last executing test programs: 4.179536985s ago: executing program 3 (id=9799): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/99, &(0x7f0000000100)=0x63) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = epoll_create1(0x0) sendfile(r3, r1, &(0x7f0000000140)=0x6, 0x276f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5a1b6c", 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}}}}}}}}, 0x52) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@remote, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, r5, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x8000000000000000, 0x80000001, 0x19e}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r5, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 3.579732876s ago: executing program 3 (id=9804): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.529272366s ago: executing program 2 (id=9815): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x12, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0xf, 0x4c, [@empty, @broadcast, @rand_addr=0x64010101]}, @generic={0x7, 0xe, "f060b1e3b0f4ac78f2fae137"}, @timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0x1, [{@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x76d2}]}, @timestamp_addr={0x44, 0xc, 0xdc, 0x1, 0x4, [{@local, 0x7}]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000094c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x4) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8, 0x80000001}}) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) 2.216476377s ago: executing program 1 (id=9818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) unshare(0x100000) unshare(0x20080) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x80, 0x7800, 0x7, 0x5, {{0xd, 0x4, 0x2, 0x4, 0x34, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop, @timestamp={0x44, 0x1c, 0x67, 0x0, 0xc, [0xb3, 0x7, 0x1, 0x101, 0x7f, 0x9]}]}}}}}) r6 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) (async) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r8, @ANYBLOB="3206382c6cd0d52b280012800b000100697036746e6c3ed78cd60d5b3e8014000300ff02000000008b"], 0x48}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async, rerun: 64) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000a00)={@loopback, @dev, 0x0}, &(0x7f0000000a40)=0xc) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0xf4, 0x9, 0xc, 0x20, @private2, @dev={0xfe, 0x80, '\x00', 0x15}, 0x1, 0x40, 0x14b5bcb7, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001900)={0x704, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x88d9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x140}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x99}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x403f, 0x6, 0x6, 0x5}, {0x8, 0x8, 0x2, 0x8}, {0x8, 0x8, 0x5}]}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff69fc}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff800}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x400c880}, 0x4000000) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r12, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)={0x28, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r13}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000001300)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r1, @ANYBLOB="00012abd7000ffdbdf251300000008000300", @ANYRES32=r4, @ANYBLOB="d900ac00e8175bfd70ed0af405eb66365324f732b17a2e3c741cc89e37eddcc96721b3f10e83e841e3c33c09a004e0c3de56010ad1982f7b4cd4cf07c3a9e05ddf0e77c18580e9a89051b7c8253d7b6e5faa8e3515205eaa9fa085cc73cd61f2ea2587207ea58f6df49e4a376aeedbdd0741e7f965b9d323fe1cf4c50579cd0ca0f321dc978973fa249e3a27340af3a0002da6c77c8fbcf66f10fdbdd8053b01e539e0f267c27b97edd4f286a45603164f94ca4b100965921be8e3e98947028e330194f91c21182b03b0ace2ac9760f57fb18a3cb0127905d8000000050029000c0000002000118004000100040006000400050004000600040006000400010004000200050019000200000006001200050000000800140042d6c8a280d0df88339304937b4ccffe2efa8e94ab51b3966ca87f7fee7339cc2921a5d6b893cb0d4613c1ee674b5b1ecd7c26795a", @ANYRES32=r4, @ANYBLOB="0a00bd0007000300fffe0000050029000a00000006003600090000000600100047070000"], 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3e4f8ea07000fe0bdbdf250600000008000300", @ANYRES32=r4, @ANYBLOB="08000500060000000a00e8000802110000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.150431993s ago: executing program 2 (id=9819): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x11) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xbfffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc4, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "66d934d70bdacc0f4a91e319ab2b3e122f7f137baf38"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "16546f6001a242a7a328e662533f58310151589ed8546f1e0f2d59140fdc01"}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008100}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x120, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x7c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28e}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x840}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x281}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x18}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x120}}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000fbdbdf8e2e0000000c00990034fbffff210000000400af001000b0000d00000005000500fd0507000500180116000000080027000300000008002201500200000800a0000000000008009f00040000000500190107000000fea945bfd6913c054c03fc71e10631d7cb23adf63a53a001f16e286843b78c76e94661b4674d68f98a53cd00965cb26517d4ae5c8739ba4593961b0918126256a40ae90b3c0e21f020179c01fb053e161deb87a8979960776db5d50982886b90f86d63fbc04b71495dbc1d8c37fe07fc1dedd650e9b388030042f671dec385766e863e7567046bb1aef93fc8ce46c3e7b5481cf1"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40008c0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x5c, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x1b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.018418227s ago: executing program 0 (id=9820): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000980)={{0xffffffffffffffff, &(0x7f00000000c0)='\xa2\\!\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0x0, 0xffff]}, {0x0, 0x401, 0x4, 0xff80000}}, 0x860b, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}, 0x6, &(0x7f00000008c0)=[{0x1, 0x8, &(0x7f00000001c0)='nl802154\x00', &(0x7f0000000200)="1b12bed5476150e75ca47741f5870c8e6a2f6adb355a988f4607fa1277575154c99c5272f7", 0x25, 0x20}, {0x2, 0xfffffff7, &(0x7f0000000240)='nl802154\x00', &(0x7f0000000400)="e62193128cfb91fd3066049da74732d945938ca00c322f2bddbf6d283feddad84618e7795f25cc3d3dbc4327dbf1ed71b5aa1f10416227f504acbc234494ad6389f3cc46cf6b328554dc24d3007d650441842543275ad2f100b79186efb51ce1c69a01d774bb88b58076426953941fb2c3f35be11e44c9e9f953a03371219095f86bb78a26492961eb6b026d870130ea07187aa79c76862b3204c6cf0b3cb38863645b6861e5687e0b778f2adbf1f4b1cbaf04e2b5267a3b946725fd8cbea65256d09642c0a5572378c643074a19450dce2dcfa8ed643b12d43823a3176966759100beafd6", 0xe5, 0x38}, {0x2, 0x6, &(0x7f0000000500)='.\x00', &(0x7f0000000540)="d48aac494a92e26216d5095142e5e1be2a96ddfca8d70733df36ffaa0b51eba0c11e32eb5817360e3adf8d0d15e6fd52d95ce69c8b814a398cb3ad7f33ee86017cf833e7d9ffb2f7e2a1f141a51d1f692623c300d2a642f39433fa28dd2dcb8850dbcdaad65dc8abcc46cc59a68bc7e8468a312edad3b1cdbe6eeedb08349126beb2ed9ff64abc1f0c6dd48705b0846efff702ae857efb2bfdcd321f4df99b98ef48a782758058b87a2a9fe2ac769370f99b6775af", 0xb5, 0x20}, {0x3, 0x5, &(0x7f0000000600)='c[((}&\x00', &(0x7f0000000640)="6efdd581e49675cbed528b5c17ee6caf89ea740a0f51738e2b0da1fac7485136d63088a060d9effa256268a942082657df79a56cce1905bce651c08b88696fa43f38bb1e1b3c56badce5f7ba4e5f8434ff9cfc7d4907eb2fb4138e1623f18536411b118d028f3f", 0x67, 0x30}, {0x3, 0x80000001, &(0x7f00000006c0)='nl802154\x00', &(0x7f0000000700)="03edad7e880b7cac594da96a08459302a99bc4ce7d55ec570dbcce81cb9403ae76c287363bc08ab4be473bb9e603e285ee1c5c4efea432b0fce2d7a18426917ef263a15fc2c5fea5a6dad5", 0x4b, 0x18}, {0x1, 0x3a5, &(0x7f0000000780)='#(%-\x00', &(0x7f00000007c0)="a44bb58f6ae0e56f0bd4e7a576a47982907a3acfa6db13cfcfe33efff00d04f6c8447f0de29e71913e11ee46a3b8988cb7cc484c1d19e77897d5e0c3d99f32016f7caeb61136f5ffccdde07fa2522960feba260019692e5416cf74d537bbac190681125897c8d533dbe62b7f995451cc1d84db3ec8b7b7a02c07fae6214036bd38199cf498f5c0065dc1337bc14114cae06d116defce94c085e356927392078ff3daf5e05ebf0b26b8ab384a2b27777f5bc0d2d2095ce3f96df4b9215b277b9f3af80dc1c3ee6d09e8adce3c35df36ca5eedcf5331a0957456190141c7a7ea915198a694f3", 0xe5, 0x52}]}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000380)={r1}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1b, 0x35da, 0x3, 0x26, 0x0, r1, 0xf7, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 1.737366887s ago: executing program 2 (id=9821): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0xb, 0x184, 0x8, 0x7, 0x1, 0x1, 0x9, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0xe8, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x200, 0x4, 0x3, 0x3, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0x0, 0x6, 0x1000, 0x6, 0x6, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x313, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x7, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0xc2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x9b, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x0, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x9, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x7, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x9, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x2}, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@deltaction={0xfffffffffffffc55, 0x31, 0x101, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 1.665941068s ago: executing program 1 (id=9822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x3, 0x7, {{0x1d, 0x4, 0x3, 0x0, 0x74, 0x68, 0x0, 0x3, 0x2f, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x2c, 0xb3, 0x3, 0x5, [{@broadcast, 0x8}, {@remote, 0x200}, {@local, 0x2}, {@multicast2, 0x401}, {@multicast1}]}, @ssrr={0x89, 0x7, 0xee, [@broadcast]}, @timestamp_addr={0x44, 0xc, 0x27, 0x1, 0x5, [{@broadcast}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xb9, [@local]}, @generic={0x44, 0x12, "29f1b1795ae4392617cb7100b340af15"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @multicast2}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x2, {{0x24, 0x4, 0x1, 0x7, 0x90, 0x65, 0x0, 0x10, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010102, {[@generic={0x94, 0xb, "8cbb325c8dfc07e9ee"}, @lsrr={0x83, 0x1f, 0xc2, [@local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty]}, @timestamp_prespec={0x44, 0x34, 0xec, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x19}}, {@loopback}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0xffffffcf}, {@loopback, 0x5}, {@empty, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0x13, 0x3, 0x6, [{@loopback, 0x80000000}, {@remote, 0xa08}, {@remote, 0x8de}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x1, 0x5, 0x4, @empty, @empty, 0x7800, 0x8080, 0x8, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0x1, {{0x10, 0x4, 0x0, 0x5, 0x40, 0x67, 0x0, 0x2, 0x2f, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0x3, [{@loopback, 0x4}]}, @rr={0x7, 0x1f, 0x81, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0xf7, 0x0}, @empty, @multicast1, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x2b, 0x0, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x3ac, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x4c4, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x29c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x57, 0x9, 0x8, 0x4}, {0x202, 0x4, 0x3, 0x5e}, {0x9, 0x4, 0xbf, 0x7}, {0x7, 0xff, 0xfc, 0x6}, {0x3, 0xa, 0xcb, 0x6}, {0x9, 0x9, 0x6, 0x377}, {0x9, 0x35, 0xb, 0x3}, {0xfff7, 0x9, 0x3, 0x8}, {0x2, 0x4, 0x6, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x4c4}}, 0x8004) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x787c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x5, 0x0, r14, 0xad, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000d40)={'tunl0\x00', r5, 0x700, 0x7800, 0x5, 0x39b, {{0x1c, 0x4, 0x0, 0x1, 0x70, 0x66, 0x0, 0xa, 0x4, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x13, 0x3, [{0x1, 0xd, "07b9ebbc6aca471861f20e"}]}, @cipso={0x86, 0x49, 0x0, [{0x0, 0x6, "5c1a153e"}, {0x2, 0x10, "03dc95939838bb89e9b3c3c41d7d"}, {0x7, 0x4, 'Eb'}, {0x2, 0x7, "2e92f3df0c"}, {0xd4a83a150a9a58f1, 0x7, "5a5d55be3a"}, {0x5, 0x10, "90bc005c334c0801dd3df42f3d7c"}, {0x2, 0xb, "59d7039a22108232d9"}]}]}}}}}) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000002c40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000481}, 0xc, &(0x7f0000002c00)={&(0x7f0000000e80)=@newtaction={0x1d7c, 0x30, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{0x17f8, 0x1, [@m_skbedit={0x128, 0x7, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0xd0, 0x1, 0xf3, 0x81}}]}, {0xe4, 0x6, "0ec41163268cc94ec43e2db0956b5106b3db2aeb0546a609af874dfe7292970a9d20a307d252268db496c57ee29f11e8397ccbafe19727588258cf5e29f377a3e3e858b2f8e14c36db161ab2c943035e498452680b71e9b6d0e31bae5fdf7951a27d5b2e451ab41ab2a88edddea8d5193d788a39648c3c66e46fff91ba0b9daa9dab4ced2077986ce8295f8fa9dcd7b6bd36008036e200efd02dad23a251b0fdafd51580621aa15a22b20fed68210f14b134fb4c067fcefab69d07fc0f95f3ffe81627cf96870ae3ac2b646c53a6ccf9fb6b2d8cca45a547c8fffa40b11031b9"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x16c, 0x6, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x0, 0x1, 0x81}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x1, 0x6, 0x2}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2197, 0xfffffffffffffff1, 0x41, 0x6}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xa, 0x6, 0x401, 0x80000001}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x10000000, 0x0, 0x6}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x653, 0x8000, 0x2, 0xff, 0xb33}, 0x26}}]}, {0x96, 0x6, "7d453078bc18e348174f7eb0db936a16397ef19b2f0db8a8b185ebfb2f58cbabc72966a5f6fd31aee4c6415dc9d91255dc539175fbb8529551511d08e2f2a3216557a0d6e69c06a247532cbce22a1f1c843847968b962bf7ee80510b013ed87a0c6d2fac2278fe5768a8aff71a85014cc4b19e3b52983339ecdeaacb68a0539e3aa70266f1422f4b1c983ec0d30a81746742"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x1c4, 0x2, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x984b, 0x200, 0x4, 0xb, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xd4, 0x4, 0x1ff, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x5, 0x3, 0x8}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x3, 0x0, 0x40, 0x785d}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x90fe, 0x57, 0x0, 0xffffffff, 0x5}, 0xc7a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x909, 0x3, 0x6, 0x2, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x71d7, 0x8, 0x7, 0x3}, 0x6}}]}, {0xcf, 0x6, "d8e456f28f1d0df303dbcb68f9355781ea4633ac74f0622b04dae27f11ccb7aeb0092fd8a67d2b76e4f316e94106fc989af2e09082ef7391b06137f63ba154f4b3ab67ddc977320139202ee083eff3b0148ff0ee0c015fa53090db8ca7bf942568b0590253cece22546ee239aea8b121b3b5af11e5ea2763b2f29281d1b1f1bac2f4fa89d1888b2256d1ed0b5e8955f962be3537c57e89254eea5be3215525f5c5c19e2fa2675a13e367bad0a7a9ece2f434114f2db2210bd060c29b1bffefbe048575d9e49dfa71a09e47"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x1068, 0x6, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4f, 0x5, 0x3, 0x401}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_IFE_TYPE={0x6, 0x5, 0xb}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x44, 0x1a, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8, 0x1, 0xab, 0x40}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x88, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfd6e}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff3}}]}, {0x49, 0x6, "d9cee798aca1ec76a2bb9aaedf278a97927cdeb7788b968dc7a410b5ca42dd8bea015bc5520cf94db0b7f4738143e153ff8a1c3ead073b7151cb77368bd600dab4fd1f45c0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x128, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0xfa, 0x6, "14ca6c2f17800dc705512120622bbf0f2a0bb3b79fef34fc9c3d95559b6494ec111c3151bc024114b3e5eff3a2dbf650dc643b3acc636a6c8a17871bb4366a2c28fa0e3322fda7be9cf538185a448aadee3ca659f2baf205b833363aa3cf658c72ed5f038918388b2549b3b4f31ea40638885569b7b073a49ea6ed7ff790e2092bdcebe5c9e0c16e4ea8d050466000c7220a8a6190d4c039666d0dc805ae6e9cd99c24acd4e2a60f9eba7c4c3b7716180898e305cf52bf862c0f7e908a5697f21172c0f71dd121a456cefa073bf4b6780e020d5a1ba60371a5764e0fbe674fdf61d8005d29480c3c503631858ddbfd369b098c174677"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x140, 0x20, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0xca, 0x6, "b894efcdb555bec18c5380bdf9ed5e5e76104c4985a02df142aa1aee5984df185f6e2a8e5c31dbe1fe80f340b7d04e34302fe5b07a05ec78d393ed842f845aab0321830129ec07de8d6c2693b9cfa03cfdd347435cd5be2a55f03bda62fafba0a1a50047602381a53cf79f093d0370e67ddeaf5026ee2998f1ae22e2281e01e59d850c5f952c1bdee9134a6801a3422ad23e92f1a91c4c6d6a45019831cfa7e9eb303c3f2c0911a642bbb27f2173c837176fd63e6746f583e8b3fadc324a7a6603e205b7483b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x570, 0x1, [@m_bpf={0x108, 0x16, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0xfffff000, 0x10000008, 0xfffffff7, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x8d, 0x6, "ef90f7c6f74cdc6c83945aa2da7fccb13f76dbc995d9815079f23083af2c234b094b86fe65edb10d53b6467ea6d25bb050ba6cb2e8894f35e606930b21e5fcb9d9efc09023e8227eef7ea2e9579b8a8d221bbf29cc2da7b060323f83234eb1ec012f776460094e1b7a042ccde7e54175a01129eb24a053815a38cd53c2669049995f33afb98810c8de"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x128, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff3}]}, {0xf4, 0x6, "e21b614aca18160ffb28e4ddfa57f707ed64cd436145ac2d99d9424214fe4353167aa3d02f20e64312b310dda5e16a70d98b8a058714ba1d2c77936937644bad4a7be47783f1393bcafaa4a6ec5f20faa38120f5b8ef5e6068d9615b110b5dfe2d07cb7a3e1dbe004284e62b2e20d84828244d5a36180daae0ea28170d4bd10398665ce723dcb8c3baed51e92db37149b8770cfa042e28a35001d740ca837133913e26166d9d0cbe01f8e2dc1e0dd46a0d92bf4ccd4cbe5467f8bdd9b25793ab2882737d18bb2b52f3b1d06703610f95d49043faca9b98f0f35832a6dda86d666f224d27bc216eec6ee88ed474fa19f0"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x148, 0x9, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x3c8, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xfffffffb, 0x2, 0x6, 0x8e}}]}, {0xf7, 0x6, "280d494bac25db1b3b046605d09a20fbf4f72e379abfd0fef4b8a4fdae9a76c3fc0cad090a750ca8a9bc3fc3ff1b4137275beae600ee7ecca85b54d70dfcd4c194902c543300493b5714902b69f965b0bf9341a1d4867ea1968185876cedcf7b7f183c8b041faa6075487688ae79be24257a44a8d51d82a55bfb04dfbfae116c9ae81296663a391bd1959b27038eef32b193b90f28724bf82233dc55f48f956e95e686ad300b3de9f09ab675b9b56fb90211ca4faa8a10368b5a2a79169b5847254f1114a933aa4aec711ef22654d5a0ea6acbfad23c30783c71702c2c4be7ad133b068a12993b991c3df5d9b9468bc4da469c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x0, 0x0, 0x0, {{0x7}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe5, 0x6, {0x401, 'security\x00', 0x40, 0xfffc, "0caa433cc58b3b59aa1e3c7807b0466d3b1436fbbb7c8b89f30932e089f99032e6e77bf8dd9792caecfd834a937aa9c31fece55b74a4a987c1e64873d47ac0e2c862908412112a91b2a9d3f6cf36731efef408227ec8db74d7a7a9bd8ebe3d50159cfafa73a6d966c327acbbfdf44a3dca3fe1d376d4838e207c4cc15e989c68df782e4934dcd1a94680ca98cd29d0d5869dfbbdd8225336eaa9302d6595956b2d24d16e184ed59ab257cf6062c3ac8085a982aa1169d3d23773a3"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xb5, 0x6, "26c32a162d2ec7fa8d84c79f944c396ffc3ca8f3e8d97f2a4869d8e9d9b19544432c291e1d45dfc95425ced9b0a5e64d4f6c809741057f3f221e9daee2d5f720df2b0208502fad864cd22c86c4b3d5218876199d018b16ab84e801611723b86131da9f1ff58b31098de80930549df0b56bc8a8241f73c0ebbfe8423259d5693faf71bde55b200dfe524639004a0336bd5a5509984ee7c24124973beb5f6244bbf2ac1e7f81e094a9e2423fe8470213f59e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1d7c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d80)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x5, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x30}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x40}, {0x3, 0x0, 0x8}, {0x3, 0x7b8, 0xa}], "15"}, @datasec={0x4, 0x5, 0x0, 0xf, 0x3, [{0x1, 0xba48, 0xff}, {0x3, 0x0, 0x476}, {0x2, 0x3, 0x9}, {0x5, 0xffff, 0x7f}, {0x2, 0xfffffffa}], "f1633d"}]}, {0x0, [0x61, 0x2e, 0x30]}}, &(0x7f0000002d40)=""/30, 0xb5, 0x1e, 0x0, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=@bloom_filter={0x1e, 0x9, 0x3, 0x800, 0x820, r14, 0x1, '\x00', 0x0, r17, 0x4, 0x3, 0x4, 