last executing test programs: 13.789865223s ago: executing program 0 (id=4701): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000f20400000012000000000000000d38d57509f007590a2d16e04b83556c7c2fd8cbdf82f9fb0cf9fa5b99b0af1b98fffbe6f4dd76a31d953b2e7e3983775ce4856421efdd289a4f0b8d507508057782e96634", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r2, 0x5, 0x0, @val=@tcx}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000005"], 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 13.249961901s ago: executing program 0 (id=4707): socket$kcm(0x1e, 0x4, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="29afeb56c85c2ee2cf72a16d19f9e42004470527b1d91e908a62c2b71e5b3a0fe9d19bc76b3b31af9e1c228e10d91b363277d62dfd1c959a52f35d0182aded2088642a9b2b5c4982ed5dd7b4671aaabd7dea5dd610feb9", 0x57}, {&(0x7f0000000580)="3ec299dd3f929a59f2142bf9147496701d4f6d426672fea37c44dbfb0c645710385a00956d208934ed47ff84c6915d985b4ba7cff6046f98bcfcfeb798b58e686cfbccdd4c7ee985a2824af8b22ec41822e2e8a78c812dc0f10b77ff95264fe1a95ab22a8d54d746085e8693990d1c63e1722b", 0x73}], 0x2, &(0x7f0000000640)=[@ip_ttl={{0x14}}], 0x18}, 0xc0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffffffffd1d, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffffffffffcb8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf250000000008000000", @ANYRES32=0x0, @ANYBLOB="080009008a0c979785285b78884755ecbceceed3e7095119112221598887993dc3d44f1f51d996304f6af80baab1a4cb071d2ff4061b54a8c59e32165d61b3e265401de4fc6ef0834c9703dcb487549162f5437dcc222a2d4c8015a073f8b3c37e3f0ab9e537eabfa6a73b3915b2f6bc8ff735b9f4a4b9b7b319c3be0f2886becb12b80ce52483997722a130ab6ce0d6153ae934933fa214377ecefd00c916234f239b211767ab4f3bca3e500add7d0ebb224a12756502e8b49ac057d4fc1b3100", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x8000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000000000000800000001000000", @ANYRES32, @ANYBLOB="00220a0000b4000007ff029ecd1e020200405831", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000002060300000000000000000007000002050005000a0000000900020073797a3100000000050001000700000010000300686173683a69702c6d6163000c5f08d0000780080006400000afa20500040001"], 0x54}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) socket$kcm(0x1e, 0x4, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="29afeb56c85c2ee2cf72a16d19f9e42004470527b1d91e908a62c2b71e5b3a0fe9d19bc76b3b31af9e1c228e10d91b363277d62dfd1c959a52f35d0182aded2088642a9b2b5c4982ed5dd7b4671aaabd7dea5dd610feb9", 0x57}, {&(0x7f0000000580)="3ec299dd3f929a59f2142bf9147496701d4f6d426672fea37c44dbfb0c645710385a00956d208934ed47ff84c6915d985b4ba7cff6046f98bcfcfeb798b58e686cfbccdd4c7ee985a2824af8b22ec41822e2e8a78c812dc0f10b77ff95264fe1a95ab22a8d54d746085e8693990d1c63e1722b", 0x73}], 0x2, &(0x7f0000000640)=[@ip_ttl={{0x14}}], 0x18}, 0xc0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffffffffd1d, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffffffffffcb8) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf250000000008000000", @ANYRES32=0x0, @ANYBLOB="080009008a0c979785285b78884755ecbceceed3e7095119112221598887993dc3d44f1f51d996304f6af80baab1a4cb071d2ff4061b54a8c59e32165d61b3e265401de4fc6ef0834c9703dcb487549162f5437dcc222a2d4c8015a073f8b3c37e3f0ab9e537eabfa6a73b3915b2f6bc8ff735b9f4a4b9b7b319c3be0f2886becb12b80ce52483997722a130ab6ce0d6153ae934933fa214377ecefd00c916234f239b211767ab4f3bca3e500add7d0ebb224a12756502e8b49ac057d4fc1b3100", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x8000000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000000000000800000001000000", @ANYRES32, @ANYBLOB="00220a0000b4000007ff029ecd1e020200405831", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000002060300000000000000000007000002050005000a0000000900020073797a3100000000050001000700000010000300686173683a69702c6d6163000c5f08d0000780080006400000afa20500040001"], 0x54}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) (async) 12.835239611s ago: executing program 0 (id=4713): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000023c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x4044804) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 64) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (rerun: 64) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x4}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0x9}}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000004100070130dbdf25027c000004002d800800018004009980040008"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 8.557505316s ago: executing program 0 (id=4743): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES64], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 8.28676992s ago: executing program 0 (id=4746): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x4070bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) 2.318852893s ago: executing program 3 (id=4797): socket$kcm(0xa, 0x3, 0x87) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x1f, 0x1, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r2, r3, 0x7, 0x4, 0x0, @void, @value=r3, @void, @void, r4}, 0x20) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.285879521s ago: executing program 2 (id=4798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'syzkaller1\x00', {0x2}, 0xcba2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'syzkaller1\x00', {0x2}, 0xcba2}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) (async) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) (async) 2.16181062s ago: executing program 1 (id=4799): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x18000, 0x4) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10, 0x5d}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x200}, @NL80211_ATTR_SSID={0x20, 0x34, @random="03789eadb384b1cd9388a7b8d619a0787289c7752c591bad0d736442"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="2be454dc888154b2"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1bf67f0b355309cfaf397d2444c1c60c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8682f15be315be221d1ab3e6f28cd485"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={r0, 0x2, 0x7, 0xb6eb}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x889) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9c4}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x10000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0x4}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008800}, 0x20000000) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe0, 0x0, 0x410, 0x70bd29, 0x7, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x14000000}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x880}, 0x4040004) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f00000007c0)="d41a3c14e492cb5523c2ad5f692b4339a93eb4d57e5a5c7d02adde43df8731f83e970f2d9932ca641d0c7552ef7fcd39a4ea9cd4544c8e78461af53d0842518dad6c29f8230d614738ba5a6fd979346a24eb4b8039b1c7ffb59d05db8b1457cfd5", 0x61) socket$l2tp6(0xa, 0x2, 0x73) accept4$nfc_llcp(r4, &(0x7f0000000840), &(0x7f00000008c0)=0x60, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900), 0x4) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000940)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40) syz_emit_ethernet(0xac, &(0x7f0000000ac0)={@multicast, @multicast, @void, {@llc={0x4, {@llc={0x42, 0x2, "59f5", "715e0b143ad3b1d0a29c7375578a05dc47c3f107c23f9d91d3f640c164d21378c192dad0b33e4f879f45dbab3c6f86bcbf4a3c7a9da54baaf51788ad9b7640df242fa06cd9aa224de082513db5988878888b62945668654042d91fea91726824b8d9bd1c7a276699196fca7a5e60c9090e5630c46af4e3868f5458b3ccf9ef90576cd29a1373e72a3aad50ab66c042dc2105748fb127cb305be4"}}}}}, 0x0) r7 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000b80)) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xc, 0x2, 0x8001, 0x0, 0x8420, r4, 0x1, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @value=r4}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) socket$kcm(0x29, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000d40)={0x0, @in6={{0xa, 0x4e24, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}, 0x5, 0x6, 0x3, 0x80000001, 0x40000000}, &(0x7f0000000e00)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000e40)={r10, 0x400, 0x20}, &(0x7f0000000e80)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 2.068491807s ago: executing program 3 (id=4801): r0 = socket$inet6_sctp(0xa, 0xa16eb858fa53d81e, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000100)=0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x2}, 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r11, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000003d00)=ANY=[@ANYBLOB="68120000", @ANYRESHEX=r11, @ANYBLOB="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", @ANYRES64=r0, @ANYRES8=r10, @ANYRESDEC=r14, @ANYRES32=0x0, @ANYRESDEC=r13, @ANYRESOCT=r8], 0x1268}, 0x1, 0x0, 0x0, 0x2400c881}, 0x0) 1.996825575s ago: executing program 2 (id=4802): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x745}, {}, {}, {}, {0xfffd}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="826d87688c04", 0x6}, {&(0x7f0000001a40)="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", 0xebb}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000b40)={'wlan1\x00', 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) syz_emit_ethernet(0x52, &(0x7f0000000e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000020001c0600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700200325d72076335a94e6f38dd5a95d5a9df034cf7f70005000600fe01d592481900000faf5e952b10f1ed5fd677526a372230774cbc8daa8eed188e5cc58f8e05ac5165760e7c11f6297c7cdcaf9bd7108ed531c08100"/97], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x6, 0x8f5f, 0x33, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @empty, 0x40, 0x8, 0x7, 0x2}}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='dummy0\x00', 0x121800, &(0x7f0000000100)={@align=0x7fffffff, {0xffff, 0x9, 0x5, 0x7fffffffffffffff}}, 0x575d, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xa}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0x12000, 0x2, 0x3, 0xdacb3d9ef10edf07, 0x1, 0x6, '\x00', r4, r5, 0x1, 0x2, 0x5, 0x8, @value=r6}, 0x50) 1.901385275s ago: executing program 1 (id=4804): r0 = socket(0x2d, 0x2, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}], 0x1}}], 0x1, 0x40000d4) (async) sendmsg$inet(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}, 0x40400c1) 1.824142761s ago: executing program 2 (id=4805): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0xfffffffffffffe25}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.725233408s ago: executing program 1 (id=4806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0xf}, 0x1) (async, rerun: 64) unshare(0x60000f80) (async) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@broadcast}]}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.459025222s ago: executing program 2 (id=4807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007144415b6f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.457924095s ago: executing program 1 (id=4808): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305010200"/20, @ANYRES32=0x0, @ANYBLOB="000000000a9a0600140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4b0) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x31f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb1e0}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELSET={0x4f8, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_USERDATA={0xfb, 0xd, 0x1, 0x0, "88fdb6e02597699f9f3d7de296d66a24ca50c90165cd250b2f678dec01a6190ccb524c8af51dc17a1ed7149656600df00b4c91fb6aedda7cf7b2cd0d62edaf9a163acc496106bb06a444f0df9fca550105df7f7a4dae5d5fd25dc09ea9d1c57a2ed04c499a8f69a22ac0568fa24d3c28e9919be60c7c334a4da3d03e5c8f17e24389e0f23df17542105d7b9b5f867977ad5f6030cbba73bf0f5ee8a4b9dc11f164002c9217d1b4e438559bd6a132834633ee015dd9846b6231e1c9305d29bc64b3862eaf4359a386b9143c934fa74d6d38d508a9bc0e55f96f323abbea6f19ba0835a33618d4868301182e947d4c6c36a4966693039c56"}, @NFTA_SET_DESC={0x134, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5f93}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x274, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}]}}}, {0x228, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x218, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0xe1, 0x3, "18ab217253344c13cc2c676a42a67c9afd57a8fcfa4919cfb13ebdad1283911396d2bc8b6c9a35f813b2f1b4e1df1912f1ebdbff0dcc197e94516879c56055f19d845fe4c90ca1321979eb4fd4568ca5feeb9b16d8687e9aa58dcf42c4180abbed45ff7718d585450a7f0e25c3d499e7f8ad7b93c50a17ce818f3315d0f4d31e74523d1e3790f6936e51c21739619ed4de90e9612001cc871ba3bf4c740fab8156dc711cc01e456fe5facdf62c4f7dbe651b322f8ec2860991f779c7d3e4aea6985c21252b7317cf6b11de748a33fa4bf95519958d2069c9c3cf3f49dd"}, @NFTA_TARGET_INFO={0x3c, 0x3, "35e48522333bea60ecd98aa9bc63c0014895467d4b14d51cc3837ef41a4943850cabe2dd71ecce9fa11ed60ec9bc387c0fa825bcd1fbf9f2"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0xe2, 0x3, "40c312be85024d418b447390e1387b0be5197ec6170c8d26aec3a6ec0ffb44b8626a3e1219020c8c84fff452f0a2affc54abadaabc46167ed64bd66d088634de9d1ae89ab669870845f8cdecab2e774ae9637142d0fee43e376b40e1d45b63a9b3c37c09585a697dde68ec71346a89c3b4cec3e50baccba4fc7dd9fc75244e32c024a539e2ef7ffa153ab1191bd7000b98ea5094cf0e863c6c809872742bbf1d45f9477af713893d3279adc4bb1146e3f6b70e08e3bd7ed6798572ede75c8fa3d79e873d048655ef135f6f72b7f564f62b892eaaff0b49ef4cea33cf0278"}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_GC_INTERVAL={0x8}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5f8}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000404) 1.361128558s ago: executing program 4 (id=4809): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40044011) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40800) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="3b8d82ac4050fc071e70b78218bc55f4a0953ae367c25ee5feb955cc3cc29d276098f1bb74a48ef9feb6e5658cb5b5c9f69bcf190fe50f8dd9455b4e84c717e1b6f07accbac10edf", @ANYBLOB="4b08a6e22034bf8b8fe15469a073bc366ca2961aeb744b07d45957cdac5a371808a6f5f49de2e6335ac2d42e453866f277300a7ea45931e8b8ba96aa95653be6397a4f477442dd2168ecfa0b5a5f3b3356b9731fa75e03eec7e3c9719ae447d71e84f93ac730fb37cf4a1e41492fabae7f315ca64fa8d4f389210c7a1c8cd4f205c458cae5a3a6dd7acbcaa4c367d65c88195ccd31ff18299eedc7c75b937382442e", @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003f5b03c472d37d553d68887a1f21e1ecea3016dafe245b8ea67e60673cad5b6364694a32e162f54efe12c775efb9c6f0cee4b1e7a"], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x814) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 1.291290687s ago: executing program 2 (id=4810): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r3, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/pid_for_children\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={&(0x7f0000000540)="24b11ed5b0d8c0ff34e81ec1149d18155883b38ad480018e480d63770ac969d14c9228d1c18d0217a87e3e16b8bf4c843e190fe4369246a71d9dbb6243cc70994809db566d2ecdf92c50b5a656bc643291e9f1bed8c5e3700cf37d1c8b98ea37a84a57b241edb6c139977e0422d7f5ea382e7d276d743e820fb7de19f5cf55220311e306f065348a2b78a14016", &(0x7f0000000600)=""/44, &(0x7f0000000640)="f02200b838943189d4c9f9b7d8f82ebfc29645f620516fabd75a58b379cad45e76722aba7216f0444a9d9cca5bf7211c051c3e505949195f08d08080631598d16ab86cfb7dc6cec6c9180f121ad1e56d502cf52fac0bf3ca477bd1c5f6f9f2277761b8e6e8a3b4559d04a9789797938742a8a0fa1323e9a9534165c8cca7559e87b07a45413ce60627aab53882abedf73d7f134c18b928c0071a4514ee769de2aacebc847cd7a19e", &(0x7f00000007c0)="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", 0x38, r6, 0x4}, 0x38) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0x1fffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000440)='GPL\x00'}, 0x90) 1.103090107s ago: executing program 4 (id=4811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069109c0000000000040000000027ee1a3900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1.101444142s ago: executing program 3 (id=4812): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x2, 0x80, 0x100, 0x0, 0x5, 0x4}, @ipv6=@udp={0x7, 0x6, "c773e3", 0x20b, 0x11, 0xff, @remote, @mcast2, {[@routing={0x32, 0x4, 0x2, 0x3, 0x0, [@mcast1, @remote]}, @fragment={0x3c, 0x0, 0x8, 0x1, 0x0, 0x4, 0x64}, @fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x8, 0x68}, @fragment={0xbb, 0x0, 0x7, 0x1, 0x0, 0x3, 0x68}, @routing={0x2f, 0x4, 0x1, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2]}, @hopopts={0x4, 0x1e, '\x00', [@hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x55, 0xcd, "3516cc020e4845e217bb73c95093d379a985a17cfb9bf69ee3079bebb3bde1b2e2c9ba8b82d4f66cf058e32e45460e0518f574f332aa4d14885a622681febd7ab152346b5e72fb1e06a5b9d86189317d006431cc4eb03788dccd92b0656e8c173e2ee0ec9f898b61f996b5705791dceedc9182bffbad2465a2e111762da2f603f60094e796f83cfc3df4e39e976cd0b65e8b68ef4ed1153860c7474bf40e71dfbfc9c42089c1bbe02595ea43ee12a7c982cc70f8124185ee49ac8266c7da010955672c83eaa930216364f6bdd1"}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x33, 0x0, 0x3, 0x1, 0x0, 0x7, 0x65}], {0x4e23, 0x4e20, 0xa3, 0x0, @gue={{0x2, 0x1, 0x1, 0x40}, "de0d9793778cdde5b9daaa94ae6071a29756697755211b0c469798635aded89953e7286bb98b34c869f4532e7c9c8d66582cb2e3cb78bceb5fca2fa5ff4367bf442a9488e1ca758ea0f6bff77f077a85b7d8af442577a0f9ac60f8dd07bab1e6c26613cd94d51b8710a14cec61893c551c9dbd36c8c7f7724c14424fac581b2f4ee1cb540aa72cd956971b5470d2429d4edee7"}}}}}, 0x23d) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0xe6905000) (async) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f0000000700)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40052) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0) 1.062863402s ago: executing program 1 (id=4813): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x4, 0x2, 0x4, "963b41351198b3e060fea3ded682c11a45786a136907027528e749d61693fce9e491b40c24f701e5a86ebda10214226d9a19f6e0478ed23f84228a67cbc389", 0x34}, 0x80, &(0x7f0000001400)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="3a580c4f68771284ff6b1d7aa9bf890e7128f2060f68c712a9509ee7a8536e4e90886c4b854ab564cb6804db3c612dddcbb51f5f06a90259b8a89b07de05c7332223d70473cb9a934e316244bf6d377d05ba209e793b54037001110dc559baf3009d3097023db263bb4509b7e365cef97ad7407c934186ef953571647fe027cba998a608fd800efcff4df3237b26bcf56fd0e491e0ea9c665ce479bf91ac9614f72a5dd9646b8a5c67296a0745fe3585172b9927e876a3d2072e2d22711340c8bcfd3f28f1b56eef1aa41f4382", 0xcd}], 0x3, &(0x7f0000001440)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3622}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xd94}}], 0xd8}, 0x24000084) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xf, 0x7, 0x80, 0xca, 0x6, 0x80000001, 0x8}, &(0x7f00000001c0)={0xbe4a, 0x1, 0x8, 0x5, 0x9, 0xfffffffffffff0d8, 0x100000000, 0x3}, &(0x7f00000012c0)={0x6000000, 0xb, 0x7, 0x63, 0x8, 0xcd1f, 0x1ff, 0x2}, &(0x7f0000001580), &(0x7f0000001600)={&(0x7f00000015c0)={[0xec55]}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="8f687636c5ded4bfe6c8745bc1acffcaeba0191946224405089cfb27a2ead7495dfad791b284629ed24eb4f3273104878440d0f4aa0b824ef8b1104a205b40d02192908180f30968862923cae2c386eb3aead424abb8794a1a98a8405179738732aea47492edc120d9f2cd0173237f04d019dd3ea736f6fc9300f1609088c3ebb81c402468d4fcad"], 0x38}}, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001780), &(0x7f00000017c0)=0xe, 0x80000) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000001800)) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) 896.013703ms ago: executing program 4 (id=4814): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0xd1a}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r2], 0x7c}}, 0x0) 550.610786ms ago: executing program 3 (id=4815): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x7c, 0x30, 0x300, 0x70bd2b, 0x25dfdbff, {0x12}, [@typed={0x30, 0x155, 0x0, 0x0, @fd=r1}, @nested={0x5d, 0x12c, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x1e}, @typed={0x14, 0xed, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="6acc65049ffb2aa3cffe636ca806ce859b11ea42df5d68b4410b3899ba20a9dc71f48061693d97f8d2031b07787272a054", @typed={0x8, 0x220, 0x0, 0x0, @ipv4=@local}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r3, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4ad, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3e", 