last executing test programs: 3.986917572s ago: executing program 4 (id=10421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000002380)="1c393502dda1a67d93b1", 0xa}], 0x1}, 0x9cdc2384056f0939) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900015404797a310000000008000540000000020900020073797a310000000008000a40fffffffc7c0000000c0a010100000000000000000a0000060900020073797a310000000009000100737900500003804c000080080003400000000240000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000100001800c000100636f756e74657200140000001100010000dfffffff0000000300000a0000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) poll(&(0x7f00000005c0)=[{r0}, {r1, 0x8400}, {r5, 0x8000}], 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000000000000000000000000085100000feffffff85100000fcffffffbed0bdab650cad59d65151fee70f82a3f6557714fe5e41bab7e71295d860479226d814cf6824add1168e6fecd68f924a4140559333b8a01a7d29f7fc53446f2b6946868ce2b5a7d17f25d191677abf2277c3bbaca4e797604ad39458a2603d4eb1606a933038df12e38a534683da3627f16042868afb126a25546a4f120ac79efa2705"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f0000000780)) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="09000000010017", 0x7) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0a00030000000000140016808eff88ae2011b901800c000700ffffffff0900000008001b"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000600)={'wg2\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='\t\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="010027bd7000fcdbdf251900000008000300", @ANYRES32=r10, @ANYBLOB="05001e000500000005001d0008000000"], 0x2c}}, 0x24) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="000829bd7000fddb52a3045a00e607000100600000000c009d0005000000520000000c406f1a74b4767591e52e86591983ca0099000800a4b334e3f65586a69a1bba00005d000000000000000000000000000089d3a138d9f83591d3e70a1c01b184edfcbf83fc2e1519ad635b9d41b40076b6b1c5454639cb0182ddd8c1ca81108e508594cd6efa957ba397e1db85e26f58062691df3e62a216b0682e1c8238c0446b08cf59e8135e99a2547a5ce75d7de80949d7c0980773bd368e58210bdfd3821f3b8128cabebc2c0a1521e4f6031030afa398f74d3ae7863be4959bf85457ffa9f478a859063ec1844e97c2bf3fba5e1531e03c02", @ANYRES32=r3, @ANYBLOB="080001006b0000000800db00", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="0c009900000000000e000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008010}, 0x8044) close(0x3) 3.665520887s ago: executing program 4 (id=10423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000006c0)={&(0x7f00000000c0)=0x5, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000680)}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x240042, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000740)) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r3, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000000010104000000000000000002000000200001801400248008000100ac1e000108000200e00000010600034000030000"], 0x34}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9d}]}], @echo_reply}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="00000000080003"], 0x38}}, 0x0) 3.57625033s ago: executing program 4 (id=10427): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) syz_extract_tcp_res(&(0x7f0000000040), 0x40, 0x7) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d30145653600648d1d0012000200270000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x7fff, 0x2, 0x81, 0x1fd, 0xfffffffd, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20) 3.085489036s ago: executing program 4 (id=10431): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180080001006c6f6700100002800a0002407f6c616e310000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) close(0x3) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newtfilter={0x84, 0x2c, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0xfff3, 0x4}, {0x7, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xff}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$kcm(0x2, 0xa, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000c11e4b318e5de2d22d75498242f5d549fda37215e8206d84c1a61f53003593b7b41549ef254457e89797568739d1820b9b5b64a07fe3a4a865685a29af5049030abecc88"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf2505703a73797a3200000000140002800800010039ab70c3ba150b000000e800"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2.939652584s ago: executing program 2 (id=10433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x10000008}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0x4000201c}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)="57fa9b4c91d8", 0x6}], 0x1}, 0x80804) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r9, 0x107, 0x16, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r10, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000980)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x1, 0x0, 0xe, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x5, 0x0, @val=0x80}}}}}}}, 0x0) 2.790144901s ago: executing program 0 (id=10435): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="07433a4b924e8aab34e5d12b938d563f9235b99251ddac4bc3a9a441015c0b955f5e695679c0018c8c04bae47d603b66e1b587a0c82275af10515ff4a0c1c6abaeb8727e9e9002f5d7b8cdc9b14ca7daeb1089cc45967fa4045ddc0efdb5387bf09e1f6e379366a0c4e0f8be834f3511dd5325d8632701a67a13d9e238d032fa745634e4ec7b2e8d4f955bab40e73cc2", 0x90}, 0x1, 0x0, 0x0, 0x4404}, 0x20000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0x7c, 0x20, 0x80000000, 0x100000001}, &(0x7f0000000240)=0x18) r4 = socket(0x1e, 0xa, 0x9) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={r2, 0x0, 0x0, 0x6, 0xa000000000000}, &(0x7f00000002c0)=0x18) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc080) connect$pppl2tp(r4, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x32) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000004c0)={@multicast2, @broadcast, 0x0}, &(0x7f0000000500)=0xc) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x140c, 0x800, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20088040}, 0x4040) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="483e761881dc64488047e5902d82c476", 0x10}, {&(0x7f00000006c0)="8a3cec6f3eda352fe6461697cf98082525f5eb6ce463749ca68609582ba512f34d543c737e41b55e68094b9cd4b043cdbaf6974a9d50cfa41640759620858fd11a7e7a90031dc18b1312d3a62c81ecda7479", 0x52}, {&(0x7f0000000740)="8d7bce22b47954c35d4afdec7fdd9821e41a1382b35bf318ea6a6e865b846ee939ffbd48208098aa184375431209f06213098cc8865157a3d26cf92ccb727f6a4d24c943863cf691ac0399c494c0880d1f3b6e291802c75e0a8a0df60800d4f7b537c91e57865c37fc578ebbf12198b761a642ee0e3cf487a69407230681e1bff0c67c87be834d0f24db342dd65388da8456e1f08d9371be9e58cb5d9ee09ea2f4c3de02803581751fb9d2", 0xab}, {&(0x7f0000000800)="8a32f7f33addc0b9a6e4fa1dbec88c1451ddb2fd10e7e312bb036f866792e6fc97e1f3d6415910823a377aa67925dbe1aa50fd4b2eb8d4d901a5913674cd72f454e8de9efbcacf228f2409b952fd8830c8c1791e8a416f7b89f9ca0719a36cade0c5e83f6016b4346fae442c01a95d094795b383721177ad20275cd8", 0x7c}, {&(0x7f0000000880)="53cfe0b141437ea5c515895cc48a5b6d7662d0f568971039a0f5f0576e825fcecf85e6608d9f72654f25eb59b496fb2e28540dc4f7afe2df6dd8ce9ab8a196d41fef12e5c5ef3ced3b2ff2178e655c67be", 0x51}], 0x5, &(0x7f0000000980)=[{0xc0, 0x109, 0xffffffff, "d9244427f24a29f9de1d48cb67ec4f518928f10d440cda9e72d5895dd8e7972b374ac383a5683b8c1f97f7a0b7acf9b2a8c59185e2b08e174db0944e371d06c2d1de6532d6b69a6670e1e72fb67e498fa641bebda6322f6d9b810e725a04f371a7f4194d134e803c9f96ea4ae4074ff5aad63cd530c32f294c939808115c448eeaf76fa2f7a905d158074a2202ef2c0e8fd992433985e5e7200d5f14c1377a56e6d187884a12eb7b5d"}, {0x108, 0x10d, 0x4, "1fb0565884f33be59b182ede09d5fe797f92807ba9e3e0cd77dc31e3fcec707a12622eb054ebb913823557a116d8c74a3928d779623ed386c339093ffc1a42092812a20d10bd85e547368cd278655720cf4616a73d80ca87878b868b311c588e914bbc8eb035d4aef4cf01b0e31112361149b236f2a03a3394e7e5de9f2b0b4178bb6e8792127bcff4f74668ead3407cf22b249e9d5441373be23e410c43b39e55f8533d58eabdf10b0aeaab1fe32f1b42148823bc000d40accb2561925245960e11f1500171210b0903b661e071340834c96ba1efe3f3789226d024d0a33cd5229f0790e8e4140abaa86a82130b27ba86"}, {0xa8, 0x109, 0x5776, "2284d379cabf555eb91308dff704055c85cfbeac2027a68360ef556a2c663a9dbff39e1cc2eb246dd9977ff5d54faacc366351c24564885b6857af3701ff1f205cfdbc9ae9f0105ffae29b54789150ea23bb695621b3d5d30f420bc0e840eec7281637de27e1de76bbdff50ee55901a13fee1eeb2ff3ff5bbf08a965fcdf0c6620fb08f89516607909cd4d887cb2bf1b1e"}, {0x98, 0x10c, 0x0, "5ca2cfa98f7e06d1e25312810960c49a49e81a3187da919f224c1c75338858f8593c3547d43c604fee2795918a6a1994625098dc15c93b764c7d6f9869c1c3b6fd6809a502b9ebe45882ee9f7842b0b02c92f5af086eabd8396e01cacb43c138f1f92954c9e461b849e97a7778cd9fdeafab044a51de35d354b56a5540a99d1b57d4a1"}], 0x308}, 0xc0) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000d00)=0x8, 0x4) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x1d, r6}, 0x10, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x0, 0x200, 0x6, {r7, r8/1000+10000}, {0x77359400}, {0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "ec4b267a0473bf19"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r9 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000ec0)=0x962e, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r10, 0x80811501, &(0x7f0000000f00)={0x80}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000000fc0)={0x4, 0x5, 0x9, 0x3af, 0x6}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001040)={'wg2\x00', 0x100}) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001080)={r3, 0xfff}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8001, 0x1, 0x2, 0x400, r9, 0x0, '\x00', r6, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0xf}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001400)={&(0x7f00000010c0)="c578f32b7c20da686ca5bda6394404336bdbb210c97f31e9819750aac4929d50045bfd5be5d7599ead779a436d8de628b49e01df05646333c875156b8c2c60499bf503555be4bc726c32e3c9d8974f1ed5811884ad87ea00913b09f695645b95c3d050e095a3455afe4a98e787fa307f7ba6b2ae38117c21d2ddb02bd1bd56", &(0x7f0000001140)=""/181, &(0x7f0000001200)="7fa89b4141da926bda7b24c097c345cc305572add1584ee115acee91cbc828c6c8639676e1919b4f6ed70b6a5e83dffd8a4a32078d4714cfa8e81958b095d05be710729774f2d1b9fb14d91e13141bd63ca493ee904d24ffaabd87dd488fce5b52a3227e32a2e482ded46519a5c1dfa31a2d2e569e73be622a3f3213d871447b74d542a28c8f56a1da10f1c9175728fed0d545bdac4f5bc29118a60ead0d67a3b7559ea5c023c1f65e8cb4afad9bb4f789c675911c0776ca19924b51f0af71c83c0fc9a5b0e53ffab6ba471a429eaa6504fa0376ff6348d607fdcf4b168beb956f62ffef4caa31677f2f19d32b", &(0x7f0000001300)="482b4f1ba93830f86004034af75954cc075097cfe5baa68b1b392c2fa154b24b6fdb7b84287e1d69f85f111989dbf50e18ecbd6d615bfcc236eab5155b298e463fe837737f727de675e8dc7f2a77a92d2b5ccd232ab59f6e78e63662d6961be3e1c8d8425c9344d02bfc907e3da199c6d41c347e56ee05", 0x6, r11, 0x4}, 0x38) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000001440)={@local, @multicast1, 0xffffffffffffffff, "9608e147ae68f156b4b9163592310d887cf9197df97658f0611dccad85663cbf", 0x8, 0x7, 0x0, 0x3}, 0x3c) 2.682982211s ago: executing program 2 (id=10436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000940)=[@in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x5085, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3}, @in={0x2, 0x4e1f, @loopback}, @in6={0xa, 0x4e20, 0x200804, @empty, 0x10002}, @in6={0xa, 0x4e20, 0x4d, @local, 0xfff}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x381, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1846}, @in6={0xa, 0x4e24, 0xfe4, @local, 0x5}], 0xd8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) socket(0x6, 0x0, 0x1000) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @empty=0xe0000000}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}], 0x20}, 0x2400c880) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40050}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000140)=0x10001, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) close(r8) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000005080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x400c044) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000206010300000000000000000700000405000500010000004800078008000840000000e208000b4000000023080013400000000a0c00018008000140ac1e00011800028014000240fc000000000000000000000000000001050014000600000005000400100000003c000780050007005e0000000500140002000000050014000c000000080008400000001d050015002000000005000300d2000000080008400000008f0900020073797a300000000011000300000000002600"/201], 0xc8}, 0x1, 0x0, 0x0, 0x20000894}, 0x4000) epoll_create1(0x0) r9 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000340)={0x3}, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000140000006586000004000000000000000100000d00000000010800000100000000613e00738b6597aeef2b48758a3c1006399bdca4b13d44a081b6bdaf0e25f11a6500b83f76e8ae"], 0x0, 0x30, 0x0, 0x0, 0x4}, 0x28) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) 2.621137761s ago: executing program 0 (id=10438): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r2, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000280)=0xb0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000040)={'a', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r4, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa) socket$netlink(0x10, 0x3, 0x4) close(0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x7}, {0x61, 0x5}, {0x45}, {0x82}, {0x2, 0x0, 0x0, 0x9}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 2.359823042s ago: executing program 2 (id=10440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x80) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x10, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "9bb759fa84db9d57d33da4"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c820}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.275876652s ago: executing program 4 (id=10442): socket(0x1d, 0x4, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x9e, 0xa8, @random="97416ac9b507d6d6f698f9064033f6dbdf79d23da1ea0f7ffc2f83758ce53a69fd1b46db988695b220dc65afb2190d4fcb7825d6173a1df5677b877e5a421332d28a9651d20c568011f33aaa35ef27bf8ab6587c285ac55af5e39ce99c44b530e3a555180fdc1fdc5bb0f9971828c3fe52f1921bd8682aebaf34d5c8a977c35a64b263937f8a023279c729c3474cfe2b36e6c2b4181307ca7711"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="b9bcf0c4d060ebeecb6023b9018fe94e90fd9a5e4ca7f03c73557b47db5521dc15dcd50e591f9b495777b6014d2efaadf678c2472ac46ce6540b2ae839ce0695fd46a791004be885082e46e585d704f28424e2a09416e798331016242547b1313b4eb12472c0343587b5e39ca00bcf075893da7bbd5de84050289d7cf849304a1d57bb8795a82ff696ca9c6d7e5b75a1560bff1ec9de12d07c0782267ddcb203e94df0a6eca916d59f57db61fc6c058fb330938ae3ebe811adf1d9d911e5332d94e0d9ac7bfece25cca65323bb9f1d76b374eb652eabf583a84ec910987c7a65f284a98e7d9f64e82f832cf2ca76", @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="b9bcf0c4d060ebeecb6023b9018fe94e90fd9a5e4ca7f03c73557b47db5521dc15dcd50e591f9b495777b6014d2efaadf678c2472ac46ce6540b2ae839ce0695fd46a791004be885082e46e585d704f28424e2a09416e798331016242547b1313b4eb12472c0343587b5e39ca00bcf075893da7bbd5de84050289d7cf849304a1d57bb8795a82ff696ca9c6d7e5b75a1560bff1ec9de12d07c0782267ddcb203e94df0a6eca916d59f57db61fc6c058fb330938ae3ebe811adf1d9d911e5332d94e0d9ac7bfece25cca65323bb9f1d76b374eb652eabf583a84ec910987c7a65f284a98e7d9f64e82f832cf2ca76", @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfa18, 0xe, 0x9, 0x8, 0x7}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r5, 0x23, "a231bed715e3e28c148890a1bc22e6bab4463d27046c1eabbf05f989cf93caf7650422"}, &(0x7f0000000140)=0x2b) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)={0x8c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c000227734136bbd051f5248b73349484079ac37330b66c8c2d38b233240191"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)={0x8c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c000227734136bbd051f5248b73349484079ac37330b66c8c2d38b233240191"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 2.159880973s ago: executing program 4 (id=10443): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) 1.991576213s ago: executing program 1 (id=10444): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x2}, 0x50) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f0001002dbd7000fcdb07010000bfa0dccc1e00"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.922290133s ago: executing program 2 (id=10445): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'lblcr\x00', 0x6, 0x5, 0x7f}, {@multicast1, 0x4e24, 0x2, 0x10000, 0xfff, 0x4}}, 0x44) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x2, 0x14, 0x4, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xe, @local, 0xfffffffc}}, @sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x0, 0x60}]}, 0x60}, 0x1, 0x7}, 0x44090) (async) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x2, 0x14, 0x4, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xe, @local, 0xfffffffc}}, @sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x0, 0x60}]}, 0x60}, 0x1, 0x7}, 0x44090) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, 0x0, 0x20060000) (async) sendmsg$IEEE802154_LIST_PHY(r2, 0x0, 0x20060000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) (async) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r5 = socket(0x28, 0x5, 0x0) getsockopt(r5, 0x28, 0x8, 0x0, &(0x7f0000000040)) (async) getsockopt(r5, 0x28, 0x8, 0x0, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800db8d00000000000000000200000000000006000416353260000000"], 0x1c}}, 0x60800) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800db8d00000000000000000200000000000006000416353260000000"], 0x1c}}, 0x60800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000a40)={{r1, &(0x7f0000000140)='lblcr\x00', 0x0, &(0x7f00000001c0)={@_ha_fsid={[0x8, 0x3]}, {0x8000, 0x0, 0x0, 0x6}}, 0x0, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000480)}, 0x5, &(0x7f0000000980)=[{0x2, 0x5, &(0x7f00000004c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000500)="d207ff69e7ab9767a69c88cbaa9a3435892254589e720526683fa9d40d15dfe1de9bf1a928cef8a158b9989b003b10e222fd6b3afcae749217bcdc55fa65d8a8ec0ad9c2b06b6cafda2b6ccf77d1a43cca2c4bac5cb90cfd6c81621d06e90dce11e15806bf021bfa84e83450c6ef62e6a1a2de8542b4d715ac2c0e2546beb1ac32786734d25dc74f8b98c1b5b3c72839fba2337b9bee441f7ee8ae318255bb14e74c8addec00767113294b4273f262a95653b67d68f171f628f3e191f766b53ba362b4be6871b8ea7fa9b3b67cda", 0xce, 0x28}, {0x1, 0xfffff001, &(0x7f0000000600)='$&\x00', &(0x7f0000000640)="5e6161b77a468866c3f0eccd85e58ef006063bfc755d8410722324daf5d70ea511fc52e0aa584e21c219ded85d115c96e262b872fe304bb7a2a0578304c2fd06e62a1996e0738420e7fa196409438596952ec87fa1244c5978ecfb52ffa27df19b08fc77dcdef7179c24019f8092d1dab5bf2be7941734560cd61b8fec1e87018901041691e988679f9d083780e32ed84595c5", 0x93, 0x8}, {0x3, 0x7, &(0x7f0000000700)='/\x00', &(0x7f00000007c0)="8835786d1d185074e8619f26277ffbe26d217b5bf79fcad7a2420afe0ba259531c6d1973f6658569313c24498b72a6f2d84e379203fd62b0f21530df1bce8fa22272950bc80c32387cf27b01bc54a9897f97d66a79fc5314e2fa00e447855d6d9738380cf066538c8ad30b2279cf8274e5456b2befa7e6c541d3a0bffa6dedd35cf36893d52eeb8fae33f07fc608f6f4e1e989346eb53c212fd2b3284f74fe5464", 0xa1, 0x30}, {0x2, 0xfffffffe, &(0x7f0000000880)='\x00', &(0x7f00000008c0)="eeb22f820538168d777fc96ada037745c6a2af03ca9e284b3d6b0feb484d3cecb6", 0x21}, {0x2, 0x3, &(0x7f0000000900)='lblcr\x00', &(0x7f0000000940)="3a12575f41f5c1", 0x7, 0x30}]}) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000ac0)=0x1, 0x4) (async) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000ac0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.884306016s ago: executing program 1 (id=10446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES8=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x48804) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) (async) sendto$inet(r7, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r9 = socket(0x10, 0x80002, 0x2) connect$netlink(r9, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), r9) 1.719502755s ago: executing program 2 (id=10447): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0xffffffff, 0x400, {0x0, 0x0, 0x0, r1, {0xffe4}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.703474479s ago: executing program 3 (id=10448): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000640)={'lo\x00', &(0x7f0000000540)=@ethtool_drvinfo={0x3, "d9c4ab1099097148ee2abc9a4d69e5a0e162b000c2bea2efe4f7a59ef84e3c3b", "e25d3c67b9d04282158b0e0cd19e54d78638de2dd9430918b508d1df1774acf0", "9ccce78e8cefc74053a9d375c8d23cd10ad56aded0d383acf287dd2d5655a304", "f7a978455b332e2c548a8046db1c41642b125927ae00a2201567f163b1e5fb85", "9965288d2e84623612733e57f394c938df357d353a34cd640297f3a0f0fa15ef", "8a0b3f6be176e35ad4d6efea", 0x8, 0x2, 0x0, 0x80000001, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.671983772s ago: executing program 1 (id=10449): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x80000001, 0x0, 0x0, 0x100}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7e263cc3f7b82680}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000ffdbdf250500000005002e000000000008000600", @ANYRES32=r4, @ANYBLOB="08003c00ffffff7f08000300", @ANYRES32=r5, @ANYBLOB="908e2b7f29f325bd"], 0x3c}, 0x1, 0x0, 0x0, 0x480}, 0xc0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=@tcp6, 0x2}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r8, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_val={0x18, 0x2, 0x2, 0x0, r1}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x8f, &(0x7f0000000b00)=""/143, 0x40f00, 0xa, '\x00', r5, @fallback=0x2c, r9, 0x8, &(0x7f0000000bc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x10, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000c40)=[r1, r0, r9, r0], &(0x7f0000000c80)=[{0x4, 0x4, 0x1, 0x5}, {0x1, 0x3, 0x1, 0xa}, {0x3, 0x5, 0x2, 0x5}, {0x3, 0x1, 0xd, 0xb}], 0x10, 0x10001}, 0x94) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$FIOCLEX(r10, 0x5451) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x19, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6cb748433eb4a8df}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='syzkaller\x00', 0x3, 0x3c, &(0x7f0000001080)=""/60, 0x41100, 0x52, '\x00', r4, 0x0, r9, 0x8, &(0x7f00000010c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0xf, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001140)=[{0x0, 0x1, 0x6, 0x4}, {0x5, 0x3, 0x10, 0x9}, {0x0, 0x4, 0x4, 0x9}, {0x2, 0x3, 0x4, 0x9}, {0x3, 0x5, 0x0, 0x2}, {0x5, 0x4, 0xe, 0x1}], 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x25, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa59}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x4, 0x5, 0x8, 0x7fff, 0x9}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000800)='GPL\x00', 0x7ff, 0xea, &(0x7f0000000840)=""/234, 0x41000, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xd, 0xeeb, 0x1}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000009c0)=[{0x4, 0x3, 0x8, 0x1}, {0x4, 0x3, 0x9, 0x1}, {0x2, 0x4, 0x2, 0x9}, {0x2, 0x4, 0x6, 0x4}, {0x2, 0x5, 0x3}, {0x5, 0x5, 0x8, 0xb}, {0x5, 0x4, 0xb, 0x1}], 0x10, 0x3}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xc00, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100004981bdb7409ee2ad7c00000a20000000000a01010000000000000000050000000900010073797a310000000014000000030a0103000000000000000005000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.613339995s ago: executing program 0 (id=10450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x4c, 0x1f, 0x319, 0x0, 0x20, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xa}, @in=@multicast1, 0xfffffffd}, [@mark={0xc, 0x15, {0x350759, 0x86}}]}, 0x4c}}, 0x0) 1.528168152s ago: executing program 2 (id=10451): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private0, 0xfe, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xd}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c) r4 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000), 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = socket(0x8, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="05"], 0x144}}, 0x0) recvmmsg(r5, &(0x7f00000066c0)=[{{&(0x7f0000000080)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x2102, 0x0) 1.468206988s ago: executing program 0 (id=10452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xe0, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@address_filter={0x1f, 0x1a, {@in6=@remote, @in=@loopback, 0x2, 0x0, 0x59}}]}, 0xe0}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc, 0x0, 0xfffffffd}]}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000940)={r5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x354}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c000440", @ANYBLOB='FQLk'], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a00000000000000000000000000fe965d51e379bb0a24000a00000000000000200183007878000936c0fe8000000000000000000000000800fb"], 0x0) 1.122884505s ago: executing program 3 (id=10453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000b700000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x4c, r6, 0x400, 0x70bd27, 0x35dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x0, 0x2e, 0x15}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x20004040) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={r8, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r9}}], 0x20, 0x4c004}], 0x1, 0x10) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2006) r10 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x100, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8044, 0xffe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x9601}}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x68}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xd, r12, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 695.00032ms ago: executing program 3 (id=10454): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xabf) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='\x00', 0x20040, &(0x7f0000000100)={@align=0x3, {0x0, 0x10, 0x0, 0xfffffffffffffffe}}, 0x400, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x80}) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "60e04a82280c7c66f4f3062ca1a306029ccea5765e80155780"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "a434c2997d87f5a78c8f8c2d347b6a5999c5331175381248"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@flushsa={0x3c, 0x1c, 0x904, 0x70bd2b, 0x25dfdbfc, {0x33}, [@lastused={0xc, 0xf, 0xc}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @lastused={0xc, 0xf, 0x5}, @tfcpad={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc002}, 0x20004014) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f0000002600)=[{&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x4, 0x2, 0xfffffffd) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket(0x5, 0x1, 0x2c8b7fb7) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000002640)={0x7fff, 0x7, 0x8003, 0x3, 0x9, 0x8f, 0x3, 0x2, 0x0}, &(0x7f0000002680)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000026c0)={r6, 0x7}, &(0x7f0000002700)=0x8) sendmsg$AUDIT_USER_TTY(r2, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002880)={&(0x7f0000002780)={0xf8, 0x464, 0x614, 0x70bd28, 0x25dfdbfd, "20c6b88b9c7eeeb0de63ffde9439d3e1ca785e20fbce44ba28887fea7e43fae48a06c185c19980898812c1a3aaed34d95e08e322e2b86b032a594b8e7d0a92687e6ae373384fed1fb07e8bf8f2441b4b7b879b8eb31387a73ab822172b9c03d350ecc454f55f6c11544cedb21a7e43084cfdc1256ef23b0a9be6f227da3a676909f9cde8777e58f2c740385258ad2f33b2633787a4ca705cdb8bd479afe7f3aa2de44110afdfe8749375d9c6373409c668d315a3f69be8e1cf56f003ce5cd3e0d8e61df8f6200778d9dce7d0185ec5e234c7e783a4b8967e1e94ffecef4812b57b35746ccd256c0e", ["", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x4c004}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002940)={r6, 0x10, &(0x7f0000002900)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000002980)=0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000002b00)={&(0x7f00000029c0), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x28, r8, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x6d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x8816) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r10, 0x10e, 0x6, &(0x7f0000002b40)={0x7, 0xac3, 0x3, 0x8000}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002b80)={'ip6gre0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x38, r8, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000002cc0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x25, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x689f, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa785}, @cb_func={0x18, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002e40)='syzkaller\x00', 0x200, 0xcb, &(0x7f0000002e80)=""/203, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002f80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002fc0)={0x4, 0x2, 0x6, 0xfa8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003000)=[r11, r2, r2, r2, r2, r2], &(0x7f0000003040)=[{0x0, 0x2, 0x1, 0xa}, {0x1, 0x2, 0xd, 0xb}], 0x10, 0x4}, 0x94) sendmsg(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003140)="18e010cab5acc643feaf619078782230f483dfc13d92e76d057d885b68953402269d5bf8939e67f0367d528f8c40ffb8251590469a5b12726c9aeed962bb2ea0966fba59a07de51e87c1ccbb3b97dedca261cef3f6b961b9ed14c4c3d93f13fe8252afa9b8138c99987b770610bb44b609d72dea3088c6cf5c5c14d05f9eb18c9b10cd1352dec57f1d75e538979b3eccddf691f61270d9c1b43a3dbad7bf0e149e7423627d8b558cbb12e3e961da3174aec9bd1a24a47e55590e21797a2ae831f73c5d811304034ffe2da1bb8dee51189d6d67f08f4dbadf8988d02802c78af3a74bf2a5fb9cb9400585b94d49334b95b31125", 0xf3}, {&(0x7f0000003240)="4b847d1e6903751938bf5719ff99406627801f1abeafbe8af77631d3ece0d8da68bb45b5698616bc7935f6e0fc479a34c5ad0d40dc06963a0e40708d2cd22648030c74b592a9bf3959", 0x49}, {&(0x7f00000032c0)="0f413ec636e52d144126ab68052291d28ba31c25e025d6198fd17eba27918f43ca444161875314fb7135e1cc6a32", 0x2e}, {&(0x7f0000003300)="9b86a20efee1f51cc3c1941269313e37d50421b4228e5e866f828d52f6", 0x1d}, {&(0x7f0000003340)="3b106603ebf8796974098b0c92000e56f61458443c423d64615e7c14096ae11c02b403d1f61fdcb4ebfe399788c9d5f81e5390d290e75d5e04dc8ef81d6be962e838788b66dc2db74f49de3166640a3af256188a8274d42ea708e58f662daec4e2d30f9da2", 0x65}], 0x5, &(0x7f0000003440)=[{0x58, 0x1b, 0x3, "810f2d9035ba1e85ec38ceef4e5d6b72efee5c0b43c9d84799368414a0ad75d57a4e554bfd5b968f46626710a4fabefe44a89daf149462aeb861ab6bab27092b3760"}, {0xf8, 0x10a, 0x8, "67792312e804335b1d03a29c414fe369dfd438a90849a1ea1c146f0508d629cf8dd19d57d9ca15ce91cf9291b03aed93457b3484a904c04c377fc185d231179320bc7c37e92ab12de965deca06b9f5858aadc434a50be768aff3ce024daf7511315106013ea0727b965b1a8bd416409c697197e2c4a642efa160f7c028a719602eecfc2dbda28d1a942e39fdb4c7fef7a8dbc1654feb87ab0f5cf5014d6330d93ebcb28f056717fa2eda5010416e299b59b4ccf8723274cea48b791322fa31fc6232b3e1bdacf75f8771179f99f13c1eee7bff2600dd3f75a8b131c8d7e7f0649d287d9ed842"}], 0x150}, 0x800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003840)={&(0x7f0000003600)="0c4877f3336326b9609d02ad30e8c9910ca1519886b6d60b42e6818d3c068238d2d072fba98cf1ef82741cb89eae943dbfc0c4c2d7e0fc10b6a03c9bd6ddcdada3ee14d8553f1efc65b8f93efa07fb0edd44e25d742b658e02c49967fcc134fda3e3512fd4bfbbf182e72c991b5ca43d95b35f3379f8f3be1243af37c9252dc23be20a0ba5b22f79b51277243e7d5f8e5aa458b8ac20e098ccc44a5b3cef8c736bb04bf5833f0593750d1bcaeaef2145356edaf7", &(0x7f00000036c0)=""/30, &(0x7f0000003700)="a5a76c1b7c2113ed827b206510f752c4453f20bb35", &(0x7f0000003740)="abc9fd987a839767b3cdc2e4bf91b7bd4ca415cb71d400d8117ca2fa1b334e70de0fa6d9b2ec231fef7172d9725725a7bed13f76a10d30109a80be90233b0b4ea36db6ee5b241014430ad2c2500c121bcfe1cd40d45cf77bb570dc9a71f427c12d7d3f73653989b8f930594b246ab80e1610c032778c5719084d40d19bccf14c8bc3ede9a2ccb4c66364e9211026463d0a411a7fd40ba9698080cf76e546e6a716ac4dd7615733d2cb9579f0944d45df544a4f8e67f8c7e96d7fc59ac3859c05f8d99c7545c12af0ff0a6abab2e4375e65a4f02be1666afedcdd7bf96cc45c966279dee91ed0992e03a05597b456ea405643a70d7a2000", 0x7, r2}, 0x38) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000003880)={0x2f, 0x3}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc7}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 682.243136ms ago: executing program 1 (id=10455): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=0x0, @ANYBLOB="08000f"], 0x44}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) shutdown(r6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="f55bfd00", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cc7a3e", 0x28, 0x3a, 0xff, @empty, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) 495.087765ms ago: executing program 3 (id=10456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r2, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0) 225.933436ms ago: executing program 0 (id=10457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040006005ec9c2d3e7d475d900000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) close(r1) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x10044001) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000800000000", @ANYRESOCT=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES8=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x18, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x48c0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @enum64={0x9, 0x7, 0x0, 0x13, 0x1, 0x6, [{0x5, 0x6d45fca5, 0xf3}, {0x2, 0x70c2, 0x3}, {0xc, 0x7, 0x9}, {0x1, 0x5}, {0x3, 0x4, 0x8}, {0x10, 0x9, 0x1000}, {0x10, 0x4, 0x1000}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000480)=""/106, 0x97, 0x6a, 0x3921, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x10001}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x7e, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x8, 0xa1, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[r0, r0, r0, r0], &(0x7f0000000600)=[{0x3, 0x1, 0x0, 0x6}, {0x3, 0x5, 0xd, 0x8}, {0x3, 0x4, 0x7, 0x9}, {0x2, 0x3, 0x1, 0x7}, {0x2, 0x1, 0xd, 0x2}, {0x1, 0x5, 0x8, 0x4}, {0x5, 0x3, 0x0, 0x7}], 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) 220.022087ms ago: executing program 1 (id=10458): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28) (async) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)="03", 0x1) 219.59369ms ago: executing program 3 (id=10459): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200070000000800030006ac0f"], 0x44}}, 0x48000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f000000000000000c0000000c00000002000000000000000018001004000000000000000000"], 0x0, 0x26}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES64, @ANYRESOCT=r4, @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x8940}, 0x200000c0) 145.70943ms ago: executing program 1 (id=10460): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x4c, 0x1f, 0x319, 0x0, 0x20, {{@in6=@rand_addr=' \x01\x00'}, @in6=@mcast2}, [@mark={0xc, 0x15, {0x350759, 0x86}}]}, 0x4c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000004700108004000000250000000100fcbd5b56d8ed267e3388d32b97f8c3cdf5f8a19b5263378c5cfb7e1d756d14d4e44b15414b3e05c0000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x18, 0x229, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) 119.173126ms ago: executing program 3 (id=10461): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast1, 0x4e20, 0x3, 'dh\x00', 0x1b, 0x0, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x7, 'dh\x00', 0x19, 0x2240, 0x37}, {@loopback, 0x4e32, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x7c}}, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 0s ago: executing program 0 (id=10462): unshare(0x400) (async) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000ac3a722cfb5eab30d7eeaa000000fcdbdf25010000000800020002000000080001000100000024000480050003000100000005000306000000000500030000"], 0x48}}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) kernel console output (not intermixed with test programs): 24 [ 1487.779970][T11909] netlink: 'syz.3.9070': attribute type 1 has an invalid length. [ 1488.006650][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9070'. [ 1488.174158][T17997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1488.192804][T17997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1488.209312][T17997] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1488.226962][T17997] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1488.238212][T17997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1488.753591][T31643] syz_tun (unregistering): left allmulticast mode [ 1488.983019][T11940] netlink: 'syz.3.9074': attribute type 3 has an invalid length. [ 1489.391995][T11950] FAULT_INJECTION: forcing a failure. [ 1489.391995][T11950] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.404782][T11950] CPU: 1 UID: 0 PID: 11950 Comm: syz.2.9077 Not tainted syzkaller #0 PREEMPT(full) [ 1489.404810][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1489.404823][T11950] Call Trace: [ 1489.404832][T11950] [ 1489.404841][T11950] dump_stack_lvl+0xe8/0x150 [ 1489.404879][T11950] should_fail_ex+0x40c/0x560 [ 1489.404910][T11950] should_failslab+0xa8/0x100 [ 1489.404945][T11950] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 1489.404985][T11950] ? pfn_valid+0x125/0x4c0 [ 1489.405008][T11950] ? pfn_valid+0x125/0x4c0 [ 1489.405030][T11950] ? pfn_valid+0x125/0x4c0 [ 1489.405055][T11950] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1489.405102][T11950] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1489.405148][T11950] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1489.405181][T11950] ? 0xffffffffa0205540 [ 1489.405252][T11950] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1489.405283][T11950] ? _copy_from_user+0x94/0xb0 [ 1489.405314][T11950] ? bpf_test_init+0x113/0x150 [ 1489.405344][T11950] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1489.405380][T11950] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1489.405431][T11950] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1489.405470][T11950] ? __fget_files+0x2a/0x420 [ 1489.405503][T11950] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1489.405543][T11950] bpf_prog_test_run+0x2c5/0x340 [ 1489.405578][T11950] __sys_bpf+0xa22/0xd90 [ 1489.405616][T11950] ? __pfx___sys_bpf+0x10/0x10 [ 1489.405657][T11950] ? __fget_files+0x2a/0x420 [ 1489.405705][T11950] ? ksys_write+0x242/0x270 [ 1489.405741][T11950] ? __pfx_ksys_write+0x10/0x10 [ 1489.405780][T11950] __x64_sys_bpf+0xba/0xd0 [ 1489.405805][T11950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.405828][T11950] do_syscall_64+0x174/0x580 [ 1489.405856][T11950] ? trace_irq_disable+0x3b/0x140 [ 1489.405884][T11950] ? clear_bhb_loop+0x40/0x90 [ 1489.405911][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.405933][T11950] RIP: 0033:0x7f12c079de59 [ 1489.405953][T11950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.405979][T11950] RSP: 002b:00007f12c16de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1489.406001][T11950] RAX: ffffffffffffffda RBX: 00007f12c0a25fa0 RCX: 00007f12c079de59 [ 1489.406018][T11950] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1489.406032][T11950] RBP: 00007f12c16de090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.406046][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.406059][T11950] R13: 00007f12c0a26038 R14: 00007f12c0a25fa0 R15: 00007ffe6a3beb98 [ 1489.406096][T11950] [ 1489.751248][T11923] lo speed is unknown, defaulting to 1000 [ 1489.769101][T11923] syzkaller0 speed is unknown, defaulting to 1000 [ 1489.779249][T11923] xfrm0 speed is unknown, defaulting to 1000 [ 1489.835724][T11960] netlink: 'syz.0.9080': attribute type 1 has an invalid length. [ 1489.952879][T11960] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1490.108885][T11956] bond14: (slave veth9): Enslaving as an active interface with a down link [ 1490.184394][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.221015][T11960] bond14: (slave batadv0): making interface the new active one [ 1490.240753][T11960] batadv0: entered promiscuous mode [ 1490.246479][T11960] bond14: (slave batadv0): Enslaving as an active interface with an up link [ 1490.287193][T11923] lo speed is unknown, defaulting to 1000 [ 1490.357438][ T5623] Bluetooth: hci4: command tx timeout [ 1490.506222][T11992] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9087'. [ 1490.522834][T11997] dvmrp8: entered allmulticast mode [ 1490.667348][T12000] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9090'. [ 1490.803148][T12001] FAULT_INJECTION: forcing a failure. [ 1490.803148][T12001] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.815947][T12001] CPU: 0 UID: 0 PID: 12001 Comm: syz.2.9091 Not tainted syzkaller #0 PREEMPT(full) [ 1490.815978][T12001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1490.815993][T12001] Call Trace: [ 1490.816002][T12001] [ 1490.816011][T12001] dump_stack_lvl+0xe8/0x150 [ 1490.816052][T12001] should_fail_ex+0x40c/0x560 [ 1490.816085][T12001] should_failslab+0xa8/0x100 [ 1490.816120][T12001] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 1490.816152][T12001] ? pfn_valid+0x125/0x4c0 [ 1490.816176][T12001] ? pfn_valid+0x125/0x4c0 [ 1490.816197][T12001] ? pfn_valid+0x125/0x4c0 [ 1490.816224][T12001] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1490.816281][T12001] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1490.816329][T12001] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1490.816364][T12001] ? 