644] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1371.570534][ T644] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1371.772327][ T651] netlink: 'syz.0.7018': attribute type 18 has an invalid length. [ 1371.795933][T19689] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1371.823201][T19689] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1371.846220][ T651] netlink: 'syz.0.7018': attribute type 18 has an invalid length. [ 1371.851529][T19689] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1371.881132][T19689] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1372.820930][ T672] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1372.830195][ T671] gre3: entered allmulticast mode [ 1372.945612][ T681] bridge2: port 1(vlan3) entered blocking state [ 1372.960912][ T681] bridge2: port 1(vlan3) entered disabled state [ 1372.984727][ T681] vlan3: entered allmulticast mode [ 1373.012214][ T681] bridge2: entered allmulticast mode [ 1373.050531][ T681] vlan3: left allmulticast mode [ 1373.071765][ T681] bridge2: left allmulticast mode [ 1373.574751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.610895][ T711] __nla_validate_parse: 13 callbacks suppressed [ 1373.610919][ T711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7036'. [ 1373.640264][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7034'. [ 1373.761766][ T727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7034'. [ 1373.906887][ T709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1373.920745][ T709] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1373.941900][ T727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1373.966568][ T732] tipc: Started in network mode [ 1373.990849][ T732] tipc: Node identity 4a663d40ed85, cluster identity 4711 [ 1374.005731][ T732] tipc: Enabled bearer , priority 0 [ 1374.235060][ T745] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1374.317021][ T700] netlink: 'syz.2.7028': attribute type 7 has an invalid length. [ 1374.495166][ T745] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1374.699450][ T762] x_tables: duplicate underflow at hook 2 [ 1374.723809][ T763] x_tables: duplicate underflow at hook 2 [ 1374.950533][ T775] netlink: 'syz.1.7052': attribute type 1 has an invalid length. [ 1375.005572][ T775] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1375.122078][ T785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7055'. [ 1375.145253][ T939] tipc: Node number set to 2816687424 [ 1375.162330][ T782] tipc: Enabling of bearer rejected, failed to enable media [ 1375.326783][ T797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7049'. [ 1375.454131][ T805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1375.499867][ T805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1375.706558][ T812] syzkaller0: entered promiscuous mode [ 1375.712290][ T812] syzkaller0: entered allmulticast mode [ 1375.884343][ T783] syzkaller0: entered promiscuous mode [ 1375.952173][ T783] syzkaller0: entered allmulticast mode [ 1376.300436][ T836] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 1376.348092][ T840] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1376.382256][ T840] vlan3: entered allmulticast mode [ 1376.393627][ T840] gretap0: entered allmulticast mode [ 1376.579390][ T845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1376.689779][ T847] netlink: 'syz.5.7071': attribute type 9 has an invalid length. [ 1376.692595][ T849] "syz.1.7072" (849) uses obsolete ecb(arc4) skcipher [ 1376.766755][ T851] syzkaller0: entered promiscuous mode [ 1376.782457][ T851] syzkaller0: entered allmulticast mode [ 1376.882382][ T862] vlan0: entered promiscuous mode [ 1377.023061][ T857] tls_set_device_offload: netdev not found [ 1377.388293][ T881] lo speed is unknown, defaulting to 1000 [ 1377.441751][ T887] syzkaller0: entered promiscuous mode [ 1377.447825][ T887] syzkaller0: entered allmulticast mode [ 1377.884731][ T899] syzkaller0: entered promiscuous mode [ 1377.910888][ T899] syzkaller0: entered allmulticast mode [ 