last executing test programs: 8m13.625024439s ago: executing program 1 (id=2574): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd2d, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 8m13.228944523s ago: executing program 1 (id=2577): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000002740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x19d}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380000000000000029000000040000003a030000000000000109000000000000000000c910000000000000000000000000000000000000001400000000000000290000003e0000000a00000000000000140000000000000029000000430000000400000000000000a80000000000000029000000390000003212020a00000000000000000000000000000000000000010000000000000000fc00000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000fc010000000000000000000000000000ff0100000000000000000000000000012000000000000000290000"], 0x148}}], 0x2, 0x0) close(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) connect$inet6(r5, 0x0, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000068e000/0x8000)=nil, 0x8000, 0x2000002, 0x12, r6, 0x2b9cc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r7, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2e, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ffffffe, 0x8b}}}}}}, 0x0) openat$cgroup_int(r6, 0x0, 0x2, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x70}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 8m10.863616333s ago: executing program 1 (id=2595): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdfd2, 0x0, 0x0, 0x0, 0x5f}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x41000, 0x8}, 0xfffffffffffffcf5) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f00000001c0)="11eb030086dd", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdfd2, 0x0, 0x0, 0x0, 0x5f}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x41000, 0x8}, 0xfffffffffffffcf5) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r1, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendto$packet(r2, &(0x7f00000001c0)="11eb030086dd", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) (async) 8m10.567144252s ago: executing program 1 (id=2600): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0x4, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff]}}, 0x4cfd, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x108}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff0000ff, 0xb, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x40, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x311) r1 = socket(0x15, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6eeb, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x3, 0x0, 0x6, 0x1, 0xc, 0xfffffffffffffff0}]}, &(0x7f00000004c0)='GPL\x00', 0xffffffff, 0xf, &(0x7f0000000500)=""/15, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0xc, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x0, 0x3, 0xb, 0xb}, {0x1, 0x2, 0x9, 0x7}, {0x5, 0x5, 0x6, 0x7}, {0x4, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x7, 0x6}, {0x5, 0x5, 0xc, 0x8}], 0x10, 0x1}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000003040)={{r3, &(0x7f0000000740)=')!.\x00', 0xc0000, &(0x7f0000000780)={@_ha_fsid={[0xb, 0x5c5e]}, {0x4000, 0xfffd, 0x6, 0x1}}, 0x5, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x5}, 0x3, &(0x7f0000002fc0)=[{0x1, 0x8, &(0x7f0000000840)='%\x00', &(0x7f0000000880)="260fda1d22fc4d8763226e56479183cec4d20958a76017c9f3df8e0e8cf8832dbeb09afc976ee7534488fd13b61fce19a0393e7c29da84dfc22957677307563ed524f46c73727d2cc1d74aa7699e55e65f2d0254b6be7034317438bae1d4e9f5c922f4f009bcd5cc5322bf634fc2ef5be0c8d2c75149546a027d203451e1b01a316c58b556ee16c5d41e555592d07b36b64b77b28060", 0x96, 0x20}, {0x2, 0xfffffffb, &(0x7f0000000940)='hsr0\x00', &(0x7f0000000980)="a51f4e4612ae42f1f90187dac14232be0816dcdeecd4fe366e38a88f6dc3ddc76c8d7513f8d1850de55715409299812ce4e854ed3f02cd614e0ed0ca21365b64efbe28b0f0eaa3b645f6587818227c7f5f21b564a2bc7379b1ce37dc024f1c7b474644", 0x63, 0x30}, {0x1, 0xd, &(0x7f0000000a00)='\xbe@S{(${\x8c+\x10\x00', &(0x7f0000001fc0)="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", 0x1000, 0x2}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000f80)=""/4115, 0x31, 0x1013, 0x9}, 0x28) 8m10.320015971s ago: executing program 1 (id=2603): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x80000001, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltclass={0x68, 0x29, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff6}, {0xb}, {0x10, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x30, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0xf5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @empty, @remote}, &(0x7f0000001640)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001c80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001cc0)={0x578, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "53ebb9ddb3b98a6000c3c1d7c9005efb71f7259d571efc830485266a0509578681777e2556ce260d09469d1d60f7c107a69a6b96e99088a62256b1ac8489290d7694ac91bf839b12478d71129fb7702ddb9a737d88be2f5a83d4e32317b2858654ad8164b94b45422c10f9809be233fd61613460f7aca756e4e0a5436d29b29f52e7d3e6cd1c51cd62e415519549a49e0198ed779a2e641bb07038159623d8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x56, 0x4, "47d7be405c081e7eabae88c9b75e947704e50f51e9ca0e71639eaf2ea5d86b628ba80cd03725fdd5bb36e4859a1936d9936b8c9fad53d12194d97865f0a4577393b848b7f0e6bd42fa363d04101f1d5e18e1"}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'qfq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '+]-*\xfe}]%+\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*;(}\xee\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'qfq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.\\9\\)\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x394, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-@^+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e43}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x118c0}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'qfq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'$)!@{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x500000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "66c0166c42028fb29e048a007f89b34c740740a8b8ab4a4861a45089db8805e3e199b8d742f27541c759f73919a7190835168bdd82103f6cabfc2750dfd72ca6004e3d61a6e2ff8d81860962e33b3ce08c619e963eb74d6c32be25aaaaf88c5ff1388e004b9ae6831077d2c8d43bedcba962606e562a5cf9a24e4e42c2a48e301aadc30568e781d54f1ea031bd3b274da287ae0c79c995ed6f9964af30fe1af6"}, @ETHTOOL_A_BITSET_MASK={0x100, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff19}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\xba^'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7097}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\\\:}&&\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'qfq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "c1965a26b40bc4dbbb848268962e63da1fa35ad1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x578}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003010000000000000000000000000000180017000000000700008001000000080000000100000003"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x800) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r10, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='B\x00', @ANYRES8=r5], 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x730}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x70}}, 0x20004000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x58, r12, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) 8m9.568460724s ago: executing program 1 (id=2612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 7m54.515362045s ago: executing program 32 (id=2612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 7.467706841s ago: executing program 3 (id=6535): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 7.352855204s ago: executing program 3 (id=6536): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) unshare(0x6a040000) (rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) splice(r4, 0xfffffffffffffffe, r5, 0x0, 0x8, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x24c}}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)}], 0x4}, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="03000000060000000100"/28], 0x50) (rerun: 64) 3.243409577s ago: executing program 0 (id=6552): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) recvmmsg$unix(r0, &(0x7f0000001ec0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000001fc0)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/97, 0x61}], 0x4, &(0x7f0000001e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001400), 0x6e, &(0x7f0000001940)=[{&(0x7f0000001480)=""/19, 0x13}, {&(0x7f00000014c0)=""/169, 0xa9}, {&(0x7f0000001580)=""/137, 0x89}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/231, 0xe7}, {&(0x7f0000002040)=""/164, 0xa4}, {&(0x7f0000001880)=""/176, 0xb0}], 0x7, &(0x7f00000019c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x178}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001bc0)=""/213, 0xd5}, {&(0x7f0000001cc0)=""/120, 0x78}, {&(0x7f0000001d40)=""/224, 0xe0}], 0x3, &(0x7f0000001e80)}}], 0x3, 0x40, &(0x7f0000001f80)) socket(0xa, 0x3, 0x87) unshare(0x2a020400) socket(0x40000000015, 0x5, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @broadcast}, 0x10) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r2, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x1000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000b00)="130000000102039839", 0x9}], 0x1) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86021000403b00fe800000000000000000000000000000010400907800000000608bb91d00001100fe8000000000000000000000000000aa000000000000000000000000000000002c000000000000000001000100000000000000"], 0x0) 2.463434673s ago: executing program 4 (id=6563): r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x22}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0x1, 0x30, 0x9, 0xfffffffffffffffe}, &(0x7f00000000c0)=0x18) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f0000000840)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'veth0_virt_wifi\x00', @remote}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x2, 0x4}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\f', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) 2.333926178s ago: executing program 0 (id=6565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket(0xa, 0x5, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000340)) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000580)={r2, &(0x7f0000000200)='\x00', 0x400000, &(0x7f0000000240)={@_ha_fsid={[0x2, 0x5]}, {0x7f, 0xbbd7, 0xc000, 0x6}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x4}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a030000"], 0x40}}, 0x48000) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x2002, 0x40000002, 0x4, 0xa17433da3c5d6980, 0x2, 0x7}, 0x9c) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) (rerun: 32) mmap(&(0x7f0000691000/0x1000)=nil, 0x1000, 0x1000007, 0x4000010, 0xffffffffffffffff, 0xf1141000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 2.322701105s ago: executing program 3 (id=6566): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000001010103000000000000000002000000180001801400018008000100ffffffff04000200e00000010c0019800800010002"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x49e0}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8054}, 0x48010) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) 2.157359133s ago: executing program 4 (id=6568): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0xe27d, @remote, 0x1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000320a0b"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) (async, rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6) (async) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r7) (async, rerun: 32) recvmmsg(r6, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x35}], 0x1, 0x2, 0x0) (rerun: 32) syz_emit_ethernet(0xef, &(0x7f00000007c0)={@multicast, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x4, 0x1, 0x3}}, {@llc={0x4, {@snap={0xaa, 0xab, "00ba", "46a5b0", 0xf7, "e2ae87ef093415b20ec778bf9cdf25379ce1caa27fb1d67600a24ae82ea52a0ef9495875cec5a6aa4a96ef77cd97dc229d25c37ff717f47222f11d7deb1054ef86f6627862fdc7a6a943cd5f3423044facc007455c7861e1f8dd0dc487af78c3468dc6b0337d58096ba03879fe7487150cf7d851b60eddffafef5d23ebd2b64cfdeb9a6b6fdcc872d048830c884475391ef8f273765b81072ab570ec871037407a24ac642dd7e3c4fc38468222bd49d2256d5a97f8f87975646adf2a92109882f3e01634b87347b8dcb0824a1bd8bdda"}}}}}, &(0x7f0000000400)={0x1, 0x1, [0xc02, 0x278, 0xe20, 0x1fe]}) (async, rerun: 64) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r6], 0x48}}, 0x2404c054) (rerun: 64) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000180)) (async, rerun: 64) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x4, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x38}, 0x40) (rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x3, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xec, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x8, 0xffff}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x47, 0x2, 0x4, 0x2, 0x0, 0x40, 0xff, 0x3}}, {0xa, 0x2, [0xdfb, 0x8001, 0x2400]}}, {{0x1c, 0x1, {0x6, 0x81, 0x6, 0x6, 0x1, 0x8, 0x14d9, 0x3}}, {0xa, 0x2, [0x9, 0x200, 0x2]}}, {{0x1c, 0x1, {0x5, 0x6, 0x6, 0xc6, 0x2, 0x28de, 0xfd, 0x2}}, {0x8, 0x2, [0x81, 0x80]}}, {{0x1c, 0x1, {0x2, 0x6, 0x7ff, 0x7fffffff, 0x2, 0x2, 0x3, 0x5}}, {0xe, 0x2, [0xc00, 0x2, 0xee0, 0x1, 0x4]}}, {{0x1c, 0x1, {0x3, 0x8, 0x101, 0x8, 0x1, 0xd3, 0xfffffffb, 0x2}}, {0x8, 0x2, [0x2, 0x9c]}}]}]}, 0xec}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) 2.105730975s ago: executing program 0 (id=6569): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r1, 0x4, 0x5, 0x8, 0x4, 0x32, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x700, 0x0, 0x5}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x100000af5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1040}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.036416854s ago: executing program 3 (id=6570): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x2000c841) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xd}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffe, @private1, 0x5}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r3, 0xe0, "b54f88c8d8e29b3bb565d500967c909ad012866f059679cdee499ee356ed475698292d2d15d04c551ca4068890e1c3f3946f2373e532f4a53030f1cee2da485640d103972219d2a6ce1af418d87a6b04f34bfe1a6da577b54f80c81465ef0ee3c85058cb8b25836e958b530d34dda69b2bbcc5dee78cb0ba1c4acb91a99bf664d371d4126eca6eb03f5f5d6561483e55c249167348a2dcb12accccd802a24e034f03d3baffee20b18f2142c428eda9aceaceb0195783556c00bdd89fe200b42a7ecc3bbf5cfe8e4a37c8c1c864ebfc81bb1a456f69d55c324e737248a155f2b1"}, &(0x7f0000000380)=0xe8) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x2, 0xb, 0x11, 0x200, 0x1, 0x1007, 0x2000000000000007, 0x1004}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) 1.713463924s ago: executing program 4 (id=6573): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$inet_buf(r0, 0x0, 0x24, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000815) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x4, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000002e40)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r9, 0x0, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 1.603549804s ago: executing program 5 (id=6575): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x29, 0x4, 0x6, 0xfff, 0x35, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7, 0x2, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r9, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000480)={0x5bc, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x2, 0xfa, 0xde, 0x5}, {0x5, 0x7, 0x2, 0x401}, {0x3, 0xcc, 0x9, 0x2}, {0x10, 0x81, 0x0, 0x5}, {0xbd2f, 0xf, 0x0, 0x5}, {0xd, 0x44, 0x8, 0x1}, {0x4, 0x6, 0xac, 0xfffffffb}, {0xe, 0x8, 0xff, 0x3}, {0x40, 0x2, 0x2, 0x5}]}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x5bc}}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.587438876s ago: executing program 4 (id=6576): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (rerun: 32) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000040)={0xa6b, 0x401, 0x0, 0x7fff, 0x78, 0x0, 0xb}) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='3', 0x1}, {0x0}], 0x2}}], 0x1, 0x20e8086) (async) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.304827881s ago: executing program 2 (id=6578): syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff0200000007000000000000000000000000604aa19800003c"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0xa5adc10451e927fd, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.198219175s ago: executing program 2 (id=6579): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x9, 0xfffffff2, 0x7f, 0x4401, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf737, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x8, 0xbb, 0x7, 0x41e40, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0xa66, 0x2e4, 0x4, 0x1, 0xb12, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xe}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x6, 0x30}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x100875fb, 0x0, 0x2, 0x40010, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x83}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x1, &(0x7f00000000c0)=""/1, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0x6, 0x0, 0x5}, 0x10, r0, 0xffffffffffffffff, 0x6, &(0x7f00000007c0)=[0xffffffffffffffff, r1, r2, r3, r4, r5, 0xffffffffffffffff, r6, r7], &(0x7f0000000800)=[{0x0, 0x5, 0xf, 0x2}, {0x4, 0x3, 0xf, 0xe}, {0x1, 0x5, 0x7, 0x6}, {0x3, 0x5, 0xf, 0x1}, {0x0, 0x1, 0xd, 0x4}, {0x0, 0x5, 0x8, 0x3}], 0x10, 0x1}, 0x94) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="62131f022677fe92397bdbce59ddf9da7e543532666ee1a21d4d7ec9b0b49928da64f3f761903c60a9249d82dd82f92e34b43af235f35740f7542828fac22b1a97bac3b75d499cf9c24e924d9258905e29cb33290a38fd6f7e4e2f57c9cacb03ab6bd3c832e33124f07cb7b34972e731cb910bb8c2fce3f7794e01f08dead91a154d55ea58b8929435e2be9ecc0f", 0x8e}, {&(0x7f0000000a40)="20a9f46b8803a0554b9e2eb8cd1adc40a29901f7446a68c6a80a8797482346358d85ec86006533c3db9b8a2dc90d3af5c1c9cc5a78a2b9d0279f37f2be12b4b8636cf61f6e388424ef8c5a1f2ebffe60e0c674071828ea7606fd85d0d660d2bb1dfcbffaeebd03d48d1743fb7c1f43761a92b1644b7e202655dd3c534025d147741c6abbf2654357f9d1aab01a631a4c3b7764184febfa2e2475b07b8dd864", 0x9f}], 0x3, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [r4, r4, r1]}}, @rights={{0x30, 0x1, 0x1, [r2, r5, r1, r8, r4, r7, r7, r5]}}], 0x50, 0x2400c040}, 0x40800) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000c00), 0x4) ioctl(r6, 0x100, &(0x7f0000000c40)="afb90d21638499cd9d965adccb8b4acb39c32c12affe608b19d183ea29db0840cb20ca569b856e8f2d7657e952096b42496c5443773ea89af2de5ab08992874bcae00216eee640b7fa812c06af7077e33362b62087756e256e72f128993ba69a268fa41c9ea341d00bd88fe00fc204e66a1e49dc94fa8364a8803cf245fe2b0545adce0dfe73cc3ef7948082482d1996a5575603beeaa7259b4d040c20417b47e5a13867657328851f060ef45fc71a9f01421a3bda56dc656528e2e69914942b4de20ee7ded48e45fa9e5484fed8bb0fa8c661a8aa4ae5d741f2c86d") r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0xe7dd67ee8b6d82db}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc00}, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000e80)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}, 0xad6d, 0x1, 0x3, 0x0, 0xfffffffc}, &(0x7f0000000f40)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000f80)={r12, 