0xffffffffa0205540 [ 1490.816440][T12001] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1490.816471][T12001] ? _copy_from_user+0x94/0xb0 [ 1490.816503][T12001] ? bpf_test_init+0x113/0x150 [ 1490.816533][T12001] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1490.816570][T12001] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1490.816623][T12001] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1490.816663][T12001] ? __fget_files+0x2a/0x420 [ 1490.816702][T12001] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1490.816737][T12001] bpf_prog_test_run+0x2c5/0x340 [ 1490.816772][T12001] __sys_bpf+0xa22/0xd90 [ 1490.816810][T12001] ? __pfx___sys_bpf+0x10/0x10 [ 1490.816851][T12001] ? __fget_files+0x2a/0x420 [ 1490.816900][T12001] ? ksys_write+0x242/0x270 [ 1490.816935][T12001] ? __pfx_ksys_write+0x10/0x10 [ 1490.816974][T12001] __x64_sys_bpf+0xba/0xd0 [ 1490.817000][T12001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.817024][T12001] do_syscall_64+0x174/0x580 [ 1490.817053][T12001] ? trace_irq_disable+0x3b/0x140 [ 1490.817080][T12001] ? clear_bhb_loop+0x40/0x90 [ 1490.817108][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.817130][T12001] RIP: 0033:0x7f12c079de59 [ 1490.817150][T12001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.817169][T12001] RSP: 002b:00007f12c16de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1490.817193][T12001] RAX: ffffffffffffffda RBX: 00007f12c0a25fa0 RCX: 00007f12c079de59 [ 1490.817209][T12001] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1490.817223][T12001] RBP: 00007f12c16de090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.817236][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.817249][T12001] R13: 00007f12c0a26038 R14: 00007f12c0a25fa0 R15: 00007ffe6a3beb98 [ 1490.817292][T12001] [ 1491.556359][T12016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9095'. [ 1491.781755][T12028] Bluetooth: MGMT ver 1.23 [ 1492.194914][T12046] syzkaller0: entered promiscuous mode [ 1492.201360][T12046] syzkaller0: entered allmulticast mode [ 1492.222849][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.230862][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.239485][T11923] bridge_slave_0: entered allmulticast mode [ 1492.248148][T11923] bridge_slave_0: entered promiscuous mode [ 1492.258871][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.266175][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.274665][T11923] bridge_slave_1: entered allmulticast mode [ 1492.283436][T11923] bridge_slave_1: entered promiscuous mode [ 1492.327356][T11923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.375978][T11923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.437488][ T5623] Bluetooth: hci4: command tx timeout [ 1492.525357][T11923] team0: Port device team_slave_0 added [ 1492.544123][T11923] team0: Port device team_slave_1 added [ 1492.607703][T12057] netlink: 'syz.1.9105': attribute type 4 has an invalid length. [ 1492.641091][T11923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.655926][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.706258][T11923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.732849][T11923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.744942][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.782924][T11923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.940432][T11923] hsr_slave_0: entered promiscuous mode [ 1492.946593][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1492.960430][T11923] hsr_slave_1: entered promiscuous mode [ 1492.969999][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1492.976601][T11923] debugfs: 'hsr0' already exists in 'hsr' [ 1492.988870][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1492.997994][T11923] Cannot create hsr debugfs directory [ 1493.012287][T12064] xt_TCPMSS: Only works on TCP SYN packets [ 1493.524401][T12083] veth0: entered promiscuous mode [ 1493.591355][T12085] syzkaller0: entered promiscuous mode [ 1493.603808][T12085] syzkaller0: entered allmulticast mode [ 1494.031097][ T30] audit: type=1804 audit(1783379382.836:32): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9114" name="/newroot/577/cgroup.controllers" dev="tmpfs" ino=2984 res=1 errno=0 [ 1494.081426][ T30] audit: type=1800 audit(1783379382.856:33): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9114" name="cgroup.controllers" dev="tmpfs" ino=2984 res=0 errno=0 [ 1494.104502][ T30] audit: type=1804 audit(1783379382.866:34): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9114" name="/newroot/577/cgroup.controllers" dev="tmpfs" ino=2984 res=1 errno=0 [ 1494.517451][ T5623] Bluetooth: hci4: command tx timeout [ 1496.243399][T12083] veth0: left promiscuous mode [ 1496.597975][ T5623] Bluetooth: hci4: command tx timeout [ 1496.909641][T11923] bond0: (slave netdevsim1): Releasing backup interface [ 1496.946515][T11923] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1496.968239][T11923] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 1497.367606][T12149] netlink: 'syz.1.9126': attribute type 9 has an invalid length. [ 1497.792585][T11923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1497.819274][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1497.835131][T11923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1497.862575][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1497.883731][T11923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1497.982585][T12166] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9131'. [ 1498.120935][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.154820][T11923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1498.180102][T11923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1498.335072][T11923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.390924][T11923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.426952][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.434408][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.482820][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.490107][T11336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.655001][T12186] netlink: 'syz.1.9136': attribute type 1 has an invalid length. [ 1498.795584][T12193] netlink: 'syz.0.9137': attribute type 21 has an invalid length. [ 1499.149029][ T6095] tipc: Subscription rejected, illegal request [ 1499.413008][T12219] netlink: 'syz.0.9144': attribute type 11 has an invalid length. [ 1499.709908][T12226] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1499.743791][T11923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.869339][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9149'. [ 1500.063151][T12252] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9152'. [ 1500.154985][T11923] veth0_vlan: entered promiscuous mode [ 1500.171056][T11923] veth1_vlan: entered promiscuous mode [ 1500.221865][T11923] veth0_macvtap: entered promiscuous mode [ 1500.234458][T12259] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9153'. [ 1500.246427][T11923] veth1_macvtap: entered promiscuous mode [ 1500.271354][T11923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.292386][T11923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.315228][T23358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.325031][T23358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.336658][T23358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.350588][T23358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.585057][ T6095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.620456][ T6095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.722532][T21060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.732486][T21060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.985430][T12274] mac80211_hwsim hwsim95 wlan0: entered promiscuous mode [ 1501.010864][T12274] mac80211_hwsim hwsim95 wlan0: entered allmulticast mode [ 1501.024118][T12274] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1501.181603][T12285] syzkaller0: entered promiscuous mode [ 1501.192474][T12285] syzkaller0: entered allmulticast mode [ 1501.608400][T21060] batadv0: left promiscuous mode [ 1501.788346][T12329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9170'. [ 1502.116380][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1502.138278][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1502.180114][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1502.210089][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1502.235831][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1502.431233][T12366] netlink: 'syz.4.9182': attribute type 2 has an invalid length. [ 1502.442191][T12366] netlink: 'syz.4.9182': attribute type 2 has an invalid length. [ 1502.551824][T12366] xt_CT: No such helper "netbios-ns" [ 1502.695977][T12376] tipc: Started in network mode [ 1502.712345][T12376] tipc: Node identity fa22e38e3a47, cluster identity 4711 [ 1502.728254][T12376] tipc: Enabled bearer , priority 0 [ 1502.747752][T12380] syzkaller0: entered promiscuous mode [ 1502.763917][T12380] syzkaller0: entered allmulticast mode [ 1503.029749][T12380] tipc: Resetting bearer [ 1503.114512][T12380] tipc: Disabling bearer [ 1503.224685][T12388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.234877][T12388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.285694][T12388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.426452][T12388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.439784][T12388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1503.455788][T12388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1503.467422][T12388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1503.494349][T12388] veth1_vlan: left promiscuous mode [ 1503.508985][T12388] veth0_vlan: left promiscuous mode [ 1503.518774][T12388] veth0_vlan: entered promiscuous mode [ 1503.527699][T12388] veth1_vlan: entered promiscuous mode [ 1503.539532][T12405] netlink: 'syz.1.9190': attribute type 1 has an invalid length. [ 1503.549244][T12388] veth1_macvtap: left promiscuous mode [ 1503.573700][T12388] veth0_macvtap: left promiscuous mode [ 1503.584275][T12388] veth0_macvtap: entered promiscuous mode [ 1503.592428][T12388] veth1_macvtap: entered promiscuous mode [ 1503.605567][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1503.614565][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1503.625176][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1503.635727][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1503.716622][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.723942][T11336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.786021][T12403] tipc: Enabled bearer , priority 0 [ 1503.863530][T23358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.876526][T23358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.916657][T12420] __nla_validate_parse: 4 callbacks suppressed [ 1503.924819][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9192'. [ 1503.953507][T12397] tipc: Resetting bearer [ 1503.963042][T23358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.980823][T23358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.206433][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.250031][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9194'. [ 1504.378812][T12437] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9199'. [ 1504.675679][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9201'. [ 1504.714130][T12454] netlink: 'syz.4.9201': attribute type 1 has an invalid length. [ 1504.797678][ T7940] tipc: Node number set to 3346546418 [ 1504.848525][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9205'. [ 1504.884534][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9205'. [ 1505.034456][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9207'. [ 1505.175720][T12477] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9210'. [ 1505.230143][T12481] bridge0: entered allmulticast mode [ 1505.284274][T12481] pim6reg: entered allmulticast mode [ 1505.420440][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9213'. [ 1505.467313][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9215'. [ 1506.538757][T12544] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1506.812305][T17997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1506.845163][T17997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1506.854577][T17997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1506.868749][T17997] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1506.879800][T17997] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1507.373324][T12585] Bluetooth: MGMT ver 1.23 [ 1507.695822][T12595] syzkaller1: entered promiscuous mode [ 1507.712139][T12595] syzkaller1: entered allmulticast mode [ 1507.971310][T12551] lo speed is unknown, defaulting to 1000 [ 1508.052731][T12551] syzkaller0 speed is unknown, defaulting to 1000 [ 1508.064323][T12551] xfrm0 speed is unknown, defaulting to 1000 [ 1508.917206][T17997] Bluetooth: hci0: command tx timeout [ 1509.052798][T12551] lo speed is unknown, defaulting to 1000 [ 1509.357589][T12628] __nla_validate_parse: 10 callbacks suppressed [ 1509.357611][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9244'. [ 1509.795646][T12647] tipc: Started in network mode [ 1509.824249][T12647] tipc: Node identity 5e30c5aff41c, cluster identity 4711 [ 1509.832478][T12647] tipc: Enabled bearer , priority 0 [ 1509.857101][T12652] syzkaller0: entered promiscuous mode [ 1509.885213][T12652] syzkaller0: entered allmulticast mode [ 1509.993201][T12639] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1510.142797][T12647] tipc: Resetting bearer [ 1510.261157][T12671] netlink: 'syz.4.9258': attribute type 1 has an invalid length. [ 1510.270058][T12638] tipc: Resetting bearer [ 1510.276670][T12671] nbd: error processing sock list [ 1510.341164][T12638] tipc: Disabling bearer [ 1510.429284][ T6083] bridge_slave_1: left allmulticast mode [ 1510.445226][ T6083] bridge_slave_1: left promiscuous mode [ 1510.465326][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.492130][ T6083] bridge_slave_0: left allmulticast mode [ 1510.500676][ T6083] bridge_slave_0: left promiscuous mode [ 1510.522166][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.757622][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1510.882204][T12694] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1510.926183][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1510.997059][T17997] Bluetooth: hci0: command tx timeout [ 1511.028436][T12704] IPv6: NLM_F_CREATE should be specified when creating new route [ 1511.112431][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9264'. [ 1511.130815][ T6083] bond5 (unregistering): (slave ip6gretap2): Releasing active interface [ 1511.439470][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9266'. [ 1511.527984][ T7940] IPVS: starting estimator thread 0... [ 1511.631736][ T6083] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 1511.647343][T12725] IPVS: using max 25 ests per chain, 60000 per kthread [ 1511.694743][ T6083] bond2 (unregistering): (slave ipip0): Releasing backup interface [ 1511.815664][ T6083] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.825988][ T6083] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.835903][ T6083] .` (unregistering): Released all slaves [ 1511.852655][ T6083] bond1 (unregistering): Released all slaves [ 1511.875930][ T6083] bond2 (unregistering): Released all slaves [ 1511.894506][ T6083] bond3 (unregistering): Released all slaves [ 1511.916653][ T6083] bond0 (unregistering): (slave bond4): Releasing backup interface [ 1511.930130][ T6083] bond0 (unregistering): Released all slaves [ 1511.951004][ T6083] bond4 (unregistering): Released all slaves [ 1511.973187][ T6083] bond5 (unregistering): Released all slaves [ 1511.991988][ T6083] bond6 (unregistering): Released all slaves [ 1512.013077][ T6083] bond7 (unregistering): Released all slaves [ 1512.034906][ T6083] bond8 (unregistering): Released all slaves [ 1512.063488][ T6083] bond9 (unregistering): Released all slaves [ 1512.085844][ T6083] bond10 (unregistering): (slave veth9): Releasing backup interface [ 1512.094474][ T6083] veth9: left promiscuous mode [ 1512.105388][ T6083] bond10 (unregistering): Released all slaves [ 1512.129843][ T6083] bond11 (unregistering): Released all slaves [ 1512.236173][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1512.565773][ T6083] tipc: Disabling bearer [ 1512.609921][ T6083] tipc: Disabling bearer [ 1512.660713][ T6083] tipc: Left network mode [ 1512.762843][T12755] nbd: nbd4 already in use [ 1512.787320][T12755] block nbd4: NBD_DISCONNECT [ 1512.795030][T12755] block nbd4: Send disconnect failed -32 [ 1512.803009][T12755] block nbd4: Send disconnect failed -32 [ 1512.810539][T12755] block nbd4: shutting down sockets [ 1512.893515][T12751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9274'. [ 1513.077039][T17997] Bluetooth: hci0: command tx timeout [ 1513.962342][T12793] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9280'. [ 1513.972498][T12793] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9280'. [ 1514.084750][T12792] netlink: 2736 bytes leftover after parsing attributes in process `syz.0.9280'. [ 1514.270474][T12795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.362183][T12801] netlink: 'syz.3.9283': attribute type 1 has an invalid length. [ 1514.417262][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.452983][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.491753][T12551] bridge_slave_0: entered allmulticast mode [ 1514.525563][T12551] bridge_slave_0: entered promiscuous mode [ 1514.567257][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.605407][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.640118][T12551] bridge_slave_1: entered allmulticast mode [ 1514.702830][T12551] bridge_slave_1: entered promiscuous mode [ 1514.791822][T12807] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9285'. [ 1514.956410][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9288'. [ 1515.156999][T17997] Bluetooth: hci0: command tx timeout [ 1515.184352][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.220753][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1515.308651][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.421241][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9290'. [ 1515.566315][ T6083] hsr_slave_0: left promiscuous mode [ 1515.594072][ T6083] hsr_slave_1: left promiscuous mode [ 1515.848587][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9293'. [ 1515.914820][T12869] syz0: rxe_newlink: already configured on xfrm0 [ 1516.026409][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 1516.055376][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 1516.111054][T12872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9296'. [ 1516.194869][ T6083] team0 (unregistering): Port device dummy0 removed [ 1516.315193][T12551] team0: Port device team_slave_0 added [ 1516.364794][T12551] team0: Port device team_slave_1 