0xb}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002ec0)=0x0) recvfrom(r0, &(0x7f0000002e40)=""/94, 0x5e, 0x10000, &(0x7f0000002f00)=@nfc_llcp={0x27, r18, 0x1, 0x1, 0x7, 0xf0, "86b2f9e8ea2d52502c85f69f4bb88fe99e52c605418d9987491e3869b096e17054a631fc8aa8ba6fbdf06cf86b2e13a0756ac5f03f831aa65251d784c6e922", 0x6}, 0x80) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r19, 0x894b, &(0x7f0000002f80)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c854}, 0x40000) r20 = socket$inet6_sctp(0xa, 0x821d4220c6e026e2, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r20, 0x84, 0x71, &(0x7f0000003100)={0x0, 0x8}, 0x8) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000003140)={0x3, 0x3, 0x2}) 1.501003544s ago: executing program 0 (id=9824): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'veth0_vlan\x00', {0x10001}, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80480388}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000020701040000000000000000070000040c00064000000000000000040c00064000000000000000092c000780080001400000007908000140000100000800014000000001080001400000000408000240000098860c00024000000000000001ff0900010073797a31000000000900010073797a30000000000900010073797a310000000071ea4765ff61bce6ea5568e559fd91efffcc422b80d81f63a8ca6ce762abfc4e543363b52299fe84972c5466226957d2cc94b63e3c73de1a3ab978f04b332955e09ce49c1e42"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) 1.304499442s ago: executing program 0 (id=9826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0xfffffffc, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_getmulticast={0x14, 0x3a, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78) (async) getsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000400)=""/173, &(0x7f00000004c0)=0xad) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) 1.181109208s ago: executing program 4 (id=9827): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x8048802) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x8048802) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) syz_emit_ethernet(0xe1, &(0x7f0000000780)={@broadcast, @multicast, @void, {@generic={0x11, "1b5c3c9968ab3c85e7a69716ddaaa883e82fe6915bed57741de07252922cc03adbef96cd3c4006b60064ffec5cfcafd7ee2b7d10df3abf7d72d755cc5c6f10bdbe0a4660d8b77904ebf2728ae28446de3cf7988521fab8c071a8e2c61b14cd385a758e0dbba48023dd050866eda510441409824419efe2211534cc733852afe4014e8ca8e940460787852353ea2a1817daa4dcd2bd23349ecccf718f87f2568666a86ffb32fc556184e7079ed27f25acdff6c2debed916768a792cfce5c8bbdfff7c0de4b159163426fc5aa3c1620a5578d219"}}}, 0x0) (async) syz_emit_ethernet(0xe1, &(0x7f0000000780)={@broadcast, @multicast, @void, {@generic={0x11, "1b5c3c9968ab3c85e7a69716ddaaa883e82fe6915bed57741de07252922cc03adbef96cd3c4006b60064ffec5cfcafd7ee2b7d10df3abf7d72d755cc5c6f10bdbe0a4660d8b77904ebf2728ae28446de3cf7988521fab8c071a8e2c61b14cd385a758e0dbba48023dd050866eda510441409824419efe2211534cc733852afe4014e8ca8e940460787852353ea2a1817daa4dcd2bd23349ecccf718f87f2568666a86ffb32fc556184e7079ed27f25acdff6c2debed916768a792cfce5c8bbdfff7c0de4b159163426fc5aa3c1620a5578d219"}}}, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200403afffe8000000000000000000000000000bbff0200000000000000000000000006df03019078000000006945414380000000fc020000000000000000000000000000fc020000000000000000000000000000890000000000000098efd03a7e60b623"], 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200403afffe8000000000000000000000000000bbff0200000000000000000000000006df03019078000000006945414380000000fc020000000000000000000000000000fc020000000000000000000000000000890000000000000098efd03a7e60b623"], 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000700)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100, @val=0x80}, "83"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x70, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) 1.063767429s ago: executing program 2 (id=9828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x20, 0x140f, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x50040) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e"], 0x90}}, 0x4) (rerun: 64) 1.053164079s ago: executing program 3 (id=9829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x90}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x44004004) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_FLOW={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000050) (async) sendfile(r3, r3, &(0x7f00000002c0)=0x4, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x3, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8000, 0x0, 0x10000}}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe0, 0xa}, {0x0, 0xb}, {0xd, 0xb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x80) (async) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f00000004c0)=0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r7, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20040004) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r9, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6f72}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7f}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x73}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xb46a}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000054}, 0x200000c4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@private1}}, &(0x7f0000000900)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x100, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x76, r5, r11}, {0xd, 0x6, 0x1, 0xb0, 0x8000000, 0x1, 0xfffffffffffffff2, 0x3}, {0x9, 0xfa, 0x7, 0x80000000}, 0x7, 0x6e6bc0, 0x1, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4d3, 0x2b}, 0x2, @in6=@private0, 0x3501, 0x4, 0x1, 0x7, 0x2, 0x92, 0xfff}}, 0xe8) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r13, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008084}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000b80)='wg2\x00', 0x4) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000bc0)={0x3, 'ip6tnl0\x00', {0xbb}}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000c40)=""/108, &(0x7f0000000cc0)=0x6c) (async) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000d00)=0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r13, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x840) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r7, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 900.636024ms ago: executing program 3 (id=9830): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(r0, &(0x7f0000000040)='4', 0x1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x200) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)}, 0x4}], 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0) (async) recvfrom(r6, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000f6d3f7b37e5e06ad046b0ea24aeb8fb77bb4adcc80b2d813e0ac90c00938c5b423366911e629c4522455357adca24180f995f1de91dd00f9c663c3a8f73e0e56368db564b72ed3481e3b14812850663bdba0f91de5057e39129cf614479031047635e54fec812d56e7ee80b6666c9ced0f63658f563560b59bb252809f2b7024935656628f38ad8c501e1212374bb52846a1c8546e37", @ANYRES16=r4, @ANYBLOB="cd3e000000000000000001000000"], 0x14}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000ad890947e758e5b29f39249ead001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00"], 0x6c}}, 0x0) tee(r2, r1, 0xffffffffffffffff, 0x2) (async) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffde1, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r11, 0x0, 0xcd, 0x1000, &(0x7f00000004c0)="61182e5c089a631e4eddb0a58c88354eb1b048c0851b7defc10f6cd45ed6522a29a325fed68d7430898370b5eb61552f14171350f8d39bdd49668baf137138d1a829e495d22ec835bd72a80c53d62ccbb7c2258963c459d5e9f5fde9a93ffacf36517a70975aa0125d453d5243f0aeab60d292007718e6bcd8d74c4cb40ea87c4377f71d966baad0ec3241ad94973dd1cfa8164ec2c20aa1c50c6a558fe0726048ecf0a7f36d620a0c0a8a8518a378eb1b56cbd33310aaded1d4fd3c1926cc19e57a3c68ef0133d855f9a524fb", &(0x7f0000000780)=""/4096, 0x0, 0x0, 0x21, 0xa1, &(0x7f0000001780)="d096951d222ed8346e4bf08a576555c6688f0525f448429c7859327a571b2ee09b", &(0x7f00000017c0)="284534e206f457acfe971139eb53a67cf36e87116430cca475b26ce0bc53126a5458242a0be0950f9116cd0820f74e0b3a7f45abfcd5b71492b4d498a68702f93593713b0b6d2021645c308c062639a7675c1d959317a322aaba04c76264f116059e76f8b8649790843a295d65c42ec772bf70c992aeb27cd2b6ce6242e94dc2497d7edf4b6a495ebdc9a64574cf2a7a0b2522b66680b3fdb240ae9cfa3d98b88b", 0x7, 0x0, 0x2}, 0x50) (async) r12 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000180)={r0}) 803.253558ms ago: executing program 0 (id=9831): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="6800000010000100"/20, @ANYBLOB="00000000000000e5000012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000127463e908fa1ef500", @ANYBLOB="4fbd66e559bc5f2c5ebbf9f14b91a4513006161887ad89a2c016b997c0be138e690a0b98fc17eb4757abd61b13eb30bc65873b17cbff3169ce0ba0757d122a3c15098ec4bd7c4ebf7c799da0b7a7058e89c55c6016869ebbd39f2a5f979861857c335c"], 0x68}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8580, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x5820}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x5820}) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x10, 0x0, 0x0, 0x0, 0x1, 0x2}}) unshare(0x20000400) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001100)='ns/pid_for_children\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000400)={r2, &(0x7f0000000100)='veth0_to_hsr\x00', 0x40c080, &(0x7f00000001c0)={@align=0x6, {0x1000, 0x5, 0x5, 0xb}}, 0x8, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pi6 \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r13}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r14}, &(0x7f0000000300), &(0x7f0000000340)=r13, 0x1000000}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pS \x00'}, 0x20) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00'}, 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000a40)={r5, &(0x7f0000000940)='/\x00', 0x80040, &(0x7f0000000980)={@align=0x3, {0x2, 0x5, 0x8, 0x7}}, 0x9b7e, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x7e0}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000a40)={r5, &(0x7f0000000940)='/\x00', 0x80040, &(0x7f0000000980)={@align=0x3, {0x2, 0x5, 0x8, 0x7}}, 0x9b7e, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x7e0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4ad4, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0xb5, &(0x7f0000000580)=""/181, 0x40f00, 0x1, '\x00', r1, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000a80)=[r8, r10, r11, r12, r14, r15, r16, r17], &(0x7f0000000ac0)=[{0x5, 0x5, 0x6, 0x8}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x4, 0x2, 0x7}, {0x5, 0x4, 0x10, 0x6}, {0x2, 0x2, 0x7, 0x2}], 0x10, 0x401}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4ad4, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0xb5, &(0x7f0000000580)=""/181, 0x40f00, 0x1, '\x00', r1, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000a80)=[r8, r10, r11, r12, r14, r15, r16, r17], &(0x7f0000000ac0)=[{0x5, 0x5, 0x6, 0x8}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x4, 0x2, 0x7}, {0x5, 0x4, 0x10, 0x6}, {0x2, 0x2, 0x7, 0x2}], 0x10, 0x401}, 0x94) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) (async) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 782.770443ms ago: executing program 4 (id=9832): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 581.709514ms ago: executing program 1 (id=9833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) 579.401896ms ago: executing program 3 (id=9834): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x1fc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYBLOB="c387f644d082"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000f14e0ff48bd7000fadbdf25080003000400000008000100000000008cf4787c98a112a685111e822f3910050281fb3308b33d0a21ac"], 0x20}}, 0x50040) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x4, 0x66, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x3) accept4(r4, 0x0, 0x0, 0x800) listen(r4, 0x0) shutdown(r4, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200001004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$can_j1939(r5, &(0x7f00000002c0)={0x1d, r7, 0x0, {0x1, 0xf0, 0x2}, 0xfd}, 0x18) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x401, {{0xa, 0x4e24, 0x7, @private2, 0x4}}}, 0x88) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r8, r9, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8090) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 578.131212ms ago: executing program 1 (id=9835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000001c0)="69be1199", 0x5ea}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b80)=@xdp={0x2c, 0xa, 0x0, 0xf}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8000) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000dc0)) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x20002001}, 0x4008080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x34}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4d}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x10, 0x17, [0x400, 0x5, 0x5]}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0x9}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 575.238903ms ago: executing program 0 (id=9836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a0003007665746830000000340012800900010076657468000000002400028020000100000000000000000000000000000000000a00030076657468"], 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x40, 0x0, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40e5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x1) 574.236503ms ago: executing program 4 (id=9837): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4001) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x6}, &(0x7f0000000140)=0x8) 471.778641ms ago: executing program 2 (id=9838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x41, 0x800, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x8, 0x126, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x7, 0x15b, 0x0, 0x0, @str='Y-\x00'}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 471.529836ms ago: executing program 4 (id=9839): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 394.013629ms ago: executing program 1 (id=9840): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r2, 0x1, 0x6, 0x4}) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xf}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {0x0, 0x9}, {0xe, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "92590442e4c3557df72af5a9f69d0ddc"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc011}, 0x20040054) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000017bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8, r7}, 0xc) (async) sendmmsg$unix(r2, &(0x7f0000007600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4084}}], 0x1, 0x24008890) 299.14344ms ago: executing program 3 (id=9841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a310000000028040480080002401886c3010800014000000005140003006d61637674617030000000000000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000003c0)={0xfffffffd}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r13) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010007000000440b00000600000088a8000014"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r15, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) 244.839029ms ago: executing program 4 (id=9842): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@empty, @broadcast}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r7 = syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') r8 = getpid() sendmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r8, r5}}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r10}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipmr_delroute={0x4c, 0x19, 0x200, 0x70bd27, 0x25dfdbfc, {0x80, 0x20, 0x14, 0xf7, 0xfd, 0x2, 0xff, 0x11, 0x1b00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @RTA_UID={0x8, 0x19, r5}, @RTA_UID={0x8, 0x19, r10}, @RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_OIF={0x8, 0x4, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4008824) listen(r0, 0x8) r11 = accept4(r0, 0x0, 0x0, 0x0) write(r11, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r11, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r12, @ANYRES32=r12, @ANYBLOB="04"], 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113b00000000008510004002000000850000000000000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000000c0)=[{0x614, 0xa, 0x5, 0x4}, {0x2, 0xc2, 0x6, 0x9}]}, 0x10) 194.619426ms ago: executing program 2 (id=9843): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x88}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES8=r0, @ANYBLOB="0000000000000000000000aa8265e4e510ddfb2f", @ANYRES32=0x0, @ANYBLOB="657f49a98c23396039e4c6aa6db8aedcd0fd213e2c6a16de478e86f959b88e447497ec9e2ea590ed2f73c7ef6d90364bf73d5a5b04c22439fe7ce589c33f75fe671bf70aa69af670f7e1ee08f717d892e43e669c4be34fa78abfbc95a75bdbff60793609c06dd3c7001575f141fe645703bd87184af8e36512469cf6332aa3e83f877fb879578c4a0d70ca7834947548faf1c84c324643135de9ba4ad34ba82267c80c40cd7a050733c61910a0fac6a0c57db266befb8a4018a56d4cd7d8593499e30ba23590239ca0fa47ce1dcac1823e5797fb28185848372779df25e74167267008c0", @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000003000)={&(0x7f00000004c0)=@isdn={0x22, 0xf, 0x4, 0x0, 0x8}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="8a2058", 0x3}, {&(0x7f0000001c80)="8ecda2b6d471f362262a8aa383e3b03192d50178b70399e7c103e9800e3b6105a740bdbffff8fc87ae1aeb954b3bcb6be2f13e2367ced42c0f0f6d3abfd2df214f9412ba44a4871921630e7c41b5caac807c5f24b446ea011f", 0x59}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="0248007fdfdafed8f75c73dd11d5ee130228", 0x12}, {&(0x7f0000001d80)="06f5097ab2628713570fed51e04c6c667d11f6a41323f9ab4c6579c4f7a59e61d6895682c0669ca7ce0777fd0941fdc4207304c5c13df3f6aa6d6ead520b63837315fdbd2d4f145221b099c03d9bccc5af0d1cf7500224923194136dc97efc13fccfa92aa8177c4e6327d1338d7bed9a53b17712e3322bed723857047aaa62c231f9ac94573c2c0c6e5d6000844f956d79da86c66ebc19be968097fe7a421993d0da45f765c258fba41d4c5cc492a5949de35df7454e2f3a90e1cbef8439c1f7b216692d778512569d2eb677ac96d2648915c088139411c8b8ad13a22d0ced42c2839024cfb0e8558694562ab08d49042434098155", 0xf5}], 0x6, &(0x7f0000001f00)=[{0x1010, 0x115, 0x5, "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"}, {0x28, 0x88, 0x9, "4ff0235064c88653c99ba73d771e973ffbac2dd5c327"}, {0x98, 0x113, 0x0, "618507a6a58278241476dd9e26c44b76eca21f0fc81fb517924c44a0d7f19afe72a959a2ca85a6a761ceb3a08cf40913571eb1e00fe9a56f37261911fb4051637830e70155df4db7cc68bd02e9fee919e99454a68e174b144d0a7ce6fd27ae5d24112bc7e29164bfa7e85596d243cba61eb9cc1a3a20eed7f93a89662cc7fbeac773"}], 0x10d0}, 0x4000) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 162.783965ms ago: executing program 4 (id=9844): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711019000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = socket$unix(0x1, 0x1, 0x0) accept(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x80) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848150000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) 13.79327ms ago: executing program 0 (id=9845): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000038f030000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000800)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x20, 0x0, 0xc, 0x1ff, {{0x18, 0x4, 0x1, 0x8, 0x60, 0x65, 0x0, 0x75, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@lsrr={0x83, 0xb, 0x47, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3a}]}, @lsrr={0x83, 0x7, 0xb7, [@broadcast]}, @timestamp_addr={0x44, 0x34, 0x4b, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@broadcast, 0x8}, {@loopback, 0x8000}, {@broadcast, 0x3ff}, {@empty, 0xfffffffa}, {@multicast2, 0x20}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @mcast1, 0x80000000}, 0x1c) (async) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) syz_emit_ethernet(0x81, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x4, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281"}]}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="c5a500429b3aaaaa2aaaaabb0800454800f1006600000311907800000000e00000014e1f4e20000c907801060001"], 0x0) 0s ago: executing program 1 (id=9846): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="0700100025216bb21c0012000c00010000000000000c03a5fbe2000208000100012000002aabc0ed9f21fd99ee68070e9de9df29abf80e051d2c1dd666f82b3dd9dd9f3057ef9e5f620a2a4075017927c22a4c6efa1807ac9dd09ca98b7ea1da3cc5c20b696a6a9136d561e3c5156bd4ed7eb39d25f5390fcf5e37cddc35d172f331b5e0da07a11ab95f7e81bdf45392fe38507480e0a905604323a50d5b1c5ca8d02965a28df60d5b0f5f8174e9bafec5d782bd7328e1ca9df0739993a01e8f73a65dda63c90a9be26c54941e3841228d3472141f9fe96fc481815038366808081a18ecf05eddb1"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0xc0, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'vxcan0\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0147f3398f4fb4931076484b581085c2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "00000000000000000000000002abdfd3"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6gre\x00'}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0xc0}}, 0x0) kernel console output (not intermixed with test programs): 01 failed: -22 [ 1236.612897][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.619539][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.626362][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.632861][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.639971][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.651628][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.661801][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.671917][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.678309][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.691991][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.702019][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.708391][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.717161][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.724613][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.731858][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.740627][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.746646][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.746919][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.747207][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.747432][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.747625][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.747814][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.748014][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.748236][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.748433][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.748624][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.748819][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.749033][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.749289][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.749859][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.750102][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1237.102496][ T7229] netlink: 'syz.4.8437': attribute type 1 has an invalid length. [ 1237.217306][ T7234] rdma_rxe: rxe_newlink: failed to add dummy0 [ 1237.805501][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1238.013742][ T7278] syzkaller0: left promiscuous mode [ 1238.020590][ T7278] syzkaller0: left allmulticast mode [ 1238.505728][ T7302] __nla_validate_parse: 14 callbacks suppressed [ 1238.505793][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8459'. [ 1238.668281][ T7314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1238.824073][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8463'. [ 1239.001518][ T7322] netlink: Conntrack attr has 4 unknown bytes [ 1239.001584][ T7322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1239.059486][ T7321] ip6gretap0: entered promiscuous mode [ 1239.059522][ T7321] ip6gretap0: entered allmulticast mode [ 1239.640626][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8473'. [ 1239.654404][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8474'. [ 1239.664766][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8474'. [ 1239.754925][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8475'. [ 1239.812762][ T7365] netlink: 'syz.1.8476': attribute type 11 has an invalid length. [ 1239.885589][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1240.162230][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8481'. [ 1240.176742][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8481'. [ 1240.318375][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1240.450310][ T7395] hsr_slave_1 (unregistering): left promiscuous mode [ 1240.470979][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8487'. [ 1240.828252][ T7419] netlink: 'syz.1.8492': attribute type 1 has an invalid length. [ 1241.092614][ T7434] netlink: 'syz.1.8498': attribute type 1 has an invalid length. [ 1241.092663][ T7434] netlink: 'syz.1.8498': attribute type 1 has an invalid length. [ 1241.401992][ T7455] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1241.442760][ T7459] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1241.538356][ T7465] gretap0: entered promiscuous mode [ 1241.560714][ T7465] 0ªî{X¹¦: renamed from gretap0 [ 1241.580383][ T7465] 0ªî{X¹¦: left promiscuous mode [ 1241.587017][ T7465] 0ªî{X¹¦: entered allmulticast mode [ 1241.595687][ T7465] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1241.845266][ T4373] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.854423][ T4373] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.864363][ T4374] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.969459][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1242.613733][ T7521] netlink: 'syz.4.8521': attribute type 1 has an invalid length. [ 1242.669594][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.670369][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.711769][ T7516] vcan0: left promiscuous mode [ 1242.998148][ T7516] macsec0: left allmulticast mode [ 1243.008105][ T7516] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1243.163223][ T7516] xfrm0: left promiscuous mode [ 1243.163274][ T7516] xfrm0: left allmulticast mode [ 1243.164249][ T7516] gtp1: left promiscuous mode [ 1243.164266][ T7516] gtp1: left allmulticast mode [ 1243.169373][ T7516] bond3: left promiscuous mode [ 1243.169396][ T7516] bond3: left allmulticast mode [ 1243.222710][ T7516] bridge1: left promiscuous mode [ 1243.230480][ T7516] bridge1: left allmulticast mode [ 1243.242908][ T7516] bridge2: left promiscuous mode [ 1243.248798][ T7516] bridge2: left allmulticast mode [ 1243.271757][ T7516] bridge3: left promiscuous mode [ 1243.277614][ T7516] bridge3: left allmulticast mode [ 1243.324702][ T7516] veth5: left allmulticast mode [ 1243.334979][ T7516] vlan0: left promiscuous mode [ 1243.342156][ T7516] bridge0: left promiscuous mode [ 1243.444605][ T7521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1243.457991][T20427] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.458049][T20427] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1243.458100][T20427] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.458151][T20427] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.458180][T20427] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1243.458209][T20427] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.458252][T20427] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.458280][T20427] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1243.458307][T20427] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.458348][T20427] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.458378][T20427] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1243.458408][T20427] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.562513][ T7525] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1243.597330][ T7526] bond6: entered promiscuous mode [ 1243.597376][ T7526] bond6: entered allmulticast mode [ 1243.620204][ T7532] macvlan4: entered promiscuous mode [ 1243.620237][ T7532] macvlan4: entered allmulticast mode [ 1243.624619][ T7532] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1243.659327][ T7551] __nla_validate_parse: 41 callbacks suppressed [ 1243.659397][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.680692][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.680878][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.681029][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.681187][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.681322][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.681455][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.681587][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.681725][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1243.681869][ T7551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1244.045465][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1244.245379][ T7591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.434618][ T7596] netlink: 'syz.2.8537': attribute type 75 has an invalid length. [ 1244.511259][ T7602] netlink: 'syz.4.8541': attribute type 1 has an invalid length. [ 1244.676789][ T7602] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1244.768675][ T7604] sch_fq: defrate 6 ignored. [ 1244.791955][ T7622] sctp: [Deprecated]: syz.2.8544 (pid 7622) Use of int in maxseg socket option. [ 1244.791955][ T7622] Use struct sctp_assoc_value instead [ 1244.827264][ T7608] bond6: (slave veth0_to_bond): Releasing active interface [ 1244.868277][ T7608] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1244.894899][ T7612] bond7: entered promiscuous mode [ 1244.900430][ T7612] bond7: entered allmulticast mode [ 1244.976600][ T7602] macvlan4: entered promiscuous mode [ 1244.976655][ T7602] macvlan4: entered allmulticast mode [ 1244.982949][ T7602] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1245.791550][ T7677] netlink: 'syz.1.8559': attribute type 1 has an invalid length. [ 1245.917352][ T7686] bond0: entered promiscuous mode [ 1245.917410][ T7686] bond_slave_0: entered promiscuous mode [ 1245.924685][ T7686] bond_slave_1: entered promiscuous mode [ 1245.928735][ T7686] batadv0: entered promiscuous mode [ 1245.933641][ T7686] debugfs: 'hsr1' already exists in 'hsr' [ 1245.933666][ T7686] Cannot create hsr debugfs directory [ 1245.950089][ T7686] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1245.957365][ T7686] bond0: left promiscuous mode [ 1245.957389][ T7686] bond_slave_0: left promiscuous mode [ 1245.957612][ T7686] bond_slave_1: left promiscuous mode [ 1245.971438][ T7686] batadv0: left promiscuous mode [ 1246.125555][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1246.523954][ T7721] netlink: 'syz.3.8568': attribute type 16 has an invalid length. [ 1246.663257][ T7726] team0: Device ipvlan0 failed to register rx_handler [ 1246.751130][ T7733] syzkaller1: entered promiscuous mode [ 1246.751190][ T7733] syzkaller1: entered allmulticast mode [ 1246.897054][ T7740] xfrm1: entered allmulticast mode [ 1246.912421][ T7740] netlink: 'syz.1.8572': attribute type 62 has an invalid length. [ 1247.106870][ T7765] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 1247.143221][ T7763] netlink: 'syz.3.8574': attribute type 10 has an invalid length. [ 1247.171877][ T7763] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1247.642559][ T7792] tipc: Enabling of bearer rejected, failed to enable media [ 1247.875639][ T7786] syzkaller1: entered promiscuous mode [ 1247.882360][ T7786] syzkaller1: entered allmulticast mode [ 1248.205620][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1248.384592][ T7814] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1248.589919][ T7845] netlink: 'syz.2.8590': attribute type 7 has an invalid length. [ 1248.594322][ T7845] netlink: 'syz.2.8590': attribute type 7 has an invalid length. [ 1248.709006][ T7845] bond8: (slave bond_slave_0): Device is not our slave [ 1248.717415][ T7845] bond8: option active_slave: invalid value (bond_slave_0) [ 1248.727160][ T7845] bond8 (unregistering): Released all slaves [ 1248.773123][ T7855] __nla_validate_parse: 36 callbacks suppressed [ 1248.773430][ T7855] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8593'. [ 1248.782386][ T7855] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8593'. [ 1248.782507][ T7855] 0ªî{X¹¦: renamed from gretap0 [ 1248.814649][ T7855] 0ªî{X¹¦: entered allmulticast mode [ 1248.832431][ T7855] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1248.966221][ T7869] sctp: [Deprecated]: syz.4.8597 (pid 7869) Use of int in max_burst socket option deprecated. [ 1248.966221][ T7869] Use struct sctp_assoc_value instead [ 1249.150983][ T7880] syzkaller1: entered promiscuous mode [ 1249.151037][ T7880] syzkaller1: entered allmulticast mode [ 1249.388011][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1249.651460][ T7899] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1249.675048][ T7900] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1250.078443][ T7910] netlink: 'syz.0.8609': attribute type 10 has an invalid length. [ 1250.152899][ T6049] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1250.165789][ T6049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1250.177454][ T6049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1250.195630][ T6049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1250.196327][ T6049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1250.285322][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1250.413167][ T6034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1250.413536][ T6034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1250.413851][ T6034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1250.416403][ T6034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1250.417065][ T6034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1250.718504][ T7931] netlink: 'syz.1.8613': attribute type 49 has an invalid length. [ 1250.786220][ T4362] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.792046][T20434] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.881026][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8612'. [ 1250.899537][T28469] bond0: (slave syz_tun): Releasing backup interface [ 1251.111682][ T7931] ip6gretap0: entered promiscuous mode [ 1251.118407][ T7931] ip6gretap0: entered allmulticast mode [ 1251.137556][ T7938] tunl0: entered promiscuous mode [ 1251.146530][ T7938] netlink: 'syz.4.8614': attribute type 4 has an invalid length. [ 1251.146573][ T7938] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8614'. [ 1251.221631][ T4362] dvmrp0: left allmulticast mode [ 1251.222203][ T4362] pimreg3: left allmulticast mode [ 1251.571909][ T7949] netlink: 'syz.4.8616': attribute type 2 has an invalid length. [ 1252.062159][ T4362] bond0 (unregistering): Released all slaves [ 1252.069311][ T4362] bond1 (unregistering): Released all slaves [ 1252.080844][ T4362] bond2 (unregistering): Released all slaves [ 1252.093615][ T4362] bond3 (unregistering): Released all slaves [ 1252.110399][ T4362] bond4 (unregistering): Released all slaves [ 1252.124460][ T4362] bond5 (unregistering): Released all slaves [ 1252.144538][ T4362] bond6 (unregistering): Released all slaves [ 1252.156564][ T4362] bond7 (unregistering): Released all slaves [ 1252.167933][ T4362] bond8 (unregistering): Released all slaves [ 1252.190078][ T4362] bond9 (unregistering): Released all slaves [ 1252.201970][ T4362] bond10 (unregistering): Released all slaves [ 1252.214695][ T4362] bond11 (unregistering): Released all slaves [ 1252.229152][ T4362] bond12 (unregistering): Released all slaves [ 1252.251161][ T4362] bond13 (unregistering): Released all slaves [ 1252.262233][ T4362] bond14 (unregistering): Released all slaves [ 1252.274999][ T4362] bond15 (unregistering): Released all slaves [ 1252.299376][ T4362] bond16 (unregistering): Released all slaves [ 1252.313662][ T4362] bond17 (unregistering): Released all slaves [ 1252.326101][ T4362] bond18 (unregistering): Released all slaves [ 1252.337283][ T4362] bond19 (unregistering): Released all slaves [ 1252.352285][ T4362] bond20 (unregistering): Released all slaves [ 1252.365701][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1252.380666][ T7927] syzkaller1: entered promiscuous mode [ 1252.381432][ T7927] syzkaller1: entered allmulticast mode [ 1252.445986][ T6034] Bluetooth: hci3: command tx timeout [ 1252.587632][T20427] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.587728][T20427] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.772944][ T4362] tipc: Disabling bearer [ 1252.773126][ T4362] tipc: Disabling bearer [ 1252.773261][ T4362] tipc: Left network mode [ 1253.140198][ T7912] hsr0 speed is unknown, defaulting to 1000 [ 1253.299124][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8625'. [ 1253.357738][ T7986] netlink: 'syz.1.8625': attribute type 1 has an invalid length. [ 1253.366136][ T7986] netlink: 'syz.1.8625': attribute type 2 has an invalid length. [ 1253.668113][ T7989] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.8626'. [ 1253.736348][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8628'. [ 1253.736386][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8628'. [ 1253.826553][ T7996] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1253.863986][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8630'. [ 1253.980227][ T8010] netlink: 'syz.0.8630': attribute type 3 has an invalid length. [ 1254.445345][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1254.525561][ T6034] Bluetooth: hci3: command tx timeout [ 1254.654409][ T8043] Cannot find add_set index 46338 as target [ 1254.892388][ T8056] netlink: 'syz.1.8635': attribute type 21 has an invalid length. [ 1254.906458][ T8056] netlink: 'syz.1.8635': attribute type 22 has an invalid length. [ 1254.917907][ T8056] netlink: 'syz.1.8635': attribute type 23 has an invalid length. [ 1254.926541][ T8056] netlink: 'syz.1.8635': attribute type 25 has an invalid length. [ 1254.934577][ T8056] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1255.469773][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8643'. [ 1255.469907][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1255.493729][ T8075] netlink: 'syz.4.8639': attribute type 1 has an invalid length. [ 1255.493780][ T8075] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8639'. [ 1255.513199][ T8073] vlan4: entered promiscuous mode [ 1255.587303][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.587514][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.587694][ T7912] bridge_slave_0: entered allmulticast mode [ 1255.588924][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8639'. [ 1255.589264][ T8087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8639'. [ 1255.590916][ T7912] bridge_slave_0: entered promiscuous mode [ 1255.594098][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.594202][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.594384][ T7912] bridge_slave_1: entered allmulticast mode [ 1255.598676][ T7912] bridge_slave_1: entered promiscuous mode [ 1255.782598][ T8082] netlink: 'syz.4.8639': attribute type 1 has an invalid length. [ 1255.782650][ T8082] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8639'. [ 1255.898000][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.898546][ T8089] syzkaller1: entered promiscuous mode [ 1255.898565][ T8089] syzkaller1: entered allmulticast mode [ 1255.911819][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.002271][ T8097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8645'. [ 1256.002326][ T8097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8645'. [ 1256.010617][ T7912] team0: Port device team_slave_0 added [ 1256.061036][ T8096] bond9: option lp_interval: invalid value (0) [ 1256.061073][ T8096] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1256.071376][ T8096] bond9 (unregistering): Released all slaves [ 1256.144049][ T7912] team0: Port device team_slave_1 added [ 1256.260874][ T4362] veth1_macvtap: left promiscuous mode [ 1256.268091][ T4362] veth0_macvtap: left promiscuous mode [ 1256.400157][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8649'. [ 1256.525992][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1256.605483][ T6034] Bluetooth: hci3: command tx timeout [ 1256.863115][ T4362] smc: removing net device team0 with user defined pnetid SYZ2 [ 1256.987577][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.987614][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.987658][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.049300][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.049346][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.049867][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.223505][ T7912] hsr_slave_0: entered promiscuous mode [ 1257.231643][ T7912] hsr_slave_1: entered promiscuous mode [ 1257.239181][ T7912] debugfs: 'hsr0' already exists in 'hsr' [ 1257.246306][ T7912] Cannot create hsr debugfs directory [ 1257.362431][ T8134] veth0: entered promiscuous mode [ 1257.511341][ T8132] veth0: left promiscuous mode [ 1257.758572][ T4362] IPVS: stop unused estimator thread 0... [ 1257.776807][ T8149] netlink: 'syz.0.8659': attribute type 39 has an invalid length. [ 1257.869285][ T7912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.869331][ T7912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.869391][ T7912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1257.887421][ T8147] netlink: 'syz.1.8657': attribute type 3 has an invalid length. [ 1257.934403][ T8153] tipc: Resetting bearer [ 1258.138664][ T8169] x_tables: duplicate underflow at hook 1 [ 1258.159186][ T7912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.175775][ T7912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.187374][ T7912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1258.400950][ T7912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.401022][ T7912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.401488][ T7912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1258.540128][ T8189] netlink: 'syz.1.8668': attribute type 1 has an invalid length. [ 1258.605499][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1258.694155][ T6034] Bluetooth: hci3: command tx timeout [ 1258.754785][ T8194] syzkaller0: entered promiscuous mode [ 1258.768084][ T8194] syzkaller0: entered allmulticast mode [ 1258.787692][ T8196] nbd: illegal input index -8454144 [ 1258.910335][ T4362] batman_adv: batadv0: Interface deactivated: gretap1 [ 1259.377245][ T4362] batman_adv: batadv0: Removing interface: gretap1 [ 1259.472883][ T4362] bond9 (unregistering): (slave geneve3): Releasing active interface [ 1259.491209][ T4362] bond7 (unregistering): (slave geneve2): Releasing active interface [ 1259.521353][ T4362] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1259.540475][ T4362] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 1259.549789][ T4362] bridge2 (unregistering): left allmulticast mode [ 1259.593478][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.608535][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.620486][ T4362] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1259.631532][ T4362] bond0 (unregistering): Released all slaves [ 1259.640303][ T4362] bond1 (unregistering): Released all slaves [ 1259.651951][ T4362] bond2 (unregistering): Released all slaves [ 1259.663224][ T4362] bond3 (unregistering): Released all slaves [ 1259.687046][ T4362] bond4 (unregistering): Released all slaves [ 1259.699849][ T4362] bond5 (unregistering): Released all slaves [ 1259.711974][ T4362] bond6 (unregistering): Released all slaves [ 1259.739376][ T4362] bond7 (unregistering): Released all slaves [ 1259.751759][ T4362] bond8 (unregistering): Released all slaves [ 1259.762805][ T4362] bond9 (unregistering): Released all slaves [ 1259.870313][ T4362] : left promiscuous mode [ 1260.061375][ T8218] x_tables: unsorted underflow at hook 2 [ 1260.069734][ T8218] __nla_validate_parse: 3 callbacks suppressed [ 1260.069774][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8676'. [ 1260.113300][ T4362] tipc: Disabling bearer [ 1260.129238][ T4362] tipc: Left network mode [ 1260.150839][ T8212] veth1_to_bond: entered allmulticast mode [ 1260.192599][ T8218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8676'. [ 1260.457045][ T8230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8678'. [ 1260.510713][ T7912] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1260.538728][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1260.589993][ T7912] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1260.613962][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1260.623061][ T7912] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1260.671496][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1260.684832][ T7912] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1260.685440][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1260.711773][ T7912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1260.866155][ T8228] veth1_to_bond: left allmulticast mode [ 1260.872814][ T8238] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 1260.873272][ T8238] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 1260.876397][ T8241] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8681'. [ 1260.930222][ T8241] bridge0: entered promiscuous mode [ 1261.136021][ T4362] hsr_slave_0: left promiscuous mode [ 1261.148491][ T4362] hsr_slave_1: left promiscuous mode [ 1261.149564][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.149585][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.164183][ T4362] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1261.164206][ T4362] batman_adv: batadv0: Removing interface: ipvlan2 [ 1261.213843][ T4362] veth1_macvtap: left promiscuous mode [ 1261.213911][ T4362] veth0_macvtap: left promiscuous mode [ 1261.214010][ T4362] veth1_vlan: left promiscuous mode [ 1261.214268][ T4362] veth0_vlan: left promiscuous mode [ 1261.293248][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8682'. [ 1261.894319][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 1261.912720][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 1262.090612][ T8254] veth1_to_bond: entered allmulticast mode [ 1262.109666][ T8258] veth1_to_bond: left allmulticast mode [ 1262.334956][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8687'. [ 1262.348366][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8687'. [ 1262.348442][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8687'. [ 1262.370351][ T8289] sctp: [Deprecated]: syz.1.8687 (pid 8289) Use of int in maxseg socket option. [ 1262.370351][ T8289] Use struct sctp_assoc_value instead [ 1262.382807][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8688'. [ 1262.711017][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.765419][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1262.783263][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.807877][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.808009][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.843119][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.843251][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.943656][ T4362] IPVS: stop unused estimator thread 0... [ 1263.052200][ T8308] Bluetooth: hci0: unsupported parameter 5161 [ 1263.052247][ T8308] Bluetooth: hci0: unsupported parameter 8192 [ 1263.052286][ T8308] Bluetooth: hci0: unsupported parameter 5161 [ 1263.052305][ T8308] Bluetooth: hci0: unsupported parameter 8192 [ 1263.054404][ T8305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8692'. [ 1263.250998][ T8319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1263.696522][ T8341] netlink: 'syz.0.8703': attribute type 2 has an invalid length. [ 1263.710877][ T8341] netlink: 'syz.0.8703': attribute type 2 has an invalid length. [ 1263.856996][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.952694][ T7912] veth0_vlan: entered promiscuous mode [ 1263.977729][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.977996][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.978196][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.978396][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.978627][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.978835][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.979032][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.983673][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.983909][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.984176][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.984391][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.984689][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.986833][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.987114][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.987348][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.987580][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.987868][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.988081][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.994142][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.994422][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.994648][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.994846][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.995737][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.995950][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.996248][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.996521][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.996815][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.997037][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.997260][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.997469][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.997679][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.998214][ T8352] netlink: 'syz.1.8706': attribute type 7 has an invalid length. [ 1263.998340][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1263.998545][ T8353] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 1264.013530][ T7912] veth1_vlan: entered promiscuous mode [ 1264.117757][ T7912] veth0_macvtap: entered promiscuous mode [ 1264.131089][ T7912] veth1_macvtap: entered promiscuous mode [ 1264.246422][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.286272][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.353345][ T8364] xt_hashlimit: size too large, truncated to 1048576 [ 1264.425620][ T4362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.425697][ T4362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.425753][ T4362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.425787][ T4362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.652979][ T8375] xt_hashlimit: size too large, truncated to 1048576 [ 1264.720544][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.720590][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.818665][T20434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.818721][T20434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.845640][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1265.229098][ T8406] __nla_validate_parse: 6 callbacks suppressed [ 1265.229168][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8715'. [ 1266.110538][ T8416] IPVS: Unknown mcast interface: nr0 [ 1266.301404][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8724'. [ 1266.479403][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8724'. [ 1266.492525][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8724'. [ 1266.533511][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8724'. [ 1266.799386][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1266.821691][ T4361] bond0: (slave ªªªªª»): link status definitely down, disabling slave [ 1266.877385][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1266.925346][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1267.349112][ T8502] ip6t_rt: too many addresses specified [ 1267.428618][ T8473] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1267.997644][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8741'. [ 1268.490921][ T8563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 1268.687502][ T6034] Bluetooth: hci3: command 0x0401 tx timeout [ 1268.713190][ T8574] ip6gre0: Caught tx_queue_len zero misconfig [ 1268.914362][ T8582] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1269.005374][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1269.017649][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8754'. [ 1269.092166][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8757'. [ 1270.098767][ T8653] netlink: 'syz.0.8767': attribute type 2 has an invalid length. [ 1270.457997][ T8672] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1270.460837][ T8672] bond14 (unregistering): Released all slaves [ 1270.641100][ T8678] can: request_module (can-proto-0) failed. [ 1270.822892][ T8690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1270.998201][ T8697] netlink: 'syz.1.8774': attribute type 1 has an invalid length. [ 1271.069736][ T8697] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1271.085536][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1271.557491][ T8728] netlink: 'syz.2.8784': attribute type 12 has an invalid length. [ 1271.557535][ T8728] __nla_validate_parse: 3 callbacks suppressed [ 1271.557570][ T8728] netlink: 468 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1271.580442][ T8735] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1271.829625][ T8748] netlink: 'syz.2.8790': attribute type 1 has an invalid length. [ 1272.008608][ T8748] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1272.083030][ T8755] bond7: (slave veth0_to_bond): Releasing active interface [ 1272.160350][ T8755] bond9: (slave veth0_to_bond): making interface the new active one [ 1272.179794][ T8755] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1272.250796][ T8761] bond9: entered promiscuous mode [ 1272.250845][ T8761] veth0_to_bond: entered promiscuous mode [ 1272.251085][ T8761] bond9: entered allmulticast mode [ 1272.251118][ T8761] veth0_to_bond: entered allmulticast mode [ 1272.332106][ T8748] macvlan2: entered promiscuous mode [ 1272.332158][ T8748] macvlan2: entered allmulticast mode [ 1272.343509][ T8748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1272.363699][ T8748] bond9: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1272.996227][ T8790] netlink: 'syz.4.8797': attribute type 8 has an invalid length. [ 1272.996274][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8797'. [ 1272.996326][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8797'. [ 1273.080658][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8799'. [ 1273.165919][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1273.382980][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8800'. [ 1273.617108][ T8818] netlink: 'syz.0.8804': attribute type 17 has an invalid length. [ 1273.617164][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8804'. [ 1273.617208][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8804'. [ 1273.631824][ T8818] erspan0: entered promiscuous mode [ 1273.637556][ T8818] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1274.060079][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1274.107465][ T8802] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1274.158828][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1274.204227][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1274.259552][ T8842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1274.815580][ T8868] bond10: (slave bond_slave_0): Device is not our slave [ 1274.815624][ T8868] bond10: option active_slave: invalid value (bond_slave_0) [ 1274.828102][ T8868] bond10 (unregistering): Released all slaves [ 1274.957799][ T8880] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1275.174428][ T8890] vxcan1: entered allmulticast mode [ 1275.191635][ T8892] x_tables: duplicate underflow at hook 1 [ 1275.245496][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1275.270742][ T8895] vxcan3: entered allmulticast mode [ 1277.325335][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1277.550745][ T8863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1277.752547][ T8944] __nla_validate_parse: 3 callbacks suppressed [ 1277.759184][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8826'. [ 1277.851882][ T8951] bond8: option mode: unable to set because the bond device is up [ 1277.923346][ T8959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8830'. [ 1277.933555][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8829'. [ 1278.028411][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8832'. [ 1278.331322][ T8982] gretap0: entered promiscuous mode [ 1278.351394][ T8991] netlink: 'syz.1.8836': attribute type 1 has an invalid length. [ 1278.364928][ T8984] gretap0: entered promiscuous mode [ 1278.405645][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8836'. [ 1278.480310][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8836'. [ 1278.495024][ T8991] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1278.691238][ T9002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.781246][ T9014] netlink: 'syz.4.8840': attribute type 1 has an invalid length. [ 1278.944313][ T9024] bond8: option mode: unable to set because the bond device is up [ 1279.202056][ T9032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.405508][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1279.433588][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8851'. [ 1279.449154][ T9047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8852'. [ 1279.458728][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8852'. [ 1279.731928][ T9054] openvswitch: netlink: Multiple metadata blocks provided [ 1279.799621][ T9063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8855'. [ 1279.820810][ T9050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1280.151983][ T9086] netlink: 'syz.3.8859': attribute type 1 has an invalid length. [ 1280.152023][ T9086] netlink: 'syz.3.8859': attribute type 2 has an invalid length. [ 1281.488762][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1283.037705][ T9076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1283.043804][ T9102] netlink: 'syz.0.8865': attribute type 2 has an invalid length. [ 1283.043827][ T9102] __nla_validate_parse: 5 callbacks suppressed [ 1283.043838][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8865'. [ 1283.263521][ T9126] netlink: 'syz.1.8867': attribute type 11 has an invalid length. [ 1283.263576][ T9126] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8867'. [ 1283.349136][ T9133] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1283.351313][ T9133] bond10 (unregistering): Released all slaves [ 1283.373922][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8871'. [ 1283.390260][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8868'. [ 1283.402072][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8868'. [ 1283.494309][ T9140] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8872'. [ 1283.510839][ T9144] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1283.520691][ T9144] bond0: (slave bond13): Enslaving as an active interface with an up link [ 1283.565336][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1283.815142][ T9163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1283.826131][ T9163] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1283.836480][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1283.975657][ T9172] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1284.189355][ T9178] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8882'. [ 1284.226722][ T9178] syzkaller1: entered promiscuous mode [ 1284.226774][ T9178] syzkaller1: entered allmulticast mode [ 1284.543958][ T9192] bond2: entered promiscuous mode [ 1284.544069][ T9192] bond2: entered allmulticast mode [ 1284.544823][ T9192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1284.561120][ T9205] netlink: 'syz.4.8890': attribute type 1 has an invalid length. [ 1284.609876][ T9205] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1284.742196][ T9210] bond9: (slave veth5): Enslaving as an active interface with a down link [ 1284.789169][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.789178][ T9205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.812683][ T9205] bond9: (slave batadv0): making interface the new active one [ 1284.813874][ T9205] batadv0: entered promiscuous mode [ 1284.828791][ T9205] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 1284.854454][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.854595][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.854682][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.854768][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.854859][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.854941][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.855024][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1284.866726][ T9215] netlink: 'syz.1.8891': attribute type 4 has an invalid length. [ 1285.343368][ T9210] bond9: (slave veth7): Enslaving as an active interface with a down link [ 1285.424030][ T9233] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 