0xa4, "6ed02eea3ab68f6e3f4c01a6aee953d3230261c1b84cb14f8a4167d12422f4798d37bb9da28ac20159a31f1471abf3349ff5a217ddc94131d29442b9a1fe5d9bc0430fd0a52a49d06c641d95dd92e553c1422d478e516279f2c4571a934c29b773b88619cb2b111bd77320182c6acf08b4677b6e433728a0f93544e6f85075c7b201a4d99c92e53f063cbf2de4b9141e312c9b4fbd538c657d96b01371b743bc9414b40d"}, &(0x7f0000001040)=0xac) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000001080)=0xeeceb97ba6c2f8af, 0x4) r13 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001140)=0x60) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001180)={r12, @in={{0x2, 0x4e24, @broadcast}}, 0x9, 0xdde8, 0x3, 0xfffffffe, 0x11, 0xfffffa5f, 0x9}, &(0x7f0000001240)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001280)=@sack_info={r14, 0x200, 0xfffffff9}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r16, &(0x7f0000001300)="6425ac92fe85", 0x6, 0x81, 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(r15, 0x40186f04, &(0x7f00000013c0)={&(0x7f0000001340)='devlink\x00', &(0x7f0000001380)='@-[,:\\\x00', 0xc}) socket$nl_netfilter(0x10, 0x3, 0xc) r17 = accept4$nfc_llcp(r13, &(0x7f0000001400), &(0x7f0000001480)=0x60, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r17, 0x81f8943c, &(0x7f00000014c0)) 1.048219096s ago: executing program 0 (id=6580): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7d, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32=r1, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fea8"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) 1.047289049s ago: executing program 5 (id=6581): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 959.8572ms ago: executing program 2 (id=6582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f00000003c0)=""/10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000005000000030000000000000c03000000000000000000000200000000000000000800000d0200000003000000010000000d000000040000000400000003000000060000000100000002000000030000000e000000ddd500000e00000003000000060000"], 0x0, 0x81}, 0x28) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r4, @ANYBLOB="080002f1ab1414aa"], 0x20}}, 0x40000c0) (async) r5 = socket$inet(0x2, 0x3, 0x2) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20004811}, 0x4) (async) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x2, 0x20000002, 0x100000001) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, &(0x7f00000023c0)) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100000032abd70000007000e00000000", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100736974000c00028008000300e000000108000a00", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 940.206591ms ago: executing program 5 (id=6583): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000900)={&(0x7f0000000400)=0xd, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000008c0)}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={r5, 0x10, "3f77bd301f72b9a895dd0c7404e114e1"}, &(0x7f00000002c0)=0x18) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0}}], 0x1, 0x14048011) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @multicast2, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', r9, 0x2f, 0x2, 0x6, 0x7, 0x6d, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast1, 0x1, 0x7800, 0x3, 0x8}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x10, 0x4, 0x2, 0xa87, 0xa, 0x69, 0x9bd4, 0x81, r10}, 0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r10, 0x7, 0x8, 0x93f}, 0x10) socket$igmp(0x2, 0x3, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000763ca7af392cfa04db36611e55e9d1cba9157ad583bf84943a4f117aa5c4b8222fd022cebb96bd54f4b33199d57521", @ANYRES16=r2, @ANYBLOB="01002cbd7010040400000500000008000900020000000c0016000900000000000000060001000500000006000300020000000500130001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000034) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000003c0)={r4, 0xfffffffb}, &(0x7f00000009c0)=0x8) 872.016162ms ago: executing program 3 (id=6584): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=@setlink={0x44, 0x13, 0x5, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x48000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7, 0x1, 0xb2, 0x4, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000005000000000000000000181154fb", @ANYRES32=0x0, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRESDEC=r0], &(0x7f0000000680)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400000000000000000000d5d0", @ANYRES32=r6, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r6, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0041"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r7], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x500}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3e860e3b1ca6c716, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 860.000894ms ago: executing program 0 (id=6585): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x801) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xb82}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003205010a00000000000000000a000003"], 0x14}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/53, 0x109000, 0x800, 0x100, 0x3}, 0x20) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x1000}, 0x8) socket(0x28, 0x5, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) recvfrom(r4, 0x0, 0x0, 0x2002, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1f8}}, 0x1, 0xfe15}, 0x90) 790.94687ms ago: executing program 2 (id=6586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000000)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {&(0x7f0000000600)="6cf03a70aba485af", 0x8}], 0x3}}], 0x1, 0x24000800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x5, 0x4, 0x1, 0x7fff, 0x100000005]}, &(0x7f0000000080)=0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r6, &(0x7f00000000c0)="dd0b751b55ac3b1dd91222f2978cdcda8d49f7a322d8b71988a4125f3946e64191854cb31c2fe8a06bf561", 0x2b, 0x0, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fa0085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000180)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xa}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x2}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 700.03979ms ago: executing program 5 (id=6587): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x45) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0)=0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000940)={'veth1_to_bond\x00', 0x200}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r7, 0x28, 0x1, 0x0, &(0x7f0000000000)) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000cc0)={{r3, &(0x7f0000000080)='\x00', 0x40043, &(0x7f00000001c0)={@align=0xffff, {0x4, 0xffb6, 0xbc, 0x2931}}, 0x0, &(0x7f0000000200), &(0x7f0000000340)=0x9}, 0x7, &(0x7f0000000bc0)=[{0x2, 0xf8e, &(0x7f0000000440)='syzkaller0\x00', &(0x7f0000000480)="1be445f21545eab3d1ab502466b9524e09765d17e07be142742356e406813822f903add48f4fa74d972d7baa64c6cb53ff1d882c873b0c55e8b920eadf236ff10bc360c55b0432b80f46", 0x4a, 0x2}, {0x3, 0xb, &(0x7f0000000500)='syzkaller0\x00', &(0x7f0000000540)="4ce8bab3f1062ada44dc2e30d2725341d48c582e1f5282b77add8b09d3b801781d33d68c", 0x24, 0x2a}, {0x0, 0xfffffff9, &(0x7f00000005c0)='&{]:\'#]\x00', &(0x7f0000000680)="ed9e1e30219fae7c1ffd74776788bbe2f56631621cde3dfc59d6e65d683b86ada27a857101956a1b466698d0b5927d48bab086460d84d8df1852cd3a4394e28b1c9a", 0x42, 0x30}, {0x2, 0x6, &(0x7f0000000700)='(\x00', &(0x7f0000000740)="33ac7c72a2c09cff45793abbdd36cfde0f4dc6b282c5fc7a7ccde943bbfeb784205e8ca51dcc431cfffa559e34314cc761126ccd4d599cf7ae63e83e1d3f925bd0b9fe3817ffe91a746b727736996aa2b9a63f8a04ba6a29ce95bf1a9ac4018de6b22e33b2358da8b2dab34c8ef58a6d388eb26e9098d2b4723aa00280ccbeb445561406e9e1e18cd41577ab4bf0c65e2a5d04e7c200a883e3445bb0977bc2d1b3b17934ca902bd2b29a65e67a88bc22d9e24ad50daab80ea03ff06b2739bf64a9ac6969b307f7411ff1193d0de91b1f93dc5e2b054fe9b73bc06446a059957c6e1442c3a2b88ca734acb880", 0xec, 0x18}, {0x2, 0x89, &(0x7f0000000840)='syzkaller0\x00', &(0x7f0000000880)="82621ba3e1d71bfd8236c503267135fcfb938018b54cae", 0x17, 0x8}, {0x1, 0x7f, &(0x7f00000008c0)='(-\'@^\x00', &(0x7f0000000a00)="08dbf73cc5d4786a1bb80aa4b244cf6885f93ea88de6f165daeaa8d4bbafe1b055a33af712fae8ade593c3921b8a86b6db344d900a5fa9090b91ce9b626d3ad9923fceb9dae70c6619f2a6dc1e6219a0fee95c15e2532a3b5d22e7ba6b34c34ad1e44fc1fab3c948bbd5c51ff4db6033c3c1bbb9ebdbc54915c622d169cb92b194c7f4f440ec3bd69426c463a0308fab80ef7a1ddb77d4634abce190adbedaeb4e8dc20c20cb05db05bcd3065c454974d1b6bc8f1eb452b6989ffde0b0315dbdc34485a20e4c7a8e769eb12e0ad4c9762aa954de9733c8c9b473976998", 0xdd, 0x28}, {0x1, 0x4, &(0x7f0000000b00)='*$\x00', &(0x7f0000000b40)="44597a7db8d9c41af2a5d796407390531c2f377c04a40763bf4e1ea5a68b3fcf3f3dfac0073a2ef9e20384c8f5dfe3ec9822a881a72d010e0cf14aae0e2dbe3ef4d8cb57cea3f55b77d991283f46c01cc0df89ed16800b21", 0x58, 0x6}]}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000d40)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 698.96274ms ago: executing program 3 (id=6588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x100, 0x7, 0x9, 0x88021, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0xa}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="000000004000000014001280090001007665746800000000", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x12, 0x0, @void}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x20000800) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000640)={r4, &(0x7f0000000240)='syzkaller\x00', 0x10000, &(0x7f0000000540)={@_ha_fsid={[0x2, 0xa]}, {0x6, 0x3, 0xfb5d, 0x1}}, 0x6, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x20, 0xcc1f, 0x9, 0xfffff001, 0x20881, r1, 0x10001, '\x00', r12, r13, 0x4, 0x0, 0x3}, 0x50) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 663.39858ms ago: executing program 4 (id=6589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_OIF={0x8, 0x4, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/80, 0x50}}], 0x1, 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) 476.918166ms ago: executing program 4 (id=6590): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x48080) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendfile(r6, r7, 0x0, 0xffffffff000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 424.844412ms ago: executing program 2 (id=6591): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000005c0)={0x101c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x1008, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}]}, 0x101c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004800) 349.94567ms ago: executing program 0 (id=6592): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '$'}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}, 0x1, 0x0, 0x0, 0x40850}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) socketpair(0x1, 0x5, 0x100, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffdab}, 0x0) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 200.597594ms ago: executing program 2 (id=6593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b1", 0x3, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3}, {0x3, 0xb}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xffff, 0x3, 0x2, 0xb9c}, {0xfa, 0x0, 0x6, 0x4, 0x2, 0x87d}, 0x80, 0xfffff001, 0xf3f}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5a90d3d52efb08c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 96.062903ms ago: executing program 5 (id=6594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800e1f0", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000500008804c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200cd0cbaa91c2228ef3a1f5608d551e5cb145c4cc5020eadb5670b8914490500e0"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) close(0x3) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@iter={&(0x7f0000000000)=@task={0x0, 0xffffffffffffffff}, 0x10}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r4}, 0x8) 0s ago: executing program 5 (id=6595): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000000)="a0503d88c440d075b7205496b18d98311f760bc3b0b179c2e064775b4e", 0x1d, 0x84, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x4, @mcast1, 0x4}, 0x1c) sendmmsg$sock(r1, &(0x7f00000005c0)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="2baf25ed51ad144447e4c7bd313b64d0f3d84683be1caa7aa9e2e0", 0x1b}], 0x1, &(0x7f0000000180)=[@txtime={{0x18}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x83c}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xa8}}, {{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x180000, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="3dc20bd33042b3a908", 0x9}, {&(0x7f0000000300)="4bbf688b909c45f2f9fcd83f7edb220a53212fb1b3881cf81a869991a399965641d27c7ae4dca44b997ede6487c4cd7271cb23f18abd78dde7f0d3023cf42f1f9b43197677506672f6b233ec2f9774fd7c81b998bd578852212c95d995b448afc3ff", 0x62}, {&(0x7f0000000380)="ac2cf377f788743e7ceadb54d028ded3d9d192cdca4240f4c7b067b6fc4f2a045332afe66324848f1adb5ffc6e66fe3cdbae8fb74bc803fb80726d5e1d1273ec72f44801638be06aba734becbc13e4bcf248", 0x52}, {&(0x7f0000000400)="69aba325023cf10540333fac9578809243fafbc13bc433138643bae18cc98c6518ea1c657feccb533c855ca542662fa370021bc4444a3d5e2ba48366d9f4b7ce9501b57724812f2150686f5221ca2480159dd11a4030e9dc51e9ad39017712a9af8d239490d2c3bef3476fbda5ac5130b4fd5d01764d2b06ade45471a143f7c434cfbc8b9880aa9aed5ab500f2f259eabd6777d5a31534c4bf477ae6369cc705d6d5e5438ed99deb87d4a0aa0185c0eb1b85271ba308bd6a7e4320412d2fce50a8e6c4a9ccc38c4d91db57f07922cf558f8210697ed0bb4caddd", 0xda}], 0x4, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xa54}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x78}}], 0x2, 0x20000080) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000640)={0xd8, 0xa}) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000680)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000006c0)='bbr', 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000700)='bond0\x00', 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000740)={r1, 0x7cc5, 0x3, 0x5}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000780), &(0x7f00000007c0)=0x4) recvfrom$inet(r4, &(0x7f0000000800)=""/59, 0x3b, 0x2040, &(0x7f0000000840)={0x2, 0x4e20, @empty}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r5) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xec, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4d280}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa25d}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4048045}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r5) r7 = openat$cgroup_ro(r5, &(0x7f0000000ac0)='io.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b00)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000b40)={@loopback, r8}, 0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000b80)={0x0, 0x100}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000c00)=@assoc_value={r9, 0x8000}, &(0x7f0000000c40)=0x8) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000c80)=0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) ioctl$XFS_IOC_FSGEOMETRY_V4(r5, 0x8070587c, &(0x7f0000000d00)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}}, 0x1000) kernel console output (not intermixed with test programs): omiscuous mode [ 741.714791][T27320] bridge0: left promiscuous mode [ 742.410802][T27348] x_tables: duplicate underflow at hook 3 [ 742.415213][T27349] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5363'. [ 742.439073][T27349] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5363'. [ 742.439063][T27354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5365'. [ 742.462517][T27347] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5363'. [ 742.488733][T27347] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5363'. [ 742.750177][T27374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5370'. [ 742.810546][T27376] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5371'. [ 742.824472][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5370'. [ 742.883798][T27377] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5370'. [ 742.976840][T27386] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5373'. [ 744.117293][T27427] lo speed is unknown, defaulting to 1000 [ 746.857441][T27595] netlink: 'syz.5.5415': attribute type 3 has an invalid length. [ 746.883187][T27595] netlink: 'syz.5.5415': attribute type 3 has an invalid length. [ 747.073291][T27608] xt_hashlimit: size too large, truncated to 1048576 [ 747.231243][T27619] netlink: 'syz.3.5417': attribute type 1 has an invalid length. [ 748.256104][T27656] __nla_validate_parse: 8 callbacks suppressed [ 748.256124][T27656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5424'. [ 748.538704][T27662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5426'. [ 748.549039][T27662] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5426'. [ 748.615533][T27662] bond9: entered allmulticast mode [ 748.880706][T27690] tipc: Bearer : already 2 bearers with priority 10 [ 748.888773][T27690] tipc: Bearer : trying with adjusted priority [ 748.896032][T27690] tipc: Enabling of bearer rejected, failed to enable media [ 748.906170][T27690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 749.627621][T27699] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 750.097017][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5443'. [ 750.190477][T27695] veth1_vlan: left promiscuous mode [ 750.201317][T27695] veth0_vlan: left promiscuous mode [ 750.208390][T27695] veth0_vlan: entered promiscuous mode [ 750.219289][T27695] veth1_vlan: entered promiscuous mode [ 750.256354][T27695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.301998][T27695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.323392][T27695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.336159][T27695] mac80211_hwsim hwsim57 wlan0: left promiscuous mode [ 750.343233][T27695] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 750.394223][ T1125] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 750.414909][ T1125] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 750.446943][T27736] tipc: Bearer : already 2 bearers with priority 10 [ 750.471978][T27736] tipc: Bearer : trying with adjusted priority [ 750.501182][T27736] tipc: Enabling of bearer rejected, failed to enable media [ 750.542489][T27738] netlink: 'syz.5.5446': attribute type 29 has an invalid length. [ 750.561343][T27746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5450'. [ 750.568597][T27740] netlink: 'syz.5.5446': attribute type 29 has an invalid length. [ 750.603795][ T1125] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 750.624727][ T1125] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 751.114491][T27781] syzkaller1: entered allmulticast mode [ 751.203217][T27791] sctp: [Deprecated]: syz.2.5457 (pid 27791) Use of int in max_burst socket option. [ 751.203217][T27791] Use struct sctp_assoc_value instead [ 751.268094][T27794] netlink: 'syz.0.5458': attribute type 1 has an invalid length. [ 751.289555][T27794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5458'. [ 751.730371][T27813] batman_adv: batadv0: Adding interface: dummy0 [ 751.765464][T27813] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.802840][T27813] batman_adv: batadv0: Interface activated: dummy0 [ 752.250912][T27847] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 752.268688][T27847] bond10 (unregistering): Released all slaves [ 752.351545][T27851] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5472'. [ 752.483031][T27853] syzkaller0: entered promiscuous mode [ 752.488927][T27853] syzkaller0: entered allmulticast mode [ 752.713105][T27857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5475'. [ 