last executing test programs: 6.655319308s ago: executing program 3 (id=14789): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000051c0)={0x0, @in6={{0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x84) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100), 0x0) (async) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000002c0)=""/76, 0x4c, 0x40, 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r8 = socket(0x2a, 0x5, 0x5) sendmsg$can_bcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x5, 0xf81, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "2c44eca6d8d62307cc8885b84b88465f9c4fbf7134113d967631c7c3966211b88909710aeb48069897ef11e1389ddfab168013bc5073c5a5f7cab9725c5e2b4e"}}, 0x80}, 0x1, 0x0, 0x0, 0x4044004}, 0x404c880) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000000c0)={0x5, 0x1488a9e2, 0xf, 0x0, 0x8001}, 0x14) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r9, 0x80186e82, &(0x7f0000000440)={&(0x7f0000000340)=[{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x10000, 0xfff}, {0x2, 0x0, 0x4, 0x8, 0x7, 0x29, 0x260, 0x2}, {0x3, 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x8, 0x7}], 0x3, 0x38, 0x0, 0xb}) 6.48194168s ago: executing program 3 (id=14793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x1], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaec12}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r10, &(0x7f0000003840)=[{{&(0x7f0000000480)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)="fe9fcab8d9a71d5d4bd6f0aeaec84b392d15ed78a0a6c25a750c555d0b7dfd904098282fe059d7923e01a5e8e337b3870a12b1cf449529dc71593649a0ad478c6ca6bb525b08cea79e5582a047beb15d4b798028efae1d528cfa8a90a63e7ba24a896db5395007cbab3e840cf69c1c999ca412f177ec1db3ed14c4511968414e146f6b064560f436383907c6049a7f0e2dff106cd2ab8d8ffc2ab960330f3daeec06c4f9", 0xa4}, {&(0x7f0000000680)="0d16a0d08e57ef7f4eb194ab1bae4401a52cc29a55dbd827394fbea10ed58e1f4a6b4e8723acc25dad209c6825be98995c759eed519266d3200299bcb1070c2ad088322adff1ee3608d2eef34c00a045170ac10e175716c2d7bf329a3616d037eee9a73e7c53f72e4f325d8d1202745ca89cbe428563f1e62260b3024766e7aa76", 0x81}, {&(0x7f0000000740)="338c313820f6f0e404f8e8737c95e63cca5d0d0c72fb5ff62ef355c8fccf1fde1b9f5ab195656d0716060ab7b075e7849313ba58ce2763fb02b87f441a8c11ea4325b9da7bd156b6dbfa1f93f443cc60f791439706bbb46679a2a78e148314", 0x5f}, {&(0x7f00000007c0)="b8b504d3e22ac2d09c1aa26bf303831c0698d3e6548da0e6b058ebe5849d9e5f0db5f85b3bc34a0305989b6f337097fc21df0f2c1a997ca892b4140dea586f3ad9158766d3f7e1c427af98c3e12753c62a6bd09b75f49eeaa386d6691e0f274d8384af3c1e5158", 0x67}], 0x4}}, {{&(0x7f0000000880)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000900)="8af19cc573f638e17586d6ed0db4fcc5a140d9797f54bc28ab0d717b1d554e0500da00fe2068242e10eb61bce8b7b05e4fef6a0c66f69b02d992cf125beec5b456ffa0d930020417054cd33d3ed845ae3414e1fe298df0d9dbffaf343026e1bd246802866696325b5ef386e314db9ca87ad9b927e26ff5c1224a1b14f9859634d1b1d1f6e8b4432e45cba1186c83ab0ecb83006dba5e8e23af4422ab8f3486ca9f43b9f7ee934a42cd63e44c667c7d4e0402e4e56f1444dddab00082c9f1fd9a0ad043daf33f663418ba7bb43e0c1069c645a228d23c72d77c272af6d2d93c41b85ee7d1caa72bed4539", 0xea}], 0x1, &(0x7f0000000a40)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1000}}], 0x48}}, {{&(0x7f0000000ac0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="90190c558ae78ac962de2611ebc40ebf5b2d51768b7950dcf2c8077328a07eabb5bc8bec24ebf1", 0x27}, {&(0x7f0000000b80)="9ea3eb79dd6c2a3bb1c87b105c0db0bc", 0x10}, {&(0x7f0000000bc0)="e767ac9099858e8aac0dc2509ff6d489d0333564d7eaeabf0adea13075d56411d1ffd132779527f2cbf1f9755ead82930244ee296e6cf72089fac9ba61683f79b52ac03350b38cd6c6976217fdcdfdc594cd23f14c090c9074268de6798bd4ce93de77d26ad175169cf0728773542d3f2ab872ba407937daf8595eaa0a085eec37d7e8470a81bd07aa9d4c47d79a395cd4a0a7db", 0x94}, {&(0x7f0000000c80)="d2009de41ca4863dbd8e837f0e86f6e05f", 0x11}, {&(0x7f0000000cc0)="6c8c877e7ee6101eb3e44a3385757ec2e54e265b0c8338c1079a7d305faa9e17da1127de996a7822895c7cea85f2696114ca69143c00e59f20944f7f0073d6fac623e8d7dc6d21d97d438b8453172fab64a51900088d86d5d023ccb69a717271e00cdaf3ab88c2b01da76c6ef6fc55b1b0c6ea05a2619de4e0fd47c700ee0131413db30dabf710a5bdfb74ba2d029f3cbde1f3329534ce935238f7e8298a4958331c9a4c24fbf415f7c0dbe1265598d152d120e62cb19f2e495a9e99bf7a7ce9159ff9a8897923cbe330402a1f38943d1a74ac31277300833e79cd6c", 0xdc}, {&(0x7f0000000dc0)="b307225f42a41aa70ee84d84187ffd8730ac99f2f90b6aee0df8508598c82380d3879fea5ce336c4e1e9b95850aa24530b889986dafc11c4ad7491c636795b60fd5e0d8d452c2f04468aaaeed882bbd0f5ddc9be8d56d1cb1eb0ed87dbe0c963c80214", 0x63}, {&(0x7f0000000e40)='Y', 0x1}, {&(0x7f0000000e80)="94c7e2c4d501337f01e9a90a08d9a53ce372ede797e0e7c89e4e5d166fc4b27b18013e89da330e81306857df5cb053ca2afcf65680c5b88fd6d7", 0x3a}], 0x8, &(0x7f0000000f40)=[@timestamping={{0x14}}, @txtime={{0x18}}], 0x30}}, {{&(0x7f0000000f80)=@xdp={0x2c, 0x9, r8, 0x2b}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001000)="7d4f658e3318e87049a5a9b75fe7030633445da49e1cac5eeb030a7a894b5542795732f511320a9cc8f73f346b6129f2ab70eef6feff1d147062d9f7cedadb5e9bd95bde17609e2d7996b78dd98ee05a015c150cefb1674c1373b9efc1ae964bbb2e6fec9b97da7edcc7c604b5837feeeec8a02ed2b90b08676b797d03174c510b67f583200818cd77021b61f778a7afc8ff59dc7ead7f6c8952b35084d9a6f7307426c9b5b26ec00780688f1a278d", 0xaf}, {&(0x7f00000010c0)="f763655ac536effa5be04e31cc4cf94960e828f10e1fa8", 0x17}, {&(0x7f0000001100)="577e3aaf461582e9c0e2da82f9eb13d6b050428d61b17446174b9016e2208d49ce032009eecd3bb0d5cb8b4a66378d6c3248701b9bbb9ae46bf77807ef8669b7f63cc52c1bec4562e4e5c8af5a4e480b5444c8014dfa444ca5d05dea12f8af028b2e0850b7338534954df0eb8ffa8c7302ffb461e9949a794056333aafbc86d4ebe4d29b397dffb077e8b36f4e5fc3692d07d73af99b1c9088d8c60646bcfd33128c92c68be64da881d9b24f2b0eee390438c2f8bb5bccd69185c12e68aa10942411", 0xc2}, {&(0x7f0000001300)="24e7f30a50b4b1bf710e85500571f73461c87c5d51351e56e535ea1465c35f50811e4b1cc03b0747e17d7953c89c1e50bc9052c463b8d3c334268be594bb763ad2cb1cb91dcfd7de3666d38e762f273622f54b4c88e4ee78baec6d6e218bd654437649484bcb92008b2a96237440047bdbb4d391bc932a99c44dfd31e5c4891dd94475187a78a96f4766c5684906f0281242c6279c759f873019f92c4d55fa74203b951699caa69aeea6d9a65191513851d9a55b3b9a4c716ea6ff14fbceb8615d8d20103a6bc6f8def0137b70934feb9f0c33c85f59", 0xd6}], 0x4, &(0x7f0000001440)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x60}}], 0x48}}, {{&(0x7f00000014c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x80, &(0x7f0000001540), 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0xbab}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5c}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x2d}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}], 0xc0}}, {{&(0x7f0000001640)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="eaecd0aa512e8cec08cf9603c5e75b7d1938021287377af74f40720d7ab21f4d1a74754cb889c17622687e0752ea9190d7d9a878b6e053601ade843cc0e46452c8e04d01a104b74c85cf3fae19862a659f5bb258747dd7afb3f58151fb21215e3c27b3088822eb8fc6170aa74b608f21ff144d3617eb5d50dd989d32b0a8dbc1344dd7da716f963f861abb1a0b8749f3cf47faecb7bf4bb0ede3a2b8e2799a9d5df547b798f92aa2b9d3523077806653dbe728f1b8cfbc7326845c4904046482337afb4e2b14e33cdcaa8c1837d8fe4b", 0xd0}, {&(0x7f00000033c0)="584c5cd06a9d582a82cb315b47115e8f0d7f8684677c1e088716cd01385e350ba297f41d1bd910b63640aae7b589f65c2276cb91698cb3f14200fd96699cce100f9ddddaa73f53f390d78bc320f7542e00d67859ad6d5ce85bb1177c987fadee250692acc8a869f662799ac97475942bb8921802bd8695147fd0cceb0ba445d02a53a9e4bd5f9427bbe6bb6d87239d3df849d1097fd3cac4ffbbbaa2f470047b539825f54236b882f4bbd8e41fccc51e4f87ce9b5ae123ee2628377c5d6725aae467b9043e624bc20c3cc379a929b5abeef22ce9390d4529c07565bcb88ca98cb5f34c543b43ffaf9610cf66", 0xec}, {&(0x7f00000034c0)="53f666db2aaa", 0x6}, {&(0x7f0000003500)="37c05df94cfd10ffee000000007ae73b41671ceedf8f61541ca5529cdab9b6d46e4a5e53f609e107dfc813507cd056a3303b17ac4bbc2028e54affff8742e41b7236", 0x42}, {&(0x7f0000003580)="39e511d961a5401060d7bcfd9c71fbf2518a7c391fde3fa92aef361d42e6a0d3c86cdcd8a8a971a1e0cef488a801f78862869d4ab73850f50f68fa362589614b02574685bcbd4641f44f6dd96a8d9cd6f874f02159df95ed8df598eca2413887", 0x60}, {&(0x7f0000003600)="c52fc3c959bf45d73fb1da08bd69e65034dd5a9c18aab4bfd4de4d69bbf8753ed530da2fb538655faf0b8d8a453eb5274ce91f06890da2fadb9266281904dc0e206cc9dc9c2e8e9724e196c3f9e040b114d7dedc1b534da7faf7a0f065e8ca3c6ae1c32c074313aff2df9b1f2d99398aebeb58250c3c350247c9b110be27894e0cdbf10389bd5c6eb6e82fd14e1a5098a0d9f2b5095022871ab1a16b8733e411e0b4063f5a0b9f2e20769a6513db3434", 0xb0}], 0x7, &(0x7f0000003740)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xdd8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0xf0}}], 0x6, 0x800) recvfrom(r11, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="9a", 0x1}], 0x1}, 0x4) r13 = socket$kcm(0x2, 0xa, 0x2) socketpair(0x21, 0x4, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r14, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000011400022abd7da873ee545735c5e5ee020ca97000fcdbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x81) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6f42b17eab5716422bea6b00003200fc010000000000000000000000000000ff0200000000000000000000000000018a5157ad693429ca1e6f13"], 0x3a) 6.264906074s ago: executing program 3 (id=14796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000016c0)=0x8000007b, 0x4) bind$packet(r1, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 6.211074163s ago: executing program 3 (id=14798): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25087c0000080001800400dd800800038004"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x11) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180001ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.929466569s ago: executing program 3 (id=14802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x134, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{0x120, 0x1, [@m_ipt={0x11c, 0x16, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb8, 0x6, {0x200, 'nat\x00', 0x8f, 0x200, "e9d9c4de6f770ef38ded8900f69af9c5a1ae1f4e99a96b5c00496ec84cfc3e6817c0594c650baf6344e40684acf3324ceff3457a3e10fb23f9410385c8764e3e8434de8e5a9059328446a82324d5523fac03d1ddfbb58e0483fda45d59063937813bbca4f2f16fce7ec9d3ff26b43a5c0b423b74fa4fca6a8ea0829b747d1e7996f6444b1b3e73111018bd2694d7"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x15, 0x6, "5a2d0e869135a294681ef6728f70a65a4e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}]}]}, 0x134}}, 0x4000800) recvmmsg$unix(r1, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000740)=""/249, 0xf9}], 0x2}}], 0x1, 0x140, 0x0) 5.840675691s ago: executing program 3 (id=14803): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0x1000}], 0x1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0x800000}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000090601020000000000000000000000000900020073797a31000000000500010007000000240007801800018014020240000000000000000000000000000000010800094000"], 0x4c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000000000000000000000000000000092010000000000000600000000000000ffffe5ffffffffff1b250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fcb}, 0x94) 2.781821987s ago: executing program 2 (id=14841): socket$netlink(0x10, 0x3, 0xf) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0004000d63cb79f4bab30187be98b2c6a0e1b76924e2c01e162adb39ad19e02ff0c40fb901c3defa0722d7e725de287156b34840", @ANYRES16=r9, @ANYBLOB="030328bd0900000000000000000008000300", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x23c, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xe, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1b4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xcecb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xee}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x41}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x27}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x67}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x11}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa15}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81ca}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x50}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffa}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffec}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8000000000000001}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x6}, {0x0, 0x10}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) sendto$packet(r0, &(0x7f00000002c0)="0409102c280000000000170600000000", 0x10, 0x4, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="adea368c0955"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 1.123427995s ago: executing program 2 (id=14848): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x1e8, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:tty_device_t:s0\x00'}}}, {{@arp={@empty, @local, 0xff000000, 0x0, 0xa, 0xa, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0x7f]}}, 0x1, 0x1, 0x69b, 0x1, 0x8000, 0x2ec, 'bridge_slave_1\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x21}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x17}, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000000803000000000000000000070000060900010073797a30000000000600024005f5000005000300060000001c000480080008400000000008000440000000ef070003"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc880) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x2, 'ip6_vti0\x00', {0x4}, 0x8}) 904.532689ms ago: executing program 4 (id=14850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) socket$igmp(0x2, 0x3, 0x2) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000006c0)={r1, &(0x7f0000000280)='\x00', 0x200280, &(0x7f0000000400)={@align=0x3, {0x7fff, 0xd, 0x7, 0x7fffffffffffffff}}, 0x8, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x80000000}) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x130, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8f, 0xa8, @random="664cbfd9fc27c0d371069df6ce8a12608f3629b4bc064b4d15ac6724cd9a2dea57ed07ab28184e821cc2b3b7dfe050eac2036930c8055acb15861b0b6aa965a3a120c1e0188392f2547cfbf496c07deba3441f5f175b51465634fbdb5bad5576e89932a7be9784ebf82585e1ab44ccfbcd13fce0aff0ccc4b4d95fcaeb4c9a2c5ea4fe619ea91afb05c2e2"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1ff}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x64, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0xc}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0xc9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x48004) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x8, 0xe4c, 0x4c43}, 0x20) 881.333119ms ago: executing program 2 (id=14851): syz_emit_ethernet(0x268, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "a3c248", 0x22a, 0x21, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x2f, 0xe, 0x4, 0x7, 0x3, 0x8, 0xc292, [@private1, @mcast1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x2c, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xffffff7f}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}, @srh={0x7, 0x8, 0x4, 0x4, 0x5, 0x0, 0x7, [@remote, @loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x6, 0x0, 0x1, 0x0, 0x0, 0x1d, 0x65}, @srh={0x2f, 0xe, 0x4, 0x7, 0x1, 0x20, 0x400, [@remote, @private0, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6, "35c6d3", 0x38, "8122d5"}, "26c3bd01361c43d6e15ad6154dd92e5aa53e10c5cb5d826d906e82425f7994ea3a5ad77680b3d5dbefbdc88cc69bf50599c52bd2068709509f3c66f9e1edb38cf5e70811392e8e3f064231c9e6a8c7d123afbc09f806d854e1a5afcba6b0380ce6f99e58b8f53a329f14836d6c73b66709f6bbc2895607ce01467bee2cca2e3065b60882b2379477ef9e33c577b058cc87838f1d42d29cd3210b"}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x0, 0xf, &(0x7f0000000040)=""/1, &(0x7f0000005840)=0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r5, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000120a01010000000000000000050000030900020073797a310000000038000000000a01010000000000000000000000050c0004400000000000000002080002400000000108000240000000010800024000000001dc000000000a01040000000000000000070000000c0004400000000000000005bb00060032405c29e6e45659ac9f6d17ce67ded48444e1f41c23c958b682a68201a0becbb7ea89c666a3b7bbf289048b250a27c919b8a2081ebb00e41164814f80c0b7886f70cbc7f99cb4f79659651b2cacabdb1e9c407dc3a72d73aa0d09ecfba67402e9b8c5937e4c1858531bf60ec861f0048232a3ee712d9c7c84542f27b3bd9f461e39f9086e391e846c340599619fd21c711a7eea14ca1ac547a969a7c2392bd23cb3d75b92cc94db30bc31bc6fe52905d27ea2422c678d00d0010000140a01080000000000000000030000020c0006400000000000000002d3000800fa337e7176a061305f9b46e7f7cf7a20fe488f5015fd853aa625239f8a9771fb1a03dc9cef94722844aa50659a18fea262a61c5c7610e234498dc62c1b0c033cbf4e566e00b962ab58d2f82ee7e9ebd5adc6149a58525958c12d0505a5ec27a5d71359f17aa88bfc87e68e9c4c5f19d8ff39826e58c967d47c3e6e7480e7c4aef955a1c2ca474147ac7290e65322f2e1c8a2b074e4c712834bb17d13e67403cee95900f8d0c1d7ccacda575f964dbff57129c12832eeade77706f15d2903facd64f5ac2d17d852c16474502480b77205d4553a2668d640746bd2e9c68d2400d0000800bb5a0dca610bcaceeff7331f3ef58c560dbf84fe036103ca27babd43d4068469f5e12a2968f98dd2aa9217d927987d87c361e20a4d4403b09018e177b81b7ea1275e0975f34ec61db1ade5dc8b161a4189d53a0c60ea4ffe84d09bd9ea80dd0a758e0e2c8504e5d4d0935b263a42cecbaef7ff23523f28642a9abdd3b62291c3b4100dc803ab168df0dbb2508d58e6940cc6f7298a6d7bcaec7f5055820b9f5d7f040e86c35c29859522d43fe187e21ef42e269d061f30546bf05ac09c26f556d8e3364da36700b96976a38c0900020073797a32000000001400000011b8582423c12730447eed217b88b532f1db775d8af3407e71641b49add42e936c0b32e9f699b2fc72d82bfccf94ed6c5852510d49f4ce55fcba2b9d50230af7d921930fe15d94bd83b63cc8ed1fcdae4321fee86542"], 0x32c}, 0x1, 0x0, 0x0, 0x44}, 0x8800) 835.342099ms ago: executing program 0 (id=14852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x39) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) 715.23228ms ago: executing program 2 (id=14854): r0 = socket$inet6(0xa, 0x800, 0xffff7746) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000300000085000000d0000000850000000e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b962b97f8600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) recvmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000400)=""/52, 0x34}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/228, 0xe4}], 0x5, &(0x7f00000007c0)=""/75, 0x4b}, 0x400}, {{&(0x7f0000000840)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/197, 0xc5}, 0x40}, {{&(0x7f0000000a00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a80)=""/130, 0x82}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/172, 0xac}], 0x4, &(0x7f0000001cc0)=""/136, 0x88}, 0xfffffffc}, {{&(0x7f0000001d80)=@generic, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/185, 0xb9}], 0x1, &(0x7f0000001f00)=""/127, 0x7f}, 0x7}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/201, 0xc9}, {&(0x7f0000002080)=""/11, 0xb}, {&(0x7f00000020c0)=""/25, 0x19}, {&(0x7f0000002100)=""/95, 0x5f}], 0x4}, 0x9}, {{&(0x7f00000021c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000002240), 0x0, &(0x7f0000002280)=""/69, 0x45}, 0x5}, {{&(0x7f0000002300)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002380)=""/64, 0x40}, {&(0x7f00000023c0)=""/167, 0xa7}, {&(0x7f0000002480)=""/197, 0xc5}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)}], 0x5, &(0x7f0000003640)=""/241, 0xf1}, 0x4}, {{&(0x7f0000003740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000037c0)=""/180, 0xb4}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/190, 0xbe}, {&(0x7f0000004940)=""/108, 0x6c}], 0x4, &(0x7f0000004a00)=""/168, 0xa8}, 0x6}, {{&(0x7f0000004ac0)=@ethernet, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b40)=""/224, 0xe0}], 0x1, &(0x7f0000004c80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000005c80)=@isdn, 0x80, &(0x7f0000006000)=[{&(0x7f0000005d00)=""/70, 0x46}, {&(0x7f0000005d80)=""/95, 0x5f}, {&(0x7f0000005e00)=""/83, 0x53}, {&(0x7f0000005e80)=""/203, 0xcb}, {&(0x7f0000005f80)=""/75, 0x4b}], 0x5, &(0x7f0000006080)=""/193, 0xc1}, 0x1000}], 0xa, 0x40002160, &(0x7f0000006400)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f00000008c0)) unshare(0x20040600) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='!