0x75}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3e", 0x75}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000001c0), &(0x7f0000000240)=r5}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r12, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) sendmsg$nl_route(r11, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r12, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 538.934623ms ago: executing program 4 (id=4816): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x3}, 0x1c, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0xb, 0x20}, 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffff2, 0x80, 0x7, 0x10, 0x5, 0x3, 0xfffffffa, 0x3, 0x100, 0x7, 0x9, 0x1f, 0x1f, 0x5, 0x3ff, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000100), &(0x7f00000001c0)=0x4) setsockopt$inet6_int(r3, 0x29, 0x1000000000071, &(0x7f0000000040)=0x7, 0xffffffffffffff3a) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x2ffffd, @local, 0xcb1}, 0x1c) 372.725521ms ago: executing program 3 (id=4817): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x880) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) close(r4) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@gettaction={0x24, 0x32, 0x200, 0x4, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) recvmsg$kcm(r4, &(0x7f0000001640)={&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/228, 0xe4}, {&(0x7f0000001580)}], 0x3, &(0x7f0000001600)=""/30, 0x1e}, 0x2000) 319.328752ms ago: executing program 4 (id=4818): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (rerun: 64) sendmmsg(r3, &(0x7f0000001540)=[{{&(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000600)="db6e5994705ef4b560f8fa5cca77e461cc07d2f985bbb364fdff3422305d95195325f0e8af489fbb1e9d12", 0x2b}, {&(0x7f0000000640)="c2518015272945917d8599485b9e01b33269b4e4f22b9ee016f17442d3b8eb8773b471d30a3778cc1a686c9c1cbf377c5e883221788788d7b1603ec296d78421f678cce358eb6152be402b0c218b7c647eeef42f44f386a30dbcd4fcee15bc191246d9c6a7c82f299fe38288d870999caaac175acd7f9549dcb0598a40d562cf622ecd7bf9b1e1ce05b269a706fbf36365bf1fc5ac0bfac612a92f8a937ad748f283058c6bfd1c8897a8fdb5c26b", 0xae}, {&(0x7f0000000700)="dc0f6e9202ee7f9a69a12c167cb2819850ade809e90b63acd4cbdacd479b4f6ea1a6293f73518bf0d0233f5e87fe1e798e05f6727af5a7a0c942f853c9ff7ef453325c8ef2518607776c158b", 0x4c}, {&(0x7f0000000780)="613570f61777679668685636e7cf0bed775f89f695574337900dc6585e32336c7c9c168a75a96e901eed5da05d80493c528f6cc1f728adeaf73146d60927840941283b9664e4a41a53db7ab346a7595cd459ece4eb7f0e906b7056e4271c0204e1a151c3ad683b23031b945ee40db1caa33d1c9eb4b5ff26d40c33079aa348419a453cf60ff549b452eab6e9e63fed591baa5dbb7fe6b17bf3d51284a42582db8f5c0658c7e492bab25bfd74236dafbf6b7d2b30ff93668d1ad25bffbdd13047c040ef8c267289f6cc16323bb4ce48edc9b9e0662d23e2048dcedc82c5e2553dbea37f4651df", 0xe6}, {&(0x7f0000000880)="c0e7fcc1f8272a994fce9441451806fc2c7101b861dac71601aeb3ecb6450aabb9b70c802e5efd84db2dc13a7a38bf75fd6e40cdaf682e40657a2c406f29e8f0c90f0aa9c657af97570b6f1ee5086345", 0x50}, {&(0x7f0000000900)="fd27f72d9d1e973fbb7ce4614ff4307af839851923944e2b7e132d44d672788dd295561cae546e140e30118c1605b9b18228d0346d968643ee4b485114785d6717d094257f141027d52d81198f41a950c7d120a7c9cc66", 0x57}, {&(0x7f0000000980)="ccfb1491ad4cc16b61e4d2e88db5a6e0396fbb1fe2330f218901c9838c4b4c4d88a0768758eb89e086c1064543d2f82fbd06719d5a3470566ddbf3d89bbc0bbcbb66a626a17310179dab1b9735da180ef2e7b7f676e27eb845bafdde692c524ba6a794804b7a77994119ad9edc39915dceb0aef9e1346c004426a3257041b6db36e0734ce5ce8832b0f74d32c336aa46dde49340d73b8869", 0x98}], 0x7, &(0x7f0000000ac0)=[{0xb8, 0x0, 0x1d8, "e5d13e9d4e7dea138da82d88773821fca6ec81d07a25310c02ecd8bb0abb543920e64f938b66a3e6aa95ad2ca8605cdd83ce7b384b036b5168a29adc5d17e3b5954cd18320fbed5cdb663e7118bbe7600de6b4ebd607508217784ad518b2774bdb61d00562cb9922b220d78f45f3f41bc7353dbfcc7835b570a4e01103095011256ba21a4639b387718cbb0be53cf93baa29fe22e4f888f7569212a4a5f4d7b998082030ceabb2"}, {0x88, 0x109, 0x2, "b9557952b4c1c98ae5bcc97a1b080194d41704373011e406580292f46fe72659ad96d9cfdbcdf8ebe9820af99e059d47056793b297b340d202f6a6889a9cd11f7ab02e99f05a8c4b6ab36fc39d1edda6bd7a4f2de099357c4bdaa010ca66b9d27e200c318fc3021a89d49f892f9afbc3bc"}], 0x140}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c00)="17aea590c78beab337a4c27c54c6e0dba61f931b6d7610c50bc433f6648b72943a586ba9e707de3a652da4dcf23fe1f5c021e524c915e3df8eab054b2a918434e3676d7a5010ebfd65fef61e31e1dfc7668992501c17884a37768aacd3daa9474187a999c2863220469302285e3584fcd886041972fd0d", 0x77}, {&(0x7f0000000c80)="3e0f4ab9250911e5d3bcf56cc6f76161d487e54b437f51859ffea9d1f214e243a1e22ff894fa394505", 0x29}, {&(0x7f0000000cc0)="3d92025d58a34f837e99847ddf5b7d7e4f6de85ff3daacc80b8afe5c87dc3e6af573793bdd0350be536fa67929971999b23a7c3b11e509b2ff4c7402612a5242566398a49ce47b802c3fdc11cb251a8863a7d3801dfc46c3ed91b3c983b6d3f62fdf2267e25d71394312588afb8b5f50bd9aaa85d785b3ff0cbec0395f6a57f6df0e9cdbabc2b0051e6d", 0x8a}, {&(0x7f0000000d80)="741778afc30ba3caf35add536e9eedaa5c5dea1289cb107b80715c9e8721bc227735a54a0ce3b4928284d4c7895d14b53bb079f50c18b3aed6b03f2c11e9db6407b1a63bc76d171622244b91606317f81cd45a5d1b74151514179a3c3d825bbbeb6f6db8a159316736537f6e", 0x6c}, {&(0x7f0000000e00)="14e5f29decba4a20036d5b64ad059e1a5708a84d9b63fea5789fdd020aef254088c59877b9f997e7", 0x28}, {&(0x7f0000000e40)="34c0611c11012cd115248d7b9a6bacae0213c47df8d6391fcc9824f3d2b4649aca7b893230ccdb465b43ea38b0a8d3148c643298dfa3c09401afbd546a5aedd813bbd97b35d37d54d99476e58afa95f4257916154e318326fc22dd155bb470760d8b582974a9230875d486cc172ad9a34a3a9ab988937d3e7d3282412cb0fb821de06df8738c338bf8e6d646b940ffe74dd4b535c64dea021f5982b0a631e74865af6da8f02f23b1c03f00d04ca9136223d4666a54854b0f8fe1a1f412f3096105415182483bc132b739ecc67a6140a59bce20", 0xd3}, {&(0x7f0000000f40)="0cfc5b6a1da04f5098183246d57f327831fd7be82330d5cdd64804abef8c48b41a8edb6ee1f600ced6d462ffe3752a59fbc2a5051a23d5f6cc90f93ed146f0cdf799970c85ef502251f7f28264491df7800a12e07b6794b5e35d2ec5b5cf37d0c96684ed46489054f7579326e9b0783a213fe46f971c474407b5e39db935021211e8494d0db2c28d4a53489520903ee64a1dd8369f192741be227559ff5a8a9efc655ed96d2b69fba559cf8917ac84aead06a22505035f29f6bf70af93367c29602abbd7083d2916b2392b602c403152ac3bc0ba0307", 0xd6}, {&(0x7f0000001040)="e6552370a7085b871a91cfdcdb7c0f5a1880908259d7c89dc4bf52ec45be054ee6b474df3f2ca599ac444105fc42fad29d4322f0dcc8660cb147674ed233d2d56ddfbba3e9356d29aaf28701d6dfab7d15741694caf05065c1caa3dcf90d23f22266c262fb6d462d5520c07a2f39ea0e66cc37c02d02db3c64523966b7568775d166e8228d5e03e91ef6cd2a9b6b0210480a3463cf273f781701e7ecebc03031fa62824c29383ed298f9de067f9f1e183c7645bacb372fe3260cd7c8a81d6f3b4d660c131967770616b5fc2971cd8bdb899eff8c302766e557a948111dd33c1032bd0222", 0xe4}, {&(0x7f0000001140)="42afb55f7a6f5d4c02097a492ac909f97d3abe31bc9338be0bd8b342757b71b478a85d9ecf5fbbf8a2f272ad4ce4512b63fcee189cf30655b2a4531b490aec54071bf64294", 0x45}, {&(0x7f00000011c0)="886cc6226d52cc603091921a87be3c41e22072f958b62ab2692b0ac918f4031a1b3a1d4d639318591eeaeaf3574e80f20ea0eadb80e9503c5ff5a26c97eeed1685f863b845ab362f79e58f0d87f4907a8fa935eddcaf030ed898cf6fd9b607ef9fa7173b6854058f0064071afdff68414b15f3f9c1ac8341ce5485e3ddecb9970493f945f876823400789d1301dc766baf127a478baa992ec87b3391c618ca6f662dd0cb563111e88219f73064be26b0e80a4e54cfc300f1cc69", 0xba}], 0xa, &(0x7f0000001340)=[{0x10, 0x3a, 0x7}, {0xb8, 0x11, 0x79, "347f2ddb1be1c787cbe37f208311546dd4d2b462bbd250dffcb7f7a0791b174c7208d6834d90c1d55c4305efacae822d6ac7ceb89a5baa40fb45f442eb79f81b5a59e97b2d8beb689b58b0d5ef7a0d809e398908d7ed2ae60ed0a020e801715d8df46beea074b0bac6cfd45dda0b8e316c3557b2ed001f488fb156f33bfd3a6c42f77250d0dbbd269409c9ef6317d3cc25c9a4160fbf1fff1e410d88dc5c7e62bb249ec22e3af2"}, {0x100, 0x88, 0x1fdf, "0298f762ddeb0facb96a565c4066bdb08a213917433bc684d27c493b758d86d5931bb499491d9f4040cd16f358b434fa0678e621cccfc137f8f33eb123f6037908ce5031da51d1a2c5f626a4d0ebd8030a7e0525cc1be0cca1782a62ffb65cbf42ee9e4f7401ee5bd1786080ed392b69d2874d096e84827c03ba17d8a3303c68a43909e679174200de6b8550611714fb4a1009ba6aa34044f5f442462362e2f967491d252f906fe0c72e4ff61aaa3e80804bc8b66e8c99c2da731faa724697529c62c856b9d529107e5faa7b7622acb908f661dda8a7117ca7c45cd995c4d380616ed8ae53460bd184"}], 0x1c8}}], 0x2, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r2, 0xffffffffffff1fda, 0xa3a3, 0x5b}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x7fe0}, [@map_fd={0x18, 0xa}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x5e, &(0x7f0000000280)=""/94, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x8, 0xc8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x4, 0x2, 0xf, 0x1f}, {0x1, 0x1, 0xc, 0x15}, {0x0, 0x3, 0xc, 0x9}, {0x0, 0x3, 0xd, 0x9}, {0x3, 0x1, 0x7, 0x5}, {0x5, 0x1, 0x1, 0x8}, {0x4, 0x2, 0x7, 0x5}, {0x4, 0x5, 0x4, 0x7}, {0x2, 0x3, 0x5, 0x4}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r3, r4, 0x0, r5}, 0x10) (async, rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 32) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x60, 0x464, 0x100, 0x70bd26, 0x25dfdbfe, "ca0195a41c239b0777953696192ec00cd4b5562e076926eb789c5e6d638a8e4f500c3ee758087e475d44345f0e92e42135110c4ceced005ea738d1ce8eb22e1d94e9d635bf3c1f1b5320d97ba7920702", [""]}, 0x60}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r7, 0x0, 0x7ff) 214.365939ms ago: executing program 2 (id=4819): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) accept4$nfc_llcp(r2, 0x0, &(0x7f0000000080), 0x800) (async) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg(r3, &(0x7f0000001c80)={&(0x7f0000000140)=@phonet={0x23, 0x7, 0xfc, 0x76}, 0x80, 0x0, 0x0, &(0x7f0000001b40)=ANY=[], 0x140}, 0x80) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000020000000c0000000000000002"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket(0x2b, 0x1, 0x1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f0000000900)={&(0x7f0000000280)=0x4000218, 0x5, &(0x7f00000005c0)=[{}, {}, {}, {}], &(0x7f00000008c0)}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) sendmsg$nl_crypto(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0x108, 0x10, 0x100, 0x70bd27, 0x25dfdbfc, {{'ecb-serpent-sse2\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x7}, {0x8}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xa7e8}, {0x8, 0x1, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008010}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x8002}, {0x6, 0xff, 0x0, 0xfffffffe}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) 109.778209ms ago: executing program 4 (id=4820): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r8, @ANYBLOB="0800040064010104080008000001000008000200"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000ef8ff000033cad472209dc5059a3248ac590b11119e4989a6386497bc8b391a3a49618dd08432933e9f8e1689af2cea0f54b14fc35fd192f645ccb4dcbf6095a64b1e57dd0c372763acb0358085050a0d4a3f4f1d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r10, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000088000000b70000000d000000950000000000000077f6717f992d4a7308fcceaf"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r11, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) (async) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) write(r12, &(0x7f00000001c0)="9628f8f1b98a279956cc0fe578cc32b28f874f2c482942e9bd91050a972bf215939c13356893d497e27312d85e34da6193c98f9cc441ef4b3f0946d42f9893fcfca52d534da950d9f0c5e52ca572a992966e6f4358ec32c6f552b1e8bd880daaf890fcc393a60c", 0x67) (async) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.782762ms ago: executing program 1 (id=4821): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xcb}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xcb}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'netpci0\x00'}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000001c0)=0x7, 0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000200)={{r2}, "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"}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001a40)={{r2, &(0x7f0000001200)=':\x00', 0x2081, &(0x7f0000001240)={@_ha_fsid={[0xd, 0x8]}, {0x7, 0x4, 0xae2d, 0x100000001}}, 0x1ff, &(0x7f0000001280), &(0x7f00000012c0)=0x7}, 0x8, &(0x7f0000001940)=[{0x2, 0x2963, &(0x7f0000001300)='memory.events\x00', &(0x7f0000001340)="a57b87b34f67b4557ed20d04f847b5cfba646dfb7b1e590f6a5ed578c4b54b0a3a2134b10bf84889297dbf64b271b06741805d936b3786cd970af4e5f832faa28ca5a681e682eb810421af72c1377201da7597cc602de1a3f2cdfbf2217650a580aaa3a68d90559fb038d8427355bbac3b674bc120ce", 0x76, 0x2a}, {0x1, 0x5, &(0x7f00000013c0)='!*[.$(\x00', &(0x7f0000001400)="38b07a1171e27fdb7a7b806c4511378a6ffbf973731d0bbc0f93d17b8ec3c537e700b36d2e3927b704ccc0a50adfafdc23046119efb4a8ba44807e1553557257b375f2fe", 0x44}, {0x2, 0x2, &(0x7f0000001480)='memory.events\x00', &(0x7f00000014c0)="a9a697ed1d84539ef9127d56d5e7cdc2b54519ba84856cee4c2a963fd19f01efe44a3a636ffa6121f50be956265ea7961a83807461040a07e08ba685943e709a1c3d7bd16152f64f19b6bb002d4f55ecd61420c845c2785c62e0dd1a375a42949a66b4d1dbf9fe8238818a2b5df943bbc660c9c8caf66adb8e4e366e1850e14668aa87cd6c52fe3b3442a22a047a86b5b85028ad93b828f9c0edc0dde21ef63160399bedc16db089bb0e222683931f4fc93c39ff6d4442cea719862c2aba32e32271215b7f9c7015adca3a45e3dad2ae5b223111f91a06766edb5ff73766c38274a09b51d08ce370de6f5fbe07ec75bdeaa1f0", 0xf3, 0x12}, {0x1, 0x6, &(0x7f00000015c0)='\x00', &(0x7f0000001600)="7d409cd4b4dd69346a1e3aa7f81fb8772ff4706da99a589ead9e2ff24220f2c510210b7d34f2e28160b78afccccbdadf0737bf55c1994a5f6fa4e40f2382fd66ae5e8cf29e65a033882d617cb403a4538a699f9a52c771a318af977ea456bdb2f3751e30b071c337848bc44d92ab4eb30ee9f2468a5b", 0x76, 0x8}, {0x1, 0x4a, &(0x7f0000001680)='memory.events\x00', &(0x7f00000016c0), 0x0, 0x8}, {0x2, 0x4, &(0x7f0000001700)=')\x00', &(0x7f0000001740)="a2d0273aaddf1edbea374587b52463c5c193767b53b16a0094f17fe09bab7397eeeb28ac5373dd35d7fdd1197502306866d4853ad1ffbada4684e11aa664d47c24fc9545f292de6391d8bcc0301c9cc691a25b823aeb046f6412f400e2d15a2c46b90bfac0e6328cd36e4f43a02f6c511fed152758e02e34c13113b47a087ad0a3900c32d49a7f55a28992884855d9132d7cfb22858b70f13e4206f0e2399a56848bda162ba3fd9b7b10453c5eb2b1de02484976", 0xb4, 0x22}, {0x0, 0x4, &(0x7f0000001800)='memory.events\x00', &(0x7f0000001840)="913ca9f3c449b65f10008af9c1d970cdb151ad2a30127e2496d180586b17ef489f8dc90e4d26f5950e85bc1313b988b93f98528937129c13e2000da9e7a6e1a22015045bd1de1275bce4fd38376ce7ef", 0x50, 0x28}, {0x1, 0x5, &(0x7f00000018c0)='TIPC\x00', &(0x7f0000001900), 0x0, 0x32}]}) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x18, {0x800, @bearer=@l2={'ib', 0x3a, '\x00'}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000054}, 0x24004800) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf5d}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044014}, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000001d40), r3) (async) syz_genetlink_get_family_id$team(&(0x7f0000001d40), r3) sendmsg$nl_crypto(r2, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=@delrng={0x10, 0x14, 0x10, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r3) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0xa}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x48, 0x1401, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002200)={r3, 0x58, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002240)={'erspan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002300)={'syztnl2\x00', &(0x7f0000002280)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0xdc, 0x1ff, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x80, 0x80, 0x10000, 0x4}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000002400)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4850}, 0x4854) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000002400)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4850}, 0x4854) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002480), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000002600)={&(0x7f00000024c0)={0x114, r12, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x17, 0x3, "870318e159dbfafbdc484031431bbf17d5e61d"}, @ETHTOOL_A_WOL_SOPASS={0xcf, 0x3, "907353290dd3ab14bb03866ea3b1d7a1519788f54b4a99ec3e26889c9cf4257c51f19950437cd269f9024bb419dab60e1f36218389a43ab16ced4e8e74a225a8434125a708470ee5a8c2c8b414f019766a950f9ebfa34cdf05df91687ca765e09316ea48336519baa9b3947abd03003798af864bba9c844f274a183c4acae3fe0627190f7e5f3595af35565e0a9729f18626e175a4f6c18987a7b7a6741986c70ebe7e8a4073b3b12d87c6df432aea01ac4ccc20aa358fb3d9f720dc7a7a939afe11fc97d65a924fa1a8ef"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x114}}, 0x2404c8c5) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000002600)={&(0x7f00000024c0)={0x114, r12, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x17, 0x3, "870318e159dbfafbdc484031431bbf17d5e61d"}, @ETHTOOL_A_WOL_SOPASS={0xcf, 0x3, "907353290dd3ab14bb03866ea3b1d7a1519788f54b4a99ec3e26889c9cf4257c51f19950437cd269f9024bb419dab60e1f36218389a43ab16ced4e8e74a225a8434125a708470ee5a8c2c8b414f019766a950f9ebfa34cdf05df91687ca765e09316ea48336519baa9b3947abd03003798af864bba9c844f274a183c4acae3fe0627190f7e5f3595af35565e0a9729f18626e175a4f6c18987a7b7a6741986c70ebe7e8a4073b3b12d87c6df432aea01ac4ccc20aa358fb3d9f720dc7a7a939afe11fc97d65a924fa1a8ef"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x114}}, 0x2404c8c5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8100040}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc0c0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000027c0), r8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000002a80)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002800)={0x234, r14, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x800}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x80}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x9}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5311}, {0x6, 0x16, 0xb}, {0x5}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x91e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6}, {0x5}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x7}}]}, 0x234}}, 0x400c0c0) 1.846478ms ago: executing program 0 (id=4822): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff68) gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) shutdown(r3, 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000740)={0x0, @remote}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6495b}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x20000810) 0s ago: executing program 3 (id=4823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000000a200200000000000000000000000000000706000009f0000073797a300000000014000034"], 0x48}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x8000) kernel console output (not intermixed with test programs): m3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.669601][ T5635] Bluetooth: hci3: command tx timeout [ 565.726140][T18202] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3221'. [ 566.083319][T18205] vlan4: entered promiscuous mode [ 566.152427][ T29] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.205380][ T29] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.636526][ T29] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.667160][ T29] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.860362][T18235] syzkaller0: entered promiscuous mode [ 566.913744][T18235] syzkaller0: entered allmulticast mode [ 567.006105][T18139] hsr0 speed is unknown, defaulting to 1000 [ 567.023931][T18240] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3229'. [ 567.063433][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3229'. [ 567.543382][T18253] syzkaller0: entered promiscuous mode [ 567.551055][T18253] syzkaller0: entered allmulticast mode [ 567.622786][T18139] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 567.717297][T18261] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 567.729820][ T5635] Bluetooth: hci3: command tx timeout [ 568.721431][T18293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3243'. [ 569.056287][T18299] bridge1: entered promiscuous mode [ 569.070550][T18299] bridge1: entered allmulticast mode [ 569.302925][ T29] pim6reg527: left allmulticast mode [ 569.740655][ T29] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 569.814637][ T5635] Bluetooth: hci3: command tx timeout [ 570.202641][ T29] bond8 (unregistering): (slave gretap4): Releasing active interface [ 570.381767][ T29] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 570.409111][ T29] bond1 (unregistering): Released all slaves [ 570.838933][ T29] bond0 (unregistering): Released all slaves [ 570.869999][ T29] bond2 (unregistering): Released all slaves [ 570.891882][ T29] bond3 (unregistering): Released all slaves [ 570.911532][ T29] bond4 (unregistering): Released all slaves [ 570.939543][ T29] bond5 (unregistering): Released all slaves [ 570.981057][ T29] bond6 (unregistering): Released all slaves [ 571.027218][ T29] bond7 (unregistering): Released all slaves [ 571.064443][ T29] bond8 (unregistering): Released all slaves [ 571.887424][ T5635] Bluetooth: hci3: command tx timeout [ 572.221554][ T29] : left promiscuous mode [ 573.255354][ T29] tipc: Disabling bearer [ 573.311602][ T29] tipc: Left network mode [ 573.904126][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 574.383564][T18139] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.394289][T18139] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.419615][T18139] bridge_slave_0: entered allmulticast mode [ 574.468113][T18139] bridge_slave_0: entered promiscuous mode [ 574.491211][T18139] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.522386][T18139] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.538273][T18139] bridge_slave_1: entered allmulticast mode [ 574.550622][T18349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.576408][T18139] bridge_slave_1: entered promiscuous mode [ 574.592080][T18386] netlink: 'syz.2.3261': attribute type 1 has an invalid length. [ 574.644889][T18386] __nla_validate_parse: 3 callbacks suppressed [ 574.644911][T18386] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3261'. [ 574.918966][T18406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3264'. [ 575.179912][T18139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.412184][T18139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.678531][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 576.369409][T18139] team0: Port device team_slave_0 added [ 576.463421][T18139] team0: Port device team_slave_1 added [ 576.740307][T18452] syzkaller0: entered promiscuous mode [ 576.747973][T18452] syzkaller0: entered allmulticast mode [ 576.795884][T18139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.813819][T18139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.891543][T18139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.047489][T18139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.076462][T18139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.204944][T18139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.411995][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 577.597013][T18139] hsr_slave_0: entered promiscuous mode [ 577.611965][T18139] hsr_slave_1: entered promiscuous mode [ 577.620250][T18139] debugfs: 'hsr0' already exists in 'hsr' [ 577.636015][T18139] Cannot create hsr debugfs directory [ 577.688050][ T29] hsr_slave_0: left promiscuous mode [ 577.703706][ T29] hsr_slave_1: left promiscuous mode [ 577.723054][ T29] veth0_macvtap: left promiscuous mode [ 577.740085][ T29] veth1_vlan: left promiscuous mode [ 578.246388][ T12] smc: removing ib device syz1 [ 578.317786][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880844c6c00: rx timeout, send abort [ 578.329084][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880844c6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 578.555689][ T5753] hsr0 speed is unknown, defaulting to 1000 [ 578.564405][T18430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.862209][ T10] hsr0 speed is unknown, defaulting to 1000 [ 578.897975][ T10] syz1: Port: 1 Link DOWN [ 579.308513][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3279'. [ 579.380784][ T12] smbdirect: ib_dev[syz1] removed [ 579.429519][T18489] xt_connbytes: Forcing CT accounting to be enabled [ 579.468708][T18486] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3280'. [ 579.513531][T18489] xt_bpf: check failed: parse error [ 579.520128][T18486] openvswitch: netlink: Message has 512 unknown bytes. [ 580.045440][T18502] netlink: 'syz.0.3284': attribute type 1 has an invalid length. [ 581.142443][T18505] bond1: (slave gretap1): making interface the new active one [ 581.174453][T18505] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 581.544611][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3290'. [ 581.733536][T18544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3292'. [ 581.847969][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 582.642872][T18574] netlink: 'syz.4.3297': attribute type 1 has an invalid length. [ 583.033694][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3295'. [ 583.130848][T18574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.173016][T18575] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 584.374030][T18619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3305'. [ 584.445036][T18625] netlink: 'syz.4.3306': attribute type 2 has an invalid length. [ 584.594869][T18630] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002 [ 584.955265][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3311'. [ 585.991783][T18654] bond8 (unregistering): Released all slaves [ 586.545506][T18139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 586.584465][T18139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.616632][T18139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 586.785407][T18139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.881971][T18698] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 586.930544][T18698] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 586.956966][T18139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 586.984144][ T29] IPVS: stop unused estimator thread 0... [ 587.004053][T18139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 587.026280][T18139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 587.070265][T18139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 587.501103][T18139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.574238][T18139] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.615772][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.624076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.666200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.673514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.908949][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 588.949123][T18788] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 588.980415][T18788] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 589.016400][T18788] netlink: 'syz.0.3336': attribute type 2 has an invalid length. [ 589.117983][T18788] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3336'. [ 589.305261][T18804] netlink: 'syz.1.3341': attribute type 1 has an invalid length. [ 589.320134][T18139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.554732][T18807] bond1: (slave geneve2): making interface the new active one [ 589.592557][T18807] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 589.620024][ T29] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.665399][ T29] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.709785][ T29] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.756413][ T29] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.972794][T18139] veth0_vlan: entered promiscuous mode [ 590.034306][T18139] veth1_vlan: entered promiscuous mode [ 590.188184][T18139] veth0_macvtap: entered promiscuous mode [ 590.246548][T18139] veth1_macvtap: entered promiscuous mode [ 590.311778][T18139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.378545][T18139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.423462][ T6080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.461077][ T6063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.506305][ T6063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.544751][ T6063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.960369][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 591.000336][T18865] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3356'. [ 591.054623][ T6079] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.099674][ T6079] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.130208][ T6079] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.173238][T18863] wg1: Caught tx_queue_len zero misconfig [ 591.308549][ T6079] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.309627][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.378984][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.506128][ T6075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.551202][ T6075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.704939][T18885] nbd: nbd1 already in use [ 591.766321][T18885] block nbd0: NBD_DISCONNECT [ 591.803499][T18885] block nbd0: Send disconnect failed -32 [ 591.873760][T18885] block nbd0: shutting down sockets [ 592.466258][T18917] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3369'. [ 593.031393][ T6063] team0: Port device geneve1 removed [ 593.127462][ T6063] bond1 (unregistering): (slave bridge2): Releasing active interface [ 593.198160][ T6063] bond15 (unregistering): (slave bridge8): Releasing backup interface [ 593.207342][ T6063] bridge8 (unregistering): left promiscuous mode [ 593.251438][ T6063]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.273408][ T6063]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.290300][ T6063]  (unregistering): (slave team0): Releasing backup interface [ 593.313220][ T6063]  (unregistering): Released all slaves [ 593.325704][ T6063] bond0 (unregistering): (slave bond3): Releasing backup interface [ 593.345231][ T6063] bond0 (unregistering): (slave bond14): Releasing backup interface [ 593.355298][ T6063] bond0 (unregistering): Released all slaves [ 593.386457][ T6063] bond1 (unregistering): Released all slaves [ 593.404221][ T6063] bond2 (unregistering): Released all slaves [ 593.422478][ T6063] bond3 (unregistering): Released all slaves [ 593.456960][ T6063] bond4 (unregistering): Released all slaves [ 593.475593][ T6063] bond5 (unregistering): Released all slaves [ 593.501621][ T6063] bond6 (unregistering): Released all slaves [ 593.517855][ T6063] bond7 (unregistering): Released all slaves [ 593.535372][ T6063] bond8 (unregistering): Released all slaves [ 593.568404][ T6063] bond9 (unregistering): (slave veth7): Releasing active interface [ 593.579012][ T6063] bond9 (unregistering): Released all slaves [ 593.594997][ T6063] bond10 (unregistering): Released all slaves [ 593.612134][ T6063] bond11 (unregistering): Released all slaves [ 593.629510][ T6063] bond12 (unregistering): (slave veth9): Releasing active interface [ 593.640546][ T6063] bond12 (unregistering): (slave veth11): Releasing active interface [ 593.654115][ T6063] bond12 (unregistering): (slave veth13): Releasing active interface [ 593.666175][ T6063] bond12 (unregistering): Released all slaves [ 593.696785][ T6063] bond13 (unregistering): Released all slaves [ 593.713187][ T6063] bond14 (unregistering): Released all slaves [ 593.732018][ T6063] bond15 (unregistering): Released all slaves [ 593.749874][ T6063] bond16 (unregistering): Released all slaves [ 593.765470][T18890] policy can only be matched on NF_INET_PRE_ROUTING [ 593.765488][T18890] unable to load match [ 594.080730][T18945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3373'. [ 594.115781][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3372'. [ 594.184651][T18944] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.394677][ T6063] tipc: Left network mode [ 594.444352][T18952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3374'. [ 594.603501][T18958] syzkaller0: entered promiscuous mode [ 594.651382][T18958] syzkaller0: entered allmulticast mode [ 594.790768][T18975] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3379'. [ 594.841396][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.864400][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.875214][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.893754][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.905244][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.048145][ T6063] IPVS: stopping backup sync thread 14275 ... [ 595.255684][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3382'. [ 595.401771][T18998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3385'. [ 595.509301][T18992] bond2: option xmit_hash_policy: invalid value (64) [ 595.541063][T18992] bond2 (unregistering): Released all slaves [ 595.801862][T18998] dummy0: entered promiscuous mode [ 595.826963][T18998] dummy0: entered allmulticast mode [ 596.176912][T18999] syzkaller0: entered promiscuous mode [ 596.194185][T18999] syzkaller0: entered allmulticast mode [ 596.216230][T19025] block nbd0: not configured, cannot reconfigure [ 596.236888][ T6075] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.256535][ T6075] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.457896][ T6075] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.500608][ T6075] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.650949][T19041] mac80211_hwsim hwsim25 ÿ: renamed from wlan1 (while UP) [ 596.739914][T19046] netlink: 1116 bytes leftover after parsing attributes in process `syz.4.3391'. [ 596.808846][T19049] netlink: 448 bytes leftover after parsing attributes in process `syz.4.3391'. [ 596.842640][T19049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3391'. [ 597.009149][ T5643] Bluetooth: hci2: command tx timeout [ 597.153829][T18979] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 597.374104][T19065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3397'. [ 597.542792][T19074] x_tables: duplicate entry at hook 2 [ 597.632698][T19070] syzkaller0: entered promiscuous mode [ 597.655490][T19070] syzkaller0: entered allmulticast mode [ 598.259514][T19089] openvswitch: netlink: Actions may not be safe on all matching packets [ 598.502871][T19100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.813761][T19113] tipc: Failed to remove unknown binding: 66,0,0/0:635041920/635041921 [ 598.822296][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803fad9800: rx timeout, send abort [ 598.847042][T19115] tipc: Failed to remove unknown binding: 66,0,0/0:635041920/635041921 [ 598.907092][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 598.940836][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 599.091138][ T5643] Bluetooth: hci2: command tx timeout [ 599.300069][ T6079] smbdirect: ib_dev[syú2] removed [ 599.325188][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803fadbc00: rx timeout, send abort [ 599.334496][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803fad9800: abort rx timeout. Force session deactivation [ 599.357969][T19124] xt_HMARK: proto mask must be zero with L3 mode [ 599.801731][T19144] netlink: 'syz.4.3413': attribute type 1 has an invalid length. [ 599.823650][T19144] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 599.833603][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803fadbc00: abort rx timeout. Force session deactivation [ 600.029867][T19154] __nla_validate_parse: 3 callbacks suppressed [ 600.029889][T19154] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3414'. [ 600.266155][ T6063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.303152][ T6063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.583234][ T6063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.600141][ T6063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.637043][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.645620][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.653980][T18979] bridge_slave_0: entered allmulticast mode [ 600.662792][T18979] bridge_slave_0: entered promiscuous mode [ 600.725625][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.734811][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.751629][T18979] bridge_slave_1: entered allmulticast mode [ 600.760003][T18979] bridge_slave_1: entered promiscuous mode [ 600.804654][ T6063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.815333][ T6063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.903241][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.934647][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.994538][ T6063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.012071][ T6063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.052367][T19188] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 601.135637][T18979] team0: Port device team_slave_0 added [ 601.150060][T18979] team0: Port device team_slave_1 added [ 601.167861][ T5643] Bluetooth: hci2: command tx timeout [ 601.239347][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.246698][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.276646][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.294477][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.301855][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.364154][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.504934][T19102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.697038][T18979] hsr_slave_0: entered promiscuous mode [ 601.716659][T18979] hsr_slave_1: entered promiscuous mode [ 601.746928][T18979] debugfs: 'hsr0' already exists in 'hsr' [ 601.766319][T18979] Cannot create hsr debugfs directory [ 601.774504][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'. [ 602.129899][ T6063] pim6reg527: left allmulticast mode [ 602.149961][ T6063] dvmrp0: left allmulticast mode [ 602.282818][T19225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3427'. [ 602.662592][T19238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3431'. [ 602.751582][ T6063] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 602.931721][T19250] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.3431'. [ 603.253327][ T5643] Bluetooth: hci2: command tx timeout [ 603.385561][ T6063] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 603.393772][ T6063] bridge2 (unregistering): left promiscuous mode [ 603.433205][ T6063] bond1 (unregistering): Released all slaves [ 603.455882][ T6063] bond2 (unregistering): Released all slaves [ 603.474291][ T6063] bond3 (unregistering): Released all slaves [ 603.492577][ T6063] bond4 (unregistering): Released all slaves [ 603.522531][ T6063] bond0 (unregistering): Released all slaves [ 603.553220][ T6063] bond5 (unregistering): Released all slaves [ 603.578358][ T6063] bond6 (unregistering): Released all slaves [ 603.594522][ T6063] bond7 (unregistering): Released all slaves [ 603.622220][T19219] mac80211_hwsim hwsim23 ÿ: renamed from wlan1 (while UP) [ 603.648453][T19227] pim6reg: entered allmulticast mode [ 604.033092][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 604.085167][ T6063] tipc: Disabling bearer [ 604.091845][ T6063] tipc: Left network mode [ 604.240234][T19274] gretap1: entered promiscuous mode [ 604.264319][T19274] batman_adv: batadv0: Adding interface: gretap1 [ 604.284626][T19274] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 604.338796][T19274] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 604.461998][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3438'. [ 604.560273][T19281] netlink: 'syz.1.3438': attribute type 1 has an invalid length. [ 605.363838][ T6063] hsr_slave_0: left promiscuous mode [ 605.374520][ T6063] hsr_slave_1: left promiscuous mode [ 605.382453][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.419426][T19326] netlink: 'syz.4.3446': attribute type 9 has an invalid length. [ 605.427480][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.511545][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 605.533493][ T6063] veth1_macvtap: left promiscuous mode [ 605.541450][T19331] netlink: 'syz.3.3447': attribute type 1 has an invalid length. [ 605.550559][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'. [ 