752.895525][T27868] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 752.909316][T27868] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 752.990490][T27869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5478'. [ 753.014877][T27875] vti1: entered promiscuous mode [ 753.021784][T27875] vti1: entered allmulticast mode [ 753.238501][T27885] netlink: 'syz.5.5486': attribute type 1 has an invalid length. [ 753.301947][T27883] netlink: 'syz.5.5486': attribute type 1 has an invalid length. [ 753.312246][T27884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5485'. [ 753.332525][T27885] 8021q: adding VLAN 0 to HW filter on device bond15 [ 753.391511][T27883] bond15: (slave batadv2): Opening slave failed [ 753.474320][T27898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5491'. [ 753.478947][T27901] netlink: 'syz.0.5489': attribute type 2 has an invalid length. [ 753.492022][T27899] netlink: 'syz.4.5490': attribute type 13 has an invalid length. [ 753.509275][T27899] netlink: 'syz.4.5490': attribute type 17 has an invalid length. [ 753.529668][T27900] netlink: 'syz.3.5491': attribute type 1 has an invalid length. [ 753.670940][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.771243][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.774949][T27899] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 753.790572][T27899] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 753.802276][T27899] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 753.871963][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.911036][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.304731][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5499'. [ 754.370436][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.600213][T27939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5500'. [ 754.676273][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5500'. [ 754.716094][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5500'. [ 755.050849][T27957] syz_tun: entered allmulticast mode [ 755.101835][T27962] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5507'. [ 755.255433][T27970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5510'. [ 755.374995][T27974] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5512'. [ 755.770951][T27981] lo speed is unknown, defaulting to 1000 [ 755.793000][T27992] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5517'. [ 755.854239][T27956] syz_tun: left allmulticast mode [ 755.972466][T28002] netlink: 'syz.5.5520': attribute type 1 has an invalid length. [ 756.008105][T28002] netlink: 'syz.5.5520': attribute type 2 has an invalid length. [ 756.338992][T28019] pim6reg: entered allmulticast mode [ 756.365494][T28017] pim6reg: left allmulticast mode [ 756.423164][T28031] netlink: 'syz.4.5525': attribute type 1 has an invalid length. [ 756.591247][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 756.605118][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 756.619974][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 756.645464][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 756.653745][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.706961][T28031] 8021q: adding VLAN 0 to HW filter on device bond10 [ 756.842668][T28033] bond10: (slave gretap2): making interface the new active one [ 756.921420][T28033] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 757.056258][T28048] netlink: 'syz.3.5529': attribute type 8 has an invalid length. [ 757.130176][T28026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.753721][T28070] bridge0: port 3(vlan2) entered disabled state [ 758.704632][T11195] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.738066][T20913] Bluetooth: hci0: command tx timeout [ 758.746216][T11195] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.764907][T11195] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 758.775187][T11195] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.784617][T11195] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.797563][T11195] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 758.846373][T11195] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.888299][T11195] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.915108][T11195] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 758.935404][T11195] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.951798][T11195] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 758.969495][T11195] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 759.054583][T28107] tipc: Enabling of bearer rejected, failed to enable media [ 759.542567][T28034] lo speed is unknown, defaulting to 1000 [ 759.643566][T28139] veth1: entered promiscuous mode [ 759.672772][T28139] veth1: entered allmulticast mode [ 759.701940][T28144] __nla_validate_parse: 8 callbacks suppressed [ 759.701957][T28144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5543'. [ 760.222139][T28034] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.237105][T28034] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.245465][T28034] bridge_slave_0: entered allmulticast mode [ 760.253945][T28034] bridge_slave_0: entered promiscuous mode [ 760.264795][T28034] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.272411][T28034] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.281651][T28034] bridge_slave_1: entered allmulticast mode [ 760.290140][T28034] bridge_slave_1: entered promiscuous mode [ 760.330754][T28034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.343958][T28034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.422419][T28034] team0: Port device team_slave_0 added [ 760.431579][T28159] netlink: 'syz.2.5550': attribute type 10 has an invalid length. [ 760.441845][T28034] team0: Port device team_slave_1 added [ 760.443181][T28159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5550'. [ 760.503284][T28159] team0: Failed to send options change via netlink (err -105) [ 760.519404][T28159] team0: Port device geneve1 added [ 760.574546][T28034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.590433][T28034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.649418][T28034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.673312][T28034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.681029][T28034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.709517][T28034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.817957][T20913] Bluetooth: hci0: command tx timeout [ 760.891246][T28034] hsr_slave_0: entered promiscuous mode [ 760.898079][T28034] hsr_slave_1: entered promiscuous mode [ 760.905977][T28034] debugfs: 'hsr0' already exists in 'hsr' [ 760.919207][T28177] FAULT_INJECTION: forcing a failure. [ 760.919207][T28177] name failslab, interval 1, probability 0, space 0, times 0 [ 760.933586][T28034] Cannot create hsr debugfs directory [ 760.958564][T28177] CPU: 1 UID: 0 PID: 28177 Comm: syz.4.5556 Not tainted syzkaller #0 PREEMPT(full) [ 760.958590][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.958602][T28177] Call Trace: [ 760.958609][T28177] [ 760.958616][T28177] dump_stack_lvl+0xe8/0x150 [ 760.958643][T28177] should_fail_ex+0x412/0x560 [ 760.958672][T28177] should_failslab+0xa8/0x100 [ 760.958700][T28177] __kmalloc_noprof+0xe8/0x760 [ 760.958724][T28177] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 760.958756][T28177] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 760.958781][T28177] ? kernel_text_address+0xa5/0xe0 [ 760.958813][T28177] genl_family_rcv_msg_doit+0xd9/0x330 [ 760.958836][T28177] ? __asan_memcpy+0x40/0x70 [ 760.958868][T28177] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 760.958900][T28177] ? apparmor_capable+0x126/0x170 [ 760.958920][T28177] ? bpf_lsm_capable+0x9/0x20 [ 760.958937][T28177] ? security_capable+0x7e/0x2c0 [ 760.958964][T28177] genl_rcv_msg+0x61c/0x7a0 [ 760.958993][T28177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 760.959015][T28177] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 760.959038][T28177] ? __pfx_nl802154_add_llsec_devkey+0x10/0x10 [ 760.959055][T28177] ? __pfx_nl802154_post_doit+0x10/0x10 [ 760.959093][T28177] netlink_rcv_skb+0x232/0x4b0 [ 760.959113][T28177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 760.959138][T28177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 760.959173][T28177] ? down_read+0x270/0x2e0 [ 760.959190][T28177] ? genl_rcv+0xd/0x40 [ 760.959215][T28177] genl_rcv+0x28/0x40 [ 760.959237][T28177] netlink_unicast+0x75c/0x8e0 [ 760.959268][T28177] netlink_sendmsg+0x813/0xb40 [ 760.959300][T28177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.959324][T28177] ? aa_sock_msg_perm+0xf1/0x1b0 [ 760.959351][T28177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.959387][T28177] ____sys_sendmsg+0x972/0x9f0 [ 760.959406][T28177] ? __might_fault+0xaf/0x130 [ 760.959433][T28177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.959463][T28177] ? import_iovec+0x73/0xa0 [ 760.959492][T28177] ___sys_sendmsg+0x2a5/0x360 [ 760.959512][T28177] ? __lock_acquire+0x6b5/0x2cf0 [ 760.959538][T28177] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.959601][T28177] ? __fget_files+0x2a/0x420 [ 760.959622][T28177] ? __fget_files+0x3a0/0x420 [ 760.959650][T28177] __x64_sys_sendmsg+0x1bd/0x2a0 [ 760.959672][T28177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.959700][T28177] ? __pfx_ksys_write+0x10/0x10 [ 760.959731][T28177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.959751][T28177] do_syscall_64+0x15f/0xf80 [ 760.959767][T28177] ? trace_irq_disable+0x3b/0x140 [ 760.959791][T28177] ? clear_bhb_loop+0x40/0x90 [ 760.959813][T28177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.959832][T28177] RIP: 0033:0x7f03d8d9ce59 [ 760.959850][T28177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.959876][T28177] RSP: 002b:00007f03d9bc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.959895][T28177] RAX: ffffffffffffffda RBX: 00007f03d9016090 RCX: 00007f03d8d9ce59 [ 760.959907][T28177] RDX: 0000000004000040 RSI: 0000200000000580 RDI: 0000000000000004 [ 760.959919][T28177] RBP: 00007f03d9bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 760.959930][T28177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.959941][T28177] R13: 00007f03d9016128 R14: 00007f03d9016090 R15: 00007ffe44f6bab8 [ 760.959974][T28177] [ 761.553656][T28188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5558'. [ 761.648116][T28188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5558'. [ 762.518769][T28230] FAULT_INJECTION: forcing a failure. [ 762.518769][T28230] name failslab, interval 1, probability 0, space 0, times 0 [ 762.571914][T28230] CPU: 0 UID: 0 PID: 28230 Comm: syz.2.5568 Not tainted syzkaller #0 PREEMPT(full) [ 762.571939][T28230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.571949][T28230] Call Trace: [ 762.571964][T28230] [ 762.571972][T28230] dump_stack_lvl+0xe8/0x150 [ 762.571998][T28230] should_fail_ex+0x412/0x560 [ 762.572026][T28230] should_failslab+0xa8/0x100 [ 762.572055][T28230] __kmalloc_noprof+0xe8/0x760 [ 762.572081][T28230] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 762.572108][T28230] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 762.572136][T28230] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 762.572160][T28230] ? kernel_text_address+0xa5/0xe0 [ 762.572191][T28230] genl_family_rcv_msg_doit+0xd9/0x330 [ 762.572212][T28230] ? __asan_memcpy+0x40/0x70 [ 762.572233][T28230] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 762.572265][T28230] ? apparmor_capable+0x126/0x170 [ 762.572286][T28230] ? bpf_lsm_capable+0x9/0x20 [ 762.572304][T28230] ? security_capable+0x7e/0x2c0 [ 762.572333][T28230] genl_rcv_msg+0x61c/0x7a0 [ 762.572361][T28230] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.572384][T28230] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 762.572407][T28230] ? __pfx_nl802154_add_llsec_devkey+0x10/0x10 [ 762.572425][T28230] ? __pfx_nl802154_post_doit+0x10/0x10 [ 762.572463][T28230] netlink_rcv_skb+0x232/0x4b0 [ 762.572484][T28230] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.572509][T28230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.572545][T28230] ? down_read+0x270/0x2e0 [ 762.572563][T28230] ? genl_rcv+0xd/0x40 [ 762.572588][T28230] genl_rcv+0x28/0x40 [ 762.572609][T28230] netlink_unicast+0x75c/0x8e0 [ 762.572638][T28230] netlink_sendmsg+0x813/0xb40 [ 762.572666][T28230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.572688][T28230] ? aa_sock_msg_perm+0xf1/0x1b0 [ 762.572712][T28230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 762.572739][T28230] ____sys_sendmsg+0x972/0x9f0 [ 762.572760][T28230] ? __might_fault+0xaf/0x130 [ 762.572789][T28230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.572817][T28230] ? import_iovec+0x73/0xa0 [ 762.572848][T28230] ___sys_sendmsg+0x2a5/0x360 [ 762.572867][T28230] ? __lock_acquire+0x6b5/0x2cf0 [ 762.572893][T28230] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.572966][T28230] ? __fget_files+0x2a/0x420 [ 762.572987][T28230] ? __fget_files+0x3a0/0x420 [ 762.573021][T28230] __x64_sys_sendmsg+0x1bd/0x2a0 [ 762.573046][T28230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 762.573079][T28230] ? __pfx_ksys_write+0x10/0x10 [ 762.573116][T28230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.573137][T28230] do_syscall_64+0x15f/0xf80 [ 762.573155][T28230] ? trace_irq_disable+0x3b/0x140 [ 762.573182][T28230] ? clear_bhb_loop+0x40/0x90 [ 762.573206][T28230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.573225][T28230] RIP: 0033:0x7f1701d9ce59 [ 762.573243][T28230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.573259][T28230] RSP: 002b:00007f1702cd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.573279][T28230] RAX: ffffffffffffffda RBX: 00007f1702016090 RCX: 00007f1701d9ce59 [ 762.573293][T28230] RDX: 0000000004000040 RSI: 0000200000000580 RDI: 0000000000000004 [ 762.573305][T28230] RBP: 00007f1702cd0090 R08: 0000000000000000 R09: 0000000000000000 [ 762.573316][T28230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.573327][T28230] R13: 00007f1702016128 R14: 00007f1702016090 R15: 00007ffdb0c37a88 [ 762.573362][T28230] [ 762.944747][T28034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 762.959649][T20913] Bluetooth: hci0: command tx timeout [ 762.985533][T28034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.993808][T28234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 763.010925][T28034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 763.025515][T28234] netlink: 'syz.4.5569': attribute type 20 has an invalid length. [ 763.044857][T28034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.057500][T28034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 763.091088][T28034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.099120][T28034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 763.115931][T28034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.141429][T18840] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.150085][T18840] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.171485][T28240] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5571'. [ 763.181570][T18840] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.236640][T18840] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.302197][T28034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.332673][T28034] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.354953][T13185] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.362202][T13185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.387568][T13185] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.395135][T13185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.529135][T28258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5575'. [ 763.588313][T28258] netlink: 121 bytes leftover after parsing attributes in process `syz.0.5575'. [ 763.651052][T28271] netlink: 'syz.3.5578': attribute type 21 has an invalid length. [ 763.756782][T28277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5579'. [ 763.951061][T28289] FAULT_INJECTION: forcing a failure. [ 763.951061][T28289] name failslab, interval 1, probability 0, space 0, times 0 [ 763.969739][T28289] CPU: 1 UID: 0 PID: 28289 Comm: syz.0.5580 Not tainted syzkaller #0 PREEMPT(full) [ 763.969765][T28289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.969777][T28289] Call Trace: [ 763.969784][T28289] [ 763.969792][T28289] dump_stack_lvl+0xe8/0x150 [ 763.969819][T28289] should_fail_ex+0x412/0x560 [ 763.969851][T28289] should_failslab+0xa8/0x100 [ 763.969885][T28289] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 763.969913][T28289] ? __alloc_skb+0x1d0/0x7d0 [ 763.969929][T28289] ? __local_bh_enable_ip+0xd0/0x130 [ 763.969955][T28289] __alloc_skb+0x1d0/0x7d0 [ 763.969979][T28289] ? netlink_ack_tlv_len+0x6c/0x210 [ 763.970003][T28289] netlink_ack+0x146/0xa50 [ 763.970020][T28289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.970044][T28289] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 763.970069][T28289] ? __pfx_nl802154_post_doit+0x10/0x10 [ 763.970109][T28289] netlink_rcv_skb+0x2b6/0x4b0 [ 763.970131][T28289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.970159][T28289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 763.970197][T28289] ? down_read+0x270/0x2e0 [ 763.970217][T28289] ? genl_rcv+0xd/0x40 [ 763.970243][T28289] genl_rcv+0x28/0x40 [ 763.970265][T28289] netlink_unicast+0x75c/0x8e0 [ 763.970297][T28289] netlink_sendmsg+0x813/0xb40 [ 763.970329][T28289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.970354][T28289] ? aa_sock_msg_perm+0xf1/0x1b0 [ 763.970381][T28289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 763.970410][T28289] ____sys_sendmsg+0x972/0x9f0 [ 763.970430][T28289] ? __might_fault+0xaf/0x130 [ 763.970462][T28289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.970493][T28289] ? import_iovec+0x73/0xa0 [ 763.970524][T28289] ___sys_sendmsg+0x2a5/0x360 [ 763.970543][T28289] ? __lock_acquire+0x6b5/0x2cf0 [ 763.970568][T28289] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.970626][T28289] ? __fget_files+0x2a/0x420 [ 763.970647][T28289] ? __fget_files+0x3a0/0x420 [ 763.970680][T28289] __x64_sys_sendmsg+0x1bd/0x2a0 [ 763.970704][T28289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 763.970736][T28289] ? __pfx_ksys_write+0x10/0x10 [ 763.970772][T28289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.970793][T28289] do_syscall_64+0x15f/0xf80 [ 763.970810][T28289] ? trace_irq_disable+0x3b/0x140 [ 763.970836][T28289] ? clear_bhb_loop+0x40/0x90 [ 763.970858][T28289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.970876][T28289] RIP: 0033:0x7f9b8639ce59 [ 763.970892][T28289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.970905][T28289] RSP: 002b:00007f9b87289028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.970924][T28289] RAX: ffffffffffffffda RBX: 00007f9b86616090 RCX: 00007f9b8639ce59 [ 763.970936][T28289] RDX: 0000000004000040 RSI: 0000200000000580 RDI: 0000000000000004 [ 763.970946][T28289] RBP: 00007f9b87289090 R08: 0000000000000000 R09: 0000000000000000 [ 763.970955][T28289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.970970][T28289] R13: 00007f9b86616128 R14: 00007f9b86616090 R15: 00007ffcc6ece138 [ 763.970999][T28289] [ 764.473406][T28302] x_tables: duplicate underflow at hook 1 [ 764.664980][T28034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.982220][T20913] Bluetooth: hci0: command tx timeout [ 765.241091][T28034] veth0_vlan: entered promiscuous mode [ 765.255654][T28034] veth1_vlan: entered promiscuous mode [ 765.298147][T24954] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 664 sec [ 