\x8c\x00', 0x20101, &(0x7f00000000c0)={@_ha_fsid={[0x200, 0x9]}, {0x3, 0x2, 0x1, 0x8000000000000001}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x80000000}, {[0x8, 0x200, 0x5, 0x6]}, 0x800, 0x82, &(0x7f0000000180)=""/130}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 707.989074ms ago: executing program 0 (id=14855): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'xfrm0\x00', &(0x7f00000002c0)=@ethtool_gfeatures={0x1c}}) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 604.908559ms ago: executing program 4 (id=14856): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010"], 0xd4}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x32c1}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1daf", 0x2}], 0x1}}], 0x2, 0x4040081) 551.84552ms ago: executing program 0 (id=14857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @local}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000003c0)={0x8, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e21, @private=0xa0100fe}}}, 0x108) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40c0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@deltfilter={0x2c, 0x2d, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x1, 0x10}, {0x1b, 0xa}, {0xfff1, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4005}, 0xc, &(0x7f0000000b00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r11, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x800}, 0x8804) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x7, 0x5, 0x9, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r13, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) accept4$bt_l2cap(r13, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) epoll_create1(0x0) r14 = socket$unix(0x1, 0x1, 0x0) close(r14) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"/364], 0x114}, 0x1, 0x0, 0x0, 0x84}, 0x60048c0) setsockopt$sock_int(r14, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) 549.01108ms ago: executing program 1 (id=14858): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}]}}, &(0x7f0000000640)=""/13, 0x2e, 0xd, 0x1, 0x8}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40840, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x10, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 468.362882ms ago: executing program 1 (id=14859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c000300b07346e358c219250800010023707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}, 0x1, 0x0, 0x0, 0x444}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x7, 0x0, 0x25dfdbfd, {{@in6=@mcast2, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@rand_addr=0x64010100, {0x3, 0x0, 0x2, 0xd, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x4, 0x0, 0x53}, [@algo_crypt={0x48, 0x2, {{'ctr-cast5-avx\x00'}}}]}, 0x138}}, 0x0) 432.306749ms ago: executing program 4 (id=14860): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003600000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r2, r1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/12], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x81}, @generic={0x5, 0x9, 0x9, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xb, 0x1c7c, 0x6}, 0x10, r9, r7, 0x0, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r12, 0xc0385868, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000bd6bbccd257c3f02707e810000002ab2fdf3106894c75511114ecc4948cb1eb3fd5b8edbc79e81f21d881f1865c2c34ebefe16050b37bd3ee1fc698028", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000010000000000000000000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r11, r10, r10, r11, r11, r11, r10], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94) ioctl$TUNGETDEVNETNS(r13, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r13, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x9, 0x6, 0x7, 0x30, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, r15, 0x9, &(0x7f0000000b40)=[r10, r10, r11, r11, r11], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000580)={r0, &(0x7f0000000480)='GPL\x00', 0x100, &(0x7f00000004c0)={@align=0x5, {0x0, 0x8, 0x8, 0x4}}, 0x0, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0xc120}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x3, 0x905, 0x6, 0x2, 0x10200, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r21 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000063297bcb82bb2a7efdcaf4ca1e6d20b2da4429e16092939aa29a94710ed70b461f5ccdd5cfb2696232a7ea379aba7e841466c2b6ff3b0bbbbec87f9c1a14faebc21a9fcf39748321a238c83075ea25d82c62818b9a1273a5ad0de998f5", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x2f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2aa, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc555}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x69db}}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x7fff, 0x6d, &(0x7f0000000380)=""/109, 0x41000, 0x48, '\x00', r6, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r15, 0x0, &(0x7f0000000840)=[r16, r17, r18, r19, r20, r21], 0x0, 0x10, 0x1}, 0x94) 344.49879ms ago: executing program 1 (id=14861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 339.111949ms ago: executing program 2 (id=14862): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x5}, @struct={0x7, 0x5, 0x0, 0x4, 0x0, 0x1ff, [{0x10, 0x0, 0xa}, {0x2, 0x5, 0xa900}, {0x7, 0x3, 0xd}, {0x0, 0x0, 0x7}, {0x9, 0x5, 0x4}]}, @volatile={0xe}, @const={0x9, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x30, 0x61]}}, &(0x7f0000000380)=""/246, 0x90, 0xf6, 0x1, 0x6000}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000700)={0x6, [0x776, 0xa, 0x4, 0xc5, 0x4, 0xfe]}, &(0x7f0000000740)=0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0xffffe000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f00000000c0)=@raw=[@exit, @btf_id={0x18, 0xd, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x106e115d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x32, '\x00', r3, 0x25, r5, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x6, 0x9, 0xd}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r0, r8, 0xffffffffffffffff], &(0x7f0000000600)=[{0x1, 0x4, 0xf, 0x8}, {0x1, 0x5, 0x7, 0x5}, {0x1, 0x4, 0xa}], 0x10, 0x7fffffff}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x66f91, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x200088c2) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) 334.128621ms ago: executing program 4 (id=14863): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x1409, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2) (async, rerun: 32) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="c8362a282d0ad2b669dfef0002aee6b67869bf280b689f83fb5752d17d2cd0981950d6a2c61e172b16284c98cd961659059e2e021a7f1ad59640e86612b9817dcc0a21aff6cfb478af9519289174df206215162cb8274dae2187159096cdd29e7d95f9211a73b2451efd71092bb61a56ec617ca91f185eed8e5aeca6f396a72b6e76c05ff5cc26731b54981648bc33d69c4c705a0c84b1dd027d7187b63f122cde4f026fc308a7e43a620871834cc4bfb30f4d122f8c1cbc7feca225b967866baf47fdf531870e4f4dc52023a5f99868c60bf9aa2ef330efae7cd366591b429eb39083e16b7c3502754aef6c", 0xec}], 0x1) (rerun: 32) 333.236902ms ago: executing program 0 (id=14864): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x700, 0x6, 0x1, {{0x1c, 0x4, 0x0, 0x1a, 0x70, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0xe8, 0x1, 0x8, [{@private=0xa010102, 0x80000001}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6800}, {@rand_addr=0x64010102, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x17}]}, @timestamp_prespec={0x44, 0x2c, 0xa0, 0x3, 0x5, [{@local, 0x8}, {@empty, 0x4}, {@private=0xa010100}, {@broadcast, 0x91}, {@multicast1}]}, @end]}}}}}) 278.802656ms ago: executing program 1 (id=14865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x20000810) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) 211.742084ms ago: executing program 4 (id=14866): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000680)) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100250000000000e25a84f31ed04ab7fdee0245e3bfa10000feffffff07010000f8fffffdb70200000816b1da0a023a5c76ce1503f4c1000000b70300000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r1, 0x0, 0x20008085) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @mcast1}}, 0x5, 0x400}, 0x90) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100008000000ffdbdf25080000c581003b00ff0f0000050035000400000008003200f8ffffff080034000800000008002c00ff00000008002c00af0000000a9e41f4b980c2000000000900bdb738f08baf971c629c4f4a1efc7efa4e5235e944ea2f"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd5f7cd501db11fd060b00000008002c002747"], 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x834) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000001600)=[{{&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000840)="56e02f424e8f67bba704a7c051d8c554fee1ddea001f283ac2d3e9929e172d2ddbc42b24d0dc2982ceff6ad1480b7e5249bd0c8034d5d84a6f9682aa42c72b1f4fe95541c306632f89968cf0359e2026813ab085f92b139c4e2875a321c617f0cb", 0x61}, {&(0x7f00000008c0)="81998a0841b03b3359ecc42cdd9cd059852c4139e7f3a21479fe5be692014787be62533c2f1898971ccdeb5aa0945c60faf3941f1555d3a6ca1e0eaa89ffaad8af5aa2e31415bc9cacd08c264d3852b3aec648ebaafc05d9b843e59864c6c91b9b1539501608194cd23634a6f6d2e4c9756a90ba0a5e974dea109a199f21eb7d8af7192583851baf44de5ea620d79b7b1b3821d61a26b25db14d1572cc478ce3349051490028de08974493dedf2799add1a1e22e2fb820db2ead0f", 0xbb}, {&(0x7f0000000980)="4b7cb13f8c8393dcd94101f0cd8b7acc7ed3370a672df2cea3c49fe62fe63cb0b11a11b20acfbedba9c67ca16d89e56dbac2d3f02e87f7f352a4df0f47d484ab6d5414f605374d30b070ea6577acbe8c09e9ae6e81a0ba1dbb3e6db6639341e09192519658d48086d8759f975a5b69745bcb7adc339df32c079adcff90049d34b3921fa740e0de948997f4907787a4e8b218d477a060b04c00ae6bb5e4321045906debe4db24a006ee1b88c9c7a25d73450147b2ea94da2e6532ae59866f7880395de23b2860da7f49c61bbfc6b449484ddc968fc4f0d7acf4082d08ba21e0769f3c45fb3403a6e65ed8", 0xea}], 0x3, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000b40)="d52778a327de05ac4a9f6de8f37729196ffa92505af0771942b7b8abbaba8661607b904f54a040bd8119e2564d075038cf75", 0x32}], 0x1, &(0x7f0000000bc0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x86, 0xc, "b562956e743c31c80b36"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_retopts={{0xec, 0x0, 0x7, {[@rr={0x7, 0x2b, 0xc3, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @local, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x9f, 0x1, 0x5, [{@remote, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0x30000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x8}, {@multicast1, 0x7}, {@multicast2, 0xd489}]}, @lsrr={0x83, 0xf, 0xc7, [@remote, @broadcast, @private=0xa010102]}, @generic={0x86, 0x8, "f012ee9fc6e9"}, @generic={0x94, 0xb, "7fadff9eced6c0628f"}, @ssrr={0x89, 0x1b, 0x29, [@local, @broadcast, @multicast1, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0xdb, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0x33, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @broadcast, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}], 0x160}}, {{&(0x7f0000000d40)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d80)="81d0aabdaca2cfa3c36a91bfb9c5230fd4b740cf329253a133ff3affcd2aed10fec322a15f73f0abf2019f49f0b8b9ff753f19ce007076df9738e246b40da281919e515bb76600db915739d3", 0x4c}, {&(0x7f0000000e00)="a55cb00e38650df475d79923250741b455beec3f4de9a01532", 0x19}], 0x2, &(0x7f0000000e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffff7e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010101}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0xd3, 0x3, 0xc, [{@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xffffffff}]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0x3, [0x100, 0x3]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x56, 0x3, 0x8, [{@loopback, 0x6}, {@remote, 0x4}, {@multicast2, 0xe}, {@loopback, 0x1800}, {@empty, 0x98}, {@broadcast, 0x200}, {@loopback, 0x42}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0xc5}, {@broadcast, 0x5}, {@broadcast, 0x9}, {@loopback, 0x80000000}, {@multicast1, 0x3}]}]}}}], 0xf0}}, {{&(0x7f0000000f80)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000fc0)="9f166424331e1f608e0ceaa324269fd9b8dd99bf53f5b9ab0fa561dce5377fbb20edff3a4250a1cbcaff56e22b903c7f93c9bf42d22f5b55eb9e773f802f56adec4035660d96ec307483e4bc353c040704510c6d34800c39aae71490e7d59151d3037c92fbb807aa8a21183836903f7c1e13e308286fd6b981f3110e63d13fe1418174a464a15fe2f16fc8791f5584ed2773a2e849a0107b00149ea3c59fe39bafdfae9eeb82c14cd9df78d27f7cb9f524d52ea25a2d1885fbdd7abc7e3ca35ac2744bb3082d96649f1c477b2c02d6f886ea9bc919cc9a315b3f4748a1", 0xdd}, {&(0x7f00000010c0)="18e668f2863175a2e3487fbaedad5d0a17d8739e4d132b5f826b27c8a0d8533885590e2f43bbee04f486613ec76f51608a42e508e89eafde19532ffa78dc666f0c4a313af2", 0x45}, {&(0x7f0000001140)="78399371dba959211a93ddab2d44efeabb82b856586ba90a8003409eda0a12a209f840f9d01f80b265534111f765d0c06fba9d8918e64b3d6d11468145cea43140ec9c694ed315df3b7419ae70ae40ec995269f91b117f0e38fc4b244ad0e8aeaebfda8d3e0dea9fe25717b052df68bdb1c87c9a2e7365b6fc5d6fb01b7cb7afefb741452dbc40bdca3f4b80c69761224ef5de77b685bddc49d5e9fece83a2d4745f06ab1c97c670cfe1c0ff32640e151b2a9bd71658d0e41d", 0xb9}, {&(0x7f0000001200)="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", 0xfc}], 0x4, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x50}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001400)="87cde3c3ec4bffbb1ac31d8643e92b69597a4b403500807e4dacb19a5405c6877c484f6f72bd78a570b7a96b42494de51d77580c298e4219d6d728039b1ae791d5a296dfbd0c634734fd8c8f191461b076da9dce895079336bfa6739054ff1d38762aed15f13e0f6dfb2fc54d59e1627cc4e4c41c3ed", 0x76}, {&(0x7f0000001480)="ed6914a42afaefa9c9aae6dba0eefc348ea4468d003362111618961828664830cc8e1ecf7a3e4720292129b68b18007f97de1f9e982270e97b4e8a1073d559f64e346c96fc309e4988daf443f479b9db3ead60482687043ad83b5128e25753ebe3a214ab7767fa5c5f09f5d904094ff8c9017ed12e93514255c87003b855a77fd6061402b1076a1428934e27ad971bca966507517706bbc05db6e29270edd32f7ac9c9a2dbb09c393b3b4b739a0e9699774889b0add5aba57c3a4b5687dc28d6a1e6cf34f083b504e0a10b435956ea2f9e49f4291c7de047f634b4c6f22b49eafdc3391728ab67b1030770b8a3ff099d8a", 0xf1}, {&(0x7f0000001580)="94454f872dbc9faed3285758025266f174a3a717e5f1a90f3ae034613a9ad79f2be8c412ea38a21d", 0x28}], 0x3}}], 0x5, 0x4000054) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r5, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000180)="4889d18c", 0xfdef}], 0x1) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) 211.079814ms ago: executing program 0 (id=14867): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="640000001000390425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="377638bf00000000440012800b000100697036746e6c000034000280140002000000000000000000000000000000000114000300000000000000000005"], 0x64}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) 173.132859ms ago: executing program 1 (id=14868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x5b, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xa9, 0x5}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x0, 0x0, @broadcast, 0x3ff, 0xea35, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x1f, {{}, 0x4, 0x5, @device_b, 0x6, @void, 0x719d, 0xfffffffa, @broadcast, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x83, 0x34, 0x40}}]}, @NL80211_ATTR_IE={0x5d, 0x2a, [@fast_bss_trans={0x37, 0x57, {0x9, 0x1, "77677e92f119739e38cb588226a7fce9", "fdaeb5ed6202882295dacf9b3b354689f199b7dfc69831d3f087deff7c0554fa", "aee625984377c1190d9e57a34c4561ddf61a502abfc8bf2b497f4ee61d368b9d", [{0x3, 0x3, "1059bb"}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4006805) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={r0, &(0x7f0000000380)='\x00', 0x2000, &(0x7f00000003c0)={@_ha_fsid={[0x72, 0xba]}, {0x2, 0x1, 0x6, 0x2}}, 0x4e, &(0x7f0000000400), &(0x7f0000000440)=0x3}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x9c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffff000}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb598}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xd1}, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x80, 0x8, 0x6, 0x1000, {{0x1b, 0x4, 0x2, 0x32, 0x6c, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}, {[@generic={0x7, 0xf, "ddf4e60a1dccc5f24dea8a542b"}, @noop, @lsrr={0x83, 0x2b, 0xd1, [@loopback, @multicast2, @remote, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, @remote, @remote, @local, @multicast2]}, @timestamp={0x44, 0x8, 0xe8, 0x0, 0x8, [0x1]}, @generic={0x7, 0x12, "cca647cdc658897fc9a5485bddcb4c76"}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000740)={@mcast2, 0x1b, r4}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000780)={'vlan1\x00', @multicast}) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000007c0)) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001a80)={&(0x7f0000000800), 0xc, &(0x7f0000001a40)={&(0x7f0000000840)={0x11d4, 0x15, 0x0, 0x70bd2c, 0x25dfdbfd, {0x2a, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "b9f46d5785fb91d35b739087bfb164974317c97b0ed51962d6ea51f091c1d6e41386848a65b455bf922b5018954c77b01286e497e0a966e53c23f89e5bf4012355cf615012666c5c292b361b0cd764ef2ed2d6906cdd4249a134533366dd0eaeb237f48c3aabe51629b8bc2864faaac89ad9ba7bca84d020046dbde930782b70162ac55b4d762fde18e1dfb88beef69fc281dbb93b9d8186464be1cad5e95a3e142903170b072b3419ae5b809d6eeb6aae712b06c955894cb585dc8e"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "1dc046218e33c7baa480da8f346e12ab3a5726747ecb2341596dfb69096b17fc973f5a0a38c5f08a1fc977942a438aa60e59096adef1ad3339b30569374942b8c96efa4e58e42d610c0566d5d31d0f27b40107f7c4098fb15c5516ea48c534c0d729376aa8e6b5f8e2975c5a0376c59e461b7372ee9f5d65a0d97034bae52c5910a28a31e5884bf2df6f52ed43f48e33879c920a4f54dd2774325facbd2d86f3858b6dcd9c3c2598c213d8ba25fe2d7b4e99ae455f046cd11ca99d01dddc00e9ca398dd0135b2225275aa664522820a05143f579b99c29acd6bfe1f475640b3db2eaf31c438d9bf67166f281201680aa233157a3639f79"}]}, 0x11d4}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000001ac0)=0x5, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r6, r3, &(0x7f0000001b00)=0x1, 0x7) r7 = accept4$packet(r3, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b80)=0x14, 0x80000) getpeername$packet(r7, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001c00)=0x14) sendmmsg$inet(r7, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c40)="3b544dcd5ca501cf905543249470ae4d55a88cc8fa68b5950b556df0251c9d66ba31348cb0fe52b27ca9fde8fb8a0c9723deaac76eaf34e4c4430145506e946086307326778953d5ae9f3984b106b34d0404f130bce9b1f614b2", 0x5a}], 0x1, &(0x7f0000001d00)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001d80)="36e1ce1ec83665e5c2ef2ad8430130d24e75365edd3dba8d5736a648f441eba40a75f7d8f00a7434f0d676786d038eb84a2fc760ae122bf54a254fc69edcaad3b1b593906ae0f3462584ff4dd3a518b57e20f854088a9c693e6326ae591f0c6f52179cf58c476bcd6cdbd79b39b557c5705b7864233bcf66ff9afc20ee6435458157d085ace4dc519b0765fdcb00c03ece91795252920145d8ec261d95f9d4e0ea32ed79", 0xa4}, {&(0x7f0000001e40)="56bf02ad6d1fcc549825b99316ebbf9e5e9698b664278699b9249cfc92035c2c6d5c23c3c51e2c8a78c21d79a5fe086ce56c080ee6aed82465d7cbcd79263ba36257d1965ae6", 0x46}, {&(0x7f0000001ec0)="4873880bddc77c01425e8a166f929c17db7f1e826ef9b5b30a3c92278e55736a97bb6c3beb65728a7d8402029369ff5d4e9c0ee5a33c42265e74df444ad11dec8ed5ae84a80466965917311dddc02bae589b73bcd967ae55a121e431bb1340b61163a086adad6e8f3c97eaf2cef4bc985fa1524ff76b2916e8225dbdd26351c6ec6083d649bcca835ab4d0afb9dcd6c23183935bb1ffa415fe3b4ae22b00940f1fd6242ff2acbf7f8613f1b0d76d55de1e1692d7baa22208ebe8d75abf57dac0751569ab993013459e614c53481046935142bb40b28b0595d9dbf7e62c5a", 0xde}], 0x3, &(0x7f0000002000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x24, 0x3e, 0x1, 0x8, [{@multicast2, 0x316f}, {@loopback, 0x1000}, {@multicast1, 0xe1a9}, {@multicast1, 0x4}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x3}, @timestamp={0x44, 0x1c, 0xf3, 0x0, 0x1, [0x0, 0xf54, 0x5, 0x8, 0x5, 0xff]}, @rr={0x7, 0x13, 0x51, [@multicast1, @local, @loopback, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xab, [@multicast2, @local]}, @noop, @timestamp_prespec={0x44, 0x14, 0xb0, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x2}]}]}}}], 0x120}}], 0x2, 0x4000040) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000002200)={0x3, 0x1, 0x11, &(0x7f00000021c0)=""/17}) recvmsg$can_bcm(r3, &(0x7f0000003500)={&(0x7f0000002240)=@hci, 0x80, &(0x7f00000024c0)=[{&(0x7f00000022c0)=""/214, 0xd6}, {&(0x7f00000023c0)=""/202, 0xca}], 0x2, &(0x7f0000002500)=""/4096, 0x1000}, 0x10020) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000003580)={'veth0_vlan\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003640)={'ip_vti0\x00', &(0x7f00000035c0)={'erspan0\x00', r9, 0x1, 0x10, 0x6, 0x3, {{0x17, 0x4, 0x2, 0x12, 0x5c, 0x66, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@generic={0x86, 