added [ 1516.483903][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.510574][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.549176][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.568658][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9298'. [ 1516.615959][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.673288][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.708828][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.869805][T12882] gretap0: left promiscuous mode [ 1516.988970][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9303'. [ 1516.998518][T12882] bridge_slave_0: left promiscuous mode [ 1517.282390][ T6083] IPVS: stop unused estimator thread 0... [ 1517.299905][T12907] tipc: Enabling of bearer rejected, failed to enable media [ 1517.383120][T12551] hsr_slave_0: entered promiscuous mode [ 1517.412171][T12551] hsr_slave_1: entered promiscuous mode [ 1517.425168][T12551] debugfs: 'hsr0' already exists in 'hsr' [ 1517.440752][T12551] Cannot create hsr debugfs directory [ 1517.840339][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1518.692955][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9316'. [ 1519.531099][T13004] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9323'. [ 1519.695689][T12551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1519.742459][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1519.773533][T12551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1519.810598][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1519.846453][T12551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1519.886241][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1519.910107][T12551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1519.943775][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1519.964475][T13018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9324'. [ 1520.005293][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9324'. [ 1520.014987][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9324'. [ 1520.215317][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1520.272913][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1520.310136][T13034] netlink: 'syz.4.9328': attribute type 10 has an invalid length. [ 1520.338123][T13032] netlink: 'syz.4.9328': attribute type 11 has an invalid length. [ 1520.351120][T12551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.365048][T13032] netlink: 'syz.4.9328': attribute type 13 has an invalid length. [ 1520.450358][T13034] ip6tnl1: entered allmulticast mode [ 1520.483954][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.545905][T11336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.553252][T11336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.636064][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.643346][T11336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.670533][T13045] Dropped outbound packet type=208 [ 1520.754473][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1521.490477][T13080] syzkaller0: entered promiscuous mode [ 1521.506248][T13080] syzkaller0: entered allmulticast mode [ 1522.563780][T12551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.903966][T12551] veth0_vlan: entered promiscuous mode [ 1523.016216][T12551] veth1_vlan: entered promiscuous mode [ 1523.157049][T13162] netlink: 'syz.0.9354': attribute type 3 has an invalid length. [ 1523.235329][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9355'. [ 1523.272403][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9355'. [ 1523.395440][T12551] veth0_macvtap: entered promiscuous mode [ 1523.445447][T12551] veth1_macvtap: entered promiscuous mode [ 1523.530192][T12551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.598493][T12551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.673189][ T6083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.718567][ T6083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.778500][ T6083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.819559][ T6083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.115615][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.164492][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.317758][ T6083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.356204][ T6083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.480361][T13219] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1524.660341][T13217] bond1: entered promiscuous mode [ 1524.694013][T13217] bond1: entered allmulticast mode [ 1524.728090][T13217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1524.867722][T13230] vti0: entered promiscuous mode [ 1524.883718][T13230] vti0: entered allmulticast mode [ 1524.929511][T13241] netlink: 'syz.2.9228': attribute type 11 has an invalid length. [ 1525.978504][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9370'. [ 1526.011836][T13261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9370'. [ 1526.099226][T13261] geneve2: entered promiscuous mode [ 1526.134521][T13261] geneve2: entered allmulticast mode [ 1526.381245][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1526.396583][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1526.410341][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1526.421725][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1526.435740][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1526.890906][T13280] bond1: left promiscuous mode [ 1526.936058][T13280] geneve2: left promiscuous mode [ 1527.233888][T13300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9375'. [ 1527.283625][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9375'. [ 1527.481370][ T5623] block nbd4: Receive control failed (result -32) [ 1527.481370][T17997] block nbd4: Receive control failed (result -32) [ 1527.701434][T13270] lo speed is unknown, defaulting to 1000 [ 1527.730254][T13270] syzkaller0 speed is unknown, defaulting to 1000 [ 1527.741107][T13270] xfrm0 speed is unknown, defaulting to 1000 [ 1527.876008][T13319] netlink: 'syz.2.9379': attribute type 32 has an invalid length. [ 1527.916178][T13319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1527.971047][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1528.297538][T13327] tls_set_device_offload: netdev not found [ 1528.327309][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9380'. [ 1528.414745][T13270] lo speed is unknown, defaulting to 1000 [ 1528.518622][ T5623] Bluetooth: hci2: command tx timeout [ 1529.072480][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1529.152725][T13341] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1529.292021][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9382'. [ 1529.602267][T13361] netlink: 'syz.4.9386': attribute type 1 has an invalid length. [ 1529.690778][T13361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1529.806313][ T7934] IPVS: starting estimator thread 0... [ 1529.908284][T13371] IPVS: using max 31 ests per chain, 74400 per kthread [ 1530.211365][T13379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1530.268185][T13383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1530.288349][T13383] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1530.327188][T13383] bond2: (slave vti0): Error -95 calling set_mac_address [ 1530.435732][T13388] bond2: (slave dummy0): Error -99 calling set_mac_address [ 1530.596935][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1530.607852][ T5623] Bluetooth: hci2: command tx timeout [ 1530.643284][T13270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.679456][T13270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.714082][T13270] bridge_slave_0: entered allmulticast mode [ 1530.751064][T13270] bridge_slave_0: entered promiscuous mode [ 1530.797924][T13270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.825205][T13270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.859764][T13270] bridge_slave_1: entered allmulticast mode [ 1530.881954][T13270] bridge_slave_1: entered promiscuous mode [ 1531.011179][T13270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.069549][T13270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.230223][T13270] team0: Port device team_slave_0 added [ 1531.259179][T13270] team0: Port device team_slave_1 added [ 1531.381324][T13270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.415042][T13270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1531.504488][T13270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1531.535225][T13270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.559255][T13270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1531.616931][T13424] Bluetooth: MGMT ver 1.23 [ 1531.656457][T13270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.876606][T13270] hsr_slave_0: entered promiscuous mode [ 1531.890656][T13270] hsr_slave_1: entered promiscuous mode [ 1531.900680][T13270] debugfs: 'hsr0' already exists in 'hsr' [ 1531.906585][T13270] Cannot create hsr debugfs directory [ 1531.976973][T13430] __nla_validate_parse: 2 callbacks suppressed [ 1531.976993][T13430] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9398'. [ 1531.994883][T13428] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9397'. [ 1532.041071][T13435] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.9399'. [ 1532.084874][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9397'. [ 1532.087454][T13438] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9400'. [ 1532.523167][T13461] sctp: [Deprecated]: syz.4.9405 (pid 13461) Use of int in max_burst socket option. [ 1532.523167][T13461] Use struct sctp_assoc_value instead [ 1532.693110][ T5623] Bluetooth: hci2: command tx timeout [ 1532.912294][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9410'. [ 1532.983884][T13475] veth3: entered promiscuous mode [ 1532.989565][T13475] veth3: entered allmulticast mode [ 1532.996443][T13475] team0: Device veth3 is up. Set it down before adding it as a team port [ 1533.101048][T13490] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9410'. [ 1533.638695][T13505] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1533.690086][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9415'. [ 1533.726264][T13270] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1534.516436][T13270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1534.575639][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1534.611396][T13270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1534.652794][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1534.710258][T13270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1534.760226][ T5623] Bluetooth: hci2: command tx timeout [ 1534.771396][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1534.781177][T13270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1534.802313][T13270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1534.952937][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9424'. [ 1535.100314][T13557] veth3: entered allmulticast mode [ 1535.265344][T13570] xt_NFQUEUE: number of total queues is 0 [ 1535.359641][T13270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.430719][T13579] batadv_slave_1: entered promiscuous mode [ 1535.443725][T13578] netlink: 248 bytes leftover after parsing attributes in process `syz.2.9427'. [ 1535.470921][T13270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.515980][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.523263][T12829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.601026][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.608295][T12829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.707500][ T7919] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1535.984708][T13594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1536.389389][T13608] sctp: [Deprecated]: syz.3.9432 (pid 13608) Use of int in max_burst socket option deprecated. [ 1536.389389][T13608] Use struct sctp_assoc_value instead [ 1536.450400][T13601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.654915][T13601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.682317][ T5746] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1536.686650][T13601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.859584][T13601] bond1: left allmulticast mode [ 1536.871139][T13601] geneve2: left allmulticast mode [ 1536.892430][T13579] batadv_slave_1: left promiscuous mode [ 1536.925564][ T6085] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.959047][ T6085] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.971928][ T6085] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.996195][ T6085] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.015399][T13626] lo speed is unknown, defaulting to 1000 [ 1537.054869][T13626] syzkaller0 speed is unknown, defaulting to 1000 [ 1537.101700][T13626] xfrm0 speed is unknown, defaulting to 1000 [ 1537.803164][T13664] __nla_validate_parse: 2 callbacks suppressed [ 1537.803185][T13664] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1537.865123][T13270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1537.956466][T13626] lo speed is unknown, defaulting to 1000 [ 1537.992847][T13270] veth0_vlan: entered promiscuous mode [ 1538.021043][T13270] veth1_vlan: entered promiscuous mode [ 1538.084668][T13270] veth0_macvtap: entered promiscuous mode [ 1538.104612][T13270] veth1_macvtap: entered promiscuous mode [ 1538.157893][T13270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.181134][T13270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.218104][T11336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.241549][T11336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.262619][T11336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.288857][T11336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.542624][T12826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.574029][T12826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.652975][T13684] IPv6: NLM_F_CREATE should be specified when creating new route [ 1538.693338][T13684] IPv6: Can't replace route, no match found [ 1538.733039][T13688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9452'. [ 1538.794197][T12826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.812193][T12826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.901510][T13688] netlink: 'syz.3.9452': attribute type 1 has an invalid length. [ 1538.927236][T13693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1538.960094][ T7939] lo speed is unknown, defaulting to 1000 [ 1539.085133][T13697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9368'. [ 1539.138283][T13703] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 1539.944014][T13730] pimreg: entered allmulticast mode [ 1540.058630][ T30] audit: type=1804 audit(1783379428.866:35): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9458" name="/newroot/104/cgroup.controllers" dev="tmpfs" ino=551 res=1 errno=0 [ 1540.240486][ T30] audit: type=1800 audit(1783379428.866:36): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9458" name="cgroup.controllers" dev="tmpfs" ino=551 res=0 errno=0 [ 1540.313719][ T30] audit: type=1800 audit(1783379428.896:37): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9458" name="cgroup.controllers" dev="tmpfs" ino=551 res=0 errno=0 [ 1540.588731][T13728] pimreg: left allmulticast mode [ 1540.639204][T17997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1540.656657][T17997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1540.668145][T17997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1540.683354][T17997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1540.691257][T17997] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1541.107908][T13763] xt_hashlimit: size too large, truncated to 1048576 [ 1541.368782][T13776] netlink: 'syz.4.9465': attribute type 1 has an invalid length. [ 1541.462601][T32335] bond0: (slave syz_tun): Releasing backup interface [ 1541.661892][T13776] bond2: entered promiscuous mode [ 1541.667893][T13776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1541.695099][T13778] bond2: (slave bridge1): making interface the new active one [ 1541.703398][T13778] bridge1: entered promiscuous mode [ 1541.710861][T13778] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1541.774207][T13769] syzkaller0: entered promiscuous mode [ 1541.784941][T13769] syzkaller0: entered allmulticast mode [ 1541.825485][T13780] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1541.858750][T13780] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1542.176427][T13802] netlink: 'syz.4.9469': attribute type 13 has an invalid length. [ 1542.187202][T13802] netlink: 'syz.4.9469': attribute type 17 has an invalid length. [ 1542.281021][T13805] netlink: set zone limit has 8 unknown bytes [ 1542.372106][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9469'. [ 1542.766274][ T5623] Bluetooth: hci1: command tx timeout [ 1542.772300][T13794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1542.992671][T13810] netlink: 'syz.1.9470': attribute type 7 has an invalid length. [ 1543.001845][T13810] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9470'. [ 1544.848197][ T5623] Bluetooth: hci1: command tx timeout [ 1545.749260][T13822] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1545.843535][T13802] mac80211_hwsim hwsim95 wlan0: left promiscuous mode [ 1545.851240][T13802] mac80211_hwsim hwsim95 wlan0: left allmulticast mode [ 1545.861954][T13802] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1545.963769][T13824] team0: entered promiscuous mode [ 1545.984079][T13824] team_slave_0: entered promiscuous mode [ 1546.009215][T13824] team_slave_1: entered promiscuous mode [ 1546.038926][T13824] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1546.088968][T13829] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9474'. [ 1546.262701][T13749] lo speed is unknown, defaulting to 1000 [ 1546.283835][T13749] syzkaller0 speed is unknown, defaulting to 1000 [ 1546.301402][T13749] xfrm0 speed is unknown, defaulting to 1000 [ 1546.590593][T13843] team0: Port device syz_tun added [ 1546.886369][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9480'. [ 1546.900783][T13749] lo speed is unknown, defaulting to 1000 [ 1546.919989][ T5623] Bluetooth: hci1: command tx timeout [ 1546.928476][T13848] xt_TCPMSS: Only works on TCP SYN packets [ 1547.012784][T13858] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1547.424821][T13870] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1547.441081][T13870] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1547.451876][T13870] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1547.821681][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.829912][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.839069][T13749] bridge_slave_0: entered allmulticast mode [ 1547.854134][T13749] bridge_slave_0: entered promiscuous mode [ 1547.865010][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.874051][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.883526][T13749] bridge_slave_1: entered allmulticast mode [ 1547.892747][T13749] bridge_slave_1: entered promiscuous mode [ 1547.961084][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.975947][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.009241][T13749] team0: Port device team_slave_0 added [ 1548.018335][T13749] team0: Port device team_slave_1 added [ 1548.054643][T13749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.062159][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.089933][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.103649][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.111102][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.137785][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.189518][T13749] hsr_slave_0: entered promiscuous mode [ 1548.196062][T13749] hsr_slave_1: entered promiscuous mode [ 1548.203305][T13749] debugfs: 'hsr0' already exists in 'hsr' [ 1548.209372][T13749] Cannot create hsr debugfs directory [ 1548.478062][T13749] team0: Port device netdevsim1 removed [ 1548.996880][ T5623] Bluetooth: hci1: command tx timeout [ 1549.816052][T13852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1549.831001][T13869] netlink: 'syz.4.9484': attribute type 1 has an invalid length. [ 1549.871003][T13869] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1549.912168][T13749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1549.962986][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1550.018781][T13749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1550.044326][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1550.060831][T13749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1550.115377][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1550.125972][T13889] netlink: 'syz.4.9488': attribute type 7 has an invalid length. [ 1550.168666][T13749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1550.191917][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1550.455775][T13903] syzkaller1: entered promiscuous mode [ 1550.465654][T13903] syzkaller1: entered allmulticast mode [ 1550.746091][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.783743][T13749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.812279][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.819532][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.883721][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.890956][T12831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.001439][T13917] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1551.036512][T13917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1551.294278][T13923] lo speed is unknown, defaulting to 1000 [ 1551.319354][T13923] syzkaller0 speed is unknown, defaulting to 1000 [ 1551.337654][T13923] xfrm0 speed is unknown, defaulting to 1000 [ 1551.743336][T13946] lo speed is unknown, defaulting to 1000 [ 1551.751842][T13946] syzkaller0 speed is unknown, defaulting to 1000 [ 1552.064953][T13923] lo speed is unknown, defaulting to 1000 [ 1552.097915][T13946] xfrm0 speed is unknown, defaulting to 1000 [ 1552.313967][T13749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.640902][T13749] veth0_vlan: entered promiscuous mode [ 1552.689863][T13749] veth1_vlan: entered promiscuous mode [ 1552.970367][T13749] veth0_macvtap: entered promiscuous mode [ 1552.993379][T13946] lo speed is unknown, defaulting to 1000 [ 1553.009568][T13749] veth1_macvtap: entered promiscuous mode [ 1553.055143][T13987] netlink: 'syz.2.9510': attribute type 13 has an invalid length. [ 1553.076467][T13749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.089358][T13987] netlink: 'syz.2.9510': attribute type 13 has an invalid length. [ 1553.101920][T13749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.150402][T23358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.184975][T23358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.220034][T23358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.248149][T23358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.395335][T13992] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1553.409648][T13992] bond1 (unregistering): Released all slaves [ 1553.498410][T13994] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1553.666232][T13991] lo speed is unknown, defaulting to 1000 [ 1553.798319][T13991] syzkaller0 speed is unknown, defaulting to 1000 [ 1553.926256][T12831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.942411][T12831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.068695][T13991] xfrm0 speed is unknown, defaulting to 1000 [ 1554.257550][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.266833][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.605510][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9514'. [ 1554.618374][T14013] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9514'. [ 1554.629664][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9514'. [ 1554.754782][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9517'. [ 1554.765888][T14017] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9516'. [ 1554.794731][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9517'. [ 1554.803909][T13991] lo speed is unknown, defaulting to 1000 [ 1556.014353][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1556.161374][T17997] block nbd10: Receive control failed (result -107) [ 1556.917373][T17997] Bluetooth: hci1: command 0x0405 tx timeout [ 1556.960000][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9526'. [ 1557.198415][T14065] bond3: entered allmulticast mode [ 1557.228463][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9530'. [ 1557.497882][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.505761][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.800137][T14078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.837998][T14078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.097710][ T6087] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.127706][ T6087] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.140541][ T6087] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.216318][ T6087] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.410799][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9535'. [ 1558.581418][T14114] lo speed is unknown, defaulting to 1000 [ 1558.590299][T14114] syzkaller0 speed is unknown, defaulting to 1000 [ 1558.606217][T14114] xfrm0 speed is unknown, defaulting to 1000 [ 1558.658812][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9539'. [ 1558.789697][T14120] can: request_module (can-proto-0) failed. [ 1559.505902][T14146] netlink: 'syz.3.9546': attribute type 1 has an invalid length. [ 1559.533381][T14146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1559.626309][T14153] openvswitch: netlink: Actions may not be safe on all matching packets [ 1559.801638][T14114] lo speed is unknown, defaulting to 1000 [ 1560.504888][T14168] bridge_slave_0: left allmulticast mode [ 1560.524667][T14168] bridge_slave_0: left promiscuous mode [ 1560.539432][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9553'. [ 1560.550397][T14172] netlink: 264 bytes leftover after parsing attributes in process `syz.0.9554'. [ 1560.562369][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.575212][T14172] netlink: 'syz.0.9554': attribute type 11 has an invalid length. [ 1560.591634][T14168] bridge_slave_1: left allmulticast mode [ 1560.608033][T14168] bridge_slave_1: left promiscuous mode [ 1560.614990][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.668489][T14168] bond0: (slave bond_slave_0): Releasing backup interface [ 1560.716317][T14168] bond0: (slave bond_slave_1): Releasing backup interface [ 1560.744167][T14168] team0: Port device team_slave_0 removed [ 1560.764897][T14168] team0: Port device team_slave_1 removed [ 1560.772677][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1560.783350][T14168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.799626][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1560.808362][T14168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.828063][T14168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1560.993951][T14188] lo speed is unknown, defaulting to 1000 [ 1561.016901][T14188] syzkaller0 speed is unknown, defaulting to 1000 [ 1561.099558][T14188] xfrm0 speed is unknown, defaulting to 1000 [ 1561.377590][T14188] lo speed is unknown, defaulting to 1000 [ 1561.855112][T14212] netlink: 'syz.1.9566': attribute type 1 has an invalid length. [ 1561.899022][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9566'. [ 1561.922226][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9568'. [ 1562.005650][T14218] veth0_vlan: left promiscuous mode [ 1562.058932][T23387] veth0_vlan: entered promiscuous mode [ 1562.193232][T14229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9570'. [ 1562.435355][T14231] vlan2: entered promiscuous mode [ 1562.446320][T14231] veth1: entered promiscuous mode [ 1562.881008][T14250] veth0_virt_wifi: entered promiscuous mode [ 1562.928873][T14250] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1563.624160][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9578'. [ 1563.634600][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1563.682005][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1563.687200][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1563.746210][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1563.800184][T14276] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1563.935236][T14265] lo speed is unknown, defaulting to 1000 [ 1564.040900][T14265] syzkaller0 speed is unknown, defaulting to 1000 [ 1564.122199][T14265] xfrm0 speed is unknown, defaulting to 1000 [ 1564.683381][T14304] netlink: 'syz.0.9588': attribute type 1 has an invalid length. [ 1565.069328][T14312] bond0: (slave ip6tnl0): refused to change device type [ 1565.753828][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1565.875142][T14265] lo speed is unknown, defaulting to 1000 [ 1565.960143][T12831] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.023879][T14373] ip6gretap1: entered allmulticast mode [ 1567.024561][T14342] __nla_validate_parse: 2 callbacks suppressed [ 1567.024610][T14342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9594'. [ 1567.114696][T14373] netlink: 'syz.2.9600': attribute type 21 has an invalid length. [ 1567.147114][T14373] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9600'. [ 1567.163954][T14373] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9600'. [ 1567.220275][T14381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9594'. [ 1567.443391][T14386] tipc: Enabling of bearer rejected, media not registered [ 1567.617477][T14388] lo speed is unknown, defaulting to 1000 [ 1567.662690][T14388] syzkaller0 speed is unknown, defaulting to 1000 [ 1567.805750][T14388] xfrm0 speed is unknown, defaulting to 1000 [ 1567.888880][T14398] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1568.915773][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9611'. [ 1568.959962][T14420] netlink: 'syz.0.9611': attribute type 1 has an invalid length. [ 1569.166125][T14423] lo speed is unknown, defaulting to 1000 [ 1569.184574][T14423] syzkaller0 speed is unknown, defaulting to 1000 [ 1569.850561][T14423] xfrm0 speed is unknown, defaulting to 1000 [ 1569.853001][T14388] lo speed is unknown, defaulting to 1000 [ 1570.095978][T14435] x_tables: duplicate underflow at hook 1 [ 1570.266208][T14443] syzkaller0: entered promiscuous mode [ 1570.288627][T14443] syzkaller0: entered allmulticast mode [ 1570.697807][T14449] tipc: Enabled bearer , priority 0 [ 1570.838519][T14423] lo speed is unknown, defaulting to 1000 [ 1571.991831][ T7939] tipc: Node number set to 3227902862 [ 1573.615182][ T24] IPVS: starting estimator thread 0... [ 1573.738156][T14487] IPVS: using max 26 ests per chain, 62400 per kthread [ 1573.870832][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9630'. [ 1573.883698][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9630'. [ 1574.079820][T14458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1574.393445][T14389] Set syz1 is full, maxelem 65536 reached [ 1574.787417][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9640'. [ 1574.898248][T14525] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9639'. [ 1574.973449][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9637'. [ 1577.740485][T14517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1577.944044][T14561] netlink: 'syz.3.9651': attribute type 4 has an invalid length. [ 1577.957322][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1578.004982][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9650'. [ 1578.302466][T14582] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9654'. [ 1578.364246][T14591] team0: entered promiscuous mode [ 1578.371924][T14591] team0: entered allmulticast mode [ 1578.732360][T14611] x_tables: duplicate underflow at hook 2 [ 1578.788445][T14613] netlink: 'syz.0.9665': attribute type 6 has an invalid length. [ 1581.288111][T14584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1581.525568][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9673'. [ 1581.625494][T14678] netlink: 'syz.3.9676': attribute type 32 has an invalid length. [ 1581.630430][T14677] netlink: 'syz.1.9675': attribute type 12 has an invalid length. [ 1581.845217][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9678'. [ 1582.013041][T14691] netlink: 'syz.4.9681': attribute type 1 has an invalid length. [ 1582.059334][T14694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1582.074420][T14695] netlink: 312 bytes leftover after parsing attributes in process `syz.3.9682'. [ 1582.348254][T14711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9687'. [ 1582.361416][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9685'. [ 1582.399773][T14708] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 1582.547391][T14716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 1582.561830][T14723] --map-set only usable from mangle table [ 1582.781890][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9691'. [ 1582.960136][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9693'. [ 1583.070086][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9695'. [ 1583.636024][T14781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9702'. [ 1583.658714][T14781] ip6tnl0: entered promiscuous mode [ 1583.674705][T14781] ip6tnl0: entered allmulticast mode [ 1583.768973][T14784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9703'. [ 1584.322645][T14797] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1584.373852][T14797] ipvlan2: entered allmulticast mode [ 1584.407910][T14797] bond4: entered allmulticast mode [ 1584.451314][T14801] bond4: (slave ipip1): refused to change device type [ 1585.372023][T14834] netlink: 'syz.3.9718': attribute type 2 has an invalid length. [ 1585.418135][T14834] : entered promiscuous mode [ 1585.554131][T14843] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 241 [ 1585.804619][T14852] bond2: Unable to set up delay as MII monitoring is disabled [ 1585.816099][T14852] bond2 (unregistering): Released all slaves [ 1586.283088][T14873] lo speed is unknown, defaulting to 1000 [ 1586.290724][T14873] syzkaller0 speed is unknown, defaulting to 1000 [ 1586.299664][T14873] xfrm0 speed is unknown, defaulting to 1000 [ 1586.353636][T14875] lo speed is unknown, defaulting to 1000 [ 1586.363347][T14875] syzkaller0 speed is unknown, defaulting to 1000 [ 1586.869382][T14873] lo speed is unknown, defaulting to 1000 [ 1586.917444][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1586.918356][T14875] xfrm0 speed is unknown, defaulting to 1000 [ 1587.365317][T14922] openvswitch: netlink: Missing valid actions attribute. [ 1587.380543][T14922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1587.419852][T14924] __nla_validate_parse: 11 callbacks suppressed [ 1587.419873][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9738'. [ 1587.580758][T14928] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9740'. [ 1587.603500][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9739'. [ 1587.812026][T14875] lo speed is unknown, defaulting to 1000 [ 1587.902155][T14939] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9743'. [ 1588.079620][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9744'. [ 1588.299787][T14951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9745'. [ 1588.315386][T14950] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9746'. [ 1588.348278][T14950] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9746'. [ 1588.684953][T14962] sctp: [Deprecated]: syz.3.9748 (pid 14962) Use of int in max_burst socket option. [ 1588.684953][T14962] Use struct sctp_assoc_value instead [ 1588.703203][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9747'. [ 1589.204675][T14973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9752'. [ 1589.436012][T14983] xt_hashlimit: size too large, truncated to 1048576 [ 1589.783278][T14995] xt_hashlimit: size too large, truncated to 1048576 [ 1590.185583][T15003] netlink: 'syz.3.9760': attribute type 19 has an invalid length. [ 1590.209903][T15003] netlink: 'syz.3.9760': attribute type 20 has an invalid length. [ 1590.248612][T15013] netlink: 'syz.3.9760': attribute type 19 has an invalid length. [ 1590.270910][T15013] netlink: 'syz.3.9760': attribute type 20 has an invalid length. [ 1590.411703][T12829] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1590.445088][T12829] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1590.471740][T12829] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1590.563660][T12829] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1591.119087][T15059] syzkaller0: entered promiscuous mode [ 1591.124876][T15059] syzkaller0: entered allmulticast mode [ 1591.332227][T15066] netlink: 'syz.0.9778': attribute type 15 has an invalid length. [ 1592.066132][T15066] bond2 (unregistering): Released all slaves [ 1594.785652][T15123] tun0: tun_chr_ioctl cmd 1074025680 [ 1594.792200][T15123] tun0: tun_chr_ioctl cmd 21731 [ 1596.060567][T15152] bond3: left allmulticast mode [ 1596.092627][T15152] ipvlan2: left allmulticast mode [ 1596.114159][T15152] bond4: left allmulticast mode [ 1596.148087][ T6095] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.164323][T15180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1596.168495][ T6095] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.220991][ T6095] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.264541][ T6095] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.282719][T15183] __nla_validate_parse: 20 callbacks suppressed [ 1596.282741][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9804'. [ 1596.434763][T15194] xt_socket: unknown flags 0xc [ 1596.560361][T15197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9808'. [ 1596.979387][T15228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9813'. [ 1597.028466][T15217] lo speed is unknown, defaulting to 1000 [ 1597.059182][T15217] syzkaller0 speed is unknown, defaulting to 1000 [ 1597.094605][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9816'. [ 1597.109213][T15217] xfrm0 speed is unknown, defaulting to 1000 [ 1597.212333][T17997] Bluetooth: hci1: link tx timeout [ 1597.222160][T17997] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1597.511733][T15252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9820'. [ 1597.732415][T15261] netlink: 600 bytes leftover after parsing attributes in process `syz.0.9823'. [ 1597.997830][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9826'. [ 1598.021591][T15276] unsupported nla_type 216 [ 1598.037814][T15271] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9811'. [ 1598.564199][T15217] lo speed is unknown, defaulting to 1000 [ 1598.639796][T15305] bridge0: port 3(ip6gretap0) entered blocking state [ 1598.677602][T15305] bridge0: port 3(ip6gretap0) entered disabled state [ 1598.702797][T15305] ip6gretap0: entered allmulticast mode [ 1598.770682][T15305] ip6gretap0: entered promiscuous mode [ 1598.788952][T15305] bridge0: port 3(ip6gretap0) entered blocking state [ 1598.795839][T15305] bridge0: port 3(ip6gretap0) entered forwarding state [ 1598.809410][T15308] netlink: 'syz.0.9832': attribute type 4 has an invalid length. [ 1598.824415][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9832'. [ 1598.880167][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.184343][T15327] vlan2: entered allmulticast mode [ 1599.191275][T15327] gretap0: entered allmulticast mode [ 1599.237775][ T5623] Bluetooth: hci1: command 0x0405 tx timeout [ 1599.633970][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9840'. [ 1600.008348][T15328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1600.423599][T15372] netlink: 'syz.1.9847': attribute type 3 has an invalid length. [ 1600.436729][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1600.482276][T15372] netlink: 'syz.1.9847': attribute type 2 has an invalid length. [ 1600.494088][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1600.519242][T15372] netlink: 'syz.1.9847': attribute type 2 has an invalid length. [ 1600.524086][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1600.554001][T15373] netlink: 'syz.1.9847': attribute type 3 has an invalid length. [ 1600.574262][T15373] netlink: 'syz.1.9847': attribute type 2 has an invalid length. [ 1600.605940][ T7939] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1600.616076][T15373] netlink: 'syz.1.9847': attribute type 2 has an invalid length. [ 1600.834239][T15394] mac80211_hwsim hwsim95 syzkaller0: entered promiscuous mode [ 1600.856814][T15394] mac80211_hwsim hwsim95 syzkaller0: entered allmulticast mode [ 1601.038983][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1601.336980][T15419] __nla_validate_parse: 9 callbacks suppressed [ 1601.337001][T15419] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9859'. [ 1601.478771][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1601.768629][T15433] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.9862'. [ 1602.716394][T15453] netlink: zone id is out of range [ 1602.754260][T15453] netlink: zone id is out of range [ 1602.794008][T15453] netlink: zone id is out of range [ 1602.827797][T15457] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9865'. [ 1602.839782][T15453] netlink: get zone limit has 8 unknown bytes [ 1602.865686][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9866'. [ 1602.882134][T15457] xt_hashlimit: max too large, truncated to 1048576 [ 1602.904971][T15461] SET target dimension over the limit! [ 1602.920541][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9866'. [ 1602.924549][T11336] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.960929][T15461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9867'. [ 1602.970672][T11336] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.991918][T11336] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1603.051401][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9867'. [ 1603.223287][T15463] bond3: option ad_actor_sys_prio: invalid value (0) [ 1603.230744][T15463] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1603.253351][T15463] bond3 (unregistering): Released all slaves [ 1603.311183][T11336] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1603.345178][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9868'. [ 1603.505749][T15483] netlink: 'syz.2.9872': attribute type 21 has an invalid length. [ 1603.533849][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9874'. [ 1603.545209][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1603.665624][T15493] IPv6: NLM_F_CREATE should be specified when creating new route [ 1604.809315][T11336] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1604.835683][T15548] syzkaller1: entered promiscuous mode [ 1604.867352][T15548] syzkaller1: entered allmulticast mode [ 1607.669865][T15538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1607.962330][T15565] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1608.218646][T15576] __nla_validate_parse: 7 callbacks suppressed [ 1608.218666][T15576] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9898'. [ 1608.448792][T15593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9904'. [ 1608.462924][T15590] syzkaller0: entered promiscuous mode [ 1608.472329][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9904'. [ 1608.492857][T15590] syzkaller0: entered allmulticast mode [ 1608.501643][T15593] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20004 [ 1608.524559][T15589] tipc: Started in network mode [ 1608.535834][T15589] tipc: Node identity 62049eb0601f, cluster identity 4711 [ 1608.554592][T15589] tipc: Enabled bearer , priority 0 [ 1608.578998][T15600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9906'. [ 1608.662798][T15589] tipc: Resetting bearer [ 1608.789839][T15589] tipc: Disabling bearer [ 1608.818827][T15619] netlink: 'syz.0.9910': attribute type 2 has an invalid length. [ 1609.189543][T15639] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9913'. [ 1609.477131][T17997] Bluetooth: hci3: command 0x0405 tx timeout [ 1609.880671][T15655] sch_fq: defrate 7 ignored. [ 1609.936580][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9919'. [ 1610.045254][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9919'. [ 1610.069426][T15655] team0: Port device team_slave_0 removed [ 1610.540486][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9921'. [ 1610.563557][T15679] netlink: 'syz.2.9921': attribute type 1 has an invalid length. [ 1610.619923][T23379] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1610.659307][T23379] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1610.675939][T15683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1610.690986][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1610.738958][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9924'. [ 1610.760654][T15691] netlink: 'syz.4.9924': attribute type 10 has an invalid length. [ 1610.822526][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1610.855715][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1610.863475][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9924'. [ 1610.890056][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1610.922390][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1611.020682][T15691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.072793][T15691] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1611.137848][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1611.163344][T15710] lo: entered promiscuous mode [ 1611.183145][T15710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1612.372729][T15752] nbd: must specify a device to reconfigure [ 1612.423745][T15747] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1612.491425][T15747] bond3 (unregistering): Released all slaves [ 1612.729989][T15761] bond2 (unregistering): Released all slaves [ 1612.816124][T15765] bond3: entered promiscuous mode [ 1612.824779][T15765] bond3: entered allmulticast mode [ 1612.831812][T15765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1613.059751][T15773] syzkaller0: entered promiscuous mode [ 1613.065373][T15773] syzkaller0: entered allmulticast mode [ 1613.499379][T15806] __nla_validate_parse: 6 callbacks suppressed [ 1613.499399][T15806] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9952'. [ 1613.916471][T15824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1613.927541][T15824] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1613.969424][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9955'. [ 1614.007569][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9955'. [ 1614.171093][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9959'. [ 1614.186439][T15828] netlink: 516 bytes leftover after parsing attributes in process `syz.4.9959'. [ 1614.406142][T15841] lo speed is unknown, defaulting to 1000 [ 1614.431671][T15841] syzkaller0 speed is unknown, defaulting to 1000 [ 1614.451121][T15841] xfrm0 speed is unknown, defaulting to 1000 [ 1614.597559][T10566] Bluetooth: hci4: command 0x0406 tx timeout [ 1614.871561][T15841] lo speed is unknown, defaulting to 1000 [ 1615.184443][T15854] vlan2: entered allmulticast mode [ 1615.196081][T15854] bond0: entered allmulticast mode [ 1615.204595][T15854] batadv0: entered allmulticast mode [ 1615.254040][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9967'. [ 1615.272244][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9967'. [ 1615.289511][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9967'. [ 1615.613955][T15874] gre1: entered allmulticast mode [ 1615.639954][T15875] netlink: 'syz.2.9973': attribute type 2 has an invalid length. [ 1615.691125][T15882] vti0: entered promiscuous mode [ 1615.720902][T15882] vti0: entered allmulticast mode [ 1615.803844][T15875] : entered promiscuous mode [ 1616.054398][T15898] syzkaller1: entered promiscuous mode [ 1616.072293][T15898] syzkaller1: entered allmulticast mode [ 1616.618322][T15913] syzkaller0: entered promiscuous mode [ 1616.624202][T15913] syzkaller0: entered allmulticast mode [ 1617.003823][T15931] netlink: 'syz.2.9990': attribute type 1 has an invalid length. [ 1617.104957][T15928] pimreg9: entered allmulticast mode [ 1617.153230][T15931] erspan1: entered allmulticast mode [ 1617.171230][T15937] tipc: Enabled bearer , priority 0 [ 1617.251886][T15937] syzkaller0: entered promiscuous mode [ 1617.279771][T15937] syzkaller0: entered allmulticast mode [ 1617.391078][T15937] tipc: Resetting bearer [ 1617.442827][T15936] tipc: Resetting bearer [ 1617.535024][T15936] tipc: Disabling bearer [ 1617.851371][T15965] syzkaller0: entered promiscuous mode [ 1617.897718][T15965] syzkaller0: entered allmulticast mode [ 1618.145222][T15972] net_ratelimit: 1 callbacks suppressed [ 1618.167451][T15972] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1618.332732][T15972] netlink: 'syz.1.10001': attribute type 1 has an invalid length. [ 1619.109913][T16014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1619.319498][T16026] __nla_validate_parse: 9 callbacks suppressed [ 1619.319517][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1619.347706][T16026] netlink: 'syz.4.10009': attribute type 7 has an invalid length. [ 1619.368526][T16026] netlink: 'syz.4.10009': attribute type 8 has an invalid length. [ 1619.393496][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1619.415467][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10010'. [ 1619.452866][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10012'. [ 1619.467487][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10010'. [ 1619.498337][T16036] netlink: 'syz.0.10010': attribute type 14 has an invalid length. [ 1619.506515][T16036] netlink: 'syz.0.10010': attribute type 13 has an invalid length. [ 1620.178396][T16016] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1620.392135][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10022'. [ 1620.487745][T16080] netlink: 'syz.1.10023': attribute type 9 has an invalid length. [ 1620.540719][T16050] syzkaller1: entered promiscuous mode [ 1620.561531][T16050] syzkaller1: entered allmulticast mode [ 1620.644310][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10024'. [ 1620.829762][T16087] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1621.084439][T16092] syzkaller1: entered promiscuous mode [ 1621.092248][T16097] netlink: 'syz.0.10027': attribute type 1 has an invalid length. [ 1621.098059][T16092] syzkaller1: entered allmulticast mode [ 1621.220007][T16097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1621.221539][T16107] netlink: 'syz.1.10032': attribute type 1 has an invalid length. [ 1621.532797][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10035'. [ 1621.597165][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10035'. [ 1621.689267][T16120] geneve2: entered promiscuous mode [ 1621.707285][T16120] geneve2: entered allmulticast mode [ 1621.725998][T15207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.770169][T15207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.807169][T15207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.846899][T15207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.003775][T16135] netlink: 'syz.0.10038': attribute type 2 has an invalid length. [ 1622.115108][T16137] netlink: 'syz.3.10039': attribute type 1 has an invalid length. [ 1622.131027][T16137] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10039'. [ 1622.142045][T16137] netlink: 'syz.3.10039': attribute type 1 has an invalid length. [ 1623.282497][T16167] lo speed is unknown, defaulting to 1000 [ 1623.323787][T16169] dvmrp0: entered allmulticast mode [ 1623.339649][T16167] syzkaller0 speed is unknown, defaulting to 1000 [ 1623.376595][T16167] xfrm0 speed is unknown, defaulting to 1000 [ 1623.713467][T23379] hid-generic 0005:046D:0008.0002: unknown main item tag 0x0 [ 1623.940020][T23379] hid-generic 0005:046D:0008.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1624.407512][T16167] lo speed is unknown, defaulting to 1000 [ 1624.467722][T16197] netlink: 'syz.1.10054': attribute type 11 has an invalid length. [ 1624.600299][T16203] __nla_validate_parse: 2 callbacks suppressed [ 1624.600322][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10056'. [ 1624.657607][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10056'. [ 1624.667216][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10057'. [ 1624.727629][T16203] netlink: 'syz.4.10056': attribute type 11 has an invalid length. [ 1624.735696][T16203] netlink: 'syz.4.10056': attribute type 14 has an invalid length. [ 1625.466237][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.507800][T16231] netlink: 'syz.3.10062': attribute type 12 has an invalid length. [ 1625.594481][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1625.677249][T16233] macsec0: entered promiscuous mode [ 1625.736365][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1625.843284][T16231] macsec0 (unregistering): left promiscuous mode [ 1626.429849][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10066'. [ 1626.484920][T16241] xt_hashlimit: size too large, truncated to 1048576 [ 1626.545963][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10066'. [ 1626.962926][T16237] hsr0: entered promiscuous mode [ 1627.295973][T16261] openvswitch: netlink: IP tunnel TTL not specified. [ 1627.501347][T16270] netlink: 'syz.3.10073': attribute type 62 has an invalid length. [ 1627.731104][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1627.756552][T16279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10076'. [ 1627.890200][T17997] block nbd11: Receive control failed (result -1) [ 1628.338802][T16305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10082'. [ 1628.575497][T16311] bridge2: entered promiscuous mode [ 1628.588861][T16311] bridge2: entered allmulticast mode [ 1628.605162][T16311] team0: Port device bridge2 added [ 1628.683351][T16311] bridge3: entered promiscuous mode [ 1628.703431][T16311] bridge3: entered allmulticast mode [ 1628.722531][T16311] team0: Port device bridge3 added [ 1628.949928][T16324] netlink: 'syz.1.10086': attribute type 1 has an invalid length. [ 1629.049296][T16324] veth5: entered allmulticast mode [ 1629.064767][T16331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1629.072068][T16331] IPv6: NLM_F_CREATE should be set when creating new route [ 1629.079339][T16331] IPv6: NLM_F_CREATE should be set when creating new route [ 1629.205862][T16335] xt_hashlimit: size too large, truncated to 1048576 [ 1629.437766][T16340] block nbd1: NBD_DISCONNECT [ 1629.459241][T16340] block nbd1: Send disconnect failed -32 [ 1629.531147][T11336] vlan3: left allmulticast mode [ 1629.541990][T11336] geneve0: left allmulticast mode [ 1629.582141][T11336] vlan3: left promiscuous mode [ 1629.609932][T11336] geneve0: left promiscuous mode [ 1629.625586][T11336] bridge0: port 3(vlan3) entered disabled state [ 1629.715114][T11336] dvmrp0: left allmulticast mode [ 1629.909199][T11336] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 1629.972164][T11336] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 1630.215005][T11336] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 1630.356347][T11336] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1630.419372][T11336] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1630.475217][T11336] team0: Port device bridge8 removed [ 1630.494604][T11336] team0: Port device bridge9 removed [ 1630.519943][T11336] bond0 (unregistering): Released all slaves [ 1630.532361][T11336] bond1 (unregistering): Released all slaves [ 1630.565048][T11336] bond2 (unregistering): Released all slaves [ 1630.586992][T11336] bond3 (unregistering): Released all slaves [ 1630.608717][T11336] bond4 (unregistering): Released all slaves [ 1630.650869][T11336] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1630.661720][T11336] bond5 (unregistering): Released all slaves [ 1630.699002][T11336] bond6 (unregistering): Released all slaves [ 1630.729061][T11336] bond7 (unregistering): Released all slaves [ 1630.755168][T11336] bond8 (unregistering): Released all slaves [ 1630.772369][T11336] bond9 (unregistering): Released all slaves [ 1630.781573][T16357] netlink: 'syz.2.10096': attribute type 32 has an invalid length. [ 1630.791001][T16357] __nla_validate_parse: 1 callbacks suppressed [ 1630.791018][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10096'. [ 1630.817183][T11336] bond10 (unregistering): (slave bond11): Releasing backup interface [ 1630.829501][T11336] bond10 (unregistering): Released all slaves [ 1630.847777][T11336] bond11 (unregistering): Released all slaves [ 1630.866996][T11336] bond12 (unregistering): (slave veth5): Releasing backup interface [ 1630.877514][T11336] bond12 (unregistering): Released all slaves [ 1630.906096][T16359] netlink: 'syz.2.10096': attribute type 23 has an invalid length. [ 1630.915438][T11336] bond13 (unregistering): Released all slaves [ 1630.938249][T11336] team0: Port device bond14 removed [ 1630.944739][T11336] bond14 (unregistering): Released all slaves [ 1630.966191][T11336] bond15 (unregistering): (slave bond16): Releasing backup interface [ 1630.976555][T11336] bond15 (unregistering): Released all slaves [ 1631.000045][T11336] bond16 (unregistering): Released all slaves [ 1631.017352][T11336] bond17 (unregistering): Released all slaves [ 1631.320684][T16357] bond2: option coupled_control: invalid value (255) [ 1631.348426][T16357] bond2 (unregistering): Released all slaves [ 1631.432453][T16371] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1631.482629][T16371] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1631.495646][T16371] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1631.609014][T16383] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1631.609019][T16358] syz_tun: entered promiscuous mode [ 1631.651916][T16358] team0: Port device syz_tun added [ 1631.705635][T11336] tipc: Disabling bearer [ 1631.721461][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10100'. [ 1631.731082][T11336] tipc: Left network mode [ 1631.746906][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10100'. [ 1631.764187][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10102'. [ 1631.784217][T16381] 8021q: VLANs not supported on ip6tnl0 [ 1632.120200][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10106'. [ 1632.153886][T16400] syzkaller1: entered promiscuous mode [ 1632.179997][T16400] syzkaller1: entered allmulticast mode [ 1632.221658][T16409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10106'. [ 1632.289686][T16409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10106'. [ 1632.421302][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10107'. [ 1632.457141][T16414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.485900][T16414] bridge0: entered allmulticast mode [ 1632.584074][T16417] bridge_slave_1: left allmulticast mode [ 1632.602064][T16417] bridge_slave_1: left promiscuous mode [ 1632.617414][T16417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.637613][T16421] netlink: 'syz.0.10110': attribute type 1 has an invalid length. [ 1632.671905][T16417] bridge_slave_0: left allmulticast mode [ 1632.682258][T16417] bridge_slave_0: left promiscuous mode [ 1632.694872][T16417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.740089][T16422] bridge_slave_0: left allmulticast mode [ 1632.757724][T16422] bridge_slave_0: left promiscuous mode [ 1632.763746][T16422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.783755][T16422] bridge_slave_1: left allmulticast mode [ 1632.794848][T16422] bridge_slave_1: left promiscuous mode [ 1632.812755][T16422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.877747][T16422] bond0: (slave bond_slave_0): Releasing backup interface [ 1632.903565][T16422] bond0: (slave bond_slave_1): Releasing backup interface [ 1632.919355][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10112'. [ 1632.935630][T16422] team0: Port device team_slave_1 removed [ 