1378.074383][ T6353] batadv1: left promiscuous mode [ 1378.215105][ T881] dvmrp0: entered allmulticast mode [ 1378.311487][T19690] dvmrp0: left allmulticast mode [ 1378.560110][ T923] netlink: 'syz.0.7093': attribute type 1 has an invalid length. [ 1378.991998][ T956] __nla_validate_parse: 3 callbacks suppressed [ 1378.992023][ T956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7098'. [ 1379.227721][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7103'. [ 1379.332372][ T965] syzkaller0: entered promiscuous mode [ 1379.344096][ T965] syzkaller0: entered allmulticast mode [ 1379.374818][ T959] ip6gre1: entered promiscuous mode [ 1379.388489][ T959] ip6gre1: entered allmulticast mode [ 1379.548014][ T8201] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1380.024330][ T939] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1380.162320][ T998] netlink: 'syz.2.7110': attribute type 13 has an invalid length. [ 1380.619969][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1384.028195][ T1003] lo speed is unknown, defaulting to 1000 [ 1384.290237][ T1029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1384.489837][ T1038] syzkaller0: entered promiscuous mode [ 1384.495765][ T1038] syzkaller0: entered allmulticast mode [ 1384.677023][ T1040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7123'. [ 1384.879789][ T1062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7126'. [ 1384.890789][ T1063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7126'. [ 1385.165781][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7131'. [ 1385.334779][ T1094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7132'. [ 1385.363772][ T1094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7132'. [ 1385.707319][ T1118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7142'. [ 1385.787517][ T1123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'. [ 1386.131787][ T1135] netlink: 'syz.4.7146': attribute type 1 has an invalid length. [ 1386.264569][ T1135] bond5: entered promiscuous mode [ 1386.270719][ T1135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1386.316568][ T1143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1386.324049][ T1143] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 1386.336112][ T1143] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1386.389143][ T1140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7146'. [ 1386.413808][ T1143] bond5: (slave gre2): making interface the new active one [ 1386.430010][ T1143] gre2: entered promiscuous mode [ 1386.445034][ T1143] bond5: (slave gre2): Enslaving as an active interface with an up link [ 1386.907571][ T1162] lo speed is unknown, defaulting to 1000 [ 1387.327091][ T1196] netlink: 'syz.4.7160': attribute type 1 has an invalid length. [ 1387.533190][ T1196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1387.626587][ T1200] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1387.781769][ T1218] netlink: 'syz.5.7166': attribute type 1 has an invalid length. [ 1387.894477][ T939] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1387.906905][ T1202] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1387.969306][ T1200] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1387.989343][ T1200] bond6: (slave batadv2): making interface the new active one [ 1388.000813][ T1200] batadv2: entered promiscuous mode [ 1388.007329][ T1200] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 1388.620350][ T1250] bond0: (slave bond_slave_1): Releasing backup interface [ 1388.794552][ T8201] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1388.820017][ T1262] syzkaller1: entered promiscuous mode [ 1388.832043][ T1262] syzkaller1: entered allmulticast mode [ 1388.847376][ T1265] nbd: couldn't find a device at index 65546 [ 1388.880664][ T1259] xt_CONNSECMARK: invalid mode: 254 [ 1388.892000][ T1265] xt_HMARK: proto mask must be zero with L3 mode [ 1388.892891][ T1267] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 1389.739218][ T1312] can: request_module (can-proto-0) failed. [ 1389.754373][ T1314] __nla_validate_parse: 6 callbacks suppressed [ 1389.754396][ T1314] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7192'. [ 1389.803676][ T1314] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7192'. [ 1389.824003][ T1314] netlink: 'syz.5.7192': attribute type 5 has an invalid length. [ 1389.836415][ T1314] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7192'. [ 1389.882658][ T1322] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1389.903247][ T1322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1389.935205][ T1326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1390.220394][ T1335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1390.232104][ T1335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1390.918810][ T1368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7204'. [ 1394.072235][ T1373] syzkaller0: entered promiscuous mode [ 1394.085021][ T1373] syzkaller0: entered allmulticast mode [ 1394.201260][ T1396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7211'. [ 1394.214214][ T1396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7211'. [ 1394.873994][ T5673] Bluetooth: hci3: command 0x0406 tx timeout [ 1397.976126][ T1392] bond0: (slave bond_slave_1): Releasing backup interface [ 1398.136086][ T1418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7218'. [ 1398.150151][ T1420] veth0_to_team: entered promiscuous mode [ 1398.168771][ T1420] gretap0: entered promiscuous mode [ 1398.200533][ T1420] debugfs: 'hsr1' already exists in 'hsr' [ 1398.234504][ T1420] Cannot create hsr debugfs directory [ 1398.590835][ T1449] netlink: 'syz.2.7219': attribute type 25 has an invalid length. [ 1398.696917][ T1455] netlink: 'syz.1.7225': attribute type 24 has an invalid length. [ 1398.705653][ T1455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1398.734322][ T1455] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1398.912960][ T1463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7226'. [ 1399.100362][ T1472] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1399.175853][T19678] batadv2: left promiscuous mode [ 1399.242945][T28319] block nbd4: Receive control failed (result -1) [ 1399.249759][T28319] [ 1399.252131][T28319] ====================================================== [ 1399.259206][T28319] WARNING: possible circular locking dependency detected [ 1399.262382][ T1480] netlink: 'syz.5.7230': attribute type 1 has an invalid length. [ 1399.266614][T28319] syzkaller #0 Not tainted [ 1399.266633][T28319] ------------------------------------------------------ [ 1399.266668][T28319] kworker/u9:1/28319 is trying to acquire lock: [ 1399.266681][T28319] ffff88807d4060e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1399.266807][T28319] [ 1399.266807][T28319] but task is already holding lock: [ 1399.266816][T28319] ffff888046b24c68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1399.266886][T28319] [ 1399.266886][T28319] which lock already depends on the new lock. [ 1399.266886][T28319] [ 1399.266895][T28319] [ 1399.266895][T28319] the existing dependency chain (in reverse order) is: [ 1399.266903][T28319] [ 1399.266903][T28319] -> #6 (&nsock->tx_lock){+.+.}-{4:4} [ 1399.296669][ T1480] netlink: 'syz.5.7230': attribute type 3 has an invalid length. [ 1399.303094][T28319] : [ 1399.332828][ T1480] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7230'. [ 1399.339234][T28319] __mutex_lock+0x19d/0x1550 [ 1399.339272][T28319] nbd_queue_rq+0x373/0x1150 [ 1399.339300][T28319] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1399.339352][T28319] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1399.339386][T28319] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1399.339409][T28319] blk_mq_run_work_fn+0x16c/0x300 [ 1399.339427][T28319] process_scheduled_works+0xa8e/0x14e0 [ 1399.339452][T28319] worker_thread+0xa47/0xfb0 [ 1399.339474][T28319] kthread+0x388/0x470 [ 1399.339499][T28319] ret_from_fork+0x514/0xb70 [ 1399.339540][T28319] ret_from_fork_asm+0x1a/0x30 [ 1399.429443][T28319] [ 