last executing test programs: 3.780021406s ago: executing program 2 (id=3830): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) (async) listen(0xffffffffffffffff, 0x568) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000180)={r4, r5, 0x3, 0x0, 0x0, 0x9, 0xb, 0x15c2, 0x5508, 0xc336, 0x2, 0xb, 'syz1\x00'}) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r9, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3.500652298s ago: executing program 2 (id=3834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffe0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000200010000001c0012800900010069706970000000000c000280080002007f00006ced2a796702fbf8c4d2ca377a82e50108001f0008000000"], 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r6}) setsockopt$inet6_tcp_int(r7, 0x6, 0x18, &(0x7f0000000240), 0x4) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="066d3d72297c50cb8724df14d9db36c846fd0d118b3ec480aade5c18cf88482468", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1e0001"], 0x2c}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x240020c0}, 0x4000) 3.49501586s ago: executing program 0 (id=3835): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x3e, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x100}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.853007412s ago: executing program 0 (id=3841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000)=0x2cbab48e, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10040203}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYBLOB="a16b74413d7c2bb9c4224e1305c1c5c1542bfbd4f83390ba889f2b4cfcd96be68536b4fdf352cecd5f6a16fb3b891ff37eb319d42bc2e0b7a47df9158eb3fd3bd54451f8b92e9b65c64dc24bfd7f6f6b286d977f555c696e12a9ae4d0954b91d0bd9980170f0e679df206d5793efbb48685d8b8a946da881229a6167a506", @ANYRES64=r8, @ANYRESOCT=r5, @ANYRES64=r6], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r10, 0x400, 0x70bd2c, 0x25dedbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 2.677961305s ago: executing program 0 (id=3844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x66) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 2.523224493s ago: executing program 2 (id=3845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="08004305060005000000c40000c7ec0f"], 0x1200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="08004305060005000000c40000c7ec0f"], 0x1200) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) (async) 2.310585587s ago: executing program 3 (id=3846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd1f}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x10000000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1fc}}, 0x40800) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xfffffffc}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 2.203627499s ago: executing program 2 (id=3847): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x180}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 2.103859259s ago: executing program 2 (id=3848): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000d1000c000000000001000085000000ab0000000000000000000000ff78ed5812f5cfef73fc9b0f493d8151b61ff62f55cf1c4bfa1ea95cd21a374e0577ef80aec253286012026b721b473af3faf18886458927cb10163bc609c4c3f4af26bd4d40c364a588fa495ee24ba995bc68d4139b3f81cc0e0fa4a6e8a34f0668d63d8c0c"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) (async) sendmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000500)="5fa28d", 0x3}], 0x1, &(0x7f0000000b40)=[{0x10, 0x115, 0x5}], 0x10}}], 0x1, 0x404c044) r4 = socket(0x2d, 0x2, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000001bc0)={0x2, 0x6, 0x5, 0x749758e2, 0x5, 0x0, 0x9}) (async) connect$qrtr(r4, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=@getchain={0x34, 0x66, 0x810, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {0x7, 0xa}, {0x1, 0xffe0}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, r9, 0x3e}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x2, 0x2, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7820, 0x6, 0x7ff}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x1428, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_WOL_MODES={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#%$$!.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x13d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "85cbe737a538fbc2a7746673af0554bcc5465e406f354dfc582702c93cd81dc40f0c08bc4fc8d5d1b70342a8758161ff8ba8f0003c"}, @ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "1d67c81d24414c858e07f189950928c502280523165a03a95691c29875dd45709bea78898f986b15685cf5439123f588f4fc16f5c718d8553f825a59cecab9651a236eea5504d6190b6408c1bea1a0b6da0cfd7bb54095f29c1af2ffbb3cfd6f9f2c0830b7193b64741264592eb77f0762b6e4a67e19413094f8b998c907236456af03f34a20e0ee620ba854b0c4c9aee2dac55c9378bdd4b30fea4f14f002c01c201b566dcdcbf0a423f2da4f2c4bbea25dada875e2eb937cdffda1006de1e4da10a2aadb88a7"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "23349f0d6b6b7235b0af490f7d8f14d43cda3e897bdc4a1dd796dda96798c2d69fa8f182a32a4b09c0aa4a793e19c0ab6f28910cdc35154041ac641568b6fa8d9a66c344ed88e6a6d1a9ac23443ed9c48eefd7e4c5fcc10965deaf73b6917fc4c7ad596d2240073847cd864e0cb9f60f4da18dcd2b00fa469866f62dc2fd4b851cc0f13103984f1eb7c0cf75c41212d8b40fa822baeac9a477a475203302b03b43d039de81535f3f1f20d4b26118cc4fb84e3b58ee7d6ca36f4332bcffa118b1179054f1206a5bfefd4e0e5a871a84605c04"}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "558e73a148a6907b82b1a2212c6ee00e62da73c0ec659061462c1becf776e22a22f737c575123bab3db39e5183e34a2dc13234bc98c040e680a76bb18e65f102041046209630990a1bc607145ac8d8945ec4c83133c3e4cdb0db0b00e7ca927cd6e017e63f387f2c928db841d6ac54d9d8059a38104fe95affec4ed9de83be6b72b8e1525c3f018139f46386e919b9864fc31e1fa9048ed8ebca769645400416444f89d616e28bae139049024f8c0085ee896633479416790ce3de"}, @ETHTOOL_A_BITSET_MASK={0x6f, 0x5, "3d4ed7674da71b007911d128de0124a820fa06e3cb778d80b36c23560ae3f7aa348831a8a5a9f0444142376ee344847cc582b5165970e36a7caa785f0bc05fd51759736249d8260112df78b5d9e8c951482a8d944761cd78f151ce295c26fa4ac74f8625469348e04d8fd2"}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.^\\k!(*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '(b-&%/@.[:\\#,:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@}-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.-/\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1428}, 0x1, 0x0, 0x0, 0x2}, 0x80) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=@delchain={0x2c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff1, 0xfff3}, {0x3, 0x10}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xa2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) 2.013388174s ago: executing program 4 (id=3849): r0 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet(r2, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f1", 0x1}], 0x1}}], 0x1, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x26020480) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000002dc0)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @local, 0x800}}, 0x1a9, 0x0, 0x6, 0x2, 0x0, 0x6, 0x9}, &(0x7f0000002e80)=0x9c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x75e, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x941, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c000280080007000a0101020a000100aaaaaaaaaa000000"], 0x48}}, 0x840) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000100), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESOCT=r3, @ANYRESDEC=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1200"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r8, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r9, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) listen(r9, 0xe) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r10, 0x4) syz_emit_ethernet(0x100, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) 1.927551708s ago: executing program 1 (id=3850): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x2, @remote, 0x9}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x8, @empty, 0x2}, @in6={0xa, 0x4e22, 0x4, @private0, 0x1000}], 0x64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000002e0000000a00eaff070000000000000700000000000000000000000903000000080000000004000f0100000000000000005c00005f00"], 0x0, 0x46}, 0x20) unshare(0x24020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r3, 0x0, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, 0xf, 0x6, 0xb81, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x63, 0x6, "ccf0a08cc488d5d8080bb8a741566f5b279d0f98ac31aeaf06911b0f4cd73663a842310ee9c96465ca1e8f71a57e372d3afade58229d7dcb2cd76ab20bbc9770e9e0b2e29a2af0b23cc1f56f50e8016d46cd0cad144a263fd4c9fa790e6391"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r8, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="8f4b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001640)="a919fb1d", 0x4}], 0x1, &(0x7f0000001a40)=ANY=[@ANYBLOB="10000000000000000100000008003b79"], 0x10}}], 0x2, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x80000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) 1.883577176s ago: executing program 2 (id=3851): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x115, 0x70bd2b, 0x25dfdbfd, {0x2, 0x18, 0x10, 0x0, 0x0, 0x3, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x0, 0x80000, 0x3) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x400, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000300)=@ethtool_perm_addr}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.712554601s ago: executing program 0 (id=3852): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x97}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000130a030000000000010073797a3000000000090084fd020073797a3100001f0008c5b3ef9ea2721f"], 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x400}) socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0xb4, 0x24, 0x800, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff2}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x97, 0x7, 0x3, 0x5, 0x1, 0x3, 0x401, 0x7}}, {0x12, 0x2, [0x81, 0x0, 0x9, 0x5, 0xd, 0x5, 0x0]}}, {{0x1c, 0x1, {0x97, 0x7, 0x8001, 0x4, 0x1, 0x10, 0x3, 0x5}}, {0xe, 0x2, [0x9, 0x100, 0x4, 0x7, 0x8]}}, {{0x1c, 0x1, {0x8, 0xad, 0x5, 0xffffff7f, 0x0, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0xf, 0xc, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10ae}]}, 0xb4}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.318565913s ago: executing program 3 (id=3853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r6, &(0x7f0000000a80)={&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000840)=""/184, 0xb8}, {&(0x7f0000000700)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x8}, 0x2) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x18) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1e8, 0x1, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CT={0x38, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_STATUS={0x8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_EXP={0xa8, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xd2b2}]}, @NFQA_PAYLOAD={0xbc, 0xa, "fd4d1a1c7cdec919a9dda83a69d9992d048b6c624a63d67d7ebcc81cd335cc9159ff465ac7a7cb1d76ff9c9e8b9649973598d7b6cd5979755ef6142a3680fa62353e7fc1793e22db328642071a5bc45906f809057707a3b70cb553302a5c30d866e721ba224d8ff7fea34574bc035d891ad3236b32bc011569c52faa0f85b2589341c62046feb4d6c1e6202be74b8b823de9089423e63413771d08658d3e7abcccc38a205ee00c7d85032db5a2b64cd22c28dbed1b9c5190"}, @NFQA_PAYLOAD={0x10, 0xa, "cc4b803d1fe063d0a69ece8b"}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x840) 1.019861502s ago: executing program 1 (id=3854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) unshare(0x60600) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="100e03d8", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0xe10}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 898.553562ms ago: executing program 4 (id=3855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000000)={0x977, 0x4, 0xa7, 0xe8ac, 0x4, 0x101, 0x1, 0x7}) close(0x3) 824.903522ms ago: executing program 1 (id=3856): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x79, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112a9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 735.506317ms ago: executing program 3 (id=3857): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000018c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@delqdisc={0x2c, 0x25, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0x2}, {0xa, 0x10}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa03a60e3ed5ec1be}, 0x4000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2020600) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x276f) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x100, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@ipv4, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl$XFS_IOC_BULKSTAT(r6, 0x8040587f, &(0x7f0000000640)={{0x2, 0x0, 0xf, 0x0, 0x6c0}, &(0x7f0000000340)=[{}, {}, {}, {}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {}, 0xa}}, 0x26) sendmmsg$inet(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@report={0x54, 0x20, 0x2, 0x70bd2d, 0x25dfdbfd, {0x2b, {@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x8, 0x4e22, 0x7, 0xa, 0xe0, 0xa0, 0x3b, 0x0, r7}}, [@proto={0x5, 0x19, 0x32}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 734.830695ms ago: executing program 0 (id=3858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700073350111e0014000000110001"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_init_net_socket$ax25(0x3, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000002010300000000000000000700000b04000a8008000540000000dd0e0e06007369702d3230303030000000100001800c000280050001002f0000005800038006000340000100001400018008000100ac1e000108000200000000002c000180140003000000000000000000000000000000000014000400fc0000000000000000000000000000010c0002800500010000000000b42c81e379b30fd9e8e724912aaa2121b4fda7e89b06066fc0ec04e6e434"], 0x98}, 0x1, 0x0, 0x0, 0x488c0}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="d956d860d8dcf4a2720288082da5df8883bbe6fea928477ee93a2bc4031283d674d3fcd99587d4fd3e88e2fa6ba885d56a787c4ece112c11ea324f8eab5105efa569310e69a6a1e3215f86a9d535f2939c569f79c6676f1d0a93a9a8388e90a62f59f88b5e3e5bf69413712da888b0d384fcaba7087875e6806653ef619d7d1a84059b7879f1538cd855c623c568625e495b003ad6ce69db1d87cd32f80849f05982796855cff596d38d1256d3558a426e736dbe9489ffc73157a79c9c7e0e30", 0xc0}, {&(0x7f0000001b80)='{3D', 0x3}], 0x2, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x40}}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x2000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf250400000014002000ff020000000000000000000000000001050006000f000000050006000f0004000000000000000005001200f200000005000500b700000014001f00ff010000000000000000000000000001050022000000000008000a000300000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 686.315799ms ago: executing program 1 (id=3859): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7800, 0x29, 0x1, 0x200, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @remote}}}}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="72816e5d8749c257a427275afd8c7b4f77d64a0e0a99998fb075aad92dbb5ce8ae975079851c9f0af10e8057e2ce4db8e3475a2f9b226e7f8b2d8545873be62d25567b24154c0348865a633dab50961c6f8d359d485eb7dea9f55c32cc0ef79e2ebd222cdac7716283e67ce1499e9d47411c87130913aefddf6f8fee4d19dd05f6813c3b08debf176ed54d4aa7ca6f7a1c3ad14a534618f299628396a21fc7fdc152d1b59284079c938f54f254649ed586ebb8dfe5b7ce8f1fa1a25329b2321072bd2adbc8826188dfa18a5a65d1d3a26958fd17de2a28ad6f", 0xd9}, {&(0x7f0000000240)="2093d3e8d4afa67dfab62d280eb9b1dec67bace44a7e2d027c96625dd48beebaa9cf609c88f601c48c0980db1140a0ad91656aef53421cc8d4df6eb9bc069b169ce21e39aeab9295bbd20ac89e52479049c69f3de5321e689bf9e73a5b27fb0108dab49bfd66170b0a2d90e3987eb1091e9b614003600589045998cef94590a44cdcc2c724a250be6f4c6310d3a48f558f50dae5f029333c89ef482ae471ce5411fde4793a9f733416", 0xa9}, {&(0x7f0000000300)="7ea0069570f5980daeaf19abad07082082f2eafed19f76cd953e9e65ff496381807e8ec3ce1cf357b3ffaa0691237959d5c7f51f4169be7e0ee68cb61481ab3f4b7201e83402849e415833c2cbdc8cea", 0x50}, {&(0x7f0000000040)="631b", 0x2}, {&(0x7f0000000380)="b3d9f0f868a964ee6f4ca11a49b363f48403224dd11761a6fbaba034e75a802e6d60c7e9a450f238b406f866b1f97054ddbbd2e64707550750bf1e4dd1bc5a0e8e68fac3c424af0459d63a1865aded86be4c3e2d6da3ac7a1380ea61a60e3a7234b32d9810c020995e9833accf2d63a022b2833e", 0x74}, {&(0x7f0000000500)="7c517b1b0605c975d3c271bd8cd2c6b03df621a08d31c82c399d6fb15b5709dc13857e7dbd10eb38897c40a3b95929fa393865c9b1225fb6c7c194cf0f57846dae7e03e58dd15623be632ad32ef7b04f8f7be630954f67bbe65acbdce7c4b7280c76dcb15bd2c6bb2214d52c85cd0285fd4051a93ebedeb0ff9a95fa96c9c27f8baedb604e0111087b1f7e", 0x8b}, {&(0x7f00000005c0)="8bf3fbc0caf3aa2e8b967dae8523443e819cfe50f2e2433911b1244756b9b5d1d9b4f5364f9df49985300619253fada172df12d9575a2119e409e31107969a69a89034a8da1a841ea55ec3668b7fd9edecd11ff27c805bab3896c13564c939e49bcbbb33c55fb1dc53f285f062b5aa2e721df5254c52dc7b2fc9eb9624770f478afb9cbcf228ad6c6fb8c815df3a926c417f6d4492373c6f5002dbe52f046c2e62", 0xa1}], 0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) shutdown(r1, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x38, 0x18, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x44, 0x4, "97fd"}]}}}}}}, 0x0) accept$alg(r1, 0x0, 0x0) 658.044023ms ago: executing program 4 (id=3860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000", 0x3) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) close(r4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r2, 0x0, r4, 0x0, 0x1120000000f336, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20, 0xa8f1e416535134e9, 0x1, 0xfd, 0x0, 0xff, 0x0, 0x2d00}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20, 0xa8f1e416535134e9, 0x1, 0xfd, 0x0, 0xff, 0x0, 0x2d00}}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, r8, 0x37, 0x3c}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, r8, 0x37, 0x3c}, 0x20) accept4(r0, 0x0, 0x0, 0x80800) (async) r9 