1285.645431][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1285.939015][ T9266] syzkaller1: entered promiscuous mode [ 1285.939088][ T9266] syzkaller1: entered allmulticast mode [ 1287.104318][ T9341] gre0: entered promiscuous mode [ 1287.111537][ T9341] gre0: entered allmulticast mode [ 1287.488830][ T9309] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1287.727234][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1288.214963][ T9404] __nla_validate_parse: 10 callbacks suppressed [ 1288.215029][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8939'. [ 1288.389505][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8945'. [ 1288.956246][ T9444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.025806][ T9447] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8956'. [ 1289.216334][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8959'. [ 1289.379264][ T9463] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1289.753644][ T9421] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1289.806366][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1290.140812][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8961'. [ 1290.172712][ T9473] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1290.192325][ T9473] bond14 (unregistering): Released all slaves [ 1290.212002][ T9489] validate_nla: 5 callbacks suppressed [ 1290.212082][ T9489] netlink: 'syz.3.8965': attribute type 2 has an invalid length. [ 1290.224250][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1290.346393][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8962'. [ 1290.354961][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8962'. [ 1290.438376][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1290.508940][ T9483] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1290.529692][ T9483] bond10 (unregistering): Released all slaves [ 1290.689029][ T9484] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1290.711383][ T9484] bond10 (unregistering): Released all slaves [ 1290.832524][ T9503] ªªªªª?: renamed from veth1_to_bond [ 1290.833361][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1291.133968][ T9532] bond1: option mode: unable to set because the bond device is up [ 1291.257171][ T9536] __bpf_mt_check_bytecode: 55 callbacks suppressed [ 1291.257299][ T9536] xt_bpf: check failed: parse error [ 1291.885384][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1292.433385][ T9603] netlink: 'syz.2.8989': attribute type 5 has an invalid length. [ 1292.443129][ T9604] netlink: 'syz.2.8989': attribute type 5 has an invalid length. [ 1292.936841][ T9629] netlink: Conntrack attr has 4 unknown bytes [ 1292.936919][ T9629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1293.296164][ T9649] FAULT_INJECTION: forcing a failure. [ 1293.296164][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.349054][ T9649] CPU: 1 UID: 0 PID: 9649 Comm: syz.1.9002 Not tainted syzkaller #0 PREEMPT(full) [ 1293.349087][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1293.349101][ T9649] Call Trace: [ 1293.349110][ T9649] [ 1293.349121][ T9649] dump_stack_lvl+0xe8/0x150 [ 1293.349164][ T9649] should_fail_ex+0x410/0x560 [ 1293.349205][ T9649] should_failslab+0xa8/0x100 [ 1293.349235][ T9649] __kmalloc_noprof+0xfe/0x720 [ 1293.349267][ T9649] ? tomoyo_encode+0x2ad/0x570 [ 1293.349293][ T9649] ? tomoyo_encode+0x2ad/0x570 [ 1293.349336][ T9649] tomoyo_encode+0x2ad/0x570 [ 1293.349367][ T9649] tomoyo_realpath_from_path+0x5fa/0x640 [ 1293.349401][ T9649] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1293.349431][ T9649] tomoyo_path_number_perm+0x246/0x5f0 [ 1293.349463][ T9649] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1293.349492][ T9649] ? __lock_acquire+0x6df/0x2e50 [ 1293.349531][ T9649] ? hook_file_ioctl+0x1f2/0x600 [ 1293.349579][ T9649] ? __fget_files+0x2a/0x420 [ 1293.349610][ T9649] ? __fget_files+0x2a/0x420 [ 1293.349636][ T9649] ? __fget_files+0x3a2/0x420 [ 1293.349659][ T9649] ? __fget_files+0x2a/0x420 [ 1293.349691][ T9649] security_file_ioctl+0xc3/0x2a0 [ 1293.349723][ T9649] __se_sys_ioctl+0x47/0x170 [ 1293.349748][ T9649] do_syscall_64+0x166/0x520 [ 1293.349781][ T9649] ? trace_irq_disable+0x3b/0x140 [ 1293.349803][ T9649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.349826][ T9649] ? clear_bhb_loop+0x70/0xc0 [ 1293.349853][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.349874][ T9649] RIP: 0033:0x7f908319e159 [ 1293.349896][ T9649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.349915][ T9649] RSP: 002b:00007f9084145028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.349940][ T9649] RAX: ffffffffffffffda RBX: 00007f9083425fa0 RCX: 00007f908319e159 [ 1293.349956][ T9649] RDX: 0000200000000480 RSI: 00000000400442c8 RDI: 0000000000000008 [ 1293.349971][ T9649] RBP: 00007f9084145090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.349984][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.349997][ T9649] R13: 00007f9083426038 R14: 00007f9083425fa0 R15: 00007ffd5c5da188 [ 1293.350044][ T9649] [ 1293.367950][ T9649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1293.504614][ T9654] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1293.781715][ T9675] set match dimension is over the limit! [ 1293.799160][ T9667] bond0: entered promiscuous mode [ 1293.804863][ T9667] batadv0: entered promiscuous mode [ 1293.806804][ T9667] debugfs: 'hsr0' already exists in 'hsr' [ 1293.806827][ T9667] Cannot create hsr debugfs directory [ 1293.806886][ T9667] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1293.806903][ T9667] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1293.958500][ T9679] __nla_validate_parse: 72 callbacks suppressed [ 1293.958823][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9010'. [ 1293.966836][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1293.981142][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9010'. [ 1294.460546][ T9689] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1294.512925][ T6049] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1294.528710][ T6049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1294.539127][ T6049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1294.562168][ T6049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1294.576957][ T6049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1294.702855][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9017'. [ 1294.715856][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9017'. [ 1294.904542][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9017'. [ 1295.221779][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9021'. [ 1295.251681][T29322] syz_tun (unregistering): left allmulticast mode [ 1295.251738][T29322] syz_tun (unregistering): left promiscuous mode [ 1295.251820][T29322] bridge0: port 3(syz_tun) entered disabled state [ 1295.562448][ T9731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.591035][ T9732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.732327][ T9690] hsr0 speed is unknown, defaulting to 1000 [ 1295.883544][ T9741] netlink: 'syz.2.9022': attribute type 1 has an invalid length. [ 1295.883593][ T9741] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9022'. [ 1296.045326][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1296.109027][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.179175][ T731] batadv0: left promiscuous mode [ 1296.363747][ T9759] netlink: 3080 bytes leftover after parsing attributes in process `syz.1.9032'. [ 1296.363802][ T9759] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.9032'. [ 1296.390826][ T9757] netlink: 'syz.3.9031': attribute type 21 has an invalid length. [ 1296.439781][ T9757] ipt_ECN: cannot use operation on non-tcp rule [ 1296.565622][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.573147][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.581360][ T9690] bridge_slave_0: entered allmulticast mode [ 1296.589800][ T9690] bridge_slave_0: entered promiscuous mode [ 1296.599785][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.607900][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.615557][ T9690] bridge_slave_1: entered allmulticast mode [ 1296.624581][ T9690] bridge_slave_1: entered promiscuous mode [ 1296.687477][ T6049] Bluetooth: hci2: command tx timeout [ 1296.701124][ T9775] netlink: 'syz.3.9035': attribute type 13 has an invalid length. [ 1296.723433][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1296.807787][ T9690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.814945][ T9690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.950224][ T9690] team0: Port device team_slave_0 added [ 1296.956830][ T9690] team0: Port device team_slave_1 added [ 1297.073838][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.073885][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.073930][ T9690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.078795][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.078813][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.078838][ T9690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.284388][ T9690] hsr_slave_0: entered promiscuous mode [ 1297.290881][ T9690] hsr_slave_1: entered promiscuous mode [ 1297.293521][ T9690] debugfs: 'hsr0' already exists in 'hsr' [ 1297.293545][ T9690] Cannot create hsr debugfs directory [ 1297.315025][ T9794] openvswitch: netlink: EtherType 300 is less than min 600 [ 1297.587603][ T9808] siw: device registration error -23 [ 1297.643342][ T9815] siw: device registration error -23 [ 1297.702585][ T9818] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1297.961777][ T9690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.961821][ T9690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.125528][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1298.292663][ T9690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.292727][ T9690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.574626][ T9690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.574690][ T9690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.702534][ T9690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.713333][ T9690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.768705][ T6049] Bluetooth: hci2: command tx timeout [ 1298.897740][ T9841] ipvlan0: Caught tx_queue_len zero misconfig [ 1298.923787][ T9850] xt_REDIRECT: bad MAP_IPS. [ 1299.073165][ T9853] __nla_validate_parse: 4 callbacks suppressed [ 1299.073216][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9056'. [ 1299.170253][ T9856] xt_bpf: check failed: parse error [ 1300.205393][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1300.499832][ T6049] Bluetooth: hci3: link tx timeout [ 1300.502143][ T6049] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1300.859388][ T6034] Bluetooth: hci2: command tx timeout [ 1302.288899][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1302.531412][ T6034] Bluetooth: hci3: command 0x0401 tx timeout [ 1302.942644][ T6049] Bluetooth: hci2: command tx timeout [ 1304.057250][ T9854] tipc: Enabling of bearer rejected, media not registered [ 1304.279996][ T9875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9061'. [ 1304.365435][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1304.382576][ T9881] netlink: 'syz.3.9062': attribute type 1 has an invalid length. [ 1304.507290][ T9881] bond3: entered promiscuous mode [ 1304.513291][ T9881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1304.552568][ T9885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1304.561308][ T9885] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1304.573155][ T9885] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1304.590607][ T9885] bond3: (slave xfrm1): making interface the new active one [ 1304.599698][ T9885] xfrm1: entered promiscuous mode [ 1304.607750][ T9885] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 1304.732304][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9065'. [ 1304.824258][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9065'. [ 1305.008559][ T9690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1305.036642][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1305.045523][ T9690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1305.058992][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1305.068845][ T9690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1305.082145][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1305.094146][ T9690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1305.141220][ T9690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1305.256195][ T9903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1305.363950][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9072'. [ 1305.414765][ T9917] debugfs: '1ùà^!' already exists in 'ieee80211' [ 1305.853516][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.027192][ T9690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.052533][ T9937] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1306.122769][ T9939] netlink: 'syz.0.9079': attribute type 9 has an invalid length. [ 1306.136841][ T736] IPVS: starting estimator thread 0... [ 1306.154623][T20445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.154885][T20445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.241802][ T9940] IPVS: using max 50 ests per chain, 120000 per kthread [ 1306.263452][ T9942] netlink: 'syz.2.9081': attribute type 10 has an invalid length. [ 1306.361466][ T9942] syz_tun: entered promiscuous mode [ 1306.405245][ T9942] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1306.427639][T20445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.427783][T20445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.445404][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1306.830240][ T9957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9084'. [ 1306.959929][ T9961] Bluetooth: MGMT ver 1.23 [ 1307.480412][ T9978] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1307.499291][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9089'. [ 1307.606561][ T9981] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9089'. [ 1307.908979][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9094'. [ 1307.974359][ T9989] netlink: 'syz.2.9094': attribute type 4 has an invalid length. [ 1308.052614][ T9994] netlink: 'syz.3.9095': attribute type 1 has an invalid length. [ 1308.116789][ T9994] netlink: 'syz.3.9095': attribute type 1 has an invalid length. [ 1308.525324][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1308.613471][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.888962][T10061] __nla_validate_parse: 9 callbacks suppressed [ 1309.896034][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9110'. [ 1310.022338][T10068] batman_adv: batadv0: Adding interface: veth0 [ 1310.029233][T10068] batman_adv: batadv0: Interface activated: veth0 [ 1310.050057][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9113'. [ 1310.061777][T10068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9113'. [ 1310.071950][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.079599][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.094750][T10068] batman_adv: batadv0: Interface deactivated: veth0 [ 1310.104277][T10068] batman_adv: batadv0: Removing interface: veth0 [ 1310.159642][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9112'. [ 1310.363116][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9115'. [ 1310.507182][T10080] tipc: Enabling of bearer rejected, media not registered [ 1310.605427][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1310.641198][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9116'. [ 1310.823037][ T9690] veth0_vlan: entered promiscuous mode [ 1310.855008][T10091] netlink: 'syz.0.9119': attribute type 11 has an invalid length. [ 1310.881078][ T9690] veth1_vlan: entered promiscuous mode [ 1311.022327][ T9690] veth0_macvtap: entered promiscuous mode [ 1311.034349][ T9690] veth1_macvtap: entered promiscuous mode [ 1311.082519][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.106580][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.288859][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9120'. [ 1311.289567][T10093] syz_tun: Device is already in use. [ 1311.504170][T20434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.506795][ T4362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.506959][ T4362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.507051][ T4362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.954898][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.964192][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.986563][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1312.165000][T20434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.165693][T20434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.685521][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1312.811867][T10130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1313.410823][ T6034] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1313.429855][ T6034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1313.444894][ T6034] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1313.453949][ T6034] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1313.463074][ T6034] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1313.681020][T10137] syzkaller0: entered promiscuous mode [ 1313.687954][T10137] syzkaller0: entered allmulticast mode [ 1314.086444][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9136'. [ 1314.265842][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9135'. [ 1314.767685][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1315.513531][ T6034] Bluetooth: hci5: command tx timeout [ 1316.856176][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1317.593336][ T6034] Bluetooth: hci5: command tx timeout [ 1318.939816][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1319.490089][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9140'. [ 1319.490136][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9140'. [ 1319.647493][ T6034] Bluetooth: hci5: command tx timeout [ 1319.732764][T10197] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9146'. [ 1319.899380][T10211] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9148'. [ 1320.201965][T10146] hsr0 speed is unknown, defaulting to 1000 [ 1320.420554][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9152'. [ 1320.554231][T10253] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1320.570614][T10259] netlink: 'syz.3.9155': attribute type 25 has an invalid length. [ 1320.646131][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9152'. [ 1320.719962][T10263] netlink: 'syz.3.9157': attribute type 12 has an invalid length. [ 1320.720015][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9157'. [ 1320.724849][T10265] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9158'. [ 1320.725836][T10265] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9158'. [ 1320.812499][T10255] tipc: Resetting bearer [ 1320.888723][T10266] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1320.915408][ T4361] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.915460][ T4361] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.915980][ T4361] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.916016][ T4361] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.916101][ T4361] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.916132][ T4361] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.916186][ T4361] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1320.916216][ T4361] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.005446][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1321.322732][T10298] sctp: [Deprecated]: syz.4.9164 (pid 10298) Use of int in maxseg socket option. [ 1321.322732][T10298] Use struct sctp_assoc_value instead [ 1321.336175][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.336346][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.336494][T10146] bridge_slave_0: entered allmulticast mode [ 1321.341731][T10146] bridge_slave_0: entered promiscuous mode [ 1321.351129][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.351238][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.351443][T10146] bridge_slave_1: entered allmulticast mode [ 1321.355593][T10146] bridge_slave_1: entered promiscuous mode [ 1321.429439][T10146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.441353][T10146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.550730][T10146] team0: Port device team_slave_0 added [ 1321.561963][T10146] team0: Port device team_slave_1 added [ 1321.678233][T10146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.678277][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.678305][T10146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.686005][T10146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.686024][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.686054][T10146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.735836][ T6034] Bluetooth: hci5: command tx timeout [ 1321.883691][T10146] hsr_slave_0: entered promiscuous mode [ 1321.889965][T10146] hsr_slave_1: entered promiscuous mode [ 1321.900194][T10146] debugfs: 'hsr0' already exists in 'hsr' [ 1321.911049][T10146] Cannot create hsr debugfs directory [ 1321.964945][T10323] netlink: 'syz.3.9171': attribute type 15 has an invalid length. [ 1322.002707][T10325] netlink: 'syz.3.9171': attribute type 15 has an invalid length. [ 1322.142896][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9174'. [ 1322.697254][ T4361] IPVS: starting estimator thread 0... [ 1322.703595][T10364] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1322.713250][T10363] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1322.739984][T10363] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1322.798693][T10365] IPVS: using max 34 ests per chain, 81600 per kthread [ 1323.085676][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1325.176469][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1327.011719][T10391] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1327.025383][T10391] netlink: 'syz.1.9189': attribute type 1 has an invalid length. [ 1327.034152][T10395] __nla_validate_parse: 6 callbacks suppressed [ 1327.034208][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9190'. [ 1327.073092][T10146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.120237][T10391] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1327.153857][T10397] geneve2: entered promiscuous mode [ 1327.153901][T10397] geneve2: entered allmulticast mode [ 1327.230685][T10400] bond16: (slave veth17): Enslaving as a backup interface with a down link [ 1327.244602][T10391] IPVS: Error connecting to the multicast addr [ 1327.245310][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1327.273363][T10400] netlink: 'syz.1.9189': attribute type 10 has an invalid length. [ 1327.273413][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9189'. [ 1327.345723][T10146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.489616][T10146] bond0: (slave netdevsim1): Releasing backup interface [ 1327.536648][T10146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.646372][T10414] netlink: 'syz.2.9196': attribute type 12 has an invalid length. [ 1327.699603][T10428] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1327.834647][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1327.869995][T10146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.984332][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1327.984381][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1328.011056][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1328.011105][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1328.011246][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1328.011260][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1328.013710][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9200'. [ 1328.082325][T10433] xt_CT: No such helper "netbios-ns" [ 1328.509444][T10146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1328.524558][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1328.534534][T10146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1328.546861][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1328.558187][T10146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1328.583353][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1328.592403][T10146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1328.594681][T10459] netlink: 'syz.2.9206': attribute type 1 has an invalid length. [ 1328.609998][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1328.767350][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.799497][T10459] bond9: (slave veth0_to_bond): Releasing active interface [ 1328.799542][T10459] veth0_to_bond: left promiscuous mode [ 1328.799744][T10459] veth0_to_bond: left allmulticast mode [ 1328.830987][T10459] bond10: (slave veth0_to_bond): making interface the new active one [ 1328.856358][T10459] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1328.902569][T10470] netlink: 'syz.1.9208': attribute type 83 has an invalid length. [ 1328.903605][T10470] erspan0: entered promiscuous mode [ 1328.903626][T10470] erspan0: entered allmulticast mode [ 1328.912928][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.933130][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.933231][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.968773][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.968925][ T736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.222860][T10478] netlink: 'syz.3.9213': attribute type 1 has an invalid length. [ 1329.222909][T10478] netlink: 'syz.3.9213': attribute type 1 has an invalid length. [ 1329.249609][T10478] Bluetooth: ISO socket layer initialized [ 1329.325378][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1329.501668][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1329.864235][T10522] netlink: 'syz.2.9221': attribute type 1 has an invalid length. [ 1329.864295][T10522] netlink: 'syz.2.9221': attribute type 4 has an invalid length. [ 1329.866987][T10522] netlink: 'syz.2.9221': attribute type 1 has an invalid length. [ 1329.983978][T10146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.169436][T10146] veth0_vlan: entered promiscuous mode [ 1330.174778][T10538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1330.197408][T10146] veth1_vlan: entered promiscuous mode [ 1330.259466][T10146] veth0_macvtap: entered promiscuous mode [ 1330.280890][T10146] veth1_macvtap: entered promiscuous mode [ 1330.316789][T10146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.351967][T10146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.476308][ T4367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.476401][ T4367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.476444][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.476476][ T4367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.713401][T10546] veth3: entered allmulticast mode [ 1330.779627][T20433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.779675][T20433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.042974][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.043017][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.406627][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1331.600853][T10580] syzkaller0: entered promiscuous mode [ 1331.600906][T10580] syzkaller0: entered allmulticast mode [ 1332.322984][ T6049] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1332.342749][ T6049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1332.356347][ T6049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1332.379190][ T6049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1332.408054][ T6049] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1333.485396][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1334.607686][ T6049] Bluetooth: hci4: command tx timeout [ 1335.577797][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1336.480679][T10609] __nla_validate_parse: 71 callbacks suppressed [ 1336.480726][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9243'. [ 1336.489906][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9244'. [ 1336.501420][T10619] sch_tbf: peakrate 6 is lower than or equals to rate 8 ! [ 1336.624412][T30189] bond0: (slave syz_tun): Releasing backup interface [ 1336.636526][T10627] netlink: 452 bytes leftover after parsing attributes in process `syz.4.9246'. [ 1336.685678][ T6049] Bluetooth: hci4: command tx timeout [ 1336.797247][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9247'. [ 1336.903473][T10626] veth3: entered allmulticast mode [ 1336.994623][T10635] hsr0 speed is unknown, defaulting to 1000 [ 1337.528216][T10618] hsr0 speed is unknown, defaulting to 1000 [ 1337.645390][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1337.720327][T10664] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9253'. [ 1337.729748][T10664] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9253'. [ 1337.729776][T10664] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9253'. [ 1337.789371][T10670] macvlan0: entered promiscuous mode [ 1337.919631][T10676] veth1_macvtap: left promiscuous mode [ 1337.919680][T10676] macsec0: entered allmulticast mode [ 1337.979212][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9256'. [ 1338.108914][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9258'. [ 1338.177490][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9260'. [ 1338.599382][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.599517][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.599717][T10618] bridge_slave_0: entered allmulticast mode [ 1338.624520][T10618] bridge_slave_0: entered promiscuous mode [ 1338.634622][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.642093][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.650204][T10618] bridge_slave_1: entered allmulticast mode [ 1338.658691][T10618] bridge_slave_1: entered promiscuous mode [ 1338.706483][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.721487][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.767957][ T6049] Bluetooth: hci4: command tx timeout [ 1338.782664][T10618] team0: Port device team_slave_0 added [ 1338.793713][T10618] team0: Port device team_slave_1 added [ 1338.820156][T10717] validate_nla: 2 callbacks suppressed [ 1338.824736][T10717] netlink: 'syz.0.9269': attribute type 2 has an invalid length. [ 1338.841155][T10713] tipc: Started in network mode [ 1338.841209][T10713] tipc: Node identity ac14142f, cluster identity 4711 [ 1338.850806][T10713] tipc: Enabling of bearer rejected, failed to enable media [ 1338.857224][T10714] veth0_vlan: entered allmulticast mode [ 1338.982606][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.982652][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.982680][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.993910][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.993930][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.993955][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.199426][T10618] hsr_slave_0: entered promiscuous mode [ 1339.213734][T10618] hsr_slave_1: entered promiscuous mode [ 1339.221230][T10618] debugfs: 'hsr0' already exists in 'hsr' [ 1339.227612][T10618] Cannot create hsr debugfs directory [ 1339.239726][T10732] netlink: Setting conntrack mark requires 'commit' flag. [ 1339.250595][T10732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.413982][T10748] netlink: 'syz.0.9276': attribute type 1 has an invalid length. [ 1339.523992][T10747] lo: Caught tx_queue_len zero misconfig [ 1339.593208][T10748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1339.624857][T20432] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1339.727869][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1339.977233][T10618] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1339.977310][T10618] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.071949][T10772] xt_bpf: check failed: parse error [ 1340.080080][T10772] xt_bpf: check failed: parse error [ 1340.294245][T10618] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1340.294319][T10618] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.404229][T10618] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1340.404304][T10618] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.433050][T10795] netlink: 'syz.0.9290': attribute type 1 has an invalid length. [ 1340.448097][T10795] netlink: 'syz.0.9290': attribute type 1 has an invalid length. [ 1340.518839][T10618] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1340.518915][T10618] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.590477][ C0] Unknown status report in ack skb [ 1340.845378][ T6049] Bluetooth: hci4: command tx timeout [ 1341.136545][T10618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1341.149717][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1341.159632][T10799] netlink: 'syz.0.9290': attribute type 1 has an invalid length. [ 1341.159684][T10799] netlink: 'syz.0.9290': attribute type 1 has an invalid length. [ 1341.180383][T10618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1341.197797][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1341.208638][T10618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1341.252880][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1341.270312][T10618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1341.284114][T10822] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1341.292710][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1341.333067][T10822] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1341.435917][T10618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.478706][T10618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.523236][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.523362][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.550569][ T731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.550683][ T731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1341.805684][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1342.358113][T10618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.469395][T10871] netlink: 'syz.4.9304': attribute type 32 has an invalid length. [ 1342.474143][T10872] netlink: 'syz.4.9304': attribute type 32 has an invalid length. [ 1342.505737][T10618] veth0_vlan: entered promiscuous mode [ 1342.533209][T10618] veth1_vlan: entered promiscuous mode [ 1342.578057][T10618] veth0_macvtap: entered promiscuous mode [ 1342.593056][T10618] veth1_macvtap: entered promiscuous mode [ 1342.604906][T10875] __nla_validate_parse: 81 callbacks suppressed [ 1342.607946][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9305'. [ 1342.648699][T10618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.682196][T10618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.877828][ T4367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.878308][ T4367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.878755][ T4367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.879727][ T4367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.034689][ T731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.034728][ T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.074763][T10885] netlink: 'syz.1.9308': attribute type 39 has an invalid length. [ 1343.218873][T10891] sit0: entered promiscuous mode [ 1343.219118][T10891] netlink: 'syz.1.9309': attribute type 1 has an invalid length. [ 1343.219168][T10891] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9309'. [ 1343.262500][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.262542][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.381747][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9310'. [ 1343.603253][T10906] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.885750][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1343.927214][T10932] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1344.166058][T10940] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1344.208658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1344.630788][ T4362] nci: nci_rx_work: unknown MT 0x1 [ 1345.963398][T10992] veth21: entered allmulticast mode [ 1345.965681][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1345.970300][ T6034] Bluetooth: hci4: command 0x0405 tx timeout [ 1346.302817][T11000] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1347.505861][T10962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1347.506363][T10970] netlink: 'syz.4.9331': attribute type 11 has an invalid length. [ 1347.506382][T10970] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.9331'. [ 1347.917653][T11022] ip6tnl0: Caught tx_queue_len zero misconfig [ 1347.994277][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9348'. [ 1348.022342][T11029] veth5: entered allmulticast mode [ 1348.045479][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1348.211125][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9350'. [ 1348.710781][T11058] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1348.711091][T11058] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1348.713411][T11058] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1348.713646][T11058] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1348.713874][T11058] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1348.718098][T11058] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1348.795702][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9355'. [ 1349.129612][T11067] tipc: Failed to remove unknown binding: 66,1,1/0:3839604074/3839604076 [ 1349.151274][T11067] netlink: 165 bytes leftover after parsing attributes in process `syz.0.9357'. [ 1349.173888][T11072] v: renamed from veth0_vlan (while UP) [ 1349.282975][T11072] macvlan0: entered promiscuous mode [ 1349.374413][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9359'. [ 1349.374477][T11071] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1349.438396][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9362'. [ 1349.508768][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9365'. [ 1349.758472][T11099] netlink: 'syz.4.9367': attribute type 12 has an invalid length. [ 1349.767173][T11099] netlink: 'syz.4.9367': attribute type 29 has an invalid length. [ 1349.767236][T11099] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9367'. [ 1349.767263][T11099] netlink: 59 bytes leftover after parsing attributes in process `syz.4.9367'. [ 1350.016990][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9373'. [ 1350.038568][T11105] veth3: entered allmulticast mode [ 1350.104500][T11117] team_slave_1: entered promiscuous mode [ 1350.104737][T11117] team_slave_1: left promiscuous mode [ 1350.125311][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1350.173652][T11120] syzkaller0: entered promiscuous mode [ 1350.173695][T11120] syzkaller0: entered allmulticast mode [ 1350.439498][T11135] siw: device registration error -23 [ 1351.513817][T11153] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20002 [ 1352.205473][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1352.371252][ T6049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1352.382336][ T6049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1352.392129][ T6049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1352.406534][ T6049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1352.414973][ T6049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1352.628934][T11193] veth5: entered allmulticast mode [ 1352.921004][T11199] xt_addrtype: ipv6 does not support BROADCAST matching [ 1353.060233][T11204] __nla_validate_parse: 7 callbacks suppressed [ 1353.066962][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9399'. [ 1353.076866][T11204] netlink: 'syz.4.9399': attribute type 10 has an invalid length. [ 1353.089895][T11204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9399'. [ 1353.107824][T11204] geneve2: entered promiscuous mode [ 1353.113563][T11204] geneve2: entered allmulticast mode [ 1353.336898][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.359148][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9401'. [ 1353.798694][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9405'. [ 1353.810130][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9405'. [ 1353.863485][T11184] hsr0 speed is unknown, defaulting to 1000 [ 1354.038873][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9407'. [ 1354.050677][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9408'. [ 1354.285286][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1354.372293][T11244] veth3: entered allmulticast mode [ 1354.406041][T11252] Bluetooth: MGMT ver 1.23 [ 1354.525775][ T6034] Bluetooth: hci0: command tx timeout [ 1354.563951][T11265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9412'. [ 1355.597228][T20432] dvmrp0: left allmulticast mode [ 1355.658660][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1355.668130][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1355.818369][T20432] bond9 (unregistering): (slave ip6gretap2): Releasing active interface [ 1356.281622][T20432] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1356.351981][T20432] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1356.366718][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1356.501791][T20432] bond11 (unregistering): (slave geneve2): Releasing active interface [ 1356.594566][T20432] batadv0 (unregistering): left promiscuous mode [ 1356.608543][ T6034] Bluetooth: hci0: command tx timeout [ 1356.650711][T20432] bond13 (unregistering): (slave .