1399.429443][T28319] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1399.436697][T28319] __mutex_lock+0x19d/0x1550 [ 1399.441844][T28319] nbd_queue_rq+0xc1/0x1150 [ 1399.447058][T28319] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1399.453139][T28319] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1399.460119][T28319] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1399.466640][T28319] blk_mq_run_work_fn+0x16c/0x300 [ 1399.472188][T28319] process_scheduled_works+0xa8e/0x14e0 [ 1399.478257][T28319] worker_thread+0xa47/0xfb0 [ 1399.483379][T28319] kthread+0x388/0x470 [ 1399.487988][T28319] ret_from_fork+0x514/0xb70 [ 1399.493111][T28319] ret_from_fork_asm+0x1a/0x30 [ 1399.498396][T28319] [ 1399.498396][T28319] -> #4 (set->srcu){.+.+}-{0:0}: [ 1399.505646][T28319] __synchronize_srcu+0xc9/0x2f0 [ 1399.511138][T28319] elevator_switch+0x1e8/0x7b0 [ 1399.516427][T28319] elevator_change+0x2fa/0x480 [ 1399.521723][T28319] elevator_set_default+0x375/0x440 [ 1399.527461][T28319] blk_register_queue+0x3f3/0x4e0 [ 1399.533044][T28319] __add_disk+0x6cb/0xe30 [ 1399.537911][T28319] add_disk_fwnode+0xfb/0x4b0 [ 1399.543165][T28319] nbd_dev_add+0x733/0xb60 [ 1399.548126][T28319] nbd_init+0x15f/0x1e0 [ 1399.552950][T28319] do_one_initcall+0x250/0x870 [ 1399.558243][T28319] do_initcall_level+0x10a/0x1a0 [ 1399.563729][T28319] do_initcalls+0x59/0xa0 [ 1399.568594][T28319] kernel_init_freeable+0x29d/0x3e0 [ 1399.574344][T28319] kernel_init+0x1d/0x1d0 [ 1399.579382][T28319] ret_from_fork+0x514/0xb70 [ 1399.584521][T28319] ret_from_fork_asm+0x1a/0x30 [ 1399.589840][T28319] [ 1399.589840][T28319] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1399.597694][T28319] __mutex_lock+0x19d/0x1550 [ 1399.602900][T28319] elevator_change+0x1af/0x480 [ 1399.608219][T28319] elevator_set_none+0xb5/0x140 [ 1399.613596][T28319] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1399.619950][T28319] nbd_start_device+0x189/0xb30 [ 1399.625361][T28319] nbd_genl_connect+0x1597/0x1c10 [ 1399.631216][T28319] genl_family_rcv_msg_doit+0x233/0x340 [ 1399.637586][T28319] genl_rcv_msg+0x614/0x7a0 [ 1399.642640][T28319] netlink_rcv_skb+0x226/0x4a0 [ 1399.647952][T28319] genl_rcv+0x28/0x40 [ 1399.652486][T28319] netlink_unicast+0x7bb/0x940 [ 1399.657802][T28319] netlink_sendmsg+0x813/0xb40 [ 1399.663141][T28319] sock_sendmsg_nosec+0x13a/0x180 [ 1399.669071][T28319] ____sys_sendmsg+0x54e/0x850 [ 1399.674403][T28319] ___sys_sendmsg+0x2a5/0x360 [ 1399.679655][T28319] __x64_sys_sendmsg+0x1b1/0x290 [ 1399.685147][T28319] do_syscall_64+0x174/0x580 [ 1399.690293][T28319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.696760][T28319] [ 1399.696760][T28319] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1399.705443][T28319] blk_alloc_queue+0x544/0x690 [ 1399.710761][T28319] __blk_mq_alloc_disk+0x194/0x390 [ 1399.716407][T28319] nbd_dev_add+0x494/0xb60 [ 1399.721358][T28319] nbd_init+0x15f/0x1e0 [ 1399.726157][T28319] do_one_initcall+0x250/0x870 [ 1399.731479][T28319] do_initcall_level+0x10a/0x1a0 [ 1399.737051][T28319] do_initcalls+0x59/0xa0 [ 1399.741941][T28319] kernel_init_freeable+0x29d/0x3e0 [ 1399.747686][T28319] kernel_init+0x1d/0x1d0 [ 1399.752546][T28319] ret_from_fork+0x514/0xb70 [ 1399.757696][T28319] ret_from_fork_asm+0x1a/0x30 [ 1399.763094][T28319] [ 1399.763094][T28319] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1399.770701][T28319] fs_reclaim_acquire+0x71/0x100 [ 1399.776206][T28319] __kmalloc_noprof+0xbc/0x720 [ 1399.781535][T28319] tls_sw_sendmsg+0x599/0x2860 [ 1399.786883][T28319] sock_sendmsg_nosec+0x90/0x180 [ 1399.792353][T28319] sock_sendmsg+0x1ca/0x2d0 [ 1399.797458][T28319] splice_to_socket+0xb5e/0x12a0 [ 1399.802935][T28319] direct_splice_actor+0x101/0x160 [ 1399.808585][T28319] splice_direct_to_actor+0x57b/0xcb0 [ 1399.814489][T28319] do_splice_direct+0x195/0x290 [ 1399.819872][T28319] do_sendfile+0x52e/0x7c0 [ 1399.824840][T28319] __se_sys_sendfile64+0x144/0x1a0 [ 1399.830683][T28319] do_syscall_64+0x174/0x580 [ 1399.835816][T28319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.842250][T28319] [ 