605.560139][ T6063] veth0_macvtap: left promiscuous mode [ 605.566123][ T6063] veth1_vlan: left promiscuous mode [ 605.861265][T19344] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 605.880712][T19344] netlink: 'syz.0.3449': attribute type 3 has an invalid length. [ 605.903287][T19344] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3449'. [ 606.186628][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 606.463276][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 606.563029][T19323] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.593069][T19323] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.620081][T19323] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.651681][T19323] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.829518][T19357] netlink: 'syz.0.3453': attribute type 1 has an invalid length. [ 607.036708][T19362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3454'. [ 607.389973][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 607.519452][T19382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.678911][ T6063] IPVS: stop unused estimator thread 0... [ 608.001333][T19395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3460'. [ 608.075714][T19388] pim6reg: left allmulticast mode [ 608.140964][T19397] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3460'. [ 608.360486][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'. [ 608.428882][T19408] syzkaller0: entered promiscuous mode [ 608.436577][T19408] syzkaller0: entered allmulticast mode [ 608.448490][T18979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 608.483865][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.511077][T18979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 608.531828][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.591110][T19405] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3463'. [ 608.603556][T19405] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3463'. [ 608.628626][T18979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 608.654118][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.683919][T18979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 608.702739][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 609.100233][T19437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.146072][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.217361][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.273691][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.281228][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.377480][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.384710][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.427312][T19448] netlink: 'syz.3.3471': attribute type 11 has an invalid length. [ 610.943470][T19505] xt_hashlimit: overflow, try lower: 3/0 [ 610.989056][T19505] netlink: 'syz.4.3486': attribute type 12 has an invalid length. [ 611.052940][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.088411][ T5635] Bluetooth: hci2: command 0x0405 tx timeout [ 611.134794][ T30] audit: type=1804 audit(1782677141.311:14): pid=19508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3487" name="/newroot/63/cgroup.controllers" dev="tmpfs" ino=339 res=1 errno=0 [ 611.189617][ T30] audit: type=1800 audit(1782677141.311:15): pid=19508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3487" name="cgroup.controllers" dev="tmpfs" ino=339 res=0 errno=0 [ 611.445645][T18979] veth0_vlan: entered promiscuous mode [ 611.482371][T18979] veth1_vlan: entered promiscuous mode [ 611.573383][T19525] __nla_validate_parse: 33 callbacks suppressed [ 611.573406][T19525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3493'. [ 611.614110][T19526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3491'. [ 611.648366][T18979] veth0_macvtap: entered promiscuous mode [ 611.684898][T19533] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 611.700309][T18979] veth1_macvtap: entered promiscuous mode [ 611.704390][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3494'. [ 611.832079][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.863211][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.936735][T19325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.948715][T19540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.956119][T19540] IPv6: NLM_F_CREATE should be set when creating new route [ 611.963694][T19540] IPv6: NLM_F_CREATE should be set when creating new route [ 611.971050][T19540] IPv6: NLM_F_CREATE should be set when creating new route [ 611.979181][T19325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.010972][T19325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.032991][T19540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.053783][T19325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.309234][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.334448][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.414127][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 612.424518][T19551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 612.466971][T19557] gtp1: entered promiscuous mode [ 612.481401][T19557] gtp1: entered allmulticast mode [ 612.526212][T19560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3502'. [ 612.537100][T19324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.547162][T19324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.558953][T19560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3502'. [ 612.895470][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'. [ 613.013913][T19569] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 613.116414][T19576] macvlan2: entered promiscuous mode [ 613.154451][T19576] macvlan2: entered allmulticast mode [ 613.176815][T19576] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 613.376466][T19586] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3508'. [ 613.616139][T19600] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3511'. [ 613.664532][T19600] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3511'. [ 613.679046][T19602] netlink: 'syz.3.3511': attribute type 1 has an invalid length. [ 613.831051][T19610] netlink: 'syz.3.3511': attribute type 3 has an invalid length. [ 613.889181][T19602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 613.914147][T19600] dummy0: left promiscuous mode [ 613.949222][T19600] dummy0: left allmulticast mode [ 614.006274][T19600] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 614.009600][ T6063] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 614.238277][ T6063] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 614.862008][T19647] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 614.907988][T19647] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 614.974724][T19647] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 615.010714][T19653] netlink: 'syz.4.3527': attribute type 10 has an invalid length. [ 615.076104][T19653] bond4: (slave veth0_to_bond): Releasing backup interface [ 615.143751][T19664] netlink: 'syz.2.3529': attribute type 23 has an invalid length. [ 615.286250][T19669] block nbd0: Unsupported socket: should be TCP or UNIX. [ 616.061962][T19713] netlink: 'syz.4.3542': attribute type 1 has an invalid length. [ 616.236181][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.244171][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.340354][T19707] bridge_slave_0: left allmulticast mode [ 616.346184][T19707] bridge_slave_0: left promiscuous mode [ 616.355617][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.385836][T19707] bridge_slave_1: left promiscuous mode [ 616.392838][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.439906][T19707] bond0: (slave bond_slave_0): Releasing backup interface [ 616.503955][T19707] bond0: (slave bond_slave_1): Releasing backup interface [ 616.527885][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 616.567188][T19707] team0: Port device team_slave_0 removed [ 616.596599][T19707] team0: Port device team_slave_1 removed [ 616.613425][T19707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.630808][T19707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.644696][T19707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.656997][T19707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.765357][T19707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.106304][T19743] xt_hashlimit: size too large, truncated to 1048576 [ 617.144889][T19747] xt_hashlimit: size too large, truncated to 1048576 [ 617.210857][T19751] __nla_validate_parse: 8 callbacks suppressed [ 617.210877][T19751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3548'. [ 617.334154][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3549'. [ 617.375876][T19757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3549'. [ 617.576477][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'. [ 617.692872][T19767] netlink: 'syz.2.3553': attribute type 2 has an invalid length. [ 617.755707][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3553'. [ 617.848522][T19774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3554'. [ 618.210812][T19786] netlink: 'syz.2.3557': attribute type 10 has an invalid length. [ 618.283582][T19786] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 618.328524][T19782] netlink: 'syz.2.3557': attribute type 5 has an invalid length. [ 618.374652][T19790] tipc: Enabling of bearer rejected, failed to enable media [ 618.612561][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 618.845516][T19818] smc: net device team0 applied user defined pnetid SYZ2 [ 619.491802][T19825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.589099][T19852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3577'. [ 619.914784][T19825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.960140][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 620.320632][T19857] netlink: 'syz.3.3578': attribute type 1 has an invalid length. [ 620.642285][T19825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.648744][T19882] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3584'. [ 620.686510][T19882] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 620.913144][T19825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.065913][T19900] syzkaller1: entered promiscuous mode [ 621.072198][T19900] syzkaller1: entered allmulticast mode [ 621.344922][T19325] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.423908][ T6063] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.506873][T19324] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.576551][T19928] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 621.588624][ T994] IPVS: starting estimator thread 0... [ 621.630142][T19324] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.696849][T19931] IPVS: using max 25 ests per chain, 60000 per kthread [ 622.225176][T19961] __nla_validate_parse: 12 callbacks suppressed [ 622.225199][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3603'. [ 622.257048][T19959] tipc: Started in network mode [ 622.264041][T19959] tipc: Node identity 925fa7785ae9, cluster identity 4711 [ 622.294221][T19959] tipc: Enabled bearer , priority 0 [ 622.313647][T19963] syzkaller0: entered promiscuous mode [ 622.326217][T19963] syzkaller0: entered allmulticast mode [ 622.412049][T19963] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 622.622804][T19971] tipc: Resetting bearer [ 623.009158][T19957] tipc: Resetting bearer [ 623.129507][T19957] tipc: Disabling bearer [ 623.164505][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 623.282335][T19990] vlan2: entered allmulticast mode [ 623.294997][T19990] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 623.679099][T20011] sctp: [Deprecated]: syz.1.3620 (pid 20011) Use of int in max_burst socket option deprecated. [ 623.679099][T20011] Use struct sctp_assoc_value instead [ 623.734399][T20010] sctp: [Deprecated]: syz.1.3620 (pid 20010) Use of int in max_burst socket option deprecated. [ 623.734399][T20010] Use struct sctp_assoc_value instead [ 623.867066][T20019] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 623.891353][T20019] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3622'. [ 624.106863][T20026] netlink: 'syz.3.3625': attribute type 2 has an invalid length. [ 624.123920][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'. [ 624.241220][T20012] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3621'. [ 624.251591][T20012] netlink: 'syz.0.3621': attribute type 13 has an invalid length. [ 624.520012][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3631'. [ 624.691619][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.805860][T20054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'. [ 624.819271][T20054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.847133][T20058] netlink: 'syz.2.3636': attribute type 1 has an invalid length. [ 624.856014][T20058] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3636'. [ 624.973713][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3638'. [ 624.989256][T20062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.191650][T20071] vcan1: entered promiscuous mode [ 625.196908][T20071] vcan1: entered allmulticast mode [ 625.231137][T20072] vcan2: entered promiscuous mode [ 625.236890][T20072] vcan2: entered allmulticast mode [ 625.385588][T20077] netlink: 'syz.2.3643': attribute type 39 has an invalid length. [ 625.561997][T20087] netlink: 'syz.0.3645': attribute type 21 has an invalid length. [ 625.598616][T20087] IPv6: NLM_F_CREATE should be specified when creating new route [ 625.651678][T20087] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3645'. [ 625.753270][T20088] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 625.919939][T20105] netlink: 'syz.0.3650': attribute type 10 has an invalid length. [ 626.008228][T20105] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.042652][T20105] bond0: (slave team0): Enslaving as an active interface with an up link [ 626.455623][T20127] netlink: 'syz.1.3654': attribute type 16 has an invalid length. [ 626.514148][T20127] netlink: 'syz.1.3654': attribute type 17 has an invalid length. [ 626.531690][T20135] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 626.614946][T20130] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002 [ 626.736985][T20127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.747045][T20127] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.761222][T20127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.802876][T20127] bridge_slave_1: left allmulticast mode [ 626.900496][T20127] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 626.910896][T20127] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 626.918495][T20127] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 627.219208][T20151] netlink: 'syz.2.3665': attribute type 1 has an invalid length. [ 627.262970][T20153] pim6reg: entered allmulticast mode [ 627.268891][T20155] __nla_validate_parse: 5 callbacks suppressed [ 627.268910][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 627.338652][T20151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 627.372888][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3667'. [ 627.416910][T20159] bond1: (slave veth5): Enslaving as an active interface with a down link [ 627.428508][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 627.439162][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 627.460091][T20151] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 627.472264][T20151] bond1: (slave batadv1): making interface the new active one [ 627.482229][T20151] batadv1: entered promiscuous mode [ 627.488974][T20151] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 627.528396][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 627.565765][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 627.816243][T20165] bond5: entered promiscuous mode [ 627.844195][T20177] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3671'. [ 627.870528][T20165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.936754][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3673'. [ 627.964562][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'. [ 627.984598][T20165] bond5: (slave bridge2): making interface the new active one [ 627.994012][T20165] bridge2: entered promiscuous mode [ 628.008386][T20165] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 628.183692][T20184] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 628.288749][T20182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.472381][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3678'. [ 629.321295][T20234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.641221][T20259] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.649274][T20259] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.886345][T20273] validate_nla: 2 callbacks suppressed [ 629.886365][T20273] netlink: 'syz.3.3697': attribute type 7 has an invalid length. [ 629.981722][T20273] netlink: 'syz.3.3697': attribute type 7 has an invalid length. [ 630.394083][T20292] IPVS: persistence engine module ip_vs_pe_À not found [ 630.421556][T20297] nbd: socks must be embedded in a SOCK_ITEM attr [ 631.159307][T20326] lo speed is unknown, defaulting to 1000 [ 631.180243][T20326] lo speed is unknown, defaulting to 1000 [ 631.200149][T20326] lo speed is unknown, defaulting to 1000 [ 631.232282][T20326] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 631.253291][T20326] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 631.274274][T20326] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 631.317174][T20326] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 631.318491][T20328] syzkaller0: entered promiscuous mode [ 631.346783][T20328] syzkaller0: entered allmulticast mode [ 631.415646][T20332] netlink: 'syz.1.3715': attribute type 10 has an invalid length. [ 631.504302][T20326] lo speed is unknown, defaulting to 1000 [ 631.529553][T20326] lo speed is unknown, defaulting to 1000 [ 631.555762][T20326] lo speed is unknown, defaulting to 1000 [ 631.581682][T20326] lo speed is unknown, defaulting to 1000 [ 631.600809][T20326] lo speed is unknown, defaulting to 1000 [ 631.619913][T20326] lo speed is unknown, defaulting to 1000 [ 631.638932][T20326] lo speed is unknown, defaulting to 1000 [ 631.908023][T20344] syzkaller0: entered promiscuous mode [ 631.930851][T20344] syzkaller0: entered allmulticast mode [ 635.405264][T20354] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 635.427709][T20354] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 635.444187][T20356] netlink: 'syz.1.3721': attribute type 12 has an invalid length. [ 635.506558][T20361] __nla_validate_parse: 19 callbacks suppressed [ 635.506583][T20361] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3723'. [ 635.838457][T20377] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3727'. [ 638.627490][T19324] batadv1: left promiscuous mode [ 657.426413][T20408] netlink: 'syz.1.3739': attribute type 1 has an invalid length. [ 657.497397][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 657.627636][T20408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 657.650457][T20422] netlink: 'syz.4.3743': attribute type 3 has an invalid length. [ 657.658488][T20422] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3743'. [ 657.681166][ T5635] Bluetooth: hci2: link tx timeout [ 657.694112][ T5635] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 657.739203][T20408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 657.756896][T20411] vlan3: entered promiscuous mode [ 657.782303][T20411] bond5: entered promiscuous mode [ 657.788823][T20411] vlan3: entered allmulticast mode [ 657.794063][T20411] bond5: entered allmulticast mode [ 657.844965][T20418] bond5: (slave bridge1): making interface the new active one [ 657.857684][T20418] bridge1: entered promiscuous mode [ 657.883719][T20418] bridge1: entered allmulticast mode [ 657.902631][T20418] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 658.004326][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3746'. [ 