`): Releasing active interface [ 1356.667491][T20432] .` (unregistering): (slave bond2): Releasing backup interface [ 1356.678161][T20432] .` (unregistering): (slave bond12): Releasing backup interface [ 1356.687143][T20432] .` (unregistering): Released all slaves [ 1356.694812][T20432] bond1 (unregistering): Released all slaves [ 1356.710325][T20432] bond2 (unregistering): Released all slaves [ 1356.729845][T20432] bond3 (unregistering): (slave veth3): Releasing active interface [ 1356.743775][T20432] bond3 (unregistering): Released all slaves [ 1356.756322][T20432] bond4 (unregistering): Released all slaves [ 1356.768846][T20432] bond5 (unregistering): (slave veth5): Releasing active interface [ 1356.768889][T20432] batadv1: entered promiscuous mode [ 1356.784787][T20432] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1356.784830][T20432] batadv1: left promiscuous mode [ 1356.800926][T20432] bond5 (unregistering): (slave veth7): Releasing active interface [ 1356.810552][T20432] bond5 (unregistering): Released all slaves [ 1356.822580][T20432] bond6 (unregistering): Released all slaves [ 1356.836298][T20432] bond7 (unregistering): Released all slaves [ 1356.851392][T20432] bond8 (unregistering): (slave veth9): Releasing active interface [ 1356.864604][T20432] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1356.876293][T20432] bond8 (unregistering): Released all slaves [ 1356.887786][T20432] bond9 (unregistering): Released all slaves [ 1356.899700][T20432] bond10 (unregistering): Released all slaves [ 1356.911868][T20432] bond11 (unregistering): Released all slaves [ 1356.924944][T20432] bond12 (unregistering): Released all slaves [ 1356.943856][T20432] bond13 (unregistering): Released all slaves [ 1356.964523][T20432] bond0 (unregistering): left promiscuous mode [ 1356.976994][T20432] bond0 (unregistering): Released all slaves [ 1356.988275][T20432] bond14 (unregistering): Released all slaves [ 1356.999627][T20432] bond15 (unregistering): Released all slaves [ 1357.026967][T20432] bond16 (unregistering): (slave veth17): Releasing backup interface [ 1357.042375][T20432] bond16 (unregistering): Released all slaves [ 1357.059818][T20432] bond17 (unregistering): Released all slaves [ 1357.124749][T11311] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1357.196493][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1357.394524][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.394758][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.394910][T11184] bridge_slave_0: entered allmulticast mode [ 1357.398703][T11184] bridge_slave_0: entered promiscuous mode [ 1357.400632][T20432] tipc: Disabling bearer [ 1357.444183][T20432] tipc: Disabling bearer [ 1357.454129][T20432] tipc: Left network mode [ 1357.474363][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.474509][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.474685][T11184] bridge_slave_1: entered allmulticast mode [ 1357.479004][T11184] bridge_slave_1: entered promiscuous mode [ 1357.717441][T11352] netlink: 'syz.4.9428': attribute type 5 has an invalid length. [ 1357.785426][T11184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.811037][T11184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.081464][T11184] team0: Port device team_slave_0 added [ 1358.098496][T11184] team0: Port device team_slave_1 added [ 1358.310219][T11184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.310257][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.310301][T11184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.364768][T11184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.372568][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.391394][T11370] netlink: 'syz.2.9431': attribute type 16 has an invalid length. [ 1358.391420][T11370] __nla_validate_parse: 4 callbacks suppressed [ 1358.391432][T11370] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9431'. [ 1358.407677][T11184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.445410][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1358.591006][T11365] veth7: entered allmulticast mode [ 1358.687130][ T6034] Bluetooth: hci0: command tx timeout [ 1358.712213][T11370] veth0_macvtap: entered allmulticast mode [ 1359.054939][T11184] hsr_slave_0: entered promiscuous mode [ 1359.057525][T11184] hsr_slave_1: entered promiscuous mode [ 1359.059430][T11184] debugfs: 'hsr0' already exists in 'hsr' [ 1359.059453][T11184] Cannot create hsr debugfs directory [ 1359.208385][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1359.283615][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9433'. [ 1359.283671][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9433'. [ 1359.368134][T20432] hsr_slave_0: left promiscuous mode [ 1359.380497][T20432] hsr_slave_1: left promiscuous mode [ 1360.029260][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9436'. [ 1360.029317][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9436'. [ 1360.029355][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9436'. [ 1360.525471][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1360.659597][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9440'. [ 1360.766688][ T6034] Bluetooth: hci0: command tx timeout [ 1360.805758][T11436] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1361.072149][T11445] vxcan0: tx address claim with different name [ 1361.091536][T11441] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 1361.198439][T20432] IPVS: stop unused estimator thread 0... [ 1361.474545][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9448'. [ 1361.482562][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9448'. [ 1361.927974][T11479] veth5: entered allmulticast mode [ 1362.564138][T11506] geneve3: entered promiscuous mode [ 1362.605397][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1362.766579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.802919][T11184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1362.829782][T11184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1362.838688][T11184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1362.894408][T11184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1362.906106][T11184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1362.938939][T11184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1362.947530][T11184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1362.964283][T11184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1363.070142][T20432] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.070482][T20432] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.070543][T20432] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.127401][ T731] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.179985][T11184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.223052][T11184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.263206][T20434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.263372][T20434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.321330][T19482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.321474][T19482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.394671][T11537] __nla_validate_parse: 4 callbacks suppressed [ 1363.402632][T11533] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 1363.428181][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9460'. [ 1363.428230][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9460'. [ 1363.475715][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1363.931274][T11551] syzkaller0: entered promiscuous mode [ 1363.931321][T11551] syzkaller0: entered allmulticast mode [ 1364.002664][T11551] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1364.089019][T11565] dummy0: entered allmulticast mode [ 1364.101980][T11565] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9466'. [ 1364.686652][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1364.778723][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1364.860363][T11184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.958049][T11184] veth0_vlan: entered promiscuous mode [ 1364.976976][T11184] veth1_vlan: entered promiscuous mode [ 1365.030710][T11184] veth0_macvtap: entered promiscuous mode [ 1365.043817][T11184] veth1_macvtap: entered promiscuous mode [ 1365.072920][T11184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.099739][T11184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.169086][T19482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.181273][ T4361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.192162][ T4361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.192219][ T4361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.765624][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1367.009414][T11567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1367.013777][T11584] netlink: 'syz.3.9468': attribute type 11 has an invalid length. [ 1367.013797][T11584] netlink: 'syz.3.9468': attribute type 4 has an invalid length. [ 1367.079103][T11628] nbd: must specify at least one socket [ 1367.108601][T19482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.108653][T19482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.195866][ T736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.195915][ T736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.250173][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1367.498659][T11686] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 1367.585441][T11685] xt_TCPMSS: Only works on TCP SYN packets [ 1368.428564][T11727] syzkaller0: entered promiscuous mode [ 1368.428609][T11727] syzkaller0: entered allmulticast mode [ 1368.457096][T11727] tipc: Started in network mode [ 1368.457170][T11727] tipc: Node identity f6576b156b27, cluster identity 4711 [ 1368.473517][T11727] tipc: Enabled bearer , priority 0 [ 1368.492349][T11725] tipc: Resetting bearer [ 1368.578575][T11733] openvswitch: netlink: IP tunnel attribute has 28 unknown bytes. [ 1368.632809][T11725] tipc: Disabling bearer [ 1368.774810][T11749] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1368.845542][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1369.318208][T11770] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9510'. [ 1369.542892][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1370.169330][T11807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1370.221449][T11807] bond0: entered promiscuous mode [ 1370.226839][T11807] bond_slave_0: entered promiscuous mode [ 1370.232983][T11807] bond_slave_1: entered promiscuous mode [ 1370.245646][T11807] batadv0: entered promiscuous mode [ 1370.253436][T11807] debugfs: 'hsr1' already exists in 'hsr' [ 1370.260260][T11807] Cannot create hsr debugfs directory [ 1370.260369][T11807] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1370.260958][T11807] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1370.349853][T11807] bond0: left promiscuous mode [ 1370.349903][T11807] bond_slave_0: left promiscuous mode [ 1370.350164][T11807] bond_slave_1: left promiscuous mode [ 1370.377804][T11807] batadv0: left promiscuous mode [ 1370.424705][T11813] netlink: 'syz.2.9525': attribute type 10 has an invalid length. [ 1370.554484][T11813] team0: Device wg2 is of different type [ 1370.707646][T11815] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9526'. [ 1370.718035][T11815] tc_dump_action: action bad kind [ 1370.925372][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1370.992057][T11838] netlink: ct_mark mask cannot be 0 [ 1370.992138][T11838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1371.056199][T11843] siw: device registration error -23 [ 1371.227466][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9536'. [ 1371.239579][T11848] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9536'. [ 1372.235839][T11883] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9549'. [ 1373.005570][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1373.268476][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.269286][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.542667][T11895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.552938][T11895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.835789][ T4362] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.835973][ T4362] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.836127][ T4362] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.836259][ T4362] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.956903][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9560'. [ 1373.988206][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9560'. [ 1374.154446][T11941] netlink: 'syz.2.9562': attribute type 3 has an invalid length. [ 1374.183963][T11941] xt_ecn: cannot match TCP bits for non-tcp packets [ 1374.213288][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9561'. [ 1374.549433][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9568'. [ 1374.903707][T11973] netlink: 400 bytes leftover after parsing attributes in process `syz.4.9574'. [ 1374.915407][T11976] netlink: 400 bytes leftover after parsing attributes in process `syz.4.9574'. [ 1375.085396][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1375.176379][T11992] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888602 ! [ 1375.271184][T11995] bond7: Removing last arp target with arp_interval on [ 1375.351835][T12003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1375.354268][T12003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9581'. [ 1375.363098][T12003] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9581'. [ 1377.165568][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1377.684257][T11965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.947482][T12024] netlink: 'syz.2.9592': attribute type 1 has an invalid length. [ 1378.124570][T12037] veth7: entered allmulticast mode [ 1378.158314][T12037] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1378.354710][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1378.578285][T12059] openvswitch: netlink: IP tunnel dst address not specified [ 1378.586300][T12059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.596834][T12059] sock: sock_set_timeout: `syz.1.9600' (pid 12059) tries to set negative timeout [ 1378.641237][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9601'. [ 1378.641310][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9601'. [ 1378.921829][T12084] tipc: Enabled bearer , priority 0 [ 1378.933571][T12084] syzkaller0: entered promiscuous mode [ 1378.939845][T12084] syzkaller0: entered allmulticast mode [ 1378.952119][T12084] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1379.021203][T12084] tipc: Resetting bearer [ 1379.034286][T12084] netlink: zone id is out of range [ 1379.040512][T12084] netlink: zone id is out of range [ 1379.046857][T12084] netlink: zone id is out of range [ 1379.049972][T12088] pimreg: entered allmulticast mode [ 1379.058566][T12084] netlink: zone id is out of range [ 1379.058581][T12084] netlink: zone id is out of range [ 1379.058590][T12084] netlink: del zone limit has 4 unknown bytes [ 1379.081770][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9612'. [ 1379.081980][T12080] tipc: Resetting bearer [ 1379.095517][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9612'. [ 1379.180492][T12080] tipc: Disabling bearer [ 1379.245493][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1379.582726][T12109] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1379.583780][T12109] __nla_validate_parse: 4 callbacks suppressed [ 1379.583797][T12109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1379.754479][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9623'. [ 1379.764860][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9623'. [ 1379.824376][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9621'. [ 1379.974880][T12129] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1380.002356][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9625'. [ 1380.012279][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9625'. [ 1380.100180][T12137] bridge0: port 3(syz_tun) entered blocking state [ 1380.100329][T12137] bridge0: port 3(syz_tun) entered disabled state [ 1380.100524][T12137] syz_tun: entered allmulticast mode [ 1380.114543][T12137] syz_tun: entered promiscuous mode [ 1380.121653][T12137] bridge0: port 3(syz_tun) entered blocking state [ 1380.121770][T12137] bridge0: port 3(syz_tun) entered forwarding state [ 1380.443875][T12162] syzkaller0: entered promiscuous mode [ 1380.450305][T12162] syzkaller0: entered allmulticast mode [ 1380.461554][T12162] tipc: Started in network mode [ 1380.467879][T12162] tipc: Node identity 5264a8f71b0e, cluster identity 4711 [ 1380.482964][T12162] tipc: Enabled bearer , priority 0 [ 1380.491093][T12160] tipc: Resetting bearer [ 1380.496785][T12166] netlink: 'syz.0.9635': attribute type 1 has an invalid length. [ 1380.553946][T12160] tipc: Disabling bearer [ 1380.611178][T12166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1380.621110][T12173] syz_tun: entered allmulticast mode [ 1380.692535][T12166] bond1: (slave geneve2): making interface the new active one [ 1380.708482][T12166] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1380.730636][T12165] syz_tun: left allmulticast mode [ 1380.897552][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9637'. [ 1380.907917][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9637'. [ 1381.038676][T12184] nbd3: detected capacity change from 0 to 65536 [ 1381.090672][ T26] block nbd3: Dead connection, failed to find a fallback [ 1381.090742][ T26] block nbd3: shutting down sockets [ 1381.092184][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.092317][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.099247][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.099280][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.101104][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.101147][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.105971][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.106004][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.106127][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.106151][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.106278][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.106302][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.106418][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.106442][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.107762][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.107792][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.107890][T12188] ldm_validate_partition_table(): Disk read failed. [ 1381.108002][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.108026][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.108156][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1381.108180][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1381.108391][T12188] Dev nbd3: unable to read RDB block 0 [ 1381.109345][T12188] nbd3: unable to read partition table [ 1381.238535][T12188] ldm_validate_partition_table(): Disk read failed. [ 1381.238911][T12188] Dev nbd3: unable to read RDB block 0 [ 1381.239369][T12188] nbd3: unable to read partition table [ 1381.502353][T12197] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1381.521782][T12197] bond1 (unregistering): Released all slaves [ 1381.573402][T12215] tipc: Enabling of bearer rejected, failed to enable media [ 1381.834433][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9651'. [ 1381.834480][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9651'. [ 1381.973170][T12244] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1382.354486][T12261] nbd: must specify at least one socket [ 1382.883095][T12279] x_tables: duplicate underflow at hook 1 [ 1382.908950][T12279] xt_LOG: prefix is not null-terminated [ 1383.363576][T12288] bond2 (unregistering): Released all slaves [ 1383.612885][T12292] bond2 (unregistering): Released all slaves [ 1383.813294][T12306] bond2: option all_slaves_active: invalid value (254) [ 1383.838765][T12306] bond2 (unregistering): Released all slaves [ 1384.194718][T12325] net_ratelimit: 4 callbacks suppressed [ 1384.194785][T12325] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1384.860278][T12363] __nla_validate_parse: 13 callbacks suppressed [ 1384.868800][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1384.868842][T12363] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1384.969039][T12363] veth9: entered promiscuous mode [ 1385.102782][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9690'. [ 1385.124883][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9690'. [ 1385.137998][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9688'. [ 1385.138051][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9688'. [ 1385.231929][T12385] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1385.284546][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9694'. [ 1385.297457][T12389] openvswitch: netlink: Message has 4096 unknown bytes. [ 1385.485436][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1385.655321][T12414] ipt_rpfilter: unknown options [ 1385.660726][T12409] hsr0 speed is unknown, defaulting to 1000 [ 1385.680873][T12417] netlink: 'syz.3.9700': attribute type 16 has an invalid length. [ 1385.683553][T12417] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9700'. [ 1385.846503][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1385.846538][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1386.490400][T12451] netlink: 'syz.4.9712': attribute type 21 has an invalid length. [ 1386.490447][T12451] IPv6: NLM_F_CREATE should be specified when creating new route [ 1386.490557][T12451] netlink: 'syz.4.9712': attribute type 1 has an invalid length. [ 1386.527453][T12451] netlink: 'syz.4.9712': attribute type 1 has an invalid length. [ 1386.619555][T12451] netlink: Conntrack attr has 4 unknown bytes [ 1386.934488][T12468] veth0: Caught tx_queue_len zero misconfig [ 1387.056401][T12472] veth11: entered allmulticast mode [ 1387.565448][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1388.129973][T12528] xt_TCPMSS: Only works on TCP SYN packets [ 1388.622908][T12552] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1388.997975][T12563] bond8 (unregistering): Released all slaves [ 1389.119034][T12576] netlink: 'syz.0.9749': attribute type 2 has an invalid length. [ 1389.392137][T12585] netlink: 'syz.0.9753': attribute type 1 has an invalid length. [ 1389.401238][T12585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1389.645456][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1391.223563][T12637] Unsupported ieee802154 address type: 0 [ 1391.293190][T12641] syzkaller1: entered promiscuous mode [ 1391.293244][T12641] syzkaller1: entered allmulticast mode [ 1391.560310][T12656] __nla_validate_parse: 13 callbacks suppressed [ 1391.560703][T12656] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9774'. [ 1391.562853][T12656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9774'. [ 1391.710958][T12665] IPv6: NLM_F_CREATE should be specified when creating new route [ 1391.725520][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1391.810612][T12667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1391.813869][T12667] openvswitch: netlink: Unknown key attributes 20 [ 1391.898963][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9778'. [ 1392.018816][ T31] audit: type=1804 audit(1788492582.852:57): pid=12673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9780" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=592 res=1 errno=0 [ 1392.019754][ T31] audit: type=1800 audit(1788492582.852:58): pid=12673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9780" name="cgroup.controllers" dev="tmpfs" ino=592 res=0 errno=0 [ 1392.179391][T12678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9782'. [ 1392.510684][T12695] netlink: 576 bytes leftover after parsing attributes in process `syz.2.9788'. [ 1393.067722][T12727] netlink: 'syz.1.9796': attribute type 13 has an invalid length. [ 1393.138481][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9797'. [ 1393.375991][T12739] netlink: 'syz.2.9800': attribute type 1 has an invalid length. [ 1393.514676][T12749] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9801'. [ 1393.591350][T12740] bond2: (slave gretap1): making interface the new active one [ 1393.621569][T12740] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1393.801659][T12758] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1393.805647][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1394.212567][T12772] syzkaller0: entered promiscuous mode [ 1394.219746][T12772] syzkaller0: entered allmulticast mode [ 1394.542421][T12779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1394.718532][T12791] lo: Caught tx_queue_len zero misconfig [ 1394.871373][T12787] syzkaller1: entered promiscuous mode [ 1394.883076][T12787] syzkaller1: entered allmulticast mode [ 1395.258263][ T6049] Bluetooth: hci3: link tx timeout [ 1395.259765][ T6049] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1395.356843][T12818] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1395.371880][T12818] gretap0: entered promiscuous mode [ 1395.389503][T12818] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 1395.400970][T12818] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1395.415952][T12818] 0ªî{X¹¦: renamed from gretap0 [ 1395.432837][T12818] 0ªî{X¹¦: left promiscuous mode [ 1395.444199][T12818] 0ªî{X¹¦: entered allmulticast mode [ 1395.458821][T12818] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1395.660495][T12823] syzkaller0: entered promiscuous mode [ 1395.667418][T12823] syzkaller0: entered allmulticast mode [ 1395.885463][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1396.016639][T12836] netlink: 'syz.4.9825': attribute type 12 has an invalid length. [ 1396.016691][T12836] netlink: 'syz.4.9825': attribute type 29 has an invalid length. [ 1396.016707][T12836] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9825'. [ 1396.016726][T12836] netlink: 'syz.4.9825': attribute type 1 has an invalid length. [ 1396.016737][T12836] netlink: 'syz.4.9825': attribute type 2 has an invalid length. [ 1396.153709][T12839] netlink: 'syz.0.9826': attribute type 29 has an invalid length. [ 1396.166900][T12844] vlan2: entered promiscuous mode [ 1396.172231][T12844] bridge0: entered promiscuous mode [ 1396.295274][T20445] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.295343][T20445] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.295407][T20445] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.295464][T20445] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.732188][T12873] netlink: 'syz.1.9835': attribute type 1 has an invalid length. [ 1396.742179][T12873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1396.791968][T12873] tipc: Enabled bearer , priority 10 [ 1396.854129][T12882] __nla_validate_parse: 2 callbacks suppressed [ 1396.854184][T12882] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9836'. [ 1396.961101][T12888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.180821][T12899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9841'. [ 1397.216628][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9841'. [ 1397.243152][T12899] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1397.299729][T12904] netlink: 'syz.4.9844': attribute type 10 has an invalid length. [ 1397.313597][T12904] team0: Device vxcan1 is of different type [ 1397.327571][ T6034] Bluetooth: hci3: command 0x0401 tx timeout [ 1397.368534][ T6049] [ 1397.368746][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9846'. [ 1397.379992][ T6049] ====================================================== [ 1397.387154][ T6049] WARNING: possible circular locking dependency detected [ 1397.394319][ T6049] syzkaller #0 Not tainted [ 1397.398765][ T6049] ------------------------------------------------------ [ 1397.405860][ T6049] kworker/u9:13/6049 is trying to acquire lock: [ 1397.412286][ T6049] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 1397.421268][ T6049] [ 1397.421268][ T6049] but task is already holding lock: [ 1397.428652][ T6049] ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 1397.437263][ T6049] [ 1397.437263][ T6049] which lock already depends on the new lock. [ 1397.437263][ T6049] [ 1397.447870][ T6049] [ 1397.447870][ T6049] the existing dependency chain (in reverse order) is: [ 1397.456905][ T6049] [ 1397.456905][ T6049] -> #9 (dpm_list_mtx){+.+.}-{4:4}: [ 1397.464408][ T6049] __mutex_lock+0x19d/0x1550 [ 1397.469551][ T6049] device_pm_add+0x7d/0x350 [ 1397.474604][ T6049] device_add+0x4eb/0xb80 [ 1397.479562][ T6049] device_create+0x269/0x300 [ 1397.484872][ T6049] msr_device_create+0x33/0x50 [ 1397.490213][ T6049] cpuhp_invoke_callback+0x434/0x810 [ 1397.496057][ T6049] cpuhp_thread_fun+0x362/0x780 [ 1397.501463][ T6049] smpboot_thread_fn+0x565/0xa70 [ 1397.507028][ T6049] kthread+0x38b/0x480 [ 1397.511640][ T6049] ret_from_fork+0x514/0xb70 [ 1397.516786][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1397.522097][ T6049] [ 1397.522097][ T6049] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1397.529681][ T6049] cpuhp_thread_fun+0x127/0x780 [ 1397.535068][ T6049] smpboot_thread_fn+0x565/0xa70 [ 1397.540566][ T6049] kthread+0x38b/0x480 [ 1397.545168][ T6049] ret_from_fork+0x514/0xb70 [ 1397.550283][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1397.555758][ T6049] [ 1397.555758][ T6049] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1397.563609][ T6049] cpus_read_lock+0x42/0x160 [ 1397.568728][ T6049] static_key_disable+0x12/0x20 [ 1397.574303][ T6049] __inet_hash_connect+0x258f/0x25a0 [ 1397.580465][ T6049] tcp_v4_connect+0xcee/0x1950 [ 1397.585822][ T6049] __inet_stream_connect+0x258/0xe00 [ 1397.591789][ T6049] inet_stream_connect+0x66/0xa0 [ 1397.597355][ T6049] __sys_connect+0x316/0x450 [ 1397.602485][ T6049] __x64_sys_connect+0x7a/0x90 [ 1397.607793][ T6049] do_syscall_64+0x166/0x520 [ 1397.612922][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.619350][ T6049] [ 1397.619350][ T6049] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1397.627188][ T6049] lock_sock_nested+0x41/0x100 [ 1397.632506][ T6049] inet_shutdown+0x6a/0x390 [ 1397.637540][ T6049] nbd_mark_nsock_dead+0x2cb/0x550 [ 1397.643237][ T6049] recv_work+0x1cee/0x1e10 [ 1397.648189][ T6049] process_scheduled_works+0xc3d/0x1630 [ 1397.654283][ T6049] worker_thread+0xa47/0xfb0 [ 1397.659408][ T6049] kthread+0x38b/0x480 [ 1397.664015][ T6049] ret_from_fork+0x514/0xb70 [ 1397.669137][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1397.674458][ T6049] [ 1397.674458][ T6049] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1397.682313][ T6049] __mutex_lock+0x19d/0x1550 [ 1397.687477][ T6049] nbd_queue_rq+0x373/0xff0 [ 1397.692523][ T6049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1397.698760][ T6049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1397.705635][ T6049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1397.712175][ T6049] blk_mq_run_work_fn+0x16c/0x300 [ 1397.717742][ T6049] process_scheduled_works+0xc3d/0x1630 [ 1397.724170][ T6049] worker_thread+0xa47/0xfb0 [ 1397.729302][ T6049] kthread+0x38b/0x480 [ 1397.733997][ T6049] ret_from_fork+0x514/0xb70 [ 1397.739229][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1397.744542][ T6049] [ 1397.744542][ T6049] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1397.752376][ T6049] __mutex_lock+0x19d/0x1550 [ 1397.757506][ T6049] nbd_queue_rq+0xc1/0xff0 [ 1397.762579][ T6049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1397.768792][ T6049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1397.775739][ T6049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1397.782272][ T6049] blk_mq_run_work_fn+0x16c/0x300 [ 1397.787833][ T6049] process_scheduled_works+0xc3d/0x1630 [ 1397.793920][ T6049] worker_thread+0xa47/0xfb0 [ 1397.799042][ T6049] kthread+0x38b/0x480 [ 1397.803735][ T6049] ret_from_fork+0x514/0xb70 [ 1397.808941][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1397.814236][ T6049] [ 1397.814236][ T6049] -> #3 (set->srcu){.+.+}-{0:0}: [ 1397.821390][ T6049] __synchronize_srcu+0xc9/0x2f0 [ 1397.826862][ T6049] elevator_switch+0x1e8/0x7b0 [ 1397.832207][ T6049] elevator_change+0x2fa/0x480 [ 1397.837506][ T6049] elevator_set_default+0x375/0x440 [ 1397.843234][ T6049] blk_register_queue+0x3f3/0x4e0 [ 1397.848892][ T6049] __add_disk+0x6cb/0xe30 [ 1397.853764][ T6049] add_disk_fwnode+0x100/0x3a0 [ 1397.859055][ T6049] nbd_dev_add+0x733/0xb60 [ 1397.864089][ T6049] nbd_init+0x168/0x1f0 [ 1397.868903][ T6049] do_one_initcall+0x250/0x870 [ 1397.874317][ T6049] do_initcall_level+0x10a/0x1a0 [ 1397.880060][ T6049] do_initcalls+0x59/0xa0 [ 1397.884925][ T6049] kernel_init_freeable+0x29d/0x3e0 [ 1397.890655][ T6049] kernel_init+0x22/0x1d0 [ 1397.895542][ T6049] ret_from_fork+0x514/0xb70 [ 1397.900948][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1397.906381][ T6049] [ 1397.906381][ T6049] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1397.914224][ T6049] __mutex_lock+0x19d/0x1550 [ 1397.919360][ T6049] elevator_change+0x1af/0x480 [ 1397.924659][ T6049] elevator_set_none+0xb5/0x140 [ 1397.930064][ T6049] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1397.936496][ T6049] nbd_start_device+0x189/0xb30 [ 1397.941885][ T6049] nbd_genl_connect+0x167d/0x1cd0 [ 1397.947592][ T6049] genl_family_rcv_msg_doit+0x233/0x340 [ 1397.953677][ T6049] genl_rcv_msg+0x614/0x7a0 [ 1397.958726][ T6049] netlink_rcv_skb+0x226/0x4a0 [ 1397.964042][ T6049] genl_rcv+0x28/0x40 [ 1397.968659][ T6049] netlink_unicast+0x7bd/0x940 [ 1397.973961][ T6049] netlink_sendmsg+0x813/0xb40 [ 1397.979268][ T6049] sock_sendmsg_nosec+0x13a/0x180 [ 1397.984946][ T6049] ____sys_sendmsg+0x54e/0x850 [ 1397.990250][ T6049] ___sys_sendmsg+0x2a5/0x360 [ 1397.995458][ T6049] __x64_sys_sendmsg+0x1b1/0x290 [ 1398.001186][ T6049] do_syscall_64+0x166/0x520 [ 1398.006337][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.012964][ T6049] [ 1398.012964][ T6049] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1398.021758][ T6049] blk_alloc_queue+0x544/0x690 [ 1398.027076][ T6049] __blk_mq_alloc_disk+0x194/0x390 [ 1398.032834][ T6049] nbd_dev_add+0x494/0xb60 [ 1398.037806][ T6049] nbd_init+0x168/0x1f0 [ 1398.042526][ T6049] do_one_initcall+0x250/0x870 [ 1398.048014][ T6049] do_initcall_level+0x10a/0x1a0 [ 1398.053576][ T6049] do_initcalls+0x59/0xa0 [ 1398.058443][ T6049] kernel_init_freeable+0x29d/0x3e0 [ 1398.064184][ T6049] kernel_init+0x22/0x1d0 [ 1398.069147][ T6049] ret_from_fork+0x514/0xb70 [ 1398.074272][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1398.079578][ T6049] [ 1398.079578][ T6049] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1398.086806][ T6049] __lock_acquire+0x15ff/0x2e50 [ 1398.092195][ T6049] lock_acquire+0x115/0x350 [ 1398.097316][ T6049] fs_reclaim_acquire+0x71/0x100 [ 1398.102879][ T6049] __kmalloc_noprof+0xbc/0x720 [ 1398.108263][ T6049] kobject_get_path+0xc5/0x2f0 [ 1398.113704][ T6049] kobject_move+0x2fa/0x720 [ 1398.118765][ T6049] device_move+0xe0/0x720 [ 1398.123628][ T6049] hci_conn_del_sysfs+0xb8/0x1a0 [ 1398.129344][ T6049] hci_conn_del+0xc3d/0x1200 [ 1398.134813][ T6049] hci_abort_conn_sync+0xdd0/0x1190 [ 1398.140728][ T6049] hci_cmd_sync_work+0x20b/0x3f0 [ 1398.146237][ T6049] process_scheduled_works+0xc3d/0x1630 [ 1398.152317][ T6049] worker_thread+0xa47/0xfb0 [ 1398.157445][ T6049] kthread+0x38b/0x480 [ 1398.162042][ T6049] ret_from_fork+0x514/0xb70 [ 1398.167261][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1398.172582][ T6049] [ 1398.172582][ T6049] other info that might help us debug this: [ 1398.172582][ T6049] [ 1398.182905][ T6049] Chain exists of: [ 1398.182905][ T6049] fs_reclaim --> cpuhp_state-up --> dpm_list_mtx [ 1398.182905][ T6049] [ 1398.195182][ T6049] Possible unsafe locking scenario: [ 1398.195182][ T6049] [ 1398.202643][ T6049] CPU0 CPU1 [ 1398.208012][ T6049] ---- ---- [ 1398.213510][ T6049] lock(dpm_list_mtx); [ 1398.217714][ T6049] lock(cpuhp_state-up); [ 1398.224657][ T6049] lock(dpm_list_mtx); [ 1398.231354][ T6049] lock(fs_reclaim); [ 1398.235373][ T6049] [ 1398.235373][ T6049] *** DEADLOCK *** [ 1398.235373][ T6049] [ 1398.243684][ T6049] locks held by kworker/u9:13/6049: 5, last CPU#0: [ 1398.251039][ T6049] #0: ffff88804ea1d940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1398.261862][ T6049] #1: ffffc9000391fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1398.274574][ T6049] #2: ffff888024a0cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1398.284441][ T6049] #3: ffff888024a0c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1398.294219][ T6049] #4: ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 1398.303207][ T6049] [ 1398.303207][ T6049] stack backtrace: [ 1398.309108][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u9:13 Not tainted syzkaller #0 PREEMPT(full) [ 1398.318831][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1398.329074][ T6049] Workqueue: hci3 hci_cmd_sync_work [ 1398.334295][ T6049] Call Trace: [ 1398.337598][ T6049] [ 1398.340539][ T6049] dump_stack_lvl+0xe8/0x150 [ 1398.345181][ T6049] print_circular_bug+0x2e2/0x300 [ 1398.350244][ T6049] check_noncircular+0x12f/0x150 [ 1398.355216][ T6049] __lock_acquire+0x15ff/0x2e50 [ 1398.360193][ T6049] ? lockdep_hardirqs_on+0x7b/0x110 [ 1398.365425][ T6049] ? irqentry_exit+0x218/0x910 [ 1398.370225][ T6049] ? trace_irq_disable+0x3b/0x140 [ 1398.375267][ T6049] ? __bfs+0x153/0x290 [ 1398.379361][ T6049] ? __pfx_hlock_conflict+0x10/0x10 [ 1398.384592][ T6049] lock_acquire+0x115/0x350 [ 1398.389109][ T6049] ? __kmalloc_noprof+0xbc/0x720 [ 1398.394068][ T6049] ? __lock_acquire+0x14b9/0x2e50 [ 1398.399235][ T6049] ? kobject_get_path+0xc5/0x2f0 [ 1398.404201][ T6049] fs_reclaim_acquire+0x71/0x100 [ 1398.409245][ T6049] ? __kmalloc_noprof+0xbc/0x720 [ 1398.414296][ T6049] __kmalloc_noprof+0xbc/0x720 [ 1398.419173][ T6049] ? get_device_parent+0x20d/0x3a0 [ 1398.424304][ T6049] ? kobject_get_path+0xc5/0x2f0 [ 1398.429248][ T6049] ? kobject_get_path+0xc5/0x2f0 [ 1398.434373][ T6049] kobject_get_path+0xc5/0x2f0 [ 1398.439150][ T6049] kobject_move+0x2fa/0x720 [ 1398.443662][ T6049] ? __pfx_kobject_move+0x10/0x10 [ 1398.448780][ T6049] ? do_raw_spin_unlock+0xf5/0x200 [ 1398.453920][ T6049] ? get_device_parent+0x366/0x3a0 [ 1398.459230][ T6049] device_move+0xe0/0x720 [ 1398.463578][ T6049] hci_conn_del_sysfs+0xb8/0x1a0 [ 1398.468815][ T6049] hci_conn_del+0xc3d/0x1200 [ 1398.473429][ T6049] ? hci_abort_conn_sync+0xa7b/0x1190 [ 1398.478848][ T6049] hci_abort_conn_sync+0xdd0/0x1190 [ 1398.484076][ T6049] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1398.489810][ T6049] ? abort_conn_sync+0x26/0x210 [ 1398.494674][ T6049] ? abort_conn_sync+0x26/0x210 [ 1398.499528][ T6049] ? abort_conn_sync+0x19c/0x210 [ 1398.504563][ T6049] ? __pfx_abort_conn_sync+0x10/0x10 [ 1398.510035][ T6049] hci_cmd_sync_work+0x20b/0x3f0 [ 1398.515075][ T6049] ? process_scheduled_works+0x97a/0x1630 [ 1398.520892][ T6049] process_scheduled_works+0xc3d/0x1630 [ 1398.526470][ T6049] ? __pfx_process_scheduled_works+0x10/0x10 [ 1398.532576][ T6049] ? assign_work+0x3cf/0x5d0 [ 1398.537191][ T6049] worker_thread+0xa47/0xfb0 [ 1398.541806][ T6049] ? __kthread_parkme+0x71/0x1f0 [ 1398.546934][ T6049] kthread+0x38b/0x480 [ 1398.551011][ T6049] ? __pfx_worker_thread+0x10/0x10 [ 1398.556219][ T6049] ? __pfx_kthread+0x10/0x10 [ 1398.561006][ T6049] ret_from_fork+0x514/0xb70 [ 1398.565862][ T6049] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.571195][ T6049] ? __switch_to+0xc89/0x1420 [ 1398.576251][ T6049] ? __pfx_kthread+0x10/0x10 [ 1398.580942][ T6049] ret_from_fork_asm+0x1a/0x30 [ 1398.585816][ T6049] [ 1398.595483][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1398.648677][T12905] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1398.648951][T25246] tipc: Node number set to 2641390357 [ 1400.605861][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1401.165945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1402.685552][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1404.765758][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1406.845426][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected!