last executing test programs: 7.099441174s ago: executing program 4 (id=4506): syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/net\x00') (async, rerun: 32) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 32) close(0x4) (async, rerun: 32) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x0, r0}, 0x10) (async) unshare(0x68040200) 5.83972549s ago: executing program 1 (id=4516): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000a97ff0), 0x0) (async) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0xff, 0xa}, 0x2) (async) connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x101d0) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000003fc0)=[{&(0x7f00000049c0)="a26776f1b7eea31884187b5b1c0ecbd4167a0b69007fa64e01db473a40b42f4cc8adea743079432953693ac3a7bc37939943f188c3b5dcd634715b79ca1a261d0aee45c3f1c7441289cb0ba10b25d5f33a08385d1cad2b58f6b9892d3292fe23f4ee09d01f2fb03d9c29b75d0e7ee8c7cc5e91cd33e8b18bfb9dd7651a74ab5dd12685a77e4e88b57988cf2038cc58ffee2f9d59fc37bbf2ff3023b10802723238dfac38e54fd9a4c8bafefc6c5fc15384b50e048704bd444e2e422cec8cd57423093c8b2d3211a8e605f6c4a88bfac40016e5eaf89d04a93c8e140778d7cd1f97c6c859", 0xe4}], 0x1, 0x4) (async) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="e98aa7da595c83e08a431e748ba7fe36df166852461f29b1655d06cbc91d37", 0x1f}], 0x1, &(0x7f0000000380)="3e7c239522d3f3c6dc40ead4310777bdd007abbf4f04affe9950071e2b18de5fd437a5c9fb4cb27a348f1622bfb547bf4933a8fe37186a04894cc2f53d0b0d1bf61dcda790eda0e72b0a1363be074412e18f144c277f8dd1554ba6c8130407202085483c0312541d5106796b80d22f8092cbb596a3e9d35d0c5108b57f764690e147ef32df341486e9bf6b8086cd8912d0f5457e", 0x94, 0x4040005}, 0x24064080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000008637e6599155970000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) socket$kcm(0xa, 0x3, 0x87) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r6], 0xfdef) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_80211_inject_frame(0x0, 0x0, 0x36) (async) syz_80211_inject_frame(0x0, 0x0, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.916088513s ago: executing program 2 (id=4522): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x13, r3, 0x44b19000) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r4, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000380)={0xffffffffffffffff, 0x4, 0x18, 0x200, @vifc_lcl_addr=@remote, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r8, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) bind$inet6(r7, &(0x7f0000000880)={0xa, 0x5000, 0x0, @local}, 0x1c) connect$inet6(r7, &(0x7f0000000800)={0xa, 0x5000, 0x0, @remote}, 0x1c) write(r7, &(0x7f0000000900)="001122334455", 0x6) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) 4.722540129s ago: executing program 0 (id=4524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9000000}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001e40)={0x9, &(0x7f0000001d00)=[{0x4, 0x48, &(0x7f0000000180)="59e93f1cf413c30b9559fecb0d4a77bf978705377b743373fcce5225f4cc357675a4809f5d277db680ada4f62f3a2c6848f8f2fe49b57682aa69c91dea15dfade1705cfa727957c6", 0x1}, {0x9, 0x1000, &(0x7f0000000900)="36de380091c847c8c011e7dbce261796106efa26f69e1b302edabb5f12a93a483b9fa8aa0ef553e50ae8f00d641b1a5eedae650bc85de39667cd81e4a82bc8825885b12e32196dc98dd5fe2ada1907619152b5935852279e4e7aa0364190fc193bae54d491b75a4a229381c347df864b2ab080069a703014d9a413dfc2ccc054e6e94466e20e0614fc714d87dc36e8721e970ccfca85b6e4059e72e0342a88bc5963f4bb8e6ecbb819f68df74d96293e19ef23d7030149eba96732523b81359c8d8712404673969cca606aa4b29703e419d7b99f9ea9aff5be57acdccac74096045df2158ae8f290a45ab409a28fe4ed8748495d8ea106f2374f1e8392eef6cf2c803e537e0c5d2e685057086367b272f6b607fcc1051a7175ca3c31221dd456584eb998ecbcfefd008a503c7f3048c99c15053840d59dea0862a486ee84ca48d2b4adccca988b896858fef443cd953305214fedfdcd72ee6a10b1a088d92fe74038f79b6bdd909c24777c8810f03181c4667da85d2f8e8887dab858cbed53399ad96fbed28cfd979eeb813342d3c071a3f8c299b15fea79947105320c5370fd77ef691efd652057b41e44b2a60b471eda96de190c8c16168d22c1f827716531896e61902fe7f6c2ea86c84f5f454606593d56051dc8d11e3bf64b604dc92f9d4a7a43477df2a90d0c68954a7f36956791eacf61aca7bdd2b1899be12beae8cd2da43d5c219a3660f1035c68fa51857dd463fcb286f1092c818d45243ddadd56f296142f797785c7166cf9765d8a66cd4856976e0e6f6767c71d74661b2d11b92697887e90072f6b4ecb542313758a0befcdac571fa69b3a1f05a8ef1f33c2cc123e22e0b64495320051ec7fc6a07040563a5fed39860dbe77e0d78f324a396d216d108b9eb015997177e81d73e54c40e8ffe5371bb62365651fd0295e0b5519f65526f5b21e29774f939bdf4b14b502502c83c27025036fd155558643a22482cc2f6a70d167d739a90fe508d7adbd90e20a75fc0060fcd067fe658a1c209a2cef9ea3381423ddcd8f887d2797363c4e35564a0dcd34d6aeac7f48c97408f3eeca86a65ecf7860d7c93f81e877542902bd517c405d6a85dfc8235598ea2fee1304e6a442261d8ed38cec32f8bb41bff72eab35b3d8286d441fc248c33d9d216b2a3b6c225701ff0bc17b2717f5001b98016ff4161f96f966ba6c4ee7120a44b68b2e212a647dd5038b770d0b56d1a5b8821a3ae3e5d0b60bfc3d830e9d9af7c88e0fd34caa37830e49c81d57bf7a14d58226a651613c9a1dfc16fdd6a13e2e1ef495cbb0d0a7408bbd641414f6f43f5b3a464323c2240d9388003324b97afbf53b47c7ee9f00c128e64edd65777424e8e94ad8c7a060f05f146268b0f62ae7576951c84788fef89abce831a85ddd923e24b2375498fe9d713f94ba8a7b0833b33e9e754772ed8b8bccf132efd4bc26ce84a9a0b3ebe68eeef98a37a95add86b3701ee1ab28542d70659073b5de303648505aecc10bf73cc9cad74c7fc2ebdf097172f3b2a581367aadb40dc8fad205b356fa9d18c915d3b1945d5d5201decd483c3ecc15b156f7eb6917d548399787181a87e1a81c6da95791d09b4be63428984f9749b45b6b98cc77f6b3e0990367401f257de2bb119e4a2cbd2e3884d0333b6d0ba5365890a7e9e9513a114b2c4a1deca0edeb576be1609165533347b9c051995d27f96858570ee57480f9c429ba51309b350174adbf3908bddd0fb0b0e14656f9d67677b5fa62d7fc7fdb96426bcf574f89e4feac635eb98c118fb3b3f689934aa7ea73c176ec05da74069e300a83e0c161e56c765c5de021777592f93ef2fdee1a721bc21f38fdde930e56176d69bde51be20c2425946ecb1b90d5795d25e6f39300e5e8c5cc5247ffe3b5fe391460bb7fc0e77c30e3f9f57e82d0edc1d03afc596c912aec9df11546d5a72be08a9ab87f2a803736bf0fbfb0c07827ab8cffbeca07c5ab413543c3c8578ca52c5743844a21dcc8b0b78ec0baf17ebb6e927b8b47d5e3bb1c60c653d52439a06835ab6122c4cd52f7615637384c1b90e2d54b0dcb51682d6f6cd79f71aa05ec72436bd3400dca1f63544b68821d93bbf2486103e8df38f8bc080125149c8ac585646cfc4a37b212d3f678d4d32119c4615f652300598b3f3820c2cda00884f20e31cfd76e690f8054feec38ff2d809a2646cba7af01e62e9e43acbe87eee9b7e1283cd5b6bad20b22349a658e89393e6ed7ba852da4e005bfe17c9f74786d68b782d71d482bff825a04610dd27bebe9b178b3d503f2ae7307fcd42be5533ef7bb4579dab044521f18e52828bea0b22ede50a97b64a87fada79c5083758ff1ae6ffce6ec80d5fe02740b0d90428b436baf9ec93737f0a313425d6b9c88b4c4836fc48d18a411eab76db1be23a5d70206e8a5747877d31bc43e61792c8071e4a3a9fc5d2db5e8be1184003d73ea58df2d84c1dab4889c7862ebdb4bff491c21fbfb116edfe6a3f1d742e8c6305e996cbe00f3701133a3c85afbbc47b2e61f4d63e14e00520e57c56d9fc9861501e8c14444a88ef6d1d7c2668f3a726d31c3573beb56e200a824aea667a60089ce379ecbfd3821124c2d70cc6df9301a4124cca40ec62743692c504363786e8d2f272c63f14bcc7e07bbed766e5fdfd51370abf66c913914bb70680bd1e81e4ca1784c7de9b934944ccb07725816c3bb3715b720979b36c45e71cda44115676b134a084fd456f07aed66bdc4cec7530c74f8897d80105a49f81e6cd3f63c52e91e59a28554a9c1e685353cd7555ec604f84d02e291825ef4a2f70a51844d2029ecf8998f2fa9bb28347b93ff46c8c306ca77fe0b85c84525d66564281a7a9b05f0c8d7908e779db6b4ca5f0d37083b9b549739d5f4ab5492d601f5bfbb51f380ff02af30392d5ccca4768435d97668f8c006d43387af7bcf039bf625bbdaa2f58bc57e49834d5acae0e11c6aae69cc152659fc24306a356c4aff4043c3e5ce043c5be92d0474e9279df56b886425460f95b31a3a95c0223be8163c42745b97de02940ad23d3839e915a29f074e7da6a53b8b2f2ea5268eea4f1fd629a6f37b5245705426f8522164683e768c85bdb4dbe380b3bfd1ab7338a5ece918c82fd4258760e23bf533e55d3ba69174d0cb68383c5c505dcbce83722ad85554bc7d8685a5ab7be1333bfec29c21a4b2edd4d095b9dea6098c16953cfe327d080b535906910de2ada94e007c157978a785851623bab54b47551b9041c79f81ccbef52ce172579e227b6923cc65f1c63320357d73f2e3a5582d975a11b46287093517e952509f3459f46263046b7cfee10006d9ec12acc17a5bf22c416ed1b85f5374992baf9317fd17a07b690f12593b000b98b42389bfcb7c04c6f77f63620a51eb3b47f756f75ee223b7f313aa7dcb7ce7c8c9a25acff6291f38e20dc44807ae4f0775ddda572c66c638da18bfec4422d70dbd77111562ec1f968b90b982d904f34be40310e4a40a9e2a7bf492625877a804e89533574fcd2e48a1cea4b2625cef1809b088d93a160062d03d324bad6a8038be9b5ccb137d6a005c336ac5e5c7553fe4e0c12d7a5f7c9082a2bcf64ccf5e60cdff1a8b62bd0397f89a824d6fe3d86f347d5c3a9ff0160115770476d62a85fa252e753930a5d95dc6c370434a81415f6a6c8b73d501e8c08f8d4762ced2f91db4ca4eaab92239873a69d0a5185c9b0bcab4ea3c4ff1f8a8e00bcddff0688e10eec2e8680ba96c32526a05d1158df48b98b7d2baf9f9d8d06b6e03983c80b9e3fb4ecc897f0e5ef3bb8f09d038a61fdc538e21a3534384ea19c32a2ff6707a642dcedaff87969c3382da5803af2af0dc4918603f19d6d6473481fb41e6fe4b03e0971d4a79652dda139230d4d7b30e87077da005948706185d436dac00df03955394dfb77e60a5eab1f0145bf2a0e6d27e2fef83c4659ece699baaf64ba37c3023659381ff26d3b5366f8cd4bf7ba483e82ee2568096a361d39f2cf61e3b4b11ac91cdba066d74892ceecd583254b10b9fd0aa566d6ca49cfae86822301f52d718491294ffeb9725bec10b4f6e222b00aec2acfb540722b59db3e2772b9e72bfc57f0031926b813a707f8c9a9ee694708345610ae475cd3998443039f24a0b687d7b5d2be79053ea84cef60dce536a0c339a82257de171635e378eebd13f800bee00509bff456fc558eb7c89826b0aa513c0e5d7172812054394339403bac2a5ffd3d72bbb1d9dcdc697e30693d13993fa378f7c2d9d1c20edbe10fc51be7cd829614c962eb4c0e925218c755a50e678722eeb0c1d4599800370dc587dcaaea4498f445270e3fb2a5e221d83fb3fee60343349388c9d514fa9c9d1e44b67808d191b853123afde442f78518e530e5354c2356a07d106d045c65e397ac3b28c70a6fc9cbdd3d76c01d064ad4eea855e36b8da768cf37c7c19c87ab8571ecc83f900c94d0fb9579f1b502001515b040ea73c21baa021a96c97b274f663c523e0b99ff87f92b0bdd293fc09877bba33aa76d408ef322dd050e377cc31c4dfc8701ed682453b48b769abcc2edda7476d4a4ac0d83da08cf8ed50d026ca6cf1107cf868fc29f181845b656f48664822f7465b5cd18dd02493ee083cca301f864cb535e1c6c00e8a8c90d7b0f68f49a2709bd0674a05a0dab39ed9ac4f5183e5d4b514464c2d73a2b9781b5a5c748c836ea6f8bcaacf5d28462b2fab5a6304824642cff7527ec39db97764e2da9ea9975aee880aba211ab829c73b889d24526e56a3a7e9a2ece96876f18135dbb92b1baa850b9f9680602372a5d59c7a5af9f266b6829b4b5b75b3c631b388544e78d3c3506b27e21fcda65db972ba7d17208ca616bb380adcc00e953299857fcd28b7772f808a494eecfe545acd7b652cb89a0c0bc2bfe69cef1ec4f50fa5831b9fe70ac91fe0837e99426a6d075faea60945ba2d10cac009cf0b0e335ed05dc068528681ff3dca070d664ebdf4a9a08158932d5fc3d6b9fd7561787e73d632d7ff72f159e8cf63ec3ef0fcefef0f3ee26188227c89d1b7e505e54a78f7c429d9d3efef7ac9d52c24449bb4bfbbb08ef077474613a5cb94d68b7bc614f1c78f60f7d6bbda3c0687ceac61b9da6423f2d6ef67143218e9565150ce7813ed5d15127fa255cf15d5d4ae0a2e01f7f4f2123437f5c94ecf9ae4e8f0441f9d04f8bafd5638e0c6eab6e583e8130415db7c5a389ae054506986ac13427c84a1e8eb0c0c6a2ee0fbd8f0a212adc7dedaf8f7bffa90db44e7d67c260722c46b552a3129b4163ef943c39d3673906c9addbd8a5ddb3a6b6a04cae92d9337f0e286be286100010d5461693285602b7878a6e5d2c6c0858c334020f8bc5cb7cb39e2b9fd311c3c8c3da334cbc6eb2a45b25bf53f08f7b6c8e310306b149e34f55aa8bb1eede529ced36d3c620e5772fdd39a481d8f95cbe46be8e3c5fe1da5c8f6192e0417d7126f8da16f775965fa1f6ace51bbf7afe7438bf0bb03c7965938f2918a5bb23c795f02e59962eff62b036d51bf3cae98f854576a1561024850c3a71d5150669fb7a59bc10b796a4110376f4e495e5cbe7f9d7bafbe3c35a920a28a68f8b51a03d0f5cfdc5a23a7c6cc6c44c02a860f5e7ac1d187e57add8c7a23b86010d4b1ea153b604f876cfd862a956a40f1a48c23a67df47cde0ef9ac26579d4d6611d8d6aefdbbd52bad08fb3994aa54413b3f818da8230f99730e466fc1ab112b649fef78fdbcb3ca6946a95b0b2506", 0x1}, {0xc, 0x0, &(0x7f0000001900), 0x1}, {0xd, 0x6a, &(0x7f0000001940)="c4f62be3fbe338fc6cde628130316aa6def7e851656a25aecd0c84f385ebc3cf86706b40cf50782874cec6739ddda58392f722d89d74c01fef05865528e1a1c83d13c49cdb8cb65147f5dc757b6416e8168287e8ce213f418547e3058363cee041dee6fdb8408d9f4ff5", 0x0, 0x1}, {0x1, 0xb, &(0x7f00000019c0)="e10bda7cef8cea8c096be4"}, {0xd, 0x90, &(0x7f0000001a00)="e75dba28e7ba7b1aac532308e9e0df8930ea6b54edca49326e38aca2e25c8644df32c492e1bf2a6d78cac04a73b6024d255cd8c14b78bd36923f4d47aab06da3fcff3c85bb0d4d9ca409eb5f30cbbce49230f071696dc6604f3788d34028b18c5a9d998ef922a4ccf84b5e54951249c55cec1e47219ec3252189696ac6047f446516bd5d9757da271604316664841b91", 0x0, 0x1}, {0x2, 0xa8, &(0x7f0000001ac0)="e4031c3e149e1479ce931dad7b49bf05e8cddfd5be23fbe0fde4ff8eae66e2980a18efc5a8baf2b010c481a57ee166f2d0b2e63d5f2b10da1fb167e5b7544d739e28b7e7044a1527a59d1b0d87a6971f2c32ba7ddc641afd6c074a3e2605696ecac149b5a7a0fb02963f6eccd792e2593aa6495f0279ab62996cfdb9c2bf8e7ca195a954ad65253a987bcd946a227fd736031c686eb3834a93652ee4c41a6885dfa748049f8db8bc", 0x1, 0x1}, {0x7, 0xae, &(0x7f0000001b80)="ac78bad5756b2c0c6bfe2d779cfed70752f4c4ab79bd1c2d6b699646b550c0f2320924340392ce1ff109f51a80b64818665cc9ebf76e288fded92403cc5802ec537aa320de6140cf5befa98b6690fcc4345f12dea30b94a9471e85f51e8d4e3bcf0c78555a0b5009d981c8839fc35e42064ec484d94ade7c42145ba40b3b23e27b6a609d6632cb5df660b349e31e95c5e381ee5622941dc417512cb5cabdb2054b21ae04aa7e3493ed51aa8262b9", 0x0, 0x447e3052d18d4fa3}, {0x4, 0xab, &(0x7f0000001c40)="84157667ac28844e5f7ab17a7ae7cfa7e67f2ec5674c3f98a9bd47bc2f34f94a6a3c729aae548ce8ff5df78fec492749798eff3a1f50baee2fff906da558bdfc34d138ed9ba1b3dead92fc6952429ec4837cfa7201d080a4b654f55cf6d7521b42e6304640fe97a7070001fc602ffc7706e0be39bcf35398eb06e0f37ccaca41923eecdb58b4a3739b6511248f1b5fe0101af5a7f53edad3eb9b46d2ff4c6013f82cf14cfbbc3253065497", 0x1}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x2, 0x84) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 4.656163691s ago: executing program 3 (id=4525): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async, rerun: 32) writev(r0, &(0x7f0000000300)=[{0x0, 0xfeb2}, {&(0x7f0000002640)="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", 0x10f}, {0x0}], 0x3) (async, rerun: 32) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (rerun: 32) getsockname$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001e00000000000000000000007a2b500003ffffff95"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000040)={@private=0xa010100, @multicast1, @multicast2}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x9b}]}}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 4.654719339s ago: executing program 4 (id=4526): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x8880) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getchain={0x4c, 0x66, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xa, 0x9}, {0xd, 0x1}, {0xfff3, 0xfffd}}, [{0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}]}, 0x4c}}, 0x404c8c4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x92) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r7) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000080)=0x80, 0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0x2, @local}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r8, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/1, 0x1}, 0x5}], 0x1, 0x45833af96e4a38fd, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.641049174s ago: executing program 2 (id=4527): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000380)=0x8, 0xfe65) write$tun(r0, &(0x7f0000002440)=ANY=[], 0x1001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x5e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) listen(r1, 0x7) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5c}, 0x94) pipe(&(0x7f0000000000)) (async) write$cgroup_int(r0, &(0x7f0000000380)=0x8, 0xfe65) (async) write$tun(r0, &(0x7f0000002440)=ANY=[], 0x1001) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x5e21, @local}], 0x10) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) listen(r2, 0x7) (async) listen(r1, 0x7) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5c}, 0x94) (async) 4.435545407s ago: executing program 0 (id=4528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@getchain={0x74, 