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) shutdown(r5, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0xf5000000}, 0x10000) 499.457873ms ago: executing program 0 (id=3861): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001a0001002538d11a45dbdf250a8110fffd01fe07000600000800100002000000080003000226e2"], 0x2c}}, 0x24000080) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x7f]}, {0xd, 0x6, 0x8, 0x6}}, 0x8ce9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x401}, {[0xf8c, 0x3, 0x4, 0x2]}, 0xc, 0xc7, &(0x7f0000000240)=""/199}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x100, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}]}, @CTA_TUPLE_MASTER={0xa0, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x57}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040090) unshare(0x68040200) 499.060836ms ago: executing program 4 (id=3862): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="01002cbd7000fcdbdf2501000000140002007767300000000000000000000000000058000880540000800400098024000100f44da367a88ee6564f020211456727081f0aeb"], 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@can_newroute={0x154, 0x18, 0x10, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x125, 0x6, {0x2, 0x6, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e55693c5c4bf897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301a23a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x2, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_UID, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x7, 0x3, 0x0, 0x0, "49653dd9ae1d82b3"}, 0x2}}, @CGW_MOD_XOR={0xa0227b08ecf05de6, 0x3, {{{0x4, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "d9b490f6174a65da"}}}, @CGW_CS_XOR={0x0, 0x5, {0x5, 0x3, 0xfffffffffffffff8, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x4800) (async, rerun: 32) r2 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (rerun: 32) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) (async, rerun: 64) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000000000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x8befc8e1ce82796c) (async) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, &(0x7f0000000040)) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) (async) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="2d6e3e7ed02c6c73202d637075202d626c6b696f20"], 0x15) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 458.582683ms ago: executing program 3 (id=3863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffe0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) 402.684269ms ago: executing program 1 (id=3864): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c000280080002400000000208000300000000000800010073657400"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 315.870478ms ago: executing program 4 (id=3865): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x1d, 0x221, 0x0, 0x0, {0x7}, [@nested={0xa, 0x85, 0x0, 0x1, [@generic="e6d42da5accf"]}]}, 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x1d, 0x221, 0x0, 0x0, {0x7}, [@nested={0xa, 0x85, 0x0, 0x1, [@generic="e6d42da5accf"]}]}, 0x20}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000080) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000100000042000000400000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB="00000000000000000000000042c943a19e3b66000000000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000ac0), 0x0}, 0x20) close(0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r5) (async) syz_genetlink_get_family_id$net_dm(0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1041}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 314.757356ms ago: executing program 3 (id=3866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x7fff}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x30, 0xec, 0x5f]}}, &(0x7f0000000400)=""/25, 0x4b, 0x19, 0x1, 0x5, 0x10000, @value=r3}, 0x28) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x20, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x50604e01}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0xffffffff, 0x12, &(0x7f00000005c0)=""/18, 0x40f00, 0x20, '\x00', r2, @fallback=0x2b, r4, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000640)=[r0, r0, r1, r0], &(0x7f0000000680)=[{0x4, 0x3, 0xd}, {0x1, 0x3, 0x10, 0x1}, {0x2, 0x4, 0xe, 0x3}, {0x1, 0x2, 0xd, 0x9}, {0x5, 0x5, 0x3, 0xc}], 0x10, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r2, @fallback=0x18, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 258.027819ms ago: executing program 3 (id=3867): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r4, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @func_proto={0x0, 0x300}]}}, &(0x7f0000001b80)=""/4090, 0x32, 0xffa, 0xa}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 79.803854ms ago: executing program 1 (id=3868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000250001002ab67000fedbdf250b00000008000e801c005180"], 0x1c}}, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0xc004004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2900000004778e00040000000a0000000000000069040aff88486c11fa7738719eea230aded378", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1c, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4804) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r11, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200008c0}], 0x1, 0x44840) 0s ago: executing program 4 (id=3869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r4, &(0x7f0000000040)=""/13, 0xd, 0x40000141, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x180a0, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x44}}, 0x24) kernel console output (not intermixed with test programs): eezer. See cgroup.freeze of cgroup v2 [ 310.708947][ T7084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 310.902486][T16006] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 310.962633][T15385] udevd[15385]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 310.968333][T16013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2598'. [ 310.996905][T16012] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2599'. [ 311.016470][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'. [ 311.031936][T16006] bond5: entered promiscuous mode [ 311.049313][T16006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.126771][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2601'. [ 311.171613][T16027] ip6t_srh: unknown srh invflags 4000 [ 311.296111][T16033] Unsupported ieee802154 address type: 0 [ 311.316824][T16033] ip6tnl0: Caught tx_queue_len zero misconfig [ 311.361257][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 311.433466][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 311.455915][T16041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2608'. [ 311.635807][T16061] xt_hashlimit: max too large, truncated to 1048576 [ 311.690493][T16064] netlink: 'syz.4.2613': attribute type 2 has an invalid length. [ 311.935306][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2623'. [ 312.115448][T16094] IPVS: Scheduler module ip_vs_sip not found [ 312.433305][T16126] netlink: 'syz.4.2631': attribute type 3 has an invalid length. [ 312.808566][T16142] lo speed is unknown, defaulting to 1000 [ 313.200329][T16142] lo speed is unknown, defaulting to 1000 [ 313.363611][T16171] bond0: entered promiscuous mode [ 313.373544][T16171] bond_slave_0: entered promiscuous mode [ 313.382250][T16171] bond_slave_1: entered promiscuous mode [ 313.388680][T16171] batadv0: entered promiscuous mode [ 313.398332][T16171] bond0: left promiscuous mode [ 313.403146][T16171] bond_slave_0: left promiscuous mode [ 313.411164][T16171] bond_slave_1: left promiscuous mode [ 313.416922][T16171] batadv0: left promiscuous mode [ 313.440404][T16173] bond0: entered promiscuous mode [ 313.463735][T16173] bond_slave_0: entered promiscuous mode [ 313.470738][T16173] bond_slave_1: entered promiscuous mode [ 313.481099][T16173] batadv0: entered promiscuous mode [ 313.489798][T16173] bond0: left promiscuous mode [ 313.494827][T16173] bond_slave_0: left promiscuous mode [ 313.500457][T16173] bond_slave_1: left promiscuous mode [ 313.506386][T16173] batadv0: left promiscuous mode [ 313.882352][T16206] lo speed is unknown, defaulting to 1000 [ 314.023846][T16213] __nla_validate_parse: 8 callbacks suppressed [ 314.023877][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 314.068035][T16213] nbd: couldn't find a device at index 0 [ 314.148192][T16218] bond6: option mode: unable to set because the bond device has slaves [ 314.245539][T16206] lo speed is unknown, defaulting to 1000 [ 314.311809][T16222] netlink: 'syz.3.2659': attribute type 10 has an invalid length. [ 314.333756][T16222] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2659'. [ 314.421166][T16222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.432743][T16222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.446636][T16222] hsr0: entered promiscuous mode [ 314.467103][T16222] bridge0: port 1(hsr0) entered blocking state [ 314.473350][T16222] bridge0: port 1(hsr0) entered disabled state [ 314.480808][T16222] hsr0: entered allmulticast mode [ 314.488597][T16222] hsr_slave_0: entered allmulticast mode [ 314.496374][T16222] hsr_slave_1: entered allmulticast mode [ 314.728610][T16232] lo speed is unknown, defaulting to 1000 [ 314.772363][T16236] ipt_ECN: cannot use operation on non-tcp rule [ 314.953903][T16253] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2667'. [ 315.038984][T16255] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 315.083806][T16255] tipc: Enabled bearer , priority 0 [ 315.102222][T16255] syzkaller0: entered promiscuous mode [ 315.108811][T16255] syzkaller0: entered allmulticast mode [ 315.153805][T16254] tipc: Resetting bearer [ 315.213278][T16254] tipc: Disabling bearer [ 315.241667][T16242] lo speed is unknown, defaulting to 1000 [ 315.252482][T16232] lo speed is unknown, defaulting to 1000 [ 315.425597][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 315.663121][T16270] gtp1: entered promiscuous mode [ 315.674889][T16270] gtp1: entered allmulticast mode [ 315.728303][T16283] netlink: 'syz.0.2678': attribute type 25 has an invalid length. [ 315.747012][T16283] netlink: 'syz.0.2678': attribute type 28 has an invalid length. [ 315.759547][T16236] lo speed is unknown, defaulting to 1000 [ 316.018951][T16236] lo speed is unknown, defaulting to 1000 [ 316.048300][T16242] lo speed is unknown, defaulting to 1000 [ 316.079353][T16301] netlink: 'syz.4.2684': attribute type 2 has an invalid length. [ 316.097347][T16301] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2684'. [ 316.403321][T16311] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2687'. [ 316.435380][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2688'. [ 316.448995][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2688'. [ 316.670472][T16320] syzkaller1: entered promiscuous mode [ 316.714734][T16320] syzkaller1: entered allmulticast mode [ 316.953699][T16333] lo speed is unknown, defaulting to 1000 [ 317.421419][T16371] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2701'. [ 317.590430][ T1299] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 317.751781][T16333] lo speed is unknown, defaulting to 1000 [ 317.801190][T16382] sctp: [Deprecated]: syz.4.2707 (pid 16382) Use of int in maxseg socket option. [ 317.801190][T16382] Use struct sctp_assoc_value instead [ 317.816109][T16388] sctp: [Deprecated]: syz.4.2707 (pid 16388) Use of int in maxseg socket option. [ 317.816109][T16388] Use struct sctp_assoc_value instead [ 318.162526][T16398] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2710'. [ 318.671969][T16410] gtp1: entered promiscuous mode [ 318.693606][T16410] gtp1: entered allmulticast mode [ 318.798940][T16418] sock: sock_timestamping_bind_phc: sock not bind to device [ 319.368337][T16447] __nla_validate_parse: 4 callbacks suppressed [ 319.368361][T16447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2719'. [ 319.715835][T16481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.720369][T16471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2728'. [ 319.936958][T16485] lo speed is unknown, defaulting to 1000 [ 319.987583][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 319.991989][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2735'. [ 320.007745][T16498] Cannot find set identified by id 3 to match [ 320.045432][T16493] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 320.306348][T16513] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2738'. [ 320.349230][T16513] nbd: must specify at least one socket [ 320.387741][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2739'. [ 320.575639][T16514] bond7: entered promiscuous mode [ 320.637091][T16514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.713152][T16516] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.725004][T16516] bond7: (slave ip6tnl7): The slave device specified does not support setting the MAC address [ 320.746725][T16516] bond7: (slave ip6tnl7): Error -95 calling set_mac_address [ 320.840994][T16518] vlan0: entered promiscuous mode [ 320.846398][T16518] hsr_slave_1: entered promiscuous mode [ 320.852292][T16518] vlan0: entered allmulticast mode [ 320.857767][T16518] hsr_slave_1: entered allmulticast mode [ 320.884933][T16485] lo speed is unknown, defaulting to 1000 [ 320.982792][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2741'. [ 320.993808][T16526] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2741'. [ 321.020382][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 321.051744][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 321.073682][T16534] xt_TCPMSS: Only works on TCP SYN packets [ 321.091112][T16534] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 321.105752][T16524] only policy match revision 0 supported [ 321.105774][T16524] unable to load match [ 321.479189][T16548] netlink: 'syz.2.2748': attribute type 3 has an invalid length. [ 321.544663][T16553] pim6reg1: entered promiscuous mode [ 321.550307][T16553] pim6reg1: entered allmulticast mode [ 321.785942][T16563] delete_channel: no stack [ 321.900944][T16581] netlink: 'syz.1.2757': attribute type 13 has an invalid length. [ 321.925144][T16581] netlink: 'syz.1.2757': attribute type 17 has an invalid length. [ 322.098011][T16581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.139049][T16581] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.176255][T16581] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 322.198092][ T620] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.225068][ T620] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.262049][ T620] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.281506][ T620] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 322.340438][T16603] syzkaller0: entered promiscuous mode [ 322.345198][T16610] netlink: 'syz.3.2767': attribute type 61 has an invalid length. [ 322.353926][T16603] syzkaller0: entered allmulticast mode [ 322.466166][T16615] netlink: 'syz.2.2769': attribute type 1 has an invalid length. [ 322.466784][T16612] syzkaller0: entered promiscuous mode [ 322.486505][T16612] syzkaller0: entered allmulticast mode [ 322.496329][T16615] netlink: 'syz.2.2769': attribute type 1 has an invalid length. [ 323.070471][T16655] lo speed is unknown, defaulting to 1000 [ 323.253971][T16663] ip6gretap0: entered promiscuous mode [ 323.280065][T16663] ip6gretap0: left promiscuous mode [ 323.559612][T16655] lo speed is unknown, defaulting to 1000 [ 323.765833][T16682] netlink: 'syz.0.2789': attribute type 10 has an invalid length. [ 323.922602][T16694] syzkaller1: left promiscuous mode [ 323.928018][T16694] syzkaller1: left allmulticast mode [ 324.150944][T16709] netlink: 'syz.0.2797': attribute type 1 has an invalid length. [ 324.202463][T16707] Cannot find add_set index 3 as target [ 324.213265][T16711] syzkaller0: entered promiscuous mode [ 324.237043][T16711] syzkaller0: entered allmulticast mode [ 324.311147][T16709] bond10: entered promiscuous mode [ 324.337327][T16709] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.389424][T16715] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.396908][T16715] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 324.410231][T16715] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 324.423397][T16715] bond10: (slave vti0): making interface the new active one [ 324.431188][T16715] vti0: entered promiscuous mode [ 324.440372][T16715] bond10: (slave vti0): Enslaving as an active interface with an up link [ 324.480007][T16720] __nla_validate_parse: 41 callbacks suppressed [ 324.480033][T16720] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2797'. [ 324.617450][T16726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.634692][T16726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.648071][T16726] hsr0: left promiscuous mode [ 324.660685][T16726] hsr0: left allmulticast mode [ 324.684574][T16726] hsr_slave_0: left allmulticast mode [ 324.706588][T16726] hsr_slave_1: left allmulticast mode [ 325.231855][T16763] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2810'. [ 325.276083][T16764] lo speed is unknown, defaulting to 1000 [ 325.524925][T16770] nbd5: detected capacity change from 0 to 63 [ 325.544892][T16782] netlink: 'syz.1.2810': attribute type 1 has an invalid length. [ 325.552817][T16782] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2810'. [ 325.579530][ T51] block nbd5: Receive control failed (result -104) [ 325.666964][T16793] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2816'. [ 325.725866][T16793] bond11: option lp_interval: invalid value (0) [ 325.732599][T16793] bond11: option lp_interval: allowed values 1 - 2147483647 [ 325.743445][T16793] bond11 (unregistering): Released all slaves [ 325.796329][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2818'. [ 325.853816][T16764] lo speed is unknown, defaulting to 1000 [ 326.097467][T16816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2820'. [ 326.485195][T16833] nbd: socks must be