last executing test programs: 12.729082475s ago: executing program 0 (id=7569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x420, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200088d0}, 0x20040881) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x140f, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0x5, "f42f7f"}, @exp_fastopen={0xfe, 0xb, 0xf989, "23c486d4219ab9"}]}}}}}}}}, 0x0) 12.133558482s ago: executing program 0 (id=7573): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) unshare(0x68040200) unshare(0x8020000) 6.06451317s ago: executing program 1 (id=7592): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="05008100", 0x4, 0x4040840, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x3, 0x6, @remote}, 0x14) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r7, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048014) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r8, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, 'veth0\x00', '\x00', {}, {0xff}, 0x1, 0x0, 0xeb}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x6cb1, 0x100, 0xf4, 'pptp\x00', 'syz1\x00', {0x6}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, 0xd0077ad2e47beadc, 0xff, 'ip6_vti0\x00', 'erspan0\x00', {}, {}, 0x1d, 0x2, 0x24}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x2, 0x7, 0x4, 0x2, 0x5], 0x2, 0x2}, {0x2, [0x3, 0xf, 0x0, 0x1, 0x0, 0x2], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r12, @ANYBLOB="280012800900010076657468", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) close(r9) 5.802954625s ago: executing program 2 (id=7595): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="04002dbd7000fcdbdf2518000000940002800400040008000100070000000400040014000380000002000800000008000200ff0100000400040008000200d00200004c00038008000200060000000800010000000000080002000600000008000100fb070000080002000600000008000100ff0f00000800010002000000080001000600000008000200f8ffffff0400040008000200020000000800020001000000340003800800020025050000080002000000000008000100010000000800020003000000080002008100000008000100040000001400098008000100060000000800010006000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x400a054) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000340)=0xfff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @loopback}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xd, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) ioctl$sock_SIOCADDDLCI(r12, 0x8980, &(0x7f0000000040)={'wg2\x00'}) connect$unix(r7, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r7, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x8243f7fd8605f563) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.336945197s ago: executing program 0 (id=7598): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x221, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x2}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.059483904s ago: executing program 1 (id=7599): r0 = socket(0x15, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000100), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r2, &(0x7f0000000400)="fff7ffffffff00000000000188ca", 0xe) r5 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x31}]}, 0x0}, 0xba) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) setsockopt$MRT6_TABLE(r1, 0x29, 0xd1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x9}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 4.952568851s ago: executing program 0 (id=7600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(r3, r2, 0x0, 0xf03a0005) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}}, 0xfffffda8}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000001c0)=0xd1, 0x4) sendmmsg$inet(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040c0) close(r1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x1000, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@rand_addr=0x64010101, 0x2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 4.760767969s ago: executing program 2 (id=7603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0x10, 0x0, &(0x7f0000000740)="2b20c62e14816203d10ca49da2aacee8", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x32a}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0010114}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x100000, 0x1}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f0000000f40)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], 0x0, 0x4, 0xa2, &(0x7f0000000540)=""/162, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x1, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1], 0x0, 0x10, 0x20000000}, 0x94) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) unshare(0x22020600) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b4000000000200004801c0001800b00010072656a65637400000c00028008000140000000050900010073797a30"], 0xbc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa}, [@alu={0x7, 0x0, 0x3, 0x8, 0x0, 0x6, 0x800000000000000b}]}, &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4) setsockopt$inet_int(r8, 0x0, 0x19, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r10, r10, 0x7, 0x3, &(0x7f0000000040)='9fm', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$netlink(0x10, 0x3, 0x14) 4.624946745s ago: executing program 3 (id=7604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000003c0)={@multicast2, @empty, 0x0, 0x7, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010102, @loopback, @local, @multicast2]}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4001010}, 0x4800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newtclass={0x50, 0x28, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x8001}, {0x0, 0x8001}, {0x3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0x40}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0xfb}}, @TCA_RATE={0x6, 0x5, {0xac, 0x5}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0xfff4, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="0c00040000000000000012800b00010062dab32994415608726964676500001400028008003200000000000800050000000000"], 0x44}}, 0x4040) r8 = accept4(r7, &(0x7f0000000040)=@nl, &(0x7f00000000c0)=0x80, 0x80000) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfe, {0xe}, [@typed={0x8, 0xc6, 0x0, 0x0, @pid=r9}, @nested={0x18, 0x10a, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xed, 0x0, 0x0, @str=',{(\x00'}, @nested={0x4, 0x8b}]}, @generic="4b432d84ad361223527a3ae647ff92afdb9153c1f80ef97405e6d981a34abaeb7f27e1d75d57a30bb48b9ce35ed4b05983df13711d7fd4811f646d5dfcf6d67e7720cb8af628726792ff1f50da6613410624b675ad0fca0a11ade9f1bf88ef6f43abc7efc9bba5a480d3e60a6204e7b861496a29dbb1b09ee9d6fd4fffa3f18e400305", @nested={0x10, 0x81, 0x0, 0x1, [@typed={0x4, 0xba}, @nested={0x4, 0x9f}, @nested={0x4, 0x10a}]}, @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000000) 3.912956868s ago: executing program 1 (id=7606): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r3, 0x0, 0x0, 0x44800, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b000100000005001900"], 0x84}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) 3.783814233s ago: executing program 0 (id=7607): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r2, 0x63, &(0x7f0000000180)={'vlan1\x00', @ifru_names='pimreg0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff2f00, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r5, &(0x7f0000000400)=""/91, 0x5b, 0x0, &(0x7f00000004c0)={0x1a, 0x18, 0x7, 0xc, 0x7, 0x4, @random="416604f2373b"}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004810) r7 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x9, 0x42, @private0, @local, 0x7, 0x8000, 0x7, 0x80000000}}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x58}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="200000001e0021000000000000000000070040"], 0x20}}, 0x80) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@typed={0x8, 0x12b, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) 3.734339634s ago: executing program 3 (id=7608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000025c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xffff}, {0xffe0, 0x3}, {0xc, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 3.720206786s ago: executing program 4 (id=7609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_skbedit={0x74, 0x101, 0x0, 0x0, {{0xffffff62}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x3d, 0x6, "5284913d689c7712195cdcc368270d536203adc8884cbdbc41a14618d37342e89876d99760d8d10f948da91bc3e460be8426e98f7163198b1d"}, {0xc, 0xa, {0x1}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.363755395s ago: executing program 3 (id=7610): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffe0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4090) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000140), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x14) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1b, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa4}, {}, {}, [@alu={0x7, 0x0, 0xa, 0x7, 0x2, 0xfffffffffffffff0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @alu={0x7, 0x1, 0x3, 0x4, 0x2, 0x50, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x6, 0x5, 0x2, 0xfffffffffffffffe, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x7, &(0x7f00000006c0)=""/7, 0x41100, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x9, 0xffffff7f, 0xc0}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x4, 0x2, 0xd, 0x3}, {0x0, 0x3, 0x4, 0xb}, {0x5, 0x5, 0xf, 0x7}, {0x1, 0x4, 0xf, 0xc}, {0x5, 0x3, 0xe, 0xc}, {0x5, 0x2, 0x4, 0x3}, {0x3, 0x4, 0xd}]}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r5, r1, 0x25, 0x8, @void}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000500)={0x5}, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000100000000000000000"], 0x48) r10 = socket$kcm(0x1e, 0x4, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r14, 0x2000012, 0x41, 0x0, &(0x7f0000000200)="63ecedff03dc3fb986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000540)={r3, 0x8001, 0xf, 0x4, 0x0, 0x1a7}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) unshare(0x22020600) r15 = socket(0x1d, 0x80802, 0x6) bind$can_j1939(r15, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfd}, 0x18) r16 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xdc615344430f9d0d, 0x20000000ec071, r16, 0x0) ioctl$OCFS2_IOC_REFLINK(r7, 0x40186f04, &(0x7f0000000400)={&(0x7f00000001c0)='$@-+\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0x10000}) 3.362560078s ago: executing program 4 (id=7611): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 3.231082656s ago: executing program 1 (id=7612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r1, &(0x7f0000000040)='\x00', 0x41, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x9ec8]}, {0x3530, 0x3, 0x5, 0x41}}, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x10000}, {[0x0, 0x3, 0x8, 0x72f]}, 0x5, 0x9f, &(0x7f0000000140)=""/159}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0xecf18000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000400)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x8c, 0xa8, @random="9c34653be5e861c41133a6d17af12fa490512a702ba98205cc39b392e152fc2285e1cbf41fd83801d086b8ad704bf8bb17d4d896513d1d33c21d61155866b6dca70f2da7c44d09ee0a2badb82d4b341261de9d6b378e36edd65e9ba2115887cf8a829ab7650ea07472a45276c03d47b6b58348ee1e8a1742b0fb9746375fe10dbeb4c1ab5fa7162c"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44801}, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000801}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x8800) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000800), &(0x7f0000000840)=0x40) mkdirat$cgroup(r2, &(0x7f0000000880)='syz0\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000009c0)={r0, &(0x7f00000008c0)='$:@@-.&!\\\x00', 0x101000, &(0x7f0000000900)={@_ha_fsid={[0x5]}, {0x1fe, 0xa, 0x8}}, 0x4, &(0x7f0000000940), &(0x7f0000000980)=0xb6a2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000d80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x298, 0x13, 0x800, 0x70bd2c, 0x25dfdbfe, {0x23, 0x4, 0x8, 0x8, {0x4e24, 0x4e20, [0x9, 0x9, 0xc6a, 0x2], [0x5ab, 0x1, 0x1ff, 0x5], r7, [0x6, 0x3]}, 0x7fffffff, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "39d1df10a91c7a81ba1acba6a4c02963141803de08f08791b59f42448672664dfe4753d1c9880732dc26df041b99d2fae18190542c0a322a48af146cffaf39d7037103004ffd62a736f3923c85ab263b5a51cb511b0a697a9f9bb8e72713ff4f6db306dd0b8ed441e77608394f061aecfc8c7a609ed1da00105023ccce979c14ea2f863a63200514c190edc0fd70f5fc10b113da3403e247aebb35607c25bb091f778950e639a3ef988aa47ac64c8478cb59231ce9f2b7a3b47d9505c0e0dfcd30"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "df5dedf02ef618867eeae67f9f736834b03e3459333f376f59b68e7da45112b62643763404720f88ab95d5cf86c89e995dd40de5e1278dbc81c09042f96cde2cc134a95fd25e8667fe07f61bc58d9b3451dbab2c0734f3947fe2dc217948b3e46ab90779290bd9bad3eed74e35c8c94db9e8856cecd5db42aa53c60a7cd04c7c53fb7461afa91b15b489"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "41f00910b63183835a56d796aaa507ef8ecab57e99fc4aa11bfabc78c2ab8ad819ceef6e1c297ef37ba418b6b50c116c19c98494bc31cd04bcdacd4bc080aa41a03f4639f1d70b23827a58de141901ea51b561d0e7812e273881c79442c68c7e079f490a201319"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "52978d48893994781f8cdcefc853f456c5a922e36d3cdda270327dd9eaafee98ab9868086e6d13883eaf0da1795c7f0799edcec3c8aed7b3964ed8de2420e736a51ef7df801836b2364ac550bf8de89a60eca5a5835381960a28f2f26cd2b49033730e5e85cc5468db680a78541a020b951a203f5a6d344d59685d513655008810"}]}, 0x298}, 0x1, 0x0, 0x0, 0x80}, 0x95) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r6) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xc0, r9, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa26e}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d11}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x67}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), r6) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000010c0)={'syztnl2\x00', &(0x7f0000001040)={'tunl0\x00', r7, 0x7, 0x40, 0xffffffff, 0x2, {{0xa, 0x4, 0x0, 0x11, 0x28, 0x65, 0x0, 0x5e, 0x2f, 0x0, @private=0xa010100, @empty, {[@noop, @noop, @end, @end, @generic={0x86, 0xe, "ffa4f04a8ee1c99ca15375aa"}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xf8, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20048080}, 0x20000814) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1e8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0x10) connect$inet6(r2, &(0x7f0000001540)={0xa, 0x4e20, 0x9, @empty, 0x3}, 0x1c) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000001580)={0x3, 0xffffffff}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000015c0)=0x7fffffff, 0x4) 3.007131068s ago: executing program 4 (id=7613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000480)="b7f122ab98d1ec1b883ebf7d5d8b", 0x0, 0x2e16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000480)="b7f122ab98d1ec1b883ebf7d5d8b", 0x0, 0x2e16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) (async) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x15, &(0x7f0000000580)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0xc0, &(0x7f00000002c0)=""/192, 0x41100, 0x16, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0x3, 0x1}, 0x10, 0x1966e, r9, 0x0, &(0x7f00000004c0)=[r0], &(0x7f0000000500), 0x10, 0xfff}, 0x94) 2.700668139s ago: executing program 1 (id=7614): syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)={0x154, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xcb3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6}, {0x8, 0x13, 0x20000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000005}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xd282}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x6ffff}, {0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x84000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x8000) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000010001f"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4100}, 0x4008040) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000700)={&(0x7f0000000600)=""/94, 0xb000, 0x0, 0x8, 0x2}, 0x20) listen(r4, 0x5) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0x0, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB], 0x28}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x25dfdbff}, 0x14}, 0x1, 0x2b1e}, 0x408d4) pipe(&(0x7f0000000000)) 2.345087992s ago: executing program 4 (id=7615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000012}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7dcb}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x395}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7dab6f13}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xad}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x20004845) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000006c000000160a01040000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c000380140001006c6f00000000000000000000000000001400010064756d6d79300000000000000000000054000000030a01040000000000000000010000000900010073797a30000000000900030073797a300000000014000480080001400000000208000240000000000b00070066696c746572000008000a400000000158000000060a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073", @ANYRES64], 0x1f0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.835414605s ago: executing program 4 (id=7616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x58, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', r6, 0x7, 0x8000, 0x0, 0x4, {{0x7, 0x4, 0x2, 0x1c, 0x1c, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x5, [@multicast1]}]}}}}}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x58, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', r6, 