765.307240][T28034] veth0_macvtap: entered promiscuous mode [ 765.322922][T28034] veth1_macvtap: entered promiscuous mode [ 765.353495][T28034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.370733][T28034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.402741][T13185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.412905][T13185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.438071][T13185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.450993][T13185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.791586][T11195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.829419][T11195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.863777][T28349] netlink: 'syz.3.5593': attribute type 1 has an invalid length. [ 765.892441][T28349] netlink: 'syz.3.5593': attribute type 6 has an invalid length. [ 765.917830][T28349] netlink: 'syz.3.5593': attribute type 3 has an invalid length. [ 768.242929][T18827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.257850][T18827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.436776][T28361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5597'. [ 768.531965][T28372] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 768.607338][T28369] netlink: 'syz.5.5524': attribute type 30 has an invalid length. [ 768.644137][T28379] bond11: entered allmulticast mode [ 768.778551][T28361] macvlan2: entered promiscuous mode [ 768.786476][T28361] macvlan2: entered allmulticast mode [ 768.803314][T28361] bond11: (slave macvlan2): Opening slave failed [ 768.991202][T28408] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5607'. [ 769.005868][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5607'. [ 769.212098][T28416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'. [ 769.404423][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'. [ 770.449480][T28454] netlink: 'syz.5.5621': attribute type 1 has an invalid length. [ 770.489470][T28454] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 770.533028][T28454] macvlan2: entered promiscuous mode [ 770.552152][T28454] macvlan2: entered allmulticast mode [ 770.570584][T28454] bond0: entered promiscuous mode [ 770.587553][T28454] bond_slave_0: entered promiscuous mode [ 770.605459][T28454] bond_slave_1: entered promiscuous mode [ 770.624135][T28454] veth0_to_bond: entered promiscuous mode [ 770.644363][T28454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 770.687490][T28454] bond0: left promiscuous mode [ 770.701021][T28454] bond_slave_0: left promiscuous mode [ 770.708833][T28454] bond_slave_1: left promiscuous mode [ 770.715689][T28454] veth0_to_bond: left promiscuous mode [ 770.766360][T28457] netlink: 'syz.2.5623': attribute type 21 has an invalid length. [ 770.964638][T28472] netlink: 'syz.5.5625': attribute type 10 has an invalid length. [ 770.983330][T28472] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5625'. [ 771.328229][T28460] lo speed is unknown, defaulting to 1000 [ 771.440680][T28485] netlink: 'syz.3.5629': attribute type 4 has an invalid length. [ 771.551593][T28492] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5630'. [ 771.739561][T28500] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5632'. [ 771.851160][T28512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5634'. [ 772.006340][T28521] netlink: 'syz.2.5637': attribute type 10 has an invalid length. [ 772.014365][T28521] netlink: 'syz.2.5637': attribute type 4 has an invalid length. [ 772.028675][T28521] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5637'. [ 772.052179][T28521] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 772.291019][T28536] nbd: must specify a size in bytes for the device [ 773.119623][T28537] lo speed is unknown, defaulting to 1000 [ 773.416288][T28587] pimreg: entered allmulticast mode [ 773.504194][T28592] netlink: 'syz.2.5655': attribute type 9 has an invalid length. [ 774.025897][T28612] netlink: 'syz.3.5661': attribute type 1 has an invalid length. [ 774.185997][T28622] __nla_validate_parse: 2 callbacks suppressed [ 774.186016][T28622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5663'. [ 774.551508][T28631] syzkaller0: entered promiscuous mode [ 774.586767][T28631] syzkaller0: entered allmulticast mode [ 774.624542][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5666'. [ 775.077385][T28674] netlink: 'syz.2.5672': attribute type 1 has an invalid length. [ 777.378590][T28674] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 777.560501][T28697] xt_hashlimit: size too large, truncated to 1048576 [ 777.631890][T28692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5677'. [ 777.672259][T28698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5678'. [ 777.677526][T28705] netlink: 'syz.0.5676': attribute type 1 has an invalid length. [ 777.705731][T28705] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5676'. [ 778.417538][T28733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5687'. [ 779.131766][T28751] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5690'. [ 779.801276][T28784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5688'. [ 781.215597][ T146] tipc: Disabling bearer [ 781.464461][ T146] bond0 (unregistering): (slave gretap2): Releasing active interface [ 781.511103][ T146] bond11 (unregistering): (slave gretap3): Releasing active interface [ 781.563316][ T146] bond1 (unregistering): (slave geneve2): Releasing active interface [ 781.642800][ T146] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 781.705144][ T146]  (unregistering): Released all slaves [ 781.727147][ T146] bond1 (unregistering): Released all slaves [ 781.750398][ T146] bond2 (unregistering): Released all slaves [ 781.766111][ T146] bond3 (unregistering): Released all slaves [ 781.784921][ T146] bond4 (unregistering): (slave veth7): Releasing backup interface [ 781.793828][ T146] bond4 (unregistering): Released all slaves [ 781.816896][ T146] bond5 (unregistering): (slave veth11): Releasing backup interface [ 781.825951][ T146] bond5 (unregistering): Released all slaves [ 781.841126][ T146] bond6 (unregistering): Released all slaves [ 781.862330][ T146] bond7 (unregistering): Released all slaves [ 781.876199][ T146] bond8 (unregistering): Released all slaves [ 781.891386][ T146] bond9 (unregistering): Released all slaves [ 781.906746][ T146] bond10 (unregistering): Released all slaves [ 781.931910][ T146] bond0 (unregistering): Released all slaves [ 781.945695][ T146] bond11 (unregistering): Released all slaves [ 781.961391][ T146] bond12 (unregistering): Released all slaves [ 781.993894][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 782.276230][ T146] tipc: Left network mode [ 782.309119][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5712'. [ 782.357254][T28855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5712'. [ 782.571643][T28861] vlan2: entered promiscuous mode [ 782.589131][T28861] geneve1: entered promiscuous mode [ 782.604533][T28861] vlan2: entered allmulticast mode [ 782.617452][T28861] geneve1: entered allmulticast mode [ 783.727896][T28931] netlink: 'syz.0.5727': attribute type 1 has an invalid length. [ 783.835252][T28931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.882618][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 783.987982][T28934] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 784.131029][T28951] ipt_REJECT: ECHOREPLY no longer supported. [ 784.157269][T28949] tipc: Enabled bearer , priority 0 [ 784.165438][T28949] syzkaller0: entered promiscuous mode [ 784.195491][T28949] syzkaller0: entered allmulticast mode [ 784.287630][T28949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5732'. [ 784.410651][T28949] tipc: Resetting bearer [ 784.443216][T28947] tipc: Resetting bearer [ 784.492842][T28969] x_tables: duplicate underflow at hook 2 [ 784.549650][T28947] tipc: Disabling bearer [ 784.968128][T11204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.971987][T28991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5739'. [ 785.006754][T11204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.053635][T28990] netlink: 'syz.2.5738': attribute type 8 has an invalid length. [ 785.575917][T29013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5743'. [ 785.610220][ T146] hsr_slave_0: left promiscuous mode [ 785.634336][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5743'. [ 785.646786][ T146] hsr_slave_1: left promiscuous mode [ 785.648706][T29018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5745'. [ 785.661529][T29018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5745'. [ 785.670821][T29018] netlink: 'syz.3.5745': attribute type 18 has an invalid length. [ 785.835051][T29024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5746'. [ 786.053919][T29037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5749'. [ 786.187548][T29036] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.195680][T24952] IPVS: starting estimator thread 0... [ 786.298485][T29040] IPVS: using max 30 ests per chain, 72000 per kthread [ 786.412900][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 787.224165][ T146] IPVS: stop unused estimator thread 0... [ 787.592660][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 787.886825][T29116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5763'. [ 787.906641][T29116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5763'. [ 787.958871][T29118] syzkaller0: entered promiscuous mode [ 787.964426][T29118] syzkaller0: entered allmulticast mode [ 787.973452][T29118] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.5764'. [ 789.655928][T29060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.886253][T29144] netlink: 'syz.2.5769': attribute type 1 has an invalid length. [ 790.095047][T29144] 8021q: adding VLAN 0 to HW filter on device bond12 [ 790.132730][T29155] __nla_validate_parse: 1 callbacks suppressed [ 790.132749][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5772'. [ 790.195053][T29147] bond12: (slave geneve4): making interface the new active one [ 790.242977][T29147] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 790.553926][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5777'. [ 790.578511][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5775'. [ 791.169731][T29193] netlink: 660 bytes leftover after parsing attributes in process `syz.0.5782'. [ 791.192651][T29193] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5782'. [ 791.233080][T29195] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 791.386857][T29200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.513016][T29200] bond5: entered promiscuous mode [ 791.665791][T29214] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 791.684848][T29212] netlink: 'syz.5.5786': attribute type 2 has an invalid length. [ 791.707762][T29212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5786'. [ 791.722917][T29212] smc: net device wg2 applied user defined pnetid SYZ0 [ 791.790585][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5786'. [ 791.901478][T29229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5789'. [ 792.161845][T29243] IPVS: Unknown mcast interface: ip6gretap0 [ 792.223554][T29249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5798'. [ 792.233930][T29249] netlink: 15 bytes leftover after parsing attributes in process `syz.5.5798'. [ 792.261776][ T29] audit: type=1804 audit(1779720527.077:23): pid=29249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5798" name="/newroot/38/cgroup.controllers" dev="tmpfs" ino=213 res=1 errno=0 [ 792.317968][ T29] audit: type=1800 audit(1779720527.077:24): pid=29249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5798" name="cgroup.controllers" dev="tmpfs" ino=213 res=0 errno=0 [ 792.500062][T29265] macsec2: entered promiscuous mode [ 792.517939][T29265] batadv0: entered promiscuous mode [ 792.536068][T29265] macsec2: entered allmulticast mode [ 792.549880][T29265] batadv0: entered allmulticast mode [ 792.556039][T29265] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 792.564088][T29265] batadv0: left allmulticast mode [ 792.570364][T29265] batadv0: left promiscuous mode [ 792.672160][T29274] netlink: 'syz.0.5803': attribute type 39 has an invalid length. [ 792.832594][T29282] netlink: 'syz.2.5807': attribute type 1 has an invalid length. [ 792.941168][T29287] ipt_rpfilter: unknown options [ 793.316933][T29311] syzkaller0: entered promiscuous mode [ 793.324960][T29311] syzkaller0: entered allmulticast mode [ 793.789618][T29337] team0: entered promiscuous mode [ 793.816967][T29337] geneve1: entered promiscuous mode [ 793.838134][T29337] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 793.991274][T29311] lo speed is unknown, defaulting to 1000 [ 794.298808][T29350] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 794.311936][T29350] bond6 (unregistering): Released all slaves [ 795.480017][T29407] netlink: 'syz.0.5832': attribute type 30 has an invalid length. [ 797.890774][T29407] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 798.038230][T29430] __nla_validate_parse: 11 callbacks suppressed [ 798.038251][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5838'. [ 798.090297][T29428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5836'. [ 798.249721][T29446] netlink: 'syz.2.5840': attribute type 1 has an invalid length. [ 798.369363][T29451] gretap1: entered allmulticast mode [ 798.389138][T29451] bond13: (slave gretap1): making interface the new active one [ 798.398922][T29451] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 798.736379][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5844'. [ 798.774882][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5844'. [ 799.968327][T29543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5859'. [ 799.999830][T29540] tap0: tun_chr_ioctl cmd 1074025676 [ 800.015463][T29540] tap0: owner set to 0 [ 800.156978][T29559] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5862'. [ 800.368456][T29568] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5866'. [ 800.578499][T29578] netlink: 'syz.3.5867': attribute type 1 has an invalid length. [ 800.809747][T29578] 8021q: adding VLAN 0 to HW filter on device bond13 [ 800.926501][T29584] bond13: (slave veth19): Enslaving as an active interface with a down link [ 800.960769][T29588] syzkaller1: entered promiscuous mode [ 800.966396][T29588] syzkaller1: entered allmulticast mode [ 801.128702][T29598] ip6tnl7: entered allmulticast mode [ 801.158845][T11204] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 801.187852][T11204] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 801.203965][T16966] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 801.319736][T29614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5871'. [ 801.738053][T16966] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 801.830862][T29641] x_tables: duplicate underflow at hook 2 [ 801.869409][T29644] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 801.896869][T29646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'. [ 801.955930][T29649] netlink: 'syz.2.5880': attribute type 1 has an invalid length. [ 801.964604][T29650] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 802.004836][T29650] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 802.043843][T29654] netlink: 'syz.3.5881': attribute type 18 has an invalid length. [ 802.063800][T29654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5881'. [ 802.073665][T29656] netlink: 'syz.5.5882': attribute type 1 has an invalid length. [ 802.085120][T29654] netlink: 'syz.3.5881': attribute type 3 has an invalid length. [ 802.105073][T24953] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 802.163744][T29656] bond2: entered promiscuous mode [ 802.169466][T29656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.252105][T29656] macvtap1: entered allmulticast mode [ 802.282300][T29664] syzkaller0: entered promiscuous mode [ 802.297364][T29664] syzkaller0: entered allmulticast mode [ 802.348101][T29661] bond2: (slave bridge2): making interface the new active one [ 802.375399][T29661] bridge2: entered promiscuous mode [ 802.384544][T29661] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 802.552009][T29679] netlink: 'syz.0.5886': attribute type 11 has an invalid length. [ 802.710593][T29683] bond3: entered promiscuous mode [ 802.737650][T29683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 803.308411][T29715] __nla_validate_parse: 2 callbacks suppressed [ 803.308430][T29715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5895'. [ 803.477288][T29698] netlink: 'syz.0.5889': attribute type 1 has an invalid length. [ 803.489314][T29729] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5895'. [ 803.602888][T29729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5895'. [ 804.222363][T29746] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5900'. [ 804.549466][T29758] bond4: (slave bond_slave_1): Device is not our slave [ 804.578166][T29758] bond4: option active_slave: invalid value (bond_slave_1) [ 804.848610][T29771] xt_hashlimit: size too large, truncated to 1048576 [ 805.057976][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 805.136854][T29758] bond4 (unregistering): Released all slaves [ 805.150653][T29748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.285514][T29776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5906'. [ 805.314206][T29776] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5906'. [ 805.326057][T29769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5903'. [ 805.582363][T29789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.640346][T29789] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 805.723043][T29788] openvswitch: netlink: Message has 151 unknown bytes. [ 805.790065][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5911'. [ 805.811635][T29797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5911'. [ 805.843698][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5914'. [ 805.930529][T29803] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 805.942106][T29805] netlink: 'syz.4.5916': attribute type 1 has an invalid length. [ 806.025004][T29805] 8021q: adding VLAN 0 to HW filter on device bond12 [ 806.046310][T29805] vlan5: entered allmulticast mode [ 806.051825][T29805] veth0_to_bond: entered allmulticast mode [ 806.060282][T29805] bond12: (slave vlan5): Opening slave failed [ 806.271971][T29830] netlink: 'syz.3.5923': attribute type 7 has an invalid length. [ 806.283885][T29830] netlink: 'syz.3.5923': attribute type 8 has an invalid length. [ 806.334567][T29837] team0: Port device syz_tun added [ 806.737764][T20913] Bluetooth: hci1: command 0x0406 tx timeout [ 806.877591][T29869] netlink: 'syz.4.5932': attribute type 16 has an invalid length. [ 806.922040][T29869] netlink: 'syz.4.5932': attribute type 17 has an invalid length. [ 807.033185][T29869] gretap0: entered promiscuous mode [ 807.138171][T29869] bridge0: entered promiscuous mode [ 807.201513][T29869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 807.249718][T29869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.265605][T29869] veth1_vlan: left promiscuous mode [ 807.280890][T29869] veth0_vlan: left promiscuous mode [ 807.290509][T29869] veth0_vlan: entered promiscuous mode [ 807.301524][T29869] veth1_vlan: entered promiscuous mode [ 807.328817][T29869] veth1_macvtap: left promiscuous mode [ 807.373508][T29869] veth1_macvtap: entered promiscuous mode [ 807.394806][T29869] bridge0: port 3(vlan2) entered blocking state [ 807.401288][T29869] bridge0: port 3(vlan2) entered listening state [ 