embedded in a SOCK_ITEM attr [ 326.830103][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'. [ 326.851744][T16851] bond0: entered promiscuous mode [ 326.862033][T16851] bond_slave_0: entered promiscuous mode [ 326.868653][T16851] bond_slave_1: entered promiscuous mode [ 326.874751][T16851] batadv0: entered promiscuous mode [ 327.032475][T16851] bond0: left promiscuous mode [ 327.044291][T16851] bond_slave_0: left promiscuous mode [ 327.077144][T16851] bond_slave_1: left promiscuous mode [ 327.088675][T16851] batadv0: left promiscuous mode [ 327.153154][T16861] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 327.280857][T16867] : renamed from dummy0 (while UP) [ 327.503062][T16888] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2839'. [ 327.529849][T16888] Cannot find del_set index 4 as target [ 327.638992][T16883] lo speed is unknown, defaulting to 1000 [ 327.964731][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 328.037222][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'. [ 328.184288][T16916] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 328.300852][T16883] lo speed is unknown, defaulting to 1000 [ 328.307427][T16917] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 328.333620][T16916] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 328.549299][T16920] bond8 (unregistering): Released all slaves [ 328.620697][T16916] bond8: entered promiscuous mode [ 328.626411][T16916] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.125823][T16969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.207306][T16971] vlan3: entered allmulticast mode [ 329.212986][T16971] bridge0: port 3(vlan3) entered blocking state [ 329.224869][T16971] bridge0: port 3(vlan3) entered disabled state [ 329.235740][ T29] audit: type=1800 audit(1773771412.571:2): pid=16973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2859" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2971 res=0 errno=0 [ 329.259971][T16971] vlan3: entered promiscuous mode [ 329.436805][T16986] tipc: Bearer : already 2 bearers with priority 10 [ 329.448185][T16986] tipc: Bearer : trying with adjusted priority [ 329.456191][T16986] tipc: Enabling of bearer rejected, failed to enable media [ 329.487137][T16985] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 330.293891][T17001] netlink: 'syz.4.2866': attribute type 11 has an invalid length. [ 330.801985][T17007] __nla_validate_parse: 3 callbacks suppressed [ 330.802009][T17007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2868'. [ 330.930047][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'. [ 330.962969][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'. [ 330.983826][T17023] gre0: entered promiscuous mode [ 330.992919][T17023] gre0: entered allmulticast mode [ 331.102898][T17028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2874'. [ 331.142136][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 332.025167][T17045] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 332.049111][T17045] netlink: 'syz.2.2878': attribute type 7 has an invalid length. [ 332.070384][T17045] netlink: 'syz.2.2878': attribute type 8 has an invalid length. [ 332.090659][T17045] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2878'. [ 332.128330][T17055] wg1: Master is either lo or non-ether device [ 332.541647][T17081] netlink: 'syz.3.2886': attribute type 48 has an invalid length. [ 332.633559][T17081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.097850][T17121] bond11: entered promiscuous mode [ 333.185996][T17121] vcan0: entered promiscuous mode [ 333.194277][T17121] vcan0: entered allmulticast mode [ 333.202377][T17121] bond11: (slave vcan0): The slave device specified does not support setting the MAC address [ 333.248303][T17121] bond11: (slave vcan0): Error -95 calling set_mac_address [ 333.361578][T17132] SET target dimension over the limit! [ 333.522576][T17141] netlink: 'syz.2.2901': attribute type 1 has an invalid length. [ 333.530684][T17141] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2901'. [ 333.630900][T17147] netlink: 'syz.3.2892': attribute type 3 has an invalid length. [ 333.644390][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 333.969849][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2906'. [ 334.004288][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 334.249406][T17179] netlink: 'syz.2.2911': attribute type 16 has an invalid length. [ 334.284579][T17179] netlink: 'syz.2.2911': attribute type 17 has an invalid length. [ 334.322554][T17179] gre0: left promiscuous mode [ 334.333422][T17179] gre0: left allmulticast mode [ 334.383718][T17179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.397815][T17179] bridge0: port 1(dummy0) entered blocking state [ 334.404364][T17179] bridge0: port 1(dummy0) entered listening state [ 334.453700][T17179] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 334.633462][T17198] lo speed is unknown, defaulting to 1000 [ 335.163113][T17198] lo speed is unknown, defaulting to 1000 [ 335.163160][T17208] lo speed is unknown, defaulting to 1000 [ 335.529999][T17239] netlink: 'syz.2.2925': attribute type 2 has an invalid length. [ 335.587272][T17245] syzkaller0: entered promiscuous mode [ 335.592805][T17245] syzkaller0: entered allmulticast mode [ 335.605936][T17245] 0: reclassify loop, rule prio 0, protocol 800 [ 335.711396][T17252] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 335.772398][T17208] lo speed is unknown, defaulting to 1000 [ 335.790887][T17252] gretap1: entered allmulticast mode [ 335.852390][T17252] bond16: (slave gretap1): making interface the new active one [ 335.862187][T17252] bond16: (slave gretap1): Enslaving as an active interface with an up link [ 335.991234][T17267] __nla_validate_parse: 7 callbacks suppressed [ 335.991254][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2932'. [ 336.118628][T17253] lo speed is unknown, defaulting to 1000 [ 336.141558][T17275] netlink: 'syz.4.2933': attribute type 3 has an invalid length. [ 336.644781][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 336.865689][T17315] sock: sock_timestamping_bind_phc: sock not bind to device [ 336.884709][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 336.970268][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'. [ 337.045789][T17317] bond17 (unregistering): Released all slaves [ 337.176960][T17253] lo speed is unknown, defaulting to 1000 [ 337.292818][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 337.410365][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 337.616675][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 338.344821][T17374] netlink: 'syz.1.2952': attribute type 35 has an invalid length. [ 338.478989][T17381] IPVS: set_ctl: invalid protocol: 102 172.30.1.5:20002 [ 338.507090][T17378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2954'. [ 338.928875][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.940211][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.949643][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.958780][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.966720][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.988279][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.997584][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.008487][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.024477][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.032425][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.088392][T17407] lo speed is unknown, defaulting to 1000 [ 339.168280][T17416] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2965'. [ 339.389529][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 339.596815][T17407] lo speed is unknown, defaulting to 1000 [ 339.820250][T17464] xt_TCPMSS: Only works on TCP SYN packets [ 339.894046][T17460] lo speed is unknown, defaulting to 1000 [ 339.965188][T17465] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 339.984682][T17465] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 340.019118][T17469] batman_adv: batadv0: Removing interface: gretap2 [ 340.172838][T17460] lo speed is unknown, defaulting to 1000 [ 340.247684][T17462] lo speed is unknown, defaulting to 1000 [ 340.259815][T17407] chnl_net:caif_netlink_parms(): no params data found [ 340.400817][T17492] netlink: 'syz.0.2982': attribute type 1 has an invalid length. [ 340.423699][T17492] netlink: 'syz.0.2982': attribute type 2 has an invalid length. [ 340.431998][T17492] netlink: 'syz.0.2982': attribute type 2 has an invalid length. [ 340.442135][T17492] netlink: 'syz.0.2982': attribute type 2 has an invalid length. [ 340.496672][T17488] bond17: option arp_interval: invalid value (18446744073709551615) [ 340.511500][T17488] bond17: option arp_interval: allowed values 0 - 2147483647 [ 340.542146][T17488] bond17 (unregistering): Released all slaves [ 340.813252][T17504] syzkaller0: entered promiscuous mode [ 340.823194][T17504] syzkaller0: entered allmulticast mode [ 340.924278][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.936399][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.946621][T17407] bridge_slave_0: entered allmulticast mode [ 340.956691][T17407] bridge_slave_0: entered promiscuous mode [ 341.020333][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.034391][T17407] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.042162][T17407] bridge_slave_1: entered allmulticast mode [ 341.049732][T17407] bridge_slave_1: entered promiscuous mode [ 341.056848][T17462] lo speed is unknown, defaulting to 1000 [ 341.094583][ T5827] Bluetooth: hci5: command tx timeout [ 341.165268][T17510] lo speed is unknown, defaulting to 1000 [ 341.238704][T17407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.304228][T17407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.413477][T17407] team0: Port device team_slave_0 added [ 341.435468][T17407] team0: Port device team_slave_1 added [ 341.515155][T17407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.522384][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.549629][T17407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.560744][T17526] __nla_validate_parse: 6 callbacks suppressed [ 341.560764][T17526] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2988'. [ 341.577994][T17510] lo speed is unknown, defaulting to 1000 [ 341.585435][T17407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.592635][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.644171][T17407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.691157][T17529] netlink: 'syz.0.2989': attribute type 2 has an invalid length. [ 341.701995][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 341.855419][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 341.857510][T17407] hsr_slave_0: entered promiscuous mode [ 341.871280][T17407] hsr_slave_1: entered promiscuous mode [ 341.883799][T17407] debugfs: 'hsr0' already exists in 'hsr' [ 341.890175][T17407] Cannot create hsr debugfs directory [ 343.176275][ T5827] Bluetooth: hci5: command tx timeout [ 343.439696][T17564] pimreg: tun_chr_ioctl cmd 35108 [ 343.525906][T17407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.551409][T17566] netlink: 1315 bytes leftover after parsing attributes in process `syz.0.2997'. [ 343.565588][T17407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.598271][T17564] netlink: 'syz.2.2996': attribute type 8 has an invalid length. [ 343.625550][T17563] xt_CT: No such helper "syz0" [ 343.630254][T17407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.761005][T17407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.782143][T17570] lo speed is unknown, defaulting to 1000 [ 343.950216][T17407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.993041][T17407] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.028661][T15843] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.035904][T15843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.055658][T15843] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.062847][T15843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.169317][T17407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.414732][T17611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3005'. [ 344.520256][T17570] lo speed is unknown, defaulting to 1000 [ 344.549736][T17571] lo speed is unknown, defaulting to 1000 [ 344.683301][T17617] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3006'. [ 344.738854][T17618] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 344.916723][T17625] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 344.948667][T17625] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 344.964351][T17625] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 344.977857][T17625] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 345.001962][T17625] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 345.042323][T17407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.148509][T17571] lo speed is unknown, defaulting to 1000 [ 345.166514][T17407] veth0_vlan: entered promiscuous mode [ 345.228019][T17407] veth1_vlan: entered promiscuous mode [ 345.258777][ T5827] Bluetooth: hci5: command tx timeout [ 345.339989][T17642] sctp: [Deprecated]: syz.0.3012 (pid 17642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.339989][T17642] Use struct sctp_sack_info instead [ 345.412503][T17638] bond17: (slave bond_slave_1): Device is not bonding slave [ 345.421584][T17638] bond17: option active_slave: invalid value (bond_slave_1) [ 345.432720][T17638] bond17 (unregistering): Released all slaves [ 345.452401][T17642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 345.462193][T17642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 345.471678][T17642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 345.481102][T17642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 345.664026][T17407] veth0_macvtap: entered promiscuous mode [ 345.709044][T17407] veth1_macvtap: entered promiscuous mode [ 345.835919][T17407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.863330][T17407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.906769][T15843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.935653][T15843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.954608][T15843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.982719][T15843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.024504][T17659] netlink: 'syz.0.3019': attribute type 1 has an invalid length. [ 346.034737][T17659] netlink: 'syz.0.3019': attribute type 22 has an invalid length. [ 346.099223][T17662] netlink: 'syz.3.3020': attribute type 21 has an invalid length. [ 346.125065][T17662] netlink: 'syz.3.3020': attribute type 4 has an invalid length. [ 346.146195][ T7072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.167632][ T7072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.209760][T17662] nbd: socks must be embedded in a SOCK_ITEM attr [ 346.227697][T15843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.236852][T15843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.256435][T17662] nbd: nbd64 already in use [ 346.454679][T17679] ip6gretap3: entered allmulticast mode [ 346.896237][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.907378][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.918644][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.927855][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.933185][T17690] lo speed is unknown, defaulting to 1000 [ 346.944701][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.273910][T17690] lo speed is unknown, defaulting to 1000 [ 347.296109][T17691] lo speed is unknown, defaulting to 1000 [ 347.335740][ T51] Bluetooth: hci5: command tx timeout [ 347.772027][T17699] syzkaller1: entered promiscuous mode [ 347.784131][T17699] syzkaller1: entered allmulticast mode [ 347.791778][T17704] __nla_validate_parse: 144 callbacks suppressed [ 347.791801][T17704] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3029'. [ 347.925143][T17691] lo speed is unknown, defaulting to 1000 [ 347.957302][T17716] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3032'. [ 347.973961][T17718] "syz.0.3033" (17718) uses obsolete ecb(arc4) skcipher [ 348.057339][T17719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3033'. [ 348.279102][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 348.302224][T17728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3036'. [ 348.350727][T17728] ip6gretap3: entered allmulticast mode [ 348.409872][T17736] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003 [ 348.465473][T17740] netlink: set zone limit has 4 unknown bytes [ 348.682008][T17691] chnl_net:caif_netlink_parms(): no params data found [ 348.720530][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 348.762465][T17764] validate_nla: 3 callbacks suppressed [ 348.762483][T17764] netlink: 'syz.2.3047': attribute type 30 has an invalid length. [ 348.839085][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 348.849698][T15843] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.864210][T15843] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.888442][T17764] netlink: 'syz.2.3047': attribute type 30 has an invalid length. [ 348.902533][T15843] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.912510][T15843] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.973825][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.982172][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.989728][T17691] bridge_slave_0: entered allmulticast mode [ 349.001178][T17691] bridge_slave_0: entered promiscuous mode [ 349.014966][ T51] Bluetooth: hci0: command tx timeout [ 349.083698][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.099090][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.134419][T17691] bridge_slave_1: entered allmulticast mode [ 349.152574][T17691] bridge_slave_1: entered promiscuous mode [ 349.165515][T17776] lo speed is unknown, defaulting to 1000 [ 349.198245][T17780] bond10: option downdelay: invalid value (18446744073709551615) [ 349.206858][T17780] bond10: option downdelay: allowed values 0 - 2147483647 [ 349.231809][T17780] bond10 (unregistering): Released all slaves [ 349.436890][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.468642][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.574222][ C1] bridge0: port 1(dummy0) entered learning state [ 349.717415][T17813] netlink: 91 bytes leftover after parsing attributes in process `syz.1.3058'. [ 349.732246][T17691] team0: Port device team_slave_0 added [ 349.756772][T17776] lo speed is unknown, defaulting to 1000 [ 349.756794][T17777] lo speed is unknown, defaulting to 1000 [ 349.765231][T17691] team0: Port device team_slave_1 added [ 349.882070][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.894263][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.936224][T17821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3059'. [ 349.954196][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.997654][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.009249][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.036349][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.101500][T17820] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3060'. [ 350.230045][T17820] team0: Port device dummy0 removed [ 350.249732][T17818] lo speed is unknown, defaulting to 1000 [ 350.264183][T17777] lo speed is unknown, defaulting to 1000 [ 350.331542][T17691] hsr_slave_0: entered promiscuous mode [ 350.342488][T17691] hsr_slave_1: entered promiscuous mode [ 350.349700][T17691] debugfs: 'hsr0' already exists in 'hsr' [ 350.356005][T17691] Cannot create hsr debugfs directory [ 350.636531][T17818] lo speed is unknown, defaulting to 1000 [ 350.911423][T17838] lo speed is unknown, defaulting to 1000 [ 351.094510][ T51] Bluetooth: hci0: command tx timeout [ 351.201348][T17838] lo speed is unknown, defaulting to 1000 [ 351.933924][T17691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.988569][T17691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.037124][T17691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.073485][T17691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.303582][T17691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.332495][T17691] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.362918][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.370155][ T7072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.390357][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.397615][ T7072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.717656][T17885] lo speed is unknown, defaulting to 1000 [ 352.724977][T17884] openvswitch: netlink: EtherType 0 is less than min 600 [ 353.175941][ T51] Bluetooth: hci0: command tx timeout [ 353.217755][T17900] netlink: 'syz.4.3080': attribute type 1 has an invalid length. [ 353.233014][T17900] netlink: 'syz.4.3080': attribute type 1 has an invalid length. [ 353.305658][T17900] lo speed is unknown, defaulting to 1000 [ 353.314692][T17885] lo speed is unknown, defaulting to 1000 [ 353.866111][T17691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.873387][T17900] lo speed is unknown, defaulting to 1000 [ 354.270935][T17691] veth0_vlan: entered promiscuous mode [ 354.348043][T17691] veth1_vlan: entered promiscuous mode [ 354.447958][T17691] veth0_macvtap: entered promiscuous mode [ 354.482325][T17691] veth1_macvtap: entered promiscuous mode [ 354.541926][T17691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.591788][T17691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.690289][T15848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.700438][T15848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.720486][T15848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.757982][T15848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.910525][T15848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.929929][T15848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.012301][T17942] __nla_validate_parse: 3 callbacks suppressed [ 355.012396][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 355.031199][T15848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.052673][T15848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.254926][ T51] Bluetooth: hci0: command tx timeout [ 355.262335][T17953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3026'. [ 355.534546][T17962] syzkaller0: entered promiscuous mode [ 355.566043][T17962] syzkaller0: entered allmulticast mode [ 355.658660][T17970] bond1: invalid ARP target 0.0.0.0 specified for addition [ 355.691382][T17970] bond1: option arp_ip_target: invalid value (0) [ 355.717618][T17970] bond1 (unregistering): Released all slaves [ 355.724691][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.740648][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.754422][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.765200][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.777355][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.940974][T17972] lo speed is unknown, defaulting to 1000 [ 355.977534][ T5158] block nbd5: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 30 seconds [ 355.991346][ T5158] block nbd5: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 30 seconds [ 356.002432][ T5158] block nbd5: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 30 seconds [ 356.013507][ T5158] block nbd5: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 30 seconds [ 356.079516][ T5829] team0: Port device syz_tun removed [ 356.337802][ T7072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.388788][ T7072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.409127][T17991] netlink: 'syz.4.3099': attribute type 10 has an invalid length. [ 356.451303][T17982] delete_channel: no stack [ 356.545257][ T7072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.564294][ T7072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.601151][T17979] lo speed is unknown, defaulting to 1000 [ 356.607125][T17972] lo speed is unknown, defaulting to 1000 [ 356.727515][ T7072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.761022][ T7072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.834817][T17979] lo speed is unknown, defaulting to 1000 [ 356.927770][ T7072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.940779][ T7072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.016185][T18005] syzkaller0: entered promiscuous mode [ 357.022028][T18005] syzkaller0: entered allmulticast mode [ 357.028524][T18012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3104'. [ 357.593643][T18033] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3110'. [ 357.821868][ T5827] Bluetooth: hci2: command tx timeout [ 359.321593][T18030] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3108'. [ 359.777674][T18040] lo speed is unknown, defaulting to 1000 [ 359.895332][ T5827] Bluetooth: hci2: command tx timeout [ 359.903307][ T7072] bridge_slave_1: left allmulticast mode [ 359.937829][ T7072] bridge_slave_1: left promiscuous mode [ 359.945998][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.981653][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3116'. [ 360.017168][ T7072] bridge_slave_0: left allmulticast mode [ 360.022896][ T7072] bridge_slave_0: left promiscuous mode [ 360.056195][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.153770][ T7072] veth7: left allmulticast mode [ 360.173228][ T7072] veth7: left promiscuous mode [ 360.195642][ T7072] bridge8: port 3(veth7) entered disabled state [ 360.214454][ T7072] veth0_to_bond: left allmulticast mode [ 360.225598][ T7072] veth0_to_bond: left promiscuous mode [ 360.238856][ T7072] bridge8: port 2(veth0_to_bond) entered disabled state [ 360.258676][ T7072] veth5: left allmulticast mode [ 360.271500][ T7072] veth5: left promiscuous mode [ 360.281167][ T7072] bridge8: port 1(veth5) entered disabled state [ 360.592852][ T7072] bond10 (unregistering): (slave vti0): Releasing backup interface [ 360.601103][ T7072] vti0 (unregistering): left promiscuous mode [ 360.658061][ T7072] bond8 (unregistering): (slave gretap2): Releasing active interface [ 360.687438][ T7072] geneve1 (unregistering): left allmulticast mode [ 360.693893][ T7072] geneve1 (unregistering): left promiscuous mode [ 361.191959][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.201187][ T7072] bond_slave_0: left allmulticast mode [ 361.208097][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.217177][ T7072] bond_slave_1: left allmulticast mode [ 361.223864][ T7072] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 361.236922][ T7072] batadv0: left allmulticast mode [ 361.242704][ T7072] bond0 (unregistering): Released all slaves [ 361.252813][ T7072] bond1 (unregistering): Released all slaves [ 361.265533][ T7072] bond2 (unregistering): Released all slaves [ 361.280381][ T7072] bond3 (unregistering): Released all slaves [ 361.292703][ T7072] bond4 (unregistering): Released all slaves [ 361.305817][ T7072] bond5 (unregistering): Released all slaves [ 361.321384][ T7072] bond6 (unregistering): (slave lo): Releasing backup interface [ 361.339654][ T7072] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 361.354191][ T7072] bond6 (unregistering): Released all slaves [ 361.367084][ T7072] bond7 (unregistering): Released all slaves [ 361.382046][ T7072] bond8 (unregistering): Released all slaves [ 361.401478][ T7072] bond9 (unregistering): Released all slaves [ 361.413990][ T7072] bond10 (unregistering): Released all slaves [ 361.427907][ T7072] bond11 (unregistering): Released all slaves [ 361.440293][ T7072] bond12 (unregistering): Released all slaves [ 361.463240][T18063] team1: entered promiscuous mode [ 361.468684][T18063] team1: entered allmulticast mode [ 361.474248][T18063] 8021q: adding VLAN 0 to HW filter on device team1 [ 361.484911][T18040] lo speed is unknown, defaulting to 1000 [ 361.511177][T17972] chnl_net:caif_netlink_parms(): no params data found [ 361.633223][T18098] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 361.641893][T18059] lo speed is unknown, defaulting to 1000 [ 361.660827][T18098] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3121'. [ 361.691905][ T7072] tipc: Left network mode [ 361.753897][T18100] netlink: 'syz.3.3122': attribute type 21 has an invalid length. [ 361.778869][T18100] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3122'. [ 361.864972][ T7072] IPVS: stopping backup sync thread 12944 ... [ 361.890952][T18106] netlink: 'syz.3.3122': attribute type 1 has an invalid length. [ 361.900194][T18106] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3122'. [ 361.974234][ T5827] Bluetooth: hci2: command tx timeout [ 362.005679][T18100] netlink: 'syz.3.3122': attribute type 4 has an invalid length. [ 362.013486][T18100] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3122'. [ 362.044827][T18109] netlink: 'syz.1.3124': attribute type 21 has an invalid length. [ 362.103343][T18109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3124'. [ 362.113589][T18059] lo speed is unknown, defaulting to 1000 [ 362.202735][T18112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3125'. [ 362.377504][T17972] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.404217][T17972] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.419078][T17972] bridge_slave_0: entered allmulticast mode [ 362.442245][T17972] bridge_slave_0: entered promiscuous mode [ 362.478309][T18112] bond0: entered promiscuous mode [ 362.487945][T18112] bond_slave_0: entered promiscuous mode [ 362.494056][T18112] bond_slave_1: entered promiscuous mode [ 362.502945][T18112] bond0: left promiscuous mode [ 362.509392][T18112] bond_slave_0: left promiscuous mode [ 362.515427][T18112] bond_slave_1: left promiscuous mode [ 362.627119][T17972] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.641845][T17972] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.650268][T17972] bridge_slave_1: entered allmulticast mode [ 362.663778][T17972] bridge_slave_1: entered promiscuous mode [ 362.821738][T17972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.858098][T17972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.940235][T18126] lo speed is unknown, defaulting to 1000 [ 363.037409][T17972] team0: Port device team_slave_0 added [ 363.056324][T17972] team0: Port device team_slave_1 added [ 363.138366][T18133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3127'. [ 363.175826][T17972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.182809][T17972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.230516][T17972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.266377][T17972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.273958][T17972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.312774][T17972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.396061][T18126] lo speed is unknown, defaulting to 1000 [ 363.706003][T17972] hsr_slave_0: entered promiscuous mode [ 363.712845][T17972] hsr_slave_1: entered promiscuous mode [ 363.719620][T17972] debugfs: 'hsr0' already exists in 'hsr' [ 363.730049][T17972] Cannot create hsr debugfs directory [ 364.054584][ T5827] Bluetooth: hci2: command tx timeout [ 364.297543][T18169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3131'. [ 364.307939][ T7072] hsr_slave_0: left promiscuous mode [ 364.328880][ T7072] hsr_slave_1: left promiscuous mode [ 364.337733][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.358223][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.616570][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 364.651901][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 364.934649][ C1] bridge0: port 1(dummy0) entered forwarding state [ 364.941367][ C1] bridge0: topology change detected, propagating [ 365.046539][T18190] netlink: 'syz.4.3136': attribute type 27 has an invalid length. [ 365.364942][T18204] syzkaller0: entered promiscuous mode [ 365.378770][T18200] lo speed is unknown, defaulting to 1000 [ 365.401757][ T7072] IPVS: stop unused estimator thread 0... [ 365.644267][T18200] lo speed is unknown, defaulting to 1000 [ 365.780285][T18215] netlink: 'syz.3.3140': attribute type 2 has an invalid length. [ 365.982554][T18233] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3142'. [ 366.249448][T18246] netlink: 384 bytes leftover after parsing attributes in process `syz.4.3144'. [ 366.298830][T18249] netlink: 'syz.1.3145': attribute type 12 has an invalid length. [ 366.397054][T15847] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.409601][T15847] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.421625][T15847] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.430907][T15847] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.550808][T17972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.621080][T17972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.704236][T17972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.732867][T18256] lo speed is unknown, defaulting to 1000 [ 366.733291][T17972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.758615][T18263] sctp: [Deprecated]: syz.4.3147 (pid 18263) Use of int in maxseg socket option. [ 366.758615][T18263] Use struct sctp_assoc_value instead [ 367.009129][T17972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.105933][T18256] lo speed is unknown, defaulting to 1000 [ 367.235169][T18286] xt_bpf: check failed: parse error [ 367.382558][T17972] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.438128][T18294] ipvlan2: entered promiscuous mode [ 367.443424][T18294] ipvlan2: entered allmulticast mode [ 367.460348][T18294] vlan1: entered allmulticast mode [ 367.465936][T18294] veth0_vlan: entered allmulticast mode [ 367.474512][T18294] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 367.562345][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.569565][T15848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.637246][T15848] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.644441][T15848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.922728][T18310] openvswitch: netlink: Actions may not be safe on all matching packets [ 368.083368][T18332] netlink: 'syz.1.3157': attribute type 11 has an invalid length. [ 368.093107][T18332] netlink: 'syz.1.3157': attribute type 23 has an invalid length. [ 368.133428][T18332] __nla_validate_parse: 6 callbacks suppressed [ 368.133510][T18332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3157'. [ 368.206072][T18338] lo speed is unknown, defaulting to 1000 [ 368.245989][T18341] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.277152][T18341] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 368.382191][T18349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3161'. [ 368.449720][T17972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.562212][T17972] veth0_vlan: entered promiscuous mode [ 368.587223][T17972] veth1_vlan: entered promiscuous mode [ 368.709669][T17972] veth0_macvtap: entered promiscuous mode [ 368.740534][T17972] veth1_macvtap: entered promiscuous mode [ 368.812109][T17972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.845678][T18338] lo speed is unknown, defaulting to 1000 [ 368.849800][T17972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.868252][T18361] netlink: 'syz.1.3164': attribute type 1 has an invalid length. [ 368.882455][T18361] netlink: 'syz.1.3164': attribute type 7 has an invalid length. [ 368.890769][T18361] netlink: 'syz.1.3164': attribute type 8 has an invalid length. [ 368.899288][T18361] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3164'. [ 368.947267][T15847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.975993][T15847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.024632][T15847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.052170][T15847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.159556][T18367] netlink: 'syz.1.3165': attribute type 1 has an invalid length. [ 