0x66, 0x209, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x6, 0x1}, {0x0, 0x1}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x3c}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x5}, {0x6, 0xb, 0xb}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x240448f1}, 0x6008800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000006c0)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x80008001, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x821, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="02ef386b6b6a0a3b8b0000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a80008801c0007800800050000000000080006000000000008000600ca00000024000780080006009c0000000800050000000000080005000000000008000500000000000c000780080006003a00000014000780ebfd060000000000000006007800000044000780080005000000000008000500000000000800050000000000006506000000000008000600bd00000008000600000000000800060000000000080006003b000020"], 0xd8}}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) ioctl$SIOCSIFHWADDR(r1, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 4.264151938s ago: executing program 0 (id=4529): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1d, 0x21, 0x20, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80800}, 0x0) 4.172495483s ago: executing program 1 (id=4530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c00108004000e8004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x120008c) (async) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) (async) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) (async, rerun: 64) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) (rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x158, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xf}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x128, 0x2, [@TCA_FLOW_EMATCHES={0x124, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10c, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}, "77ae5018f5b05e8be1daf07edc8b5408d13a67efc185afcf80247e9aa4f89e1e0be8b3f16bb7d9843adad91f47cc7215bc01be6e2d5b0a5724ebf2f7ab74b2042db5efe9d0e29b99b7f6e7754a0189fdc6ed128555bf92a7f5d8a71693f8eab2e0bdbfaf76236283763674d42d095ff3df28e47bf570d0a37e10769ab5a40895ee84dde18f99e6473edb7e57a3d02ca0b84c3671c8b2501728314642f1f563ac1a63d285f0163e6811192cde9f059e9102b19e3424bcefe0d6e0e574576021c3856847bcdd7b3f64a6d5dd804ed7879f6f360caef2ee30ab7e41b733a21edaa285a9afe485d5c200f9e7a1589960e1aeabd85b3eb884ed7a7132697d1d441c"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x203}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 64) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x2}, 0x94) 4.128835561s ago: executing program 0 (id=4531): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) syz_emit_ethernet(0x1ee, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f00000005c0)={&(0x7f00000004c0)=""/217, 0xd9}) (async) unshare(0x2c020400) (async) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r5 = openat$cgroup_int(r4, &(0x7f0000000600)='cpuset.sched_load_balance\x00', 0x2, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000040000000a00000003000013010000000b000000020000000700000007000000001000000200000006000000fdffffff0700000000005f005b0b4bf61ae1c402e22e7bd069c93de26bf8afb7550f84b4ea97f44a6ed9602376738c6bdcbaafe49b6b19ad67a58dca422c"], 0x0, 0x4c}, 0x28) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000700000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_ext={0x1c, 0x23, &(0x7f0000001300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x9, 0x3, 0x1, 0xffffffffffffffff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}], &(0x7f0000001440)='GPL\x00', 0x3, 0xf3, &(0x7f0000001480)=""/243, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001800)={0x1, 0x4, 0x7c5, 0x8000}, 0x10, 0x21b8d, r2, 0x2, &(0x7f0000001840)=[0xffffffffffffffff, r2], &(0x7f0000001880)=[{0x4, 0x3, 0x5, 0xa}, {0x1, 0x3, 0xf, 0xc}], 0x10, 0x6}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f00000000ad000000000200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000004000000010000008000000034500fafd72e0476c81de1a584a266e20370fdb71e052a6ed9d4016f4092fdd3c7460f39fb3bcef752254b8ba71f148a5d6f66ae70458fbd14e0ddb71e5f95633e8cf71689f1670283617ae0cd7061d548683cedbb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f00000048c0)=[{&(0x7f0000000140)="08d58d45a2eec60edea604530ea56f459cc79bcb8aca59a34d98cbf0ed8b00f70991c16c9f89163b3e9a04d59a4fae7ad2c0adb14b71371aa9102ecfd2533d", 0x3f}, {&(0x7f0000000380)="7fc5103174defefad4184f5f672a904c5990a08afba5c1a6f3acc0953efffb4048de9f61b6c41d0ae624a263fc4f42b2dd3d52600ca64ea36f53219cdf7e12e3d39c9f8094f663535f9f2bb82609dc262260ce7785e26b915c1f2e0137d231decd", 0x61}, {&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000004880)="b87f7f74312bea03e9c64672f3c6e6f1640a349a91a8889d924650701d6e674a1c0ff1e48bb1d4f5a3d7c4c8d97f", 0x2e}], 0x4) (async) write$cgroup_subtree(r5, &(0x7f0000000780)=ANY=[@ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x31) 3.784118001s ago: executing program 4 (id=4532): r0 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @mcast1, 0x40}}}, 0x88) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c00028005001700ecffffff08000400ff"], 0x44}}, 0x4000) 3.783230204s ago: executing program 1 (id=4533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0600000004000000090000001000000001110400", @ANYRES32=0x0, @ANYBLOB="000000006300945529ac41000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000000020000000300"/28], 0x50) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x1}, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="e8f1ed356c22aabbef92af193ce15f92da3052a673b833926bf1892cfa5edc8e79f22fcc39b4b8bf5811f3b82243eb54d21f8f047712bfdcbaef6acdae76eaf72ed208c2c933658cbc7596b2fdd27b39054e1525540d6f6dc8d5f1a7f788625f234ec4643ccca7b02dc4af336c6388a67fb1bb9d6799d84f671ed0e6c43d188d45795fde0aaaff12b6619865221291d5f75f0b4dc50946b6a200"/168, @ANYRESOCT=r0, @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x4004089) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x20000000000000ed, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000000095"], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000004c0)=0x5, 0x4) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000010080000000000037", @ANYRES32=r5, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000000000000000000000f000000000000000000000000e085fb010000"], 0x50) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x8) close(r9) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702da816cedd1fec3b60000000000008500000083000000bf090000000000005509010000000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a3}, 0x94) (async) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@loopback, 0x0}, &(0x7f0000000600)=0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="7c25b08ddda96c680dc00b40878fcb1ee2612652a43f8c08de51e3935bf3c19bda9b674fd748c94c"], &(0x7f0000000540)='GPL\x00', 0x1000, 0x1f, &(0x7f0000000580)=""/31, 0x40f00, 0x1, '\x00', r10, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.687633185s ago: executing program 3 (id=4534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7f}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x8d1) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.595725215s ago: executing program 2 (id=4535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x20) 3.544711716s ago: executing program 0 (id=4536): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="830505000000000020001280080001006772650014000200080069000000"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000100)=0x206, 0x4) (rerun: 64) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x2d, 0x0, 0x0, 0x2}, 0x28) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x125000, 0x1800, 0x8, 0x2}, 0x8) write(r0, &(0x7f0000000300)="060000000300000002", 0x9) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r6 = socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000000c0)) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce5f715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) (async) sendmsg$sock(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="67f1", 0xfdef}], 0x1}, 0x40840) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, 0x0, 0xa7, 0x7fffffff, 0x8, 0x40, 0x74fa, 0x9}, &(0x7f0000000400)=0x9c) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r10, &(0x7f00000008c0)=[{0x0}], 0x1, 0x3, 0x1) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000480)={r9, 0x6}, &(0x7f00000004c0)=0x8) (async, rerun: 32) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r11, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8) (async, rerun: 64) recvfrom$inet(r11, &(0x7f0000000040)=""/33, 0x21, 0x40000020, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) (rerun: 64) 3.544201998s ago: executing program 4 (id=4537): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="b7020000020000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000200000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x8}}}, {0x8, 0x22eb, 0x3}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5e}, @val={0x8, 0x3, r7}, @void}}, [""]}, 0x24}}, 0x8000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) 3.460130376s ago: executing program 2 (id=4538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7b3df8ff0000000085000000050000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.362959752s ago: executing program 1 (id=4539): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x22, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r15, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@dev}, &(0x7f0000000180)=0xc) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r16, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.273832984s ago: executing program 2 (id=4540): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002ff070300000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x9, 0x32e}, 0x28) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x3a) writev(r1, &(0x7f0000000680), 0x1000000000000294) r2 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)={0xffffffffffffffff}) listen(r5, 0x16fc) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000140)={0x4, 0x7, 0x3, 0x0, 0x7, 0x23, 0x25, "b00651ebdab1b8ccc2da46fb57888818c8880098", "21097cb8245100087a444d4c0c9cb254c56e93a8"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r7, 0x1}, 0x14}}, 0x0) socket$packet(0x11, 0x3, 0x300) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xf5, 0x5, 0x8, 0xe2f6, 0xfe5}, 0xffff, 0x0, 0xe34, 0xab7, 0x3, 0x3, 0x1e, 0x8, 0x7, 0x2, {0x6, 0x63c6, 0x25, 0x9, 0x8, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 3.1648995s ago: executing program 3 (id=4541): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0xe}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'pim6reg\x00'}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x24, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbe3, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x39}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf85}, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x84, &(0x7f0000000380)=""/132, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x4, 0xe, 0x7}, {0x1, 0x2, 0x2, 0xb}, {0x3, 0x3, 0xf, 0x9}, {0x0, 0x4, 0x2, 0x7}, {0x0, 0x2, 0xd, 0x8}, {0x4, 0x4, 0x3, 0x3}, {0x4, 0x1, 0xf, 0xa}, {0x4, 0x1, 0x3}], 0x10, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001010000000000000800000071100a000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a40)={&(0x7f0000000700)="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", &(0x7f0000000800)=""/177, &(0x7f00000008c0)="4a9c32b6efd94ad4fe", &(0x7f0000000900)="92e973f3930be1e852fc6013716e31391d67115178ed89c63dc9f8cf6967d17b4a0d18349f785bd2fd02b842068fba7bbed6f1baf44a597ba0cab9609587d2c02c371a6f5a0546e4d4b0dfde86465ab2b21c2d1846b4dd394808089ec407b011469e6cd3110816f93cb51f4af27b6cb84e27485bbaf768ff8a894847430cf7cc7d5246e5d98f741a832266b6928a52689b74be53baac454ae8e494584961296dc001e3cbedb811e0a40d29", 0x2, r8, 0x4}, 0x38) (async) ioctl$FICLONE(r7, 0x40049409, r0) 2.705389696s ago: executing program 1 (id=4542): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) sendfile(r2, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000), 0x0) close(r3) socket$inet_sctp(0x2, 0x6, 0x84) 2.685245849s ago: executing program 3 (id=4543): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000001c0)=""/221, 0x41000, 0x10, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1d106, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = accept(r2, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80) sendmsg$nl_xfrm(r4, &(0x7f0000001600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)=@getsadinfo={0x1020, 0x23, 0x8, 0x70bd28, 0x25dfdbfd, 0x0, [@sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x2, 0x1000, "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"}}]}, 0x1020}, 0x1, 0x0, 0x0, 0x4004}, 0x4084) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001640)={0x0, 0x2, 0x6, [0xf9f4, 0xdf7, 0x9, 0x3b, 0x10, 0x4]}, &(0x7f0000001680)=0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000016c0)={r5, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) syz_genetlink_get_family_id$fou(&(0x7f0000001780), r2) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000001880)={&(0x7f00000017c0), 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x38, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x92b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x80) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000018c0)={0x0, 0x0, "c4e18fe5d1331f7c6d2a95039d6a9937"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x6000, 0x0) write$tun(r7, &(0x7f0000001940)={@val={0x0, 0x1}, @void, @mpls={[{0x1}], @llc={@snap={0xab, 0xa8, "ac", "0ce995", 0x16, "65d4ae7978b7a35b6853206a567e67dfd6bbfbdf59c50d6cbec9900936c461398a99c5c3fc06d23b514aa76b5b5a8640b8b59deea3d52d5647810ed0a7d419ae64e02e86c74d8b87a60d6b1f26849ec2e72f7aa368ca5f15472c506bab76399fad199db83c96"}}}}, 0x76) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000019c0)=0x2, 0x4) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000001a00)={'veth0_vlan\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000001a40), 0x8) r8 = accept4(r4, &(0x7f0000001a80), &(0x7f0000001b00)=0x80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c00)={0xfc, r10, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc4, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x56, 0x1, "360f22335e0e10bc60afb12cc605b135c19d6e95e8589e2ff77c95b7e5263d20812655c4c9ad28517e90281431d028c0b03925af558c0e81cf7d8d86792d426100ee2090b2ca24be22d243fb9bed9c40cc3d"}}, {0x64, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x60, 0x1, "b6d30ba97bf7851470e6750da55856825d6aef7c0e09ab4a3aa10d7a656131e4eb39dd2cf249b8bc68f490e3721244f98beaa051996519130942a87e2d16062604660174e09984c5c14b285df16f227957dd484f585b556fe22a5eed"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4048015}, 0x84) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000001e80)='fou\x00', 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001ec0)={r9}) r12 = accept4$phonet_pipe(r8, &(0x7f0000001f00), &(0x7f0000001f40)=0x10, 0x80800) setsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f0000001f80)=0x1, 0x4) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r13, 0xc0045878) 2.084003506s ago: executing program 0 (id=4544): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c14260360f6122f00160097000500"/47, 0x2f}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000201c576000000000000000003000001140018800800024000000009080001400000000904"], 