658.078355][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 658.166472][T20434] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 658.201193][T20434] bond4 (unregistering): Released all slaves [ 658.314163][T20444] netlink: 'syz.1.3751': attribute type 8 has an invalid length. [ 658.444546][T20453] erspan0: entered allmulticast mode [ 658.608388][T20462] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3756'. [ 658.629968][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'. [ 658.834613][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'. [ 658.863202][T20471] tipc: Started in network mode [ 658.883168][T20471] tipc: Node identity 080211000001, cluster identity 91 [ 658.897869][T20471] tipc: Enabled bearer , priority 0 [ 658.945384][T20471] tipc: Resetting bearer [ 659.160848][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3762'. [ 659.291759][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'. [ 659.720828][T20514] netlink: 'syz.3.3772': attribute type 1 has an invalid length. [ 659.729345][ T5635] Bluetooth: hci2: command 0x0405 tx timeout [ 659.758798][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3772'. [ 659.895738][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 659.961199][ T5775] tipc: Node number set to 134418688 [ 660.530364][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.620459][T20505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.630197][T20515] block nbd4: not configured, cannot reconfigure [ 662.838326][T20549] xfrm1: entered allmulticast mode [ 662.989417][T14178] IPVS: starting estimator thread 0... [ 662.992472][T20555] syzkaller0: entered promiscuous mode [ 663.026706][T20555] syzkaller0: entered allmulticast mode [ 663.043206][T20563] netlink: 'syz.0.3785': attribute type 1 has an invalid length. [ 663.056942][T20555] team0: entered promiscuous mode [ 663.075245][T20555] team_slave_0: entered promiscuous mode [ 663.087732][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 663.107819][T20555] team_slave_1: entered promiscuous mode [ 663.113999][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 663.127730][T20560] IPVS: using max 28 ests per chain, 67200 per kthread [ 663.264473][T20572] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3787'. [ 663.293997][T20574] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3788'. [ 663.520866][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3791'. [ 663.945135][T20605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 664.113507][T20615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3803'. [ 664.266712][T20620] netlink: 'syz.2.3806': attribute type 1 has an invalid length. [ 664.545989][T20630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3811'. [ 664.595258][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'. [ 664.635841][T20630] vlan0: entered promiscuous mode [ 664.803888][T20639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3815'. [ 664.829748][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 664.876988][T20641] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 665.098705][T20641] lo speed is unknown, defaulting to 1000 [ 665.132313][T20641] lo speed is unknown, defaulting to 1000 [ 665.151858][T20641] lo speed is unknown, defaulting to 1000 [ 665.716276][T20680] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 665.949172][T20641] infiniband sz1: set active [ 665.958325][ T994] lo speed is unknown, defaulting to 1000 [ 665.972102][T20641] infiniband sz1: added lo [ 666.012938][T20641] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 666.051853][T20641] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 666.070949][T20641] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 666.164943][T20641] RDS/IB: sz1: added [ 666.178305][T20641] smc: adding ib device sz1 with port count 1 [ 666.206875][T20641] smc: ib device sz1 port 1 has no pnetid [ 666.239371][ T994] lo speed is unknown, defaulting to 1000 [ 666.264158][T20641] lo speed is unknown, defaulting to 1000 [ 667.015091][T20641] lo speed is unknown, defaulting to 1000 [ 667.081658][T20740] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 667.131682][T20740] gtp0: entered promiscuous mode [ 667.146824][T20740] gtp0: entered allmulticast mode [ 667.247728][T19323] wlan1: Trigger new scan to find an IBSS to join [ 667.358647][T20751] netlink: 'syz.3.3846': attribute type 5 has an invalid length. [ 667.383154][T20754] netlink: 'syz.3.3846': attribute type 11 has an invalid length. [ 667.460794][T20751] tipc: Started in network mode [ 667.474470][T20751] tipc: Node identity e0000001, cluster identity 4711 [ 667.497595][T20751] tipc: Enabling of bearer rejected, failed to enable media [ 667.641969][T20764] netlink: 'syz.4.3850': attribute type 1 has an invalid length. [ 667.730131][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 667.812031][T20765] macvlan3: entered promiscuous mode [ 667.825706][T20765] macvlan3: entered allmulticast mode [ 667.838799][T20765] bond6: entered promiscuous mode [ 667.865029][T20765] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 667.916007][T20765] bond6: left promiscuous mode [ 667.934667][T20641] lo speed is unknown, defaulting to 1000 [ 668.076553][T20785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.215360][T20785] __nla_validate_parse: 9 callbacks suppressed [ 668.215382][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'. [ 668.613496][T20807] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3862'. [ 668.683511][T20819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3865'. [ 668.738528][T20819] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.759535][T20819] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 668.801846][T20819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3865'. [ 668.824631][T20819] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3865'. [ 668.858310][T20641] lo speed is unknown, defaulting to 1000 [ 668.895191][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3868'. [ 668.907112][T20828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3868'. [ 669.003751][T20832] netlink: 'syz.4.3867': attribute type 1 has an invalid length. [ 669.022376][T20832] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3867'. [ 669.042901][T20832] netlink: 'syz.4.3867': attribute type 1 has an invalid length. [ 669.199775][T20832] 8021q: adding VLAN 0 to HW filter on device bond7 [ 669.210304][T20832] bond0: (slave bond7): Enslaving as an active interface with an up link [ 669.551134][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 669.563987][T20641] lo speed is unknown, defaulting to 1000 [ 669.682031][ T5775] IPVS: starting estimator thread 0... [ 669.741593][T20857] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 669.770289][T20861] IPVS: set_ctl: invalid protocol: 18 12.0.0.0:2048 [ 669.830310][T20856] IPVS: using max 29 ests per chain, 69600 per kthread [ 669.869943][T20862] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3876'. [ 670.208120][T19321] wlan1: Trigger new scan to find an IBSS to join [ 670.492832][T20897] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 670.855827][T20641] lo speed is unknown, defaulting to 1000 [ 671.274715][T20927] netlink: 'syz.3.3893': attribute type 3 has an invalid length. [ 671.347016][T20641] lo speed is unknown, defaulting to 1000 [ 671.669879][T20941] netlink: 'syz.0.3898': attribute type 1 has an invalid length. [ 671.789239][T20946] IPVS: length: 81 != 24 [ 671.855204][T20951] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 672.057793][T19321] bond3: (slave dummy0): link status up again after 0 ms [ 672.098247][T19321] bond3: (slave dummy0): link status up again after 0 ms [ 672.116497][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 672.228849][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 672.328219][T20964] netlink: 'syz.3.3905': attribute type 2 has an invalid length. [ 672.360098][T20964] pim6reg1: entered promiscuous mode [ 672.365647][T20964] pim6reg1: entered allmulticast mode [ 672.380469][T20964] Cannot find set identified by id 0 to match [ 672.388724][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 672.498005][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 672.617837][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 672.688562][ T5643] Bluetooth: hci2: command 0x0405 tx timeout [ 672.742710][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 673.015370][T20985] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 673.056241][T20989] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 673.209287][T21000] ip6gre1: entered allmulticast mode [ 673.215192][T20993] can: request_module (can-proto-4) failed. [ 673.267854][ T6063] net_ratelimit: 1 callbacks suppressed [ 673.267875][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 673.411096][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 673.461171][T21011] netlink: 'syz.4.3920': attribute type 1 has an invalid length. [ 673.554321][T21019] __nla_validate_parse: 9 callbacks suppressed [ 673.554342][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3922'. [ 673.594268][T21019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3922'. [ 673.607956][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 673.727789][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 673.877151][T21027] batadv_slave_0: entered promiscuous mode [ 673.901388][T21033] netlink: 'syz.1.3928': attribute type 23 has an invalid length. [ 673.915285][T21027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'. [ 673.936515][T21027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.016969][T21038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3930'. [ 674.033357][T21027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.090766][T21044] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3931'. [ 674.208417][ T6080] bond3: (slave dummy0): failed to get link speed/duplex [ 674.327988][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 674.423524][T21055] bond0: (slave bond_slave_0): Releasing backup interface [ 674.603206][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 674.771226][ T5643] Bluetooth: hci2: command 0x0405 tx timeout [ 674.784711][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'. [ 674.799832][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'. [ 674.908469][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 675.020472][ T6080] bond3: (slave dummy0): failed to get link speed/duplex [ 675.149822][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 675.168365][T19323] wlan1: Trigger new scan to find an IBSS to join [ 675.335856][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c7f6c00: rx timeout, send abort [ 675.542934][T21116] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 675.555502][T21116] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 675.582748][T21116] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 675.844288][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c7f6c00: abort rx timeout. Force session deactivation [ 675.988037][T21137] netlink: 'syz.1.3961': attribute type 11 has an invalid length. [ 676.000892][T21137] netlink: 'syz.1.3961': attribute type 11 has an invalid length. [ 676.020268][T21137] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3961'. [ 676.229444][T21147] netlink: 'syz.1.3965': attribute type 3 has an invalid length. [ 676.330270][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'. [ 676.477890][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3968'. [ 676.914044][T21167] syzkaller0: entered promiscuous mode [ 676.955065][T21182] netlink: 'syz.3.3972': attribute type 1 has an invalid length. [ 676.985286][T21167] syzkaller0: entered allmulticast mode [ 677.006816][T21171] syzkaller1: entered promiscuous mode [ 677.018159][T21171] syzkaller1: entered allmulticast mode [ 677.644304][T21204] vcan0: tx address claim with dest, not broadcast [ 678.208348][ T6063] wlan1: Trigger new scan to find an IBSS to join [ 680.118091][T19321] net_ratelimit: 12 callbacks suppressed [ 680.118111][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 680.157439][T21217] __nla_validate_parse: 3 callbacks suppressed [ 680.157459][T21217] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3983'. [ 680.238676][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 680.375889][T21227] netlink: 'syz.1.3986': attribute type 1 has an invalid length. [ 680.439941][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'. [ 680.450430][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'. [ 680.571134][T21238] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3988'. [ 680.601492][T21227] bond6: entered promiscuous mode [ 680.642464][T21227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 680.678128][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 680.727785][T21234] bond6: (slave bridge3): making interface the new active one [ 680.737000][T21234] bridge3: entered promiscuous mode [ 680.745329][T21234] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 680.785004][T21243] tipc: Enabling of bearer rejected, failed to enable media [ 680.790283][ T5756] hid-generic 0005:04F3:0440.0004: item fetching failed at offset 0/1 [ 680.804219][ T5756] hid-generic 0005:04F3:0440.0004: probe with driver hid-generic failed with error -22 [ 680.830856][T21245] syzkaller0: entered promiscuous mode [ 680.836705][T21245] syzkaller0: entered allmulticast mode [ 681.138191][ T6080] bond3: (slave dummy0): failed to get link speed/duplex [ 681.212917][T21260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3993'. [ 681.250586][ T6063] wlan1: Trigger new scan to find an IBSS to join [ 681.281689][T21260] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 681.299141][T21260] bond8 (unregistering): Released all slaves [ 681.342643][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'. [ 681.389655][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'. [ 681.523274][T21270] bond2: option xmit_hash_policy: invalid value (64) [ 681.570772][T21270] bond2 (unregistering): Released all slaves [ 681.708071][ T6080] bond3: (slave dummy0): failed to get link speed/duplex [ 681.753674][T21281] syzkaller1: entered promiscuous mode [ 681.780955][T21281] syzkaller1: entered allmulticast mode [ 681.876971][T21289] pimreg: entered allmulticast mode [ 681.917908][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 681.981071][T21296] tipc: Enabling of bearer rejected, failed to enable media [ 682.013081][T21296] xt_socket: unknown flags 0x50 [ 682.063012][T21295] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 682.097993][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 682.179823][ T6063] wlan1: Creating new IBSS network, BSSID 56:45:08:ff:f4:0a [ 682.218539][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 682.233719][T21308] xt_nat: multiple ranges no longer supported [ 682.254990][T21310] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 682.272208][T21310] netlink: 'syz.2.4007': attribute type 2 has an invalid length. [ 682.281995][T21310] netlink: 'syz.2.4007': attribute type 8 has an invalid length. [ 682.292147][T21310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4007'. [ 682.321159][T21310] netlink: 'syz.2.4007': attribute type 1 has an invalid length. [ 682.338212][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 682.417940][T21314] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4010'. [ 682.441445][T21316] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4011'. [ 682.451913][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 683.257954][T21354] netlink: 'syz.0.4022': attribute type 1 has an invalid length. [ 683.681794][ T30] audit: type=1804 audit(1782677213.861:16): pid=21367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4026" name="/newroot/271/cgroup.controllers" dev="tmpfs" ino=1403 res=1 errno=0 [ 683.730673][ T30] audit: type=1800 audit(1782677213.861:17): pid=21367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4026" name="cgroup.controllers" dev="tmpfs" ino=1403 res=0 errno=0 [ 683.774192][T21360] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.782089][T21360] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.848654][T21360] team0: left promiscuous mode [ 683.857091][T21360] team_slave_0: left promiscuous mode [ 683.875840][T21360] team_slave_1: left promiscuous mode [ 683.971228][ T5643] Bluetooth: hci2: command 0x0405 tx timeout [ 684.023802][T21360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.041009][T21360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.198564][T21360] vcan1: left promiscuous mode [ 684.203730][T21360] vcan2: left promiscuous mode [ 684.237708][T14178] lo speed is unknown, defaulting to 1000 [ 684.247350][T14178] sz1: Port: 1 Link DOWN [ 684.273323][ T6080] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.289801][ T6080] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.319913][T14178] lo speed is unknown, defaulting to 1000 [ 684.390186][ T6080] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.431586][ T6080] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.626996][T21384] netlink: 'syz.2.4029': attribute type 1 has an invalid length. [ 685.227748][T19323] net_ratelimit: 10 callbacks suppressed [ 685.227767][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 685.398192][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 685.527819][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 685.542969][T21413] __nla_validate_parse: 8 callbacks suppressed [ 685.542990][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4040'. [ 685.618796][T21413] gtp1: entered promiscuous mode [ 685.639919][T21413] gtp1: entered allmulticast mode [ 685.769771][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 685.897381][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 686.100681][ T6080] bond3: (slave dummy0): failed to get link speed/duplex [ 686.133688][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.174283][T21434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4048'. [ 686.237733][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 686.372204][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 686.508155][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 686.638238][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 686.695431][T21456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4055'. [ 687.052594][T21473] netlink: 'syz.0.4058': attribute type 30 has an invalid length. [ 687.091752][T21474] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 687.122730][T21473] bond5: option arp_missed_max: invalid value (0) [ 687.138195][T21473] bond5: option arp_missed_max: allowed values 1 - 255 [ 687.151521][T21473] bond5 (unregistering): Released all slaves [ 687.191015][T21474] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 687.750692][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4067'. [ 687.782600][T21512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.865458][T21524] vcan1: left allmulticast mode [ 687.884558][T21524] vcan2: left allmulticast mode [ 687.995593][T21531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.020300][T21533] netlink: 'syz.1.4072': attribute type 3 has an invalid length. [ 688.029415][T21531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4071'. [ 688.046596][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4070'. [ 688.050156][T21533] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4072'. [ 688.082280][T21531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.094790][T21531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.193770][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4074'. [ 688.229015][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4074'. [ 688.560950][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 688.714907][T21566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 688.776605][T21566] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 688.810660][T21566] gretap2: entered promiscuous mode [ 688.832840][T21566] gretap2: entered allmulticast mode [ 689.125561][T21584] netlink: 