0x7, "53b079b929"}, @ssrr={0x89, 0x7, 0xf7, [@local]}, @generic={0x88, 0x12, "586f0f2ae0f4706f3a598eab854bc4ae"}, @generic={0x86, 0x3, 'k'}, @ssrr={0x89, 0x23, 0xb, [@broadcast, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @empty]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000003e80)={&(0x7f0000003540), 0xc, &(0x7f0000003e40)={&(0x7f0000003680)={0x79c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9d13}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x50, 0x3, 0x3}, {0x5, 0x8, 0xd, 0x5}, {0xfd, 0x7f, 0x6, 0x5}, {0x8, 0x1, 0x6, 0x7}, {0x2, 0x0, 0xa, 0x868}, {0x6, 0x3, 0x6, 0x1325}, {0x1, 0x2, 0xe, 0x6}, {0x4, 0x3, 0x7, 0xc6c}, {0x8, 0x4, 0x8, 0x5}, {0x9, 0x9, 0x80, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}]}, 0x79c}, 0x1, 0x0, 0x0, 0x8000}, 0x40881) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r12, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) getsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000003fc0), &(0x7f0000004000)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) r13 = accept4$vsock_stream(r3, &(0x7f0000004040)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) ioctl$XFS_IOC_FSGROWFSDATA(r13, 0x4010586e, &(0x7f0000004080)={0x0, 0x8}) 117.541684ms ago: executing program 2 (id=14869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x100, 0x2000000a, 0x7, 0xd4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}}, 0x24000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r5, @ANYRES64=r2, @ANYRES8, @ANYRES8, @ANYBLOB="24539cdf29b7f87b2d7c423b99cbae167cbe294c7da69d97c8dfc5e8ef3bc09f1394a964afbace39db9bde017798b5410fe072a9111ebea46ac2983c0c72b888147b6ed35c8dd76e11ef064fced953978151f39df6ebc8e6f2b5b52017daaa7ea00337f0e24c750e2ef45eebf981ce3d5339df7fda9c48b05ad061234fac3cd2d2c0e1bc11395c052e7d430725061e531f2366c27e18ca9bed3f08c86eecb53c647756e08b97b2cd9d83"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)="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", 0x231}], 0x3}}], 0x1, 0x8810) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x1, 0xb000}, 0x4) sendmmsg$alg(r10, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x410fd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000380)=0x6, 0x4) 22.472931ms ago: executing program 0 (id=14870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2d000000010001", 0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12, 0x7, 0x4, 0x5}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010829bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e71ec000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="4d7e00000000040000002a000000050037000000000005003600020000000c0005000000000000000000050037000000000008000200", @ANYRES32=r12, @ANYBLOB="150036080000e327b1a90b1ac33add1d"], 0x50}, 0x4, 0x700000000000000}, 0x0) 1.170819ms ago: executing program 4 (id=14871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x5) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000d00), 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) shutdown(r1, 0x1) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x5) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (async) 0s ago: executing program 1 (id=14872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x4107}]}, 0x1c}}, 0x24048080) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000ffff00000000000000dfffffff000000cc9dd8ca89"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x8, 0x5, 0x1000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000400)="141a351e73aabd68a3c7340b4552", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000008020000000040005"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13271" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=889 res=1 errno=0 [ 1350.722399][ T30] audit: type=1800 audit(1782039893.002:33): pid=25965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13271" name="cgroup.controllers" dev="tmpfs" ino=889 res=0 errno=0 [ 1351.614247][T25989] netlink: 'syz.0.13279': attribute type 40 has an invalid length. [ 1351.737679][T25992] __nla_validate_parse: 17 callbacks suppressed [ 1351.737699][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13280'. [ 1351.876900][T26003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13283'. [ 1351.924498][T25999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13282'. [ 1351.964495][ T6319] wlan1: Trigger new scan to find an IBSS to join [ 1352.038564][T26009] netlink: 'syz.3.13286': attribute type 15 has an invalid length. [ 1352.057644][T26010] ipip0: entered promiscuous mode [ 1352.626967][T26052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13300'. [ 1353.048788][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13302'. [ 1353.086035][T26076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13303'. [ 1353.559610][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 1353.603545][T25971] Set syz1 is full, maxelem 65536 reached [ 1353.715568][T26112] syzkaller0: entered promiscuous mode [ 1353.737251][T26112] syzkaller0: entered allmulticast mode [ 1353.766565][T26118] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1353.808323][T26117] netlink: 5 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1353.846279][T26117] 0ªî{X¹¦: renamed from gretap0 [ 1353.867004][T26117] 0ªî{X¹¦: entered allmulticast mode [ 1353.882675][T26117] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1354.161796][T26153] tipc: Enabling of bearer rejected, already enabled [ 1354.172793][T26156] netlink: 'syz.0.13327': attribute type 3 has an invalid length. [ 1354.186005][T26150] netlink: 'syz.2.13324': attribute type 2 has an invalid length. [ 1354.217253][T26150] netlink: 'syz.2.13324': attribute type 2 has an invalid length. [ 1354.319799][T26166] tipc: Enabled bearer , priority 26 [ 1354.326481][T26166] netlink: 277 bytes leftover after parsing attributes in process `syz.3.13330'. [ 1354.422003][T26173] rdma_op ffff88803b7ee9f0 conn xmit_rdma 0000000000000000 [ 1354.448258][T26170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13332'. [ 1354.517302][ T6292] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 1354.562250][T26191] netlink: 'syz.1.13336': attribute type 1 has an invalid length. [ 1354.727380][T26196] syzkaller0: entered promiscuous mode [ 1354.734183][T26196] syzkaller0: entered allmulticast mode [ 1354.857388][T26204] netlink: 'syz.4.13340': attribute type 11 has an invalid length. [ 1354.865841][T26204] netlink: 'syz.4.13340': attribute type 13 has an invalid length. [ 1354.923616][T20173] wlan1: Trigger new scan to find an IBSS to join [ 1355.268292][T26179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1355.320864][ T9425] tipc: Node number set to 2346807071 [ 1355.460222][T26235] syzkaller1: entered promiscuous mode [ 1355.465954][T26235] syzkaller1: entered allmulticast mode [ 1355.498692][T26245] netlink: 'syz.1.13351': attribute type 2 has an invalid length. [ 1355.515419][T26245] netlink: 'syz.1.13351': attribute type 2 has an invalid length. [ 1355.549423][T26247] netlink: 'syz.0.13353': attribute type 1 has an invalid length. [ 1355.607574][T26252] nbd: must specify a size in bytes for the device [ 1355.634169][T26250] ip6gretap0: left promiscuous mode [ 1355.643947][T26250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.654405][T26250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.662817][T26250] tipc: Resetting bearer [ 1355.673410][T26250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.712806][T26250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.723899][T26250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.736070][T26250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1355.746943][T26250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1355.763747][T26250] veth1_vlan: left promiscuous mode [ 1355.770529][T26250] veth0_vlan: left promiscuous mode [ 1355.776687][T26250] veth0_vlan: entered promiscuous mode [ 1355.785692][T26250] veth1_vlan: entered promiscuous mode [ 1355.794994][T26250] veth1_macvtap: left promiscuous mode [ 1355.801930][T26250] veth0_macvtap: left promiscuous mode [ 1355.808734][T26250] veth0_macvtap: entered promiscuous mode [ 1355.817116][T26250] veth1_macvtap: entered promiscuous mode [ 1355.827569][T26250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1355.836106][T26250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1355.843640][ T6294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.846910][T26250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1355.859253][T26250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1355.871856][T26250] batadv0: entered promiscuous mode [ 1355.877752][T26250] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1355.890390][T26250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1355.905604][T26250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1355.915613][T26250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1355.926393][T26250] ip6gretap0: entered promiscuous mode [ 1355.935453][T26250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1355.947327][T26251] tipc: Resetting bearer [ 1356.072567][ T8026] xfrm0 speed is unknown, defaulting to 1000 [ 1356.073053][T20173] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.088936][ T8026] syz0: Port: 1 Link ACTIVE [ 1356.096560][T20173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.173789][ T6170] xfrm0 speed is unknown, defaulting to 1000 [ 1356.173817][T20173] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.190324][T20173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.200705][T20173] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.210296][T20173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.225661][T26271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1356.260388][T20173] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.275061][T20173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.302379][ T6319] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1356.331359][ T6319] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1356.339052][ T7355] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1356.352762][ T6319] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1356.365495][ T6319] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1356.374852][ T6319] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1356.383138][ T7355] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1356.397470][ T6319] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1356.406824][ T7355] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1356.423997][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1356.435448][T26279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1356.813190][T26298] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1357.020311][T26322] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1357.025533][T26315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1357.061903][T26325] __nla_validate_parse: 10 callbacks suppressed [ 1357.061934][T26325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13377'. [ 1357.086209][T26329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13375'. [ 1357.179168][T26332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13378'. [ 1357.305791][T26342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13380'. [ 1357.350657][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13381'. [ 1357.370486][T26350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13383'. [ 1357.391436][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13382'. [ 1358.011600][T26397] netlink: 'syz.4.13392': attribute type 12 has an invalid length. [ 1358.043492][T26397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13392'. [ 1358.114490][T26404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13393'. [ 1358.678963][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13395'. [ 1358.723051][T26419] hsr_slave_1 (unregistering): left promiscuous mode [ 1359.084955][T26450] syzkaller1: left promiscuous mode [ 1359.090598][T26450] syzkaller1: left allmulticast mode [ 1362.508325][T26472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1362.720446][T26532] __nla_validate_parse: 4 callbacks suppressed [ 1362.720466][T26532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13426'. [ 1362.765121][T26532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13426'. [ 1362.775068][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13427'. [ 1362.854429][T26544] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13426'. [ 1362.946650][T26548] syzkaller0: entered promiscuous mode [ 1362.952205][T26551] netlink: 'syz.0.13431': attribute type 1 has an invalid length. [ 1362.959353][T26548] syzkaller0: entered allmulticast mode [ 1363.010997][T26551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1363.155698][T26564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13436'. [ 1363.177371][T26566] batadv_slave_0: entered promiscuous mode [ 1363.227026][T26565] batadv_slave_0: left promiscuous mode [ 1363.354169][T26580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1363.375196][T26580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1363.405296][T26580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1363.446792][T26580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1363.485137][T26580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13438'. [ 1363.498120][ T30] audit: type=1800 audit(1782039905.772:34): pid=26590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13444" name="memory.events" dev="tmpfs" ino=1702 res=0 errno=0 [ 1363.629654][T26599] netlink: 'syz.0.13446': attribute type 13 has an invalid length. [ 1363.810328][T32599] Bluetooth: hci1: command 0x0405 tx timeout [ 1363.969445][T26597] IPVS: length: 35 != 24 [ 1364.265151][T26639] IPVS: set_ctl: invalid protocol: 25965 114.121.46.115:30561 [ 1364.828397][T26673] bond5 (unregistering): Released all slaves [ 1364.868637][T26674] netlink: 'syz.3.13468': attribute type 6 has an invalid length. [ 1364.930853][T26681] syzkaller0: left promiscuous mode [ 1364.942222][T26681] syzkaller0: left allmulticast mode [ 1365.183773][T26701] netlink: 'syz.4.13475': attribute type 3 has an invalid length. [ 1365.251747][T26688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1365.282457][T26688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1365.350462][T26688] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1365.380517][T26688] veth1_vlan: left promiscuous mode [ 1365.398995][T26688] veth0_vlan: left promiscuous mode [ 1365.414740][T26688] veth0_vlan: entered promiscuous mode [ 1365.433400][T26688] veth1_vlan: entered promiscuous mode [ 1365.453864][T26688] veth1_macvtap: left promiscuous mode [ 1365.470907][T26688] veth0_macvtap: left promiscuous mode [ 1365.478793][T26688] veth0_macvtap: entered promiscuous mode [ 1365.486888][T26688] veth1_macvtap: entered promiscuous mode [ 1365.498193][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1365.508725][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1365.518052][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1365.526819][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1365.539157][T26688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1365.552448][T26688] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1365.565643][T26688] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1365.614231][T26715] syzkaller0: left promiscuous mode [ 1365.620127][T26715] syzkaller0: left allmulticast mode [ 1365.635497][ T6291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.648958][ T6291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.658481][ T6292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.684793][ T6292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.800386][T26730] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1365.821338][T26730] bond3 (unregistering): Released all slaves [ 1366.174394][T26754] netlink: 'syz.2.13484': attribute type 1 has an invalid length. [ 1366.215971][T26754] bond5: entered promiscuous mode [ 1366.226592][T26754] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1366.776558][T26782] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1367.088392][T26799] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1367.262968][T26813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1367.270279][T26813] IPv6: NLM_F_CREATE should be set when creating new route [ 1367.277668][T26813] IPv6: NLM_F_CREATE should be set when creating new route [ 1367.284944][T26813] IPv6: NLM_F_CREATE should be set when creating new route [ 1367.295328][T26814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1367.351922][T26817] netlink: 'syz.2.13500': attribute type 1 has an invalid length. [ 1367.836194][T26841] __nla_validate_parse: 22 callbacks suppressed [ 1367.836217][T26841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13508'. [ 1367.854642][T26841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13508'. [ 1367.961195][T26853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13506'. [ 1368.007202][T26834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.015201][T26834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.119693][ C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 1368.119716][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1368.134248][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1368.424374][T26834] tipc: Resetting bearer [ 1368.462804][T26847] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1368.470563][T26850] C: renamed from veth1_to_team (while UP) [ 1368.483075][T26850] netlink: 'syz.2.13509': attribute type 8 has an invalid length. [ 1368.500396][T26850] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1368.539292][ T6319] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.580040][ T6292] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.601855][T26866] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13510'. [ 1368.618671][ T6292] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.645617][ T6292] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.664392][T26865] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13510'. [ 1368.769876][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1368.827236][T26876] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1369.288978][T26919] netlink: 'syz.3.13525': attribute type 10 has an invalid length. [ 1369.360587][T26919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.371648][T26919] bond0: (slave team0): Enslaving as an active interface with an up link [ 1369.451462][T26936] netlink: 'syz.3.13528': attribute type 10 has an invalid length. [ 1369.470532][T26936] netlink: 228 bytes leftover after parsing attributes in process `syz.3.13528'. [ 1369.548331][T26936] geneve2: entered promiscuous mode [ 1369.564828][ T6291] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 44972 - 0 [ 1369.576063][ T6291] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 44972 - 0 [ 1369.590894][ T6291] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 44972 - 0 [ 1369.605182][ T6291] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 44972 - 0 [ 1369.691779][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13531'. [ 1369.707794][T26948] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1369.715812][T26946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13531'. [ 1369.734866][T26946] netlink: 'syz.1.13531': attribute type 11 has an invalid length. [ 1369.761897][T26946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13531'. [ 1369.796314][T26946] vlan4: entered promiscuous mode [ 1369.803030][T26946] veth1: entered promiscuous mode [ 1369.825292][T26950] netlink: zone id is out of range [ 1369.842318][T26950] netlink: zone id is out of range [ 1369.847752][T26950] netlink: zone id is out of range [ 1369.854127][T26950] netlink: zone id is out of range [ 1369.859791][T26950] netlink: zone id is out of range [ 1369.937407][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13534'. [ 1369.964259][T26956] 5nè: entered promiscuous mode [ 1369.996842][T26958] syzkaller1: entered promiscuous mode [ 1370.004633][T26958] syzkaller1: entered allmulticast mode [ 1370.052895][T26960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.060312][T26960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.088710][T26960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.095989][T26960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.103466][T26960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.110647][T26960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.118693][T26960] bridge0: entered promiscuous mode [ 1370.125536][T26960] bridge0: entered allmulticast mode [ 1370.611949][T27005] geneve4: entered promiscuous mode [ 1370.657877][T27007] netlink: 'syz.2.13550': attribute type 12 has an invalid length. [ 1370.896999][T27023] tipc: Enabling of bearer rejected, failed to enable media [ 1371.225108][T27056] net_ratelimit: 20 callbacks suppressed [ 1371.225131][T27056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1371.277275][T27060] tipc: Enabling of bearer rejected, failed to enable media [ 1371.418170][T27073] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1371.502181][T27073] bond8 (unregistering): Released all slaves [ 1371.726822][T27094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1371.848472][T27103] netlink: 'syz.0.13576': attribute type 1 has an invalid length. [ 1371.869771][T27103] bond4: entered promiscuous mode [ 1371.875152][T27103] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1372.050627][T27111] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 1372.147100][T27110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 1372.412613][T27134] batadv_slave_1: entered promiscuous mode [ 1372.419097][T27135] digital: digital_start_poll: Unknown protocol [ 1372.451028][T27135] batadv_slave_1: left promiscuous mode [ 1372.478317][T27145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1372.822441][T27161] tipc: Resetting bearer [ 1372.866654][T27182] __nla_validate_parse: 8 callbacks suppressed [ 1372.866677][T27182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13597'. [ 1372.892708][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13598'. [ 1372.912881][T27184] netlink: 'syz.3.13598': attribute type 5 has an invalid length. [ 1372.930707][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13598'. [ 1373.000464][ T5716] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1373.009939][ T5716] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1373.029678][ T5716] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1373.083457][ T5716] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1373.101213][T27197] tipc: Enabling of bearer rejected, failed to enable media [ 1373.210289][T27212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13605'. [ 1373.220130][ T5716] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1373.384506][T27218] bridge0: port 3(vlan2) entered blocking state [ 1373.404435][T27218] bridge0: port 3(vlan2) entered disabled state [ 1373.421525][T27218] vlan2: entered allmulticast mode [ 1373.434150][T27218] geneve0: entered allmulticast mode [ 1373.446667][T27218] vlan2: entered promiscuous mode [ 1373.460109][T27218] geneve0: entered promiscuous mode [ 1373.544152][T27233] netlink: 'syz.4.13613': attribute type 1 has an invalid length. [ 1373.624606][T27242] 8021q: VLANs not supported on syzkaller0 [ 1373.803662][T27242] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1373.923913][T27262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13619'. [ 1373.963218][T26858] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1374.039915][T27177] Bluetooth: hci3: command 0x0406 tx timeout [ 1374.097997][T27275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13622'. [ 1374.279390][T27292] xt_l2tp: invalid flags combination: 0 [ 1374.543680][T27312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13630'. [ 1374.590609][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13630'. [ 1374.633607][T27312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13630'. [ 1374.686657][ T30] audit: type=1804 audit(1782039916.962:35): pid=27312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13630" name="/newroot/363/cgroup.controllers" dev="tmpfs" ino=1876 res=1 errno=0 [ 1374.796159][ T30] audit: type=1800 audit(1782039916.992:36): pid=27312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13630" name="cgroup.controllers" dev="tmpfs" ino=1876 res=0 errno=0 [ 1374.841539][T32599] Bluetooth: hci4: command 0x0405 tx timeout [ 1375.004458][T27335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13635'. [ 1375.145928][T27350] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 1375.555163][T27380] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1375.709021][T27387] wlan1 speed is unknown, defaulting to 1000 [ 1375.849316][T27399] pim6reg1: entered promiscuous mode [ 1375.858677][T27399] pim6reg1: entered allmulticast mode [ 1375.930644][T27387] lo speed is unknown, defaulting to 1000 [ 1375.937499][T27387] xfrm0 speed is unknown, defaulting to 1000 [ 1377.149681][ T6303] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.173960][ T6303] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.185571][ T6303] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.196551][ T6303] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.209794][ T6303] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.220412][ T6303] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.239437][ T6303] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.268999][ T6303] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.471260][T27451] pimreg: entered allmulticast mode [ 1377.654852][T27460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.671364][T27462] netlink: 'syz.2.13668': attribute type 1 has an invalid length. [ 1377.763518][T27462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1377.785422][T27460] hsr_slave_0: left promiscuous mode [ 1377.812511][T27460] hsr_slave_1: left promiscuous mode [ 1377.888406][T27464] veth3: entered allmulticast mode [ 1377.932659][T27471] lo: Caught tx_queue_len zero misconfig [ 1377.951718][T27471] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1378.068905][T27468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.084250][T27468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.113891][T27480] __nla_validate_parse: 11 callbacks suppressed [ 1378.113926][T27480] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13672'. [ 1378.152817][T27480] netlink: 'syz.1.13672': attribute type 40 has an invalid length. [ 1378.178830][T27468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1378.190959][T27468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1378.213824][T27468] veth1_vlan: left promiscuous mode [ 1378.224612][T27468] veth0_vlan: left promiscuous mode [ 1378.233094][T27468] veth0_vlan: entered promiscuous mode [ 1378.246856][T27468] veth1_vlan: entered promiscuous mode [ 1378.278080][T27468] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1378.288741][T27468] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1378.299430][T27468] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1378.309899][T27468] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1378.320829][T27468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1378.356242][T27468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1378.365452][T27468] tipc: Resetting bearer [ 1378.372338][T27468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1378.438545][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.445736][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.499291][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.506747][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.705697][ T6312] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.726548][ T6312] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.736217][ T6312] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.744865][ T6312] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.794621][T27486] dvmrp1: entered allmulticast mode [ 1378.805036][T27498] netlink: 'syz.4.13678': attribute type 4 has an invalid length. [ 1378.830892][ T6312] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.848596][T27498] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.13678'. [ 1378.863527][ T6312] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.889149][ T6319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1378.903917][T27498] Cannot find map_set index 17 as target [ 1378.923320][ T8035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1378.933266][ T6319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1378.971524][ T6312] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.003758][ T6312] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.118393][T27509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13683'. [ 1379.189100][T27512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13685'. [ 1379.229092][T27512] batadv0: Device is already in use. [ 1379.239854][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1379.292646][T27517] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1379.438343][T27527] bond8: Removing last ns target with arp_interval on [ 1379.686537][T27552] netlink: 'syz.3.13692': attribute type 6 has an invalid length. [ 1379.710046][T27552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13692'. [ 1379.801713][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1379.877891][T27567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13696'. [ 1379.938183][T27567] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1380.120909][T27584] netlink: 'syz.0.13700': attribute type 1 has an invalid length. [ 1380.135622][T27579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13696'. [ 1380.146108][T27584] netlink: 'syz.0.13700': attribute type 3 has an invalid length. [ 1380.154447][T27584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13700'. [ 1380.170343][T27579] bond9 (unregistering): Released all slaves [ 1380.183207][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13700'. [ 1380.484055][T27590] netlink: 'syz.2.13701': attribute type 5 has an invalid length. [ 1380.586297][T27599] syzkaller0: entered promiscuous mode [ 1380.595144][T27599] syzkaller0: entered allmulticast mode [ 1380.613997][T27600] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13702'. [ 1380.627581][T27599] tipc: Enabled bearer , priority 0 [ 1380.642119][T27598] tipc: Resetting bearer [ 1380.657472][T27598] tipc: Disabling bearer [ 1380.964427][T27619] netlink: 'syz.2.13709': attribute type 83 has an invalid length. [ 1381.250732][T27630] syzkaller0: entered promiscuous mode [ 1381.262328][T27630] syzkaller0: entered allmulticast mode [ 1381.281564][T27630] tipc: Enabled bearer , priority 0 [ 1381.433657][T27635] netlink: 'syz.1.13712': attribute type 1 has an invalid length. [ 1381.532256][T27642] netlink: 'syz.2.13715': attribute type 1 has an invalid length. [ 1381.585402][T27642] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1381.647536][T27642] bond7: (slave veth3): Enslaving as an active interface with a down link [ 1382.018702][T27673] netlink: 'syz.0.13722': attribute type 1 has an invalid length. [ 1382.065921][T27673] bond5: (slave geneve5): making interface the new active one [ 1382.075132][T27673] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 1382.085099][ T6291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.095340][ T6291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.105512][ T6291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.115317][ T6291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.131154][T27677] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1382.267139][T27685] Bluetooth: MGMT ver 1.23 [ 1382.356978][T27653] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1382.523671][T27693] nbd: device at index 64 is going down [ 1382.627485][T18731] udevd[18731]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1382.684502][T19214] udevd[19214]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1382.774460][T27718] netlink: 'syz.0.13738': attribute type 1 has an invalid length. [ 1382.801613][T27712] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1382.814195][T27712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1382.828127][T27712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1382.885320][T27723] tipc: Resetting bearer [ 1382.919957][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1382.948369][T27721] tipc: Resetting bearer [ 1383.170286][T27738] __nla_validate_parse: 11 callbacks suppressed [ 1383.170331][T27738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13743'. [ 1383.362862][T27749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13747'. [ 1383.412723][T27751] pim6reg: entered allmulticast mode [ 1383.474264][T27759] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1383.487227][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1383.599039][T27768] bond3: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 1383.613771][T27768] bond3: entered promiscuous mode [ 1383.639190][T27768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1383.674298][ T5427] tipc: Resetting bearer [ 1383.792843][ T7353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1383.856716][T27785] xt_hashlimit: size too large, truncated to 1048576 [ 1383.919982][ T5427] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1384.129852][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1384.839895][ T7353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1384.911200][T27803] wlan1 speed is unknown, defaulting to 1000 [ 1385.000197][ T6294] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1385.009236][ T6294] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1385.021703][T27803] lo speed is unknown, defaulting to 1000 [ 1385.028660][T27803] xfrm0 speed is unknown, defaulting to 1000 [ 1385.216744][T27808] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1385.317863][T27812] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1385.334789][ T7353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1385.444013][ T5427] tipc: Subscription rejected, illegal request [ 1385.567130][T27819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13767'. [ 1386.051182][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1386.283883][T27749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1386.362481][T27821] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13768'. [ 1386.511883][T27825] nbd: must specify a size in bytes for the device [ 1386.681652][T27849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1386.693707][T27849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1386.704324][T27849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1386.717054][T27849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1386.730509][T27849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1386.740438][T27849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1386.808175][T27849] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1387.004733][ T6294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.047882][ T6294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.094606][T27857] syzkaller1: entered promiscuous mode [ 1387.102889][T27857] syzkaller1: entered allmulticast mode [ 1387.124184][ T6294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.144174][ T6294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.322067][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1387.674023][T27879] tipc: Resetting bearer [ 1387.886708][T27891] syzkaller1: entered promiscuous mode [ 1387.899020][ T5723] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.915595][T27891] syzkaller1: entered allmulticast mode [ 1388.230522][T27917] __nla_validate_parse: 91 callbacks suppressed [ 1388.230558][T27917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13793'. [ 1388.278768][T27919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13795'. [ 1388.331985][T27922] syzkaller0: entered promiscuous mode [ 1388.339147][T27922] syzkaller0: entered allmulticast mode [ 1388.813219][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1388.860467][ T5723] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1388.869401][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1388.880380][ T5427] wlan1: Trigger new scan to find an IBSS to join [ 1388.900343][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1388.916179][T27951] netlink: 'syz.1.13802': attribute type 1 has an invalid length. [ 1388.944952][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1388.986795][T27951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1388.993830][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1389.015080][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1389.035814][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1389.056475][T27949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1389.185083][T27955] bond4: (slave geneve2): making interface the new active one [ 1389.213635][T27955] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1389.320129][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1389.442743][T27969] x_tables: duplicate underflow at hook 1 [ 1389.960861][ T6291] wlan1: Trigger new scan to find an IBSS to join [ 1390.256164][T28001] netlink: 'syz.0.13812': attribute type 1 has an invalid length. [ 1390.314370][T28001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1390.519674][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1390.728607][T28020] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1390.772261][T28026] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1391.270757][T28057] netlink: 'syz.0.13828': attribute type 10 has an invalid length. [ 1391.949973][T28085] nbd4: detected capacity change from 0 to 127 [ 1391.960218][ T6294] wlan1: Trigger new scan to find an IBSS to join [ 1391.972584][ T5623] block nbd4: Receive control failed (result -32) [ 1391.982513][T19214] block nbd4: Send control failed (result -32) [ 1392.013296][T19214] block nbd4: Request send failed, requeueing [ 1392.045858][ T1767] block nbd4: Dead connection, failed to find a fallback [ 1392.054246][ T1767] block nbd4: shutting down sockets [ 1392.059889][ T1767] blk_print_req_error: 138 callbacks suppressed [ 1392.059907][ T1767] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.075975][ T1767] buffer_io_error: 138 callbacks suppressed [ 1392.075993][ T1767] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1392.091226][T19214] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.113667][T19214] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1392.124451][T19214] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.134486][T19214] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1392.142650][T19214] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.153145][T19214] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1392.161487][T19214] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.171148][T19214] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1392.179084][T19214] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.188722][T19214] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1392.196939][T19214] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.256433][T19214] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1392.281613][T19214] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.306668][T28091] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1392.314750][ T8035] IPVS: starting estimator thread 0... [ 1392.324504][T19214] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1392.340138][ T7353] syzkaller0: tun_net_xmit 76 [ 1392.350015][T19214] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.362855][T28088] syzkaller0: create flow: hash 3567317531 index 1 [ 1392.386853][T19214] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1392.407830][T19214] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.429896][T28092] IPVS: using max 38 ests per chain, 91200 per kthread [ 1392.444297][T19214] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1392.474385][T19214] ldm_validate_partition_table(): Disk read failed. [ 1392.497363][T19214] Dev nbd4: unable to read RDB block 0 [ 1392.523162][T19214] nbd4: unable to read partition table [ 1392.555852][T19214] ldm_validate_partition_table(): Disk read failed. [ 1392.581500][T19214] Dev nbd4: unable to read RDB block 0 [ 1392.604229][T19214] nbd4: unable to read partition table [ 1392.732864][T28090] syzkaller0: delete flow: hash 3567317531 index 1 [ 1392.921468][ T6312] wlan1: Trigger new scan to find an IBSS to join [ 1393.336223][T28108] netlink: 'syz.1.13842': attribute