369.500242][T15847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.523116][T15847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.689959][T15843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.703778][T18394] netlink: 'syz.4.3170': attribute type 10 has an invalid length. [ 369.718696][T15843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.771003][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'. [ 370.296308][T18438] x_tables: duplicate underflow at hook 3 [ 370.381245][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.395231][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.412638][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.423933][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.432022][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.551367][T18443] lo speed is unknown, defaulting to 1000 [ 371.028677][T18443] lo speed is unknown, defaulting to 1000 [ 371.186945][T18477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3187'. [ 371.606101][T18506] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3194'. [ 371.664326][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3194'. [ 371.710144][T18443] chnl_net:caif_netlink_parms(): no params data found [ 371.720601][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 372.214294][T18443] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.228213][T18443] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.241280][T18541] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 372.251235][T18443] bridge_slave_0: entered allmulticast mode [ 372.262997][T18443] bridge_slave_0: entered promiscuous mode [ 372.298268][T18443] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.317088][T18443] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.334941][T18443] bridge_slave_1: entered allmulticast mode [ 372.362239][T18443] bridge_slave_1: entered promiscuous mode [ 372.388407][T18544] lo speed is unknown, defaulting to 1000 [ 372.436892][T18443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.480042][T18443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.537562][ T5827] Bluetooth: hci3: command tx timeout [ 372.687635][T18443] team0: Port device team_slave_0 added [ 372.808524][T18443] team0: Port device team_slave_1 added [ 372.919473][T18577] netlink: 'syz.1.3205': attribute type 8 has an invalid length. [ 372.950058][T15847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.286497][T18544] lo speed is unknown, defaulting to 1000 [ 373.342885][T15847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.360012][T18443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.368273][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.395094][T18443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.422119][T18575] tipc: Started in network mode [ 373.427497][T18575] tipc: Node identity 06aa85a412a6, cluster identity 4711 [ 373.436047][T18575] tipc: Enabled bearer , priority 0 [ 373.446192][T18443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.454481][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.481475][T18443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.551768][T15847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.577643][T18572] tipc: Disabling bearer [ 373.753476][T15847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.780178][T18595] netlink: 'syz.1.3209': attribute type 10 has an invalid length. [ 373.838162][T18443] hsr_slave_0: entered promiscuous mode [ 373.860728][T18443] hsr_slave_1: entered promiscuous mode [ 373.890208][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3210'. [ 373.959997][T18595] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.967846][T18595] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.992609][T18595] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.999850][T18595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.007405][T18595] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.014568][T18595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.039467][T18595] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 374.334213][T18625] netlink: 'syz.1.3213': attribute type 2 has an invalid length. [ 374.521859][T18623] syzkaller1: entered promiscuous mode [ 374.527787][T18623] syzkaller1: entered allmulticast mode [ 374.569322][T18625] geneve2: entered promiscuous mode [ 374.577515][T18625] geneve2: entered allmulticast mode [ 374.614568][ T5827] Bluetooth: hci3: command tx timeout [ 374.711034][T15848] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 374.733949][T15848] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 374.802694][T15848] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 374.815966][T15848] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 374.845893][T18629] delete_channel: no stack [ 374.862876][T18646] openvswitch: netlink: IP tunnel dst address not specified [ 374.928037][T18648] openvswitch: netlink: IP tunnel dst address not specified [ 375.053598][T15847] dummy0: left allmulticast mode [ 375.064243][T15847] dummy0: left promiscuous mode [ 375.072286][T15847] bridge0: port 1(dummy0) entered disabled state [ 375.160555][T18666] IPVS: set_ctl: invalid protocol: 128 0.32.0.0:0 [ 375.189346][T18667] netlink: 'syz.3.3221': attribute type 39 has an invalid length. [ 375.202902][T18666] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 375.249467][T18668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3221'. [ 375.260992][T18668] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3221'. [ 375.270605][T18668] netlink: 'syz.3.3221': attribute type 5 has an invalid length. [ 375.279056][T18668] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3221'. [ 375.935790][T15847] bond0 (unregistering): Released all slaves [ 375.945690][T15847] bond1 (unregistering): Released all slaves [ 375.958813][T15847] bond2 (unregistering): Released all slaves [ 375.975887][T15847] bond3 (unregistering): Released all slaves [ 375.991995][T15847] bond4 (unregistering): Released all slaves [ 376.011433][T15847] bond5 (unregistering): Released all slaves [ 376.025683][T15847] bond6 (unregistering): Released all slaves [ 376.039337][T15847] bond7 (unregistering): Released all slaves [ 376.051672][T15847] bond8 (unregistering): Released all slaves [ 376.064437][T15847] bond9 (unregistering): Released all slaves [ 376.148669][T18670] vlan2: entered allmulticast mode [ 376.287815][T15847] 5nè‹Ò: left promiscuous mode [ 376.287973][T18675] openvswitch: netlink: IPv4 tunnel dst address is zero [ 376.362226][T18679] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3224'. [ 376.704370][ T5827] Bluetooth: hci3: command tx timeout [ 376.763723][T15847] tipc: Disabling bearer [ 376.774557][T15847] tipc: Disabling bearer [ 376.836336][T15847] tipc: Left network mode [ 376.838087][T18686] 8021q: VLANs not supported on caif0 [ 376.873926][T18699] netlink: 'syz.0.3227': attribute type 32 has an invalid length. [ 377.203391][T18714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3232'. [ 377.572663][T18728] lo speed is unknown, defaulting to 1000 [ 377.581148][T18443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.618875][T18443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.649606][T18443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.691885][T18443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.928034][T18745] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 378.054721][T18728] lo speed is unknown, defaulting to 1000 [ 378.635946][T18784] netlink: 'syz.3.3242': attribute type 21 has an invalid length. [ 378.656869][T18443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.684313][T18784] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3242'. [ 378.707075][T18787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3244'. [ 378.728949][T15847] hsr_slave_0: left promiscuous mode [ 378.779373][ T5827] Bluetooth: hci3: command tx timeout [ 378.937309][T18801] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 378.950669][T18801] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3248'. [ 379.023452][ T1299] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 379.032867][T18803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3248'. [ 379.125128][T15847] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 379.260227][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3248'. [ 379.977112][T18784] netlink: 'syz.3.3242': attribute type 3 has an invalid length. [ 379.986995][T18784] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3242'. [ 380.057241][T18788] bond1: invalid ARP target 0.0.0.0 specified for addition [ 380.065435][T18788] bond1: option arp_ip_target: invalid value (0) [ 380.075065][T18788] bond1 (unregistering): Released all slaves [ 380.145893][T18817] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3251'. [ 380.199395][T18443] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.221532][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.228833][T15848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.282723][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.290013][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.388711][T18822] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3253'. [ 380.510296][T18824] lo speed is unknown, defaulting to 1000 [ 380.675723][T15847] IPVS: stop unused estimator thread 0... [ 380.723822][T18844] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3259'. [ 380.767782][T18842] syzkaller0: entered promiscuous mode [ 380.794363][T18842] syzkaller0: entered allmulticast mode [ 381.011533][T18824] lo speed is unknown, defaulting to 1000 [ 381.288790][T18443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.383774][T18860] syzkaller0: entered promiscuous mode [ 381.389989][T18860] syzkaller0: entered allmulticast mode [ 383.793234][T18874] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 383.805656][T18874] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 383.820416][T18874] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 384.061066][T18443] veth0_vlan: entered promiscuous mode [ 384.071176][T18887] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 384.091919][T18443] veth1_vlan: entered promiscuous mode [ 384.157243][T18887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.256300][T18889] bond1: (slave geneve2): making interface the new active one [ 384.279977][T18889] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 384.296685][T15840] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.316013][T18893] netlink: 'syz.0.3271': attribute type 62 has an invalid length. [ 384.335405][T15840] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.394008][T15840] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.408239][T18897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3272'. [ 384.418663][T15840] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.419530][T18897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3272'. [ 384.460125][T18900] syzkaller1: entered promiscuous mode [ 384.467885][T18900] syzkaller1: entered allmulticast mode [ 384.497430][T18901] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 384.588986][T18443] veth0_macvtap: entered promiscuous mode [ 384.610695][T18443] veth1_macvtap: entered promiscuous mode [ 384.656202][T18443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.721429][T18443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.773739][T15843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.819110][T18912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3277'. [ 384.884318][T15843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.916066][T18910] lo speed is unknown, defaulting to 1000 [ 384.924841][T15843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.967747][T15843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.180242][T18929] netlink: 'syz.1.3284': attribute type 10 has an invalid length. [ 385.187113][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3283'. [ 385.197647][T18929] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3284'. [ 385.216829][T18929] hsr0: entered promiscuous mode [ 385.225706][T18929] bridge0: port 3(hsr0) entered blocking state [ 385.240721][T18929] bridge0: port 3(hsr0) entered disabled state [ 385.257073][T18929] hsr0: entered allmulticast mode [ 385.270085][T18929] hsr_slave_0: entered allmulticast mode [ 385.270258][T18931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.311656][T18929] hsr_slave_1: entered allmulticast mode [ 385.339480][T18929] bridge0: port 3(hsr0) entered blocking state [ 385.345966][T18929] bridge0: port 3(hsr0) entered forwarding state [ 385.390904][T18933] netlink: 'syz.0.3285': attribute type 15 has an invalid length. [ 385.399175][T18933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3285'. [ 385.461867][ T7072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.484396][ T7072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.561666][ T7084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.570429][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'. [ 385.588223][ T7084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.597842][T18910] lo speed is unknown, defaulting to 1000 [ 385.604913][T18938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.633624][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'. [ 385.677151][T18940] : entered promiscuous mode [ 385.850766][T18956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.878743][T18958] xt_check_target: 1 callbacks suppressed [ 385.878853][T18958] x_tables: ip_tables: CT target: only valid in raw table, not [ 386.065777][ T5158] block nbd5: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 60 seconds [ 386.074667][T18966] sctp: [Deprecated]: syz.0.3291 (pid 18966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.074667][T18966] Use struct sctp_sack_info instead [ 386.076705][ T5158] block nbd5: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 60 seconds [ 386.105236][ T5158] block nbd5: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 60 seconds [ 386.117233][ T5158] block nbd5: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 60 seconds [ 386.155736][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'. [ 386.681636][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 386.873226][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.885415][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.907040][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.929387][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.938884][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.262456][T18997] lo speed is unknown, defaulting to 1000 [ 387.341509][T19000] syzkaller0: entered promiscuous mode [ 387.350080][T19000] syzkaller0: entered allmulticast mode [ 387.419761][T19008] netlink: 'syz.1.3302': attribute type 4 has an invalid length. [ 387.498884][T19008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.523962][T15847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.641890][T15847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.702302][T18991] lo speed is unknown, defaulting to 1000 [ 387.713434][T18997] lo speed is unknown, defaulting to 1000 [ 387.750509][T15847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.797933][T19028] x_tables: duplicate underflow at hook 1 [ 387.885728][T15847] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.048528][T18991] lo speed is unknown, defaulting to 1000 [ 388.272881][T15847] dvmrp0: left allmulticast mode [ 388.336782][T15847] bond2 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 388.349131][T15847] bond2 (unregistering): (slave ip6gretap0): Releasing backup interface [ 388.962830][T15847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.976196][T15847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.988047][T15847] bond0 (unregistering): Released all slaves [ 388.997742][T15847] bond1 (unregistering): Released all slaves [ 389.013022][T15847] bond2 (unregistering): Released all slaves [ 389.014344][ T51] Bluetooth: hci1: command tx timeout [ 389.032214][T15847] bond3 (unregistering): Released all slaves [ 389.048116][T15847] bond4 (unregistering): Released all slaves [ 389.061492][T15847] bond5 (unregistering): Released all slaves [ 389.257559][T18991] chnl_net:caif_netlink_parms(): no params data found [ 389.311337][T15847] hmac(sha224: left promiscuous mode [ 389.416627][T15847] : left promiscuous mode [ 389.478798][T15847] : left promiscuous mode [ 389.509281][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.517387][T18991] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.525177][T18991] bridge_slave_0: entered allmulticast mode [ 389.533259][T18991] bridge_slave_0: entered promiscuous mode [ 389.546573][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.553991][T18991] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.561974][T18991] bridge_slave_1: entered allmulticast mode [ 389.570235][T18991] bridge_slave_1: entered promiscuous mode [ 389.578372][T15847] tipc: Disabling bearer [ 389.584158][T15847] tipc: Disabling bearer [ 389.591525][T15847] tipc: Left network mode [ 389.652358][T18991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.666359][T18991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.708070][T18991] team0: Port device team_slave_0 added [ 389.716727][T18991] team0: Port device team_slave_1 added [ 389.772099][T18991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.787594][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.843587][T18991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.856394][T15847] IPVS: stopping backup sync thread 15798 ... [ 389.937752][T18991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.946163][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.994539][T18991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.110476][T18991] hsr_slave_0: entered promiscuous mode [ 390.121340][T18991] hsr_slave_1: entered promiscuous mode [ 390.142432][T18991] debugfs: 'hsr0' already exists in 'hsr' [ 390.150164][T18991] Cannot create hsr debugfs directory [ 390.183825][T19067] batadv0: entered promiscuous mode [ 390.193798][T19067] vlan2: entered promiscuous mode [ 390.594230][T19014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.097939][ T51] Bluetooth: hci1: command tx timeout [ 391.158851][T19093] netlink: 'syz.3.3321': attribute type 21 has an invalid length. [ 391.184460][T19093] __nla_validate_parse: 1 callbacks suppressed [ 391.184493][T19093] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3321'. [ 391.373640][T15847] team0 (unregistering): Port device team_slave_1 removed [ 391.563985][T19082] tun0: tun_chr_ioctl cmd 1074025677 [ 391.569643][T19082] tun0: linktype set to 804 [ 391.636880][T19093] netlink: 'syz.3.3321': attribute type 5 has an invalid length. [ 391.655334][T19093] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3321'. [ 391.798098][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3325'. [ 391.809190][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3325'. [ 391.840353][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 391.840372][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 391.840519][T19117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.927122][T19117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.017336][T18991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.102428][T18991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.145192][T18991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.154447][T15847] IPVS: stop unused estimator thread 0... [ 392.257864][T18991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.285784][T19125] lo speed is unknown, defaulting to 1000 [ 392.729230][T18991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.793998][T19125] lo speed is unknown, defaulting to 1000 [ 392.910495][T19152] nbd6: detected capacity change from 0 to 127 [ 392.933292][T18991] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.964240][ T51] block nbd6: Receive control failed (result -104) [ 393.032972][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.040195][T15840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.091866][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'. [ 393.184985][ T51] Bluetooth: hci1: command tx timeout [ 393.390805][T15846] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.398030][T15846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.572963][T18991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.733174][T19176] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3335'. [ 393.763795][T19176] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3335'. [ 393.929369][T18991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.243503][T19197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3339'. [ 394.467407][T19217] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 394.485786][T19217] bond1 (unregistering): Released all slaves [ 394.597246][T18991] veth0_vlan: entered promiscuous mode [ 394.619554][T18991] veth1_vlan: entered promiscuous mode [ 394.732644][T18991] veth0_macvtap: entered promiscuous mode [ 394.775831][T18991] veth1_macvtap: entered promiscuous mode [ 394.848424][T18991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.897887][T18991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.957824][T15840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.980431][T15840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.997435][T15840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.013352][T15840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.044475][T19249] x_tables: duplicate underflow at hook 3 [ 395.208345][ T7084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.254352][ T51] Bluetooth: hci1: command tx timeout [ 395.262319][ T7084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.336745][T15840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.374628][T15840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.385450][T19263] vxcan3: entered promiscuous mode [ 395.674649][T19282] openvswitch: netlink: Message has 2 unknown bytes. [ 395.838760][T19288] lo: entered allmulticast mode [ 395.855704][T19288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.946472][T19298] rdma_rxe: rxe_newlink: failed to add lo [ 396.083628][T19288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.297780][ T1318] block nbd6: Connection timed out, retrying (0/1 alive) [ 396.307637][ T1318] block nbd6: Connection timed out, retrying (0/1 alive) [ 396.318134][ T1318] block nbd6: Connection timed out, retrying (0/1 alive) [ 396.325412][ T1318] block nbd6: Connection timed out, retrying (0/1 alive) [ 396.332911][ T1318] block nbd6: Dead connection, failed to find a fallback [ 396.343154][ T1318] block nbd6: shutting down sockets [ 396.349937][ T1318] blk_print_req_error: 138 callbacks suppressed [ 396.349959][ T1318] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.367858][ T1318] buffer_io_error: 138 callbacks suppressed [ 396.367877][ T1318] Buffer I/O error on dev nbd6, logical block 3, async page read [ 396.384383][ T1318] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.393899][ T1318] Buffer I/O error on dev nbd6, logical block 2, async page read [ 396.402420][ T1318] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.412735][ T1318] Buffer I/O error on dev nbd6, logical block 1, async page read [ 396.420757][ T1318] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.430480][ T1318] Buffer I/O error on dev nbd6, logical block 0, async page read [ 396.440893][T17417] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.453836][T17417] Buffer I/O error on dev nbd6, logical block 0, async page read [ 396.462005][T17417] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.471719][T17417] Buffer I/O error on dev nbd6, logical block 1, async page read [ 396.479670][T17417] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.489300][T17417] Buffer I/O error on dev nbd6, logical block 2, async page read [ 396.497511][T17417] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.508854][T17417] Buffer I/O error on dev nbd6, logical block 3, async page read [ 396.516857][T17417] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.526474][T17417] Buffer I/O error on dev nbd6, logical block 0, async page read [ 396.534576][T17417] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.545997][T17417] Buffer I/O error on dev nbd6, logical block 1, async page read [ 396.554771][T17417] ldm_validate_partition_table(): Disk read failed. [ 396.564022][T17417] Dev nbd6: unable to read RDB block 0 [ 396.571710][T17417] nbd6: unable to read partition table [ 396.583565][T17417] ldm_validate_partition_table(): Disk read failed. [ 396.591367][T17417] Dev nbd6: unable to read RDB block 0 [ 396.597734][T17417] nbd6: unable to read partition table [ 396.889711][T19288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.970278][T19303] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.977821][T19303] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.039743][T19303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.053631][T19303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.230980][T15846] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.253006][T15846] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.447052][T15846] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.481681][T19288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.503910][T19329] lo speed is unknown, defaulting to 1000 [ 397.514540][T10547] IPVS: starting estimator thread 0... [ 397.517255][T15846] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.557610][T19339] syzkaller0: entered promiscuous mode [ 397.563138][T19339] syzkaller0: entered allmulticast mode [ 397.617708][T19288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.618674][T19347] __nla_validate_parse: 5 callbacks suppressed [ 397.618692][T19347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3378'. [ 397.628419][T19343] IPVS: using max 41 ests per chain, 98400 per kthread [ 397.687852][T19347] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3378'. [ 397.747973][T19350] netlink: 'syz.2.3378': attribute type 83 has an invalid length. [ 397.771661][T19347] netlink: 'syz.2.3378': attribute type 5 has an invalid length. [ 397.795189][T19347] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3378'. [ 397.822289][T19347] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3378'. [ 397.831827][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 397.873656][T19351] FAULT_INJECTION: forcing a failure. [ 397.873656][T19351] name fail_futex, interval 1, probability 0, space 0, times 1 [ 397.887502][T19351] CPU: 0 UID: 0 PID: 19351 Comm: syz.3.3377 Not tainted syzkaller #0 PREEMPT(full) [ 397.887531][T19351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.887548][T19351] Call Trace: [ 397.887619][T19351] [ 397.887628][T19351] dump_stack_lvl+0xe8/0x150 [ 397.887782][T19351] should_fail_ex+0x412/0x560 [ 397.887907][T19351] get_futex_key+0x1ac/0x1690 [ 397.887961][T19351] ? __pfx_get_futex_key+0x10/0x10 [ 397.888008][T19351] ? __lock_acquire+0x6b5/0x2cf0 [ 397.888051][T19351] futex_wake+0x114/0x580 [ 397.888072][T19351] ? __lock_acquire+0x6b5/0x2cf0 [ 397.888093][T19351] ? __pfx_futex_wake+0x10/0x10 [ 397.888120][T19351] ? exit_mm_release+0x1a/0x30 [ 397.888182][T19351] do_futex+0x395/0x420 [ 397.888219][T19351] ? __pfx_do_futex+0x10/0x10 [ 397.888245][T19351] ? __might_fault+0xaf/0x130 [ 397.888300][T19351] mm_release+0x103/0x290 [ 397.888324][T19351] exit_mm+0x51/0x220 [ 397.888354][T19351] ? unwind_deferred_task_exit+0x67/0xa0 [ 397.888387][T19351] do_exit+0x6a2/0x23c0 [ 397.888413][T19351] ? __pfx_do_exit+0x10/0x10 [ 397.888430][T19351] ? cgroup1_freezing+0x20/0x350 [ 397.888454][T19351] ? cgroup1_freezing+0x20/0x350 [ 397.888482][T19351] do_group_exit+0x21b/0x2d0 [ 397.888499][T19351] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.888609][T19351] get_signal+0x1284/0x1330 [ 397.888648][T19351] arch_do_signal_or_restart+0xbc/0x830 [ 397.888682][T19351] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.888719][T19351] exit_to_user_mode_loop+0x86/0x480 [ 397.888738][T19351] ? rcu_is_watching+0x15/0xb0 [ 397.888765][T19351] do_syscall_64+0x32d/0xf80 [ 397.888813][T19351] ? trace_irq_disable+0x3b/0x150 [ 397.888841][T19351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.888871][T19351] ? clear_bhb_loop+0x40/0x90 [ 397.888898][T19351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.888919][T19351] RIP: 0033:0x7fe833f9c799 [ 397.888948][T19351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.888964][T19351] RSP: 002b:00007fe834dae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 397.888991][T19351] RAX: ffffffffffffffa3 RBX: 00007fe834216180 RCX: 00007fe833f9c799 [ 397.889003][T19351] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 0000000000000006 [ 397.889015][T19351] RBP: 00007fe834dae090 R08: 0000000000000000 R09: 0000000000000000 [ 397.889025][T19351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.889035][T19351] R13: 00007fe834216218 R14: 00007fe834216180 R15: 00007fffdb1e50e8 [ 397.889063][T19351] [ 397.968330][T19329] lo speed is unknown, defaulting to 1000 [ 398.008038][T15846] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.157686][T19358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3379'. [ 398.166341][T15846] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.246701][T15846] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.299216][T15840] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.460473][T19368] macsec1: entered promiscuous mode [ 398.477436][T19368] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 398.516782][T19378] netlink: 'syz.4.3388': attribute type 4 has an invalid length. [ 398.549166][T19376] xt_ecn: cannot match TCP bits for non-tcp packets [ 398.572030][T19378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3388'. [ 398.629243][T19380] netlink: 'syz.4.3388': attribute type 4 has an invalid length. [ 398.666689][T19376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.712852][T19376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.752314][T19381] netlink: 'syz.2.3387': attribute type 4 has an invalid length. [ 398.881453][T19376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.908685][T19376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.929399][T19396] netlink: 'syz.4.3393': attribute type 5 has an invalid length. [ 399.032203][T19376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.045174][T19376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 399.165757][T19376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.185014][T19376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 399.426079][T15846] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 399.444837][T15846] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.484797][T15846] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 399.524627][T15846] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.567123][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 399.582384][ T61] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.619814][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 399.638783][ T61] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.657084][T19432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3402'. [ 399.880264][T19440] netlink: 'syz.3.3405': attribute type 11 has an invalid length. [ 399.908007][T19440] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3405'. [ 399.936897][T19441] netlink: 'syz.0.3404': attribute type 5 has an invalid length. [ 399.956085][T19443] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3406'. [ 400.232946][T19456] lo speed is unknown, defaulting to 1000 [ 400.491815][T19480] netlink: 'syz.2.3415': attribute type 3 has an invalid length. [ 400.581916][T19486] netlink: 'syz.1.3419': attribute type 1 has an invalid length. [ 400.617293][T19486] netlink: 'syz.1.3419': attribute type 2 has an invalid length. [ 400.715044][T19498] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 400.784847][T19498] syz.0.3420 uses old SIOCAX25GETINFO [ 400.959561][T19474] lo speed is unknown, defaulting to 1000 [ 400.959703][T19456] lo speed is unknown, defaulting to 1000 [ 401.296225][T19513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.336453][T19518] syzkaller0: entered promiscuous mode [ 401.342225][T19518] syzkaller0: entered allmulticast mode [ 401.351659][T19518] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 401.425348][T19474] lo speed is unknown, defaulting to 1000 [ 401.588787][T19524] syzkaller1: entered promiscuous mode [ 401.783840][T19537] team1: entered promiscuous mode [ 401.789341][T19537] team1: entered allmulticast mode [ 401.795662][T19537] 8021q: adding VLAN 0 to HW filter on device team1 [ 402.141681][T19559] batadv_slave_0: Caught tx_queue_len zero misconfig [ 402.214503][T19551] lo speed is unknown, defaulting to 1000 [ 402.529056][T19582] tunl0: Caught tx_queue_len zero misconfig [ 402.671364][T19551] lo speed is unknown, defaulting to 1000 [ 402.755059][T19591] __nla_validate_parse: 42 callbacks suppressed [ 402.755082][T19591] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3447'. [ 403.016251][T19603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3452'. [ 403.066689][T19603] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3452'. [ 403.079076][T19603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3452'. [ 403.173425][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3453'. [ 403.408499][T19622] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.450268][T19618] lo speed is unknown, defaulting to 1000 [ 403.560561][T19622] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.633597][T19623] lo speed is unknown, defaulting to 1000 [ 403.633639][T19618] lo speed is unknown, defaulting to 1000 [ 403.661772][T19622] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.721856][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3460'. [ 403.742068][T19630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3460'. [ 403.766038][ T5881] IPVS: starting estimator thread 0... [ 403.768245][T19622] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.884254][T19631] IPVS: using max 38 ests per chain, 91200 per kthread [ 403.930132][ T7084] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.968581][ T7072] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.996992][ T7072] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.028320][T19636] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 404.053133][T19609] lo speed is unknown, defaulting to 1000 [ 404.059479][T19623] lo speed is unknown, defaulting to 1000 [ 404.059502][ T7072] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.407954][T19643] validate_nla: 2 callbacks suppressed [ 404.407987][T19643] netlink: 'syz.2.3464': attribute type 29 has an invalid length. [ 404.421670][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 404.448182][T19643] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3464'. [ 404.576072][T19660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3472'. [ 404.834261][T19609] lo speed is unknown, defaulting to 1000 [ 404.951226][T19667] lo speed is unknown, defaulting to 1000 [ 405.311816][T19667] lo speed is unknown, defaulting to 1000 [ 405.382750][T19684] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 405.480222][T19684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.662395][T19693] veth3: entered promiscuous mode [ 405.684890][T19693] bond2: (slave veth3): Enslaving as an active interface with an up link [ 408.058867][T19705] syzkaller0: entered promiscuous mode [ 408.065120][T19705] syzkaller0: entered allmulticast mode [ 408.153280][T19713] Bluetooth: MGMT ver 1.23 [ 408.203083][T19717] xt_socket: unknown flags 0xfc [ 408.387775][T19719] lo speed is unknown, defaulting to 1000 [ 408.920200][T19719] lo speed is unknown, defaulting to 1000 [ 409.028488][T19742] __nla_validate_parse: 2 callbacks suppressed [ 409.028510][T19742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3493'. [ 