1632.951323][T16422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1632.961110][T16422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.970013][T16422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1632.988405][T16421] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1633.040759][T16440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10114'. [ 1633.888599][T16480] ipvlan3: entered promiscuous mode [ 1634.051878][T16492] netlink: 'syz.3.10125': attribute type 1 has an invalid length. [ 1634.215049][T16492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1634.413923][T16496] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1634.474963][T16499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1634.485121][T16499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.501409][T16499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.538204][T16499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1634.548627][T16499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.562176][T16499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1634.573386][T16499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1634.588958][T16499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1634.641382][T16492] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1634.651320][T16492] bond5: (slave batadv1): making interface the new active one [ 1634.660913][T16492] batadv1: entered promiscuous mode [ 1634.666577][T16492] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1634.683940][T16507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.721400][T16507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.826379][T16509] erspan0: entered promiscuous mode [ 1634.870984][T11336] hsr_slave_0: left promiscuous mode [ 1634.881309][T16516] netlink: 'syz.4.10131': attribute type 1 has an invalid length. [ 1634.895265][T11336] hsr_slave_1: left promiscuous mode [ 1634.910552][T11336] dummy0: left promiscuous mode [ 1634.930579][T11336] veth1_macvtap: left promiscuous mode [ 1634.938793][T11336] veth0_macvtap: left promiscuous mode [ 1635.132545][T16532] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1635.241092][T16536] netlink: 'syz.0.10134': attribute type 1 has an invalid length. [ 1635.706274][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.713469][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1635.857885][T16525] veth1_vlan: left promiscuous mode [ 1635.875693][T16525] veth0_vlan: left promiscuous mode [ 1635.897291][T16525] veth0_vlan: entered promiscuous mode [ 1635.905041][T16525] veth1_vlan: entered promiscuous mode [ 1635.924806][T16525] veth1_macvtap: left promiscuous mode [ 1635.948905][T16525] veth0_macvtap: left promiscuous mode [ 1635.961124][T16525] veth0_macvtap: entered promiscuous mode [ 1635.987779][T16525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1635.997403][T16525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1636.008225][T16525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1636.018179][T16525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1636.026078][T16525] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1636.068074][T16536] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1636.145456][T16547] __nla_validate_parse: 11 callbacks suppressed [ 1636.145478][T16547] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10136'. [ 1636.192322][T12831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.216147][T12831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.228502][T16560] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 1636.237191][T12831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.247894][T16560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10139'. [ 1636.278335][T16560] netlink: 'syz.3.10139': attribute type 7 has an invalid length. [ 1636.335254][T16562] netlink: 'syz.0.10140': attribute type 1 has an invalid length. [ 1636.375190][T12831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.480310][T16562] bond3: entered promiscuous mode [ 1636.486166][T16562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1636.539062][T16570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10142'. [ 1636.751119][T11336] IPVS: stop unused estimator thread 0... [ 1636.941678][T16585] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1637.199677][T16602] xt_connbytes: Forcing CT accounting to be enabled [ 1637.230032][T16608] xt_l2tp: v2 doesn't support IP mode [ 1637.300514][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10152'. [ 1637.431574][T16617] IPVS: length: 224 != 24 [ 1638.117216][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1638.294081][T16665] netlink: 'syz.3.10168': attribute type 2 has an invalid length. [ 1638.541645][T16676] syzkaller0: entered promiscuous mode [ 1638.555942][T16681] netlink: 'syz.1.10173': attribute type 1 has an invalid length. [ 1638.581862][T16676] syzkaller0: entered allmulticast mode [ 1638.644041][T16678] gretap2: entered allmulticast mode [ 1638.658654][T16678] bond2: (slave gretap2): making interface the new active one [ 1638.681244][T16678] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1638.963471][T16703] syzkaller1: entered promiscuous mode [ 1638.969524][T16703] syzkaller1: entered allmulticast mode [ 1639.069694][T16708] netlink: 'syz.1.10179': attribute type 1 has an invalid length. [ 1639.139502][T16708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1639.163949][T16710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10180'. [ 1639.178676][T16710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1639.194641][T16711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10180'. [ 1639.212206][T16711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1639.281407][T16717] netlink: 'syz.4.10181': attribute type 1 has an invalid length. [ 1639.315022][T16717] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1639.798792][T16730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10184'. [ 1639.808211][T16730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10184'. [ 1640.416537][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10185'. [ 1642.379549][T16712] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1642.390069][T16712] bond3: entered allmulticast mode [ 1642.409769][T16708] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1642.974960][T16764] netlink: 'syz.0.10193': attribute type 20 has an invalid length. [ 1643.020296][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.030927][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.031574][T16764] netlink: 'syz.0.10193': attribute type 20 has an invalid length. [ 1643.043538][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.058098][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1643.077733][T16764] netlink: 'syz.0.10193': attribute type 20 has an invalid length. [ 1643.460531][T16747] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1643.525314][T16783] netlink: 'syz.2.10199': attribute type 12 has an invalid length. [ 1643.551725][T16783] netlink: 'syz.2.10199': attribute type 29 has an invalid length. [ 1643.592249][T16783] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10199'. [ 1643.621545][T16783] netlink: 'syz.2.10199': attribute type 1 has an invalid length. [ 1643.631861][T16783] netlink: 47 bytes leftover after parsing attributes in process `syz.2.10199'. [ 1644.399888][T16816] tipc: Enabling of bearer rejected, already enabled [ 1644.433958][T16816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10208'. [ 1644.450152][T16820] netlink: 388 bytes leftover after parsing attributes in process `syz.0.10210'. [ 1644.463911][T16802] syz_tun: entered allmulticast mode [ 1644.680441][T17997] Bluetooth: hci1: command 0x0405 tx timeout [ 1644.924830][T16834] netlink: 'syz.0.10212': attribute type 13 has an invalid length. [ 1644.950781][T16834] netlink: 'syz.0.10212': attribute type 17 has an invalid length. [ 1644.970806][T16837] netlink: 'syz.3.10213': attribute type 13 has an invalid length. [ 1645.211038][T16834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.233352][T16834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.300153][T16834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1645.349766][T16861] netlink: 'syz.2.10217': attribute type 1 has an invalid length. [ 1645.462231][T16834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1645.503129][T16834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1645.538361][T16834] veth0_virt_wifi: left promiscuous mode [ 1645.593634][T16834] veth1_vlan: left promiscuous mode [ 1645.613065][T16834] veth0_vlan: left promiscuous mode [ 1645.638215][T16834] veth0_vlan: entered promiscuous mode [ 1645.653597][T16834] veth1_vlan: entered promiscuous mode [ 1645.670313][T16834] veth1_macvtap: left promiscuous mode [ 1645.679028][T16834] veth0_macvtap: left promiscuous mode [ 1645.686299][T16834] veth0_macvtap: entered promiscuous mode [ 1645.711403][T16834] veth1_macvtap: entered promiscuous mode [ 1645.745911][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1645.762671][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1645.779356][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1645.795789][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1645.845457][T16883] xt_hashlimit: size too large, truncated to 1048576 [ 1645.854244][T16834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1645.983134][T16834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1645.991701][T16834] geneve2: left promiscuous mode [ 1645.997677][T16834] geneve2: left allmulticast mode [ 1646.008680][T16834] bond3: left promiscuous mode [ 1646.014122][T16834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1646.022977][T16834] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 1646.042028][T16837] gretap0: refused to change device tx_queue_len [ 1646.049033][T16837] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1646.104639][T16848] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1646.105837][T23379] bridge0: entered promiscuous mode [ 1646.116809][T16848] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1646.131696][T16848] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1646.340549][T11336] ip6_tunnel:  xmit: Local address not yet configured! [ 1646.359487][T16894] netlink: 'syz.0.10223': attribute type 1 has an invalid length. [ 1646.485752][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10226'. [ 1646.495339][T16897] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1646.530937][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1646.562186][T16897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10223'. [ 1646.578967][T16894] veth7: entered promiscuous mode [ 1646.600442][T16894] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 1646.639175][ T48] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1646.660900][T16897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1646.682452][T16909] sctp: [Deprecated]: syz.4.10227 (pid 16909) Use of int in maxseg socket option. [ 1646.682452][T16909] Use struct sctp_assoc_value instead [ 1646.787379][T15207] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1646.811156][ T48] batadv1: left promiscuous mode [ 1647.023766][T16923] netlink: 'syz.4.10230': attribute type 7 has an invalid length. [ 1647.232394][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1647.256951][T16929] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1647.275633][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1647.303255][T16934] IPv6: NLM_F_CREATE should be specified when creating new route [ 1647.332176][T16941] IPv6: NLM_F_CREATE should be specified when creating new route [ 1648.360595][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1650.441558][T17997] Bluetooth: hci2: command 0x0406 tx timeout [ 1650.517480][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1653.483987][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1658.600412][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1673.958367][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1694.268086][T10566] Bluetooth: hci1: link tx timeout [ 1694.273244][T10566] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1696.357561][T10566] Bluetooth: hci1: command 0x0405 tx timeout [ 1705.317213][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1719.540060][T17092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10244'. [ 1719.559103][T17093] pim6reg: entered allmulticast mode [ 1719.564896][T17092] pim6reg: left allmulticast mode [ 1719.685134][T17096] Can't find ip_set type hash;ip+mark [ 1720.150640][T17114] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1720.162696][T17118] netlink: 'syz.3.10250': attribute type 39 has an invalid length. [ 1720.174663][T17118] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10250'. [ 1720.184621][T17114] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1720.203486][T17121] netlink: 'syz.2.10249': attribute type 1 has an invalid length. [ 1720.224396][T17121] netlink: 244 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1720.415523][T17127] netlink: 'syz.3.10252': attribute type 21 has an invalid length. [ 1720.444608][T17127] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1720.478030][T17127] netlink: 'syz.3.10252': attribute type 5 has an invalid length. [ 1720.506750][T17127] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1720.613649][T17140] tipc: Started in network mode [ 1720.626751][T17140] tipc: Node identity 4e697dc0686b, cluster identity 4711 [ 1720.639677][T17140] tipc: Enabled bearer , priority 0 [ 1720.659839][T17140] syzkaller0: entered promiscuous mode [ 1720.671078][T17140] syzkaller0: entered allmulticast mode [ 1720.711844][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10257'. [ 1720.778241][T17140] tipc: Resetting bearer [ 1720.948274][T17138] tipc: Resetting bearer [ 1721.108053][T17138] tipc: Disabling bearer [ 1721.442682][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10262'. [ 1721.543699][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10264'. [ 1721.678566][T17171] lo speed is unknown, defaulting to 1000 [ 1721.698616][T17171] syzkaller0 speed is unknown, defaulting to 1000 [ 1721.734573][T17171] xfrm0 speed is unknown, defaulting to 1000 [ 1722.353725][T17195] syzkaller0: entered promiscuous mode [ 1722.374647][T17195] syzkaller0: entered allmulticast mode [ 1722.979325][T17216] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1726.152705][T17171] lo speed is unknown, defaulting to 1000 [ 1727.269119][T17287] __nla_validate_parse: 2 callbacks suppressed [ 1727.269138][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10293'. [ 1727.295737][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10293'. [ 1727.330978][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10293'. [ 1727.366904][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10293'. [ 1727.542131][T17300] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1727.834353][T17284] tipc: Enabling of bearer rejected, already enabled [ 1728.876407][T17320] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10296'. [ 1729.210443][T17337] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1729.279930][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1729.294508][ T4736] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1729.324514][ T4736] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1729.359826][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1729.430228][T17320] mac80211_hwsim hwsim97 wlan0: entered promiscuous mode [ 1729.490873][T17320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1729.530145][T17320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1729.587178][ T4736] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1729.597676][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1729.627602][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1729.660867][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.668167][T15205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.718834][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1729.756930][T15208] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.776076][T15208] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.888916][T15208] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.082657][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10304'. [ 1730.147243][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1730.192488][T17358] netlink: 'syz.3.10306': attribute type 1 has an invalid length. [ 1730.210103][T17358] netlink: 'syz.3.10306': attribute type 7 has an invalid length. [ 1730.226902][T17358] netlink: 'syz.3.10306': attribute type 8 has an invalid length. [ 1730.239488][T17358] NCSI netlink: No device for ifindex 1073545264 [ 1730.278439][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1730.279018][ T7939] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1730.324976][T17363] lo speed is unknown, defaulting to 1000 [ 1730.335164][T17363] syzkaller0 speed is unknown, defaulting to 1000 [ 1730.344727][T17363] xfrm0 speed is unknown, defaulting to 1000 [ 1730.437500][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1730.783255][T17384] netlink: 'syz.0.10311': attribute type 1 has an invalid length. [ 1730.901669][T17363] lo speed is unknown, defaulting to 1000 [ 1731.053078][T17388] syzkaller0: entered promiscuous mode [ 1731.075581][T17388] syzkaller0: entered allmulticast mode [ 1731.119687][T17388] tipc: Enabled bearer , priority 0 [ 1731.172548][T17388] tipc: Resetting bearer [ 1731.203392][T17387] tipc: Resetting bearer [ 1731.273793][T17387] tipc: Disabling bearer [ 1732.194263][T17418] IPVS: ip_vs_add_dest(): server weight less than zero [ 1732.414304][T17426] __nla_validate_parse: 3 callbacks suppressed [ 1732.414324][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10324'. [ 1732.532915][T17426] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1732.654211][T17440] xt_hashlimit: size too large, truncated to 1048576 [ 1732.730905][T17444] netlink: 'syz.2.10328': attribute type 10 has an invalid length. [ 1732.752083][T17444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10328'. [ 1732.984339][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1732.995083][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1733.053630][T17448] vlan3: entered promiscuous mode [ 1733.255845][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10334'. [ 1733.366019][T17456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10334'. [ 1733.441961][T17461] netlink: 'syz.3.10335': attribute type 30 has an invalid length. [ 1733.472622][T17463] netlink: 'syz.2.10336': attribute type 4 has an invalid length. [ 1733.684772][T17470] SET target dimension over the limit! [ 1733.741814][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10340'. [ 1733.768418][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10341'. [ 1734.178734][T17511] tipc: Enabling of bearer rejected, failed to enable media [ 1734.525149][T17527] nbd: nbd3 already in use [ 1734.533573][T17527] block nbd3: NBD_DISCONNECT [ 1734.541818][T17527] block nbd3: Send disconnect failed -110 [ 1734.549266][T17527] block nbd3: shutting down sockets [ 1734.554728][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10349'. [ 1734.766507][T15205] dvmrp0: left allmulticast mode [ 1734.792091][T17545] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.10355'. [ 1735.413942][T15205] bond1 (unregistering): Released all slaves [ 1735.438430][T15205] bond2 (unregistering): Released all slaves [ 1735.455647][T15205] bond3 (unregistering): Released all slaves [ 1735.483247][T15205] bond4 (unregistering): Released all slaves [ 1735.503496][T15205] bond5 (unregistering): Released all slaves [ 1735.521320][T15205] bond6 (unregistering): Released all slaves [ 1735.542819][T15205] bond7 (unregistering): Released all slaves [ 1735.570217][T15205] bond8 (unregistering): Released all slaves [ 1735.591083][T15205] bond9 (unregistering): Released all slaves [ 1735.609883][T15205] bond10 (unregistering): Released all slaves [ 1735.633009][T15205] bond11 (unregistering): Released all slaves [ 1735.657045][T15205] bond12 (unregistering): Released all slaves [ 