'syz.3.4082': attribute type 1 has an invalid length. [ 689.314557][T21584] bond4: entered promiscuous mode [ 689.339688][T21584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 689.376091][T21578] sit0: entered promiscuous mode [ 689.402552][T21578] sit0: entered allmulticast mode [ 689.610417][T21600] netlink: 'syz.3.4087': attribute type 20 has an invalid length. [ 689.737098][T21610] syzkaller0: entered promiscuous mode [ 689.746350][T21610] syzkaller0: entered allmulticast mode [ 690.319534][ T6063] net_ratelimit: 19 callbacks suppressed [ 690.319555][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 690.453327][T21643] bond2: option lp_interval: invalid value (0) [ 690.463523][T21643] bond2: option lp_interval: allowed values 1 - 2147483647 [ 690.476751][T21643] bond2 (unregistering): Released all slaves [ 690.547354][T21648] xt_hashlimit: size too large, truncated to 1048576 [ 690.554302][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 690.677416][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 690.798474][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 690.927648][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 691.003178][T21665] xt_TPROXY: Can be used only with -p tcp or -p udp [ 691.022647][T21668] __nla_validate_parse: 5 callbacks suppressed [ 691.022667][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4107'. [ 691.057862][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 691.178712][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 691.478011][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 691.599291][T21691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4115'. [ 691.609156][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 691.636659][T21691] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4115'. [ 691.674777][T21691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4115'. [ 691.743820][T21696] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.4116'. [ 691.838914][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 691.896057][T21661] x_tables: duplicate underflow at hook 2 [ 692.689126][T21750] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4128'. [ 692.975830][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'. [ 693.025301][T21763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4133'. [ 693.105533][T21771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4136'. [ 693.142417][T21771] netlink: 'syz.1.4136': attribute type 21 has an invalid length. [ 693.172329][T21771] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4136'. [ 693.279503][T21778] syzkaller0: entered promiscuous mode [ 693.303649][T21778] syzkaller0: entered allmulticast mode [ 693.365327][T21784] netlink: 'syz.1.4142': attribute type 1 has an invalid length. [ 693.568866][T21784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 694.043378][ T747] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.067409][ T747] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.094046][ T747] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.121304][ T747] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.293813][T21827] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 694.429594][T21827] bond2: entered promiscuous mode [ 694.459123][T21827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.964545][T21854] netlink: 'syz.2.4155': attribute type 12 has an invalid length. [ 695.083532][T21867] veth0: entered promiscuous mode [ 695.146707][T21867] batadv_slave_1: entered promiscuous mode [ 695.166488][T21865] batadv_slave_1: left promiscuous mode [ 695.198172][T21865] veth0: left promiscuous mode [ 695.509533][ T1010] net_ratelimit: 21 callbacks suppressed [ 695.509556][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 695.708245][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 695.947647][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 696.071551][T21912] __nla_validate_parse: 12 callbacks suppressed [ 696.071574][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4166'. [ 696.087908][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 696.198352][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 696.244854][T21926] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 696.298691][T21928] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 696.312370][T21928] batman_adv: batadv0: Adding interface: gretap2 [ 696.322963][T21928] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.349309][T21928] batman_adv: batadv0: Interface activated: gretap2 [ 696.389550][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 696.474088][T21936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4174'. [ 696.507980][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 696.627450][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 696.661353][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4176'. [ 696.747575][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 696.868089][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 698.451388][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 699.120860][T21923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.528052][ T747] net_ratelimit: 32 callbacks suppressed [ 700.528077][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 700.647813][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 700.757787][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 700.867477][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 700.977812][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 701.087714][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 701.207705][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 701.317486][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 701.427794][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 701.537495][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 705.637721][T19324] net_ratelimit: 36 callbacks suppressed [ 705.637747][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 705.757440][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 705.867645][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 705.987837][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 706.097709][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 706.207694][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 706.317704][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 706.427831][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 706.537478][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 706.647826][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 710.727457][T19325] net_ratelimit: 36 callbacks suppressed [ 710.727481][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 710.849414][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 710.958014][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 711.067703][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 711.177405][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 711.287467][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 711.397761][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 711.507507][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 711.617930][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 711.730035][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 715.837779][ T747] net_ratelimit: 36 callbacks suppressed [ 715.837804][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 715.967551][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 716.077612][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 716.187470][ T747] bond3: (slave dummy0): failed to get link speed/duplex [ 716.307495][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 716.417443][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 716.537998][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 716.647473][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 716.757478][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 716.867977][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 718.603986][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 718.652146][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 718.695767][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 718.872796][T21983] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 718.934144][T21983] bond8: (slave lo): Enslaving as an active interface with an up link [ 718.978988][T21985] vlan1: entered allmulticast mode [ 719.003740][T21985] veth0_vlan: entered allmulticast mode [ 719.028257][ T994] lo speed is unknown, defaulting to 1000 [ 719.041347][T14178] lo speed is unknown, defaulting to 1000 [ 719.058205][ T994] syú2: Port: 1 Link ACTIVE [ 719.285545][T22013] netlink: 'syz.4.4190': attribute type 1 has an invalid length. [ 719.482105][T22013] bond9: entered promiscuous mode [ 719.496525][T22013] 8021q: adding VLAN 0 to HW filter on device bond9 [ 719.589046][T22008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4190'. [ 720.225407][T22052] netlink: 'syz.3.4198': attribute type 16 has an invalid length. [ 720.240563][T22058] netlink: 'syz.4.4200': attribute type 12 has an invalid length. [ 720.255881][T22052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4198'. [ 720.461312][T22065] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 720.867854][ T1010] net_ratelimit: 30 callbacks suppressed [ 720.867877][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 720.994531][T22090] syzkaller1: entered promiscuous mode [ 721.019902][T22090] syzkaller1: entered allmulticast mode [ 721.038491][T22096] mac80211_hwsim hwsim21 ÿ: renamed from wlan1 [ 721.147921][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 721.278546][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 721.410909][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 721.432688][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4218'. [ 721.495018][T22120] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 721.528894][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 721.544503][T22116] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4218'. [ 721.661554][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 721.694188][T22129] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 721.736464][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4223'. [ 721.830983][T22136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4226'. [ 721.848873][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 721.944330][T22141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4226'. [ 722.059815][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 722.137458][T22157] netlink: 'syz.4.4230': attribute type 6 has an invalid length. [ 722.408911][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 722.668573][T22194] GUP no longer grows the stack in syz.0.4240 (22194): 200000003000-20000000a000 (200000001000) [ 722.680676][T22194] CPU: 0 UID: 0 PID: 22194 Comm: syz.0.4240 Not tainted syzkaller #0 PREEMPT(full) [ 722.680710][T22194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.680726][T22194] Call Trace: [ 722.680738][T22194] [ 722.680749][T22194] dump_stack_lvl+0xe8/0x150 [ 722.680788][T22194] __get_user_pages+0x238c/0x2720 [ 722.680823][T22194] ? __gup_longterm_locked+0xc3b/0x15c0 [ 722.680885][T22194] __gup_longterm_locked+0xd52/0x15c0 [ 722.680921][T22194] ? lock_acquire+0x106/0x350 [ 722.681023][T22194] gup_fast_fallback+0x1d8c/0x20e0 [ 722.681051][T22194] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.681186][T22194] ? __pfx_gup_fast_fallback+0x10/0x10 [ 722.681220][T22194] ? is_valid_gup_args+0x11f/0x200 [ 722.681252][T22194] ? get_user_pages_fast+0x4d/0xb0 [ 722.681284][T22194] __iov_iter_get_pages_alloc+0x378/0xa40 [ 722.681364][T22194] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 722.681410][T22194] iov_iter_get_pages2+0x5e/0xa0 [ 722.681437][T22194] __se_sys_vmsplice+0x7b5/0x1660 [ 722.681485][T22194] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 722.681520][T22194] ? __pfx_futex_wake+0x10/0x10 [ 722.681646][T22194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.681676][T22194] do_syscall_64+0x174/0x580 [ 722.681699][T22194] ? clear_bhb_loop+0x40/0x90 [ 722.681728][T22194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.681750][T22194] RIP: 0033:0x7f790ed9ce59 [ 722.681773][T22194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.681791][T22194] RSP: 002b:00007f790fbd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 722.681815][T22194] RAX: ffffffffffffffda RBX: 00007f790f015fa0 RCX: 00007f790ed9ce59 [ 722.681832][T22194] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 722.681847][T22194] RBP: 00007f790ee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 722.681860][T22194] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 722.681873][T22194] R13: 00007f790f016038 R14: 00007f790f015fa0 R15: 00007ffea3decbb8 [ 722.681909][T22194] [ 722.686468][T22194] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 723.126257][T22200] netlink: 'syz.0.4243': attribute type 12 has an invalid length. [ 723.164186][T22202] syzkaller1: entered promiscuous mode [ 723.171317][T22202] syzkaller1: entered allmulticast mode [ 723.502878][T22219] ipt_REJECT: TCP_RESET invalid for non-tcp [ 723.714022][T22229] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4253'. [ 723.765135][T22235] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.4254'. [ 724.042654][T22255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4257'. [ 724.495174][T22269] netlink: 'syz.0.4264': attribute type 9 has an invalid length. [ 724.512318][T22269] netlink: 'syz.0.4264': attribute type 6 has an invalid length. [ 724.535657][T22269] netlink: 'syz.0.4264': attribute type 10 has an invalid length. [ 725.166369][T22297] netlink: 'syz.4.4274': attribute type 3 has an invalid length. [ 725.246637][T22300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4276'. [ 725.382461][T22306] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4278'. [ 725.417396][T22306] xt_hashlimit: size too large, truncated to 1048576 [ 725.835434][T22321] netlink: 'syz.4.4281': attribute type 9 has an invalid length. [ 725.910903][ T1010] net_ratelimit: 31 callbacks suppressed [ 725.910927][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 726.049650][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 726.105253][T22336] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4286'. [ 726.130743][T22334] tipc: Started in network mode [ 726.142090][T22334] tipc: Node identity 967e7bd5c1d6, cluster identity 4711 [ 726.159223][T22334] tipc: Enabled bearer , priority 0 [ 726.197473][T22333] tipc: Disabling bearer [ 726.244407][T22339] netlink: 'syz.1.4287': attribute type 6 has an invalid length. [ 726.257589][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 726.377964][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 726.416418][T22346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4289'. [ 726.464379][T22346] netlink: 804 bytes leftover after parsing attributes in process `syz.3.4289'. [ 726.490351][T22349] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4291'. [ 726.503156][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 726.638185][T22354] gtp2: entered promiscuous mode [ 726.652100][T22354] gtp2: entered allmulticast mode [ 726.687401][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 726.807503][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 726.937648][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 727.021718][T22370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4299'. [ 727.034258][T22370] vlan0: entered promiscuous mode [ 727.057544][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 727.189049][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 727.406861][T22392] netlink: 'syz.0.4306': attribute type 15 has an invalid length. [ 727.472467][T22397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.479856][T22397] IPv6: NLM_F_CREATE should be set when creating new route [ 727.494004][T22392] netlink: 'syz.0.4306': attribute type 15 has an invalid length. [ 727.499203][ T1010] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 727.539506][ T1010] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 727.582655][ T1010] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 727.610466][ T1010] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 727.809619][T22413] blkio.reset_stats is deprecated [ 728.680843][T22419] tipc: Enabling of bearer rejected, failed to enable media [ 729.349019][T22474] __nla_validate_parse: 6 callbacks suppressed [ 729.349043][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4325'. [ 729.442735][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4328'. [ 729.528728][T22474] netlink: 'syz.1.4325': attribute type 12 has an invalid length. [ 729.553337][T22474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4325'. [ 729.809751][T22449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.255376][T22512] netlink: 'syz.3.4337': attribute type 1 has an invalid length. [ 730.351720][T22517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4340'. [ 730.982434][T19324] net_ratelimit: 24 callbacks suppressed [ 730.982457][T19324] bond3: (slave dummy0): failed to get link speed/duplex [ 731.112074][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 731.145186][T22560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4351'. [ 731.188646][T22562] netlink: 'syz.2.4352': attribute type 1 has an invalid length. [ 731.209377][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4352'. [ 731.248101][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 731.377770][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 731.404368][T22573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'. [ 731.449280][T22575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4358'. [ 731.507918][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 731.556229][T22584] bridge_slave_1: left allmulticast mode [ 731.588921][T22584] bridge_slave_1: left promiscuous mode [ 731.616519][T22584] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.664095][T22584] bridge_slave_0: left allmulticast mode [ 731.699674][T22584] bridge_slave_0: left promiscuous mode [ 731.720774][T22584] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.776942][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 731.819773][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 731.879181][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 731.922623][T22598] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1Y#­¦ûËŒ [ 731.922623][T22598] d]WÊ”+NC”m­÷Y<ƒ­9Åê [ 732.060189][T22607] netlink: 'syz.0.4366': attribute type 21 has an invalid length. [ 732.077455][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 732.095565][T22608] netlink: 'syz.4.4367': attribute type 11 has an invalid length. [ 732.121414][T22607] netlink: 'syz.0.4366': attribute type 6 has an invalid length. [ 732.231196][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 732.273120][T22620] syzkaller0: entered promiscuous mode [ 732.299958][T22620] syzkaller0: entered allmulticast mode [ 732.412663][T22632] netlink: 'syz.0.4373': attribute type 1 has an invalid length. [ 732.463106][T22620] netlink: 'syz.2.4369': attribute type 3 has an invalid length. [ 732.497817][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 732.522702][T22635] netlink: 'syz.0.4373': attribute type 1 has an invalid length. [ 732.588249][T22638] netlink: 'syz.3.4375': attribute type 9 has an invalid length. [ 732.620320][T22635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 732.662052][T22632] bond5: (slave gretap3): making interface the new active one [ 732.675670][T22632] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 732.799750][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 733.450202][T22676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 733.645378][T22689] gretap3: entered promiscuous mode [ 734.158452][T22714] team0: Device ipvlan2 failed to register rx_handler [ 734.237134][T22712] macsec1: entered promiscuous mode [ 734.256487][T22712] bridge0: entered promiscuous mode [ 734.269234][T22712] macsec1: entered allmulticast mode [ 734.292648][T22712] bridge0: entered allmulticast mode [ 734.316857][T22712] bridge0: port 1(macsec1) entered blocking state [ 734.344139][T22712] bridge0: port 1(macsec1) entered disabled state [ 734.373186][T22712] bridge0: left allmulticast mode [ 734.388276][T22712] bridge0: left promiscuous mode [ 734.623798][T22732] __nla_validate_parse: 12 callbacks suppressed [ 734.623820][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4403'. [ 734.651856][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4403'. [ 734.740594][T22734] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4402'. [ 734.774705][T22740] validate_nla: 5 callbacks suppressed [ 734.774724][T22740] netlink: 'syz.0.4404': attribute type 83 has an invalid length. [ 734.901120][T22749] netlink: 'syz.2.4407': attribute type 2 has an invalid length. [ 734.990265][T22749] : entered promiscuous mode [ 735.392676][ T30] audit: type=1804 audit(1782677265.571:18): pid=22775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4412" name="/newroot/251/cgroup.controllers" dev="tmpfs" ino=1302 res=1 errno=0 [ 735.450681][ T30] audit: type=1800 audit(1782677265.571:19): pid=22775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4412" name="cgroup.controllers" dev="tmpfs" ino=1302 res=0 errno=0 [ 735.506202][T22765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.616937][T22784] netlink: 'syz.4.4416': attribute type 21 has an invalid length. [ 735.727015][T22786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4418'. [ 735.828236][T22791] syzkaller0: entered promiscuous mode [ 735.858458][T22791] syzkaller0: entered allmulticast mode [ 735.957899][T22798] bond10: option lp_interval: invalid value (0) [ 735.964379][T22798] bond10: option lp_interval: allowed values 1 - 2147483647 [ 735.979187][T22798] bond10 (unregistering): Released all slaves [ 736.020792][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 736.237378][T19321] net_ratelimit: 23 callbacks suppressed [ 736.237401][T19321] bond3: (slave dummy0): failed to get link speed/duplex [ 736.419985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.499105][T22808] bridge4: entered promiscuous mode [ 736.507476][T22808] bridge4: entered allmulticast mode [ 736.537445][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 736.599003][T22813] netlink: 'syz.0.4425': attribute type 11 has an invalid length. [ 736.807688][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 737.045169][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 737.161534][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 737.194141][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4435'. [ 737.277370][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 737.290305][T22863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.397892][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 737.507679][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 739.700378][T22827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.954955][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4447'. [ 740.005881][T22916] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 740.018917][T22916] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 740.059536][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4449'. [ 740.218255][T22924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4452'. [ 740.285176][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4453'. [ 740.309968][T22922] tls_set_device_offload: netdev not found [ 740.339580][T22933] netlink: 'syz.3.4455': attribute type 3 has an invalid length. [ 740.702566][T22948] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 740.768528][T22948] xt_hashlimit: size too large, truncated to 1048576 [ 740.895578][T22958] netlink: 'syz.3.4460': attribute type 12 has an invalid length. [ 741.017929][T22960] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.4464'. [ 741.069847][T22964] netlink: 'syz.4.4463': attribute type 4 has an invalid length. [ 741.118156][T22964] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4463'. [ 741.156191][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4463'. [ 741.206146][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4463'. [ 741.249497][T22967] lo speed is unknown, defaulting to 1000 [ 741.261691][ T6075] net_ratelimit: 31 callbacks suppressed [ 741.261716][ T6075] bond3: (slave dummy0): failed to get link speed/duplex [ 741.282057][T22967] lo speed is unknown, defaulting to 1000 [ 741.389305][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 741.527710][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 741.648879][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 741.880699][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 742.009254][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 742.127830][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 742.247418][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 742.281849][T22999] bridge0: entered promiscuous mode [ 742.297331][T22999] bridge0: entered allmulticast mode [ 742.358678][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 742.467398][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 742.737934][T23019] syzkaller0: entered promiscuous mode [ 742.743598][T23019] syzkaller0: entered allmulticast mode [ 744.180777][T22971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.523385][T23045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4484'. [ 744.644742][ T79] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.659291][ T79] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.664593][T23050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4487'. [ 744.686027][ T79] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.706425][ T79] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.763696][T23050] xt_hashlimit: size too large, truncated to 1048576 [ 744.882424][T23058] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 744.911090][T23058] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 745.139910][T23074] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 745.252915][T23080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.287112][T23080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.306127][T23080] batman_adv: batadv0: Removing interface: gretap1 [ 745.395043][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4498'. [ 745.549310][T23099] netlink: 'syz.3.4501': attribute type 13 has an invalid length. [ 745.746192][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4502'. [ 745.756875][T23103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4502'. [ 745.771783][T23112] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 746.064781][T23128] netlink: 320 bytes leftover after parsing attributes in process `syz.3.4507'. [ 746.262738][T23140] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 746.273927][ T6083] net_ratelimit: 44 callbacks suppressed [ 746.273950][ T6083] bond3: (slave dummy0): link status up again after 0 ms [ 746.290490][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 746.408206][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 746.519015][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 746.628720][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 746.737577][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 746.847892][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 746.957716][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 747.069190][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 747.178598][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 747.574613][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.693982][T23117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.240373][T23160] netlink: 'syz.0.4518': attribute type 2 has an invalid length. [ 749.260878][T23160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4518'. [ 749.494683][T23181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4524'. [ 749.503912][T23182] lo: entered allmulticast mode [ 749.699165][T23180] lo: left allmulticast mode [ 749.872412][T23196] tipc: Enabled bearer , priority 0 [ 750.079789][T23196] syzkaller0: entered promiscuous mode [ 750.108505][T23196] syzkaller0: entered allmulticast mode [ 750.136796][T23196] tipc: Resetting bearer [ 750.167911][T23212] tipc: Enabling of bearer rejected, failed to enable media [ 750.209899][T23194] tipc: Resetting bearer [ 750.571156][T23225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4523'. [ 752.691036][T19726] net_ratelimit: 27 callbacks suppressed [ 752.691053][T19726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.401648][T23194] tipc: Disabling bearer [ 753.412494][T23221] veth1_to_bridge: mtu greater than device maximum [ 753.444650][T23175] bridge5: entered promiscuous mode [ 753.457636][T23175] bridge5: entered allmulticast mode [ 753.472119][T23225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4523'. [ 753.496948][ T994] tipc: Node number set to 1470659541 [ 753.545024][ T6075] bond3: (slave dummy0): failed to get link speed/duplex [ 753.583732][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4540'. [ 753.616130][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4540'. [ 753.657658][T23235] netlink: 'syz.4.4541': attribute type 2 has an invalid length. [ 753.708532][T23235] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4541'. [ 753.717662][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 753.790748][T23235] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4541'. [ 753.828076][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 753.904023][T23243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4544'. [ 754.030804][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 754.055483][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 754.177328][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 754.187097][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4548'. [ 754.254736][T23260] pim6reg527: entered allmulticast mode [ 754.308353][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 754.344384][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4548'. [ 754.415977][T23267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.468450][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 754.537040][T23274] lo: Caught tx_queue_len zero misconfig [ 754.614105][T23276] tipc: Enabling of bearer rejected, already enabled [ 754.996135][T23294] xt_hashlimit: invalid interval [ 755.255962][T23306] bond0: entered promiscuous mode [ 755.263471][T23306] batadv0: entered promiscuous mode [ 755.270819][T23306] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 755.281713][T23306] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 755.292664][T23306] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 755.305235][T23306] bond0: left promiscuous mode [ 755.314560][T23306] batadv0: left promiscuous mode [ 755.516064][T23308] syzkaller0: entered promiscuous mode [ 755.538247][T23308] syzkaller0: entered allmulticast mode [ 755.789251][T23323] macvlan0: entered promiscuous mode [ 755.909922][T23325] __nla_validate_parse: 6 callbacks suppressed [ 755.909944][T23325] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4572'. [ 757.809379][ C1] net_ratelimit: 13 callbacks suppressed [ 757.809401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.607964][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 760.728544][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 760.744423][T23366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4582'. [ 760.806500][T23371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.817526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.830441][T23371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.847116][T23369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.860730][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.897513][ T79] bond3: (slave dummy0): failed to get link speed/duplex [ 760.936184][T23369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.960519][T23377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4586'. [ 761.056001][T23380] netlink: 'syz.2.4588': attribute type 21 has an invalid length. [ 761.311582][T23394] netlink: 'syz.0.4593': attribute type 1 has an invalid length. [ 761.353103][T23396] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4594'. [ 761.374373][T23394] bond6: entered promiscuous mode [ 761.375110][T23396] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4594'. [ 761.386556][T23394] 8021q: adding VLAN 0 to HW filter on device bond6 [ 761.399653][T23396] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4594'. [ 761.426470][T23394] ipvlan2: entered allmulticast mode [ 761.432425][T23394] bond6: entered allmulticast mode [ 761.457081][T23394] bond6: (slave bridge7): making interface the new active one [ 761.465154][T23394] bridge7: entered promiscuous mode [ 761.472158][T23394] bridge7: entered allmulticast mode [ 761.479982][T23394] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 761.824089][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'. [ 762.371808][T23448] nbd: couldn't find device at index 1694498816 [ 762.549081][T23457] netlink: 524 bytes leftover after parsing attributes in process `syz.2.4604'. [ 762.610538][T23459] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4606'. [ 762.917706][ T6083] net_ratelimit: 16 callbacks suppressed [ 762.917729][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 762.960273][T23476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.094760][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 763.142900][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4613'. [ 763.238247][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 763.324080][T23489] can: request_module (can-proto-0) failed. [ 763.367313][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 763.380739][T23493] netlink: 'syz.2.4616': attribute type 1 has an invalid length. [ 763.668373][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 763.798834][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 763.859541][T23507] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4621'. [ 763.926562][T23511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4624'. [ 763.937873][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 764.069297][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 764.202454][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 765.197528][T23548] sit0: left promiscuous mode [ 765.203842][T23548] sit0: left allmulticast mode [ 765.296211][T23548] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.755717][T23548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.815994][T23548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.058819][T23548] vlan0: left promiscuous mode [ 766.272000][T23548] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 766.401604][T23548] xfrm1: left allmulticast mode [ 766.432169][T23548] batman_adv: batadv0: Interface deactivated: gretap2 [ 766.524502][T23548] bond6: left promiscuous mode [ 766.536962][T23548] bridge7: left promiscuous mode [ 766.549360][T23548] ipvlan2: left allmulticast mode [ 766.554481][T23548] bond6: left allmulticast mode [ 766.567321][T23548] bridge7: left allmulticast mode [ 766.592918][T19325] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.617038][T19325] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 766.649114][T19325] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.675252][T19325] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.733586][T19325] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 766.777932][T19325] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.816210][T19325] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.829619][T23577] netlink: 'syz.2.4642': attribute type 7 has an invalid length. [ 766.850647][T23577] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4642'. [ 766.861019][T19325] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 766.887435][T19325] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.916965][T19325] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.957756][T19325] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 766.970822][T23583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4643'. [ 766.988996][T19325] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.099749][T23593] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 767.102853][T23585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4644'. [ 767.492139][T23609] bond0: entered promiscuous mode [ 767.506706][T23609] bond_slave_1: entered promiscuous mode [ 767.531693][T23609] dummy0: entered promiscuous mode [ 767.541955][T23613] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4650'. [ 767.612132][T23616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4651'. [ 767.775144][T23624] netlink: 'syz.3.4653': attribute type 11 has an invalid length. [ 767.785309][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 767.808685][T23624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4653'. [ 767.879817][T23623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.889358][T23631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4653'. [ 767.901697][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'. [ 768.017955][ T1010] net_ratelimit: 17 callbacks suppressed [ 768.017977][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 768.151245][T23641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4657'. [ 768.179950][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 768.328014][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 768.659194][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 768.743022][T23671] xt_hashlimit: size too large, truncated to 1048576 [ 768.778787][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 769.004316][T23680] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 769.035891][T23680] syzkaller0: entered promiscuous mode [ 769.052920][T23680] syzkaller0: entered allmulticast mode [ 769.130346][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 769.151267][T23689] netlink: 'syz.2.4671': attribute type 21 has an invalid length. [ 769.196403][T23692] netlink: 'syz.2.4671': attribute type 21 has an invalid length. [ 769.205454][T23687] netlink: 'syz.4.4668': attribute type 2 has an invalid length. [ 769.287575][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 769.417345][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 769.558121][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 769.678246][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 769.805567][T23714] netlink: 'syz.1.4677': attribute type 1 has an invalid length. [ 769.820997][T23710] 8021q: adding VLAN 0 to HW filter on device bond10 [ 769.914309][T23714] 8021q: adding VLAN 0 to HW filter on device bond12 [ 770.033082][ T5635] block nbd0: Receive control failed (result -32) [ 770.346505][T23738] bridge0: port 1(veth1_to_bridge) entered blocking state [ 770.380462][T23738] bridge0: port 1(veth1_to_bridge) entered disabled state [ 770.404193][T23738] veth1_to_bridge: entered allmulticast mode [ 770.478197][T23738] veth1_to_bridge: entered promiscuous mode [ 771.529183][T23796] netlink: 'syz.2.4702': attribute type 12 has an invalid length. [ 771.738834][T23806] netlink: 'syz.3.4705': attribute type 2 has an invalid length. [ 771.886461][T23812] netlink: 'syz.0.4707': attribute type 1 has an invalid length. [ 771.924753][T23812] __nla_validate_parse: 17 callbacks suppressed [ 771.924773][T23812] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4707'. [ 771.974062][T23812] netlink: 'syz.0.4707': attribute type 1 has an invalid length. [ 772.004254][T23820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4707'. [ 772.051439][T23812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4707'. [ 772.067991][T23823] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4710'. [ 772.072685][T23826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4709'. [ 772.144631][T23826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4709'. [ 