409.421788][T19761] wg1: Master is either lo or non-ether device [ 409.540896][T19761] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 409.592114][T19761] team0 (unregistering): Port device team_slave_0 removed [ 409.618204][T19761] team0 (unregistering): Failed to send options change via netlink (err -105) [ 409.644968][T19761] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 409.667634][T19761] team0 (unregistering): Port device team_slave_1 removed [ 409.788590][T19771] netlink: 'syz.3.3502': attribute type 13 has an invalid length. [ 409.974501][T19776] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 409.987863][T19776] pim6reg1: entered promiscuous mode [ 409.997492][T19781] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 410.008230][T19776] pim6reg1: entered allmulticast mode [ 410.694621][T19821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.761965][T19832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3516'. [ 411.031876][T19846] macsec1: entered allmulticast mode [ 411.061793][T19846] macsec0: entered allmulticast mode [ 411.091997][T19846] macsec0: left allmulticast mode [ 411.150718][T19839] lo speed is unknown, defaulting to 1000 [ 411.366680][T19839] lo speed is unknown, defaulting to 1000 [ 411.366788][T19851] lo speed is unknown, defaulting to 1000 [ 411.568335][T19875] bond1: entered promiscuous mode [ 411.579190][T19875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3530'. [ 411.586266][T19880] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3532'. [ 411.791169][T19851] lo speed is unknown, defaulting to 1000 [ 412.109855][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 412.194473][T19900] hsr0: entered promiscuous mode [ 412.200668][T19900] macvlan2: entered allmulticast mode [ 412.206939][T19900] hsr0: entered allmulticast mode [ 412.212580][T19900] hsr_slave_0: entered allmulticast mode [ 412.223630][T19900] hsr_slave_1: entered allmulticast mode [ 412.336735][T19906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 412.673207][T19923] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3543'. [ 412.711407][T19925] netlink: 'syz.4.3544': attribute type 1 has an invalid length. [ 412.719668][T19925] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3544'. [ 412.729585][T19925] NCSI netlink: No device for ifindex 0 [ 412.868247][T19934] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 412.876553][T19934] syzkaller1: linktype set to 768 [ 412.897986][T19931] lo speed is unknown, defaulting to 1000 [ 413.041201][T19939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.169333][T19931] lo speed is unknown, defaulting to 1000 [ 413.235851][T19943] vlan3: entered promiscuous mode [ 413.247931][T19943] geneve1: entered promiscuous mode [ 413.253459][T19943] vlan3: entered allmulticast mode [ 413.260368][T19943] geneve1: entered allmulticast mode [ 413.340872][T19952] x_tables: duplicate underflow at hook 1 [ 413.515235][T19948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3553'. [ 413.600839][T19975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3562'. [ 413.610571][T19975] netlink: 'syz.4.3562': attribute type 7 has an invalid length. [ 413.619721][T19975] netlink: 'syz.4.3562': attribute type 8 has an invalid length. [ 414.121042][T20004] netlink: 'syz.0.3569': attribute type 21 has an invalid length. [ 414.129135][T20004] __nla_validate_parse: 2 callbacks suppressed [ 414.129149][T20004] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3569'. [ 414.147903][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 416.135800][ T5158] block nbd5: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 90 seconds [ 416.146698][ T5158] block nbd5: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 90 seconds [ 416.157701][ T5158] block nbd5: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 90 seconds [ 416.168693][ T5158] block nbd5: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 90 seconds [ 416.463304][T19965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.650940][T20017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3572'. [ 417.109633][T20046] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3582'. [ 417.133150][T20046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3582'. [ 417.258619][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 417.375386][T20063] bridge_slave_0: left allmulticast mode [ 417.415337][T20063] bridge_slave_0: left promiscuous mode [ 417.421458][T20063] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.443633][T20063] bridge_slave_1: left allmulticast mode [ 417.453259][T20063] bridge_slave_1: left promiscuous mode [ 417.459715][T20063] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.478906][T20063] bond0: (slave bond_slave_0): Releasing backup interface [ 417.490934][T20063] bond0: (slave bond_slave_1): Releasing backup interface [ 417.517606][T20063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.527987][T20063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.538608][T20063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.547467][T20063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.558088][T20063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 417.728115][T20082] syzkaller1: entered promiscuous mode [ 417.736898][T20082] syzkaller1: entered allmulticast mode [ 417.861608][T20092] syzkaller0: entered promiscuous mode [ 417.867286][T20092] syzkaller0: entered allmulticast mode [ 417.896661][T20080] netlink: 'syz.2.3590': attribute type 11 has an invalid length. [ 417.900861][T20092] netlink: 'syz.0.3593': attribute type 21 has an invalid length. [ 417.926212][T20092] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 417.934001][T20092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3593'. [ 417.938361][T20096] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3594'. [ 417.946408][T20092] x_tables: duplicate underflow at hook 4 [ 418.326835][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 418.782003][T20118] netlink: 'syz.4.3599': attribute type 1 has an invalid length. [ 418.790055][T20118] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3599'. [ 419.707305][ T5193] udevd[5193]: worker [15385] /devices/virtual/block/nbd5 is taking a long time [ 420.625244][T20140] syzkaller1: entered promiscuous mode [ 420.631746][T20140] syzkaller1: entered allmulticast mode [ 420.715184][T20147] lo speed is unknown, defaulting to 1000 [ 420.722035][T20156] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 421.212498][T20177] lo speed is unknown, defaulting to 1000 [ 421.212498][T20147] lo speed is unknown, defaulting to 1000 [ 421.355655][T20190] syzkaller1: entered promiscuous mode [ 421.370944][T20190] syzkaller1: entered allmulticast mode [ 421.654995][T20177] lo speed is unknown, defaulting to 1000 [ 421.835420][T20216] Cannot find set identified by id 65534 to match [ 421.946565][T20218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3626'. [ 422.188757][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 422.385906][T20230] bridge1: entered promiscuous mode [ 422.391159][T20230] bridge1: entered allmulticast mode [ 422.400361][T20230] team0: Port device bridge1 added [ 422.424999][T20235] bridge0: port 3(team0) entered blocking state [ 422.433260][T20235] bridge0: port 3(team0) entered disabled state [ 422.440370][T20235] team0: entered allmulticast mode [ 422.446539][T20235] team_slave_0: entered allmulticast mode [ 422.452373][T20235] team_slave_1: entered allmulticast mode [ 422.463451][T20235] team0: entered promiscuous mode [ 422.470096][T20235] team_slave_0: entered promiscuous mode [ 422.476376][T20235] team_slave_1: entered promiscuous mode [ 422.485860][T20239] netlink: 'syz.3.3631': attribute type 13 has an invalid length. [ 422.568876][T20240] bond0: entered promiscuous mode [ 422.578716][T20240] bond_slave_0: entered promiscuous mode [ 422.586695][T20240] bond_slave_1: entered promiscuous mode [ 422.592843][T20240] bridge0: entered promiscuous mode [ 422.602498][T20240] batadv0: entered promiscuous mode [ 422.609758][T20240] debugfs: 'hsr1' already exists in 'hsr' [ 422.617560][T20240] Cannot create hsr debugfs directory [ 422.624558][T20240] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 422.633207][T20240] bond0: left promiscuous mode [ 422.638171][T20240] bond_slave_0: left promiscuous mode [ 422.644023][T20240] bond_slave_1: left promiscuous mode [ 422.650696][T20240] bridge0: left promiscuous mode [ 422.657317][T20240] batadv0: left promiscuous mode [ 422.699022][T20238] lo speed is unknown, defaulting to 1000 [ 422.906249][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 423.006155][T20265] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 423.041668][T20266] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3636'. [ 423.046048][T20268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3642'. [ 423.083812][T20265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.120937][T20272] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 423.141603][T20272] bond3: (slave batadv1): making interface the new active one [ 423.152451][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 423.161648][T20272] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 423.164319][T20238] lo speed is unknown, defaulting to 1000 [ 423.187926][T20265] bond3 (unregistering): (slave batadv1): Releasing active interface [ 423.198452][T20265] bond3 (unregistering): Released all slaves [ 423.298888][T20278] team0: left allmulticast mode [ 423.303880][T20278] team_slave_0: left allmulticast mode [ 423.311473][T20278] team_slave_1: left allmulticast mode [ 423.317319][T20278] team0: left promiscuous mode [ 423.322206][T20278] team_slave_0: left promiscuous mode [ 423.333717][T20278] team_slave_1: left promiscuous mode [ 423.341813][T20278] bridge0: port 3(team0) entered disabled state [ 423.357192][T20278] bridge_slave_0: left allmulticast mode [ 423.362888][T20278] bridge_slave_0: left promiscuous mode [ 423.370222][T20278] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.379476][T20278] bridge_slave_1: left allmulticast mode [ 423.385274][T20278] bridge_slave_1: left promiscuous mode [ 423.391098][T20278] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.401946][T20278] bond0: (slave bond_slave_0): Releasing backup interface [ 423.411155][T20278] bond0: (slave bond_slave_1): Releasing backup interface [ 423.423949][T20278] team0: Port device team_slave_0 removed [ 423.430347][T20286] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3645'. [ 423.440889][T20278] team0: Port device team_slave_1 removed [ 423.447195][T20278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.455346][T20278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.463275][T20278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.500876][T20282] geneve3: entered promiscuous mode [ 423.587704][T20288] bond0: Caught tx_queue_len zero misconfig [ 423.593802][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3646'. [ 423.640466][T20252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.097980][T20317] lo speed is unknown, defaulting to 1000 [ 424.309236][T20335] netlink: 'syz.2.3658': attribute type 5 has an invalid length. [ 424.842217][T20349] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.893294][T10547] IPVS: starting estimator thread 0... [ 424.994187][T20352] IPVS: using max 33 ests per chain, 79200 per kthread [ 425.161209][T20349] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.252824][T20349] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.286996][T20339] lo speed is unknown, defaulting to 1000 [ 425.287004][T20317] lo speed is unknown, defaulting to 1000 [ 425.373617][T20349] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.556984][T20377] ip6gretap0: entered promiscuous mode [ 425.563591][T20377] vlan2: entered promiscuous mode [ 425.741256][T15840] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.771293][T20339] lo speed is unknown, defaulting to 1000 [ 425.832202][T15840] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.853357][T15840] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.885768][ T5889] IPVS: starting estimator thread 0... [ 425.975449][T20392] IPVS: using max 37 ests per chain, 88800 per kthread [ 426.008295][T15840] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.060970][T20400] netlink: 'syz.2.3678': attribute type 11 has an invalid length. [ 426.094226][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 426.203187][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 426.631861][T20422] lo speed is unknown, defaulting to 1000 [ 427.045210][T20422] lo speed is unknown, defaulting to 1000 [ 427.288529][T20464] __nla_validate_parse: 5 callbacks suppressed [ 427.288553][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.324462][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.333959][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.386397][T20465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.390858][T20458] netlink: 'syz.3.3694': attribute type 11 has an invalid length. [ 427.438367][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.447877][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.484559][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.743584][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.764735][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.779482][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 427.846003][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3697'. [ 428.032541][T20482] netlink: 'syz.4.3702': attribute type 1 has an invalid length. [ 428.048247][T20483] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 428.061235][T20483] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 428.282178][T20508] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 428.697322][T20526] bridge3: entered promiscuous mode [ 428.716961][T20532] openvswitch: netlink: Duplicate or invalid key (type 0). [ 428.725507][T20532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.737542][T20526] x_tables: ip_tables: ah match: only valid for protocol 51 [ 429.062039][T20554] openvswitch: netlink: Actions may not be safe on all matching packets [ 429.750560][T20575] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 429.758956][T20575] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 430.100950][T20597] netlink: 'syz.1.3741': attribute type 8 has an invalid length. [ 430.137674][T20597] bond0: entered promiscuous mode [ 430.156889][T20597] bond_slave_0: entered promiscuous mode [ 430.165270][T20597] bond_slave_1: entered promiscuous mode [ 430.171383][T20597] bridge0: entered promiscuous mode [ 430.178786][T20597] veth1_to_bridge: entered promiscuous mode [ 430.186845][T20597] bond0: left promiscuous mode [ 430.191722][T20597] bond_slave_0: left promiscuous mode [ 430.198185][T20597] bond_slave_1: left promiscuous mode [ 430.203847][T20597] bridge0: left promiscuous mode [ 430.210248][T20597] veth1_to_bridge: left promiscuous mode [ 430.217325][T15848] nci: nci_ntf_packet: unsupported ntf opcode 0xf04 [ 430.236544][T20604] vti0: entered promiscuous mode [ 430.241870][T20604] vti0: entered allmulticast mode [ 430.250090][T20610] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 430.252649][T20599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.541308][T20632] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 430.712027][T20648] bond0: Unable to set up delay as MII monitoring is disabled [ 431.071041][T20666] netlink: 'syz.1.3761': attribute type 25 has an invalid length. [ 431.177373][T20671] syzkaller0: entered promiscuous mode [ 431.183109][T20671] syzkaller0: entered allmulticast mode [ 431.273902][T20674] lo speed is unknown, defaulting to 1000 [ 431.672914][T20674] lo speed is unknown, defaulting to 1000 [ 431.756404][T20701] ip6erspan0: entered promiscuous mode [ 431.782181][T20701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.797764][T20701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.815984][T20701] bond0 (unregistering): Released all slaves [ 432.303440][T20719] netlink: 'syz.3.3774': attribute type 10 has an invalid length. [ 432.351036][T20719] veth0_vlan: left promiscuous mode [ 432.370502][T20719] veth0_vlan: entered promiscuous mode [ 432.382409][T20719] team0: Device veth0_vlan failed to register rx_handler [ 432.663246][T20722] lo speed is unknown, defaulting to 1000 [ 433.296460][T20744] lo speed is unknown, defaulting to 1000 [ 433.381859][T20722] lo speed is unknown, defaulting to 1000 [ 433.520663][T20744] lo speed is unknown, defaulting to 1000 [ 435.055013][T20773] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 435.114747][T20776] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 435.167347][T20774] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 435.205956][T20774] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 435.319975][T20773] bond4: (slave gretap1): making interface the new active one [ 435.332672][T20773] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 435.476025][T20781] syzkaller0: entered allmulticast mode [ 435.661646][T20789] __nla_validate_parse: 52 callbacks suppressed [ 435.661674][T20789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3792'. [ 435.872249][T20795] syzkaller0: entered promiscuous mode [ 435.889020][T20795] syzkaller0: entered allmulticast mode [ 436.178613][T20810] x_tables: unsorted underflow at hook 4 [ 436.271227][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 436.306511][T20812] nbd: must specify an index to disconnect [ 436.359206][T20814] FAULT_INJECTION: forcing a failure. [ 436.359206][T20814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.387829][T20816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3802'. [ 436.394459][T20814] CPU: 0 UID: 0 PID: 20814 Comm: syz.1.3801 Not tainted syzkaller #0 PREEMPT(full) [ 436.394488][T20814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.394500][T20814] Call Trace: [ 436.394508][T20814] [ 436.394516][T20814] dump_stack_lvl+0xe8/0x150 [ 