0x2c}}, 0x24000881) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x1ffcd, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0x4}}]}]}, 0x9c}}, 0x0) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40841}, 0x40004) (async, rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="3d7bc76bdbbda9b84b4fce8176a4fe0b", 0x10) (async, rerun: 32) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) listen(r4, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088008000c8004000780"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, r7}, 0xc) r9 = accept(r4, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e0001002bbd7000fbdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0000080008000100ac1e090104000e80bd198feef6ed0695b9b7290e47d9993db6f6883d61a51ba69c9dc3801ad11066625c0b06cd87e86bc2"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x20000080) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r9, 0x1) 2.080993637s ago: executing program 3 (id=4545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@deltaction={0x30, 0x18, 0x1, 0x70b52a, 0x25dfdc20, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) (async) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) (async, rerun: 64) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 2.044699097s ago: executing program 1 (id=4546): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = socket(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x79, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x28}}], 0x1, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r1, 0x0, 0x0, 0x4ab2e41821fb85f6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.043744342s ago: executing program 2 (id=4547): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c2"], 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x41100, 0x9d}, 0x94) (rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a300000000500010007000000aa0afa7c19f5e61932da68addb676a050005000a000000140007800800114000000010080012400000ffff1400030068650ad57a7320322c95"], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003c00)=@newtfilter={0x1498, 0x2c, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1468, 0x2, [@TCA_FLOWER_ACT={0x145c, 0x3, [@m_csum={0x148, 0xf, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x68f, 0x0, 0x8e5, 0x1ff}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9f99, 0x3}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x557, 0x1000, 0x0, 0x2, 0x3}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x5, 0x6, 0x8}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0xfffffffa, 0x8, 0x4}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1000, 0x1, 0x2}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0xfffeffff, 0x1, 0x3, 0x1}, 0x6}}]}, {0x58, 0x6, "871e550e518d568bee42ae83b25ad63f8861bb371c7df624253b4ad62b0929c1b54b56cb58c0feeb025522ac9bb04ee426e9a78a9c718892870dd72e9cc1d83d4e8556df2bc3569218fb21844545c65ff6af8b76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x12c, 0x1d, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0xe0, 0x6, "61bc4d9da65affd8e56906b96f59152e964f3ca66a7fb64b3e4c3e5eb8ebf066be223a5a2bd580181ba4f7b04b83ab634c65ba450ec10d351c83c58c2756e62a5f1a8f488eb8979ffbad3e5bfdd15f7607f6412bcfb8df8dbb270b9a1fedb87b2f74cc25a193959fc9595e8eebb67a57fb7eb10dbdb061a1d3341f1e2eebc3652401a9f7fa0ed8ed3192f19d32e843be4b39c6fdcd77aef0bb8b4c0c02da1ba9ca5e0a1108a7984e29e69c1d795fd510c818e3629caa1b0a37f805ff49810d2061acd6f28c8ebcf555a7cb4678dd23929f409d68d29782bd03e32555"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x7c, 0x14, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15f8, 0x8}}]}, {0x42, 0x6, "8110928f4b69005bae0535e83a313a204b8b4a77be76c8107d45906105993010f8243a79215fdf7f1fcaf334a24a90e9ff028680296fa3c70741cf5c5b78"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0xdc, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffff2, 0x20000000, 0x3, 0xfff}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x9, 0xa}, 0x5f}}]}, {0x75, 0x6, "5df6438de332b663633804e9fad66fddb8625c7e0b42193779c471abbfb4d7a77bba30c060ced4f33a07c0639cee6a93e148e41db52a7961b3b5a00a7c5212efc5b4f060ff3e801e7f46575a4cf163ba34933347f44336fcb2405ba541dfef8d01424ceb34e19209657df65a6c15eb9300"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x108c, 0x2, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xb40}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x1498}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@private2, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xa, 0xffff}, {0x8, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r10, 0x0) (async) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r11, 0x0, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="4500001c12344000402f"], 0x1c) 1.053959217s ago: executing program 3 (id=4548): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800000063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a607000d0000000000000000000000000000b898166425", 0x65) 924.734778ms ago: executing program 4 (id=4549): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1000, 0x2, 0x8002, 0x103, 0xa, 0x8, 0x1}, 0x9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) pread64(r7, &(0x7f0000002880)=""/4103, 0x1007, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="30100000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 0s ago: executing program 4 (id=4550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180005ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00"], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000240)) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="180600005670000000000000fb000000852000000200000040000000000000009500007b0000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) kernel console output (not intermixed with test programs): : Started in network mode [ 548.232510][T18887] tipc: Node identity 1, cluster identity 4711 [ 548.232526][T18887] tipc: Node number set to 1 [ 548.855122][T18901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.097284][T18901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 549.164174][T18917] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3182'. [ 549.236334][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'. [ 549.252891][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.279798][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.281403][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.283102][T18901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.359326][T18901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 549.409667][T18901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.443871][T18901] ip6gretap0: entered allmulticast mode [ 549.472283][T18901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.510405][T18901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 549.561664][T18901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 549.564569][T18901] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.566564][T18901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.602828][T18901] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.605130][T18901] 8021q: adding VLAN 0 to HW filter on device bond8 [ 549.608250][T18901] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 549.619733][T18901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 549.623801][T18901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 549.637289][T18901] 8021q: adding VLAN 0 to HW filter on device bond11 [ 549.645687][T18901] 8021q: adding VLAN 0 to HW filter on device bond12 [ 549.667346][T18901] 8021q: adding VLAN 0 to HW filter on device bond13 [ 549.673790][T18901] 8021q: adding VLAN 0 to HW filter on device bond14 [ 549.679604][T18901] 8021q: adding VLAN 0 to HW filter on device bond15 [ 549.684312][T18901] 8021q: adding VLAN 0 to HW filter on device bond16 [ 549.687496][T18901] 8021q: adding VLAN 0 to HW filter on device bond17 [ 549.705302][T18901] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 549.763975][T18907] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 549.866471][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.866562][ T6781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.887665][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.887783][ T6781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.189154][ T6783] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.189195][ T6783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.254615][ T6783] bond4: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 550.257006][T18946] netlink: 3560 bytes leftover after parsing attributes in process `syz.3.3183'. [ 550.406526][ T6774] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.406565][ T6774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.463175][ T6774] bond17: (slave macvlan0): link status definitely up, 10000 Mbps full duplex [ 550.463529][ T6774] bond17: (slave macvlan0): making interface the new active one [ 550.498166][ T6774] bond17: active interface up! [ 550.599999][T18963] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3184'. [ 550.627264][T18965] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 550.698960][ T6668] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.699001][ T6668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.769304][T18972] ip_tables: iptables: counters copy to user failed while replacing table [ 550.771801][T18971] ip_tables: iptables: counters copy to user failed while replacing table [ 550.806304][T18435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.186657][T18435] veth0_vlan: entered promiscuous mode [ 551.215904][T18435] veth1_vlan: entered promiscuous mode [ 551.339733][ T6774] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.339775][ T6774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.487128][T18435] veth0_macvtap: entered promiscuous mode [ 551.521427][T18435] veth1_macvtap: entered promiscuous mode [ 551.623746][T18435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.701330][T18435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.895724][T19013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3195'. [ 551.895755][T19013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3195'. [ 552.190040][ T6783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.602707][ T6777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.789843][ T6774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.789868][ T6774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.820376][ T6777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.847946][ T6774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.999837][ T6775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.999861][ T6775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.130693][T19039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3201'. [ 553.636611][T19060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.694522][T19061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.764437][T19060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.977078][T19073] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 554.003811][T19073] netlink: 'syz.2.3205': attribute type 23 has an invalid length. [ 554.003839][T19073] netlink: 'syz.2.3205': attribute type 21 has an invalid length. [ 554.003857][T19073] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.282097][T17259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 554.290396][T17259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 554.308227][T17259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 554.325985][T17259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 554.326755][T17259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 554.686805][T19094] veth1_to_bridge: entered allmulticast mode [ 554.706222][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.857790][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 555.142036][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 555.466103][T19131] sctp: [Deprecated]: syz.4.3215 (pid 19131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.466103][T19131] Use struct sctp_sack_info instead [ 555.510710][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 555.510741][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3215'. [ 555.582622][T19134] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 555.726146][T19084] lo speed is unknown, defaulting to 1000 [ 555.941725][T19146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 556.016164][T19146] bond1: option arp_interval: invalid value (18446744073709551615) [ 556.016308][T19146] bond1: option arp_interval: allowed values 0 - 2147483647 [ 556.020250][T19146] bond1 (unregistering): Released all slaves [ 556.143920][T19151] veth0_to_bridge: entered promiscuous mode [ 556.144158][T19151] macvtap1: entered allmulticast mode [ 556.144174][T19151] veth0_to_bridge: entered allmulticast mode [ 556.188501][T19151] veth0_to_bridge: left allmulticast mode [ 556.188545][T19151] veth0_to_bridge: left promiscuous mode [ 556.278222][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 556.457856][ T5619] Bluetooth: hci0: command tx timeout [ 556.575855][T19084] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.578496][T19084] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.578686][T19084] bridge_slave_0: entered allmulticast mode [ 556.581068][T19084] bridge_slave_0: entered promiscuous mode [ 556.612036][T19084] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.612230][T19084] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.612423][T19084] bridge_slave_1: entered allmulticast mode [ 556.614377][T19084] bridge_slave_1: entered promiscuous mode [ 556.680516][T19084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.684227][T19084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.742746][T19084] team0: Port device team_slave_0 added [ 556.746002][T19084] team0: Port device team_slave_1 added [ 556.793457][T19084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.793478][T19084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.793516][T19084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.795606][T19084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.795624][T19084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.795652][T19084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.946895][T19084] hsr_slave_0: entered promiscuous mode [ 556.954321][T19084] hsr_slave_1: entered promiscuous mode [ 556.955113][T19084] debugfs: 'hsr0' already exists in 'hsr' [ 556.955137][T19084] Cannot create hsr debugfs directory [ 557.392128][T19084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.392169][T19084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.649533][T19084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.649577][T19084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.815919][T19084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.815959][T19084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.019405][T19084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.019472][T19084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.079002][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'. [ 558.537706][ T5619] Bluetooth: hci0: command tx timeout [ 559.056396][T19154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.110478][T19216] Cannot find del_set index 1 as target [ 559.112818][T19084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 559.141781][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.144742][T19084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 