807.423452][T29869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.486801][T29869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 807.501047][T29869] ipvlan2: left promiscuous mode [ 807.516550][T29869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 807.524256][T29869] vlan3: left allmulticast mode [ 807.529899][T29869] bond0: left allmulticast mode [ 807.536828][T29869] ip6gre1: left promiscuous mode [ 807.542160][T29869] ip6gre1: left allmulticast mode [ 807.551157][T29869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 807.561846][T29869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.582922][T29869] 8021q: adding VLAN 0 to HW filter on device eth0 [ 807.597958][T29869] 8021q: adding VLAN 0 to HW filter on device eth1 [ 807.606210][T29869] 8021q: adding VLAN 0 to HW filter on device eth2 [ 807.616714][T29869] 8021q: adding VLAN 0 to HW filter on device eth3 [ 807.624631][T29869] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 807.644190][T11204] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 807.653235][T11204] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 807.668174][T24952] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 807.724307][T29900] pim6reg1: entered promiscuous mode [ 807.749588][T29900] pim6reg1: entered allmulticast mode [ 807.779938][T11195] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.795997][T11195] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.820314][T11195] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.845228][T11195] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.988518][T16966] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.009828][T11204] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 808.044068][T11204] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 808.057936][T16966] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 808.257919][T16966] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 808.287962][T16966] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.858421][T16966] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 809.542170][T29954] vlan1: entered promiscuous mode [ 809.554310][T29954] vlan1: entered allmulticast mode [ 809.566365][T29954] veth0_vlan: entered allmulticast mode [ 809.654839][T29958] __nla_validate_parse: 6 callbacks suppressed [ 809.654859][T29958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5952'. [ 810.191170][T29983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5960'. [ 810.222117][T29983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5960'. [ 810.234450][T18824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.257404][T18824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.287338][T29989] mac80211_hwsim hwsim50 ;: renamed from wlan0 (while UP) [ 810.444256][T29995] netlink: 'syz.2.5967': attribute type 1 has an invalid length. [ 810.625353][T29995] 8021q: adding VLAN 0 to HW filter on device bond14 [ 810.684314][T30005] netlink: 'syz.4.5968': attribute type 83 has an invalid length. [ 810.711390][T30010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5970'. [ 810.905482][T30020] netlink: 210640 bytes leftover after parsing attributes in process `syz.4.5974'. [ 811.366454][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'. [ 811.432251][T30042] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5980'. [ 811.443863][T30042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.462126][T30042] v#: renamed from sit0 [ 811.539707][T30046] netlink: 'syz.5.5981': attribute type 1 has an invalid length. [ 811.646070][T30052] rdma_rxe: rxe_newlink: failed to add lo [ 811.653474][T30052] netlink: 'syz.5.5983': attribute type 1 has an invalid length. [ 811.755946][T30064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5986'. [ 811.825577][T30064] batman_adv: batadv0: Adding interface: macvtap2 [ 811.833572][T30064] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.904380][T30064] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 812.163003][T30081] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5991'. [ 812.282903][T30093] netlink: 'syz.0.5993': attribute type 1 has an invalid length. [ 812.508994][T30086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.835661][T30086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.984545][ T29] audit: type=1107 audit(1779720547.797:25): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='A [ 812.984545][ T29] >]w$h\ᶟ,f5 1 [ 813.436890][T20913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 813.451047][T20913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.459306][T20913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.466962][T20913] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 813.611518][T18824] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.664533][T30142] Bluetooth: MGMT ver 1.23 [ 813.810150][ T146] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.999392][T11204] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.050606][T30123] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.078613][ T33] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.367871][ T29] audit: type=1800 audit(1779720549.177:26): pid=30143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6005" name="memory.events" dev="tmpfs" ino=2770 res=0 errno=0 [ 814.762447][T30171] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6009'. [ 815.156135][T30196] netlink: 'syz.4.6014': attribute type 1 has an invalid length. [ 815.167212][T30134] lo speed is unknown, defaulting to 1000 [ 815.235704][T30201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6015'. [ 815.252687][T30200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6014'. [ 815.331955][T30198] netlink: 'syz.2.6015': attribute type 4 has an invalid length. [ 815.344033][T30194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6013'. [ 815.346721][T30205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6013'. [ 815.382877][T30198] netlink: 'syz.2.6015': attribute type 4 has an invalid length. [ 815.490715][T30200] bond13: (slave geneve3): making interface the new active one [ 815.523609][T30200] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 815.538209][ T5627] Bluetooth: hci3: command tx timeout [ 815.552666][T18841] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 815.561435][T18841] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 815.573621][T18841] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 815.582722][T18841] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 815.694006][T30163] lo speed is unknown, defaulting to 1000 [ 816.284033][T30134] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.303554][T30134] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.326873][T30134] bridge_slave_0: entered allmulticast mode [ 816.334212][T30134] bridge_slave_0: entered promiscuous mode [ 816.353610][T30134] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.360929][T30134] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.368516][T30134] bridge_slave_1: entered allmulticast mode [ 816.376249][T30134] bridge_slave_1: entered promiscuous mode [ 816.404387][T30134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.419477][T30134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.459459][T30134] team0: Port device team_slave_0 added [ 816.468731][T30134] team0: Port device team_slave_1 added [ 816.531516][T30134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.550453][T30134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.578495][T30134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.591553][T30134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.601523][T30134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.632173][T30134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.694719][T30134] hsr_slave_0: entered promiscuous mode [ 816.701633][T30134] hsr_slave_1: entered promiscuous mode [ 816.709832][T30134] debugfs: 'hsr0' already exists in 'hsr' [ 816.715713][T30134] Cannot create hsr debugfs directory [ 817.618466][ T5627] Bluetooth: hci3: command tx timeout [ 818.117922][T30196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.153767][T30134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 818.195714][T30134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.231249][T30134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 818.255629][T30134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.296019][T30134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 818.334178][T30134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.341352][T30276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6030'. [ 818.364287][T30134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 818.387757][T30134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.444765][T30286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6030'. [ 818.502093][T30286] nbd: device at index 64 is going down [ 818.626979][T30295] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.6033'. [ 818.654248][T27204] udevd[27204]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 818.677545][T27204] udevd[27204]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 818.873821][T30309] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6036'. [ 819.053148][T30302] lo speed is unknown, defaulting to 1000 [ 819.063666][T30313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6038'. [ 819.411452][T30298] lo speed is unknown, defaulting to 1000 [ 819.538091][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 819.538133][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 819.698126][ T5627] Bluetooth: hci3: command tx timeout [ 819.744192][T30338] netlink: 'syz.2.6044': attribute type 1 has an invalid length. [ 819.817983][T30340] __nla_validate_parse: 1 callbacks suppressed [ 819.818001][T30340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6044'. [ 819.844492][T30338] bond15 (unregistering): Released all slaves [ 819.927401][T30341] gre3: entered allmulticast mode [ 820.188753][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 820.196962][T30347] netlink: 'syz.5.6046': attribute type 1 has an invalid length. [ 820.205876][T30346] netlink: 'syz.5.6046': attribute type 1 has an invalid length. [ 821.288474][T30276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.523582][T30134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.607411][T30362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6048'. [ 821.616511][T30134] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.641040][T18824] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.648236][T18824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.704726][T18824] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.711972][T18824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.726658][T30355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6048'. [ 821.740194][T30355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6048'. [ 821.741195][T30367] syzkaller1: entered promiscuous mode [ 821.755290][T30367] syzkaller1: entered allmulticast mode [ 821.787957][ T5627] Bluetooth: hci3: command tx timeout [ 822.056778][T30376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6053'. [ 822.103527][T30376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6053'. [ 822.136372][T30375] xt_hashlimit: size too large, truncated to 1048576 [ 822.359777][T30385] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34) [ 822.920913][T30134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.991069][T30387] lo speed is unknown, defaulting to 1000 [ 822.994650][T30134] veth0_vlan: entered promiscuous mode [ 823.137326][T30134] veth1_vlan: entered promiscuous mode [ 823.191560][T30134] veth0_macvtap: entered promiscuous mode [ 823.203416][T30134] veth1_macvtap: entered promiscuous mode [ 823.238329][T30134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.260837][T30134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.286145][T18824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.304925][T18824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.322615][T30419] tipc: Failed to remove unknown binding: 66,0,0/0:2166595357/2166595359 [ 823.332457][T18824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.342506][T30419] tipc: Failed to remove unknown binding: 66,0,0/0:2166595357/2166595358 [ 823.349537][T18824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.362627][T30391] lo speed is unknown, defaulting to 1000 [ 823.570032][T30420] tipc: Failed to remove unknown binding: 66,0,0/0:2166595357/2166595359 [ 823.595713][T30420] tipc: Failed to remove unknown binding: 66,0,0/0:2166595357/2166595358 [ 823.910845][T11195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.919069][T11195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.016676][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6065'. [ 824.072833][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.090684][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.299772][T30442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6000'. [ 824.447640][T30449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6070'. [ 824.485903][T30449] Bluetooth: MGMT ver 1.23 [ 824.520620][T30455] netlink: 'syz.3.6071': attribute type 7 has an invalid length. [ 824.550205][T30455] netlink: 'syz.3.6071': attribute type 3 has an invalid length. [ 825.003905][T30487] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.6079'. [ 825.171296][T30500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.327410][T30509] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6085'. [ 825.357923][T30511] netlink: 'syz.3.6087': attribute type 1 has an invalid length. [ 825.394507][T30514] netlink: 'syz.4.6088': attribute type 1 has an invalid length. [ 825.403594][T30514] netlink: 'syz.4.6088': attribute type 2 has an invalid length. [ 825.419461][T30514] netlink: 'syz.4.6088': attribute type 3 has an invalid length. [ 825.482936][T30519] pim6reg: entered allmulticast mode [ 825.501254][T30519] pim6reg: left allmulticast mode [ 825.520487][T30522] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6088'. [ 825.541677][T30522] openvswitch: netlink: Flow key attr not present in new flow. [ 825.618344][T24952] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 724 sec [ 825.730350][T30535] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6094'. [ 825.936724][T30545] syzkaller0: entered promiscuous mode [ 825.943322][T30545] syzkaller0: entered allmulticast mode [ 825.981908][T30550] netlink: 67 bytes leftover after parsing attributes in process `syz.5.6098'. [ 826.004678][T30550] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 826.012979][T30550] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 826.228696][T30563] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6104'. [ 826.271450][T30566] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6104'. [ 826.319126][T30566] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 826.405199][T30569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6106'. [ 826.437310][T30573] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 826.559625][T30576] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6109'. [ 826.798556][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6110'. [ 827.006582][T30560] lo speed is unknown, defaulting to 1000 [ 827.217913][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 827.579380][T30615] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 827.632785][T30616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.067100][T30641] x_tables: ip_tables: udp match: only valid for protocol 17 [ 828.185240][T30647] tipc: Invalid UDP bearer configuration [ 828.185295][T30647] tipc: Enabling of bearer rejected, failed to enable media [ 828.933803][T30664] bridge0: port 3(vlan2) entered disabled state [ 829.820821][T30703] vxlan0: entered promiscuous mode [ 829.826187][T30703] vxlan0: entered allmulticast mode [ 829.881066][T11195] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.900331][T11195] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.925746][T11195] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 829.949026][T11195] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.967301][T11195] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.002374][T11195] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.011890][T30723] sctp: [Deprecated]: syz.0.6143 (pid 30723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 830.011890][T30723] Use struct sctp_sack_info instead [ 830.149921][T11195] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.178085][T11195] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.198801][T11195] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.210048][T11195] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.231003][T11195] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.253621][T11195] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.271083][T11195] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.295379][T11195] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.372513][T30732] netlink: 'syz.5.6147': attribute type 32 has an invalid length. [ 830.397392][T11195] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.423142][T11195] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.620884][T20913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 830.643003][T20913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 830.651450][T20913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 830.661903][T20913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 830.673343][T20913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 831.527389][T30769] __nla_validate_parse: 5 callbacks suppressed [ 831.527409][T30769] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6155'. [ 831.651680][T30765] lo speed is unknown, defaulting to 1000 [ 831.893482][T30788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6161'. [ 832.123728][T30794] netlink: 51 bytes leftover after parsing attributes in process `syz.0.6162'. [ 832.221062][T30741] lo speed is unknown, defaulting to 1000 [ 832.464257][T30811] netlink: 'syz.3.6168': attribute type 1 has an invalid length. [ 832.595209][T30816] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6170'. [ 832.641381][T30816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6170'. [ 832.688444][T30816] ip6gre4: entered promiscuous mode [ 832.703208][T30816] ip6gre4: entered allmulticast mode [ 832.720839][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'. [ 832.740700][T20913] Bluetooth: hci2: command tx timeout [ 832.756133][T30821] hsr_slave_0: left promiscuous mode [ 832.762608][T30821] hsr_slave_1: left promiscuous mode [ 832.789043][T30819] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.797710][T30819] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.035819][T30741] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.043701][T30741] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.051470][T30741] bridge_slave_0: entered allmulticast mode [ 833.059991][T30741] bridge_slave_0: entered promiscuous mode [ 833.070909][T30741] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.080595][T30741] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.086988][T30833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6174'. [ 833.088363][T30741] bridge_slave_1: entered allmulticast mode [ 833.106238][T30741] bridge_slave_1: entered promiscuous mode [ 833.167650][T30741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.182453][T30741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.242219][T30837] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6175'. [ 833.262674][T30832] netlink: 916 bytes leftover after parsing attributes in process `syz.0.6173'. [ 833.300369][T20913] block nbd5: Receive control failed (result -32) [ 833.313444][ T5627] block nbd5: Receive control failed (result -32) [ 833.345145][T30741] team0: Port device team_slave_0 added [ 833.416361][T30741] team0: Port device team_slave_1 added [ 833.511903][T30741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.537134][T30741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.595682][T30854] netlink: 'syz.4.6178': attribute type 1 has an invalid length. [ 833.618528][T30741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.635946][T30741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.648983][T30741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.675287][T30741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.781146][ T29] audit: type=1800 audit(1779720568.597:27): pid=30860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6181" name="blkio.bfq.time_recursive" dev="tmpfs" ino=681 res=0 errno=0 [ 833.808666][T30741] hsr_slave_0: entered promiscuous mode [ 833.825713][T30741] hsr_slave_1: entered promiscuous mode [ 834.266120][T30867] netlink: 'syz.4.6183': attribute type 6 has an invalid length. [ 834.324798][T30866] syzkaller0: entered promiscuous mode [ 834.332211][T30866] syzkaller0: entered allmulticast mode [ 834.833729][ T5627] Bluetooth: hci2: command tx timeout [ 836.885233][T30882] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 836.898107][ T5627] Bluetooth: hci2: command tx timeout [ 836.948240][T30895] syzkaller1: entered promiscuous mode [ 836.967926][T30895] syzkaller1: entered allmulticast mode [ 837.125520][T30911] gretap0: left promiscuous mode [ 837.221831][T30911] bridge0: left promiscuous mode [ 837.239434][T30917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6193'. [ 837.274422][T30911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 837.285882][T30911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.298934][T30911] veth1_vlan: left promiscuous mode [ 837.305267][T30911] veth0_vlan: left promiscuous mode [ 837.313315][T30911] veth0_vlan: entered promiscuous mode [ 837.324980][T30911] veth1_vlan: entered promiscuous mode [ 837.335426][T30911] veth1_macvtap: left promiscuous mode [ 837.343708][T30911] veth1_macvtap: entered promiscuous mode [ 837.353645][T30911] bridge0: port 3(vlan2) entered blocking state [ 837.360070][T30911] bridge0: port 3(vlan2) entered listening state [ 837.376948][T30911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.394374][T30911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 837.408366][T30911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 837.421907][T30911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 837.432220][T30911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.441154][T30911] 8021q: adding VLAN 0 to HW filter on device eth0 [ 837.453098][T30911] 8021q: adding VLAN 0 to HW filter on device eth1 [ 837.463561][T30911] 8021q: adding VLAN 0 to HW filter on device eth2 [ 837.472374][T30911] 8021q: adding VLAN 0 to HW filter on device eth3 [ 837.481641][T30911] team1: left promiscuous mode [ 837.486408][T30911] team1: left allmulticast mode [ 837.491967][T30911] 8021q: adding VLAN 0 to HW filter on device team1 [ 837.499413][T30911] team2: left promiscuous mode [ 837.504192][T30911] team2: left allmulticast mode [ 837.509541][T30911] 8021q: adding VLAN 0 to HW filter on device team2 [ 837.521544][T30911] vlan4: left promiscuous mode [ 837.526362][T30911] geneve1: left promiscuous mode [ 837.532720][T30911] vlan4: left allmulticast mode [ 837.537611][T30911] geneve1: left allmulticast mode [ 837.544274][T30911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.557957][T30911] bond6: left promiscuous mode [ 837.562782][T30911] bridge1: left promiscuous mode [ 837.569420][T30911] 8021q: adding VLAN 0 to HW filter on device bond6 [ 837.579309][T30911] geneve2: left promiscuous mode [ 837.584300][T30911] geneve2: left allmulticast mode [ 837.590976][T30911] ip6gre2: left promiscuous mode [ 837.596325][T30911] ip6gre2: left allmulticast mode [ 837.603569][T30911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 837.621720][T30932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6194'. [ 837.635306][T30911] gtp0: left promiscuous mode [ 837.641276][T30911] gtp0: left allmulticast mode [ 837.648669][T30911] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 837.704676][T30741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.715716][T30741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 837.728112][T30741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58120 - 0 [ 837.739064][T30741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 837.769619][T30905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.882360][T30917] ip6tnl2: entered allmulticast mode [ 837.899398][T18840] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.920562][T18840] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.937450][T18840] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 837.956665][T18840] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.980113][T18840] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.998417][T18840] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 838.015306][T18840] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.032409][T18840] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.055471][T18840] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 838.216080][T30924] gretap0: entered allmulticast mode [ 838.231450][T11195] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 838.248193][T11195] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 838.260724][ T7729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 838.321318][T30944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6198'. [ 838.408798][ T7729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 838.921115][T18840] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.931041][T18840] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.939533][T18840] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 838.978634][ T5627] Bluetooth: hci2: command tx timeout [ 839.055593][T30741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.076957][T30741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 839.090497][T30741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58120 - 0 [ 839.103421][T30741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 839.153196][T11195] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 839.180023][ T7729] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 839.190715][T11195] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 839.219716][ T7729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.243252][T11195] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 839.265215][T11195] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 839.386009][T30741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.451715][T30741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 839.473334][T30741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58120 - 0 [ 839.514367][T30741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 839.643158][T30981] netlink: 'syz.4.6204': attribute type 10 has an invalid length. [ 839.729073][T30985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6204'. [ 839.902579][T30741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.924878][T30741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 839.948309][T30741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58120 - 0 [ 839.969323][T30741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 840.032754][T30990] bridge0: port 3(vlan3) entered blocking state [ 840.058239][T30990] bridge0: port 3(vlan3) entered disabled state [ 840.072694][T30990] vlan3: entered allmulticast mode [ 840.091106][T30990] geneve0: entered allmulticast mode [ 840.109945][T30990] vlan3: entered promiscuous mode [ 840.115238][T30990] geneve0: entered promiscuous mode [ 840.393597][T31001] nbd: must specify a size in bytes for the device [ 840.401664][T30993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6208'. [ 840.444159][T31004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6210'. [ 840.479864][T31006] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6209'. [ 840.563400][T31001] block nbd5: NBD_DISCONNECT [ 840.580301][T31001] block nbd5: Send disconnect failed -32 [ 840.614357][T31001] block nbd5: Send disconnect failed -32 [ 840.627182][T31001] block nbd5: shutting down sockets [ 840.681938][T30741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 840.707123][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 840.721939][T30741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 840.744695][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 840.754793][T30741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 840.770272][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 840.843063][T30741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 840.862956][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.945251][T31027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6216'. [ 841.249362][T31046] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6221'. [ 841.267589][T30741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.355250][T30741] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.399438][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.406639][T11195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.471621][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.478821][T11195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.812821][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6227'. [ 841.854258][T31074] veth1_to_team: entered promiscuous mode [ 841.880476][T31074] dummy0: entered promiscuous mode [ 841.898253][T31074] dummy0: left promiscuous mode [ 841.930247][T31074] veth1_to_team: left promiscuous mode [ 842.243119][T31090] netlink: 'syz.4.6232': attribute type 13 has an invalid length. [ 842.278120][T31090] netlink: 'syz.4.6232': attribute type 11 has an invalid length. [ 842.463045][T30741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.497370][T31099] __nla_validate_parse: 3 callbacks suppressed [ 842.497388][T31099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6234'. [ 842.528228][T31102] netlink: 'syz.5.6235': attribute type 1 has an invalid length. [ 842.554755][T31099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6234'. [ 842.616185][T31110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6237'. [ 842.636145][T31110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6237'. [ 842.647247][T31099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6234'. [ 842.665406][T30741] veth0_vlan: entered promiscuous mode [ 842.685383][T31112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6237'. [ 842.758703][T30741] veth1_vlan: entered promiscuous mode [ 842.914738][T30741] veth0_macvtap: entered promiscuous mode [ 842.936849][T30741] veth1_macvtap: entered promiscuous mode [ 842.959493][T30741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.989167][T30741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.019452][T13185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.043329][T13185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.054251][T13185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.076395][T13185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.314333][T31137] netlink: 'syz.4.6245': attribute type 1 has an invalid length. [ 843.335821][T18840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.349404][T31137] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 843.356606][T18840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.377633][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6245'. [ 843.393282][T31138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6245'. [ 843.414986][T31140] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6246'. [ 843.457875][ C1] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 843.457895][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 843.460154][T18840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.534827][T18840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.580263][T31146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6247'. [ 843.618883][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 843.944393][T31161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.956552][T31161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.969216][T31161] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 843.980182][T31161] bond0 (unregistering): Released all slaves [ 844.260706][T31166] IPVS: set_ctl: invalid protocol: 196 172.20.20.52:20001 [ 844.261089][T31162] lo speed is unknown, defaulting to 1000 [ 846.406021][T31140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.846063][T31184] bridge0: port 3(ipvlan2) entered blocking state [ 846.875170][T20913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 846.878025][T31184] bridge0: port 3(ipvlan2) entered disabled state [ 846.905770][T31195] netlink: 'syz.0.6260': attribute type 1 has an invalid length. [ 846.920113][T20913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 846.929874][T20913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 846.934957][T31184] ipvlan2: entered allmulticast mode [ 846.955646][T20913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 846.964782][T20913] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 847.001886][T31184] bridge0: entered allmulticast mode [ 847.026556][T31184] ipvlan2: left allmulticast mode [ 847.055035][T31184] bridge0: left allmulticast mode [ 847.164950][T31200] bridge_slave_0: left allmulticast mode [ 847.186920][T31200] bridge_slave_0: left promiscuous mode [ 847.195742][T31200] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.230263][T31200] bridge_slave_1: left allmulticast mode [ 847.236059][T31200] bridge_slave_1: left promiscuous mode [ 847.242402][T31200] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.256632][T31200] bond0: (slave bond_slave_0): Releasing backup interface [ 847.270239][T31200] bond0: (slave bond_slave_1): Releasing backup interface [ 847.289810][T31200] team0: Port device team_slave_0 removed [ 847.301872][T31200] team0: Port device team_slave_1 removed [ 847.308784][T31200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.316195][T31200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.325876][T31200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.333646][T31200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.345313][T31200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 847.501305][T31208] ip6gre1: entered allmulticast mode [ 847.562461][T31208] team0: Port device ip6gre1 added [ 847.692510][T31219] netlink: 'syz.3.6265': attribute type 2 has an invalid length. [ 847.705623][T31219] netlink: 'syz.3.6265': attribute type 1 has an invalid length. [ 847.716910][T31219] netlink: 'syz.3.6265': attribute type 2 has an invalid length. [ 847.732371][T31219] netlink: 'syz.3.6265': attribute type 2 has an invalid length. [ 847.740730][T31219] netlink: 'syz.3.6265': attribute type 1 has an invalid length. [ 847.750613][T31219] netlink: 'syz.3.6265': attribute type 2 has an invalid length. [ 847.866241][T31227] __nla_validate_parse: 2 callbacks suppressed [ 847.866260][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6266'. [ 847.906308][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6266'. [ 847.957610][T31227] tipc: Started in network mode [ 847.972202][T31227] tipc: Node identity f60fb4e451f8, cluster identity 4711 [ 847.992369][T31227] tipc: Enabled bearer , priority 0 [ 848.010750][T31228] syzkaller0: entered promiscuous mode [ 848.033333][T31228] syzkaller0: entered allmulticast mode [ 848.106546][T31227] tipc: Resetting bearer [ 848.138194][T31225] tipc: Resetting bearer [ 848.158671][T31230] netlink: 'syz.3.6267': attribute type 2 has an invalid length. [ 848.179991][T31230] netlink: 'syz.3.6267': attribute type 8 has an invalid length. [ 848.194316][T31225] tipc: Disabling bearer [ 848.211321][T31230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6267'. [ 848.234533][T31193] lo speed is unknown, defaulting to 1000 [ 848.245523][T31233] SET target dimension over the limit! [ 848.266310][T31230] netlink: 'syz.3.6267': attribute type 2 has an invalid length. [ 848.298556][T31230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6267'. [ 848.321365][T31235] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 848.779632][T18824] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25 [ 848.801881][T31268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6276'. [ 848.952618][T31193] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.960262][T31193] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.968156][T31193] bridge_slave_0: entered allmulticast mode [ 848.976010][T31193] bridge_slave_0: entered promiscuous mode [ 848.989603][T31193] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.997238][T31193] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.013015][T31193] bridge_slave_1: entered allmulticast mode [ 849.022340][T31193] bridge_slave_1: entered promiscuous mode [ 849.059421][T20913] Bluetooth: hci4: command tx timeout [ 849.064493][T31193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.078815][T31193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.125345][T31193] team0: Port device team_slave_0 added [ 849.145307][T31193] team0: Port device team_slave_1 added [ 849.201202][T31193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.209705][T31193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.248203][T31193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.414830][T31277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.430888][T31277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.512250][T31259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.656377][T31193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.681019][T31193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.710166][T31193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.735343][T13185] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.761938][T13185] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.782653][T13185] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.846161][T13185] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.962643][T31193] hsr_slave_0: entered promiscuous mode [ 849.970159][T31193] hsr_slave_1: entered promiscuous mode [ 849.979880][T31193] debugfs: 'hsr0' already exists in 'hsr' [ 849.993478][T31193] Cannot create hsr debugfs directory [ 850.149280][T31301] erspan0: entered promiscuous mode [ 850.257879][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 850.384199][T31296] erspan0: left promiscuous mode [ 850.898219][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 851.137899][T20913] Bluetooth: hci4: command tx timeout [ 851.455742][T31314] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6285'. [ 851.475941][T31314] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 851.581697][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6287'. [ 851.774360][T31338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6289'. [ 851.794837][T31339] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6291'. [ 851.925284][T31193] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.938541][T31193] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.952017][T31193] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 852.179233][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 852.284932][T31354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6294'. [ 852.431179][T31193] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.461984][T31193] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.493366][T31193] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 852.766497][T31193] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.787049][T31193] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.819900][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 852.836361][T31193] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 853.093698][T31193] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.125218][T31193] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.149315][T31193] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 853.220381][T20913] Bluetooth: hci4: command tx timeout [ 853.246698][T31375] syzkaller1: entered promiscuous mode [ 853.253703][T31375] syzkaller1: entered allmulticast mode [ 853.393638][T31381] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6302'. [ 853.424786][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6297'. [ 853.461847][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6297'. [ 853.635304][T31193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 853.680689][T31193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.712190][T31193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 853.734340][T31193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.758091][T31193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 853.788361][T31193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.807395][T31389] tipc: Enabled bearer , priority 16 [ 853.847119][T31193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 853.912175][T31193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.102668][T31407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6308'. [ 854.212346][T31379] lo speed is unknown, defaulting to 1000 [ 854.357631][T31193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.470644][T31193] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.522975][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.533733][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.633478][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.641540][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.740999][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 855.299738][T20913] Bluetooth: hci4: command tx timeout [ 856.041074][T31470] macvlan0: entered promiscuous mode [ 856.080699][T31470] macvlan0: entered allmulticast mode [ 856.104474][T31470] veth1_vlan: entered allmulticast mode [ 856.112709][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6327'. [ 856.145790][T31470] veth1_vlan: left allmulticast mode [ 856.170163][T31470] macvlan0 (unregistering): left promiscuous mode [ 856.196901][T31470] macvlan0 (unregistering): left allmulticast mode [ 856.271442][T31193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.476569][T31491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6330'. [ 856.712935][T31496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6331'. [ 856.732829][T31499] validate_nla: 3 callbacks suppressed [ 856.732847][T31499] netlink: 'syz.5.6332': attribute type 1 has an invalid length. [ 856.746569][T31502] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 856.783285][T31499] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6332'. [ 856.888486][T31505] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6332'. [ 857.107585][T31193] veth0_vlan: entered promiscuous mode [ 857.145992][T31193] veth1_vlan: entered promiscuous mode [ 857.370230][T31193] veth0_macvtap: entered promiscuous mode [ 857.376680][T31528] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 857.410480][T31528] netlink: 'syz.5.6340': attribute type 9 has an invalid length. [ 857.420999][T31193] veth1_macvtap: entered promiscuous mode [ 857.564372][T31530] team0: entered promiscuous mode [ 857.579351][T31530] team_slave_0: entered promiscuous mode [ 857.604154][T31530] team_slave_1: entered promiscuous mode [ 857.617558][T31536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6342'. [ 857.658416][T31530] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 857.695707][T31193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.862512][T31548] netlink: 'syz.2.6343': attribute type 89 has an invalid length. [ 857.904801][T31193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.963514][T11195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.998246][T11195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.036244][T11195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.082446][T11195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.206347][T31555] netlink: 'syz.3.6344': attribute type 22 has an invalid length. [ 858.514871][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.549736][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.615479][T31565] netlink: 'syz.0.6348': attribute type 1 has an invalid length. [ 858.651622][T31567] netlink: 'syz.2.6350': attribute type 4 has an invalid length. [ 858.676756][T31567] __nla_validate_parse: 3 callbacks suppressed [ 858.676788][T31567] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6350'. [ 858.701759][T31570] netlink: 'syz.5.6351': attribute type 1 has an invalid length. [ 858.723105][T31565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 858.743212][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.752835][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.786189][T31567] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 860.582512][T31606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.671801][T31606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.712560][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 860.732011][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 860.744588][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 860.765928][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 860.782762][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 861.136776][T18753] team0: Port device syz_tun removed [ 861.265899][T31621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6363'. [ 861.359416][T31627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6363'. [ 861.412966][T31628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6363'. [ 861.540572][T18840] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.591455][T31621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6363'. [ 861.775688][T18840] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.936634][T18840] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.125461][T18840] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.568660][T31643] bond1: entered promiscuous mode [ 862.601198][T31643] bond1: entered allmulticast mode [ 862.627478][T31652] netlink: 'syz.4.6368': attribute type 10 has an invalid length. [ 862.639677][T31643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 862.726627][T31652] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 862.818186][ T5627] Bluetooth: hci5: command tx timeout [ 863.003986][T31656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6369'. [ 864.532504][T31695] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 864.898169][ T5627] Bluetooth: hci5: command tx timeout [ 864.968966][T18840] bond2 (unregistering): (slave bridge9): Releasing backup interface [ 864.977111][T18840] bridge9 (unregistering): left promiscuous mode [ 864.985432][T18840] bridge9 (unregistering): left allmulticast mode [ 865.014947][T18840] bond0 (unregistering): Released all slaves [ 865.029412][T18840] bond1 (unregistering): (slave vxcan1): Releasing backup interface [ 865.043842][T18840] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 865.052920][T18840] bond1 (unregistering): Released all slaves [ 865.079465][T18840] bond2 (unregistering): Released all slaves [ 865.103521][T18840] bond3 (unregistering): Released all slaves [ 865.124339][T18840] bond4 (unregistering): Released all slaves [ 865.146604][T18840] bond5 (unregistering): Released all slaves [ 865.177164][T18840] bond6 (unregistering): Released all slaves [ 865.228133][T31684] bond0: option arp_all_targets: invalid value (8) [ 865.253014][T31610] lo speed is unknown, defaulting to 1000 [ 865.384475][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 865.618421][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 865.892415][T13185] smbdirect: ib_dev[syz1] removed [ 866.064325][T31718] netlink: 'syz.3.6379': attribute type 10 has an invalid length. [ 866.216618][T31718] dummy0: entered promiscuous mode [ 866.264653][T31718] team0: Port device dummy0 added [ 866.441141][T18840] : left promiscuous mode [ 866.600276][T31738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6382'. [ 866.879127][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6382'. [ 866.900527][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 866.904461][T31743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6382'. [ 866.923539][T18840] tipc: Disabling bearer [ 866.954380][T18840] tipc: Disabling bearer [ 866.978464][ T5627] Bluetooth: hci5: command tx timeout [ 867.006717][T18840] tipc: Disabling bearer [ 867.016981][T18840] tipc: Left network mode [ 867.039565][T31729] debugfs: '1^!Y [ 867.039565][T31729] 3UH5rBn\' already exists in 'ieee80211' [ 867.295682][T31738] netlink: 'syz.3.6382': attribute type 1 has an invalid length. [ 867.326979][T31738] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6382'. [ 867.367209][T31738] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6382'. [ 867.451634][T31738] netlink: 'syz.3.6382': attribute type 1 has an invalid length. [ 867.487115][T31738] netlink: 'syz.3.6382': attribute type 8 has an invalid length. [ 867.536235][T31738] netlink: 606 bytes leftover after parsing attributes in process `syz.3.6382'. [ 867.546220][ C1] bridge0: port 3(vlan2) entered learning state [ 867.696699][T31610] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.704216][T31610] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.717207][T31610] bridge_slave_0: entered allmulticast mode [ 867.725548][T31610] bridge_slave_0: entered promiscuous mode [ 867.735108][T31610] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.742627][T31610] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.750421][T31610] bridge_slave_1: entered allmulticast mode [ 867.760988][T31610] bridge_slave_1: entered promiscuous mode [ 867.771823][T18840] IPVS: stopping master sync thread 22560 ... [ 867.832346][T18840] IPVS: stopping backup sync thread 29195 ... [ 867.883067][T31610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.948951][T31610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.959572][T31763] IPVS: Scheduler module ip_vs_sip not found [ 868.006566][T31762] IPVS: Scheduler module ip_vs_sip not found [ 868.032098][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 868.081525][T31773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6387'. [ 868.122126][T31773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6387'. [ 868.145592][T31773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6387'. [ 868.490895][T31610] team0: Port device team_slave_0 added [ 868.540718][T31610] team0: Port device team_slave_1 added [ 868.788715][T31610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.809388][T31610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.837630][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 868.878320][T31806] netlink: 'syz.4.6395': attribute type 16 has an invalid length. [ 868.896017][T31806] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.6395'. [ 868.921992][T31610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.059379][ T5627] Bluetooth: hci5: command tx timeout [ 869.115715][T31610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.165927][T31610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.255071][T31814] xt_CT: No such helper "netbios-ns" [ 869.273447][T31610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.652003][T31610] hsr_slave_0: entered promiscuous mode [ 869.674508][T31610] hsr_slave_1: entered promiscuous mode [ 869.710254][T31610] debugfs: 'hsr0' already exists in 'hsr' [ 869.728998][T31610] Cannot create hsr debugfs directory [ 870.102537][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 870.412772][T31830] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.420617][T31830] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.967341][T31830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.983045][T31830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.118265][T31832] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 871.139838][T31751] lo speed is unknown, defaulting to 1000 [ 871.180235][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 871.202144][T18827] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.211531][T18827] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.223686][T18827] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.232847][T18827] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.246477][T18827] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.258731][T18827] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.352188][T18827] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.373101][T18827] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.570628][T31880] bridge_slave_1: left allmulticast mode [ 871.587325][T31880] bridge_slave_1: left promiscuous mode [ 871.594485][T31880] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.606161][T31880] bridge_slave_0: left allmulticast mode [ 871.640925][T31880] bridge_slave_0: left promiscuous mode [ 871.659826][T31880] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.074247][T31905] Bluetooth: MGMT ver 1.23 [ 872.307563][T31897] syzkaller1: entered promiscuous mode [ 872.319451][T31897] syzkaller1: entered allmulticast mode [ 872.370507][T31917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.623396][T18840] dummy0: left allmulticast mode [ 872.714623][T31923] __nla_validate_parse: 4 callbacks suppressed [ 872.714644][T31923] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6417'. [ 872.828566][T31928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6418'. [ 873.344328][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 873.374915][T31928] hsr_slave_1 (unregistering): left promiscuous mode [ 873.395095][T31908] lo speed is unknown, defaulting to 1000 [ 873.682835][T31948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6419'. [ 873.708419][T31948] netlink: 'syz.2.6419': attribute type 10 has an invalid length. [ 873.782005][T31952] sctp: [Deprecated]: syz.4.6421 (pid 31952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.782005][T31952] Use struct sctp_sack_info instead [ 873.874641][T31948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.883389][T31948] team0: Device netdevsim1 is of different type [ 873.900963][T31955] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6422'. [ 874.183225][T20913] Bluetooth: hci2: command 0x0401 tx timeout [ 874.189402][ T5627] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 874.470242][T18840] IPVS: stop unused estimator thread 0... [ 875.284404][T32012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6433'. [ 875.314770][T32012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6433'. [ 875.577503][T31610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 875.612419][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 875.621238][T32018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 875.636469][T31610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 875.692866][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.726820][T31610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 875.787598][T32028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6436'. [ 875.803251][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.854907][T31610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 875.926481][T31610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 876.213383][T31610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.290993][T31610] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.327710][T18827] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.334906][T18827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.410739][T32052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 876.470712][T18827] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.478036][T18827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.534662][T32063] netlink: 'syz.5.6442': attribute type 83 has an invalid length. [ 876.816305][T32072] pim6reg: entered allmulticast mode [ 876.845638][T32077] pim6reg: left allmulticast mode [ 877.258219][T32091] 8021q: VLANs not supported on wg1 [ 877.278479][T32091] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6449'. [ 877.313474][T32091] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6449'. [ 877.344371][T32091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6449'. [ 877.937278][T32121] bond2 (unregistering): Released all slaves [ 877.969802][T32130] block nbd5: not configured, cannot reconfigure [ 878.031219][T31610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.299816][T31610] veth0_vlan: entered promiscuous mode [ 878.366651][T32142] ip_vti0: entered promiscuous mode [ 878.393673][T32142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6455'. [ 878.449377][T13185] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.485793][T13185] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.512020][T13185] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.558583][T13185] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.586617][T31610] veth1_vlan: entered promiscuous mode [ 878.734796][T32137] syzkaller0: entered promiscuous mode [ 878.742308][T32137] syzkaller0: entered allmulticast mode [ 880.303278][T32200] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6461'. [ 882.649619][T31610] veth0_macvtap: entered promiscuous mode [ 882.704257][T31610] veth1_macvtap: entered promiscuous mode [ 882.714974][T32223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6462'. [ 882.799655][T31610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.842772][T31610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.880605][T32236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6466'. [ 882.884529][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6462'. [ 882.902230][T18841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.930233][T18841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.962815][T18841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.974561][T32223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6462'. [ 883.020487][T18841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.335933][T18827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.360620][T18827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.468004][T18836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.505478][T18836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.481223][T32247] lo speed is unknown, defaulting to 1000 [ 884.591520][T32293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6477'. [ 884.616067][T32295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6478'. [ 884.624650][T32293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6477'. [ 885.151043][ T5627] block nbd5: Receive control failed (result -1) [ 885.481055][T32333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6485'. [ 