436.394549][T20814] should_fail_ex+0x412/0x560 [ 436.394576][T20814] _copy_from_user+0x2d/0xb0 [ 436.394677][T20814] ___sys_recvmsg+0x175/0x590 [ 436.394766][T20814] ? __pfx____sys_recvmsg+0x10/0x10 [ 436.394801][T20814] ? __fget_files+0x3a0/0x420 [ 436.394847][T20814] do_recvmmsg+0x334/0x800 [ 436.394872][T20814] ? __pfx_do_recvmmsg+0x10/0x10 [ 436.394899][T20814] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.394972][T20814] __x64_sys_recvmmsg+0x198/0x250 [ 436.395000][T20814] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 436.395028][T20814] do_syscall_64+0x14d/0xf80 [ 436.395052][T20814] ? trace_irq_disable+0x3b/0x150 [ 436.395076][T20814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.395092][T20814] ? clear_bhb_loop+0x40/0x90 [ 436.395113][T20814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.395130][T20814] RIP: 0033:0x7f2ffb99c799 [ 436.395147][T20814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.395162][T20814] RSP: 002b:00007f2ffc7f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 436.395181][T20814] RAX: ffffffffffffffda RBX: 00007f2ffbc15fa0 RCX: 00007f2ffb99c799 [ 436.395194][T20814] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 436.395204][T20814] RBP: 00007f2ffc7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 436.395214][T20814] R10: 0000000000000220 R11: 0000000000000246 R12: 0000000000000001 [ 436.395224][T20814] R13: 00007f2ffbc16038 R14: 00007f2ffbc15fa0 R15: 00007fff1abf6138 [ 436.395249][T20814] [ 436.509890][T20819] netlink: 'syz.0.3804': attribute type 3 has an invalid length. [ 436.593748][T20703] Set syz1 is full, maxelem 65536 reached [ 436.653926][T20819] netlink: 'syz.0.3804': attribute type 3 has an invalid length. [ 436.810381][T20826] tipc: Enabled bearer , priority 0 [ 436.847909][T20826] syzkaller0: entered promiscuous mode [ 436.857300][T20826] syzkaller0: entered allmulticast mode [ 436.881820][T20826] tipc: Resetting bearer [ 437.310081][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3814'. [ 437.363631][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3815'. [ 439.332579][T20839] tipc: Resetting bearer [ 439.351981][T20839] tipc: Disabling bearer [ 439.426832][ T5882] tipc: Node number set to 336364964 [ 439.592429][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 439.862921][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3827'. [ 439.879431][T20890] FAULT_INJECTION: forcing a failure. [ 439.879431][T20890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.909862][T20894] lo speed is unknown, defaulting to 1000 [ 439.954890][T20890] CPU: 0 UID: 0 PID: 20890 Comm: syz.0.3825 Not tainted syzkaller #0 PREEMPT(full) [ 439.954917][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.954928][T20890] Call Trace: [ 439.954936][T20890] [ 439.954943][T20890] dump_stack_lvl+0xe8/0x150 [ 439.954976][T20890] should_fail_ex+0x412/0x560 [ 439.955005][T20890] _copy_to_user+0x31/0xb0 [ 439.955035][T20890] simple_read_from_buffer+0xe1/0x170 [ 439.955065][T20890] proc_fail_nth_read+0x1bb/0x230 [ 439.955133][T20890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.955159][T20890] ? rw_verify_area+0x2a6/0x4d0 [ 439.955184][T20890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.955209][T20890] vfs_read+0x20c/0xa70 [ 439.955224][T20890] ? fdget_pos+0x246/0x320 [ 439.955244][T20890] ? __pfx_do_recvmmsg+0x10/0x10 [ 439.955267][T20890] ? __pfx___mutex_lock+0x10/0x10 [ 439.955292][T20890] ? __pfx_vfs_read+0x10/0x10 [ 439.955318][T20890] ? __fget_files+0x2a/0x420 [ 439.955345][T20890] ? __fget_files+0x3a0/0x420 [ 439.955367][T20890] ? __fget_files+0x2a/0x420 [ 439.955396][T20890] ksys_read+0x150/0x270 [ 439.955416][T20890] ? __pfx_ksys_read+0x10/0x10 [ 439.955443][T20890] do_syscall_64+0x14d/0xf80 [ 439.955464][T20890] ? trace_irq_disable+0x3b/0x150 [ 439.955486][T20890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.955503][T20890] ? clear_bhb_loop+0x40/0x90 [ 439.955524][T20890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.955542][T20890] RIP: 0033:0x7fa0e035cfce [ 439.955558][T20890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 439.955572][T20890] RSP: 002b:00007fa0e12fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.955591][T20890] RAX: ffffffffffffffda RBX: 00007fa0e13006c0 RCX: 00007fa0e035cfce [ 439.955603][T20890] RDX: 000000000000000f RSI: 00007fa0e13000a0 RDI: 0000000000000004 [ 439.955614][T20890] RBP: 00007fa0e1300090 R08: 0000000000000000 R09: 0000000000000000 [ 439.955625][T20890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.955636][T20890] R13: 00007fa0e0616038 R14: 00007fa0e0615fa0 R15: 00007ffcd33d9168 [ 439.955666][T20890] [ 440.397132][T20894] lo speed is unknown, defaulting to 1000 [ 440.402924][T20906] netlink: 'syz.0.3829': attribute type 2 has an invalid length. [ 440.419615][T20898] lo speed is unknown, defaulting to 1000 [ 440.465630][ T1299] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 440.516307][T20906] ÃM¯”ÛÓó: entered promiscuous mode [ 440.711229][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3834'. [ 440.746027][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.753461][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.760362][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.761661][T20898] lo speed is unknown, defaulting to 1000 [ 440.767434][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.780082][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.787077][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.793945][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.800862][T20924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0xfa [ 440.827480][T20929] netlink: 'syz.3.3836': attribute type 3 has an invalid length. [ 440.829551][T20928] syzkaller1: entered promiscuous mode [ 440.835493][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3836'. [ 440.853687][T20928] syzkaller1: entered allmulticast mode [ 441.475115][T20943] sctp: [Deprecated]: syz.3.3842 (pid 20943) Use of int in maxseg socket option. [ 441.475115][T20943] Use struct sctp_assoc_value instead [ 441.508731][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'. [ 441.534733][T20942] netlink: 'syz.3.3842': attribute type 10 has an invalid length. [ 441.607655][T20942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.654904][T20946] netlink: 'syz.4.3843': attribute type 5 has an invalid length. [ 441.685226][T20942] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 441.705214][T20953] xt_bpf: check failed: parse error [ 442.098043][T20967] net_ratelimit: 3321 callbacks suppressed [ 442.098068][T20967] netlink: set zone limit has 4 unknown bytes [ 442.229940][T20981] sctp: [Deprecated]: syz.4.3849 (pid 20981) Use of int in maxseg socket option. [ 442.229940][T20981] Use struct sctp_assoc_value instead [ 442.493274][T20995] netlink: 'syz.0.3852': attribute type 13 has an invalid length. [ 442.501493][T20995] netlink: 'syz.0.3852': attribute type 17 has an invalid length. [ 442.547148][T20993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3852'. [ 443.122057][T20995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.583689][T21040] xt_l2tp: invalid flags combination: 8 [ 443.786356][T21052] batadv0: entered promiscuous mode [ 443.818017][T21052] bond0: entered promiscuous mode [ 443.823115][T21052] bond_slave_0: entered promiscuous mode [ 443.844417][T21052] bond_slave_1: entered promiscuous mode [ 443.850367][T21052] bridge0: entered promiscuous mode [ 443.885050][T21052] debugfs: 'hsr1' already exists in 'hsr' [ 443.890802][T21052] Cannot create hsr debugfs directory [ 443.897335][T21052] hsr1: entered allmulticast mode [ 443.902403][T21052] batadv0: entered allmulticast mode [ 443.908318][T21052] bond0: entered allmulticast mode [ 443.913470][T21052] bond_slave_0: entered allmulticast mode [ 443.919961][T21052] bond_slave_1: entered allmulticast mode [ 443.926107][T21052] bridge0: entered allmulticast mode [ 443.932965][T21052] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 443.941886][T21046] lo speed is unknown, defaulting to 1000 [ 443.949720][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 443.981755][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 444.003507][T21065] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3867'. [ 444.034200][T21064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3867'. [ 444.077123][T21067] netlink: 'syz.1.3868': attribute type 4 has an invalid length. [ 444.095684][T21067] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3868'. [ 444.117644][ T10] [ 444.120015][ T10] ============================================ [ 444.126247][ T10] WARNING: possible recursive locking detected [ 444.132476][ T10] syzkaller #0 Not tainted [ 444.136903][ T10] -------------------------------------------- [ 444.143187][ T10] kworker/0:1/10 is trying to acquire lock: [ 444.149092][ T10] ffff8880921acf70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 444.158451][ T10] [ 444.158451][ T10] but task is already holding lock: [ 444.163061][T21067] .`: renamed from bond0 (while UP) [ 444.165823][ T10] ffff888059228f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 444.165878][ T10] [ 444.165878][ T10] other info that might help us debug this: [ 444.165884][ T10] Possible unsafe locking scenario: [ 444.165884][ T10] [ 444.195927][ T10] CPU0 [ 444.199305][ T10] ---- [ 444.202622][ T10] lock(&hsr->seqnr_lock); [ 444.207140][ T10] lock(&hsr->seqnr_lock); [ 444.211668][ T10] [ 444.211668][ T10] *** DEADLOCK *** [ 444.211668][ T10] [ 444.219827][ T10] May be due to missing lock nesting notation [ 444.219827][ T10] [ 444.228159][ T10] 15 locks held by kworker/0:1/10: [ 444.233284][ T10] #0: ffff888032073148 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 444.243997][ T10] #1: ffffc900000f7c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 444.257138][ T10] #2: ffff8880a0a5c538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 444.266463][ T10] #3: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 444.275720][ T10] #4: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 444.284974][ T10] #5: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 444.294963][ T10] #6: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 444.304135][ T10] #7: ffff888059228f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 444.313753][ T10] #8: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 444.323330][ T10] #9: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 444.333333][ T10] #10: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900 [ 444.343080][ T10] #11: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 444.353089][ T10] #12: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 444.362543][ T10] #13: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 444.372673][ T10] #14: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 444.381908][ T10] [ 444.381908][ T10] stack backtrace: [ 444.387986][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 444.388003][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.388015][ T10] Workqueue: mld mld_ifc_work [ 444.388037][ T10] Call Trace: [ 444.388044][ T10] [ 444.388052][ T10] dump_stack_lvl+0xe8/0x150 [ 444.388075][ T10] print_deadlock_bug+0x279/0x290 [ 444.388099][ T10] __lock_acquire+0x253f/0x2cf0 [ 444.388119][ T10] ? __lock_acquire+0x6b5/0x2cf0 [ 444.388136][ T10] ? unwind_next_frame+0xa5/0x23c0 [ 444.388188][ T10] ? unwind_next_frame+0x1aaf/0x23c0 [ 444.388207][ T10] lock_acquire+0xf0/0x2e0 [ 444.388223][ T10] ? hsr_dev_xmit+0x237/0x360 [ 444.388241][ T10] ? hsr_dev_xmit+0x237/0x360 [ 444.388255][ T10] _raw_spin_lock_bh+0x36/0x50 [ 444.388274][ T10] ? hsr_dev_xmit+0x237/0x360 [ 444.388288][ T10] hsr_dev_xmit+0x237/0x360 [ 444.388301][ T10] ? hsr_dev_xmit+0x2d/0x360 [ 444.388315][ T10] dev_hard_start_xmit+0x2d8/0x870 [ 444.388335][ T10] __dev_queue_xmit+0x1557/0x3870 [ 444.388353][ T10] ? __local_bh_enable_ip+0xd0/0x130 [ 444.388372][ T10] ? __dev_queue_xmit+0x28b/0x3870 [ 444.388386][ T10] ? ebt_do_table+0x2665/0x2830 [ 444.388452][ T10] ? ebt_do_table+0x2665/0x2830 [ 444.388467][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 444.388489][ T10] ? br_nf_post_routing+0x219/0xfe0 [ 444.388536][ T10] br_dev_queue_push_xmit+0x370/0x4a0 [ 444.388558][ T10] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 444.388577][ T10] NF_HOOK+0x360/0x3f0 [ 444.388595][ T10] ? NF_HOOK+0xa2/0x3f0 [ 444.388612][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 444.388629][ T10] ? process_scheduled_works+0xb02/0x1830 [ 444.388647][ T10] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 444.388669][ T10] br_forward_finish+0xd3/0x130 [ 444.388686][ T10] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 444.388705][ T10] ? __pfx_br_forward_finish+0x10/0x10 [ 444.388723][ T10] NF_HOOK+0x360/0x3f0 [ 444.388741][ T10] ? NF_HOOK+0xa2/0x3f0 [ 444.388758][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 444.388776][ T10] ? __pfx_br_forward_finish+0x10/0x10 [ 444.388794][ T10] ? __skb_clone+0x483/0x7a0 [ 444.388836][ T10] ? br_handle_vlan+0x61/0x530 [ 444.388878][ T10] __br_forward+0x397/0x540 [ 444.388895][ T10] ? __pfx_br_forward_finish+0x10/0x10 [ 444.388920][ T10] br_flood+0x6ee/0xb80 [ 444.388942][ T10] ? br_dev_xmit+0x193/0x1980 [ 444.388956][ T10] br_dev_xmit+0x12bd/0x1980 [ 444.388971][ T10] ? br_dev_xmit+0x193/0x1980 [ 444.388986][ T10] ? __pfx_br_dev_xmit+0x10/0x10 [ 444.388999][ T10] ? __skb_get_hash_net+0x13f/0x2e0 [ 444.389036][ T10] ? __pfx___skb_get_hash_net+0x10/0x10 [ 444.389049][ T10] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 444.389064][ T10] ? skb_network_protocol+0x23d/0x3f0 [ 444.389078][ T10] ? __pfx_passthru_features_check+0x10/0x10 [ 444.389094][ T10] dev_hard_start_xmit+0x2d8/0x870 [ 444.389112][ T10] __dev_queue_xmit+0x1557/0x3870 [ 444.389129][ T10] ? __dev_queue_xmit+0x28b/0x3870 [ 444.389143][ T10] ? unwind_next_frame+0xa5/0x23c0 [ 444.389164][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 444.389178][ T10] ? unwind_next_frame+0x1aaf/0x23c0 [ 444.389204][ T10] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 444.389227][ T10] bond_start_xmit+0xd5c/0x1900 [ 444.389246][ T10] ? bond_start_xmit+0xb4/0x1900 [ 444.389260][ T10] ? __pfx_bond_start_xmit+0x10/0x10 [ 444.389276][ T10] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 444.389298][ T10] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 444.389313][ T10] ? skb_network_protocol+0x23d/0x3f0 [ 444.389327][ T10] ? __pfx_passthru_features_check+0x10/0x10 [ 444.389342][ T10] dev_hard_start_xmit+0x2d8/0x870 [ 444.389361][ T10] __dev_queue_xmit+0x1557/0x3870 [ 444.389378][ T10] ? trace_kmem_cache_alloc+0x29/0xf0 [ 444.389390][ T10] ? __dev_queue_xmit+0x28b/0x3870 [ 444.389405][ T10] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 444.389437][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 444.389453][ T10] ? __asan_memcpy+0x40/0x70 [ 444.389471][ T10] ? __pskb_copy_fclone+0x9c8/0xff0 [ 444.389510][ T10] ? __asan_memcpy+0x40/0x70 [ 444.389522][ T10] ? __pskb_copy_fclone+0x9c8/0xff0 [ 444.389539][ T10] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 444.389556][ T10] ? hsr_addr_subst_dest+0x30d/0xa90 [ 444.389574][ T10] hsr_forward_skb+0x157b/0x2860 [ 444.389590][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 444.389613][ T10] ? hsr_forward_skb+0xb3/0x2860 [ 444.389630][ T10] ? __pfx_hsr_forward_skb+0x10/0x10 [ 444.389645][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 444.389660][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 444.389674][ T10] ? hsr_dev_xmit+0x237/0x360 [ 444.389689][ T10] hsr_dev_xmit+0x242/0x360 [ 444.389702][ T10] ? hsr_dev_xmit+0x2d/0x360 [ 444.389716][ T10] dev_hard_start_xmit+0x2d8/0x870 [ 444.389734][ T10] __dev_queue_xmit+0x1557/0x3870 [ 444.389751][ T10] ? __dev_queue_xmit+0x28b/0x3870 [ 444.389765][ T10] ? mroute6_is_socket+0x23d/0x380 [ 444.389805][ T10] ? __pfx_mroute6_is_socket+0x10/0x10 [ 444.389822][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 444.389836][ T10] ? neigh_connected_output+0x1ea/0x460 [ 444.389884][ T10] ? eth_header+0x11b/0x200 [ 444.389940][ T10] ? __asan_memcpy+0x40/0x70 [ 444.389959][ T10] ? ip6_output+0x126/0x550 [ 444.389976][ T10] ip6_output+0x340/0x550 [ 444.389992][ T10] ? __pfx_ip6_output+0x10/0x10 [ 444.390007][ T10] NF_HOOK+0x177/0x4f0 [ 444.390024][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 444.390054][ T10] ? __pfx_dst_output+0x10/0x10 [ 444.390070][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 444.390103][ T10] ? __local_bh_enable_ip+0xd0/0x130 [ 444.390121][ T10] ? icmp6_dst_alloc+0x3a6/0x440 [ 444.390165][ T10] mld_sendpack+0x8b4/0xe40 [ 444.390181][ T10] ? look_up_lock_class+0x57/0x110 [ 444.390204][ T10] ? mld_sendpack+0x213/0xe40 [ 444.390219][ T10] ? __pfx_mld_sendpack+0x10/0x10 [ 444.390240][ T10] mld_ifc_work+0x835/0xe70 [ 444.390257][ T10] ? process_scheduled_works+0xa25/0x1830 [ 444.390274][ T10] process_scheduled_works+0xb02/0x1830 [ 444.390303][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.390321][ T10] ? assign_work+0x3d5/0x5e0 [ 444.390338][ T10] worker_thread+0xa50/0xfc0 [ 444.390364][ T10] kthread+0x388/0x470 [ 444.390388][ T10] ? __pfx_worker_thread+0x10/0x10 [ 444.390405][ T10] ? __pfx_kthread+0x10/0x10 [ 444.390418][ T10] ret_from_fork+0x51e/0xb90 [ 444.390443][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 444.390459][ T10] ? __switch_to+0xc7d/0x1450 [ 444.390476][ T10] ? __pfx_kthread+0x10/0x10 [ 444.390488][ T10] ret_from_fork_asm+0x1a/0x30 [ 444.390511][ T10] [ 445.268796][T21069] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 445.283334][T21046] lo speed is unknown, defaulting to 1000 [ 446.214911][ T5158] block nbd5: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 120 seconds [ 446.225883][ T5158] block nbd5: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 120 seconds [ 446.237062][ T5158] block nbd5: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 120 seconds [ 446.248176][ T5158] block nbd5: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 120 seconds