559.212748][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.213725][T19084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 559.273598][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.277125][T19084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 559.297146][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.431170][T19235] ovs-s: entered promiscuous mode [ 559.647755][T19246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3241'. [ 559.649123][T19247] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3241'. [ 559.731446][T19084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.786597][T19084] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.838406][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.838512][ T6672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.887009][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.887123][ T6774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.916450][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 560.491664][T19280] lo speed is unknown, defaulting to 1000 [ 560.621504][ T5619] Bluetooth: hci0: command tx timeout [ 561.555817][T19302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3254'. [ 561.638425][T19308] ip_tables: iptables: counters copy to user failed while replacing table [ 561.769608][T19084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.815974][T19314] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 561.911367][T19084] veth0_vlan: entered promiscuous mode [ 561.951281][T19084] veth1_vlan: entered promiscuous mode [ 562.086048][T19329] veth1_to_bond: entered allmulticast mode [ 562.086660][T19329] veth1_to_bond: entered promiscuous mode [ 562.101816][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 562.337250][T19329] veth1_to_bond (unregistering): left allmulticast mode [ 562.337298][T19329] veth1_to_bond (unregistering): left promiscuous mode [ 562.434292][T19084] veth0_macvtap: entered promiscuous mode [ 562.484560][T19084] veth1_macvtap: entered promiscuous mode [ 562.548442][T19084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.593195][T19084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.658649][ T6774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.658699][ T6774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.658735][ T6774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.698213][ T5619] Bluetooth: hci0: command tx timeout [ 562.801768][ T6668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.824974][T19339] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3258'. [ 562.980179][T19341] erspan1: entered promiscuous mode [ 562.986217][T19343] netlink: 'syz.4.3263': attribute type 27 has an invalid length. [ 562.986245][T19343] netlink: 'syz.4.3263': attribute type 4 has an invalid length. [ 563.033812][ T6774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.033839][ T6774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.213383][T19343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3263'. [ 563.243207][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.243232][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.371988][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 563.695161][T19367] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 563.902507][T19378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.255056][T19401] siw: device registration error -23 [ 566.886234][T19378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.223323][T19428] syzkaller0: entered promiscuous mode [ 567.223348][T19428] syzkaller0: entered allmulticast mode [ 567.410424][T19444] netlink: 63 bytes leftover after parsing attributes in process `syz.0.3289'. [ 567.637100][T19458] netlink: 'syz.2.3293': attribute type 2 has an invalid length. [ 567.675481][T19458] netlink: 'syz.2.3293': attribute type 10 has an invalid length. [ 567.738721][T19458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.741243][T19458] team0: Port device netdevsim1 added [ 567.840804][T19458] TCP: TCP_TX_DELAY enabled [ 568.093368][T19481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3298'. [ 568.177465][ T31] audit: type=1800 audit(1790990160.567:14): pid=19474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3296" name="memory.events" dev="tmpfs" ino=50 res=0 errno=0 [ 568.179119][T19481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3298'. [ 568.620925][T19501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3303'. [ 569.042664][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 570.224655][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 572.873508][T19512] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 573.016602][T19519] syzkaller0: entered promiscuous mode [ 573.016628][T19519] syzkaller0: entered allmulticast mode [ 573.062545][T19519] tipc: Enabled bearer , priority 0 [ 573.114934][T19519] tipc: Resetting bearer [ 573.129009][T19528] netlink: 'syz.3.3310': attribute type 1 has an invalid length. [ 573.159283][T19517] tipc: Resetting bearer [ 573.233098][T19517] tipc: Disabling bearer [ 573.247165][T19530] sctp: [Deprecated]: syz.3.3311 (pid 19530) Use of int in max_burst socket option. [ 573.247165][T19530] Use struct sctp_assoc_value instead [ 573.465195][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 573.554691][T19540] pim6reg: entered allmulticast mode [ 574.180906][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 574.216296][T19564] vlan2: entered promiscuous mode [ 574.216320][T19564] bridge0: entered promiscuous mode [ 574.315637][T19571] Bluetooth: MGMT ver 1.23 [ 574.340778][T19571] openvswitch: netlink: Key type 29 is not supported [ 574.576913][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'. [ 574.636900][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 574.636919][T19581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3328'. [ 575.004103][T19598] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 575.047783][T19598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3332'. [ 575.499320][T19628] sctp: [Deprecated]: syz.1.3333 (pid 19628) Use of int in max_burst socket option deprecated. [ 575.499320][T19628] Use struct sctp_assoc_value instead [ 575.714056][T19637] trusted_key: syz.4.3340 sent an empty control message without MSG_MORE. [ 575.780062][T19642] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3341'. [ 575.782291][T19643] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3341'. [ 575.914321][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 575.997357][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 576.158661][T19659] netlink: 'syz.0.3343': attribute type 4 has an invalid length. [ 576.250203][T19661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'. [ 576.255580][T19658] tipc: Failed to remove unknown binding: 66,0,0/1:3548774200/3548774202 [ 576.255616][T19658] tipc: Failed to remove unknown binding: 66,0,0/1:3548774200/3548774201 [ 576.259199][T19658] tipc: Failed to remove unknown binding: 66,0,0/1:3548774200/3548774202 [ 576.259308][T19658] tipc: Failed to remove unknown binding: 66,0,0/1:3548774200/3548774201 [ 576.329912][T19664] ip_tables: iptables: counters copy to user failed while replacing table [ 576.817746][T19678] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 577.339345][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 577.528270][T19713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.973107][T19733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.973155][T19743] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 578.016989][T19733] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 578.089967][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.090284][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.090755][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.091115][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.091429][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.091692][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.092087][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.156259][T19748] validate_nla: 20 callbacks suppressed [ 578.156280][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.156579][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.156880][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.157186][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.157455][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.205362][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.216193][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.216512][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.216797][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.217094][T19748] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 578.480539][T19759] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 578.481325][T19759] batman_adv: batadv0: Adding interface: gretap1 [ 578.481343][T19759] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.481379][T19759] batman_adv: batadv0: Interface activated: gretap1 [ 578.717836][T19773] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001 [ 579.870350][T19793] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20001 [ 581.359456][T19753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.640125][T19801] ip6tnl1: entered allmulticast mode [ 581.643950][ T6668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 581.644199][ T6668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 581.670803][ T7416] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 581.694186][T19806] __nla_validate_parse: 10 callbacks suppressed [ 581.694208][T19806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3384'. [ 581.798676][ T6775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.798702][ T6775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.848001][ T7416] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 581.888140][ T7416] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 582.013735][T19823] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3387'. [ 582.013764][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3387'. [ 582.013780][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'. [ 582.274881][T19827] syzkaller1: entered promiscuous mode [ 582.274909][T19827] syzkaller1: entered allmulticast mode [ 582.513186][T19839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3392'. [ 582.528937][T19836] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3391'. [ 582.630597][T19843] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 582.637314][T19844] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 582.658325][T19842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'. [ 582.659399][T19843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3393'. [ 583.961338][T19915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.193275][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 584.193316][T19930] validate_nla: 29 callbacks suppressed [ 584.193329][T19930] netlink: 'syz.1.3415': attribute type 30 has an invalid length. [ 584.286939][T19930] vxlan0: entered promiscuous mode [ 584.286965][T19930] vxlan0: entered allmulticast mode [ 584.329486][ T6772] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.329540][ T6772] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.329588][ T6772] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.329626][ T6772] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.392827][T19940] Bluetooth: hci0: unsupported parameter 5134 [ 584.392851][T19940] Bluetooth: hci0: unsupported parameter 8192 [ 584.392865][T19940] Bluetooth: hci0: unsupported parameter 5134 [ 584.392879][T19940] Bluetooth: hci0: unsupported parameter 8192 [ 585.305710][T19951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.320042][T19951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3420'. [ 585.503478][T19965] v: renamed from veth0_vlan (while UP) [ 585.657879][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 585.952167][T19993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.032078][T19991] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 586.073583][T19991] bond0 (unregistering): Released all slaves [ 586.402588][T20011] sctp: [Deprecated]: syz.1.3440 (pid 20011) Use of int in max_burst socket option. [ 586.402588][T20011] Use struct sctp_assoc_value instead [ 586.536650][T20019] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 587.114937][T20050] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20003 [ 587.155737][ T9984] IPVS: starting estimator thread 0... [ 587.241447][T20059] IPVS: using max 28 ests per chain, 67200 per kthread [ 587.292081][T20062] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 587.342143][T20062] bond0: entered promiscuous mode [ 587.345104][T20062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.422017][T20062] vlan3: entered allmulticast mode [ 587.422042][T20062] bond0: entered allmulticast mode [ 587.456338][T20062] bond0: (slave bridge2): making interface the new active one [ 587.456368][T20062] bridge2: entered promiscuous mode [ 587.456566][T20062] bridge2: entered allmulticast mode [ 587.477036][T20062] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 587.518796][T20066] __nla_validate_parse: 3 callbacks suppressed [ 587.518828][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3456'. [ 587.518856][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3456'. [ 587.675352][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3456'. [ 587.675392][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3456'. [ 587.892702][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 587.918123][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 587.990816][ T31] audit: type=1804 audit(1790990180.387:15): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3463" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=507 res=1 errno=0 [ 587.990982][ T31] audit: type=1800 audit(1790990180.387:16): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3463" name="cgroup.controllers" dev="tmpfs" ino=507 res=0 errno=0 [ 588.047829][ T9984] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.047881][ T9984] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.047921][ T9984] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.068361][T20075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3458'. [ 588.125486][ T989] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 588.140275][T20097] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 588.167864][ T6668] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.325999][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'. [ 588.353030][T20119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3471'. [ 588.433285][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3471'. [ 588.825191][T20142] openvswitch: netlink: Key 6 has unexpected len 20 expected 2 [ 588.838372][T20142] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 588.847296][T20142] 0ªX¹¦Dö»: entered allmulticast mode [ 588.923178][T20147] netlink: 'syz.2.3474': attribute type 1 has an invalid length. [ 589.045026][T20147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.108989][T20156] netlink: 'syz.0.3477': attribute type 1 has an invalid length. [ 589.155826][T20156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.531549][ T6777] IPVS: starting estimator thread 0... [ 589.532822][T20173] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 589.603556][T20182] ip_tables: iptables: counters copy to user failed while replacing table [ 589.618573][T20178] IPVS: using max 28 