1399.842250][T28319] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1399.850449][T28319] __lock_acquire+0x1520/0x2cf0 [ 1399.855856][T28319] lock_acquire+0x106/0x350 [ 1399.860915][T28319] lock_sock_nested+0x41/0x100 [ 1399.866210][T28319] inet_shutdown+0x6a/0x390 [ 1399.871246][T28319] nbd_mark_nsock_dead+0x2cb/0x550 [ 1399.876976][T28319] recv_work+0x1cee/0x1e10 [ 1399.882201][T28319] process_scheduled_works+0xa8e/0x14e0 [ 1399.888448][T28319] worker_thread+0xa47/0xfb0 [ 1399.893678][T28319] kthread+0x388/0x470 [ 1399.898362][T28319] ret_from_fork+0x514/0xb70 [ 1399.903496][T28319] ret_from_fork_asm+0x1a/0x30 [ 1399.908786][T28319] [ 1399.908786][T28319] other info that might help us debug this: [ 1399.908786][T28319] [ 1399.919011][T28319] Chain exists of: [ 1399.919011][T28319] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1399.919011][T28319] [ 1399.932159][T28319] Possible unsafe locking scenario: [ 1399.932159][T28319] [ 1399.939678][T28319] CPU0 CPU1 [ 1399.945177][T28319] ---- ---- [ 1399.950596][T28319] lock(&nsock->tx_lock); [ 1399.955176][T28319] lock(&cmd->lock); [ 1399.961719][T28319] lock(&nsock->tx_lock); [ 1399.968712][T28319] lock(sk_lock-AF_INET6-NBD); [ 1399.973669][T28319] [ 1399.973669][T28319] *** DEADLOCK *** [ 1399.973669][T28319] [ 1399.981911][T28319] 3 locks held by kworker/u9:1/28319: [ 1399.987316][T28319] #0: ffff8880227b9140 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1399.999096][T28319] #1: ffffc900040efc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1400.011125][T28319] #2: ffff888046b24c68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1400.020566][T28319] [ 1400.020566][T28319] stack backtrace: [ 1400.026492][T28319] CPU: 1 UID: 0 PID: 28319 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1400.026511][T28319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1400.026523][T28319] Workqueue: nbd4-recv recv_work [ 1400.026541][T28319] Call Trace: [ 1400.026550][T28319] [ 1400.026560][T28319] dump_stack_lvl+0xe8/0x150 [ 1400.026585][T28319] print_circular_bug+0x2e1/0x300 [ 1400.026603][T28319] check_noncircular+0x12e/0x150 [ 1400.026629][T28319] __lock_acquire+0x1520/0x2cf0 [ 1400.026652][T28319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1400.026673][T28319] ? try_to_wake_up+0x8c5/0x14d0 [ 1400.026701][T28319] ? inet_shutdown+0x6a/0x390 [ 1400.026720][T28319] lock_acquire+0x106/0x350 [ 1400.026739][T28319] ? inet_shutdown+0x6a/0x390 [ 1400.026760][T28319] ? __queue_work+0x1ea/0x10a0 [ 1400.026781][T28319] lock_sock_nested+0x41/0x100 [ 1400.026798][T28319] ? inet_shutdown+0x6a/0x390 [ 1400.026817][T28319] inet_shutdown+0x6a/0x390 [ 1400.026838][T28319] nbd_mark_nsock_dead+0x2cb/0x550 [ 1400.026863][T28319] recv_work+0x1cee/0x1e10 [ 1400.026878][T28319] ? __lock_acquire+0x683/0x2cf0 [ 1400.026899][T28319] ? register_lock_class+0x31/0x2e0 [ 1400.026919][T28319] ? __lock_acquire+0x683/0x2cf0 [ 1400.026942][T28319] ? __pfx_recv_work+0x10/0x10 [ 1400.026956][T28319] ? do_raw_spin_lock+0x12b/0x2f0 [ 1400.026975][T28319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1400.026991][T28319] ? process_scheduled_works+0xa20/0x14e0 [ 1400.027012][T28319] ? rcu_is_watching+0x15/0xb0 [ 1400.027035][T28319] ? process_scheduled_works+0xa20/0x14e0 [ 1400.027051][T28319] process_scheduled_works+0xa8e/0x14e0 [ 1400.027077][T28319] ? __pfx_process_scheduled_works+0x10/0x10 [ 1400.027096][T28319] ? assign_work+0x3cf/0x5d0 [ 1400.027113][T28319] worker_thread+0xa47/0xfb0 [ 1400.027136][T28319] ? __kthread_parkme+0x71/0x1f0 [ 1400.027158][T28319] kthread+0x388/0x470 [ 1400.027178][T28319] ? __pfx_worker_thread+0x10/0x10 [ 1400.027194][T28319] ? __pfx_kthread+0x10/0x10 [ 1400.027214][T28319] ret_from_fork+0x514/0xb70 [ 1400.027237][T28319] ? __pfx_ret_from_fork+0x10/0x10 [ 1400.027258][T28319] ? __switch_to+0xc89/0x1420 [ 1400.027278][T28319] ? __pfx_kthread+0x10/0x10 [ 1400.027298][T28319] ret_from_fork_asm+0x1a/0x30 [ 1400.027318][T28319] [ 1405.093518][ T5673] Bluetooth: hci5: command 0x0406 tx timeout