0x7, 0x8000, 0x0, 0x4, {{0x7, 0x4, 0x2, 0x1c, 0x1c, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x5, [@multicast1]}]}}}}}) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) (async) 1.761799746s ago: executing program 2 (id=7617): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 909.800057ms ago: executing program 0 (id=7618): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffeb, 0x2, 0x8, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0xa}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000040), 0x0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000940)=""/79, &(0x7f00000009c0)=0x4f) r4 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000380)={0xb0000001}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) 770.975225ms ago: executing program 3 (id=7619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r1], 0x30}, 0x4004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x1b8, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x89, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x0, 0x10}, 0x287, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x1, 0x2}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x8, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) unshare(0x40600) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000002f000010000800000086dd080088be010000121000002088f7ffff00000000080022eb00000000200000655800000000000000000000000000000000000000feb661d4767812b0d86f91b59ec1707ea1d2cc81fd7d"], 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) 696.436544ms ago: executing program 1 (id=7620): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_getnetconf={0x4c, 0x52, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_IFINDEX={0x8, 0x1, r0}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x29800}, 0x400c010) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}], 0x10) listen(r1, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x310}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x4c0c0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x7, @empty, 0x800}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x7ff, @loopback, 0x6}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0xffffffff}], 0x74) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) tee(r10, r2, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r11, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2c38}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x586c}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4011}, 0x8000) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r12, 0x8917, &(0x7f00000007c0)={'geneve0\x00', {0x2, 0x0, @loopback}}) syz_emit_ethernet(0x1012, &(0x7f0000000800)={@local, @random="dde7d57c0693", @void, {@llc={0x4, {@llc={0xf4, 0x8e, 'G.', "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"}}}}}, 0x0) r13 = accept4(r12, &(0x7f0000001840)=@hci, &(0x7f00000018c0)=0x80, 0x80000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r13, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x60}}, 0x10040) ioctl$XFS_IOC_ERROR_INJECTION(r12, 0x40085874, &(0x7f0000001a40)={r13, 0x7}) setsockopt$TIPC_SRC_DROPPABLE(r13, 0x10f, 0x80, &(0x7f0000001a80)=0x80000001, 0x4) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000001ac0)={0x0, @generic={0x2b, "25253fb6b1f0d5a5046c8b7bd4c4"}, @generic={0x5, "1ca3fc66436747016520c90a0450"}, @hci={0x1f, 0x0, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x100000001, 0x10}) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000001b40)) 619.433069ms ago: executing program 2 (id=7621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040), 0x3f) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40040000000000000000000000000000020001000900020073797a30000000000900010073797a3000000000000380080001400000000008000240000000001400000011000100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000080c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x404c041) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @local}, 0xc) 539.63586ms ago: executing program 4 (id=7622): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) (async, rerun: 64) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (rerun: 64) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0xd, @mcast1, 0x1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100"/71], 0x110) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb47"], 0x28}}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)=r10}, 0x20) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0xfffffffc, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x11) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 444.365273ms ago: executing program 3 (id=7623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x1b}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x4}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) socket(0x26, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0xdc45, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x9, 0x4000b69, 0x4000c1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1080, 0xd, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x800006, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0xff, 0x9, 0x4, 0xb, 0x0, 0xbed4, 0x8, 0x80000fc, 0x7, 0x0, 0x11000, 0x80000000, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x6, 0x180000, 0x400a, 0x8b, 0x805, 0x2af, 0x0, 0x5, 0x5, 0x6, 0x5, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x7, 0x752, 0x0, 0xd, 0x8, 0xffff, 0x6, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x87, 0x800100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x8, 0x9, 0x1, 0x1fc, 0x45c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5bd6d2870c4038b4bc1996d87600", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 403.10191ms ago: executing program 2 (id=7624): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 343.680586ms ago: executing program 3 (id=7625): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x48100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0xc}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5698}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, 0x0, 0x0, 0x2b, 0x0, "56f6c77124523cb67d60e7639192965176c9c0b73b7442606d8b44f1ecb88ed32a416343a70ba40a69cf41163c8fc3f803e55f0417fddbb8ea8f384228c3cc6af2db7babc9175e7e1612ce95aca7e879"}, 0xd8) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) 0s ago: executing program 2 (id=7626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x3b, 0x301, 0x2, 0x25dfdbf8, {0x5}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001c00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}}, 0x0) unshare(0x6a040000) kernel console output (not intermixed with test programs): 223.447952][ T8377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.447994][ T8377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.519620][ T1466] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003 [ 1223.534466][ T1464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1223.666842][ T8377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.666882][ T8377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.756772][ T1464] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1224.013572][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1224.016433][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1224.024796][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1224.103813][ T8377] team0: Port device netdevsim1 removed [ 1224.106504][ T8377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.106544][ T8377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.209244][ T1486] netlink: 'syz.2.6449': attribute type 4 has an invalid length. [ 1224.209272][ T1486] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6449'. [ 1224.237741][ T1457] infiniband syz2: set active [ 1224.246665][ T1457] infiniband syz2: added team_slave_0 [ 1224.282049][ T1486] .`: renamed from bond0 (while UP) [ 1224.338169][ T1457] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1224.338236][ T1457] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1224.338281][ T1457] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1224.407384][ T8377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.407427][ T8377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.424361][ T1491] netlink: 'syz.4.6451': attribute type 1 has an invalid length. [ 1224.459482][ T1492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6450'. [ 1224.472446][ T1457] RDS/IB: syz2: added [ 1224.472504][ T1457] smc: adding ib device syz2 with port count 1 [ 1224.472528][ T1457] smc: ib device syz2 port 1 has no pnetid [ 1224.610695][T22774] Bluetooth: hci0: command tx timeout [ 1225.556387][ T1532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1225.671447][ T1536] netlink: 'syz.4.6457': attribute type 21 has an invalid length. [ 1225.671477][ T1536] IPv6: NLM_F_CREATE should be specified when creating new route [ 1225.678337][ T1536] netlink: 'syz.4.6457': attribute type 1 has an invalid length. [ 1225.867632][ T8377] bridge_slave_0: left allmulticast mode [ 1225.867664][ T8377] bridge_slave_0: left promiscuous mode [ 1225.867912][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.572921][ T8377] bond7 (unregistering): (slave geneve0): Releasing active interface [ 1226.703865][T22774] Bluetooth: hci0: command tx timeout [ 1226.778425][ T8377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.780157][ T8377] bond0 (unregistering): (slave team0): Releasing backup interface [ 1226.803734][ T8377] bond0 (unregistering): Released all slaves [ 1226.820529][ T8377] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1226.821531][ T8377] bond1 (unregistering): Released all slaves [ 1226.849957][ T8377] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 1226.862742][ T8377] bond2 (unregistering): Released all slaves [ 1226.879936][ T8377] bond3 (unregistering): Released all slaves [ 1226.898780][ T8377] bond5 (unregistering): Released all slaves [ 1226.922501][ T8377] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1226.923404][ T8377] bond4 (unregistering): Released all slaves [ 1226.957137][ T8377] bond6 (unregistering): Released all slaves [ 1226.984746][ T8377] bond7 (unregistering): Released all slaves [ 1227.004928][ T8377] bond8 (unregistering): Released all slaves [ 1227.027515][ T8377] bond9 (unregistering): Released all slaves [ 1227.128621][ T1558] 8021q: adding VLAN 0 to HW filter on device .` [ 1227.238556][ T1558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1227.277825][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1227.365164][ T8377] ovs-s!: left promiscuous mode [ 1227.665498][ T8377] : left promiscuous mode [ 1227.739102][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.739306][ T1432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.739487][ T1432] bridge_slave_0: entered allmulticast mode [ 1227.763490][ T1432] bridge_slave_0: entered promiscuous mode [ 1227.773517][ T1593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1227.776407][ T1432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.776521][ T1432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.776697][ T1432] bridge_slave_1: entered allmulticast mode [ 1227.813747][ T1432] bridge_slave_1: entered promiscuous mode [ 1227.955430][ T8377] tipc: Left network mode [ 1228.024808][ T1432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.025963][ T1589] syzkaller1: entered promiscuous mode [ 1228.025984][ T1589] syzkaller1: entered allmulticast mode [ 1228.061759][ T1432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.245167][ T8377] IPVS: stopping backup sync thread 23803 ... [ 1228.539511][ T1432] team0: Port device team_slave_0 added [ 1228.641784][ T1377] IPVS: starting estimator thread 0... [ 1228.643019][ T1606] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1228.708716][ T1606] x_tables: duplicate underflow at hook 1 [ 1228.730379][ T1615] IPVS: using max 28 ests per chain, 67200 per kthread [ 1228.771338][T22774] Bluetooth: hci0: command tx timeout [ 1228.847322][ T1620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6466'. [ 1229.154754][ T1432] team0: Port device team_slave_1 added [ 1229.392996][ T1432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.393017][ T1432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.393045][ T1432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.396907][ T1432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.396924][ T1432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.396953][ T1432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.696468][ T1632] nbd: socks must be embedded in a SOCK_ITEM attr [ 1229.808588][ T1645] netlink: 'syz.4.6469': attribute type 1 has an invalid length. [ 1229.874188][ T1432] hsr_slave_0: entered promiscuous mode [ 1229.888561][ T1432] hsr_slave_1: entered promiscuous mode [ 1229.889385][ T1432] debugfs: 'hsr0' already exists in 'hsr' [ 1229.889408][ T1432] Cannot create hsr debugfs directory [ 1229.928470][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1230.022093][ T1639] syzkaller0: entered promiscuous mode [ 1230.022121][ T1639] syzkaller0: entered allmulticast mode [ 1230.119852][ T1632] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1230.122358][ T1632] bond1 (unregistering): Released all slaves [ 1230.850468][T22774] Bluetooth: hci0: command tx timeout [ 1235.004719][T24851] bond0: (slave bond_slave_0): interface is now down [ 1235.004767][T24851] bond0: (slave bond_slave_1): interface is now down [ 1235.076314][T24851] bond0: now running without any active interface! [ 1235.744259][ T1696] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6480'. [ 1236.085725][ T1709] netlink: 'syz.0.6484': attribute type 1 has an invalid length. [ 1236.146090][ T1710] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1236.495899][ T1710] x_tables: duplicate underflow at hook 1 [ 1237.035725][ T1746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6489'. [ 1237.075090][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6487'. [ 1237.225414][T24852] IPVS: starting estimator thread 0... [ 1237.245810][ T1758] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1237.330400][ T1759] IPVS: using max 22 ests per chain, 52800 per kthread [ 1237.474741][ T1745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1237.492819][ T1756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1237.730001][ T8377] hsr_slave_1: left promiscuous mode [ 1238.147354][ T8377] team0 (unregistering): Port device team_slave_1 removed [ 1238.650276][ T1820] netlink: 'syz.3.6491': attribute type 4 has an invalid length. [ 1238.827921][ T1880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6492'. [ 1239.028945][ T1890] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6493'. [ 1239.087835][ T1890] vlan1: entered promiscuous mode [ 1239.116338][ T1880] xt_TCPMSS: Only works on TCP SYN packets [ 1239.419058][ T1880] bridge_slave_1: left allmulticast mode [ 1239.419084][ T1880] bridge_slave_1: left promiscuous mode [ 1239.419323][ T1880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.446064][ T1880] bridge_slave_0: left allmulticast mode [ 1239.446093][ T1880] bridge_slave_0: left promiscuous mode [ 1239.446352][ T1880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.687971][ T1915] Bluetooth: MGMT ver 1.23 [ 1239.741877][ T1915] Cannot find add_set index 0 as target [ 1239.744865][ T1915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6495'. [ 1239.744892][ T1915] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1239.869480][ T1935] netlink: 'syz.2.6496': attribute type 1 has an invalid length. [ 1239.869505][ T1935] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6496'. [ 1240.364372][ T1952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 1240.413139][ T8377] IPVS: stop unused estimator thread 0... [ 1240.865351][ T1968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6499'. [ 1241.158596][ T1967] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1241.158635][ T1967] bridge2: entered allmulticast mode [ 1241.244705][ T1972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6500'. [ 1241.551294][ T1981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1241.554472][ T1981] netlink: 'syz.4.6501': attribute type 1 has an invalid length. [ 1241.905507][ T1981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1242.111820][ T1984] bond1: (slave geneve2): making interface the new active one [ 1242.159711][ T1984] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1242.163606][ T1432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1242.247699][ T1432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.430665][ T1432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1242.476380][ T1432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1242.477436][ T1432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1242.509922][ T1432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1242.530810][ T1432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1242.653579][ T1432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1242.969344][ T1432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.982685][ T2010] netlink: 'syz.4.6505': attribute type 1 has an invalid length. [ 1242.982710][ T2010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6505'. [ 1243.053449][ T1432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.090757][T24863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.090881][T24863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.093292][T24863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.093404][T24863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.459009][ T2018] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1243.838106][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6510'. [ 1243.938305][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6510'. [ 1243.957549][ T2033] batman_adv: batadv0: Adding interface: veth0 [ 1243.957568][ T2033] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.957601][ T2033] batman_adv: batadv0: Interface activated: veth0 [ 1243.969269][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.969297][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.038391][ T2033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.038417][ T2033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.055841][ T2033] batman_adv: batadv0: Interface deactivated: veth0 [ 1244.055868][ T2033] batman_adv: batadv0: Removing interface: veth0 [ 1244.117310][ T2044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6512'. [ 1244.153826][ T2043] tipc: Started in network mode [ 1244.153862][ T2043] tipc: Node identity 00000000000005000000000000000001, cluster identity 4711 [ 1244.153919][ T2043] tipc: Enabling of bearer rejected, failed to enable media [ 1244.844790][ T2064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1244.844831][ T2064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1245.013473][ T2075] netlink: del zone limit has 4 unknown bytes [ 1245.016638][ T2075] x_tables: duplicate underflow at hook 1 [ 1245.019316][ T2076] x_tables: duplicate underflow at hook 3 [ 1245.024858][ T2075] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1245.284722][ T1432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.524332][ T1432] veth0_vlan: entered promiscuous mode [ 1245.576570][ T1432] veth1_vlan: entered promiscuous mode [ 1245.782860][ T1432] veth0_macvtap: entered promiscuous mode [ 1245.804824][ T1432] veth1_macvtap: entered promiscuous mode [ 1245.866912][ T1432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.894781][ T1432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.932920][T24863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.932987][T24863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.933055][T24863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.933093][T24863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.359900][T24863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.359925][T24863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.606562][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.606600][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.916463][ T2119] __nla_validate_parse: 6 callbacks suppressed [ 1246.916487][ T2119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6525'. [ 1246.916513][ T2119] bond0: Unable to set down delay as MII monitoring is disabled [ 1247.115900][ T2125] tipc: New replicast peer: 255.255.255.255 [ 1247.129060][ T2125] tipc: Enabled bearer , priority 26 [ 1247.938475][ T2154] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6531'. [ 1247.966744][ T2154] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6531'. [ 1247.982053][ T2159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6531'. [ 1247.997115][ T2157] netlink: 'syz.1.6531': attribute type 2 has an invalid length. [ 1248.176124][ T5810] tipc: Node number set to 1281 [ 1248.201001][ T2172] macsec0: entered promiscuous mode [ 1248.204681][ T2171] macsec0: left promiscuous mode [ 1248.638106][ T2176] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6535'. [ 1248.856335][ T2186] openvswitch: netlink: Flow actions attr not present in new flow. [ 1248.858865][ T2186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6539'. [ 1248.927488][ T2198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1248.959525][ T2193] syzkaller0: entered promiscuous mode [ 1248.959551][ T2193] syzkaller0: entered allmulticast mode [ 1249.469533][ T2219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6546'. [ 1249.709486][ T2228] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6548'. [ 1249.789316][ T2232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6551'. [ 1249.837415][ T2237] netlink: 'syz.3.6552': attribute type 1 has an invalid length. [ 1249.878858][ T2230] netlink: 'syz.1.6549': attribute type 2 has an invalid length. [ 1249.946679][ T2237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1250.041765][ T2241] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1250.099531][ T2237] bond2: (slave dummy0): making interface the new active one [ 1250.109034][ T2241] netlink: 'syz.3.6552': attribute type 10 has an invalid length. [ 1250.122824][ T2237] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1250.160182][ T2241] dummy0: entered promiscuous mode [ 1250.166403][ T2241] bond2: (slave dummy0): Releasing active interface [ 1250.349992][ T2237] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1250.384481][ T2237] bond3 (unregistering): Released all slaves [ 1250.712187][ T2258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.712520][ T2258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.146366][ T2258] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1251.293757][ T2258] bridge2: left allmulticast mode [ 1251.324945][T24852] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.325013][T24852] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.413806][T24851] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.489395][ T2281] netlink: 'syz.3.6557': attribute type 4 has an invalid length. [ 1251.834351][ T2314] ip_tables: iptables: counters copy to user failed while replacing table [ 1251.863752][T24852] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.884691][ T2312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 1251.903804][T30827] Bluetooth: hci0: command 0x0405 tx timeout [ 1252.196106][ T2328] __nla_validate_parse: 5 callbacks suppressed [ 1252.196127][ T2328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1252.196157][ T2328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1252.359880][T24856] IPVS: starting estimator thread 0... [ 1252.440644][ T2335] IPVS: using max 25 ests per chain, 60000 per kthread [ 1252.510043][ T2337] syzkaller0: entered promiscuous mode [ 1252.510069][ T2337] syzkaller0: entered allmulticast mode [ 1252.596658][ T2349] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1252.828869][ T2359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1252.874141][ T2359] netlink: 'syz.0.6571': attribute type 1 has an invalid length. [ 1252.874168][ T2359] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1253.282483][T24863] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1253.318729][ T2381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1253.456816][ T2394] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1253.474941][ T2394] gretap0: entered promiscuous mode [ 1253.502057][ T2398] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1253.502170][ T2398] 0ªî{X¹¦: renamed from gretap0 [ 1253.526217][ T2394] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1253.542805][ T2398] 0ªî{X¹¦: left promiscuous mode [ 1253.542840][ T2398] 0ªî{X¹¦: entered allmulticast mode [ 1253.567133][ T2398] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1253.609256][ T2394] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1253.629634][ T2394] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1253.688124][ T2406] netlink: 'syz.1.6582': attribute type 16 has an invalid length. [ 1255.075071][ T2487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1255.154587][ T2487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1255.175086][ T2487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6594'. [ 1255.176518][ T2487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1255.378529][ T2490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.381589][ T2490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.935785][ T2519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6597'. [ 1255.936905][ T2490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.961258][ T2490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.100817][ T2527] netlink: 'syz.2.6597': attribute type 10 has an invalid length. [ 1256.445378][ T2527] team0: Port device veth0 added [ 1256.503943][T24863] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.503992][T24863] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.504029][T24863] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.504065][T24863] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.723434][ T2558] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6601'. [ 1256.931521][T24852] wlan0: Trigger new scan to find an IBSS to join [ 1257.306990][ T2586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6605'. [ 1257.551592][ T2598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1257.573469][ T2598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1258.279862][ T2638] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6614'. [ 1258.641808][ T2635] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1258.678370][ T2651] tipc: Started in network mode [ 1258.678399][ T2651] tipc: Node identity 1000001, cluster identity 4369 [ 1258.678415][ T2651] tipc: Node number set to 16777217 [ 1258.739413][ T2651] tipc: New replicast peer: 127.0.0.1 [ 1258.740062][ T2651] tipc: Enabled bearer , priority 26 [ 1259.007486][ T2676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6621'. [ 1259.007822][ T2676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6621'. [ 1259.634348][ T2733] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1259.653741][ T2732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6628'. [ 1259.844521][ T2744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6629'. [ 1259.961081][ T2744] vlan3: entered promiscuous mode [ 1259.961108][ T2744] ip6gretap0: entered promiscuous mode [ 1260.793910][ T2791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 1260.896338][ T2793] netlink: 'syz.4.6638': attribute type 1 has an invalid length. [ 1260.941971][T24852] wlan0: Trigger new scan to find an IBSS to join [ 1261.069446][ T2793] bond2: option mode: invalid value (10) [ 1261.084657][ T2793] bond2 (unregistering): Released all slaves [ 1261.522794][ T2824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6642'. [ 1261.852761][T24863] wlan0: Creating new IBSS network, BSSID ba:2e:21:22:c4:26 [ 1262.526875][ T2873] x_tables: duplicate entry at hook 1 [ 1262.826260][ T2887] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6649'. [ 1263.007204][ T2900] xt_ecn: cannot match TCP bits for non-tcp packets [ 1263.127807][ T2912] geneve2: entered promiscuous mode [ 1265.095354][ T2926] bridge_slave_1: mtu less than device minimum [ 1265.807324][ T2887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.187545][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.188204][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.347995][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1266.363071][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1266.455865][T22774] Bluetooth: hci1: command 0x0406 tx timeout [ 1266.768722][ T2955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6664'. [ 1266.830534][T24863] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.830587][T24863] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.830625][T24863] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.830661][T24863] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.260750][ T2968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1267.260782][ T2968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1267.324542][ T2955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6664'. [ 1267.361111][ T2968] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1267.362993][ T2972] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6670'. [ 1267.369024][ T2972] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6670'. [ 1267.465517][ T2972] bridge_slave_0: left allmulticast mode [ 1267.465542][ T2972] bridge_slave_0: left promiscuous mode [ 1267.465750][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.491359][ T2972] bridge_slave_1: left allmulticast mode [ 1267.491389][ T2972] bridge_slave_1: left promiscuous mode [ 1267.491619][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.519448][ T2972] bond0: (slave bond_slave_0): Releasing backup interface [ 1267.529126][ T2972] bond0: (slave bond_slave_1): Releasing backup interface [ 1267.541368][ T2972] team0: Port device team_slave_0 removed [ 1267.543471][ T2972] team0: Port device team_slave_1 removed [ 1267.543893][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.545137][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.546042][ T2972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1267.643052][ T2972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6670'. [ 1267.643081][ T2972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6670'. [ 1267.643102][ T2972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6670'. [ 1267.848513][ T2983] __nla_validate_parse: 2 callbacks suppressed [ 1267.848546][ T2983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1268.236827][ T3005] netlink: 'syz.1.6679': attribute type 1 has an invalid length. [ 1268.416151][ T3005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.656188][ T3025] netlink: 'syz.0.6684': attribute type 1 has an invalid length. [ 1268.701561][ T3031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6685'. [ 1268.793535][ T3025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1269.525949][T30827] Bluetooth: hci2: connection err: -111 [ 1269.545943][ T3052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1269.546611][ T3052] team0: Device ipvlan2 is already an upper device of the team interface [ 1269.567283][ T3048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.586032][ T3058] ip6t_REJECT: ECHOREPLY is not supported [ 1269.590114][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.591699][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.591935][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.592149][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.602726][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.621311][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.621519][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1269.750938][T24866] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.751078][T24866] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.751130][T24866] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.751170][T24866] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1270.002952][ T3066] tc_dump_action: action bad kind [ 1270.145391][ T3083] netlink: zone id is out of range [ 1270.145459][ T3083] netlink: zone id is out of range [ 1270.145587][ T3083] netlink: zone id is out of range [ 1270.145630][ T3083] netlink: zone id is out of range [ 1270.145640][ T3083] netlink: zone id is out of range [ 1270.145650][ T3083] netlink: zone id is out of range [ 1270.145660][ T3083] netlink: zone id is out of range [ 1270.145669][ T3083] netlink: zone id is out of range [ 1270.145678][ T3083] netlink: zone id is out of range [ 1270.145687][ T3083] netlink: zone id is out of range [ 1270.254101][ T3092] 0·: renamed from hsr0 (while UP) [ 1270.257366][ T3092] 0·: entered allmulticast mode [ 1270.257390][ T3092] hsr_slave_1: entered allmulticast mode [ 1271.098480][ T3137] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1271.159418][ T3134] v: renamed from dummy0 [ 1271.251709][ T3148] bridge0: port 1(bond0) entered blocking state [ 1271.251806][ T3148] bridge0: port 1(bond0) entered disabled state [ 1271.251987][ T3148] bond0: entered allmulticast mode [ 1271.373908][ T3148] bond0: entered promiscuous mode [ 1271.493815][ T3158] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 1271.541331][ T3159] netlink: 'syz.2.6712': attribute type 1 has an invalid length. [ 1272.242951][ T3158] hsr_slave_1 (unregistering): left promiscuous mode [ 1272.354860][ T3163] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 1272.497719][ T3181] syzkaller0: entered promiscuous mode [ 1272.497745][ T3181] syzkaller0: entered allmulticast mode [ 1272.817491][ T3193] bond2: option arp_validate: invalid value (8192) [ 1272.819222][ T3193] bond2 (unregistering): Released all slaves [ 1272.935468][ T3201] bond2: option arp_validate: invalid value (8192) [ 1272.939543][ T3201] bond2 (unregistering): Released all slaves [ 1273.134722][ T3230] __nla_validate_parse: 54 callbacks suppressed [ 1273.134748][ T3230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6722'. [ 1273.289410][ T3240] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 1273.459863][ T3250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6728'. [ 1273.483600][ T3242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6726'. [ 1273.812741][ T3264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6732'. [ 1273.819587][ T3261] nbd: must specify at least one socket [ 1273.836959][ T3264] netlink: 'syz.3.6732': attribute type 21 has an invalid length. [ 1273.836969][ T3259] netlink: 'syz.1.6730': attribute type 4 has an invalid length. [ 1273.836988][ T3259] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6730'. [ 1273.837036][ T3264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6732'. [ 1273.931264][ T3269] netlink: 'syz.3.6732': attribute type 21 has an invalid length. [ 1274.048968][ T3261] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1274.074041][ T3261] bond2 (unregistering): Released all slaves [ 1274.131244][ T3269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6732'. [ 1274.311117][ T3287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1274.367742][ T3287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1274.399103][ T3290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6735'. [ 1274.545436][ T3296] vlan2: entered allmulticast mode [ 1274.545461][ T3296] bond0: entered allmulticast mode [ 1274.545476][ T3296] bond_slave_0: entered allmulticast mode [ 1274.545494][ T3296] bond_slave_1: entered allmulticast mode [ 1274.658183][ T3303] netlink: 'syz.0.6737': attribute type 1 has an invalid length. [ 1274.693219][ T3305] netlink: 'syz.1.6739': attribute type 4 has an invalid length. [ 1274.747802][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.926819][ T3349] net_ratelimit: 63 callbacks suppressed [ 1275.926844][ T3349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1276.259583][ T3355] xt_ecn: cannot match TCP bits for non-tcp packets [ 1277.714093][ T3370] vlan2: left allmulticast mode [ 1277.714120][ T3370] bond0: left allmulticast mode [ 1277.714138][ T3370] bond_slave_0: left allmulticast mode [ 1277.714155][ T3370] bond_slave_1: left allmulticast mode [ 1277.827717][ T3385] macvtap1: entered allmulticast mode [ 1277.827782][ T3385] veth0_to_bridge: entered allmulticast mode [ 1277.874784][ T3385] veth0_to_bridge: left allmulticast mode [ 1278.080872][T24856] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.080927][T24856] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.080980][T24856] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.081019][T24856] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.464872][ T3406] __nla_validate_parse: 9 callbacks suppressed [ 1278.464896][ T3406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1278.464914][ T3406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1278.465083][ T3406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1278.465101][ T3406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1278.688545][ T3408] syzkaller0: entered promiscuous mode [ 1278.688572][ T3408] syzkaller0: entered allmulticast mode [ 1278.719600][ T3408] tipc: Enabled bearer , priority 0 [ 1278.813285][ T3413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6766'. [ 1278.834334][ T3400] tipc: Resetting bearer [ 1278.940746][ T3400] tipc: Disabling bearer [ 1281.068713][ T3437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6772'. [ 1282.523478][ T3467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6779'. [ 1282.624797][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6779'. [ 1282.682384][ T3469] netlink: 'syz.0.6778': attribute type 1 has an invalid length. [ 1282.689250][ T3467] netlink: 'syz.4.6779': attribute type 8 has an invalid length. [ 1282.689278][ T3467] sch_fq: defrate 0 ignored. [ 1282.767706][ T3467] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1283.196558][ T3474] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 1283.196586][ T3474] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6780'. [ 1283.196605][ T3474] netlink: 'syz.3.6780': attribute type 2 has an invalid length. [ 1283.196621][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6780'. [ 1283.329382][ T3476] netlink: 'syz.4.6781': attribute type 54 has an invalid length. [ 1283.354779][ T3474] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 1283.455232][ T3482] netlink: 'syz.2.6782': attribute type 12 has an invalid length. [ 1283.455296][ T3482] netlink: 'syz.2.6782': attribute type 11 has an invalid length. [ 1283.535868][ T3474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1283.560101][ T3454] macvlan0: entered promiscuous mode [ 1283.714316][ T3454] __nla_validate_parse: 3 callbacks suppressed [ 1283.714361][ T3454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6777'. [ 1284.582118][ T3505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6787'. [ 1284.884183][ T3518] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1284.955489][ T3518] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1285.086082][ T3524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1285.086171][ T3524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1285.200149][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6794'. [ 1285.250845][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6794'. [ 1285.463821][ T3527] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6792'. [ 1285.539156][ T3536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6792'. [ 1285.556945][ T3540] ip_tables: iptables: counters copy to user failed while replacing table [ 1286.305974][ T3568] syz_tun: entered allmulticast mode [ 1286.315530][ T3566] ip_tables: iptables: counters copy to user failed while replacing table [ 1286.447535][ T3565] syz_tun: left allmulticast mode [ 1287.675575][ T3605] netlink: 'syz.0.6811': attribute type 4 has an invalid length. [ 1287.891067][ T3597] netlink: 'syz.0.6811': attribute type 4 has an invalid length. [ 1288.830895][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1288.830924][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1288.830954][ T3635] netlink: 'syz.2.6816': attribute type 15 has an invalid length. [ 1288.903887][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1288.903916][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1288.903946][ T3635] netlink: 'syz.2.6816': attribute type 15 has an invalid length. [ 1288.942745][T24856] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1288.955290][T24856] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1288.955971][T24856] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1288.956069][T24856] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1289.126911][ T3636] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1289.273167][ T3647] Cannot find add_set index 0 as target [ 1289.898382][ T3630] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6814'. [ 1290.545924][ T3670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1290.546083][ T3670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1290.546244][ T3670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1290.546378][ T3670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1290.546518][ T3670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1290.877763][ T3682] netlink: Setting conntrack mark requires 'commit' flag. [ 1290.877800][ T3682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.924962][ T3682] bridge_slave_1: left allmulticast mode [ 1290.924994][ T3682] bridge_slave_1: left promiscuous mode [ 1290.925264][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.966137][ T3682] bridge_slave_0: left allmulticast mode [ 1290.966168][ T3682] bridge_slave_0: left promiscuous mode [ 1290.966441][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.014789][ T3657] Bluetooth: hci0: command 0x0405 tx timeout [ 1291.864535][ T3713] netlink: 'syz.0.6831': attribute type 12 has an invalid length. [ 1291.864602][ T3713] netlink: 'syz.0.6831': attribute type 11 has an invalid length. [ 1292.060312][T30827] Bluetooth: hci5: command 0x0406 tx timeout [ 1292.170973][ T3722] ip_tables: iptables: counters copy to user failed while replacing table [ 1292.676811][ T3739] netlink: 'syz.0.6836': attribute type 4 has an invalid length. [ 1293.396138][ T3758] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1293.421590][ T3758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1293.422143][ T3758] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1293.876397][ T3763] netlink: 'syz.0.6841': attribute type 2 has an invalid length. [ 1293.877360][ T3765] netlink: 'syz.0.6841': attribute type 2 has an invalid length. [ 1293.902858][ T3763] __nla_validate_parse: 33 callbacks suppressed [ 1293.902880][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6841'. [ 1293.905081][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6841'. [ 1293.944102][ T3763] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1294.004631][ T5809] bond_slave_0: entered promiscuous mode [ 1294.004675][ T5809] bond_slave_1: entered promiscuous mode [ 1294.518017][ T3788] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1294.779669][ T3787] syzkaller0: entered promiscuous mode [ 1294.779700][ T3787] syzkaller0: entered allmulticast mode [ 1295.202324][ T3795] netlink: 'syz.2.6849': attribute type 1 has an invalid length. [ 1295.275035][ T3796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1295.307286][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6850'. [ 1300.504960][ T3795] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1300.924108][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6859'. [ 1300.993638][ T3840] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1301.075309][ T3840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1301.149969][ T3847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1301.220054][ T3840] bond0: (slave bond_slave_0): Releasing backup interface [ 1301.256231][ T3850] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6863'. [ 1301.434932][ T3851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1301.438758][ T3844] bond3: Removing last arp target with arp_interval on [ 1301.567923][ T3844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1301.706883][ T3854] bond4 (unregistering): Released all slaves [ 1301.834007][ T3867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1302.005560][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6868'. [ 1302.349840][ T3875] bond0: left promiscuous mode [ 1303.177885][ T3907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1303.303382][ T3912] syzkaller0: entered promiscuous mode [ 1303.303408][ T3912] syzkaller0: entered allmulticast mode [ 1303.475775][T24864] tipc: Subscription rejected, illegal request [ 1303.515944][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1303.573800][ T3910] vlan3: entered promiscuous mode [ 1303.573827][ T3910] ip6gretap0: entered promiscuous mode [ 1303.602720][ T3921] netlink: 'syz.4.6882': attribute type 11 has an invalid length. [ 1303.692735][ T3917] macvtap1: entered allmulticast mode [ 1303.694034][ T3917] veth0_to_bridge: entered allmulticast mode [ 1303.719028][ T3917] veth0_to_bridge: left allmulticast mode [ 1304.970034][T28125] hid-generic 0005:046D:0009.0003: item fetching failed at offset 0/1 [ 1304.986494][T28125] hid-generic 0005:046D:0009.0003: probe with driver hid-generic failed with error -22 [ 1306.231747][ T4008] sock: sock_set_timeout: `syz.0.6898' (pid 4008) tries to set negative timeout [ 1306.237529][ T3999] geneve2: entered promiscuous mode [ 1306.237554][ T3999] geneve2: entered allmulticast mode [ 1306.273979][T24865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.274039][T24865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.274081][T24865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.274124][T24865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.927616][ T4021] netlink: 'syz.3.6899': attribute type 1 has an invalid length. [ 1307.083804][ T4035] smc: net device lo erased user defined pnetid SYZ0 [ 1307.126330][ T4021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1307.411670][T22774] Bluetooth: hci2: command 0x0405 tx timeout [ 1307.413264][ T4033] syzkaller0: entered promiscuous mode [ 1307.413319][ T4033] syzkaller0: entered allmulticast mode [ 1307.697308][ T4056] tipc: Started in network mode [ 1307.697345][ T4056] tipc: Node identity ac14140f, cluster identity 4711 [ 1307.697649][ T4056] tipc: New replicast peer: 255.255.255.255 [ 1307.720156][ T4056] tipc: Enabled bearer , priority 26 [ 1308.204068][ T4069] __nla_validate_parse: 6 callbacks suppressed [ 1308.204093][ T4069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6907'. [ 1308.209841][ T4069] netlink: 'syz.3.6907': attribute type 2 has an invalid length. [ 1308.556709][ T4076] block nbd3: not configured, cannot reconfigure [ 1308.593630][ T4072] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.6908'. [ 1308.593696][ T4072] netlink: 'syz.4.6908': attribute type 2 has an invalid length. [ 1308.794605][ T4084] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1308.794649][ T4084] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1308.794695][ T4084] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1308.833714][T28126] tipc: Node number set to 2886997007 [ 1308.890685][ T4084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1309.038491][ T4092] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1309.417622][ T4109] bond4 (unregistering): Released all slaves [ 1309.757191][ T4119] smc: net device lo applied user defined pnetid SYZ0 [ 1309.762077][ T4122] netlink: 'syz.2.6920': attribute type 1 has an invalid length. [ 1309.762131][ T4122] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1309.762235][ T4122] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1309.818092][T30827] Bluetooth: hci0: link tx timeout [ 1309.818380][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.829038][T30827] Bluetooth: hci0: link tx timeout [ 1309.829059][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.855112][T30827] Bluetooth: hci0: link tx timeout [ 1309.855135][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.855281][T30827] Bluetooth: hci0: link tx timeout [ 1309.855306][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.855468][T30827] Bluetooth: hci0: link tx timeout [ 1309.855482][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.855721][T30827] Bluetooth: hci0: link tx timeout [ 1309.855736][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.856337][T30827] Bluetooth: hci0: link tx timeout [ 1309.856352][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.856487][T30827] Bluetooth: hci0: link tx timeout [ 1309.856502][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.857015][T30827] Bluetooth: hci0: link tx timeout [ 1309.857030][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.857158][T30827] Bluetooth: hci0: link tx timeout [ 1309.857197][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.858856][T30827] Bluetooth: hci0: link tx timeout [ 1309.858871][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.888422][T30827] Bluetooth: hci0: link tx timeout [ 1309.888492][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.888839][T30827] Bluetooth: hci0: link tx timeout [ 1309.888881][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.889234][T30827] Bluetooth: hci0: link tx timeout [ 1309.889266][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.890643][T30827] Bluetooth: hci0: link tx timeout [ 1309.890659][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.890771][T30827] Bluetooth: hci0: link tx timeout [ 1309.890784][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.891695][T30827] Bluetooth: hci0: link tx timeout [ 1309.891712][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1309.893862][T30827] Bluetooth: hci0: link tx timeout [ 1309.893904][T30827] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1310.124011][ T4130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6919'. [ 1310.124101][ T4130] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1310.565405][ T4137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6922'. [ 1310.583904][ T4141] xt_hashlimit: size too large, truncated to 1048576 [ 1310.583928][ T4141] xt_hashlimit: max too large, truncated to 1048576 [ 1311.293016][ T4160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.892447][T30827] Bluetooth: hci0: command 0x0405 tx timeout [ 1312.775716][ T4182] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6932'. [ 1314.374805][ T4203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6935'. [ 1315.220997][ T4218] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6940'. [ 1315.238160][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6941'. [ 1315.291314][ T4219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6940'. [ 1315.312496][ T4216] bond5: Removing last arp target with arp_interval on [ 1315.419678][ T4216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6940'. [ 1315.871138][ T4232] ip_tables: iptables: counters copy to user failed while replacing table [ 1315.981789][ T4236] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6944'. [ 1316.559877][ T4247] netlink: Conntrack attr has 8 unknown bytes [ 1316.559917][ T4247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1317.246318][ T4255] netlink: 'syz.1.6947': attribute type 10 has an invalid length. [ 1317.302144][ T4255] bond0: (slave bond_slave_0): Releasing backup interface [ 1317.364943][ T4255] team0: Port device bond_slave_0 added [ 1317.511844][ T4261] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1318.552013][ T4279] bond2: option arp_all_targets: invalid value (3) [ 1318.585874][ T4279] bond2 (unregistering): Released all slaves [ 1318.639220][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6954'. [ 1319.588514][ T4309] netlink: 'syz.3.6959': attribute type 7 has an invalid length. [ 1319.588552][ T4309] netlink: 'syz.3.6959': attribute type 5 has an invalid length. [ 1319.588569][ T4309] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1319.771768][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1319.806800][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1322.479877][ T4329] netlink: 'syz.0.6962': attribute type 4 has an invalid length. [ 1322.515495][ T4330] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.6963'. [ 1322.547666][ T4332] netlink: 'syz.0.6962': attribute type 4 has an invalid length. [ 1322.591103][ T4335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6963'. [ 1322.800304][ T4343] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1322.807640][ T4343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6965'. [ 1322.911102][ T4345] xt_hashlimit: size too large, truncated to 1048576 [ 1323.437921][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6968'. [ 1323.561700][ T4362] netlink: 'syz.0.6970': attribute type 1 has an invalid length. [ 1323.632567][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6970'. [ 1323.852850][ T4362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1324.024128][ T4371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1324.028191][ T4372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1324.109280][ T4375] netlink: 'syz.3.6973': attribute type 58 has an invalid length. [ 1324.109310][ T4375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1324.228519][ T4370] tipc: Enabled bearer , priority 0 [ 1324.250446][ T4370] tipc: Resetting bearer [ 1324.348188][ T4370] tipc: Disabling bearer [ 1325.050081][ T4411] vlan2: entered promiscuous mode [ 1325.050107][ T4411] gretap0: entered promiscuous mode [ 1325.248690][ T4420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1325.248720][ T4420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1325.291528][ T4412] syzkaller0: entered promiscuous mode [ 1325.291593][ T4412] syzkaller0: entered allmulticast mode [ 1325.438337][ T4412] tipc: Enabled bearer , priority 0 [ 1325.453672][ T4420] syzkaller1: entered promiscuous mode [ 1325.453698][ T4420] syzkaller1: entered allmulticast mode [ 1325.662157][ T4416] tipc: Resetting bearer [ 1326.150083][ T4407] tipc: Resetting bearer [ 1326.237881][ T4407] tipc: Disabling bearer [ 1326.284054][ T4447] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1326.284189][ T4447] syzkaller0: linktype set to 768 [ 1326.565537][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1326.841009][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1327.394843][ T4479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1328.058336][ T4498] netlink: 'syz.0.7002': attribute type 1 has an invalid length. [ 1328.074395][ T4500] udevd[4500]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1328.126584][ T4495] udevd[4495]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1328.368047][ T4498] bond4: entered promiscuous mode [ 1328.369217][ T4498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1328.540745][ T4511] bond4: (slave bridge2): making interface the new active one [ 1328.540775][ T4511] bridge2: entered promiscuous mode [ 1328.543562][ T4511] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1329.240884][ T4519] sctp: [Deprecated]: syz.1.7005 (pid 4519) Use of int in max_burst socket option. [ 1329.240884][ T4519] Use struct sctp_assoc_value instead [ 1329.643396][ T4539] ovs-system: entered promiscuous mode [ 1329.707637][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1329.707667][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1329.707685][ T4539] netlink: 'syz.2.7009': attribute type 4 has an invalid length. [ 1329.782745][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1330.022588][ T4555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7012'. [ 1330.022625][ T4556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7012'. [ 1330.264295][ T4562] Cannot find set identified by id 65534 to match [ 1330.433957][ T4568] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7015'. [ 1330.433982][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7015'. [ 1330.525671][ T4568] tipc: Enabling of bearer rejected, failed to enable media [ 1330.668068][ T4567] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7014'. [ 1331.197206][ T4579] syzkaller0: entered promiscuous mode [ 1331.197234][ T4579] syzkaller0: entered allmulticast mode [ 1331.197811][ T4577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1331.197943][ T4577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1331.308338][ T4587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1331.308379][ T4587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1331.373607][ T4588] sctp: [Deprecated]: syz.0.7017 (pid 4588) Use of int in max_burst socket option. [ 1331.373607][ T4588] Use struct sctp_assoc_value instead [ 1331.555565][ T4592] tipc: Enabled bearer , priority 24 [ 1331.567665][ T4595] tipc: Enabling of bearer rejected, already enabled [ 1331.586355][ T4577] sctp: [Deprecated]: syz.0.7017 (pid 4577) Use of int in maxseg socket option. [ 1331.586355][ T4577] Use struct sctp_assoc_value instead [ 1333.021498][T22774] Bluetooth: hci4: command 0x0406 tx timeout [ 1338.111779][ T4614] netlink: 'syz.2.7024': attribute type 10 has an invalid length. [ 1338.152140][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 1338.171812][ T4621] netlink: 'syz.1.7027': attribute type 1 has an invalid length. [ 1338.224202][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7027'. [ 1338.395083][ T4614] team0 (unregistering): Port device veth0 removed [ 1338.574414][ T4621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1338.576265][ T4628] syzkaller0: entered promiscuous mode [ 1338.576286][ T4628] syzkaller0: entered allmulticast mode [ 1339.120130][ T4636] vlan4: entered promiscuous mode [ 1339.120927][ T4636] bond0: entered promiscuous mode [ 1339.354406][ T4651] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:21 [ 1339.950468][ T4667] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 1340.203496][ T4667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.610892][ T4690] tipc: Enabling of bearer rejected, failed to enable media [ 1342.612524][ T4690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7044'. [ 1343.187848][ T4697] ip6erspan0: entered allmulticast mode [ 1343.201286][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7048'. [ 1343.495058][ T4717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7051'. [ 1343.533623][ T4712] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1343.559096][ T4712] bond4 (unregistering): Released all slaves [ 1343.602487][ T4717] netlink: 'syz.2.7051': attribute type 10 has an invalid length. [ 1343.884160][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1344.601360][ T4744] netlink: 'syz.4.7055': attribute type 1 has an invalid length. [ 1344.668854][ T4744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.755274][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7055'. [ 1344.758344][ T4744] netlink: 'syz.4.7055': attribute type 10 has an invalid length. [ 1344.758368][ T4744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7055'. [ 1344.758554][ T4744] dummy0: entered promiscuous mode [ 1344.806278][ T4753] tc_dump_action: action bad kind [ 1344.841113][ T4753] netlink: 'syz.2.7058': attribute type 8 has an invalid length. [ 1344.879002][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7058'. [ 1345.107189][ T4753] veth3: entered allmulticast mode [ 1345.901355][ T4772] bridge0: port 3(bond0) entered blocking state [ 1345.905093][ T4772] bridge0: port 3(bond0) entered disabled state [ 1345.905310][ T4772] bond0: entered allmulticast mode [ 1345.905330][ T4772] bond_slave_1: entered allmulticast mode [ 1345.965617][ T4769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7062'. [ 1345.989091][ T4772] bond0: left allmulticast mode [ 1345.989120][ T4772] bond_slave_1: left allmulticast mode [ 1346.015256][ T4774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7063'. [ 1346.136235][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1346.172547][ T4774] hsr_slave_1 (unregistering): left promiscuous mode [ 1346.311677][ T4771] bridge0: port 3(bond0) entered blocking state [ 1346.312074][ T4771] bridge0: port 3(bond0) entered disabled state [ 1346.312259][ T4771] bond0: entered allmulticast mode [ 1346.312277][ T4771] bond_slave_1: entered allmulticast mode [ 1346.352715][ T4771] bond0: left allmulticast mode [ 1346.352777][ T4771] bond_slave_1: left allmulticast mode [ 1346.909320][ T4795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7068'. [ 1347.009559][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7067'. [ 1347.358908][ T4809] netlink: 'syz.0.7070': attribute type 2 has an invalid length. [ 1347.402685][ T4809] debugfs: '.�PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 1347.649971][ T4820] PKCS7: Unknown OID: [4] (bad) [ 1347.649994][ T4820] PKCS7: Only support pkcs7_signedData type [ 1348.015870][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'. [ 1348.642652][ T4839] syzkaller0: entered promiscuous mode [ 1348.642679][ T4839] syzkaller0: entered allmulticast mode [ 1348.747953][ T4843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1348.832823][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1349.498590][ T4852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1349.498633][ T4852] netlink: 'syz.0.7082': attribute type 8 has an invalid length. [ 1349.498650][ T4852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1349.652359][ T4856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1349.652394][ T4856] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1349.776834][ T4854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1349.885493][ T4847] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1349.896679][ T4849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1349.914774][ T4850] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1350.214898][ T4868] netlink: 'syz.0.7083': attribute type 61 has an invalid length. [ 1350.426790][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.426916][ T4871] bridge0: port 2(bridge_slave_1) entered listening state [ 1350.427232][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.427369][ T4871] bridge0: port 1(bridge_slave_0) entered listening state [ 1350.839936][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7086'. [ 1351.337432][ T4880] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7087'. [ 1351.359129][ T4884] netlink: 'syz.4.7088': attribute type 1 has an invalid length. [ 1351.435060][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7088'. [ 1351.776456][ T4884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1352.199669][ T4888] bond3: (slave bridge2): making interface the new active one [ 1352.210228][ T4888] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1352.558339][T30827] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 1352.558400][T30827] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 1352.992234][ T4907] netlink: 'syz.4.7094': attribute type 1 has an invalid length. [ 1353.862064][ T4920] __nla_validate_parse: 1 callbacks suppressed [ 1353.862109][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7096'. [ 1353.953250][ T4922] IPVS: length: 218 != 24 [ 1354.366857][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7100'. [ 1354.409489][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7100'. [ 1354.496621][ T4936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1354.824898][ T4945] ip6gre1: entered promiscuous mode [ 1354.824926][ T4945] ip6gre1: entered allmulticast mode [ 1355.102678][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1355.109178][ T4956] syzkaller1: entered promiscuous mode [ 1355.109204][ T4956] syzkaller1: entered allmulticast mode [ 1355.720579][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7114'. [ 1355.844454][ T4983] xt_CT: No such helper "netbios-ns" [ 1356.100643][ T5000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1356.195660][ T5004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.702700][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7122'. [ 1356.838004][ T5019] xt_hashlimit: max too large, truncated to 1048576 [ 1356.962487][ T5019] No such timeout policy "syz1" [ 1357.129007][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1357.156851][ T5030] syzkaller0: entered promiscuous mode [ 1357.156879][ T5030] syzkaller0: entered allmulticast mode [ 1357.478277][ T5046] netlink: 'syz.3.7129': attribute type 1 has an invalid length. [ 1357.548165][ T5046] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1357.667844][ T5051] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1357.768971][ T5051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7129'. [ 1357.859675][ T5046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.871335][ T5046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.873038][ T5046] v: left promiscuous mode [ 1357.903835][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7132'. [ 1357.994712][ T5046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1357.994743][ T5046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1358.023374][ T5046] veth1_vlan: left promiscuous mode [ 1358.024370][ T5046] veth0_vlan: left promiscuous mode [ 1358.025839][ T5046] veth0_vlan: entered promiscuous mode [ 1358.027747][ T5046] veth1_vlan: entered promiscuous mode [ 1358.053979][ T5046] veth1_macvtap: left promiscuous mode [ 1358.055197][ T5046] veth0_macvtap: left promiscuous mode [ 1358.056982][ T5046] veth0_macvtap: entered promiscuous mode [ 1358.057919][ T5046] veth1_macvtap: entered promiscuous mode [ 1358.088628][ T5046] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1358.088977][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1358.107567][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1358.109403][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1358.126835][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1358.954067][ T5072] netlink: 'syz.1.7135': attribute type 4 has an invalid length. [ 1359.224676][ T5046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1359.226318][ T5046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1359.244633][ T5046] geneve2: left promiscuous mode [ 1359.249373][ T5046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1359.268530][ T5046] syzkaller0: left promiscuous mode [ 1359.268557][ T5046] syzkaller0: left allmulticast mode [ 1359.269864][ T5046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1359.290333][ T5046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1359.298723][ T8377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.320875][ T1358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.341802][T24862] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1359.342149][T24862] bond2: (slave veth3): making interface the new active one [ 1359.379057][T24862] bond2: active interface up! [ 1359.439808][ T8377] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1359.440200][ T8377] bond6: (slave veth7): making interface the new active one [ 1359.443902][ T8377] bond6: active interface up! [ 1359.468686][T24851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.603506][ T5060] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1359.772560][ T1358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.976972][ T5075] syzkaller0: entered promiscuous mode [ 1359.977040][ T5075] syzkaller0: entered allmulticast mode [ 1360.028224][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7138'. [ 1360.212114][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7140'. [ 1360.319501][ T5075] batadv_slave_1: entered promiscuous mode [ 1360.367632][ T5074] batadv_slave_1: left promiscuous mode [ 1360.677425][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7141'. [ 1360.737965][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7141'. [ 1360.932084][ T8377] wlan0: Trigger new scan to find an IBSS to join [ 1361.465149][ T5138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7146'. [ 1362.025727][ T5157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7151'. [ 1362.314082][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1362.716429][ T5173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7155'. [ 1362.719972][ T5172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7155'. [ 1362.941961][ T5179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1363.584790][ T5187] udevd[5187]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1363.620922][ T5187] udevd[5187]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1363.891461][T24865] wlan0: Trigger new scan to find an IBSS to join [ 1364.407440][ T5212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.855894][ T5238] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1366.040494][ T5246] __nla_validate_parse: 3 callbacks suppressed [ 1366.040519][ T5246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7173'. [ 1366.106063][ T5233] geneve1: entered allmulticast mode [ 1366.854967][T24863] wlan0: Trigger new scan to find an IBSS to join [ 1367.126356][ T5263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1367.126382][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1367.936763][ T5299] wlan0: Creating new IBSS network, BSSID 12:48:0f:24:39:fa [ 1368.183934][ T5312] netlink: 'syz.1.7185': attribute type 1 has an invalid length. [ 1368.215480][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1368.215508][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1368.303400][ T5306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1368.316954][ T5313] bond0: left allmulticast mode [ 1368.317248][ T5313] bridge0: port 1(bond0) entered disabled state [ 1368.405920][ T5306] netlink: 'syz.4.7184': attribute type 2 has an invalid length. [ 1368.405949][ T5306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1368.425654][ T5313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.440621][ T5313] bond4: (slave bond0): Enslaving as an active interface with a down link [ 1368.532267][ T5316] bond4 (unregistering): (slave bond0): Releasing active interface [ 1368.689528][ T5316] bond4 (unregistering): Released all slaves [ 