ests per chain, 67200 per kthread [ 589.990146][T20191] lo speed is unknown, defaulting to 1000 [ 590.575958][T20216] syzkaller1: entered promiscuous mode [ 590.575986][T20216] syzkaller1: entered allmulticast mode [ 591.043544][T20243] tipc: Started in network mode [ 591.043579][T20243] tipc: Node identity 16fbaa3e7502, cluster identity 4711 [ 591.043752][T20243] tipc: Enabled bearer , priority 0 [ 591.185154][T20243] +: renamed from syzkaller0 [ 591.195835][T20243] tipc: Disabling bearer [ 591.554104][T20264] Cannot find del_set index 4 as target [ 591.636529][T20276] netlink: 'syz.2.3505': attribute type 16 has an invalid length. [ 591.655841][T20274] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 591.671492][T20274] bond2 (unregistering): Released all slaves [ 591.731178][T20280] netlink: 'syz.2.3505': attribute type 16 has an invalid length. [ 591.731205][T20280] netlink: 'syz.2.3505': attribute type 17 has an invalid length. [ 591.954142][T20280] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.954933][T20280] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.172094][T20280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.186122][T20280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.635849][T20280] gretap1: left allmulticast mode [ 592.645154][T20280] veth5: left allmulticast mode [ 592.683531][T20280] erspan1: left promiscuous mode [ 592.685899][T20280] ip6tnl1: left allmulticast mode [ 592.710592][ T6774] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.710639][T20288] __nla_validate_parse: 12 callbacks suppressed [ 592.710657][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3508'. [ 592.710848][T20287] tc_dump_action: action bad kind [ 592.819014][ T9984] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.819099][ T9984] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.819139][ T9984] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.994619][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 593.069886][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 593.088382][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.096951][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 593.097241][T20308] veth0: entered promiscuous mode [ 593.148960][T20298] syzkaller1: entered promiscuous mode [ 593.148986][T20298] syzkaller1: entered allmulticast mode [ 593.185693][T20306] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.3511'. [ 593.256411][T20307] veth0: left promiscuous mode [ 593.267881][T20315] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20265 [ 593.269846][T20315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3514'. [ 593.424308][T20315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3514'. [ 593.469442][T20315] žÿ: renamed from team_slave_1 (while UP) [ 593.491647][T20319] netlink: 'syz.4.3516': attribute type 8 has an invalid length. [ 593.491670][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 593.614296][T20319] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.652376][T20328] netlink: 'syz.2.3517': attribute type 1 has an invalid length. [ 593.653691][T20326] netlink: Unknown conntrack attr (type=11783, max=9) [ 593.653719][T20326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.742148][T20328] bond3: entered promiscuous mode [ 593.742683][T20328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 593.868072][T20328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 593.868536][T20328] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 593.868559][T20328] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 593.930548][T20328] bond3: (slave gre1): making interface the new active one [ 593.930576][T20328] gre1: entered promiscuous mode [ 593.966537][T20328] bond3: (slave gre1): Enslaving as an active interface with an up link [ 594.132255][T20346] PKCS7: Unknown OID: [4] (bad) [ 594.132277][T20346] PKCS7: Only support pkcs7_signedData type [ 594.182186][T20343] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.184292][T20348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3523'. [ 594.296671][T20355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3525'. [ 594.355381][ T5619] Bluetooth: hci2: link tx timeout [ 594.355405][ T5619] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 594.362962][ T5619] Bluetooth: hci2: link tx timeout [ 594.362984][ T5619] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 594.973304][T20387] bridge_slave_0: left allmulticast mode [ 594.973338][T20387] bridge_slave_0: left promiscuous mode [ 594.975298][T20387] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.311345][T20407] syz_tun: entered allmulticast mode [ 595.406572][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406615][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406643][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406670][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406696][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406734][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406762][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406789][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406816][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406843][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406870][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406897][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406923][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406950][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.406977][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407004][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407048][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407075][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407101][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407127][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407153][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407180][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407206][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407233][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.407260][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.608867][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.608907][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.608935][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.608961][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.608988][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.609014][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.609041][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.609067][T20423] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20000 [ 595.974102][T20405] syz_tun: left allmulticast mode [ 596.378028][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 597.281850][T20540] xt_CT: No such helper "syz0" [ 597.336455][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034350400: rx timeout, send abort [ 597.365487][T20545] tun0: tun_chr_ioctl cmd 1074025675 [ 597.365528][T20545] tun0: persist enabled [ 597.365602][T20540] tun0: tun_chr_ioctl cmd 1074025675 [ 597.365619][T20540] tun0: persist enabled [ 597.724995][T20571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.806505][T20575] __nla_validate_parse: 5 callbacks suppressed [ 597.806529][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 598.228285][T20591] ip_tables: iptables: counters copy to user failed while replacing table [ 598.538556][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 598.725097][T20603] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 599.402043][T20626] netlink: 'syz.3.3571': attribute type 1 has an invalid length. [ 599.402072][T20626] netlink: 'syz.3.3571': attribute type 1 has an invalid length. [ 599.415860][T20626] tipc: Started in network mode [ 599.415894][T20626] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 599.416045][T20626] tipc: Enabled bearer , priority 0 [ 599.475018][T20628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3572'. [ 599.687873][T20636] syzkaller0: entered promiscuous mode [ 599.687897][T20636] syzkaller0: entered allmulticast mode [ 599.836294][T20641] tipc: Enabled bearer , priority 7 [ 600.067254][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3574'. [ 600.363517][T20660] FAULT_INJECTION: forcing a failure. [ 600.363517][T20660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.363553][T20660] CPU: 0 UID: 0 PID: 20660 Comm: syz.1.3578 Not tainted syzkaller #0 PREEMPT(full) [ 600.363577][T20660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 600.363591][T20660] Call Trace: [ 600.363599][T20660] [ 600.363609][T20660] dump_stack_lvl+0xe8/0x150 [ 600.363646][T20660] should_fail_ex+0x410/0x560 [ 600.363679][T20660] _copy_from_user+0x2d/0xb0 [ 600.363708][T20660] do_tcp_setsockopt+0x504/0x1f80 [ 600.363753][T20660] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 600.363797][T20660] ? aa_sock_opt_perm+0xe1/0x1e0 [ 600.363828][T20660] ? sock_common_setsockopt+0x36/0xc0 [ 600.363852][T20660] ? tcp_setsockopt+0x3d/0xe0 [ 600.363892][T20660] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 600.363917][T20660] do_sock_setsockopt+0x17c/0x1b0 [ 600.363951][T20660] __x64_sys_setsockopt+0x13d/0x1b0 [ 600.363985][T20660] do_syscall_64+0x166/0x520 [ 600.364017][T20660] ? trace_irq_disable+0x3b/0x140 [ 600.364039][T20660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.364062][T20660] ? clear_bhb_loop+0x70/0xc0 [ 600.364088][T20660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.364109][T20660] RIP: 0033:0x7fc30bd9e159 [ 600.364130][T20660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.364149][T20660] RSP: 002b:00007fc30ccd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.364173][T20660] RAX: ffffffffffffffda RBX: 00007fc30c025fa0 RCX: 00007fc30bd9e159 [ 600.364190][T20660] RDX: 0000000000000012 RSI: 0000000000000006 RDI: 0000000000000004 [ 600.364203][T20660] RBP: 00007fc30ccd2090 R08: 0000000000000004 R09: 0000000000000000 [ 600.364218][T20660] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 600.364232][T20660] R13: 00007fc30c026038 R14: 00007fc30c025fa0 R15: 00007ffc3178cee8 [ 600.364266][T20660] [ 600.627832][T20658] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 600.661905][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.663830][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.664809][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.665656][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.666484][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.667360][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.677203][ T7405] tipc: Node number set to 11578026 [ 600.838108][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.840996][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.843678][T20658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.895073][ T7411] tipc: Node number set to 1677306430 [ 600.938046][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 601.177291][T20673] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3580'. [ 602.143891][ T6774] tipc: Subscription rejected, illegal request [ 602.183446][T20719] netlink: 'syz.2.3586': attribute type 2 has an invalid length. [ 602.186645][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3585'. [ 602.200907][T20717] netlink: 'syz.0.3585': attribute type 1 has an invalid length. [ 602.266206][T20717] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3585'. [ 603.793162][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'. [ 603.871009][T20758] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 603.912395][T20763] netlink: 'syz.3.3597': attribute type 3 has an invalid length. [ 604.138200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.235099][T20766] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 604.381284][T20779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3600'. [ 604.522427][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3600'. [ 605.252860][T20781] ip6gre1: entered promiscuous mode [ 605.252886][T20781] ip6gre1: entered allmulticast mode [ 605.410295][T20821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 605.546714][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 605.622033][T20834] sctp: [Deprecated]: syz.2.3607 (pid 20834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.622033][T20834] Use struct sctp_sack_info instead [ 605.622115][T20835] sctp: [Deprecated]: syz.2.3607 (pid 20835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.622115][T20835] Use struct sctp_sack_info instead [ 605.726423][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3607'. [ 605.775941][T20835] net_ratelimit: 58 callbacks suppressed [ 605.775957][T20835] openvswitch: netlink: Missing key (keys=50, expected=80) [ 606.473901][T20874] netlink: 'syz.0.3614': attribute type 10 has an invalid length. [ 606.536336][T20874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.559207][T20874] team0: Port device netdevsim1 added [ 606.627113][T20874] netlink: 'syz.0.3614': attribute type 10 has an invalid length. [ 606.703119][T20874] team0: Port device netdevsim1 removed [ 606.736566][T20874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.764945][T20874] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 606.844443][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'. [ 607.027604][T20885] lo speed is unknown, defaulting to 1000 [ 607.053786][T20893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3618'. [ 607.153314][T20893] tipc: Resetting bearer [ 607.177507][T20893] veth0_macvtap: left promiscuous mode [ 607.183912][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3618'. [ 607.383398][T20893] tipc: Disabling bearer [ 607.479753][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3621'. [ 607.585717][T20921] netlink: 'syz.1.3623': attribute type 5 has an invalid length. [ 608.374606][T20952] s: renamed from veth0 [ 608.856309][T20974] __nla_validate_parse: 7 callbacks suppressed [ 608.856334][T20974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3639'. [ 609.146226][T20985] xt_IDLETIMER: label is empty or not nul-terminated [ 609.334187][T21004] netlink: 'syz.2.3647': attribute type 3 has an invalid length. [ 610.106319][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 610.106346][T21042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3653'. [ 610.301324][T21047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3656'. [ 610.642522][T21054] netlink: 'syz.0.3657': attribute type 29 has an invalid length. [ 611.490796][T21081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.515407][T21081] vlan2: left promiscuous mode [ 611.515434][T21081] bridge0: left promiscuous mode [ 611.542653][T21081] vxlan0: left promiscuous mode [ 611.553669][T21081] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 611.568246][T21081] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 611.570799][T21081] bond0: left promiscuous mode [ 611.570824][T21081] bridge2: left promiscuous mode [ 611.602618][T21081] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 611.674857][T21068] infiniband syz0: set active [ 611.674884][T21068] infiniband syz0: added bond_slave_1 [ 611.717956][T21068] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 611.717998][T21068] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 611.718618][T21068] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 611.791193][T21068] RDS/IB: syz0: added [ 611.791251][T21068] smc: adding ib device syz0 with port count 1 [ 611.791281][T21068] smc: ib device syz0 port 1 has no pnetid [ 612.735314][T21113] lo