type 1 has an invalid length. [ 1393.446163][T28110] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 1393.459871][T28112] netlink: 'syz.0.13843': attribute type 12 has an invalid length. [ 1393.473227][T28108] __nla_validate_parse: 19 callbacks suppressed [ 1393.473248][T28108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13842'. [ 1393.475774][T28112] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.13843'. [ 1393.492416][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13842'. [ 1393.561852][T28114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.690399][T28126] netlink: 'syz.1.13847': attribute type 1 has an invalid length. [ 1393.791757][T28136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13850'. [ 1393.806540][T28133] bond6: (slave dummy0): making interface the new active one [ 1393.817169][T28133] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1393.857912][T28126] bond6: entered promiscuous mode [ 1393.880482][T28126] dummy0: entered promiscuous mode [ 1393.883755][T28138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13851'. [ 1393.897725][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.924360][T28141] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13852'. [ 1393.950701][T28141] netlink: 'syz.4.13852': attribute type 83 has an invalid length. [ 1394.003726][T28144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13851'. [ 1394.591786][T28126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.600156][T28126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.620991][T28126] bond6: (slave dummy0): Releasing active interface [ 1394.627720][T28126] dummy0: left promiscuous mode [ 1394.690615][T28126] bridge_slave_0: left allmulticast mode [ 1394.696857][T28126] bridge_slave_0: left promiscuous mode [ 1394.703232][T28126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.718700][T28126] bridge_slave_1: left allmulticast mode [ 1394.724810][T28126] bridge_slave_1: left promiscuous mode [ 1394.732070][T28126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.753811][T28126] bond0: (slave bond_slave_0): Releasing backup interface [ 1394.776527][T28126] bond0: (slave bond_slave_1): Releasing backup interface [ 1394.797757][T28126] team0: Port device team_slave_0 removed [ 1394.820006][T28126] team0: Port device team_slave_1 removed [ 1394.839136][T28126] tipc: Resetting bearer [ 1394.857638][T28126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1394.907734][T28124] bond6: left promiscuous mode [ 1395.127759][T28187] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13860'. [ 1395.169706][T28192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13862'. [ 1395.349260][T28204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13864'. [ 1395.388665][T28204] tipc: Enabling of bearer rejected, media not registered [ 1395.850719][T28226] netlink: 'syz.0.13867': attribute type 12 has an invalid length. [ 1395.970193][ T6294] wlan1: Trigger new scan to find an IBSS to join [ 1396.296862][T28253] netlink: 'syz.3.13874': attribute type 22 has an invalid length. [ 1396.323992][T28253] netlink: 'syz.3.13874': attribute type 22 has an invalid length. [ 1396.833993][T28238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1396.921285][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.026862][T28283] team0: No ports can be present during mode change [ 1397.282303][T28301] syzkaller0: entered promiscuous mode [ 1397.312150][T28301] syzkaller0: entered allmulticast mode [ 1397.349426][T28304] tipc: Enabled bearer , priority 0 [ 1397.376514][T28309] syzkaller0: entered promiscuous mode [ 1397.383229][T28309] syzkaller0: entered allmulticast mode [ 1397.391372][T28309] tipc: Resetting bearer [ 1397.561841][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1397.576738][T28325] tipc: Failed to remove unknown binding: 66,1,1/257374963:2410661874/2410661876 [ 1397.594291][T28325] tipc: Failed to remove unknown binding: 66,1,1/257374963:2410661874/2410661876 [ 1397.605965][T28325] tipc: Failed to remove unknown binding: 66,1,1/257374963:2410661874/2410661876 [ 1397.608486][T28299] tipc: Resetting bearer [ 1397.664904][T28299] tipc: Disabling bearer [ 1398.214581][ T6299] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1398.220368][T28354] syzkaller0: entered promiscuous mode [ 1398.228574][T28354] syzkaller0: entered allmulticast mode [ 1398.490973][ T8027] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1398.523377][ T8027] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1398.538039][T28363] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1398.547656][ T8027] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1398.570908][ T5427] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1398.581406][ T5427] bond7: (slave veth3): making interface the new active one [ 1398.594091][ T5427] bond7: active interface up! [ 1398.643632][T28380] __nla_validate_parse: 16 callbacks suppressed [ 1398.643656][T28380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13909'. [ 1398.711498][T28382] bond9: option resend_igmp: invalid value (2878) [ 1398.727855][T28382] bond9: option resend_igmp: allowed values 0 - 255 [ 1398.741075][T28382] bond9 (unregistering): Released all slaves [ 1398.760142][ T8026] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1398.922388][T28358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1398.969076][T28389] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13912'. [ 1399.039999][ T8026] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1399.270577][ T8027] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1399.618829][ T6303] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1399.661392][ T6303] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1399.741366][ T6303] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1399.756237][T28415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13918'. [ 1399.771241][ T6303] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1399.795938][T28423] syzkaller0: entered promiscuous mode [ 1399.810131][T28423] syzkaller0: entered allmulticast mode [ 1400.113350][T28447] tipc: Resetting bearer [ 1400.133913][T28447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1400.357132][T28447] tipc: Resetting bearer [ 1401.067015][T28481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13930'. [ 1401.498174][T28479] pim6reg1: entered promiscuous mode [ 1401.519230][T28479] pim6reg1: entered allmulticast mode [ 1401.541055][ T6294] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.573059][ T6294] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.645804][T28492] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13932'. [ 1401.684979][ T6294] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.740033][ T6294] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.764574][ T6294] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.789188][ T6294] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.844617][T28496] bond0: (slave bond_slave_0): Releasing backup interface [ 1401.896594][T28496] bond0: (slave bond_slave_1): Releasing backup interface [ 1401.977300][T28496] team0: Port device team_slave_0 removed [ 1401.995714][T28496] team0: Port device team_slave_1 removed [ 1402.003033][T28496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.011112][T28496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.023038][T28496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.034730][T28496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.052156][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13935'. [ 1402.056925][T28496] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1402.063523][T28517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13935'. [ 1402.092309][ T6294] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.101456][ T6294] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.114390][ T6304] tipc: Resetting bearer [ 1402.131253][T28519] tipc: Enabling of bearer rejected, already enabled [ 1402.328949][T28532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13940'. [ 1402.443633][T28541] tipc: Resetting bearer [ 1402.627024][T28541] tipc: Resetting bearer [ 1402.765996][T28558] tipc: Resetting bearer [ 1402.815118][T28558] tipc: Resetting bearer [ 1402.865556][T28576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13952'. [ 1402.884560][T28577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13952'. [ 1403.031332][ T5737] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.042849][ T5737] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1403.058890][ T5737] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1403.157177][T28587] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1403.217219][T28587] bond6: (slave lo): Enslaving as an active interface with an up link [ 1403.250018][ T29] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1403.259223][T28587] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1403.304679][T28581] syzkaller1: entered promiscuous mode [ 1403.311200][T28581] syzkaller1: entered allmulticast mode [ 1403.442829][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.530992][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1403.573390][ T6311] tipc: Resetting bearer [ 1403.815979][T28599] __nla_validate_parse: 1 callbacks suppressed [ 1403.816004][T28599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13955'. [ 1403.855418][T28599] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1404.015873][T28625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13963'. [ 1404.051099][T28631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13964'. [ 1404.090827][T28632] xfrm1: entered allmulticast mode [ 1404.265478][T28649] syzkaller1: tun_chr_ioctl cmd 35092 [ 1404.321574][T28604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1404.430978][T28651] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.457488][T28651] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.490812][T28658] tipc: Resetting bearer [ 1404.508067][T28656] tipc: Resetting bearer [ 1404.538562][T28651] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.563628][T28651] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.598235][ T6311] tipc: Resetting bearer [ 1404.652460][T28664] tipc: Resetting bearer [ 1404.677364][T28651] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.699748][T28651] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.728610][T28663] tipc: Resetting bearer [ 1404.766435][T28651] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.778054][T28651] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.815057][T28670] tipc: Resetting bearer [ 1404.838941][T28669] tipc: Resetting bearer [ 1404.901057][T28672] netlink: 'syz.0.13975': attribute type 10 has an invalid length. [ 1404.929853][T28673] netlink: 'syz.0.13975': attribute type 10 has an invalid length. [ 1404.956874][ T6311] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1404.966821][ T6311] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.995766][T28676] veth0: entered promiscuous mode [ 1405.035063][ T6304] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.054995][ T6304] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.110991][ T6304] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.122157][ T6304] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.155022][T28687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13978'. [ 1405.173244][ T6313] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.198515][ T6313] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.239707][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1405.300639][T28692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13980'. [ 1405.373924][T28700] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13984'. [ 1405.418913][T28700] netlink: 'syz.2.13984': attribute type 39 has an invalid length. [ 1405.549379][T28719] netlink: 'syz.1.13987': attribute type 10 has an invalid length. [ 1405.643256][ T6313] tipc: Resetting bearer [ 1405.666875][T28722] tipc: Resetting bearer [ 1405.948190][T28721] tipc: Resetting bearer [ 1406.295962][T28755] netlink: 'syz.0.13998': attribute type 39 has an invalid length. [ 1406.361805][T28762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13998'. [ 1406.735549][ T6313] tipc: Resetting bearer [ 1406.813853][T28771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14004'. [ 1406.905386][T28771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14004'. [ 1407.228960][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14008'. [ 1407.292929][T28797] netlink: 'syz.3.14009': attribute type 2 has an invalid length. [ 1407.304445][T28795] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 1407.346230][T28798] netlink: 'syz.3.14009': attribute type 2 has an invalid length. [ 1408.955363][T28845] IPVS: length: 35 != 24 [ 1409.306886][T28867] __nla_validate_parse: 14 callbacks suppressed [ 1409.306936][T28867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14027'. [ 1409.338701][T28867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14027'. [ 1409.401265][T28869] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.426930][T28876] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14029'. [ 1409.438059][T28869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.449780][T28869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 44972 - 0 [ 1409.551698][T28869] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.581311][T28869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.633964][T28869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 44972 - 0 [ 1409.693886][T28884] set match dimension is over the limit! [ 1409.713443][T28869] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.751586][T28869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.789141][T28869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 44972 - 0 [ 1409.895245][T28869] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.928081][T28869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.953518][T28869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 44972 - 0 [ 1409.979889][T28893] netlink: 'syz.4.14034': attribute type 5 has an invalid length. [ 1410.088503][ T6313] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.109918][ T6313] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 44972 - 0 [ 1410.122935][ T6313] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1410.145148][T28908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14037'. [ 1410.159101][ T6313] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.185612][ T6313] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 44972 - 0 [ 1410.212022][ T6313] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1410.270741][T28921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14041'. [ 1410.296052][ T6304] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.306306][ T6304] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 44972 - 0 [ 1410.316487][ T6304] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1410.347056][ T6304] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.380588][ T6304] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 44972 - 0 [ 1410.407727][ T6304] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1410.449087][T28928] netlink: 'syz.4.14043': attribute type 1 has an invalid length. [ 1410.498235][T28929] gretap3: entered allmulticast mode [ 1410.633987][T28943] openvswitch: netlink: IPv4 tun info is not correct [ 1410.796416][T28951] netlink: 'syz.2.14049': attribute type 22 has an invalid length. [ 1410.835486][T28937] tipc: Resetting bearer [ 1410.852297][T28954] mac80211_hwsim hwsim162 wlan0: entered promiscuous mode [ 1410.861320][T28954] mac80211_hwsim hwsim162 wlan0: entered allmulticast mode [ 1410.869462][T28954] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1410.963449][T28958] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14052'. [ 1411.007430][T28962] netlink: 320 bytes leftover after parsing attributes in process `syz.2.14051'. [ 1411.023679][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14051'. [ 1411.035488][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14051'. [ 1411.045827][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14051'. [ 1411.451943][T28984] netlink: 'syz.0.14060': attribute type 1 has an invalid length. [ 1411.465050][T28986] syzkaller0: entered promiscuous mode [ 1411.471234][T28986] syzkaller0: entered allmulticast mode [ 1411.511017][T28986] tipc: Enabled bearer , priority 0 [ 1411.525023][T28981] bond2: (slave veth0_to_bond): Releasing backup interface [ 1411.543622][T28981] bridge4: port 1(veth0_to_bond) entered blocking state [ 1411.552077][T28981] bridge4: port 1(veth0_to_bond) entered disabled state [ 1411.561085][T28981] veth0_to_bond: entered allmulticast mode [ 1411.570928][T28981] veth0_to_bond: entered promiscuous mode [ 1411.582373][T28985] tipc: Resetting bearer [ 1411.603361][T28985] tipc: Disabling bearer [ 1411.654784][T28995] netlink: 'syz.0.14060': attribute type 1 has an invalid length. [ 1411.967663][T29005] syzkaller0: entered promiscuous mode [ 1411.989285][T29005] syzkaller0: entered allmulticast mode [ 1412.006281][T29018] batadv_slave_1: entered promiscuous mode [ 1412.214465][T29015] batadv_slave_1: left promiscuous mode [ 1412.385386][T29038] geneve3: entered promiscuous mode [ 1412.920969][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1412.923316][T29076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 1413.558550][T29117] openvswitch: netlink: Flow actions attr not present in new flow. [ 1413.635726][T29119] bond7: entered promiscuous mode [ 1413.643949][T29119] bond7: entered allmulticast mode [ 1413.651260][T29119] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1413.947162][T29161] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1414.136434][T29170] ipt_rpfilter: unknown options [ 1414.415400][T29188] __nla_validate_parse: 21 callbacks suppressed [ 1414.415423][T29188] netlink: 244 bytes leftover after parsing attributes in process `syz.0.14113'. [ 1414.582111][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14117'. [ 1414.643963][T29202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14118'. [ 1414.657508][T29204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14115'. [ 1414.677051][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14115'. [ 1414.693777][T29204] netlink: 'syz.0.14115': attribute type 13 has an invalid length. [ 1414.816875][T29212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14121'. [ 1414.839828][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1415.157368][T29235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14126'. [ 1415.175861][T29235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14126'. [ 1415.350874][T29248] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14128'. [ 1415.393695][T29244] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14128'. [ 1415.403705][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 1416.048553][T29273] bond8: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1416.147560][T29273] bond8 (unregistering): Released all slaves [ 1416.521907][T29303] netlink: 'syz.3.14140': attribute type 1 has an invalid length. [ 1416.652331][T29314] syzkaller0: entered promiscuous mode [ 1416.676720][T29314] syzkaller0: entered allmulticast mode [ 1416.701151][T29314] tipc: Resetting bearer [ 1416.780426][T29314] netlink: 'syz.4.14141': attribute type 1 has an invalid length. [ 1417.093428][T29322] : renamed from veth0_to_bond [ 1417.522762][T29348] tipc: Enabling of bearer rejected, already enabled [ 1417.615432][T29355] ip6gre1: entered promiscuous mode [ 1417.632826][T29355] ip6gre1: entered allmulticast mode [ 1417.715357][T29348] tipc: Resetting bearer [ 1418.055982][T29366] tipc: Resetting bearer [ 1418.139417][T29368] xt_hashlimit: size too large, truncated to 1048576 [ 1418.162100][T29368] xt_hashlimit: max too large, truncated to 1048576 [ 1418.306324][T29381] netlink: 'syz.0.14162': attribute type 11 has an invalid length. [ 1418.330727][T29391] netlink: 'syz.1.14166': attribute type 4 has an invalid length. [ 1418.391835][T29391] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1418.420059][T29392] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1418.595702][T29401] syzkaller0: entered promiscuous mode [ 1418.613103][T29401] syzkaller0: entered allmulticast mode [ 1418.645914][T29403] tipc: Enabled bearer , priority 0 [ 1418.674616][T29400] tipc: Resetting bearer [ 1418.749987][T29400] tipc: Disabling bearer [ 1418.772358][T29365] tipc: Resetting bearer [ 1419.010461][T29423] block nbd5: server does not support multiple connections per device. [ 1419.080987][T29423] block nbd5: shutting down sockets [ 1419.320323][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1419.513833][ T6302] tipc: Resetting bearer [ 1419.821176][T29437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1419.838593][T29437] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1419.897432][T29464] netlink: 'syz.1.14179': attribute type 1 has an invalid length. [ 1419.907005][T29464] __nla_validate_parse: 15 callbacks suppressed [ 1419.907024][T29464] netlink: 244 bytes leftover after parsing attributes in process `syz.1.14179'. [ 1419.923932][T29437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1419.936801][T29437] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1420.372909][T29437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1420.409311][T29437] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1420.428383][T29492] tipc: Enabled bearer , priority 0 [ 1420.459293][T29493] syzkaller1: entered promiscuous mode [ 1420.472297][T29495] syzkaller0: entered promiscuous mode [ 1420.499782][T29495] syzkaller0: entered allmulticast mode [ 1420.771542][T29510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14185'. [ 1422.899176][T29469] tipc: Resetting bearer [ 1422.913613][T29469] tipc: Disabling bearer [ 1422.982910][T29527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14189'. [ 1423.002117][T29437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1423.013124][T29437] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1423.161762][ C0] ip6_tunnel: @ xmit: Local address not yet configured! [ 1423.223215][T29535] tipc: Enabled bearer , priority 26 [ 1423.764711][T29560] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1423.779096][T29560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14200'. [ 1423.927758][T29571] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14204'. [ 1424.126782][T29586] netlink: 'syz.2.14208': attribute type 16 has an invalid length. [ 1424.162813][T29586] netlink: 'syz.2.14208': attribute type 17 has an invalid length. [ 1424.174282][T29585] tipc: Resetting bearer [ 1424.183334][T29585] tipc: Resetting bearer [ 1424.194856][T29588] netlink: 2780 bytes leftover after parsing attributes in process `syz.3.14209'. [ 1424.370712][ T8041] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1424.382145][T29586] 0ªî{X¹¦: left allmulticast mode [ 1424.390068][ T8041] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1424.412963][T29586] tipc: Resetting bearer [ 1424.421027][ T29] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1424.474957][T29586] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1424.520484][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1424.554479][T29574] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1424.977975][T29609] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20002 [ 1425.040035][ T8041] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1425.178772][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14218'. [ 1425.321158][ T8041] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1425.343643][T29633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14221'. [ 1425.368660][T29632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14221'. [ 1425.479300][T29622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14217'. [ 1425.586706][T29646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14224'. [ 1425.720677][T29654] netlink: 'syz.4.14228': attribute type 2 has an invalid length. [ 1425.843533][T29658] bond9 (unregistering): Released all slaves [ 1425.903294][T29661] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1426.010711][T29638] netlink: 100 bytes leftover after parsing attributes in process `syz.1.14223'. [ 1426.029880][T29638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14223'. [ 1426.048227][T29638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14223'. [ 1426.128664][T29670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14231'. [ 1426.251441][T29673] netlink: 'syz.3.14232': attribute type 1 has an invalid length. [ 1426.295506][T29673] bond9: entered promiscuous mode [ 1426.300964][T29673] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1426.789152][T29699] netlink: 36764 bytes leftover after parsing attributes in process `syz.0.14240'. [ 1426.809449][T29699] netlink: 'syz.0.14240': attribute type 1 has an invalid length. [ 1427.063973][T29706] nbd: device at index 64 is going down [ 1427.094920][ T5623] block nbd5: Receive control failed (result -32) [ 1427.228986][ T30] audit: type=1804 audit(1782039969.502:37): pid=29721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14245" name="/newroot/493/cgroup.controllers" dev="tmpfs" ino=2549 res=1 errno=0 [ 1427.333330][ T30] audit: type=1800 audit(1782039969.532:38): pid=29721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14245" name="cgroup.controllers" dev="tmpfs" ino=2549 res=0 errno=0 [ 1427.393723][T18731] udevd[18731]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1427.419244][T29462] udevd[29462]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1427.447032][T29732] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1427.681387][T29747] tipc: Resetting bearer [ 1427.812565][T29745] tipc: Resetting bearer [ 1428.281298][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1428.462812][ T3370] tipc: Resetting bearer [ 1429.375130][T29822] syzkaller0: entered promiscuous mode [ 1429.381856][T29822] syzkaller0: entered allmulticast mode [ 1429.398918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.407768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.462291][T29828] wlan1 speed is unknown, defaulting to 1000 [ 1429.733554][T29838] netlink: 'syz.4.14273': attribute type 3 has an invalid length. [ 1429.811751][T29828] lo speed is unknown, defaulting to 1000 [ 1429.840513][T29828] xfrm0 speed is unknown, defaulting to 1000 [ 1430.044797][T29847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.222256][T29847] tipc: Resetting bearer [ 1430.333423][ T6313] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.346056][ T6313] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.356164][ T6313] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.366328][ T6313] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.411686][ T6313] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.433819][ T6313] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.473386][T29857] geneve3: entered promiscuous mode [ 1430.478771][T29857] geneve3: entered allmulticast mode [ 1430.484459][ T6313] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.511332][ T6313] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.568304][T29862] sctp: [Deprecated]: syz.1.14280 (pid 29862) Use of int in max_burst socket option. [ 1430.568304][T29862] Use struct sctp_assoc_value instead [ 1430.635893][T29866] __nla_validate_parse: 15 callbacks suppressed [ 1430.635944][T29866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14282'. [ 1430.669084][T29866] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1430.744345][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14283'. [ 1430.946319][T29871] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1430.999298][T29875] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14286'. [ 1431.612068][T29907] netlink: 'syz.1.14295': attribute type 1 has an invalid length. [ 1431.675644][T29917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14295'. [ 1431.701350][T29914] netlink: 'syz.0.14297': attribute type 1 has an invalid length. [ 1431.712090][T29914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14297'. [ 1431.721351][T29917] bond8: entered promiscuous mode [ 1431.728310][T29917] bond8: entered allmulticast mode [ 1431.735069][T29917] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1431.891218][T29932] netlink: 'syz.4.14300': attribute type 1 has an invalid length. [ 1431.938533][T29932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1431.957863][T29936] bond5: (slave gretap3): making interface the new active one [ 1431.967492][T29936] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 1432.074562][T29940] netlink: 'syz.0.14301': attribute type 7 has an invalid length. [ 1432.322444][T29957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14308'. [ 1432.437554][T29964] tipc: Resetting bearer [ 1432.458999][T29963] tipc: Resetting bearer [ 1432.688554][ T6294] tipc: Resetting bearer [ 1432.709917][T29960] bridge8: entered allmulticast mode [ 1432.899266][T29981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14313'. [ 1433.342050][T29988] netlink: 'syz.3.14316': attribute type 3 has an invalid length. [ 1433.365242][T29988] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14316'. [ 1435.012903][T30092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14339'. [ 1435.033493][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14339'. [ 1435.055481][T30092] netlink: 'syz.1.14339': attribute type 7 has an invalid length. [ 1435.083047][T30092] netlink: 'syz.1.14339': attribute type 7 has an invalid length. [ 1435.389911][T30120] sctp: [Deprecated]: syz.3.14350 (pid 30120) Use of int in maxseg socket option. [ 1435.389911][T30120] Use struct sctp_assoc_value instead [ 1435.435694][T30114] wlan1 speed is unknown, defaulting to 1000 [ 1435.743455][T30138] syzkaller0: entered promiscuous mode [ 1435.765539][T30138] syzkaller0: entered allmulticast mode [ 1435.942568][T30144] __nla_validate_parse: 4 callbacks suppressed [ 1435.942588][T30144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14356'. [ 1436.011771][T30144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1436.065167][T30114] lo speed is unknown, defaulting to 1000 [ 1436.085868][T30114] xfrm0 speed is unknown, defaulting to 1000 [ 1436.240349][T30116] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14347'. [ 1437.224853][T30168] netlink: 'syz.3.14362': attribute type 1 has an invalid length. [ 1437.346611][T30168] nbd: must specify at least one socket [ 1437.382256][T30168] ip6tnl2: entered allmulticast mode [ 1437.680207][T30191] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1437.918380][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14372'. [ 1438.213776][T30223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14375'. [ 1438.243737][T30223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14375'. [ 1438.271248][T30223] netlink: 'syz.3.14375': attribute type 1 has an invalid length. [ 1438.374572][T30229] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.14378'. [ 1438.391931][T30229] netlink: Unknown conntrack attr (0) [ 1438.713272][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14379'. [ 1438.746893][T30234] netlink: 'syz.3.14379': attribute type 14 has an invalid length. [ 1438.778754][T30234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14379'. [ 1438.810900][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14379'. [ 1438.828824][T30234] netlink: 'syz.3.14379': attribute type 14 has an invalid length. [ 1438.852208][T30234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14379'. [ 1439.028203][T30274] netlink: 'syz.0.14392': attribute type 2 has an invalid length. [ 1439.048638][T30276] netlink: 'syz.0.14392': attribute type 2 has an invalid length. [ 1439.058282][T30274] netlink: 'syz.0.14392': attribute type 11 has an invalid length. [ 1439.069716][T30276] netlink: 'syz.0.14392': attribute type 11 has an invalid length. [ 1439.280030][T30286] hsr0: entered promiscuous mode [ 1439.291837][T30285] hsr0: left promiscuous mode [ 1440.023091][T30323] syzkaller1: entered promiscuous mode [ 1440.053821][T30323] syzkaller1: entered allmulticast mode [ 1440.397486][T30348] syzkaller0: entered promiscuous mode [ 1440.482104][T30348] syzkaller0: entered allmulticast mode [ 1441.045955][T30387] __nla_validate_parse: 7 callbacks suppressed [ 1441.045975][T30387] netlink: 84 bytes leftover after parsing attributes in process `syz.4.14418'. [ 1441.217091][T30394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14422'. [ 1441.298874][T30399] bridge5: port 1(erspan0) entered blocking state [ 1441.342327][T30399] bridge5: port 1(erspan0) entered disabled state [ 1441.374202][T30399] erspan0: entered allmulticast mode [ 1441.413674][T30399] erspan0: left allmulticast mode [ 1441.464393][T30406] validate_nla: 4 callbacks suppressed [ 1441.464428][T30406] netlink: 'syz.3.14424': attribute type 8 has an invalid length. [ 1441.935231][T30444] bond9 (unregistering): Released all slaves [ 1442.237916][T30462] netlink: 'syz.1.14439': attribute type 3 has an invalid length. [ 1442.352528][T30460] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1442.366709][T30460] bond6 (unregistering): Released all slaves [ 1442.488179][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14442'. [ 1442.549883][T30471] netlink: 'syz.0.14442': attribute type 11 has an invalid length. [ 1442.570475][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14442'. [ 1442.579754][T30471] netlink: 'syz.0.14442': attribute type 11 has an invalid length. [ 1442.582060][T11244] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.628351][T11244] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.652608][T11244] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.674187][T11244] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.850495][T30491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14448'. [ 1443.004937][T30507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14451'. [ 1443.547514][T30551] tipc: Resetting bearer [ 1443.578974][T30551] netlink: 'syz.3.14464': attribute type 1 has an invalid length. [ 1443.592833][T30553] netlink: 'syz.2.14463': attribute type 4 has an invalid length. [ 1443.603357][T30547] tipc: Resetting bearer [ 1443.663462][T30556] tipc: Resetting bearer [ 1443.767992][T30555] tipc: Resetting bearer [ 1443.800138][T30566] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1443.835598][T30568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14466'. [ 1444.140527][T30587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14472'. [ 1444.305956][T30591] netlink: 'syz.3.14474': attribute type 29 has an invalid length. [ 1444.365998][T30598] hmó3)ó€: entered promiscuous mode [ 1444.515299][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14478'. [ 1444.546740][T30610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14478'. [ 1444.984056][ T6304] tipc: Resetting bearer [ 1444.992950][T30620] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1445.004299][T30620] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1445.014781][T30620] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1445.061609][T30625] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1445.076718][T30625] mac80211_hwsim hwsim162 wlan0: left promiscuous mode [ 1445.087135][T30625] mac80211_hwsim hwsim162 wlan0: left allmulticast mode [ 1445.097649][T30625] bridge1: left promiscuous mode [ 1445.103658][T30625] bridge1: left allmulticast mode [ 1445.109384][T30625] bond2: left allmulticast mode [ 1445.126310][T30625] ip6erspan1: left allmulticast mode [ 1445.144188][T30625] ipip0: left promiscuous mode [ 1445.151242][T30625] geneve4: left promiscuous mode [ 1445.156899][T30625] bond4: left promiscuous mode [ 1445.186737][ T6319] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.218500][ T6319] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.253606][ T6319] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.288189][ T6319] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.464247][T30663] dvmrp6: entered allmulticast mode [ 1445.508613][T30665] vlan5: entered promiscuous mode [ 1445.826345][T30688] netlink: 'syz.4.14500': attribute type 16 has an invalid length. [ 1445.956287][ T30] audit: type=1804 audit(1782039988.232:39): pid=30700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.14505" name="/newroot/436/memory.events" dev="tmpfs" ino=2250 res=1 errno=0 [ 1446.022559][ T30] audit: type=1800 audit(1782039988.232:40): pid=30700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14505" name="memory.events" dev="tmpfs" ino=2250 res=0 errno=0 [ 1446.059745][T30705] batman_adv: batadv0: Adding interface: dummy0 [ 1446.066251][T30705] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.094363][T30705] batman_adv: batadv0: Interface activated: dummy0 [ 1446.457222][T30732] syzkaller0: entered promiscuous mode [ 1446.465782][T30732] syzkaller0: entered allmulticast mode [ 1446.473892][T30732] 0: reclassify loop, rule prio 0, protocol 800 [ 1446.485090][T30732] syzkaller1: entered promiscuous mode [ 1446.491363][T30732] syzkaller1: entered allmulticast mode [ 1447.530692][T30738] netlink: 'syz.0.14515': attribute type 27 has an invalid length. [ 1447.569815][T30738] syzkaller0: entered promiscuous mode [ 1447.576004][T30738] syzkaller0: entered allmulticast mode [ 1447.683939][T30745] __nla_validate_parse: 4 callbacks suppressed [ 1447.683960][T30745] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14519'. [ 1447.920230][T30761] macvlan2: entered promiscuous mode [ 1447.937313][T30761] macvlan2: entered allmulticast mode [ 1447.955879][T30761] veth0_to_bridge: entered promiscuous mode [ 1447.971555][T30761] veth0_to_bridge: entered allmulticast mode [ 1447.993662][T30761] team0: Port device macvlan2 added [ 1448.013697][T30775] syzkaller0: left allmulticast mode [ 1448.020677][T30775] tipc: Resetting bearer [ 1448.090780][T30772] vxcan3: entered promiscuous mode [ 1448.098288][T30781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14524'. [ 1448.123561][T30772] vxcan3: entered allmulticast mode [ 1448.176432][T30788] veth1_to_bond: entered promiscuous mode [ 1448.198855][T30788] veth1_to_bond: entered allmulticast mode [ 1448.222948][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14526'. [ 1448.428428][T30788] veth1_to_bond (unregistering): left promiscuous mode [ 1448.442359][T30788] veth1_to_bond (unregistering): left allmulticast mode [ 1448.504918][T30807] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14526'. [ 1448.669643][T30818] netlink: 'syz.4.14532': attribute type 11 has an invalid length. [ 1448.708662][T30809] wlan1 speed is unknown, defaulting to 1000 [ 1448.802446][T30816] IPVS: Scheduler module ip_vs_sip not found [ 1448.817953][T30828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14534'. [ 1448.850044][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14534'. [ 1448.878010][T30828] netlink: 'syz.4.14534': attribute type 12 has an invalid length. [ 1448.903605][T30828] netlink: 'syz.4.14534': attribute type 13 has an invalid length. [ 1448.958575][T30836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14536'. [ 1448.968338][T30836] openvswitch: netlink: Flow key attr not present in new flow. [ 1449.015616][T30823] netlink: 'syz.3.14531': attribute type 1 has an invalid length. [ 1449.109695][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14531'. [ 1449.140526][T30836] netlink: 180 bytes leftover after parsing attributes in process `syz.4.14536'. [ 1449.153664][T30809] lo speed is unknown, defaulting to 1000 [ 1449.170675][T30809] xfrm0 speed is unknown, defaulting to 1000 [ 1449.362423][T30850] veth15: entered promiscuous mode [ 1449.384983][T30850] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14539'. [ 1449.422011][T30849] veth17: entered promiscuous mode [ 1449.464145][T30842] bridge5: entered promiscuous mode [ 1449.479732][T30842] bridge5: entered allmulticast mode [ 1449.558797][T30863] netlink: 'syz.4.14543': attribute type 29 has an invalid length. [ 1451.012720][T30932] netlink: 'syz.2.14560': attribute type 16 has an invalid length. [ 1451.072947][T30932] netlink: 'syz.2.14560': attribute type 17 has an invalid length. [ 1451.669152][T30971] wlan1 speed is unknown, defaulting to 1000 [ 1451.822809][T30985] netlink: 'syz.1.14573': attribute type 1 has an invalid length. [ 1451.969313][T30993] nbd: nbd2 already in use [ 1451.978222][T30985] tipc: Resetting bearer [ 1452.012355][T30985] tipc: Resetting bearer [ 1452.463562][T30971] lo speed is unknown, defaulting to 1000 [ 1452.485580][T30971] xfrm0 speed is unknown, defaulting to 1000 [ 1452.566556][T31023] xt_hashlimit: size too large, truncated to 1048576 [ 1452.924510][T31037] __nla_validate_parse: 23 callbacks suppressed [ 1452.924534][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14587'. [ 1452.986096][T31040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14587'. [ 1453.056638][T31037] netlink: 'syz.3.14587': attribute type 1 has an invalid length. [ 1453.065275][T31037] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14587'. [ 1453.075257][T31037] netlink: 658 bytes leftover after parsing attributes in process `syz.3.14587'. [ 1453.085135][T31037] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14587'. [ 1453.196806][T31038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14586'. [ 1453.220654][T31038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14586'. [ 1453.351512][T31065] xt_hashlimit: size too large, truncated to 1048576 [ 1453.394634][T31067] x_tables: duplicate underflow at hook 4 [ 1453.488097][T31071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14594'. [ 1453.543888][T31067] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1453.585248][T31067] gretap1: entered allmulticast mode [ 1453.805506][T31080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14597'. [ 1453.840059][T31074] bond6: entered promiscuous mode [ 1453.856208][T31074] bond6: entered allmulticast mode [ 1453.922978][T31087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14600'. [ 1454.091404][T31095] geneve4: entered promiscuous mode [ 1454.275094][T31104] netlink: 'syz.1.14605': attribute type 6 has an invalid length. [ 1454.285712][T31104] netlink: 'syz.1.14605': attribute type 6 has an invalid length. [ 1454.436975][T31115] bond7: option downdelay: invalid value (18446744073709551487) [ 1454.450516][T31115] bond7: option downdelay: allowed values 0 - 2147483647 [ 1454.461311][T31115] bond7 (unregistering): Released all slaves [ 1454.500794][T31122] ip6tnl6: entered allmulticast mode [ 1454.842407][T31140] x_tables: duplicate underflow at hook 3 [ 1455.026809][T31154] bridge7: entered promiscuous mode [ 1455.038411][T31154] bridge7: entered allmulticast mode [ 1455.168309][T31163] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1455.197317][T31164] netlink: 'syz.2.14621': attribute type 1 has an invalid length. [ 1455.235984][T31164] bond8: entered promiscuous mode [ 1455.243759][T31164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1455.360938][T31164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1455.377066][T31164] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 1455.387366][T31164] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1455.423164][T31164] bond8: (slave vti0): making interface the new active one [ 1455.471924][T31164] vti0: entered promiscuous mode [ 1455.498397][T31164] bond8: (slave vti0): Enslaving as an active interface with an up link [ 1455.524993][T31175] tipc: Resetting bearer [ 1455.549854][T31158] wlan1 speed is unknown, defaulting to 1000 [ 1455.611744][T31174] tipc: Resetting bearer [ 1455.669821][T31186] netlink: 'syz.0.14626': attribute type 7 has an invalid length. [ 1455.702561][T31186] : entered promiscuous mode [ 1455.745906][T31158] lo speed is unknown, defaulting to 1000 [ 1455.754122][T31158] xfrm0 speed is unknown, defaulting to 1000 [ 1455.900186][T31180] rdma_rxe: rxe_newlink: failed to add lo [ 1456.091275][T11244] tipc: Resetting bearer [ 1456.304285][T31207] macsec3: entered promiscuous mode [ 1456.311957][T31207] mac80211_hwsim hwsim172 wlan1: entered promiscuous mode [ 1456.326611][T31207] mac80211_hwsim hwsim172 wlan1: left promiscuous mode [ 1456.612016][T31218] ip6gre1: entered promiscuous mode [ 1456.620380][T31218] ip6gre1: entered allmulticast mode [ 1456.629388][ T6295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1456.636266][T31218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1456.649901][ T6295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1456.649907][ T9424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1456.731954][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1456.777306][T31230] netlink: 'syz.4.14640': attribute type 1 has an invalid length. [ 1456.787353][T31230] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1456.839429][T31231] bond9: option broadcast_neighbor: invalid value (30) [ 1456.857403][T31231] bond9 (unregistering): Released all slaves [ 1456.996825][T31239] vlan2: entered promiscuous mode [ 1457.007755][T31239] bridge0: entered promiscuous mode [ 1457.036268][T31248] netlink: del zone limit has 8 unknown bytes [ 1457.160087][ T9424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1457.379536][T31265] netlink: 'syz.0.14648': attribute type 1 has an invalid length. [ 1457.420114][T31265] bond9: (slave bridge9): making interface the new active one [ 1457.430275][T31265] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 1457.456636][T31265] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1457.700343][T31276] wlan1 speed is unknown, defaulting to 1000 [ 1457.967113][T31284] netlink: 'syz.2.14655': attribute type 4 has an invalid length. [ 1457.983436][T31284] netlink: 'syz.2.14655': attribute type 4 has an invalid length. [ 1458.036495][T31276] lo speed is unknown, defaulting to 1000 [ 1458.047861][T31276] xfrm0 speed is unknown, defaulting to 1000 [ 1458.186573][T31303] sock: sock_timestamping_bind_phc: sock not bind to device [ 1458.247110][T31306] __nla_validate_parse: 14 callbacks suppressed [ 1458.247133][T31306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14660'. [ 1458.274163][T31306] syzkaller0: entered allmulticast mode [ 1458.281605][T31306] tipc: Resetting bearer [ 1458.445809][T31309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14661'. [ 1458.456471][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14661'. [ 1458.474236][T31309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14661'. [ 1458.483703][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14661'. [ 1458.496532][ T6319] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.518682][ T6319] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.540506][ T6319] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.561317][ T6319] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.771309][T31321] netlink: 'syz.4.14665': attribute type 1 has an invalid length. [ 1458.795946][T31321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14665'. [ 1458.849983][T31325] SET target dimension over the limit! [ 1459.312252][T31351] tipc: Resetting bearer [ 1459.321783][T31351] batman_adv: batadv0: Interface deactivated: dummy0 [ 1459.495510][T31351] veth0_to_bridge: left allmulticast mode [ 1459.518836][ T8041] xfrm0 speed is unknown, defaulting to 1000 [ 1459.519064][ T6319] netdevsim netdevsim2 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.534977][ T6319] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.545303][ T8041] syz0: Port: 1 Link DOWN [ 1459.545340][ T6319] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.561823][ T6319] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.598628][ T6319] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.624827][ T6319] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.636952][ T8041] xfrm0 speed is unknown, defaulting to 1000 [ 1459.656251][ T6319] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.669253][ T6319] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.680257][T31362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14674'. [ 1459.694862][T31363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14675'. [ 1459.695738][T31361] wlan1 speed is unknown, defaulting to 1000 [ 1459.717148][T31362] tipc: Resetting bearer [ 1459.825138][T31362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14674'. [ 1459.846067][T31360] tipc: Resetting bearer [ 1459.881759][T31361] lo speed is unknown, defaulting to 1000 [ 1459.889268][T31361] xfrm0 speed is unknown, defaulting to 1000 [ 1460.156542][T31378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14680'. [ 1460.223781][ T6304] tipc: Resetting bearer [ 1460.599801][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1460.691048][T31411] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1460.713243][T31406] syzkaller1: entered promiscuous mode [ 1460.746977][T31406] syzkaller1: entered allmulticast mode [ 1461.224582][T31421] veth19: entered allmulticast mode [ 1461.285385][T31433] tipc: Resetting bearer [ 1461.297175][T31433] tipc: Resetting bearer [ 1461.644660][T31459] tipc: Enabling of bearer rejected, failed to enable media [ 1462.394635][T31490] team0: entered promiscuous mode [ 1462.408598][T31490] team_slave_0: entered promiscuous mode [ 1462.418304][T31490] team_slave_1: entered promiscuous mode [ 1462.444502][T31488] wlan1 speed is unknown, defaulting to 1000 [ 1462.531907][T31510] netlink: 'syz.3.14714': attribute type 4 has an invalid length. [ 1462.570537][T31510] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1462.725976][T31518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1462.801006][T31488] lo speed is unknown, defaulting to 1000 [ 1462.819040][T31488] xfrm0 speed is unknown, defaulting to 1000 [ 1462.850825][T31522] netlink: 'syz.3.14719': attribute type 3 has an invalid length. [ 1462.933422][T31529] Unsupported ieee802154 address type: 0 [ 1463.298924][T31545] syzkaller1: entered promiscuous mode [ 1463.319741][T31545] syzkaller1: entered allmulticast mode [ 1463.399264][T31555] __nla_validate_parse: 10 callbacks suppressed [ 1463.399285][T31555] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14725'. [ 1463.820708][T31564] netlink: 9 bytes leftover after parsing attributes in process `syz.3.14730'. [ 1463.836607][T31564] gretap0: entered promiscuous mode [ 1463.883562][T31545] syzkaller1: left promiscuous mode [ 1463.903655][T31545] syzkaller1: left allmulticast mode [ 1464.070544][T31573] batadv_slave_1: entered promiscuous mode [ 1464.097229][T31575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14733'. [ 1464.106814][T31575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14733'. [ 1464.117146][T31576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14735'. [ 1464.136115][T31575] geneve3: entered promiscuous mode [ 1464.138616][T31576] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14735'. [ 1464.153874][T31573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14734'. [ 1464.165439][T31573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1464.173238][T31573] IPv6: NLM_F_CREATE should be set when creating new route [ 1464.187028][T31572] batadv_slave_1: left promiscuous mode [ 1464.191899][T31576] netlink: 212300 bytes leftover after parsing attributes in process `syz.0.14735'. [ 1464.397022][T31588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14738'. [ 1464.430087][T31588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14738'. [ 1464.777762][T31603] veth7: entered promiscuous mode [ 1464.816679][T32599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1464.824619][T32599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1464.832849][T32599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1464.841708][T32599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1464.849378][T32599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1464.870187][T31604] veth9: entered promiscuous mode [ 1465.023310][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1465.036824][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1465.047395][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1465.058553][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1465.067836][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1465.611716][T31642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1465.845693][T31605] wlan1 speed is unknown, defaulting to 1000 [ 1466.203375][T31605] lo speed is unknown, defaulting to 1000 [ 1466.212198][T31605] xfrm0 speed is unknown, defaulting to 1000 [ 1466.598605][T31676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.613219][T31676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.738294][T31676] syzkaller0: left promiscuous mode [ 1466.745801][T31676] tipc: Resetting bearer [ 1466.762495][T31676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1466.774568][T31676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1466.795841][T31676] veth1_vlan: left promiscuous mode [ 1466.804332][T31676] veth0_vlan: left promiscuous mode [ 1466.811125][T31676] veth0_vlan: entered promiscuous mode [ 1466.827442][T31676] veth1_vlan: entered promiscuous mode [ 1466.838120][T31676] veth1_macvtap: left promiscuous mode [ 1466.845643][T31676] veth0_macvtap: left promiscuous mode [ 1466.852648][T31676] veth0_macvtap: entered promiscuous mode [ 1466.860944][T31676] veth1_macvtap: entered promiscuous mode [ 1466.884216][T31676] bond1: left promiscuous mode [ 1466.889226][T31676] bridge2: left promiscuous mode [ 1466.895456][T31676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1466.914099][T31676] ipvlan2: left promiscuous mode [ 1466.923533][T31676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1466.963638][T31676] bond3: left promiscuous mode [ 1466.968788][T31676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1466.979259][T31676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1466.993133][T31676] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1467.003534][T31676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1467.016452][T31676] bond7: left promiscuous mode [ 1467.021361][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.030763][T31676] ip6gre1: left promiscuous mode [ 1467.038989][T31676] bond8: left promiscuous mode [ 1467.052151][ T6311] bond5: (slave bridge5): link status up again after 0 ms [ 1467.079819][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.091025][T31676] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1467.100002][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.112241][ T6302] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1467.126955][T31676] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1467.133683][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.144643][T31676] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1467.154093][T31676] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1467.163918][T31676] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1467.170553][ T5623] Bluetooth: hci5: command tx timeout [ 1467.171907][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.186183][T31676] geneve3: left promiscuous mode [ 1467.202302][T31689] gretap0: left promiscuous mode [ 1467.277874][T31689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.286160][T31689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.313367][T31689] team0: left promiscuous mode [ 1467.318676][T31689] team_slave_0: left promiscuous mode [ 1467.326536][T31689] team_slave_1: left promiscuous mode [ 1467.579713][ T6294] net_ratelimit: 20 callbacks suppressed [ 1467.579736][ T6294] bond5: (slave bridge5): link status up again after 0 ms [ 1467.621789][ T6294] bond5: (slave bridge5): link status up again after 0 ms [ 1467.651203][ T6294] bond5: (slave bridge5): link status up again after 0 ms [ 1467.681349][ T6294] bond5: (slave bridge5): link status up again after 0 ms [ 1467.710069][ T6294] bond5: (slave bridge5): link status up again after 0 ms [ 1467.729781][ T6294] bond5: (slave bridge5): link status up again after 0 ms [ 1467.749705][ T6294] bond5: (slave bridge5): link status up again after 0 ms [ 1467.779746][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.809650][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.836148][T31689] tipc: Resetting bearer [ 1467.842621][ T6302] bond5: (slave bridge5): link status up again after 0 ms [ 1467.852129][T31689] syzkaller0: left promiscuous mode [ 1467.857784][T31689] syzkaller0: left allmulticast mode [ 1467.867098][T31689] bond6: left allmulticast mode [ 1467.878960][T31689] bond7: left promiscuous mode [ 1467.886493][T31689] geneve2: left promiscuous mode [ 1467.940721][T31689] bond9: left promiscuous mode [ 1467.947335][T31689] ip6tnl2: left allmulticast mode [ 1468.066645][ T6304] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.089973][ T6304] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.118594][ T6304] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.139772][ T6304] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.167321][ T6295] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1468.185121][ T6304] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.201942][ T5730] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1468.210325][ T6304] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.233597][ T6304] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.242955][ T6304] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.269707][ T6304] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.286476][ T6304] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 44972 - 0 [ 1468.295622][ T6304] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1468.318813][ T6304] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.329388][ T6304] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 44972 - 0 [ 1468.339423][ T6304] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1468.339841][T26858] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1468.357876][ T6304] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.364551][T31725] netlink: 'syz.2.14768': attribute type 9 has an invalid length. [ 1468.369963][ T6304] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 44972 - 0 [ 1468.383899][ T6304] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1468.397847][ T6304] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.407316][ T6304] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 44972 - 0 [ 1468.416758][ T6304] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1468.494783][T31735] __nla_validate_parse: 7 callbacks suppressed [ 1468.494802][T31735] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14770'. [ 1468.518839][T31734] vlan2: entered allmulticast mode [ 1468.525081][T31734] bond0: entered allmulticast mode [ 1468.531393][T31734] geneve1: entered allmulticast mode [ 1468.543463][T31735] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1468.552946][T31735] geneve1: left allmulticast mode [ 1468.558486][T31735] bond0 (unregistering): Released all slaves [ 1468.659134][T31605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.668844][T31605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.676618][T31605] bridge_slave_0: entered allmulticast mode [ 1468.687153][T31605] bridge_slave_0: entered promiscuous mode [ 1468.697990][T31605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.706686][T31605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.715863][T31605] bridge_slave_1: entered allmulticast mode [ 1468.724767][T31605] bridge_slave_1: entered promiscuous mode [ 1468.750995][T31605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.765215][T31605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.792708][T31605] team0: Port device team_slave_0 added [ 1468.802567][T31605] team0: Port device team_slave_1 added [ 1468.824107][T31605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.833281][T31605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.863319][T31605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.877148][T31605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.885587][T31605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.915092][T31605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.951043][T31605] hsr_slave_0: entered promiscuous mode [ 1468.957496][T31605] hsr_slave_1: entered promiscuous mode [ 1468.963861][T31605] debugfs: 'hsr0' already exists in 'hsr' [ 1468.969860][T31605] Cannot create hsr debugfs directory [ 1469.081323][ T6311] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1469.183510][T31605] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1469.239685][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1469.248329][ T5623] Bluetooth: hci5: command tx timeout [ 