885.859651][T32342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6488'. [ 885.921502][T32345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6486'. [ 886.101314][T18350] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 785 sec [ 886.239630][T32351] netlink: 'syz.0.6489': attribute type 4 has an invalid length. [ 886.289837][T32349] netlink: 'syz.0.6489': attribute type 4 has an invalid length. [ 886.702830][T32371] sctp: [Deprecated]: syz.4.6496 (pid 32371) Use of int in maxseg socket option. [ 886.702830][T32371] Use struct sctp_assoc_value instead [ 886.724018][T18827] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.744896][T18827] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.787597][T32378] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6498'. [ 886.797293][T18841] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.809592][T18841] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.966967][T32390] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 886.995613][T32394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6502'. [ 887.008145][T32390] netlink: 820 bytes leftover after parsing attributes in process `syz.4.6500'. [ 887.017378][T32388] can: request_module (can-proto-0) failed. [ 887.023673][T32390] netlink: 820 bytes leftover after parsing attributes in process `syz.4.6500'. [ 887.048676][T32395] syzkaller1: entered promiscuous mode [ 887.061531][T32395] syzkaller1: entered allmulticast mode [ 888.241622][T32450] bond1: ARP target 9.0.0.0 is already present [ 888.248057][T32450] bond1: option arp_ip_target: invalid value (9) [ 888.260268][T32450] bond1 (unregistering): Released all slaves [ 888.307048][T32454] geneve2: entered promiscuous mode [ 888.321226][T32454] geneve2: entered allmulticast mode [ 888.510278][T32467] bond1: entered promiscuous mode [ 888.515476][T32467] bond1: entered allmulticast mode [ 889.122180][T32448] lo speed is unknown, defaulting to 1000 [ 889.240049][T32512] netlink: 'syz.0.6531': attribute type 7 has an invalid length. [ 889.250262][T32510] team0: Port device team_slave_0 removed [ 889.310301][T32512] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.319548][T32512] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.352143][T32539] syzkaller0: entered promiscuous mode [ 890.370641][T32548] __nla_validate_parse: 6 callbacks suppressed [ 890.370661][T32548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6540'. [ 890.373472][T32539] syzkaller0: entered allmulticast mode [ 890.532745][T32548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.602447][T32555] bond1: (slave veth7): Enslaving as an active interface with an up link [ 890.748224][T32568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6540'. [ 892.986391][T32532] lo speed is unknown, defaulting to 1000 [ 893.013270][T32564] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.026125][T32564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.079958][T32564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.093998][T32564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.112562][T32564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 893.127959][T32564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 893.149725][T32564] veth1_vlan: left promiscuous mode [ 893.156749][T32564] veth0_vlan: left promiscuous mode [ 893.163516][T32564] veth0_vlan: entered promiscuous mode [ 893.174429][T32564] veth1_vlan: entered promiscuous mode [ 893.186489][T32564] veth1_macvtap: left promiscuous mode [ 893.194061][T32564] veth0_macvtap: left promiscuous mode [ 893.206512][T32564] veth0_macvtap: entered promiscuous mode [ 893.226431][T32564] veth1_macvtap: entered promiscuous mode [ 893.259128][T32564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 893.270989][T32564] vlan2: left promiscuous mode [ 893.284410][T32564] geneve1: left promiscuous mode [ 893.321277][T32564] bond2: left promiscuous mode [ 893.326276][T32564] bridge2: left promiscuous mode [ 893.332948][T32564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.341034][T32577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6547'. [ 893.350576][T32564] bond2: entered allmulticast mode [ 893.355704][T32564] bridge2: entered allmulticast mode [ 893.361937][T32564] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 893.377232][T32564] bridge2: entered promiscuous mode [ 893.382847][T32564] bond3: left promiscuous mode [ 893.388109][T32564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 893.401950][T32564] mac80211_hwsim hwsim92 wlan1: entered promiscuous mode [ 893.419584][T32564] batman_adv: batadv0: Interface activated: macvtap2 [ 893.437160][T32564] 8021q: adding VLAN 0 to HW filter on device eth0 [ 893.449068][T32564] 8021q: adding VLAN 0 to HW filter on device eth1 [ 893.459471][T32564] 8021q: adding VLAN 0 to HW filter on device eth2 [ 893.469753][T32564] 8021q: adding VLAN 0 to HW filter on device eth3 [ 893.515802][T32567] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6540'. [ 893.552656][T32568] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 893.620211][T18824] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.627456][T18824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.644178][T18824] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.651381][T18824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.742624][T11213] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.801968][T11213] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.844419][T11213] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.941136][T11213] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.949723][T32598] batadv_slave_1: entered promiscuous mode [ 893.966081][T32597] batadv_slave_1: left promiscuous mode [ 894.153035][T32608] sctp: [Deprecated]: syz.4.6556 (pid 32608) Use of int in maxseg socket option. [ 894.153035][T32608] Use struct sctp_assoc_value instead [ 894.419980][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 894.726923][T32639] netlink: 'syz.3.6566': attribute type 2 has an invalid length. [ 894.737205][T32639] netlink: 'syz.3.6566': attribute type 10 has an invalid length. [ 894.755054][T32639] ipvlan0: entered allmulticast mode [ 894.760839][T32639] veth0_vlan: entered allmulticast mode [ 894.782938][T32639] team0: Device ipvlan0 failed to register rx_handler [ 895.024223][T32652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6571'. [ 895.039821][T32652] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6571'. [ 895.104305][T32627] lo speed is unknown, defaulting to 1000 [ 895.273076][T32664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6573'. [ 895.320165][T32661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6574'. [ 895.544170][T32679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6575'. [ 895.632176][T32683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6575'. [ 895.702400][T32673] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.704120][T32685] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6578'. [ 896.247366][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6588'. [ 896.263124][T32706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6588'. [ 896.273348][T32702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6585'. [ 896.592487][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6590'. [ 896.609163][T32719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6590'. [ 896.860732][T32730] netlink: 'syz.2.6593': attribute type 13 has an invalid length. [ 896.887101][T32730] netlink: 'syz.2.6593': attribute type 5 has an invalid length. [ 896.910758][T32730] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 896.975994][T32729] [ 896.978363][T32729] ====================================================== [ 896.985384][T32729] WARNING: possible circular locking dependency detected [ 896.992410][T32729] syzkaller #0 Not tainted [ 896.996811][T32729] ------------------------------------------------------ [ 897.003810][T32729] syz.2.6593/32729 is trying to acquire lock: [ 897.009856][T32729] ffffffff8ea85460 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 897.019681][T32729] [ 897.019681][T32729] but task is already holding lock: [ 897.027026][T32729] ffff8880b10caae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 897.035717][T32729] [ 897.035717][T32729] which lock already depends on the new lock. [ 897.035717][T32729] [ 897.046100][T32729] [ 897.046100][T32729] the existing dependency chain (in reverse order) is: [ 897.055109][T32729] [ 897.055109][T32729] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 897.062844][T32729] lock_sock_nested+0x41/0x100 [ 897.068133][T32729] inet_shutdown+0x6a/0x390 [ 897.073149][T32729] nbd_mark_nsock_dead+0x2e9/0x560 [ 897.078770][T32729] recv_work+0x1c2e/0x1d40 [ 897.083694][T32729] process_scheduled_works+0xb5d/0x1860 [ 897.089747][T32729] worker_thread+0xa53/0xfc0 [ 897.094849][T32729] kthread+0x389/0x470 [ 897.099450][T32729] ret_from_fork+0x514/0xb70 [ 897.104543][T32729] ret_from_fork_asm+0x1a/0x30 [ 897.109811][T32729] [ 897.109811][T32729] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 897.117441][T32729] __mutex_lock+0x1a3/0x1550 [ 897.122544][T32729] nbd_queue_rq+0x37b/0x1100 [ 897.127639][T32729] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 897.133702][T32729] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 897.140536][T32729] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 897.147020][T32729] blk_mq_run_hw_queue+0x348/0x4f0 [ 897.152640][T32729] blk_mq_dispatch_list+0xd16/0xe10 [ 897.158354][T32729] blk_mq_flush_plug_list+0x48d/0x570 [ 897.164324][T32729] __blk_flush_plug+0x3ed/0x4d0 [ 897.169691][T32729] __submit_bio+0x28d/0x580 [ 897.174703][T32729] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 897.180873][T32729] block_read_full_folio+0x599/0x830 [ 897.186662][T32729] filemap_read_folio+0x137/0x3b0 [ 897.192193][T32729] do_read_cache_folio+0x358/0x590 [ 897.197819][T32729] read_part_sector+0xb6/0x2b0 [ 897.203094][T32729] adfspart_check_ICS+0xb1/0x960 [ 897.208534][T32729] bdev_disk_changed+0x817/0x1770 [ 897.214069][T32729] blkdev_get_whole+0x380/0x510 [ 897.219511][T32729] bdev_open+0x31e/0xd30 [ 897.224263][T32729] blkdev_open+0x470/0x610 [ 897.229185][T32729] do_dentry_open+0x785/0x14e0 [ 897.234453][T32729] vfs_open+0x3b/0x340 [ 897.239028][T32729] path_openat+0x2e08/0x3860 [ 897.244131][T32729] do_file_open+0x23e/0x4a0 [ 897.249140][T32729] do_sys_openat2+0x113/0x200 [ 897.254322][T32729] __x64_sys_openat+0x138/0x170 [ 897.259679][T32729] do_syscall_64+0x15f/0xf80 [ 897.264773][T32729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.271173][T32729] [ 897.271173][T32729] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 897.278370][T32729] __mutex_lock+0x1a3/0x1550 [ 897.283470][T32729] nbd_queue_rq+0xc6/0x1100 [ 897.288483][T32729] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 897.294633][T32729] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 897.301465][T32729] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 897.307956][T32729] blk_mq_run_hw_queue+0x348/0x4f0 [ 897.313587][T32729] blk_mq_dispatch_list+0xd16/0xe10 [ 897.319294][T32729] blk_mq_flush_plug_list+0x48d/0x570 [ 897.325174][T32729] __blk_flush_plug+0x3ed/0x4d0 [ 897.330537][T32729] __submit_bio+0x28d/0x580 [ 897.335545][T32729] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 897.341683][T32729] block_read_full_folio+0x599/0x830 [ 897.347515][T32729] filemap_read_folio+0x137/0x3b0 [ 897.353045][T32729] do_read_cache_folio+0x358/0x590 [ 897.358670][T32729] read_part_sector+0xb6/0x2b0 [ 897.363945][T32729] adfspart_check_ICS+0xb1/0x960 [ 897.369385][T32729] bdev_disk_changed+0x817/0x1770 [ 897.374919][T32729] blkdev_get_whole+0x380/0x510 [ 897.380274][T32729] bdev_open+0x31e/0xd30 [ 897.385037][T32729] blkdev_open+0x470/0x610 [ 897.389963][T32729] do_dentry_open+0x785/0x14e0 [ 897.395232][T32729] vfs_open+0x3b/0x340 [ 897.399803][T32729] path_openat+0x2e08/0x3860 [ 897.404902][T32729] do_file_open+0x23e/0x4a0 [ 897.409913][T32729] do_sys_openat2+0x113/0x200 [ 897.415179][T32729] __x64_sys_openat+0x138/0x170 [ 897.420538][T32729] do_syscall_64+0x15f/0xf80 [ 897.425629][T32729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.432025][T32729] [ 897.432025][T32729] -> #3 (set->srcu){.+.+}-{0:0}: [ 897.439130][T32729] __synchronize_srcu+0xca/0x300 [ 897.444570][T32729] elevator_switch+0x1e8/0x7a0 [ 897.449848][T32729] elevator_change+0x2cc/0x450 [ 897.455121][T32729] elevator_set_default+0x36c/0x430 [ 897.460829][T32729] blk_register_queue+0x3e9/0x4e0 [ 897.466356][T32729] __add_disk+0x677/0xd50 [ 897.471200][T32729] add_disk_fwnode+0xfb/0x480 [ 897.476403][T32729] nbd_dev_add+0x72c/0xb50 [ 897.481602][T32729] nbd_init+0x168/0x1f0 [ 897.486275][T32729] do_one_initcall+0x250/0x870 [ 897.491550][T32729] do_initcall_level+0x104/0x190 [ 897.496999][T32729] do_initcalls+0x59/0xa0 [ 897.501839][T32729] kernel_init_freeable+0x2a6/0x3e0 [ 897.507546][T32729] kernel_init+0x1d/0x1d0 [ 897.512385][T32729] ret_from_fork+0x514/0xb70 [ 897.517497][T32729] ret_from_fork_asm+0x1a/0x30 [ 897.522778][T32729] [ 897.522778][T32729] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 897.530592][T32729] __mutex_lock+0x1a3/0x1550 [ 897.535704][T32729] elevator_change+0x1b3/0x450 [ 897.540997][T32729] elevator_set_none+0xb5/0x140 [ 897.546364][T32729] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 897.552779][T32729] nbd_start_device+0x17f/0xb10 [ 897.558140][T32729] nbd_genl_connect+0x165b/0x1cf0 [ 897.563671][T32729] genl_family_rcv_msg_doit+0x22a/0x330 [ 897.569731][T32729] genl_rcv_msg+0x61c/0x7a0 [ 897.574741][T32729] netlink_rcv_skb+0x232/0x4b0 [ 897.580011][T32729] genl_rcv+0x28/0x40 [ 897.584501][T32729] netlink_unicast+0x75c/0x8e0 [ 897.589853][T32729] netlink_sendmsg+0x813/0xb40 [ 897.595121][T32729] ____sys_sendmsg+0x972/0x9f0 [ 897.600390][T32729] ___sys_sendmsg+0x2a5/0x360 [ 897.605568][T32729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 897.611004][T32729] do_syscall_64+0x15f/0xf80 [ 897.616096][T32729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.617761][ C1] bridge0: port 3(vlan2) entered forwarding state [ 897.622578][T32729] [ 897.622578][T32729] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 897.628996][ C1] bridge0: topology change detected, propagating [ 897.637556][T32729] blk_alloc_queue+0x546/0x680 [ 897.649116][T32729] __blk_mq_alloc_disk+0x197/0x390 [ 897.654738][T32729] nbd_dev_add+0x499/0xb50 [ 897.659658][T32729] nbd_init+0x168/0x1f0 [ 897.664325][T32729] do_one_initcall+0x250/0x870 [ 897.669592][T32729] do_initcall_level+0x104/0x190 [ 897.675032][T32729] do_initcalls+0x59/0xa0 [ 897.679867][T32729] kernel_init_freeable+0x2a6/0x3e0 [ 897.685574][T32729] kernel_init+0x1d/0x1d0 [ 897.690410][T32729] ret_from_fork+0x514/0xb70 [ 897.695502][T32729] ret_from_fork_asm+0x1a/0x30 [ 897.700771][T32729] [ 897.700771][T32729] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 897.707969][T32729] __lock_acquire+0x15a5/0x2cf0 [ 897.713331][T32729] lock_acquire+0x106/0x350 [ 897.718365][T32729] fs_reclaim_acquire+0x71/0x100 [ 897.723813][T32729] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 897.730127][T32729] __alloc_skb+0x1d0/0x7d0 [ 897.735044][T32729] tcp_send_active_reset+0x8a/0x550 [ 897.740753][T32729] __tcp_close+0x4c5/0xfe0 [ 897.745678][T32729] tcp_close+0x28/0x110 [ 897.750343][T32729] inet_release+0x143/0x190 [ 897.755352][T32729] sock_close+0xc3/0x240 [ 897.760097][T32729] __fput+0x44f/0xa60 [ 897.764583][T32729] task_work_run+0x1d9/0x270 [ 897.769681][T32729] exit_to_user_mode_loop+0xf3/0x4d0 [ 897.775474][T32729] do_syscall_64+0x33e/0xf80 [ 897.780654][T32729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.787054][T32729] [ 897.787054][T32729] other info that might help us debug this: [ 897.787054][T32729] [ 897.797261][T32729] Chain exists of: [ 897.797261][T32729] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 897.797261][T32729] [ 897.809933][T32729] Possible unsafe locking scenario: [ 897.809933][T32729] [ 897.817359][T32729] CPU0 CPU1 [ 897.822713][T32729] ---- ---- [ 897.828056][T32729] lock(sk_lock-AF_INET6); [ 897.832541][T32729] lock(&nsock->tx_lock); [ 897.839480][T32729] lock(sk_lock-AF_INET6); [ 897.846570][T32729] lock(fs_reclaim); [ 897.850534][T32729] [ 897.850534][T32729] *** DEADLOCK *** [ 897.850534][T32729] [ 897.858663][T32729] 2 locks held by syz.2.6593/32729: [ 897.863857][T32729] #0: ffff888056deb840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 897.874045][T32729] #1: ffff8880b10caae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 897.883181][T32729] [ 897.883181][T32729] stack backtrace: [ 897.889067][T32729] CPU: 0 UID: 0 PID: 32729 Comm: syz.2.6593 Not tainted syzkaller #0 PREEMPT(full) [ 897.889087][T32729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 897.889098][T32729] Call Trace: [ 897.889104][T32729] [ 897.889112][T32729] dump_stack_lvl+0xe8/0x150 [ 897.889133][T32729] print_circular_bug+0x2e1/0x300 [ 897.889154][T32729] check_noncircular+0x12e/0x150 [ 897.889175][T32729] __lock_acquire+0x15a5/0x2cf0 [ 897.889192][T32729] ? __lock_acquire+0x6b5/0x2cf0 [ 897.889215][T32729] ? do_raw_spin_lock+0x12b/0x2f0 [ 897.889234][T32729] ? inet_unhash+0x1fe/0xab0 [ 897.889252][T32729] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 897.889271][T32729] lock_acquire+0x106/0x350 [ 897.889285][T32729] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 897.889304][T32729] ? lock_acquire+0x106/0x350 [ 897.889322][T32729] fs_reclaim_acquire+0x71/0x100 [ 897.889340][T32729] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 897.889359][T32729] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 897.889378][T32729] ? __alloc_skb+0x1d0/0x7d0 [ 897.889390][T32729] ? __local_bh_enable_ip+0xd0/0x130 [ 897.889412][T32729] __alloc_skb+0x1d0/0x7d0 [ 897.889425][T32729] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 897.889442][T32729] tcp_send_active_reset+0x8a/0x550 [ 897.889464][T32729] __tcp_close+0x4c5/0xfe0 [ 897.889484][T32729] tcp_close+0x28/0x110 [ 897.889499][T32729] inet_release+0x143/0x190 [ 897.889519][T32729] sock_close+0xc3/0x240 [ 897.889536][T32729] ? __pfx_sock_close+0x10/0x10 [ 897.889553][T32729] __fput+0x44f/0xa60 [ 897.889574][T32729] task_work_run+0x1d9/0x270 [ 897.889595][T32729] ? __pfx_task_work_run+0x10/0x10 [ 897.889617][T32729] exit_to_user_mode_loop+0xf3/0x4d0 [ 897.889632][T32729] ? rcu_is_watching+0x15/0xb0 [ 897.889649][T32729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.889665][T32729] do_syscall_64+0x33e/0xf80 [ 897.889679][T32729] ? trace_irq_disable+0x3b/0x140 [ 897.889700][T32729] ? clear_bhb_loop+0x40/0x90 [ 897.889716][T32729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.889731][T32729] RIP: 0033:0x7f2c23b9ce59 [ 897.889745][T32729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.889759][T32729] RSP: 002b:00007ffed140d608 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 897.889775][T32729] RAX: 0000000000000000 RBX: 00007f2c23e17da0 RCX: 00007f2c23b9ce59 [ 897.889786][T32729] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 897.889795][T32729] RBP: 00007f2c23e17da0 R08: 00007f2c23e16038 R09: 0000000000000000 [ 897.889805][T32729] R10: 00000000003ffca8 R11: 0000000000000246 R12: 00000000000db25a [ 897.889814][T32729] R13: 00007f2c23e15fac R14: 00000000000daf9a R15: 00007ffed140d710 [ 897.889831][T32729] [ 899.537882][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 900.178117][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 904.658068][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!