1735.674159][T15205] bond13 (unregistering): Released all slaves [ 1736.058231][T17577] syzkaller0: entered promiscuous mode [ 1736.075925][T17577] syzkaller0: entered allmulticast mode [ 1736.095330][T15205] : left promiscuous mode [ 1736.207572][T17587] netlink: 'syz.3.10364': attribute type 1 has an invalid length. [ 1736.299131][T17577] netlink: 'syz.1.10362': attribute type 1 has an invalid length. [ 1736.305151][T15205] tipc: Disabling bearer [ 1736.338452][T15205] tipc: Left network mode [ 1736.503686][T17587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1736.580080][T17589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1736.595509][T17589] bond7: (slave nlmon0): The slave device specified does not support setting the MAC address [ 1736.632375][ T30] audit: type=1107 audit(1783379625.436:38): pid=17597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='d [ 1736.632375][ T30] ?5~" vJzh"DH35`v瘄/(ޑxsz=0 ޺K#X"nTu??J;ވ\pCQS;;Wf' [ 1736.635376][T17589] bond7: (slave nlmon0): Error -95 calling set_mac_address [ 1737.446401][T15207] smbdirect: ib_dev[syz2] removed [ 1737.513469][T17636] batman_adv: batadv0: Adding interface: gretap3 [ 1737.537482][T17636] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.574782][T17636] batman_adv: batadv0: Interface activated: gretap3 [ 1737.661565][T17644] netlink: 'syz.2.10377': attribute type 1 has an invalid length. [ 1737.798493][T17650] __nla_validate_parse: 5 callbacks suppressed [ 1737.798512][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10379'. [ 1738.522200][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10386'. [ 1738.581795][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10386'. [ 1738.713255][T17679] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1738.853195][T17690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10389'. [ 1738.885527][T17679] bond3 (unregistering): Released all slaves [ 1739.112863][T15205] veth1_vlan: left promiscuous mode [ 1739.128875][T15205] veth0_vlan: left promiscuous mode [ 1739.434624][T17705] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001 [ 1739.616405][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10398'. [ 1739.845800][T17733] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1740.415998][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.523448][T17720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.539466][T17720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.696327][T15206] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.768645][T15206] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.795354][T15206] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.853531][T15206] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.881571][T17756] openvswitch: netlink: IP tunnel dst address not specified [ 1741.017384][T17762] netlink: 'syz.0.10407': attribute type 1 has an invalid length. [ 1741.067776][T17762] ip6tnl1: entered promiscuous mode [ 1741.594458][T17782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10410'. [ 1741.649966][T17786] netlink: 'syz.1.10411': attribute type 1 has an invalid length. [ 1741.782038][T15205] IPVS: stop unused estimator thread 0... [ 1741.793763][T17786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10411'. [ 1742.512397][T17820] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10421'. [ 1742.545677][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10421'. [ 1742.755350][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10423'. [ 1742.881763][T17828] netlink: 'syz.4.10427': attribute type 5 has an invalid length. [ 1742.921232][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10424'. [ 1742.935392][T17837] netlink: 'syz.2.10426': attribute type 1 has an invalid length. [ 1742.963489][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10424'. [ 1742.991561][T17834] netlink: 'syz.1.10424': attribute type 11 has an invalid length. [ 1743.084702][T17837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1743.136670][T17856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10429'. [ 1743.204823][T17847] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1743.236381][T17858] netlink: 'syz.2.10426': attribute type 1 has an invalid length. [ 1743.252182][T17853] vlan3: entered allmulticast mode [ 1743.257964][T17853] veth0_to_bond: entered allmulticast mode [ 1743.316319][T17856] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10429'. [ 1743.363639][T17858] bond4: entered promiscuous mode [ 1743.373473][T17858] bond4: entered allmulticast mode [ 1743.379619][T17858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1743.474290][T17865] tipc: New replicast peer: 255.255.255.255 [ 1743.520581][T17865] tipc: Enabled bearer , priority 10 [ 1743.548404][T17861] syzkaller0: entered allmulticast mode [ 1743.551180][T17870] netlink: 280 bytes leftover after parsing attributes in process `syz.0.10434'. [ 1743.558474][T17861] syzkaller0: entered promiscuous mode [ 1743.569769][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10431'. [ 1743.600893][T17861] syzkaller0 (unregistering): left allmulticast mode [ 1743.619359][T17861] syzkaller0 (unregistering): left promiscuous mode [ 1743.856028][T17877] netlink: 34 bytes leftover after parsing attributes in process `syz.2.10436'. [ 1743.930564][T17883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10439'. [ 1743.955857][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10439'. [ 1744.238207][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1744.919977][T17919] xt_l2tp: v2 doesn't support IP mode [ 1745.124853][T17923] lo speed is unknown, defaulting to 1000 [ 1745.152492][T17928] netlink: 'syz.3.10448': attribute type 18 has an invalid length. [ 1745.161787][T17923] xfrm0 speed is unknown, defaulting to 1000 [ 1745.209500][T17931] netlink: 'syz.3.10448': attribute type 18 has an invalid length. [ 1745.225265][T15205] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1745.246447][T15205] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1745.260571][T15205] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1745.270074][T15205] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1745.485662][T17935] bridge2: left promiscuous mode [ 1745.502592][T17935] bridge2: left allmulticast mode [ 1745.517018][T17935] bridge3: left promiscuous mode [ 1745.527938][T17935] bridge3: left allmulticast mode [ 1745.548120][T17846] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1745.572213][T17846] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1745.590600][T17846] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1745.608657][T17846] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1745.898184][T17942] xt_connbytes: Forcing CT accounting to be enabled [ 1746.039040][T17923] lo speed is unknown, defaulting to 1000 [ 1746.436107][T15208] [ 1746.438520][T15208] ====================================================== [ 1746.445563][T15208] WARNING: possible circular locking dependency detected [ 1746.452685][T15208] syzkaller #0 Not tainted [ 1746.457129][T15208] ------------------------------------------------------ [ 1746.464173][T15208] kworker/u8:17/15208 is trying to acquire lock: [ 1746.470532][T15208] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1746.480422][T15208] [ 1746.480422][T15208] but task is already holding lock: [ 1746.487811][T15208] ffff888046fbaae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1746.497621][T15208] [ 1746.497621][T15208] which lock already depends on the new lock. [ 1746.497621][T15208] [ 1746.508048][T15208] [ 1746.508048][T15208] the existing dependency chain (in reverse order) is: [ 1746.517094][T15208] [ 1746.517094][T15208] -> #8 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1746.525121][T15208] lock_sock_nested+0x41/0x100 [ 1746.530518][T15208] do_ipv6_setsockopt+0x8e0/0x3180 [ 1746.536260][T15208] ipv6_setsockopt+0x59/0x170 [ 1746.541497][T15208] mptcp_setsockopt+0xe71/0x3550 [ 1746.547072][T15208] do_sock_setsockopt+0x17c/0x1b0 [ 1746.552655][T15208] __x64_sys_setsockopt+0x13d/0x1b0 [ 1746.558413][T15208] do_syscall_64+0x174/0x580 [ 1746.563570][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.570015][T15208] [ 1746.570015][T15208] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1746.577792][T15208] lock_sock_nested+0x41/0x100 [ 1746.583129][T15208] tls_sw_sendmsg+0x161/0x2860 [ 1746.588555][T15208] sock_sendmsg_nosec+0x90/0x180 [ 1746.594050][T15208] __sys_sendto+0x408/0x5a0 [ 1746.599113][T15208] __x64_sys_sendto+0xde/0x100 [ 1746.604450][T15208] do_syscall_64+0x174/0x580 [ 1746.609597][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.616047][T15208] [ 1746.616047][T15208] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 1746.623556][T15208] __mutex_lock+0x19d/0x1550 [ 1746.628706][T15208] tls_sw_sendmsg+0x13c/0x2860 [ 1746.634031][T15208] sock_sendmsg_nosec+0x90/0x180 [ 1746.639526][T15208] sock_sendmsg+0x1ca/0x2d0 [ 1746.644580][T15208] __sock_xmit+0x245/0x4f0 [ 1746.649638][T15208] nbd_disconnect+0x3ad/0x560 [ 1746.654893][T15208] nbd_disconnect_and_put+0x32/0x280 [ 1746.659572][T17958] syzkaller0: entered promiscuous mode [ 1746.660734][T15208] nbd_genl_disconnect+0x4af/0x590 [ 1746.660771][T15208] genl_family_rcv_msg_doit+0x233/0x340 [ 1746.677941][T15208] genl_rcv_msg+0x614/0x7a0 [ 1746.683003][T15208] netlink_rcv_skb+0x226/0x4a0 [ 1746.688332][T15208] genl_rcv+0x28/0x40 [ 1746.692107][T17958] syzkaller0: entered allmulticast mode [ 1746.692865][T15208] netlink_unicast+0x7bb/0x940 [ 1746.692900][T15208] netlink_sendmsg+0x813/0xb40 [ 1746.709025][T15208] sock_sendmsg_nosec+0x13a/0x180 [ 1746.714609][T15208] ____sys_sendmsg+0x54e/0x850 [ 1746.719940][T15208] ___sys_sendmsg+0x2a5/0x360 [ 1746.725179][T15208] __x64_sys_sendmsg+0x1b1/0x290 [ 1746.730678][T15208] do_syscall_64+0x174/0x580 [ 1746.735833][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.742287][T15208] [ 1746.742287][T15208] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1746.749978][T15208] __mutex_lock+0x19d/0x1550 [ 1746.755138][T15208] nbd_queue_rq+0x373/0x1150 [ 1746.760304][T15208] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1746.766511][T15208] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1746.773481][T15208] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1746.780026][T15208] blk_mq_run_work_fn+0x16c/0x300 [ 1746.785610][T15208] process_scheduled_works+0xa8e/0x14e0 [ 1746.791755][T15208] worker_thread+0xa47/0xfb0 [ 1746.796914][T15208] kthread+0x388/0x470 [ 1746.801554][T15208] ret_from_fork+0x514/0xb70 [ 1746.806753][T15208] ret_from_fork_asm+0x1a/0x30 [ 1746.812073][T15208] [ 1746.812073][T15208] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1746.819328][T15208] __mutex_lock+0x19d/0x1550 [ 1746.824488][T15208] nbd_queue_rq+0xc1/0x1150 [ 1746.829556][T15208] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1746.835662][T15208] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1746.842565][T15208] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1746.849200][T15208] blk_mq_run_work_fn+0x16c/0x300 [ 1746.854786][T15208] process_scheduled_works+0xa8e/0x14e0 [ 1746.860895][T15208] worker_thread+0xa47/0xfb0 [ 1746.866061][T15208] kthread+0x388/0x470 [ 1746.870699][T15208] ret_from_fork+0x514/0xb70 [ 1746.875857][T15208] ret_from_fork_asm+0x1a/0x30 [ 1746.881177][T15208] [ 1746.881177][T15208] -> #3 (set->srcu){.+.+}-{0:0}: [ 1746.888346][T15208] __synchronize_srcu+0xc9/0x2f0 [ 1746.893894][T15208] elevator_switch+0x1e8/0x7b0 [ 1746.899323][T15208] elevator_change+0x2fa/0x480 [ 1746.904649][T15208] elevator_set_default+0x375/0x440 [ 1746.910409][T15208] blk_register_queue+0x3f3/0x4e0 [ 1746.916127][T15208] __add_disk+0x6cb/0xe30 [ 1746.921018][T15208] add_disk_fwnode+0xfb/0x4b0 [ 1746.926385][T15208] nbd_dev_add+0x733/0xb60 [ 1746.931379][T15208] nbd_init+0x15f/0x1e0 [ 1746.936149][T15208] do_one_initcall+0x250/0x870 [ 1746.941487][T15208] do_initcall_level+0x10a/0x1a0 [ 1746.946987][T15208] do_initcalls+0x59/0xa0 [ 1746.951877][T15208] kernel_init_freeable+0x29d/0x3e0 [ 1746.957643][T15208] kernel_init+0x1d/0x1d0 [ 1746.962537][T15208] ret_from_fork+0x514/0xb70 [ 1746.967696][T15208] ret_from_fork_asm+0x1a/0x30 [ 1746.973017][T15208] [ 1746.973017][T15208] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1746.980890][T15208] __mutex_lock+0x19d/0x1550 [ 1746.986073][T15208] elevator_change+0x1af/0x480 [ 1746.991397][T15208] elevator_set_none+0xb5/0x140 [ 1746.996809][T15208] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1747.003171][T15208] nbd_start_device+0x189/0xb30 [ 1747.008569][T15208] nbd_genl_connect+0x1597/0x1c10 [ 1747.014140][T15208] genl_family_rcv_msg_doit+0x233/0x340 [ 1747.020232][T15208] genl_rcv_msg+0x614/0x7a0 [ 1747.025276][T15208] netlink_rcv_skb+0x226/0x4a0 [ 1747.030582][T15208] genl_rcv+0x28/0x40 [ 1747.035098][T15208] netlink_unicast+0x7bb/0x940 [ 1747.040433][T15208] netlink_sendmsg+0x813/0xb40 [ 1747.045740][T15208] sock_sendmsg_nosec+0x13a/0x180 [ 1747.051299][T15208] ____sys_sendmsg+0x54e/0x850 [ 1747.056606][T15208] ___sys_sendmsg+0x2a5/0x360 [ 1747.061822][T15208] __x64_sys_sendmsg+0x1b1/0x290 [ 1747.067301][T15208] do_syscall_64+0x174/0x580 [ 1747.072436][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.078861][T15208] [ 1747.078861][T15208] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1747.087517][T15208] blk_alloc_queue+0x544/0x690 [ 1747.092828][T15208] __blk_mq_alloc_disk+0x194/0x390 [ 1747.098485][T15208] nbd_dev_add+0x494/0xb60 [ 1747.103445][T15208] nbd_init+0x15f/0x1e0 [ 1747.108139][T15208] do_one_initcall+0x250/0x870 [ 1747.113441][T15208] do_initcall_level+0x10a/0x1a0 [ 1747.119004][T15208] do_initcalls+0x59/0xa0 [ 1747.123870][T15208] kernel_init_freeable+0x29d/0x3e0 [ 1747.129611][T15208] kernel_init+0x1d/0x1d0 [ 1747.134470][T15208] ret_from_fork+0x514/0xb70 [ 1747.139606][T15208] ret_from_fork_asm+0x1a/0x30 [ 1747.144910][T15208] [ 1747.144910][T15208] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1747.152141][T15208] __lock_acquire+0x1520/0x2cf0 [ 1747.157540][T15208] lock_acquire+0x106/0x350 [ 1747.162580][T15208] fs_reclaim_acquire+0x71/0x100 [ 1747.168054][T15208] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1747.174399][T15208] __alloc_skb+0x1d7/0x7a0 [ 1747.179352][T15208] tcp_stream_alloc_skb+0x3f/0x580 [ 1747.185105][T15208] tcp_connect+0x1582/0x53e0 [ 1747.190345][T15208] tcp_v6_connect+0x14ed/0x1cf0 [ 1747.195797][T15208] __inet_stream_connect+0x258/0xe00 [ 1747.201620][T15208] inet_stream_connect+0x66/0xa0 [ 1747.207117][T15208] kernel_connect+0x141/0x1c0 [ 1747.212329][T15208] rds_tcp_conn_path_connect+0x6e9/0x920 [ 1747.218558][T15208] rds_connect_worker+0x1d8/0x290 [ 1747.224174][T15208] process_scheduled_works+0xa8e/0x14e0 [ 1747.230257][T15208] worker_thread+0xa47/0xfb0 [ 1747.235382][T15208] kthread+0x388/0x470 [ 1747.239990][T15208] ret_from_fork+0x514/0xb70 [ 1747.245121][T15208] ret_from_fork_asm+0x1a/0x30 [ 1747.250419][T15208] [ 1747.250419][T15208] other info that might help us debug this: [ 1747.250419][T15208] [ 1747.260653][T15208] Chain exists of: [ 1747.260653][T15208] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1747.260653][T15208] [ 1747.273718][T15208] Possible unsafe locking scenario: [ 1747.273718][T15208] [ 1747.281175][T15208] CPU0 CPU1 [ 1747.286553][T15208] ---- ---- [ 1747.291935][T15208] lock(k-sk_lock-AF_INET6); [ 1747.296634][T15208] lock(sk_lock-AF_INET6); [ 1747.303670][T15208] lock(k-sk_lock-AF_INET6); [ 1747.310889][T15208] lock(fs_reclaim); [ 1747.314890][T15208] [ 1747.314890][T15208] *** DEADLOCK *** [ 1747.314890][T15208] [ 1747.323045][T15208] 4 locks held by kworker/u8:17/15208: [ 1747.328514][T15208] #0: ffff88807aeff140 ((wq_completion)krds_cp_wq#33/0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1747.340460][T15208] #1: ffffc9000445fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1747.353268][T15208] #2: ffff8880571c3c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1747.364340][T15208] #3: ffff888046fbaae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1747.374546][T15208] [ 1747.374546][T15208] stack backtrace: [ 1747.380451][T15208] CPU: 0 UID: 0 PID: 15208 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1747.380471][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1747.380484][T15208] Workqueue: krds_cp_wq#33/0 rds_connect_worker [ 1747.380511][T15208] Call Trace: [ 1747.380519][T15208] [ 1747.380529][T15208] dump_stack_lvl+0xe8/0x150 [ 1747.380556][T15208] print_circular_bug+0x2e1/0x300 [ 1747.380575][T15208] check_noncircular+0x12e/0x150 [ 1747.380606][T15208] __lock_acquire+0x1520/0x2cf0 [ 1747.380631][T15208] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1747.380730][T15208] ? __lock_acquire+0x683/0x2cf0 [ 1747.380759][T15208] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1747.380780][T15208] lock_acquire+0x106/0x350 [ 1747.380802][T15208] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1747.380825][T15208] ? ip6_dst_check+0xe2/0x7e0 [ 1747.380882][T15208] fs_reclaim_acquire+0x71/0x100 [ 1747.380904][T15208] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1747.380925][T15208] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1747.380946][T15208] ? ip6_default_advmss+0x80/0x3b0 [ 1747.380970][T15208] ? __alloc_skb+0x1d7/0x7a0 [ 1747.380992][T15208] ? __alloc_skb+0x1d7/0x7a0 [ 1747.381016][T15208] __alloc_skb+0x1d7/0x7a0 [ 1747.381040][T15208] tcp_stream_alloc_skb+0x3f/0x580 [ 1747.381066][T15208] ? __asan_memset+0x22/0x50 [ 1747.381086][T15208] tcp_connect+0x1582/0x53e0 [ 1747.381118][T15208] ? ktime_get_with_offset+0x93/0x2d0 [ 1747.381144][T15208] ? __pfx_tcp_connect+0x10/0x10 [ 1747.381166][T15208] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1747.381188][T15208] ? lockdep_hardirqs_on+0x7a/0x110 [ 1747.381211][T15208] ? ktime_get_with_offset+0x93/0x2d0 [ 1747.381232][T15208] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1747.381258][T15208] ? __asan_memset+0x22/0x50 [ 1747.381278][T15208] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1747.381323][T15208] ? inet6_hash_connect+0xeb/0x170 [ 1747.381401][T15208] tcp_v6_connect+0x14ed/0x1cf0 [ 1747.381425][T15208] ? inet_csk_bind_conflict+0x60/0xa40 [ 1747.381453][T15208] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1747.381478][T15208] ? inet_csk_get_port+0x11bc/0x1740 [ 1747.381500][T15208] ? __local_bh_enable_ip+0xd0/0x130 [ 1747.381525][T15208] ? __bfs+0x153/0x290 [ 1747.381548][T15208] ? __bfs+0x153/0x290 [ 1747.381572][T15208] __inet_stream_connect+0x258/0xe00 [ 1747.381598][T15208] ? do_raw_spin_lock+0x12b/0x2f0 [ 1747.381616][T15208] ? lock_sock_nested+0x6a/0x100 [ 1747.381635][T15208] ? __pfx___inet_stream_connect+0x10/0x10 [ 1747.381659][T15208] ? inet_stream_connect+0x51/0xa0 [ 1747.381682][T15208] ? __local_bh_enable_ip+0xd0/0x130 [ 1747.381703][T15208] inet_stream_connect+0x66/0xa0 [ 1747.381727][T15208] kernel_connect+0x141/0x1c0 [ 1747.381745][T15208] ? __pfx_kernel_connect+0x10/0x10 [ 1747.381768][T15208] ? __local_bh_enable_ip+0xd0/0x130 [ 1747.381790][T15208] rds_tcp_conn_path_connect+0x6e9/0x920 [ 1747.381815][T15208] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1747.381833][T15208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1747.381852][T15208] ? process_scheduled_works+0xa20/0x14e0 [ 1747.381872][T15208] ? process_scheduled_works+0xa20/0x14e0 [ 1747.381899][T15208] rds_connect_worker+0x1d8/0x290 [ 1747.381924][T15208] ? process_scheduled_works+0xa20/0x14e0 [ 1747.381943][T15208] process_scheduled_works+0xa8e/0x14e0 [ 1747.381975][T15208] ? __pfx_process_scheduled_works+0x10/0x10 [ 1747.381997][T15208] ? assign_work+0x3cf/0x5d0 [ 1747.382018][T15208] worker_thread+0xa47/0xfb0 [ 1747.382050][T15208] kthread+0x388/0x470 [ 1747.382074][T15208] ? __pfx_worker_thread+0x10/0x10 [ 1747.382092][T15208] ? __pfx_kthread+0x10/0x10 [ 1747.382116][T15208] ret_from_fork+0x514/0xb70 [ 1747.382142][T15208] ? __pfx_ret_from_fork+0x10/0x10 [ 1747.382166][T15208] ? __switch_to+0xc89/0x1420 [ 1747.382188][T15208] ? __pfx_kthread+0x10/0x10 [ 1747.382212][T15208] ret_from_fork_asm+0x1a/0x30 [ 1747.382236][T15208]