772.566973][T23854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4718'. [ 772.579150][T23854] netlink: 'syz.2.4718': attribute type 7 has an invalid length. [ 772.587043][T23854] netlink: 'syz.2.4718': attribute type 8 has an invalid length. [ 772.595239][T23854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4718'. [ 772.997734][T23856] vlan1: left allmulticast mode [ 773.007445][T23856] veth0_vlan: left allmulticast mode [ 773.067690][ T1010] net_ratelimit: 22 callbacks suppressed [ 773.067730][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 773.217995][ T1010] bond3: (slave dummy0): failed to get link speed/duplex [ 773.266543][T19323] bridge_slave_1: left allmulticast mode [ 773.277828][T19323] bridge_slave_1: left promiscuous mode [ 773.297893][T19323] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.338289][T23873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4721'. [ 773.434723][T19323] pim6reg: left allmulticast mode [ 773.447703][T23880] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4723'. [ 774.124113][T19323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.140045][T19323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.152835][T19323] bond0 (unregistering): (slave team0): Releasing backup interface [ 774.169561][T19323] bond0 (unregistering): (slave bond1): Releasing backup interface [ 774.178825][T19323] bond0 (unregistering): Released all slaves [ 774.193930][T19323] bond1 (unregistering): Released all slaves [ 774.216669][T19323] bond2 (unregistering): Released all slaves [ 774.245699][T19323] bond3 (unregistering): Released all slaves [ 774.282748][T19323] bond4 (unregistering): (slave veth7): Releasing active interface [ 774.293813][T19323] batadv1: entered promiscuous mode [ 774.304382][T19323] bond4 (unregistering): (slave batadv1): Releasing active interface [ 774.316095][T19323] bond4 (unregistering): Released all slaves [ 774.348386][T23884] syzkaller1: entered promiscuous mode [ 774.365248][T23884] syzkaller1: entered allmulticast mode [ 774.547507][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 774.670790][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 774.938088][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 775.088752][ T6063] bond3: (slave dummy0): failed to get link speed/duplex [ 775.250965][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 775.668653][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 775.827495][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 776.107675][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 776.837906][T19323] hsr_slave_0: left promiscuous mode [ 776.860640][T19323] hsr_slave_1: left promiscuous mode [ 776.877815][T19323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.902589][T19323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.082304][T19323] veth0_macvtap: left promiscuous mode [ 777.100198][T19323] veth1_vlan: left promiscuous mode [ 777.111242][T19323] veth0_vlan: left promiscuous mode [ 777.686797][T19323] team0 (unregistering): Port device team_slave_1 removed [ 777.724551][T19323] team0 (unregistering): Port device team_slave_0 removed [ 777.948933][T23966] veth1_macvtap: left promiscuous mode [ 777.992628][T23974] dvmrp3: entered allmulticast mode [ 778.139128][ T12] net_ratelimit: 7 callbacks suppressed [ 778.139148][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 778.252190][T23999] netlink: 'syz.4.4753': attribute type 4 has an invalid length. [ 778.286083][T23999] __nla_validate_parse: 1 callbacks suppressed [ 778.286104][T23999] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4753'. [ 778.313823][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 778.439078][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 778.583934][ T6083] bond3: (slave dummy0): failed to get link speed/duplex [ 778.602120][T24013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4757'. [ 778.654045][T19323] IPVS: stop unused estimator thread 0... [ 778.691650][T24013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4757'. [ 778.717392][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 778.847626][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 778.988941][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 779.056173][T23958] infiniband syz0: set down [ 779.083079][T23958] infiniband syz0: added ipvlan0 [ 779.123913][T23958] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 779.137491][ T6075] bond3: (slave dummy0): failed to get link speed/duplex [ 779.137877][T23958] infiniband syz0: Couldn't open port 1 [ 779.183759][T23958] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 779.241604][T23958] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 779.267668][ T6075] bond3: (slave dummy0): failed to get link speed/duplex [ 779.298706][T23958] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 779.333116][T24038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.424527][ T30] audit: type=1804 audit(1782677309.591:20): pid=24042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4766" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1694 res=1 errno=0 [ 779.517496][ T30] audit: type=1800 audit(1782677309.601:21): pid=24043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4766" name="cgroup.controllers" dev="tmpfs" ino=1694 res=0 errno=0 [ 779.584175][T23958] RDS/IB: syz0: added [ 779.606126][T23958] smc: adding ib device syz0 with port count 1 [ 779.610039][ T30] audit: type=1800 audit(1782677309.651:22): pid=24042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4766" name="cgroup.controllers" dev="tmpfs" ino=1694 res=0 errno=0 [ 779.633037][T23958] smc: ib device syz0 port 1 has no pnetid [ 779.641605][T24048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4765'. [ 780.404476][T24070] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 780.428655][T24070] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 780.869073][T24097] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4777'. [ 780.948942][T24097] netlink: 'syz.4.4777': attribute type 1 has an invalid length. [ 781.052486][T24097] 8021q: adding VLAN 0 to HW filter on device bond11 [ 781.183670][T24116] netlink: 'syz.1.4780': attribute type 1 has an invalid length. [ 781.219984][T24116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 781.227355][T24116] IPv6: NLM_F_CREATE should be set when creating new route [ 781.471196][T24126] netlink: 'syz.3.4783': attribute type 13 has an invalid length. [ 781.481065][T24122] pim6reg1: entered promiscuous mode [ 781.496593][T24122] pim6reg1: entered allmulticast mode [ 781.532811][T24126] veth1_macvtap: left promiscuous mode [ 781.557003][T24126] macsec0: entered allmulticast mode [ 781.617401][T24137] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4784'. [ 781.835559][T24141] syzkaller0: entered promiscuous mode [ 781.860886][T24141] syzkaller0: entered allmulticast mode [ 782.136134][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4789'. [ 782.195107][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4789'. [ 782.489971][T24175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4793'. [ 783.084468][T24200] netlink: 'syz.3.4801': attribute type 1 has an invalid length. [ 783.310234][T24200] bond6: entered promiscuous mode [ 783.335518][T24219] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4805'. [ 783.348437][T24200] 8021q: adding VLAN 0 to HW filter on device bond6 [ 783.367567][T24218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4801'. [ 783.417353][T19323] net_ratelimit: 28 callbacks suppressed [ 783.417378][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 783.439780][T24200] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4801'. [ 783.479769][T24200] 0·: renamed from hsr0 (while UP) [ 783.531075][T24200] 0·: entered allmulticast mode [ 783.542787][T24200] hsr_slave_0: entered allmulticast mode [ 783.570410][T24200] hsr_slave_1: entered allmulticast mode [ 783.594043][T24200] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 783.637531][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 783.848264][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 783.919008][T24241] tipc: Failed to remove unknown binding: 66,0,0/0:1069201280/1069201281 [ 783.977650][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 783.990428][T24241] tipc: Failed to remove unknown binding: 66,0,0/0:1069201280/1069201281 [ 784.069191][T24249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4813'. [ 784.147622][T19325] bond3: (slave dummy0): failed to get link speed/duplex [ 784.387361][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 784.498763][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 784.570779][T24264] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 784.580511][T24263] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 784.628844][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 784.757432][T19323] bond3: (slave dummy0): failed to get link speed/duplex [ 785.043316][T24286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4820'. [ 785.226270][ C1] ================================================================== [ 785.234433][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.242609][ C1] Read of size 2 at addr ffff888154cc60f4 by task syz.3.4823/24297 [ 785.250549][ C1] [ 785.252916][ C1] CPU: 1 UID: 0 PID: 24297 Comm: syz.3.4823 Not tainted syzkaller #0 PREEMPT(full) [ 785.252948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.252963][ C1] Call Trace: [ 785.252971][ C1] [ 785.252978][ C1] dump_stack_lvl+0xe8/0x150 [ 785.253005][ C1] print_address_description+0x55/0x1e0 [ 785.253061][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.253082][ C1] print_report+0x58/0x70 [ 785.253098][ C1] kasan_report+0x117/0x150 [ 785.253118][ C1] ? __pskb_pull_tail+0x1235/0x1890 [ 785.253197][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.253221][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.253248][ C1] __netif_receive_skb_core+0x13aa/0x30b0 [ 785.253305][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 785.253339][ C1] ? kernel_text_address+0xa5/0xe0 [ 785.253370][ C1] ? __kernel_text_address+0xd/0x30 [ 785.253389][ C1] ? unwind_get_return_address+0x4d/0x90 [ 785.253423][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 785.253453][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 785.253480][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 785.253515][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 785.253540][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 785.253564][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 785.253587][ C1] ? dev_gro_receive+0x1097/0x2380 [ 785.253637][ C1] napi_complete_done+0x299/0x730 [ 785.253663][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 785.253688][ C1] ? gro_cell_poll+0x175/0x5d0 [ 785.253769][ C1] gro_cell_poll+0x5ab/0x5d0 [ 785.253798][ C1] ? gro_cell_poll+0x175/0x5d0 [ 785.253824][ C1] __napi_poll+0xaa/0x330 [ 785.253848][ C1] net_rx_action+0x61d/0xf50 [ 785.253878][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 785.253901][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 785.253933][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 785.253955][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 785.253980][ C1] ? sched_clock+0x3f/0x60 [ 785.254016][ C1] handle_softirqs+0x225/0x840 [ 785.254042][ C1] ? do_softirq+0x76/0xd0 [ 785.254066][ C1] ? tun_rx_batched+0x185/0x790 [ 785.254170][ C1] do_softirq+0x76/0xd0 [ 785.254194][ C1] [ 785.254200][ C1] [ 785.254206][ C1] __local_bh_enable_ip+0xf8/0x130 [ 785.254229][ C1] ? tun_rx_batched+0x185/0x790 [ 785.254254][ C1] tun_rx_batched+0x616/0x790 [ 785.254283][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 785.254308][ C1] ? tun_get_user+0x2717/0x4370 [ 785.254333][ C1] ? tun_get_user+0x2717/0x4370 [ 785.254358][ C1] ? tun_get_user+0x23cb/0x4370 [ 785.254383][ C1] ? tun_get_user+0x23cb/0x4370 [ 785.254407][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 785.254430][ C1] ? tun_get_user+0x2717/0x4370 [ 785.254454][ C1] ? tun_get_user+0x2717/0x4370 [ 785.254479][ C1] tun_get_user+0x2b44/0x4370 [ 785.254511][ C1] ? aa_file_perm+0x18b/0x15f0 [ 785.254537][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 785.254557][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 785.254583][ C1] ? __lock_acquire+0x683/0x2cf0 [ 785.254602][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 785.254628][ C1] ? preempt_schedule_common+0x82/0xd0 [ 785.254678][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 785.254705][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 785.254730][ C1] ? tun_get+0x1c/0x2f0 [ 785.254762][ C1] ? tun_get+0x1c/0x2f0 [ 785.254794][ C1] ? tun_get+0x1c/0x2f0 [ 785.254817][ C1] ? tun_get+0x1c/0x2f0 [ 785.254843][ C1] tun_chr_write_iter+0x113/0x200 [ 785.254869][ C1] vfs_write+0x612/0xba0 [ 785.254902][ C1] ? __pfx_vfs_write+0x10/0x10 [ 785.254925][ C1] ? __fget_files+0x2a/0x420 [ 785.254946][ C1] ksys_write+0x150/0x270 [ 785.254966][ C1] ? __pfx_ksys_write+0x10/0x10 [ 785.254989][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.255007][ C1] do_syscall_64+0x174/0x580 [ 785.255022][ C1] ? trace_irq_disable+0x3b/0x140 [ 785.255038][ C1] ? clear_bhb_loop+0x40/0x90 [ 785.255057][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.255074][ C1] RIP: 0033:0x7fd6eb99ce59 [ 785.255091][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.255107][ C1] RSP: 002b:00007fd6ec921028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 785.255126][ C1] RAX: ffffffffffffffda RBX: 00007fd6ebc15fa0 RCX: 00007fd6eb99ce59 [ 785.255139][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 785.255151][ C1] RBP: 00007fd6eba32e6f R08: 0000000000000000 R09: 0000000000000000 [ 785.255161][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.255172][ C1] R13: 00007fd6ebc16038 R14: 00007fd6ebc15fa0 R15: 00007ffcc3c56f78 [ 785.255193][ C1] [ 785.255199][ C1] [ 785.722667][ C1] The buggy address belongs to the physical page: [ 785.729116][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x154cc6 [ 785.738073][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 785.745296][ C1] raw: 057ff00000000000 ffffea0005533188 ffffea0005533188 0000000000000000 [ 785.753910][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 785.762516][ C1] page dumped because: kasan: bad access detected [ 785.768977][ C1] page_owner info is not present (never set?) [ 785.775072][ C1] [ 785.777419][ C1] Memory state around the buggy address: [ 785.783067][ C1] ffff888154cc5f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 785.791152][ C1] ffff888154cc6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 785.799245][ C1] >ffff888154cc6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 785.807331][ C1] ^ [ 785.815071][ C1] ffff888154cc6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 785.823153][ C1] ffff888154cc6180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 785.831234][ C1] ================================================================== [ 785.839474][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 785.846764][ C1] CPU: 1 UID: 0 PID: 24297 Comm: syz.3.4823 Not tainted syzkaller #0 PREEMPT(full) [ 785.856182][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.866290][ C1] Call Trace: [ 785.869601][ C1] [ 785.872466][ C1] vpanic+0x56c/0xa60 [ 785.876505][ C1] ? __pfx_vpanic+0x10/0x10 [ 785.881043][ C1] panic+0xc5/0xd0 [ 785.884793][ C1] ? __pfx_panic+0x10/0x10 [ 785.889232][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.894898][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.900551][ C1] check_panic_on_warn+0x89/0xb0 [ 785.905552][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.911208][ C1] end_report+0x73/0x170 [ 785.915478][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.921137][ C1] kasan_report+0x128/0x150 [ 785.925672][ C1] ? __pskb_pull_tail+0x1235/0x1890 [ 785.930895][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.936553][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 785.942042][ C1] __netif_receive_skb_core+0x13aa/0x30b0 [ 785.947803][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 785.953945][ C1] ? kernel_text_address+0xa5/0xe0 [ 785.959084][ C1] ? __kernel_text_address+0xd/0x30 [ 785.964305][ C1] ? unwind_get_return_address+0x4d/0x90 [ 785.969983][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 785.976001][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 785.982535][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 785.987848][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 785.994066][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 786.000424][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 786.007124][ C1] ? dev_gro_receive+0x1097/0x2380 [ 786.012268][ C1] napi_complete_done+0x299/0x730 [ 786.017329][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 786.022902][ C1] ? gro_cell_poll+0x175/0x5d0 [ 786.027708][ C1] gro_cell_poll+0x5ab/0x5d0 [ 786.032430][ C1] ? gro_cell_poll+0x175/0x5d0 [ 786.037227][ C1] __napi_poll+0xaa/0x330 [ 786.041634][ C1] net_rx_action+0x61d/0xf50 [ 786.046345][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 786.051513][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 786.056769][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 786.062107][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 786.067361][ C1] ? sched_clock+0x3f/0x60 [ 786.071863][ C1] handle_softirqs+0x225/0x840 [ 786.076663][ C1] ? do_softirq+0x76/0xd0 [ 786.081024][ C1] ? tun_rx_batched+0x185/0x790 [ 786.085914][ C1] do_softirq+0x76/0xd0 [ 786.090110][ C1] [ 786.093067][ C1] [ 786.096070][ C1] __local_bh_enable_ip+0xf8/0x130 [ 786.101216][ C1] ? tun_rx_batched+0x185/0x790 [ 786.106104][ C1] tun_rx_batched+0x616/0x790 [ 786.110823][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 786.116057][ C1] ? tun_get_user+0x2717/0x4370 [ 786.120943][ C1] ? tun_get_user+0x2717/0x4370 [ 786.125830][ C1] ? tun_get_user+0x23cb/0x4370 [ 786.130715][ C1] ? tun_get_user+0x23cb/0x4370 [ 786.135595][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 786.140942][ C1] ? tun_get_user+0x2717/0x4370 [ 786.145821][ C1] ? tun_get_user+0x2717/0x4370 [ 786.150700][ C1] tun_get_user+0x2b44/0x4370 [ 786.155419][ C1] ? aa_file_perm+0x18b/0x15f0 [ 786.160220][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 786.165007][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 786.170092][ C1] ? __lock_acquire+0x683/0x2cf0 [ 786.175082][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 786.180502][ C1] ? preempt_schedule_common+0x82/0xd0 [ 786.185994][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 786.191137][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 786.196642][ C1] ? tun_get+0x1c/0x2f0 [ 786.200832][ C1] ? tun_get+0x1c/0x2f0 [ 786.205015][ C1] ? tun_get+0x1c/0x2f0 [ 786.209211][ C1] ? tun_get+0x1c/0x2f0 [ 786.213398][ C1] tun_chr_write_iter+0x113/0x200 [ 786.218452][ C1] vfs_write+0x612/0xba0 [ 786.222729][ C1] ? __pfx_vfs_write+0x10/0x10 [ 786.227523][ C1] ? __fget_files+0x2a/0x420 [ 786.232153][ C1] ksys_write+0x150/0x270 [ 786.236520][ C1] ? __pfx_ksys_write+0x10/0x10 [ 786.241395][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.247488][ C1] do_syscall_64+0x174/0x580 [ 786.252100][ C1] ? trace_irq_disable+0x3b/0x140 [ 786.257164][ C1] ? clear_bhb_loop+0x40/0x90 [ 786.261874][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.267787][ C1] RIP: 0033:0x7fd6eb99ce59 [ 786.272261][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.291890][ C1] RSP: 002b:00007fd6ec921028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 786.300328][ C1] RAX: ffffffffffffffda RBX: 00007fd6ebc15fa0 RCX: 00007fd6eb99ce59 [ 786.308318][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 786.316310][ C1] RBP: 00007fd6eba32e6f R08: 0000000000000000 R09: 0000000000000000 [ 786.324300][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.332292][ C1] R13: 00007fd6ebc16038 R14: 00007fd6ebc15fa0 R15: 00007ffcc3c56f78 [ 786.340299][ C1] [ 786.343989][ C1] Kernel Offset: disabled [ 786.348319][ C1] Rebooting in 86400 seconds..