1469.563289][T31696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1469.578048][T31605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1469.604591][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1469.631944][T31605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1469.657421][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1469.678092][T31605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1469.706399][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1469.744534][T31756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14774'. [ 1469.754962][T31605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1469.773100][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1469.792349][T31763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14777'. [ 1469.816563][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14777'. [ 1469.962291][T31775] veth1_to_batadv: entered promiscuous mode [ 1469.981415][T31775] veth1_to_batadv: entered allmulticast mode [ 1470.022762][T31781] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14781'. [ 1470.076184][T31775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14779'. [ 1470.124746][ T6295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1470.167753][ T6295] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1470.193246][T31605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.296909][T31605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.315021][T29462] udevd[29462]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1470.347475][T29462] udevd[29462]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1470.358644][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.365915][ T6319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.402711][T11244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.409921][T11244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.546997][T31818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14788'. [ 1470.583477][T31818] hmac(sha2: entered promiscuous mode [ 1470.600491][ T9424] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1470.825306][T31834] syzkaller0: entered promiscuous mode [ 1470.836254][T31834] syzkaller0: entered allmulticast mode [ 1470.843545][T31834] tipc: Resetting bearer [ 1470.854044][T31839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14794'. [ 1470.872817][T31839] xt_TCPMSS: Only works on TCP SYN packets [ 1470.885176][T31833] tipc: Resetting bearer [ 1471.008803][T31839] bridge_slave_1: left promiscuous mode [ 1471.030749][T31839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.045059][T31839] bridge_slave_0: left allmulticast mode [ 1471.051215][T31839] bridge_slave_0: left promiscuous mode [ 1471.057114][T31839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.097869][ T6295] tipc: Resetting bearer [ 1471.104689][T31854] tipc: Enabling of bearer rejected, already enabled [ 1471.122382][T31854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14798'. [ 1471.167892][T31854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1471.264490][T31605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.320744][ T5623] Bluetooth: hci5: command tx timeout [ 1471.388520][T31605] veth0_vlan: entered promiscuous mode [ 1471.441449][T31605] veth1_vlan: entered promiscuous mode [ 1471.464539][T31870] netlink: 'syz.4.14800': attribute type 8 has an invalid length. [ 1471.503614][T31870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14800'. [ 1471.519224][T31605] veth0_macvtap: entered promiscuous mode [ 1471.556550][T31605] veth1_macvtap: entered promiscuous mode [ 1471.598948][T31605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.630664][T31605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.669370][ T6295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.697793][ T6295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.747876][ T6295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.797144][ T6295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.879674][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1471.978466][ T6319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.998367][ T6319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.085813][T11244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.134241][T11244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.301144][T31915] netlink: 'syz.0.14740': attribute type 89 has an invalid length. [ 1472.491868][T32599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1472.500786][T32599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1472.509913][T32599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1472.521586][T32599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1472.534746][T32599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1472.641075][ T6302] net_ratelimit: 50 callbacks suppressed [ 1472.641098][ T6302] bond5: (slave bridge5): failed to get link speed/duplex [ 1472.812360][T11244] bond5: (slave bridge5): failed to get link speed/duplex [ 1472.949574][T11244] bond5: (slave bridge5): failed to get link speed/duplex [ 1472.991296][T31929] wlan1 speed is unknown, defaulting to 1000 [ 1473.069743][T11244] bond5: (slave bridge5): failed to get link speed/duplex [ 1473.138445][T31929] lo speed is unknown, defaulting to 1000 [ 1473.146851][T31929] xfrm0 speed is unknown, defaulting to 1000 [ 1473.190138][ T6302] bond5: (slave bridge5): failed to get link speed/duplex [ 1473.266023][T31964] block nbd4: NBD_DISCONNECT [ 1473.282229][T31964] block nbd4: Send disconnect failed -32 [ 1473.309574][T11244] bond5: (slave bridge5): failed to get link speed/duplex [ 1473.378954][T31964] team0: left promiscuous mode [ 1473.394659][T31964] team_slave_0: left promiscuous mode [ 1473.402453][T32599] Bluetooth: hci5: command tx timeout [ 1473.414077][T31964] team_slave_1: left promiscuous mode [ 1473.443883][T31964] tipc: Resetting bearer [ 1473.451100][T31964] syzkaller0: left promiscuous mode [ 1473.465014][T31964] geneve3: left promiscuous mode [ 1473.488475][T31964] veth15: left promiscuous mode [ 1473.494630][T31964] veth17: left promiscuous mode [ 1473.500773][T31964] bond6: left promiscuous mode [ 1473.521125][T11244] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1473.541086][T11244] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1473.556667][T11244] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1473.567287][T11244] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1473.651553][ T6302] bond5: (slave bridge5): failed to get link speed/duplex [ 1473.791111][ T6304] bond5: (slave bridge5): failed to get link speed/duplex [ 1473.825629][T31993] __nla_validate_parse: 4 callbacks suppressed [ 1473.825651][T31993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14830'. [ 1473.931391][ T6294] bond5: (slave bridge5): failed to get link speed/duplex [ 1473.964942][T31995] netlink: 2736 bytes leftover after parsing attributes in process `syz.1.14831'. [ 1473.974808][T31999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14833'. [ 1474.119259][T31929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.130375][T31929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.138893][T31929] bridge_slave_0: entered allmulticast mode [ 1474.147093][T31929] bridge_slave_0: entered promiscuous mode [ 1474.156410][T31929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.164247][T31929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.172296][T31929] bridge_slave_1: entered allmulticast mode [ 1474.180765][T31929] bridge_slave_1: entered promiscuous mode [ 1474.230800][T31929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.243210][T31929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.266150][T32020] netlink: 'syz.1.14836': attribute type 1 has an invalid length. [ 1474.291973][T31929] team0: Port device team_slave_0 added [ 1474.301307][ T6294] bond5: (slave bridge5): failed to get link speed/duplex [ 1474.351092][T32020] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1474.360124][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1474.370173][T31929] team0: Port device team_slave_1 added [ 1474.376908][T32026] netlink: 136 bytes leftover after parsing attributes in process `syz.4.14839'. [ 1474.394806][T32025] syzkaller0: entered promiscuous mode [ 1474.401808][T32025] syzkaller0: entered allmulticast mode [ 1474.408784][T32027] netlink: 136 bytes leftover after parsing attributes in process `syz.4.14839'. [ 1474.421284][ T6294] bridge_slave_1: left promiscuous mode [ 1474.438719][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.600491][T32599] Bluetooth: hci2: command tx timeout [ 1474.612960][ T6294] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1474.743456][ T6294] bond4 (unregistering): (slave bridge1): Releasing active interface [ 1474.819199][ T6294] team0: Port device bridge4 removed [ 1474.861393][ T6294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1474.871691][ T6294] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1474.881883][ T6294] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1474.891990][ T6294] bond0 (unregistering): Released all slaves [ 1474.902855][ T6294] bond1 (unregistering): Released all slaves [ 1474.909867][T32062] sctp: [Deprecated]: syz.4.14842 (pid 32062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1474.909867][T32062] Use struct sctp_sack_info instead [ 1474.927947][ T6294] bond2 (unregistering): Released all slaves [ 1474.941595][ T6294] bond3 (unregistering): Released all slaves [ 1474.954538][ T6294] bond4 (unregistering): Released all slaves [ 1474.967434][ T6294] bond5 (unregistering): Released all slaves [ 1474.993209][ T6294] bond6 (unregistering): (slave veth5): Releasing backup interface [ 1475.003671][ T6294] bond6 (unregistering): Released all slaves [ 1475.019974][ T6294] bond7 (unregistering): Released all slaves [ 1475.033915][ T6294] bond8 (unregistering): (slave veth7): Releasing active interface [ 1475.043630][ T6294] bond8 (unregistering): Released all slaves [ 1475.055192][ T6294] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1475.064171][ T6294] bond9 (unregistering): Released all slaves [ 1475.075402][ T6294] bond10 (unregistering): Released all slaves [ 1475.087298][ T6294] bond11 (unregistering): Released all slaves [ 1475.098857][ T6294] bond12 (unregistering): Released all slaves [ 1475.149208][T32045] syzkaller0: entered promiscuous mode [ 1475.161030][T32045] syzkaller0: entered allmulticast mode [ 1475.188583][T32062] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 1475.209342][T31929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.218670][T31929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.246225][T31929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.259223][T31929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.266772][T31929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.294098][T31929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.314099][ T6294] hmac(sha224): left promiscuous mode [ 1475.755222][T32074] sctp: [Deprecated]: syz.4.14846 (pid 32074) Use of int in max_burst socket option. [ 1475.755222][T32074] Use struct sctp_assoc_value instead [ 1475.978795][T32079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14847'. [ 1476.013125][T32079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14847'. [ 1476.042259][ T6294] m1Ie5nè‹Ò: left promiscuous mode [ 1476.048756][T32079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14847'. [ 1476.090946][T19214] udevd[19214]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1476.115112][T29462] udevd[29462]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1476.156344][T32085] x_tables: duplicate underflow at hook 1 [ 1476.166774][T32085] netlink: 'syz.2.14848': attribute type 3 has an invalid length. [ 1476.185505][T32079] nbd: must specify a size in bytes for the device [ 1476.307289][ T6294] tipc: Disabling bearer [ 1476.313845][ T6294] tipc: Disabling bearer [ 1476.336715][ T6294] tipc: Left network mode [ 1476.362924][T31929] hsr_slave_0: entered promiscuous mode [ 1476.388899][T31929] hsr_slave_1: entered promiscuous mode [ 1476.396982][T31929] debugfs: 'hsr0' already exists in 'hsr' [ 1476.425325][T31929] Cannot create hsr debugfs directory [ 1476.559061][T32098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14853'. [ 1476.583864][T32098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14853'. [ 1476.593756][T32098] netlink: 'syz.1.14853': attribute type 25 has an invalid length. [ 1476.681259][T32599] Bluetooth: hci2: command tx timeout [ 1476.740749][ T30] audit: type=1804 audit(1782040019.012:41): pid=32109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14858" name="/newroot/507/memory.events" dev="tmpfs" ino=2619 res=1 errno=0 [ 1477.078895][T32131] netlink: 'syz.4.14866': attribute type 4 has an invalid length. [ 1477.127410][T32133] ip6tnl1: entered allmulticast mode [ 1477.199352][T32139] netlink: 'syz.2.14869': attribute type 8 has an invalid length. [ 1477.380456][T32150] lo: entered promiscuous mode [ 1477.396448][T32150] tunl0: entered promiscuous mode [ 1477.423244][T32150] gre0: entered promiscuous mode [ 1477.441263][T32150] gretap0: entered promiscuous mode [ 1477.454630][T11244] ------------[ cut here ]------------ [ 1477.460260][T11244] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 1477.474253][T11244] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#0: kworker/u8:17/11244 [ 1477.486309][T11244] Modules linked in: [ 1477.490525][T11244] CPU: 0 UID: 0 PID: 11244 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1477.501843][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1477.512155][T11244] Workqueue: events_unbound cfg80211_wiphy_work [ 1477.518567][T11244] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1477.525066][T11244] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 1477.545031][T11244] RSP: 0018:ffffc9000f7374a0 EFLAGS: 00010293 [ 1477.551618][T11244] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 1477.559938][T11244] RDX: ffff88804f6220c4 RSI: ffff88807d0c1998 RDI: ffffffff90430cd0 [ 1477.568223][T11244] RBP: ffffc9000f737610 R08: ffff8880aa402abf R09: 1ffff11015480557 [ 1477.577484][T11244] R10: dffffc0000000000 R11: ffffed1015480558 R12: ffff88804f6220c4 [ 1477.585871][T11244] R13: 0000000000000001 R14: ffff88807d0c1998 R15: dffffc0000000000 [ 1477.594437][T11244] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1477.605137][T11244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1477.612223][T11244] CR2: 00007fb8d876deb8 CR3: 000000003a7b6000 CR4: 00000000003526f0 [ 1477.620539][T11244] Call Trace: [ 1477.623872][T11244] [ 1477.627035][T11244] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1477.634905][T11244] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1477.641432][T11244] invoke_tx_handlers_late+0xb5/0x1830 [ 1477.647494][T11244] ? sta_info_get+0x2ec/0x300 [ 1477.652963][T11244] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 1477.659845][T11244] ieee80211_tx+0x2d7/0x4b0 [ 1477.664592][T11244] ? __pfx_ieee80211_tx+0x10/0x10 [ 1477.670430][T11244] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 1477.676068][T11244] ? ieee80211_xmit+0x2e5/0x3c0 [ 1477.682404][T11244] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1477.688707][T11244] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1477.697883][T11244] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 1477.705939][T11244] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 1477.713069][T11244] ieee80211_scan_work+0x488/0x1ab0 [ 1477.719060][T11244] cfg80211_wiphy_work+0x29e/0x420 [ 1477.724785][T11244] ? process_scheduled_works+0xa20/0x14e0 [ 1477.731853][T11244] process_scheduled_works+0xa8e/0x14e0 [ 1477.738451][T11244] ? __pfx_process_scheduled_works+0x10/0x10 [ 1477.745159][T11244] ? do_raw_spin_lock+0x12b/0x2f0 [ 1477.752019][T11244] ? assign_work+0x3cf/0x5d0 [ 1477.756671][T11244] worker_thread+0xa47/0xfb0 [ 1477.763488][T11244] kthread+0x388/0x470 [ 1477.767909][T11244] ? __pfx_worker_thread+0x10/0x10 [ 1477.774775][T11244] ? __pfx_kthread+0x10/0x10 [ 1477.779534][T11244] ret_from_fork+0x514/0xb70 [ 1477.785776][T11244] ? __pfx_ret_from_fork+0x10/0x10 [ 1477.792105][T11244] ? __switch_to+0xc89/0x1420 [ 1477.797707][T11244] ? __pfx_kthread+0x10/0x10 [ 1477.803429][T11244] ret_from_fork_asm+0x1a/0x30 [ 1477.809665][T11244] [ 1477.812822][T11244] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1477.822135][T11244] CPU: 0 UID: 0 PID: 11244 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1477.833868][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1477.845730][T11244] Workqueue: events_unbound cfg80211_wiphy_work [ 1477.853283][T11244] Call Trace: [ 1477.857573][T11244] [ 1477.860628][T11244] vpanic+0x56c/0xa60 [ 1477.866332][T11244] ? __pfx__printk+0x10/0x10 [ 1477.871724][T11244] ? __pfx_vpanic+0x10/0x10 [ 1477.876711][T11244] ? is_bpf_text_address+0x292/0x2b0 [ 1477.882401][T11244] ? is_bpf_text_address+0x26/0x2b0 [ 1477.887656][T11244] panic+0xc5/0xd0 [ 1477.891501][T11244] ? __pfx_panic+0x10/0x10 [ 1477.896160][T11244] ? ret_from_fork_asm+0x1a/0x30 [ 1477.902109][T11244] __warn+0x315/0x4c0 [ 1477.906239][T11244] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1477.912614][T11244] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1477.919212][T11244] __report_bug+0x331/0x530 [ 1477.924380][T11244] ? arch_stack_walk+0x11b/0x150 [ 1477.929377][T11244] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1477.935406][T11244] ? __pfx___report_bug+0x10/0x10 [ 1477.940916][T11244] ? stack_depot_save_flags+0x33/0x800 [ 1477.946941][T11244] ? call_usermodehelper_exec_work+0xbe/0x230 [ 1477.953672][T11244] ? process_scheduled_works+0x9f1/0x14e0 [ 1477.960179][T11244] report_bug_entry+0x19a/0x290 [ 1477.965080][T11244] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1477.970928][T11244] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 1477.976866][T11244] handle_bug+0xce/0x200 [ 1477.981335][T11244] exc_invalid_op+0x1a/0x50 [ 1477.985976][T11244] asm_exc_invalid_op+0x1a/0x20 [ 1477.991135][T11244] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1477.997788][T11244] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 1478.019192][T11244] RSP: 0018:ffffc9000f7374a0 EFLAGS: 00010293 [ 1478.025662][T11244] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 1478.033932][T11244] RDX: ffff88804f6220c4 RSI: ffff88807d0c1998 RDI: ffffffff90430cd0 [ 1478.042236][T11244] RBP: ffffc9000f737610 R08: ffff8880aa402abf R09: 1ffff11015480557 [ 1478.052160][T11244] R10: dffffc0000000000 R11: ffffed1015480558 R12: ffff88804f6220c4 [ 1478.060278][T11244] R13: 0000000000000001 R14: ffff88807d0c1998 R15: dffffc0000000000 [ 1478.068752][T11244] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 1478.074891][T11244] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1478.081122][T11244] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1478.087440][T11244] invoke_tx_handlers_late+0xb5/0x1830 [ 1478.093387][T11244] ? sta_info_get+0x2ec/0x300 [ 1478.098647][T11244] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 1478.104692][T11244] ieee80211_tx+0x2d7/0x4b0 [ 1478.109850][T11244] ? __pfx_ieee80211_tx+0x10/0x10 [ 1478.115009][T11244] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 1478.121515][T11244] ? ieee80211_xmit+0x2e5/0x3c0 [ 1478.126502][T11244] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1478.132723][T11244] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1478.138667][T11244] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 1478.145135][T11244] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 1478.151487][T11244] ieee80211_scan_work+0x488/0x1ab0 [ 1478.156834][T11244] cfg80211_wiphy_work+0x29e/0x420 [ 1478.162123][T11244] ? process_scheduled_works+0xa20/0x14e0 [ 1478.168511][T11244] process_scheduled_works+0xa8e/0x14e0 [ 1478.174127][T11244] ? __pfx_process_scheduled_works+0x10/0x10 [ 1478.180349][T11244] ? do_raw_spin_lock+0x12b/0x2f0 [ 1478.185767][T11244] ? assign_work+0x3cf/0x5d0 [ 1478.190400][T11244] worker_thread+0xa47/0xfb0 [ 1478.195323][T11244] kthread+0x388/0x470 [ 1478.199479][T11244] ? __pfx_worker_thread+0x10/0x10 [ 1478.204898][T11244] ? __pfx_kthread+0x10/0x10 [ 1478.209626][T11244] ret_from_fork+0x514/0xb70 [ 1478.214416][T11244] ? __pfx_ret_from_fork+0x10/0x10 [ 1478.219667][T11244] ? __switch_to+0xc89/0x1420 [ 1478.224400][T11244] ? __pfx_kthread+0x10/0x10 [ 1478.229122][T11244] ret_from_fork_asm+0x1a/0x30 [ 1478.234209][T11244] [ 1478.237881][T11244] Kernel Offset: disabled [ 1478.242222][T11244] Rebooting in 86400 seconds..