1368.706425][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1368.794820][ T5306] : entered promiscuous mode [ 1368.904589][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1369.104327][ T5327] syzkaller0: left promiscuous mode [ 1369.104356][ T5327] syzkaller0: left allmulticast mode [ 1369.132176][ T5329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.327802][ T5331] tc_dump_action: action bad kind [ 1369.447363][ T5343] xt_policy: output policy not valid in PREROUTING and INPUT [ 1369.497193][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7193'. [ 1369.767052][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1370.447161][ T5372] ip_tables: iptables: counters copy to user failed while replacing table [ 1371.848128][ T5416] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1372.035774][ T5417] __nla_validate_parse: 2 callbacks suppressed [ 1372.035800][ T5417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7208'. [ 1372.094025][ T5421] bond5: option min_links: invalid value (18446744073709551612) [ 1372.094133][ T5421] bond5: option min_links: allowed values 0 - 2147483647 [ 1372.097962][ T5417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7208'. [ 1372.163689][ T5421] bond5 (unregistering): Released all slaves [ 1372.607533][ T5417] vxcan2: entered allmulticast mode [ 1372.709451][ T5451] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7212'. [ 1372.737246][ T5436] netlink: 'syz.2.7212': attribute type 9 has an invalid length. [ 1372.738093][ T5442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1372.739718][ T5448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1373.252905][ T5461] syzkaller1: entered promiscuous mode [ 1373.252931][ T5461] syzkaller1: entered allmulticast mode [ 1373.411852][ T5463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1373.759183][ T5475] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7220'. [ 1373.797490][ T5475] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1373.860123][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1374.011798][ T5483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7219'. [ 1374.224335][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7221'. [ 1374.282956][ T5490] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1374.778849][ T5499] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1375.031098][ T5487] ip6gretap0: left promiscuous mode [ 1375.407367][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7224'. [ 1375.853818][ T5519] Cannot find map_set index 2 as target [ 1376.843594][ T5542] netlink: 'syz.1.7231': attribute type 5 has an invalid length. [ 1376.843658][ T5542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7231'. [ 1377.423732][ T5557] __nla_validate_parse: 2 callbacks suppressed [ 1377.423754][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7235'. [ 1377.598881][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7234'. [ 1377.840959][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7234'. [ 1378.456873][ T5590] netlink: 'syz.2.7239': attribute type 9 has an invalid length. [ 1378.498937][ T5592] netlink: 'syz.1.7238': attribute type 83 has an invalid length. [ 1378.584780][ T5587] netlink: 'syz.1.7238': attribute type 83 has an invalid length. [ 1378.811387][ T5585] netlink: 964 bytes leftover after parsing attributes in process `syz.4.7237'. [ 1378.925380][ T5590] bridge0: entered promiscuous mode [ 1379.399257][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1379.589109][ T5299] tipc: Subscription rejected, illegal request [ 1379.649742][ T5632] vlan3: entered promiscuous mode [ 1380.453035][ T5642] netlink: 'syz.0.7246': attribute type 1 has an invalid length. [ 1380.856217][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1380.857082][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1381.162483][ T5670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1381.163662][ T5669] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1381.169692][ T5671] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1381.181615][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1381.238496][ T5658] veth7: entered allmulticast mode [ 1381.282939][ T5658] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1381.306236][ T5645] macvlan0: entered promiscuous mode [ 1381.306262][ T5645] macvlan0: entered allmulticast mode [ 1381.306932][ T5645] bond5: entered promiscuous mode [ 1381.329640][ T5645] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1381.357758][ T5645] bond5: left promiscuous mode [ 1382.486679][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7260'. [ 1382.995756][ T5722] batman_adv: batadv0: Adding interface: macvtap1 [ 1382.995777][ T5722] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.995810][ T5722] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1383.366040][ T5723] batman_adv: batadv0: Removing interface: macvtap1 [ 1383.394837][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1383.593515][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7266'. [ 1383.878990][ T5736] ip6tnl2: entered promiscuous mode [ 1383.879015][ T5736] ip6tnl2: entered allmulticast mode [ 1384.256161][ T5761] netlink: 356 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1384.256368][ T5761] netlink: 356 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1384.311054][ T5758] netlink: 'syz.3.7267': attribute type 1 has an invalid length. [ 1384.339516][ T5758] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7267'. [ 1384.344571][ T5763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7269'. [ 1384.431739][ T5770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7270'. [ 1384.821811][ T5763] syzkaller1: entered promiscuous mode [ 1384.821839][ T5763] syzkaller1: entered allmulticast mode [ 1385.956559][ T5826] FAULT_INJECTION: forcing a failure. [ 1385.956559][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.956624][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz.0.7278 Not tainted syzkaller #0 PREEMPT(full) [ 1385.956653][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1385.956669][ T5826] Call Trace: [ 1385.956679][ T5826] [ 1385.956689][ T5826] dump_stack_lvl+0xe8/0x150 [ 1385.956728][ T5826] should_fail_ex+0x410/0x560 [ 1385.956760][ T5826] should_failslab+0xa8/0x100 [ 1385.956793][ T5826] __kmalloc_cache_noprof+0xa3/0x600 [ 1385.956819][ T5826] ? rtnl_newlink+0x147/0x1c30 [ 1385.956847][ T5826] ? rtnl_newlink+0x147/0x1c30 [ 1385.956876][ T5826] ? stack_trace_save+0xa9/0x100 [ 1385.956903][ T5826] rtnl_newlink+0x147/0x1c30 [ 1385.956931][ T5826] ? stack_depot_save_flags+0x33/0x7f0 [ 1385.956957][ T5826] ? __lock_acquire+0x670/0x2de0 [ 1385.956986][ T5826] ? kasan_save_track+0x4f/0x80 [ 1385.957010][ T5826] ? kasan_save_track+0x3e/0x80 [ 1385.957034][ T5826] ? kasan_save_free_info+0x40/0x50 [ 1385.957065][ T5826] ? __kasan_slab_free+0x5c/0x80 [ 1385.957092][ T5826] ? __pfx_rtnl_newlink+0x10/0x10 [ 1385.957119][ T5826] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1385.957154][ T5826] ? netlink_deliver_tap+0x19c/0x1b0 [ 1385.957188][ T5826] ? netlink_unicast+0x781/0x940 [ 1385.957218][ T5826] ? netlink_sendmsg+0x813/0xb40 [ 1385.957239][ T5826] ? sock_sendmsg_nosec+0x14e/0x190 [ 1385.957260][ T5826] ? ____sys_sendmsg+0x54e/0x850 [ 1385.957288][ T5826] ? ___sys_sendmsg+0x2a5/0x360 [ 1385.957316][ T5826] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1385.957345][ T5826] ? do_syscall_64+0x166/0x520 [ 1385.957373][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.957438][ T5826] ? kasan_quarantine_put+0xbb/0x1f0 [ 1385.957463][ T5826] ? lockdep_hardirqs_on+0x7b/0x110 [ 1385.957502][ T5826] ? nlmon_xmit+0xb0/0x100 [ 1385.957525][ T5826] ? kmem_cache_free+0x182/0x650 [ 1385.957558][ T5826] ? __lock_acquire+0x747/0x2de0 [ 1385.957588][ T5826] ? __dev_queue_xmit+0x29b/0x3820 [ 1385.957627][ T5826] ? __local_bh_enable_ip+0xd6/0x140 [ 1385.957656][ T5826] ? lockdep_hardirqs_on+0x7b/0x110 [ 1385.957694][ T5826] ? lock_acquire+0x115/0x350 [ 1385.957717][ T5826] ? __pfx_rtnl_newlink+0x10/0x10 [ 1385.957760][ T5826] ? __pfx_rtnl_newlink+0x10/0x10 [ 1385.957787][ T5826] rtnetlink_rcv_msg+0x802/0xc00 [ 1385.957821][ T5826] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1385.957849][ T5826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1385.957881][ T5826] ? __copy_skb_header+0xa3/0x4a0 [ 1385.957925][ T5826] netlink_rcv_skb+0x226/0x4a0 [ 1385.957961][ T5826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1385.957993][ T5826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1385.958043][ T5826] ? netlink_deliver_tap+0x2e/0x1b0 [ 1385.958077][ T5826] ? netlink_deliver_tap+0x2e/0x1b0 [ 1385.958119][ T5826] netlink_unicast+0x7bd/0x940 [ 1385.958164][ T5826] netlink_sendmsg+0x813/0xb40 [ 1385.958198][ T5826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1385.958230][ T5826] ? apparmor_socket_sendmsg+0x98/0x360 [ 1385.958260][ T5826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1385.958282][ T5826] sock_sendmsg_nosec+0x14e/0x190 [ 1385.958309][ T5826] ____sys_sendmsg+0x54e/0x850 [ 1385.958347][ T5826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1385.958389][ T5826] ? import_iovec+0x73/0xa0 [ 1385.958423][ T5826] ___sys_sendmsg+0x2a5/0x360 [ 1385.958454][ T5826] ? __lock_acquire+0x747/0x2de0 [ 1385.958490][ T5826] ? __pfx____sys_sendmsg+0x10/0x10 [ 1385.958563][ T5826] ? __fget_files+0x2a/0x420 [ 1385.958595][ T5826] ? __fget_files+0x3a2/0x420 [ 1385.958639][ T5826] __x64_sys_sendmsg+0x1b1/0x290 [ 1385.958674][ T5826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1385.958730][ T5826] do_syscall_64+0x166/0x520 [ 1385.958760][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.958783][ T5826] ? clear_bhb_loop+0x70/0xc0 [ 1385.958812][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.958835][ T5826] RIP: 0033:0x7f656659e159 [ 1385.958856][ T5826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.958876][ T5826] RSP: 002b:00007f65673dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1385.958902][ T5826] RAX: ffffffffffffffda RBX: 00007f6566825fa0 RCX: 00007f656659e159 [ 1385.958920][ T5826] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1385.958935][ T5826] RBP: 00007f65673dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1385.958950][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.958964][ T5826] R13: 00007f6566826038 R14: 00007f6566825fa0 R15: 00007fff063a3e38 [ 1385.959002][ T5826] [ 1386.663586][ T5837] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7275'. [ 1386.893677][ T5807] tipc: Resetting bearer [ 1387.384786][ T5807] geneve1: left allmulticast mode [ 1389.168702][ T5887] netlink: 'syz.4.7285': attribute type 7 has an invalid length. [ 1389.168764][ T5887] netlink: 'syz.4.7285': attribute type 3 has an invalid length. [ 1389.168799][ T5887] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7285'. [ 1389.216580][ T5888] netlink: 'syz.4.7285': attribute type 7 has an invalid length. [ 1389.216606][ T5888] netlink: 'syz.4.7285': attribute type 3 has an invalid length. [ 1389.216622][ T5888] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7285'. [ 1395.102511][T24851] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.102617][T24851] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.173336][ T5840] netlink: 'syz.2.7277': attribute type 7 has an invalid length. [ 1395.190832][T24852] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.190888][T24852] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.670772][ T5901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1395.692902][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7290'. [ 1395.723772][ T5905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7287'. [ 1395.744061][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1395.744607][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1395.744950][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1395.745336][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1395.750646][ T5905] netlink: 'syz.3.7287': attribute type 15 has an invalid length. [ 1395.759199][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1395.759349][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1395.759474][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1395.759605][ T5901] netlink: 380 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1396.999008][ T5934] netlink: 'syz.1.7296': attribute type 1 has an invalid length. [ 1397.116297][ T5934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1397.176080][ T5935] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1397.176534][ T5935] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 1397.177413][ T5935] bond6: (slave gre1): Error -95 calling set_mac_address [ 1398.029427][ T5934] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1398.040303][ T5934] bond6: (slave bond7): Enslaving as an active interface with a down link [ 1398.044807][ T5961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1398.361445][ T5965] netlink: 'syz.1.7300': attribute type 39 has an invalid length. [ 1400.350040][ T5998] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1400.359896][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1400.378511][ T5998] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1400.899227][ T6014] __nla_validate_parse: 60 callbacks suppressed [ 1400.899254][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7316'. [ 1401.134716][ T31] audit: type=1804 audit(1790813473.218:27): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7314" name="/newroot/265/cgroup.controllers" dev="tmpfs" ino=1382 res=1 errno=0 [ 1401.135339][ T31] audit: type=1800 audit(1790813473.218:28): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7314" name="cgroup.controllers" dev="tmpfs" ino=1382 res=0 errno=0 [ 1401.199742][ T6019] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1401.199836][ T6019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1401.232838][ T31] audit: type=1800 audit(1790813473.298:29): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7314" name="cgroup.controllers" dev="tmpfs" ino=1382 res=0 errno=0 [ 1401.642366][ T6038] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7320'. [ 1402.000826][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7322'. [ 1402.169824][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7323'. [ 1402.572256][ T6066] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7325'. [ 1402.610106][ T6070] netlink: 'syz.3.7326': attribute type 10 has an invalid length. [ 1402.781238][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7325'. [ 1402.795944][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 1402.816627][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 1403.397831][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1403.397910][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1403.504802][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1403.504898][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1403.740507][T24864] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.740567][T24864] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.740609][T24864] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.740651][T24864] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.855468][ T6106] netlink: 'syz.1.7333': attribute type 1 has an invalid length. [ 1404.109757][ T6113] netlink: 'syz.3.7334': attribute type 2 has an invalid length. [ 1405.056453][ T6140] hsr_slave_1 (unregistering): left promiscuous mode [ 1405.179273][ T6142] geneve4: entered promiscuous mode [ 1405.210777][ T1377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.210844][ T1377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.210883][ T1377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.211004][ T1377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.963046][ T6162] vlan2: entered promiscuous mode [ 1406.354677][T30827] block nbd1: Receive control failed (result -32) [ 1406.664849][T30827] Bluetooth: hci2: connection err: -111 [ 1407.022355][ T6208] IPVS: length: 171 != 24 [ 1407.663898][ T6219] __nla_validate_parse: 9 callbacks suppressed [ 1407.663933][ T6219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764295][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764335][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764361][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764384][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764407][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764429][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764450][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764471][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1407.764493][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1408.648834][ T6234] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 1408.846683][ T6240] ip_tables: iptables: counters copy to user failed while replacing table [ 1408.862777][ T6240] netlink: 'syz.4.7368': attribute type 1 has an invalid length. [ 1409.037252][ T6247] gretap1: entered allmulticast mode [ 1409.057677][ T6247] bond4: (slave gretap1): making interface the new active one [ 1409.068584][ T6253] netlink: 'syz.3.7367': attribute type 1 has an invalid length. [ 1409.077846][ T6247] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1410.878657][ T6319] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1410.932032][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.932065][ C0] bridge0: topology change detected, propagating [ 1410.932675][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.932695][ C0] bridge0: topology change detected, propagating [ 1412.616324][ T6356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1412.732583][ T6306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1412.732650][ T6306] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1413.119780][ T6306] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1413.119808][ T6306] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1413.151601][ T6384] __nla_validate_parse: 35 callbacks suppressed [ 1413.151625][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7395'. [ 1413.216707][ T6306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1413.216736][ T6306] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1413.289899][ T6306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1413.289926][ T6306] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1413.387291][ T6392] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1413.387834][ T6392] gretap0: entered promiscuous mode [ 1413.414709][ T6392] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1413.414838][ T6392] 0ªî{X¹¦: renamed from gretap0 [ 1413.500459][ T6392] 0ªî{X¹¦: left promiscuous mode [ 1413.500525][ T6392] 0ªî{X¹¦: entered allmulticast mode [ 1413.536824][ T6392] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1413.767440][ T6401] netlink: 146832 bytes leftover after parsing attributes in process `syz.0.7396'. [ 1413.767504][ T6401] openvswitch: netlink: Message has 512 unknown bytes. [ 1414.286485][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7402'. [ 1414.359539][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7402'. [ 1414.535566][ T6421] xt_hashlimit: size too large, truncated to 1048576 [ 1414.558041][ T6430] openvswitch: netlink: Message has -2 unknown bytes. [ 1414.558121][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1414.618539][ T6420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7401'. [ 1414.734632][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7401'. [ 1414.751860][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7401'. [ 1415.381783][ T6453] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1415.529051][ T6460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1415.786005][ T6463] netlink: 'syz.2.7409': attribute type 16 has an invalid length. [ 1415.786033][ T6463] netlink: 'syz.2.7409': attribute type 17 has an invalid length. [ 1415.786050][ T6463] netlink: 'syz.2.7409': attribute type 27 has an invalid length. [ 1416.377638][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7415'. [ 1416.444157][T24864] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.446381][ T5298] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.446450][ T5298] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.446490][ T5298] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.626599][ T6495] sctp: [Deprecated]: syz.1.7418 (pid 6495) Use of int in maxseg socket option. [ 1416.626599][ T6495] Use struct sctp_assoc_value instead [ 1417.778082][ T6517] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1417.986374][ T6524] macvlan0: left promiscuous mode [ 1417.989338][ T6524] netlink: 'syz.1.7424': attribute type 1 has an invalid length. [ 1417.989359][ T6524] netlink: 'syz.1.7424': attribute type 2 has an invalid length. [ 1418.474470][ T6542] ip_tables: iptables: counters copy to user failed while replacing table [ 1418.594755][ T6562] nft_compat: unsupported protocol 0 [ 1418.727413][ T6542] xt_hashlimit: size too large, truncated to 1048576 [ 1418.997749][ T6545] sctp: [Deprecated]: syz.0.7428 (pid 6545) Use of int in max_burst socket option deprecated. [ 1418.997749][ T6545] Use struct sctp_assoc_value instead [ 1419.247940][ T6577] __nla_validate_parse: 2 callbacks suppressed [ 1419.248002][ T6577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7432'. [ 1419.422917][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7434'. [ 1419.797401][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7435'. [ 1419.933253][ T6580] ip6gre1: entered promiscuous mode [ 1419.933280][ T6580] ip6gre1: entered allmulticast mode [ 1420.303692][ T6599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7439'. [ 1420.371390][ T6601] netlink: 'syz.0.7438': attribute type 1 has an invalid length. [ 1420.415568][ T5291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1420.416151][ T5291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1420.440863][ T2295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1420.693081][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7441'. [ 1420.791629][ T2295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1420.849983][ T6613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7438'. [ 1420.908476][ T6596] netlink: 'syz.0.7438': attribute type 2 has an invalid length. [ 1420.942799][ T6596] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1421.412926][T23685] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1421.621424][ T6632] netlink: 'syz.0.7446': attribute type 1 has an invalid length. [ 1421.826419][ T6632] bond6: entered promiscuous mode [ 1421.829587][ T6632] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1421.973756][ T6632] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1421.994905][ T6632] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1421.994937][ T6632] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1422.050385][ T6632] bond6: (slave xfrm1): making interface the new active one [ 1422.050413][ T6632] xfrm1: entered promiscuous mode [ 1422.122339][ T6632] xfrm1: left promiscuous mode [ 1422.271970][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'. [ 1422.513911][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.608191][ T6652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7451'. [ 1422.682832][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7452'. [ 1422.725707][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7452'. [ 1422.725735][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.728338][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.728496][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.728647][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.728794][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.728931][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.729073][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.729283][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1422.729471][ T6655] openvswitch: netlink: Flow actions attr not present in new flow. [ 1423.477707][ T6675] syzkaller0: entered promiscuous mode [ 1423.477733][ T6675] syzkaller0: entered allmulticast mode [ 1424.050603][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1424.410631][ T6714] syzkaller0: entered promiscuous mode [ 1424.410659][ T6714] syzkaller0: entered allmulticast mode [ 1424.437326][ T6716] tipc: Enabled bearer , priority 0 [ 1424.458339][ T6707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1424.458771][ T6707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1424.863104][ T6719] __nla_validate_parse: 1 callbacks suppressed [ 1424.863154][ T6719] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1425.014600][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1425.139491][ T6709] tipc: Resetting bearer [ 1425.243650][ T6709] tipc: Disabling bearer [ 1425.962274][ T6741] netlink: 'syz.3.7470': attribute type 1 has an invalid length. [ 1426.037684][ T6744] net_ratelimit: 25 callbacks suppressed [ 1426.037735][ T6744] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1426.329706][ T6741] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1426.602549][ T6755] bond9: (slave veth9): Enslaving as an active interface with a down link [ 1426.906781][ T6758] bond9: (slave macvlan0): Enslaving as an active interface with a down link [ 1427.657252][ T6796] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1427.683398][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1427.727521][ T6787] can: request_module (can-proto-3) failed. [ 1428.352677][ T6800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1428.396813][ T6817] openvswitch: netlink: IP tunnel dst address not specified [ 1428.396852][ T6817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1429.204963][ T6833] pim6reg: entered allmulticast mode [ 1429.239580][ T6833] pim6reg: left allmulticast mode [ 1429.777022][ T6858] syzkaller0: entered promiscuous mode [ 1429.777051][ T6858] syzkaller0: entered allmulticast mode [ 1430.556357][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7487'. [ 1430.651682][ T6891] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1430.828007][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1431.410606][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1432.517447][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7499'. [ 1432.517517][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7499'. [ 1432.563979][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7499'. [ 1432.564050][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7499'. [ 1432.843370][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1433.245897][ T6978] bond0: (slave bond_slave_1): Releasing backup interface [ 1433.266114][ T6978] bond_slave_1: left promiscuous mode [ 1433.371281][ T6979] netlink: 'syz.2.7497': attribute type 2 has an invalid length. [ 1433.848398][ T6984] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1433.887423][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1434.002406][ T6984] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1434.020870][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7510'. [ 1434.074082][ T6984] bond8 (unregistering): Released all slaves [ 1434.703535][ T7009] netlink: 'syz.0.7512': attribute type 10 has an invalid length. [ 1435.097706][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 1435.526157][ T7014] veth5: entered allmulticast mode [ 1435.579432][ T7014] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1436.012323][ T7044] macvtap1: entered allmulticast mode [ 1436.012388][ T7044] veth0_to_bridge: entered allmulticast mode [ 1436.106678][ T7044] veth0_to_bridge: left allmulticast mode [ 1437.039099][ T7074] __nla_validate_parse: 2 callbacks suppressed [ 1437.039146][ T7074] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7523'. [ 1437.184479][ T7075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7524'. [ 1437.317574][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7523'. [ 1437.339257][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7523'. [ 1438.492560][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7528'. [ 1438.989150][ T7127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7530'. [ 1439.037294][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7530'. [ 1439.191374][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7530'. [ 1439.307807][ T7123] netlink: 'syz.4.7530': attribute type 5 has an invalid length. [ 1440.477729][ T7159] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7534'. [ 1440.552152][ T7164] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7534'. [ 1441.201249][ T7189] syz.0.7542: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1441.201329][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.0.7542 Not tainted syzkaller #0 PREEMPT(full) [ 1441.201355][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1441.201371][ T7189] Call Trace: [ 1441.201382][ T7189] [ 1441.201392][ T7189] dump_stack_lvl+0xe8/0x150 [ 1441.201434][ T7189] warn_alloc+0x24d/0x270 [ 1441.201472][ T7189] ? kasan_save_track+0x4f/0x80 [ 1441.201497][ T7189] ? kasan_save_track+0x3e/0x80 [ 1441.201525][ T7189] ? __pfx_warn_alloc+0x10/0x10 [ 1441.201546][ T7189] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1441.201578][ T7189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.201625][ T7189] __vmalloc_node_range_noprof+0x127/0x1540 [ 1441.201687][ T7189] ? rcu_is_watching+0x16/0xb0 [ 1441.201723][ T7189] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1441.201758][ T7189] ? __kmalloc_cache_noprof+0x321/0x600 [ 1441.201784][ T7189] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1441.201808][ T7189] ? xskq_create+0x56/0x220 [ 1441.201840][ T7189] xskq_create+0x148/0x220 [ 1441.201868][ T7189] ? xsk_init_queue+0x8a/0xe0 [ 1441.201897][ T7189] xsk_init_queue+0x8a/0xe0 [ 1441.201927][ T7189] xsk_setsockopt+0x52a/0x960 [ 1441.201956][ T7189] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1441.201981][ T7189] ? __pfx_aa_sk_perm+0x10/0x10 [ 1441.202022][ T7189] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1441.202051][ T7189] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1441.202078][ T7189] do_sock_setsockopt+0x17c/0x1b0 [ 1441.202116][ T7189] __x64_sys_setsockopt+0x13d/0x1b0 [ 1441.202154][ T7189] do_syscall_64+0x166/0x520 [ 1441.202184][ T7189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.202207][ T7189] ? clear_bhb_loop+0x70/0xc0 [ 1441.202236][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.202259][ T7189] RIP: 0033:0x7f656659e159 [ 1441.202280][ T7189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.202299][ T7189] RSP: 002b:00007f65673dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1441.202323][ T7189] RAX: ffffffffffffffda RBX: 00007f6566825fa0 RCX: 00007f656659e159 [ 1441.202341][ T7189] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000029 [ 1441.202355][ T7189] RBP: 00007f656663506b R08: 0000000000000004 R09: 0000000000000000 [ 1441.202370][ T7189] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.202385][ T7189] R13: 00007f6566826038 R14: 00007f6566825fa0 R15: 00007fff063a3e38 [ 1441.202423][ T7189] [ 1441.206000][ T7189] Mem-Info: [ 1441.206016][ T7189] active_anon:7518 inactive_anon:0 isolated_anon:0 [ 1441.206016][ T7189] active_file:249 inactive_file:43540 isolated_file:0 [ 1441.206016][ T7189] unevictable:0 dirty:175 writeback:0 [ 1441.206016][ T7189] slab_reclaimable:13024 slab_unreclaimable:134799 [ 1441.206016][ T7189] mapped:29584 shmem:521 pagetables:1362 [ 1441.206016][ T7189] sec_pagetables:0 bounce:0 [ 1441.206016][ T7189] kernel_misc_reclaimable:0 [ 1441.206016][ T7189] free:1279736 free_pcp:11633 free_cma:0 [ 1441.206076][ T7189] Node 0 active_anon:30072kB inactive_anon:0kB active_file:996kB inactive_file:173956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118336kB dirty:700kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16920kB pagetables:5296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1441.209266][ T7189] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1441.209328][ T7189] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.209394][ T7189] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1441.209439][ T7189] Node 0 DMA32 free:1165264kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30072kB inactive_anon:0kB active_file:996kB inactive_file:173956kB unevictable:0kB writepending:700kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:46528kB local_pcp:25480kB free_cma:0kB [ 1441.209515][ T7189] lowmem_reserve[]: 0 0 0 0 0 [ 1441.209557][ T7189] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.209619][ T7189] lowmem_reserve[]: 0 0 0 0 0 [ 1441.209661][ T7189] Node 1 Normal free:3938320kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.209726][ T7189] lowmem_reserve[]: 0 0 0 0 0 [ 1441.209768][ T7189] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1441.209906][ T7189] Node 0 DMA32: 873*4kB (UME) 849*8kB (UME) 1041*16kB (UME) 2740*32kB (UME) 861*64kB (UME) 158*128kB (UM) 40*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 232*4096kB (UM) = 1165308kB [ 1441.210106][ T7189] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1441.311998][ T7189] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938320kB [ 1441.312227][ T7189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.312247][ T7189] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1441.312266][ T7189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.312283][ T7189] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1441.312302][ T7189] 44306 total pagecache pages [ 1441.312311][ T7189] 0 pages in swap cache [ 1441.312319][ T7189] Free swap = 124996kB [ 1441.312328][ T7189] Total swap = 124996kB [ 1441.312338][ T7189] 2097051 pages RAM [ 1441.550550][ T7189] 0 pages HighMem/MovableOnly [ 1441.550591][ T7189] 428725 pages reserved [ 1441.550621][ T7189] 0 pages cma reserved [ 1442.058809][ T7196] __nla_validate_parse: 5 callbacks suppressed [ 1442.058831][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.059043][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.059277][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.059431][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.059593][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.059788][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.059999][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.060260][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.132749][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.133299][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1442.328287][ T7190] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1442.993728][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.215206][ T7222] bond7: entered promiscuous mode [ 1443.215271][ T7222] bond7: entered allmulticast mode [ 1443.823982][ T7198] netlink: 'syz.1.7544': attribute type 4 has an invalid length. [ 1444.522685][ T7257] netlink: 'syz.0.7553': attribute type 12 has an invalid length. [ 1444.522714][ T7257] netlink: 'syz.0.7553': attribute type 11 has an invalid length. [ 1445.516058][ T7276] netlink: 'syz.3.7560': attribute type 1 has an invalid length. [ 1445.673166][ T7283] openvswitch: netlink: Invalid VLAN frame [ 1445.676839][ T7276] bond10: entered promiscuous mode [ 1445.681020][ T7276] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1445.769369][ T7282] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1445.769906][ T7282] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1445.769930][ T7282] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1445.812013][ T7282] bond10: (slave xfrm1): making interface the new active one [ 1445.812041][ T7282] xfrm1: entered promiscuous mode [ 1445.814027][ T7282] bond10: (slave xfrm1): Enslaving as an active interface with an up link [ 1446.771042][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1447.030627][ T7282] syzkaller0: entered promiscuous mode [ 1447.030655][ T7282] syzkaller0: entered allmulticast mode [ 1448.204404][ T7321] __nla_validate_parse: 19 callbacks suppressed [ 1448.204433][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7570'. [ 1449.109576][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7575'. [ 1449.109610][ T7345] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1449.865279][ T7354] netlink: 'syz.3.7577': attribute type 4 has an invalid length. [ 1449.904066][ T7354] netlink: 'syz.3.7577': attribute type 4 has an invalid length. [ 1450.047780][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1450.069905][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1450.174332][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1450.174395][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1450.575547][ T7365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7580'. [ 1451.165658][ T7376] openvswitch: netlink: Flow actions attr not present in new flow. [ 1451.551918][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1452.240581][ T5296] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1452.240645][ T5296] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.242936][T14449] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1452.243005][T14449] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.243136][T14449] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1452.243201][T14449] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.243297][T14449] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1452.243362][T14449] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.970997][ T7401] netlink: 'syz.2.7587': attribute type 1 has an invalid length. [ 1453.645630][ T7401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1453.670930][ T7417] xt_TCPMSS: Only works on TCP SYN packets [ 1453.918163][ T7404] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1454.023803][ T7405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.038281][ T7405] bond5: (slave batadv0): making interface the new active one [ 1454.047096][ T7405] batadv0: entered promiscuous mode [ 1454.048510][ T7405] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 1454.115885][ T7415] bond5 (unregistering): (slave veth7): Releasing active interface [ 1454.180043][ T7415] bond5 (unregistering): (slave batadv0): Releasing active interface [ 1454.186362][ T7415] batadv0: left promiscuous mode [ 1454.267826][ T7415] bond5 (unregistering): Released all slaves [ 1454.299185][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7592'. [ 1454.316023][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7591'. [ 1454.365649][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7592'. [ 1454.529358][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7592'. [ 1454.529423][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7592'. [ 1454.817957][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7595'. [ 1454.819049][ T7421] veth7: entered allmulticast mode [ 1454.846348][ T7421] bond8: (slave veth7): Enslaving as an active interface with an up link [ 1454.920578][ T7440] netlink: 'syz.3.7596': attribute type 11 has an invalid length. [ 1455.087344][ T7438] ±ÿ: renamed from lo [ 1455.479173][ T7460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7600'. [ 1455.629968][ T7465] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7599'. [ 1455.727226][ T7454] tipc: Started in network mode [ 1455.727323][ T7454] tipc: Node identity 664d21ba1535, cluster identity 4711 [ 1455.750786][ T7454] tipc: Enabled bearer , priority 0 [ 1455.805333][ T7464] xt_l2tp: invalid flags combination: 8 [ 1455.897036][ T7453] tipc: Resetting bearer [ 1455.915798][ T7466] netlink: 'syz.0.7600': attribute type 1 has an invalid length. [ 1456.062216][ T7453] tipc: Disabling bearer [ 1456.398248][ T7477] ovs-dp0: entered promiscuous mode [ 1456.903183][ T7480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7606'. [ 1457.214134][ T7495] lo: entered promiscuous mode [ 1457.223594][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7610'. [ 1457.239464][ T7495] tunl0: entered promiscuous mode [ 1457.252999][ T7495] gre0: entered promiscuous mode [ 1457.326099][ T7495] 1ªî{X¹¦: entered promiscuous mode [ 1457.370563][ T7495] erspan0: entered promiscuous mode [ 1457.399594][ T7495] ip_vti0: entered promiscuous mode [ 1457.407246][ T7495] ip6_vti0: entered promiscuous mode [ 1457.429968][ T7495] sit0: entered promiscuous mode [ 1457.455531][ T7495] ip6tnl0: entered promiscuous mode [ 1457.499843][ T7495] ip6gre0: entered promiscuous mode [ 1457.589663][ T7495] syz_tun: entered promiscuous mode [ 1457.745493][ T7495] ip6gretap0: entered promiscuous mode [ 1457.787664][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.787880][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.839514][ T7495] vcan0: entered promiscuous mode [ 1457.878547][ T7495] bond0: entered promiscuous mode [ 1457.914363][ T7495] nlmon0: entered promiscuous mode [ 1457.928226][ T7495] batadv0: entered promiscuous mode [ 1457.989276][ T7506] netlink: 'syz.1.7614': attribute type 10 has an invalid length. [ 1458.006804][ T7495] veth0: entered promiscuous mode [ 1458.028237][ T7495] veth1: entered promiscuous mode [ 1458.063921][ T7495] wg0: entered promiscuous mode [ 1458.105164][ T7495] wg1: entered promiscuous mode [ 1458.136083][ T7495] wg2: entered promiscuous mode [ 1458.148290][ T7495] veth0_to_bridge: entered promiscuous mode [ 1458.172412][ T7495] veth1_to_bridge: entered promiscuous mode [ 1458.203770][ T7495] veth1_to_bond: entered promiscuous mode [ 1458.207790][ T7495] bond_slave_1: entered promiscuous mode [ 1458.209487][ T7495] veth1_to_team: entered promiscuous mode [ 1458.232794][ T7495] team_slave_1: entered promiscuous mode [ 1458.234863][ T7495] veth0_to_batadv: entered promiscuous mode [ 1458.239068][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.270734][ T7495] batadv_slave_0: entered promiscuous mode [ 1458.275364][ T7495] veth1_to_batadv: entered promiscuous mode [ 1458.294273][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.294334][ T7495] batadv_slave_1: entered promiscuous mode [ 1458.307711][ T7495] xfrm0: entered promiscuous mode [ 1458.348616][ T7495] veth1_virt_wifi: entered promiscuous mode [ 1458.378458][ T7495] veth0_virt_wifi: entered promiscuous mode [ 1458.396614][ T7495] virt_wifi0: entered promiscuous mode [ 1458.496341][ T7495] macvtap0: entered promiscuous mode [ 1458.519503][ T7495] macsec0: entered promiscuous mode [ 1458.538574][ T7495] geneve0: entered promiscuous mode [ 1458.548497][ T7495] geneve1: entered promiscuous mode [ 1458.604251][ T7495] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1458.681246][ T7495] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1458.769826][ T7495] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1458.785359][ T7495] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1458.798098][ T7495] mac80211_hwsim hwsim86 wlan1: entered promiscuous mode [ 1458.798329][ T7495] mac80211_hwsim hwsim87 wlan2: entered promiscuous mode [ 1458.798538][ T7495] mac80211_hwsim hwsim88 wlan3: entered promiscuous mode [ 1458.825660][ T7495] mac80211_hwsim hwsim89 wlan4: entered promiscuous mode [ 1458.825851][ T7495] ip6erspan0: entered promiscuous mode [ 1458.826178][ T7495] mac80211_hwsim hwsim94 wlan5: entered promiscuous mode [ 1458.826366][ T7495] ip6tnl1: entered promiscuous mode [ 1458.826494][ T7495] syztnl1: entered promiscuous mode [ 1458.826651][ T7495] mac80211_hwsim hwsim99 wlan6: entered promiscuous mode [ 1458.826837][ T7495] bond1: entered promiscuous mode [ 1458.826981][ T7495] veth2: entered promiscuous mode [ 1458.827254][ T7495] veth3: entered promiscuous mode [ 1458.827441][ T7495] veth4: entered promiscuous mode [ 1458.827597][ T7495] veth5: entered promiscuous mode [ 1458.827754][ T7495] bridge1: entered promiscuous mode [ 1458.914994][ T7495] bond2: entered promiscuous mode [ 1458.917355][ T7495] gre1: entered promiscuous mode [ 1458.917819][ T7495] vxlan0: entered promiscuous mode [ 1458.920019][ T7495] : entered promiscuous mode [ 1458.945132][ T7495] vti0: entered promiscuous mode [ 1458.945422][ T7495] vti1: entered promiscuous mode [ 1458.945583][ T7495] vxlan1: entered promiscuous mode [ 1458.973659][ T7495] macsec1: entered promiscuous mode [ 1458.978009][ T7495] bond3: entered promiscuous mode [ 1458.997077][ T7495] bridge3: entered promiscuous mode [ 1459.009505][ T7495] gre2: entered promiscuous mode [ 1459.036655][ T7495] sit1: entered promiscuous mode [ 1459.056378][ T7495] bond5: entered promiscuous mode [ 1459.056553][ T7495] veth6: entered promiscuous mode [ 1459.073331][ T7495] veth7: entered promiscuous mode [ 1459.074261][ T7495] ip6gre2: entered promiscuous mode [ 1459.077162][ T7495] 7: entered promiscuous mode [ 1459.077324][ T7495] erspan1: entered promiscuous mode [ 1459.077460][ T7495] vxcan1: entered promiscuous mode [ 1459.077602][ T7495] bridge4: entered promiscuous mode [ 1459.112380][ T7495] bridge5: entered promiscuous mode [ 1459.117434][ T7495] vx0: entered promiscuous mode [ 1459.122550][ T7179] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.122644][ T7179] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.122970][ T7179] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.123053][ T7179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.123160][ T7179] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.123229][ T7179] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.123340][ T7179] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.123416][ T7179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.266148][ T7493] ipvlan1: entered promiscuous mode [ 1459.283192][ T7493] ipvlan1: left promiscuous mode [ 1459.308686][ T7506] team0 (unregistering): Port device team_slave_0 removed [ 1459.319624][ T7506] team0 (unregistering): Port device team_slave_1 removed [ 1459.339715][ T7506] team0 (unregistering): Port device bond_slave_0 removed [ 1460.638062][ T2294] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 1460.638194][ T2294] ------------[ cut here ]------------ [ 1460.638205][ T2294] lockdep bfs error:-1 [ 1460.638222][ T2294] WARNING: kernel/locking/lockdep.c:2103 at print_bfs_bug+0x20/0x40, CPU#1: kworker/1:15/2294 [ 1460.665632][ T2294] Modules linked in: [ 1460.669578][ T2294] CPU: 1 UID: 0 PID: 2294 Comm: kworker/1:15 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1460.679114][ T2294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1460.689212][ T2294] Workqueue: events nfc_urelease_event_work [ 1460.695178][ T2294] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1460.700435][ T2294] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 c7 2d 38 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d d0 07 da 0e 89 de <67> 48 0f b9 3a 5b 5d e9 c2 a2 46 0a cc 48 c7 c7 c1 d1 5a 8e e8 05 [ 1460.720083][ T2294] RSP: 0018:ffffc90004337670 EFLAGS: 00010046 [ 1460.726197][ T2294] RAX: 000000000000003b RBX: 00000000ffffffff RCX: 87a232677fc60200 [ 1460.734272][ T2294] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff907d9e60 [ 1460.742392][ T2294] RBP: 0000000000000001 R08: ffffc900043373e7 R09: 1ffff92000866e7c [ 1460.750410][ T2294] R10: dffffc0000000000 R11: fffff52000866e7d R12: 0000000000000042 [ 1460.758620][ T2294] R13: ffffffff9442cb48 R14: ffffffff972fca78 R15: ffffffff972fcae8 [ 1460.766640][ T2294] FS: 0000000000000000(0000) GS:ffff888124dc5000(0000) knlGS:0000000000000000 [ 1460.775622][ T2294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1460.782251][ T2294] CR2: 00007f5edb7f37b0 CR3: 0000000058318000 CR4: 00000000003526f0 [ 1460.790276][ T2294] Call Trace: [ 1460.793632][ T2294] [ 1460.796605][ T2294] __lock_acquire+0x25ed/0x2de0 [ 1460.801521][ T2294] lock_acquire+0x115/0x350 [ 1460.806067][ T2294] ? __free_object+0x1d2/0x5d0 [ 1460.810919][ T2294] ? do_raw_spin_lock+0x12b/0x2f0 [ 1460.816002][ T2294] _raw_spin_lock+0x2e/0x40 [ 1460.820584][ T2294] ? __free_object+0x1d2/0x5d0 [ 1460.825410][ T2294] __free_object+0x1d2/0x5d0 [ 1460.830060][ T2294] debug_check_no_obj_freed+0x133/0x450 [ 1460.835664][ T2294] kfree+0x13e/0x650 [ 1460.839611][ T2294] ? nfc_urelease_event_work+0x253/0x330 [ 1460.845297][ T2294] ? klist_iter_exit+0xc1/0x100 [ 1460.850239][ T2294] nfc_urelease_event_work+0x253/0x330 [ 1460.855784][ T2294] ? __pfx_nfc_urelease_event_work+0x10/0x10 [ 1460.861816][ T2294] ? rcu_is_watching+0x16/0xb0 [ 1460.866634][ T2294] ? process_scheduled_works+0x97a/0x1630 [ 1460.872439][ T2294] process_scheduled_works+0xc3d/0x1630 [ 1460.878054][ T2294] ? __pfx_process_scheduled_works+0x10/0x10 [ 1460.884096][ T2294] ? assign_work+0x3cf/0x5d0 [ 1460.888749][ T2294] worker_thread+0xa47/0xfb0 [ 1460.893412][ T2294] kthread+0x38b/0x480 [ 1460.897532][ T2294] ? __pfx_worker_thread+0x10/0x10 [ 1460.902695][ T2294] ? __pfx_kthread+0x10/0x10 [ 1460.907332][ T2294] ret_from_fork+0x514/0xb70 [ 1460.911961][ T2294] ? __pfx_ret_from_fork+0x10/0x10 [ 1460.917115][ T2294] ? __switch_to+0xc89/0x1420 [ 1460.921846][ T2294] ? __pfx_kthread+0x10/0x10 [ 1460.926477][ T2294] ret_from_fork_asm+0x1a/0x30 [ 1460.931303][ T2294] [ 1460.934375][ T2294] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1460.941695][ T2294] CPU: 1 UID: 0 PID: 2294 Comm: kworker/1:15 Not tainted syzkaller #0 PREEMPT(full) [ 1460.951195][ T2294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1460.961353][ T2294] Workqueue: events nfc_urelease_event_work [ 1460.967320][ T2294] Call Trace: [ 1460.970633][ T2294] [ 1460.973598][ T2294] vpanic+0x56d/0xa60 [ 1460.977664][ T2294] ? __pfx__printk+0x10/0x10 [ 1460.982289][ T2294] ? __pfx_vpanic+0x10/0x10 [ 1460.986836][ T2294] ? is_bpf_text_address+0x292/0x2b0 [ 1460.992157][ T2294] ? is_bpf_text_address+0x26/0x2b0 [ 1460.997403][ T2294] panic+0xc5/0xd0 [ 1461.001176][ T2294] ? __pfx_panic+0x10/0x10 [ 1461.005639][ T2294] ? ret_from_fork_asm+0x1a/0x30 [ 1461.010635][ T2294] __warn+0x315/0x4c0 [ 1461.014657][ T2294] ? print_bfs_bug+0x20/0x40 [ 1461.019290][ T2294] ? print_bfs_bug+0x20/0x40 [ 1461.023925][ T2294] __report_bug+0x276/0x570 [ 1461.028474][ T2294] ? print_bfs_bug+0x20/0x40 [ 1461.033092][ T2294] ? __pfx___report_bug+0x10/0x10 [ 1461.038172][ T2294] ? __pfx_vprintk_emit+0x10/0x10 [ 1461.043251][ T2294] report_bug_entry+0x19b/0x290 [ 1461.048146][ T2294] ? print_bfs_bug+0x22/0x40 [ 1461.052782][ T2294] ? print_bfs_bug+0x27/0x40 [ 1461.057415][ T2294] handle_bug+0xce/0x200 [ 1461.061708][ T2294] exc_invalid_op+0x1a/0x50 [ 1461.066263][ T2294] asm_exc_invalid_op+0x1a/0x20 [ 1461.071147][ T2294] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1461.076376][ T2294] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 c7 2d 38 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d d0 07 da 0e 89 de <67> 48 0f b9 3a 5b 5d e9 c2 a2 46 0a cc 48 c7 c7 c1 d1 5a 8e e8 05 [ 1461.096015][ T2294] RSP: 0018:ffffc90004337670 EFLAGS: 00010046 [ 1461.102150][ T2294] RAX: 000000000000003b RBX: 00000000ffffffff RCX: 87a232677fc60200 [ 1461.110162][ T2294] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff907d9e60 [ 1461.118176][ T2294] RBP: 0000000000000001 R08: ffffc900043373e7 R09: 1ffff92000866e7c [ 1461.126178][ T2294] R10: dffffc0000000000 R11: fffff52000866e7d R12: 0000000000000042 [ 1461.134189][ T2294] R13: ffffffff9442cb48 R14: ffffffff972fca78 R15: ffffffff972fcae8 [ 1461.142214][ T2294] __lock_acquire+0x25ed/0x2de0 [ 1461.147125][ T2294] lock_acquire+0x115/0x350 [ 1461.151678][ T2294] ? __free_object+0x1d2/0x5d0 [ 1461.156489][ T2294] ? do_raw_spin_lock+0x12b/0x2f0 [ 1461.161557][ T2294] _raw_spin_lock+0x2e/0x40 [ 1461.166135][ T2294] ? __free_object+0x1d2/0x5d0 [ 1461.170944][ T2294] __free_object+0x1d2/0x5d0 [ 1461.175579][ T2294] debug_check_no_obj_freed+0x133/0x450 [ 1461.181187][ T2294] kfree+0x13e/0x650 [ 1461.185123][ T2294] ? nfc_urelease_event_work+0x253/0x330 [ 1461.190797][ T2294] ? klist_iter_exit+0xc1/0x100 [ 1461.195696][ T2294] nfc_urelease_event_work+0x253/0x330 [ 1461.201270][ T2294] ? __pfx_nfc_urelease_event_work+0x10/0x10 [ 1461.207329][ T2294] ? rcu_is_watching+0x16/0xb0 [ 1461.212159][ T2294] ? process_scheduled_works+0x97a/0x1630 [ 1461.217926][ T2294] process_scheduled_works+0xc3d/0x1630 [ 1461.223539][ T2294] ? __pfx_process_scheduled_works+0x10/0x10 [ 1461.229568][ T2294] ? assign_work+0x3cf/0x5d0 [ 1461.234206][ T2294] worker_thread+0xa47/0xfb0 [ 1461.238847][ T2294] kthread+0x38b/0x480 [ 1461.242945][ T2294] ? __pfx_worker_thread+0x10/0x10 [ 1461.248098][ T2294] ? __pfx_kthread+0x10/0x10 [ 1461.252721][ T2294] ret_from_fork+0x514/0xb70 [ 1461.257347][ T2294] ? __pfx_ret_from_fork+0x10/0x10 [ 1461.262503][ T2294] ? __switch_to+0xc89/0x1420 [ 1461.267239][ T2294] ? __pfx_kthread+0x10/0x10 [ 1461.271924][ T2294] ret_from_fork_asm+0x1a/0x30 [ 1461.276754][ T2294] [ 1461.280077][ T2294] Kernel Offset: disabled [ 1461.284465][ T2294] Rebooting in 86400 seconds..