speed is unknown, defaulting to 1000 [ 613.177874][T17259] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 613.855820][T21142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3676'. [ 614.118325][T21148] netlink: 'syz.3.3677': attribute type 1 has an invalid length. [ 614.230788][T21148] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3677'. [ 614.291424][T21156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3677'. [ 614.306611][T21150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.320296][T21150] bond2: (slave bond3): making interface the new active one [ 614.320774][T21150] bond2: (slave bond3): Enslaving as an active interface with an up link [ 614.348735][T21156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 614.420527][T21148] netlink: 'syz.3.3677': attribute type 15 has an invalid length. [ 615.154264][T21181] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 615.256210][T21185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3690'. [ 615.274035][T21188] ±ÿ: renamed from lo (while UP) [ 616.031971][T21204] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 616.031997][T21204] nbd: error processing sock list [ 616.032291][T21204] block nbd2: shutting down sockets [ 616.090450][T21204] netlink: 'syz.4.3694': attribute type 11 has an invalid length. [ 616.241924][T21206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3695'. [ 616.241967][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 616.242534][T21206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.771840][T21232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3702'. [ 616.791374][T21230] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3701'. [ 616.898710][T21237] ip_tables: iptables: counters copy to user failed while replacing table [ 617.029534][T21244] x_tables: duplicate underflow at hook 2 [ 617.271420][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3709'. [ 617.300807][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3709'. [ 617.310925][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3709'. [ 617.835246][T21271] ip6gre1: entered promiscuous mode [ 617.835274][T21271] ip6gre1: entered allmulticast mode [ 617.847128][ T6672] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 617.848692][ T6672] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 617.868109][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 617.909181][ T7405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 617.980034][T21275] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 618.048363][T21273] syzkaller0: entered promiscuous mode [ 618.048391][T21273] syzkaller0: entered allmulticast mode [ 618.119656][T21275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.144727][T21287] bond2: (slave geneve2): making interface the new active one [ 618.157262][T21287] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 618.182792][T21284] vlan2: entered promiscuous mode [ 618.182816][T21284] macvlan0: entered promiscuous mode [ 618.421871][ T7411] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 621.737839][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 622.763284][T21291] ipvlan2: entered allmulticast mode [ 622.763301][T21291] macvlan1: entered allmulticast mode [ 622.763311][T21291] veth1_vlan: entered allmulticast mode [ 622.765093][T21291] batman_adv: batadv0: Adding interface: ipvlan2 [ 622.765112][T21291] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.765148][T21291] batman_adv: batadv0: Interface activated: ipvlan2 [ 622.858661][ T7418] Dead loop on virtual device lo (net 1043), fix it urgently! [ 622.923686][ T6772] Dead loop on virtual device lo (net 1043), fix it urgently! [ 623.003846][T21303] syzkaller0: entered promiscuous mode [ 623.003876][T21303] syzkaller0: entered allmulticast mode [ 623.041219][T21303] tipc: Enabled bearer , priority 0 [ 623.056163][T21303] __nla_validate_parse: 5 callbacks suppressed [ 623.056185][T21303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3723'. [ 623.087128][T21302] tipc: Resetting bearer [ 623.118514][T21309] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3722'. [ 623.124703][T21302] tipc: Disabling bearer [ 623.170665][T21312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3722'. [ 623.227179][T21309] vlan2: entered allmulticast mode [ 623.227202][T21309] erspan0: entered allmulticast mode [ 623.438325][ T6672] Dead loop on virtual device lo (net 1043), fix it urgently! [ 623.744244][ T5883] Dead loop on virtual device lo (net 1043), fix it urgently! [ 624.266730][T21322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.461249][ T6777] Dead loop on virtual device lo (net 1043), fix it urgently! [ 624.462474][ T6777] Dead loop on virtual device lo (net 1043), fix it urgently! [ 624.499753][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'. [ 624.988236][T21394] openvswitch: netlink: Message has 8 unknown bytes. [ 624.988288][T21394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.057007][T21393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.057272][T21393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.098531][ T5883] Dead loop on virtual device lo (net 1043), fix it urgently! [ 625.214935][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 625.400237][T21410] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 625.405741][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'. [ 625.470014][T21416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 625.503212][T21410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.554202][T21411] 0ªX¹¦Dö»: left allmulticast mode [ 625.563750][T21411] ip6gretap0: left allmulticast mode [ 625.663002][T21411] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 625.680352][T21411] bridge1: left allmulticast mode [ 625.684422][T21411] vxlan0: left allmulticast mode [ 625.697510][T21411] vlan3: left allmulticast mode [ 625.706326][T21411] bond0: left allmulticast mode [ 625.706348][T21411] bridge2: left allmulticast mode [ 625.953829][T21428] netlink: 'syz.4.3750': attribute type 1 has an invalid length. [ 625.954084][T21429] netlink: 'syz.4.3750': attribute type 1 has an invalid length. [ 626.075354][T21432] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 626.149892][T21432] netlink: 'syz.1.3752': attribute type 10 has an invalid length. [ 626.149920][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3752'. [ 626.150098][T21432] dummy0: entered promiscuous mode [ 626.772521][T21460] netlink: 'syz.2.3759': attribute type 2 has an invalid length. [ 627.240850][T21457] lo speed is unknown, defaulting to 1000 [ 627.266191][T21467] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 627.295812][T21468] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 627.369633][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'. [ 627.421032][T21473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3763'. [ 628.105367][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3770'. [ 628.127075][T21506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.127106][T21506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.161422][T21506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.161453][T21506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.186904][T21506] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 628.186930][T21506] batman_adv: batadv0: Removing interface: ipvlan2 [ 628.245197][T21502] xt_CT: No such helper "netbios-ns" [ 628.245956][T21506] bond1: (slave batadv0): Releasing backup interface [ 628.562983][T21518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3772'. [ 629.551405][T21551] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 629.738338][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.793628][T21561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 629.793716][T21561] bridge_slave_1: left allmulticast mode [ 629.793740][T21561] bridge_slave_1: left promiscuous mode [ 629.793982][T21561] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.840650][T21561] bridge_slave_0: left allmulticast mode [ 629.840682][T21561] bridge_slave_0: left promiscuous mode [ 629.843650][T21561] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.002630][ T6668] erspan0: left allmulticast mode [ 630.002660][ T6668] erspan0: left promiscuous mode [ 630.008322][ T6668] bridge5: port 1(erspan0) entered disabled state [ 630.043846][ T6668] batadv_slave_1: left allmulticast mode [ 630.158029][T21572] xt_hashlimit: size too large, truncated to 1048576 [ 630.296320][ T6668] batman_adv: batadv0: Removing interface: ip6gretap1 [ 631.984964][ T6668] nicvf0 (unregistering): left promiscuous mode [ 632.027267][ T6668] bond3 (unregistering): (slave gretap3): Releasing active interface [ 632.044086][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 632.090542][ T6668] batman_adv: batadv0: Removing interface: gretap1 [ 632.282778][ T6668] .` (unregistering): Released all slaves [ 632.290779][ T6668] bond1 (unregistering): Released all slaves [ 632.309388][ T6668] bond2 (unregistering): Released all slaves [ 632.326476][ T6668] bond3 (unregistering): Released all slaves [ 632.348865][ T6668] bond4 (unregistering): Released all slaves [ 632.376694][ T6668] bond5 (unregistering): Released all slaves [ 632.402302][ T6668] bond6 (unregistering): Released all slaves [ 632.419676][ T6668] bond0 (unregistering): Released all slaves [ 632.437436][ T6668] bond7 (unregistering): Released all slaves [ 632.471840][T21569] netlink: 'syz.2.3784': attribute type 3 has an invalid length. [ 632.472054][T21569] netlink: 'syz.2.3784': attribute type 3 has an invalid length. [ 632.475175][T21578] @0Ù: renamed from bond_slave_1 (while UP) [ 632.619830][ T6668] ovs-dp0: left promiscuous mode [ 632.759114][ T6668] tipc: Disabling bearer [ 632.761504][ T6668] tipc: Left network mode [ 632.882236][T21610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3793'. [ 632.912607][T21607] net_ratelimit: 1 callbacks suppressed [ 632.912630][T21607] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 633.037024][T21608] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3791'. [ 633.056711][T21607] batman_adv: batadv0: Adding interface: syzkaller0 [ 633.056733][T21607] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.056770][T21607] batman_adv: batadv0: Interface activated: syzkaller0 [ 633.183189][T21618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3795'. [ 633.187094][T21621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3794'. [ 633.311340][T21622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3794'. [ 633.329343][T21619] xt_ecn: cannot match TCP bits for non-tcp packets [ 633.345871][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3793'. [ 633.473017][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 633.473484][T21607] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3794'. [ 634.068462][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3797'. [ 634.173597][T21637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3797'. [ 634.177108][T17259] block nbd2: Receive control failed (result -1) [ 635.685737][T21603] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 635.830396][T21603] batman_adv: batadv0: Removing interface: syzkaller0 [ 636.001511][T21635] ip6gre2: entered promiscuous mode [ 636.001539][T21635] ip6gre2: entered allmulticast mode [ 636.394265][T21662] bond3: left promiscuous mode [ 636.394307][T21662] gre1: left promiscuous mode [ 636.661919][T21669] syzkaller0: entered promiscuous mode [ 636.661946][T21669] syzkaller0: entered allmulticast mode [ 636.680304][T21676] netlink: 'syz.1.3803': attribute type 10 has an invalid length. [ 636.680614][T21676] dummy0: left promiscuous mode [ 636.736277][T21676] team0: Port device dummy0 added [ 636.761665][T21679] netlink: 'syz.1.3803': attribute type 10 has an invalid length. [ 636.890095][ T6775] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 636.894972][ T6775] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 636.932718][ T7414] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 636.950811][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 637.143087][T21679] team0: Port device dummy0 removed [ 637.489874][ T9229] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 637.538441][ T9229] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 637.640071][ T7411] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 637.698332][ T7411] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 639.007297][T21724] ovs-s!!: entered promiscuous mode [ 639.460870][T21751] erspan0: entered promiscuous mode [ 639.469163][T21748] erspan0: left promiscuous mode [ 639.739337][T21758] nbd: must specify a device to reconfigure [ 639.797118][T21758] syzkaller0: entered promiscuous mode [ 639.797145][T21758] syzkaller0: entered allmulticast mode [ 640.086077][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3825'. [ 640.110559][T21766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3825'. [ 640.110594][T21766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3825'. [ 640.110613][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3825'. [ 640.113727][ T6668] batadv0: left promiscuous mode [ 640.179133][ T6668] hsr_slave_0: left promiscuous mode [ 640.854145][T21791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3828'. [ 641.029987][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 641.441041][T21804] netlink: 'syz.4.3833': attribute type 4 has an invalid length. [ 641.446808][ T6668] IPVS: stop unused estimator thread 0... [ 641.487236][T21806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3834'. [ 641.873247][T21828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3839'. [ 641.976873][T21831] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3840'. [ 642.098449][T21836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.555409][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3847'. [ 642.697018][T21864] netlink: 'syz.0.3848': attribute type 12 has an invalid length. [ 642.697046][T21864] netlink: 'syz.0.3848': attribute type 29 has an invalid length. [ 642.697061][T21864] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3848'. [ 642.852385][T21866] syzkaller0: entered promiscuous mode [ 642.852416][T21866] syzkaller0: entered allmulticast mode [ 642.961252][T21870] dvmrp0: entered allmulticast mode [ 643.172485][T21872] dvmrp0: left allmulticast mode [ 644.457878][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 647.184752][T17259] Bluetooth: hci1: command 0x0406 tx timeout [ 648.133328][T21898] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.137036][T21898] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.275883][T21912] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 648.276646][T21912] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 648.276699][T21912] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 648.508256][T21912] __nla_validate_parse: 4 callbacks suppressed [ 648.508278][T21912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3858'. [ 649.072879][T21932] netlink: 'syz.2.3865': attribute type 10 has an invalid length. [ 649.587789][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 649.922152][T21963] syzkaller0: entered promiscuous mode [ 649.922177][T21963] syzkaller0: entered allmulticast mode [ 650.103963][T21976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3873'. [ 650.225896][T21975] bond4 (unregistering): Released all slaves [ 650.403039][T21986] xt_TCPMSS: Only works on TCP SYN packets [ 650.788462][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3876'. [ 650.849865][T21996] netlink: 'syz.3.3878': attribute type 10 has an invalid length. [ 650.849980][T21996] tipc: Resetting bearer [ 650.928963][T21996] tipc: Disabling bearer [ 651.327355][T21996] team0 (unregistering): Port device team_slave_0 removed [ 651.343229][T21996] team0 (unregistering): Port device team_slave_1 removed [ 651.365774][T22005] macvtap0: mtu less than device minimum [ 651.460780][T22013] tipc: Trying to set illegal importance in message [ 651.748876][T22025] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3888'. [ 651.786687][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 651.845416][T22028] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3887'. [ 651.875107][T22028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3887'. [ 652.006912][T22035] bond2: invalid ARP target 0.0.0.0 specified for addition [ 652.006949][T22035] bond2: option arp_ip_target: invalid value (0) [ 652.034526][T22035] bond2 (unregistering): Released all slaves [ 652.362508][T22049] ip6gretap2: entered allmulticast mode [ 652.484076][T22049] batman_adv: batadv0: Adding interface: ip6gretap2 [ 652.484098][T22049] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.484134][T22049] batman_adv: batadv0: Interface activated: ip6gretap2 [ 652.565419][T22053] gre1: entered promiscuous mode [ 652.609836][T22055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 652.708017][T22056] ipvlan2: entered promiscuous mode [ 652.712279][T22061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3898'. [ 652.774829][T22055] 8021q: adding VLAN 0 to HW filter on device team1 [ 653.014896][T22074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'. [ 653.326166][T22090] gre1: entered promiscuous mode [ 653.862382][T22112] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 653.926628][T22110] 8021q: VLANs not supported on syzkaller1 [ 654.010219][T22123] __nla_validate_parse: 2 callbacks suppressed [ 654.010245][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3913'. [ 654.403313][T22143] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3919'. [ 654.434130][T22143] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3919'. [ 654.548036][T22148] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 654.595862][T22148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 654.673871][T22150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3921'. [ 654.726383][T22150] bond2: (slave geneve2): making interface the new active one [ 654.744914][T22150] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 654.845109][T22152] xt_CONNSECMARK: invalid mode: 254 [ 654.846997][T22152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3916'. [ 654.949939][T22157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3916'. [ 654.949977][T22157] bond2: entered allmulticast mode [ 656.052604][T22196] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3933'. [ 656.150849][T22192] lo speed is unknown, defaulting to 1000 [ 656.156001][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 656.269045][T22207] netlink: 'syz.1.3937': attribute type 1 has an invalid length. [ 656.269084][T22207] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3937'. [ 656.874132][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'. [ 656.874172][T22229] netlink: 'syz.1.3943': attribute type 20 has an invalid length. [ 656.874187][T22229] netlink: 'syz.1.3943': attribute type 21 has an invalid length. [ 656.960083][T22235] netlink: 'syz.1.3943': attribute type 20 has an invalid length. [ 656.960109][T22235] netlink: 'syz.1.3943': attribute type 21 has an invalid length. [ 657.172737][T22247] openvswitch: netlink: IP tunnel dst address not specified [ 657.172772][T22247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.201718][T22190] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 657.925851][T22277] syzkaller0: entered promiscuous mode [ 657.925879][T22277] syzkaller0: entered allmulticast mode [ 658.553193][T22295] syzkaller0: entered promiscuous mode [ 658.553218][T22295] syzkaller0: entered allmulticast mode [ 658.956865][T22312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 659.353089][T22326] __nla_validate_parse: 69 callbacks suppressed [ 659.353118][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 659.374950][T22328] openvswitch: netlink: Missing key (keys=50, expected=80) [ 659.475625][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079926800: rx timeout, send abort [ 659.501599][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 659.866077][T22349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3964'. [ 659.975818][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055c25800: rx timeout, send abort [ 660.475874][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055c25800: abort rx timeout. Force session deactivation [ 661.363546][T22391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3972'. [ 661.498964][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3973'. [ 661.825112][T22403] netlink: 'syz.4.3975': attribute type 18 has an invalid length. [ 662.191745][T22415] xt_TPROXY: Can be used only with -p tcp or -p udp [ 662.192033][T22409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 662.196600][T22409] xt_recent: Unsupported userspace flags (000000c5) [ 662.339625][T22417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3979'. [ 662.404473][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 662.616000][T22439] xt_l2tp: invalid flags combination: 8 [ 662.932238][T22463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3987'. [ 663.046232][T22463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3987'. [ 663.166044][T22461] ±ÿ: renamed from lo (while UP) [ 663.439587][T22483] xt_l2tp: v2 doesn't support IP mode [ 663.625344][ T7414] bridge0: entered promiscuous mode [ 664.286123][T22502] sit0: entered promiscuous mode [ 664.286309][T22502] netlink: 'syz.2.3994': attribute type 1 has an invalid length. [ 664.286329][T22502] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3994'. [ 664.494790][T22515] netlink: 'syz.1.3998': attribute type 62 has an invalid length. [ 664.562886][T22523] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 664.607101][T22523] netlink: 'syz.1.4000': attribute type 83 has an invalid length. [ 664.612279][T22524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.630836][ T7973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 664.877233][T22523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.937790][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 664.956792][T22509] lo speed is unknown, defaulting to 1000 [ 665.189352][T10011] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 665.207681][T22537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4003'. [ 665.315201][T22542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4003'. [ 665.426352][T22537] team0: Device wg1 is of different type [ 665.551703][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4003'. [ 665.578276][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 665.632812][T22555] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4007'. [ 665.664224][ T7409] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 665.723874][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4007'. [ 665.818742][T22537] bridge3: entered promiscuous mode [ 665.906812][T22564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4006'. [ 665.906844][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4006'. [ 665.927065][T22564] netlink: 'syz.4.4006': attribute type 29 has an invalid length. [ 666.034609][T22525] tipc: Started in network mode [ 666.034651][T22525] tipc: Node identity ae34069b75e5, cluster identity 4711 [ 666.034857][T22525] tipc: Enabled bearer , priority 0 [ 666.241028][ T6772] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 666.241314][ T6772] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 666.391708][T22508] tipc: Disabling bearer [ 666.418689][ T7414] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 666.914788][T22592] bridge_slave_0: left allmulticast mode [ 666.914829][T22592] bridge_slave_0: left promiscuous mode [ 666.915095][T22592] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.044344][T22592] bridge_slave_1: left allmulticast mode [ 667.044377][T22592] bridge_slave_1: left promiscuous mode [ 667.044623][T22592] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.166621][T22592] team0: Port device team_slave_0 removed [ 667.226723][T22592] team0: Port device team_slave_1 removed [ 667.256408][T22592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.256430][T22592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.312232][T22592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.312263][T22592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.336672][T22592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 667.365331][T22603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 667.365479][T22603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 667.365640][T22603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 667.365692][T22603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 667.365851][T22603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 667.365890][T22603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 667.934260][T22621] netlink: 'syz.1.4021': attribute type 25 has an invalid length. [ 668.125726][T22629] syzkaller1: entered promiscuous mode [ 668.125755][T22629] syzkaller1: entered allmulticast mode [ 668.243213][T22626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4024'. [ 668.243426][T22635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4024'. [ 668.354406][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4024'. [ 668.420016][T22645] ip6t_REJECT: ECHOREPLY is not supported [ 668.505825][T22649] netlink: 'syz.4.4030': attribute type 10 has an invalid length. [ 668.540900][T22649] team0: Port device dummy0 added [ 668.949126][T22655] syzkaller0: left promiscuous mode [ 668.949153][T22655] syzkaller0: left allmulticast mode [ 668.953571][T22657] hsr0: entered promiscuous mode [ 668.983901][T22657] ip6erspan0: entered allmulticast mode [ 669.006148][T22657] hsr_slave_0: left promiscuous mode [ 669.013720][T22657] hsr_slave_1: left promiscuous mode [ 669.032393][T22657] hsr0 (unregistering): left promiscuous mode [ 670.700123][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.051588][T22626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.493904][T22702] can: request_module (can-proto-3) failed. [ 671.518025][T22705] __nla_validate_parse: 3 callbacks suppressed [ 671.518046][T22705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4048'. [ 671.518171][T22699] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4048'. [ 672.016471][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 672.195386][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'. [ 672.255153][T22739] vlan2: entered allmulticast mode [ 672.296663][T22740] tipc: MTU too low for tipc bearer [ 672.399631][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4059'. [ 672.542964][T22749] netlink: 'syz.0.4061': attribute type 3 has an invalid length. [ 672.633080][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4059'. [ 672.720224][T22754] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4062'. [ 672.816432][T22754] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4062'. [ 673.219245][T22775] lo speed is unknown, defaulting to 1000 [ 673.270389][T22783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4067'. [ 673.933453][T22805] set match dimension is over the limit! [ 673.936530][T22795] siw: device registration error -23 [ 674.051924][T22779] sctp: [Deprecated]: syz.1.4066 (pid 22779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.051924][T22779] Use struct sctp_sack_info instead [ 674.132902][T22812] sctp: [Deprecated]: syz.1.4066 (pid 22812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.132902][T22812] Use struct sctp_sack_info instead [ 674.384096][T22820] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 674.462888][T22779] lo speed is unknown, defaulting to 1000 [ 674.465541][T22815] syzkaller1: entered promiscuous mode [ 674.465569][T22815] syzkaller1: entered allmulticast mode [ 674.537830][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.640715][T22826] net_ratelimit: 1650 callbacks suppressed [ 674.640737][T22826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.935305][T22838] netlink: 'syz.0.4079': attribute type 9 has an invalid length. [ 675.006715][T22840] netlink: 'syz.4.4080': attribute type 1 has an invalid length. [ 675.070468][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'. [ 675.325207][T22835] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 675.360531][T22835] bond4: (slave macvlan2): making interface the new active one [ 675.361976][T22835] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 675.435433][T22847] syzkaller0: entered promiscuous mode [ 675.435457][T22847] syzkaller0: entered allmulticast mode [ 675.779547][T22864] xt_l2tp: v2 doesn't support IP mode [ 675.852365][T22866] ip_tables: iptables: counters copy to user failed while replacing table [ 675.870785][T22866] ip_tables: iptables: counters copy to user failed while replacing table [ 676.127028][T22880] bond5: option ad_actor_sys_prio: invalid value (0) [ 676.127049][T22880] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 676.147216][T22880] bond5 (unregistering): Released all slaves [ 676.190559][T22887] netlink: 'syz.4.4092': attribute type 1 has an invalid length. [ 676.197090][T22889] syzkaller0: entered promiscuous mode [ 676.197117][T22889] syzkaller0: entered allmulticast mode [ 676.910086][T22900] syzkaller1: entered promiscuous mode [ 676.910152][T22900] syzkaller1: entered allmulticast mode [ 677.546619][T22923] ipt_REJECT: ECHOREPLY no longer supported. [ 677.553510][T22923] netlink: 'syz.2.4100': attribute type 61 has an invalid length. [ 677.553576][T22923] netlink: 'syz.2.4100': attribute type 62 has an invalid length. [ 677.558662][T22924] __nla_validate_parse: 2 callbacks suppressed [ 677.558716][T22924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4101'. [ 677.636327][T22923] bridge2: entered allmulticast mode [ 678.042121][T22940] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 678.067792][T22940] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 678.353986][T22963] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 678.485573][T22974] netlink: 'syz.2.4115': attribute type 1 has an invalid length. [ 678.485614][T22974] netlink: 'syz.2.4115': attribute type 4 has an invalid length. [ 678.485628][T22974] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4115'. [ 678.669912][T22991] block nbd3: shutting down sockets [ 678.686233][T22992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4120'. [ 678.686267][T22992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4120'. [ 678.686284][T22992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4120'. [ 678.834712][T22985] xfrm0: entered allmulticast mode [ 678.858334][T22985] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 679.055052][T23003] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4122'. [ 679.076903][T23003] ip_tables: iptables: counters copy to user failed while replacing table [ 679.387028][T23017] xt_connbytes: Forcing CT accounting to be enabled [ 679.472130][T22980] veth1_vlan: left allmulticast mode [ 679.579506][ T6668] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.583390][ T6668] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.583439][ T6668] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.583477][ T6668] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.861634][T23036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4130'. [ 679.907375][T23036] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 679.939294][T23039] netlink: 'syz.3.4133': attribute type 3 has an invalid length. [ 680.021198][T23042] ipt_ECN: cannot use operation on non-tcp rule [ 680.143989][T23043] netlink: 'syz.3.4134': attribute type 2 has an invalid length. [ 680.144134][T23049] netlink: 'syz.3.4134': attribute type 2 has an invalid length. [ 680.224630][T23033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4131'. [ 680.270976][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4135'. [ 680.271008][T23052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 680.297783][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 680.330547][T23054] tipc: Invalid UDP bearer configuration [ 680.330594][T23054] tipc: Enabling of bearer rejected, failed to enable media [ 680.828032][T23059] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.144313][T23059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.239576][T23059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.296853][T23102] netlink: 'syz.4.4143': attribute type 1 has an invalid length. [ 681.484176][T23059] batman_adv: batadv0: Interface deactivated: gretap1 [ 681.609810][T10011] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.609855][T10011] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.609884][T10011] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.609911][T10011] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.730778][T23137] __nla_validate_parse: 5 callbacks suppressed [ 682.730801][T23137] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4153'. [ 682.751312][T23136] netlink: 'syz.0.4152': attribute type 1 has an invalid length. [ 682.770917][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4152'. [ 682.859202][T23142] netlink: 'syz.3.4155': attribute type 2 has an invalid length. [ 683.482245][T23156] netlink: 'syz.1.4159': attribute type 83 has an invalid length. [ 683.512476][T23149] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 683.549959][T23152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4158'. [ 683.580651][T23142] xt_policy: output policy not valid in PREROUTING and INPUT [ 683.635481][T23160] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 683.686985][T23162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.767269][T23165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.835522][T23162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.362797][T23189] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 684.620287][T23196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'. [ 684.670722][T23196] bond3: option ad_actor_sys_prio: invalid value (0) [ 684.670751][T23196] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 684.721154][T23196] bond3 (unregistering): Released all slaves [ 685.060975][T23212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4176'. [ 685.227101][T23216] pim6reg: entered allmulticast mode [ 685.262716][T23216] pim6reg: left allmulticast mode [ 685.292750][T23222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 685.306358][T23217] v: renamed from dummy0 [ 685.316912][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4179'. [ 685.491446][T23226] syzkaller1: entered promiscuous mode [ 685.491473][T23226] syzkaller1: entered allmulticast mode [ 685.618515][T23234] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4183'. [ 685.619723][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4183'. [ 685.731899][T23236] netlink: 'syz.4.4184': attribute type 1 has an invalid length. [ 685.773828][T23238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4184'. [ 685.898888][T23238] 8021q: adding VLAN 0 to HW filter on device bond4 [ 685.961938][ T5729] syz1: Port: 1 Link DOWN [ 686.498718][T23273] netlink: 'syz.4.4194': attribute type 15 has an invalid length. [ 686.920882][T23303] Bluetooth: MGMT ver 1.23 [ 687.434419][T23327] sctp: [Deprecated]: syz.3.4206 (pid 23327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.434419][T23327] Use struct sctp_sack_info instead [ 688.183368][T23316] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 688.208736][T23323] bond0: (slave ip6tnl0): refused to change device type [ 688.462807][T23343] netlink: 'syz.4.4210': attribute type 11 has an invalid length. [ 688.462831][T23343] __nla_validate_parse: 4 callbacks suppressed [ 688.462844][T23343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4210'. [ 688.463264][T23343] sctp: [Deprecated]: syz.4.4210 (pid 23343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 688.463264][T23343] Use struct sctp_sack_info instead [ 688.551536][T23347] netlink: 'syz.2.4213': attribute type 13 has an invalid length. [ 688.570964][T23347] netlink: 'syz.2.4213': attribute type 13 has an invalid length. [ 688.597159][ T6772] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.597213][ T6772] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.597250][ T6772] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.597287][ T6772] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.952073][T23367] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4217'. [ 689.124375][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4218'. [ 689.749497][T23396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4223'. [ 689.749530][T23396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4223'. [ 689.749548][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4223'. [ 689.753123][T23396] Failed to decode metaid 3 dlen 0 err -22 [ 690.943490][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4233'. [ 691.580803][T23500] netlink: 'syz.0.4242': attribute type 3 has an invalid length. [ 691.629647][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4244'. [ 691.762179][T23509] FAULT_INJECTION: forcing a failure. [ 691.762179][T23509] name failslab, interval 1, probability 0, space 0, times 0 [ 691.762207][T23509] CPU: 0 UID: 0 PID: 23509 Comm: syz.0.4248 Not tainted syzkaller #0 PREEMPT(full) [ 691.762231][T23509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 691.762241][T23509] Call Trace: [ 691.762248][T23509] [ 691.762255][T23509] dump_stack_lvl+0xe8/0x150 [ 691.762282][T23509] should_fail_ex+0x410/0x560 [ 691.762305][T23509] should_failslab+0xa8/0x100 [ 691.762327][T23509] __kmalloc_cache_node_noprof+0xaa/0x620 [ 691.762345][T23509] ? __get_vm_area_node+0x155/0x2f0 [ 691.762367][T23509] ? __get_vm_area_node+0x155/0x2f0 [ 691.762395][T23509] __get_vm_area_node+0x155/0x2f0 [ 691.762422][T23509] __vmalloc_node_range_noprof+0x343/0x1540 [ 691.762447][T23509] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 691.762467][T23509] ? __lock_acquire+0x747/0x2de0 [ 691.762503][T23509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 691.762535][T23509] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 691.762552][T23509] __vmalloc_noprof+0xd2/0x120 [ 691.762576][T23509] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 691.762597][T23509] bpf_prog_alloc_no_stats+0x47/0x560 [ 691.762615][T23509] ? bpf_prog_alloc+0x2a/0x1a0 [ 691.762635][T23509] bpf_prog_alloc+0x3c/0x1a0 [ 691.762655][T23509] bpf_prog_load+0x7f8/0x1c20 [ 691.762683][T23509] ? __pfx_bpf_prog_load+0x10/0x10 [ 691.762721][T23509] __sys_bpf+0xd0d/0xd90 [ 691.762751][T23509] ? __pfx___sys_bpf+0x10/0x10 [ 691.762778][T23509] ? __fget_files+0x2a/0x420 [ 691.762815][T23509] ? ksys_write+0x242/0x270 [ 691.762870][T23509] ? __pfx_ksys_write+0x10/0x10 [ 691.762909][T23509] __x64_sys_bpf+0xba/0xd0 [ 691.762936][T23509] do_syscall_64+0x166/0x520 [ 691.762970][T23509] ? trace_irq_disable+0x3b/0x140 [ 691.762986][T23509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.763002][T23509] ? clear_bhb_loop+0x70/0xc0 [ 691.763022][T23509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.763042][T23509] RIP: 0033:0x7f504cf9e159 [ 691.763057][T23509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.763072][T23509] RSP: 002b:00007f504df21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.763089][T23509] RAX: ffffffffffffffda RBX: 00007f504d225fa0 RCX: 00007f504cf9e159 [ 691.763101][T23509] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 691.763111][T23509] RBP: 00007f504df21090 R08: 0000000000000000 R09: 0000000000000000 [ 691.763121][T23509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.763130][T23509] R13: 00007f504d226038 R14: 00007f504d225fa0 R15: 00007ffc252a9328 [ 691.763156][T23509] [ 691.763173][T23509] syz.0.4248: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 691.763228][T23509] CPU: 0 UID: 0 PID: 23509 Comm: syz.0.4248 Not tainted syzkaller #0 PREEMPT(full) [ 691.763246][T23509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 691.763255][T23509] Call Trace: [ 691.763262][T23509] [ 691.763271][T23509] dump_stack_lvl+0xe8/0x150 [ 691.763294][T23509] warn_alloc+0x24d/0x270 [ 691.763310][T23509] ? __kasan_kmalloc+0x22/0xb0 [ 691.763331][T23509] ? __pfx_warn_alloc+0x10/0x10 [ 691.763346][T23509] ? __get_vm_area_node+0x155/0x2f0 [ 691.763374][T23509] ? __get_vm_area_node+0x2a9/0x2f0 [ 691.763404][T23509] __vmalloc_node_range_noprof+0x36b/0x1540 [ 691.763429][T23509] ? __lock_acquire+0x747/0x2de0 [ 691.763465][T23509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 691.763497][T23509] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 691.763516][T23509] __vmalloc_noprof+0xd2/0x120 [ 691.763540][T23509] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 691.763561][T23509] bpf_prog_alloc_no_stats+0x47/0x560 [ 691.763579][T23509] ? bpf_prog_alloc+0x2a/0x1a0 [ 691.763599][T23509] bpf_prog_alloc+0x3c/0x1a0 [ 691.763619][T23509] bpf_prog_load+0x7f8/0x1c20 [ 691.763647][T23509] ? __pfx_bpf_prog_load+0x10/0x10 [ 691.763685][T23509] __sys_bpf+0xd0d/0xd90 [ 691.763710][T23509] ? __pfx___sys_bpf+0x10/0x10 [ 691.763741][T23509] ? __fget_files+0x2a/0x420 [ 691.763778][T23509] ? ksys_write+0x242/0x270 [ 691.763803][T23509] ? __pfx_ksys_write+0x10/0x10 [ 691.763832][T23509] __x64_sys_bpf+0xba/0xd0 [ 691.763850][T23509] do_syscall_64+0x166/0x520 [ 691.763872][T23509] ? trace_irq_disable+0x3b/0x140 [ 691.763888][T23509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.763904][T23509] ? clear_bhb_loop+0x70/0xc0 [ 691.763923][T23509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.763939][T23509] RIP: 0033:0x7f504cf9e159 [ 691.763952][T23509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.763984][T23509] RSP: 002b:00007f504df21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.764006][T23509] RAX: ffffffffffffffda RBX: 00007f504d225fa0 RCX: 00007f504cf9e159 [ 691.764022][T23509] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 691.764037][T23509] RBP: 00007f504df21090 R08: 0000000000000000 R09: 0000000000000000 [ 691.764051][T23509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.764070][T23509] R13: 00007f504d226038 R14: 00007f504d225fa0 R15: 00007ffc252a9328 [ 691.764096][T23509] [ 691.779230][T23509] Mem-Info: [ 691.779276][T23509] active_anon:8213 inactive_anon:0 isolated_anon:0 [ 691.779276][T23509] active_file:0 inactive_file:43681 isolated_file:0 [ 691.779276][T23509] unevictable:0 dirty:222 writeback:0 [ 691.779276][T23509] slab_reclaimable:12834 slab_unreclaimable:128482 [ 691.779276][T23509] mapped:29654 shmem:656 pagetables:1299 [ 691.779276][T23509] sec_pagetables:0 bounce:0 [ 691.779276][T23509] kernel_misc_reclaimable:0 [ 691.779276][T23509] free:1275719 free_pcp:16231 free_cma:0 [ 691.779443][T23509] Node 0 active_anon:32852kB inactive_anon:0kB active_file:0kB inactive_file:174520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118616kB dirty:888kB writeback:0kB shmem:2624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17140kB pagetables:5064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.779592][T23509] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.779742][T23509] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 691.779905][T23509] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 691.780014][T23509] Node 0 DMA32 free:1145212kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32852kB inactive_anon:0kB active_file:0kB inactive_file:174520kB unevictable:0kB writepending:888kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:64924kB local_pcp:23912kB free_cma:0kB [ 691.780178][T23509] lowmem_reserve[]: 0 0 0 0 0 [ 691.780286][T23509] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 691.780421][T23509] lowmem_reserve[]: 0 0 0 0 0 [ 691.780457][T23509] Node 1 Normal free:3942304kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 691.780519][T23509] lowmem_reserve[]: 0 0 0 0 0 [ 691.780556][T23509] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 691.780704][T23509] Node 0 DMA32: 1307*4kB (UME) 1313*8kB (UME) 468*16kB (ME) 337*32kB (UME) 272*64kB (UME) 85*128kB (UME) 44*256kB (UME) 25*512kB (UM) 6*1024kB (UE) 12*2048kB (UME) 251*4096kB (UM) = 1145172kB [ 691.789743][T23509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 691.790059][T23509] Node 1 Normal: 2*4kB (M) 5*8kB (UM) 5*16kB (UM) 7*32kB (UM) 11*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3942304kB [ 691.790502][T23509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.790548][T23509] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 691.790592][T23509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.790644][T23509] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 691.790688][T23509] 44333 total pagecache pages [ 691.790711][T23509] 0 pages in swap cache [ 691.790740][T23509] Free swap = 124996kB [ 691.790762][T23509] Total swap = 124996kB [ 691.790785][T23509] 2097051 pages RAM [ 691.790803][T23509] 0 pages HighMem/MovableOnly [ 691.790810][T23509] 428659 pages reserved [ 691.790817][T23509] 0 pages cma reserved [ 692.204609][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4247'. [ 692.274031][T23513] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4246'. [ 692.873937][T23515] dvmrp8: entered allmulticast mode [ 693.793103][T23577] netlink: 'syz.0.4260': attribute type 2 has an invalid length. [ 693.846430][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4262'. [ 693.868621][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4262'. [ 694.260159][T23593] bridge_slave_0: left promiscuous mode [ 694.261634][T23593] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.270437][T23593] bridge_slave_1: left promiscuous mode [ 694.270596][T23593] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.316690][T23593] bond0: (slave bond_slave_0): Releasing backup interface [ 694.330736][T23593] bond0: (slave bond_slave_1): Releasing backup interface [ 694.336499][T23593] team0: Port device team_slave_0 removed [ 694.359004][T23593] team0: Port device 76žÿ removed [ 694.359826][T23593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.359844][T23593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.361288][T23593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.361304][T23593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.363932][T23593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 694.405706][T23598] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4265'. [ 694.524194][T23598] gretap0: entered promiscuous mode [ 694.705611][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 694.705634][T23608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4269'. [ 694.705646][T23608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4269'. [ 695.165736][T23621] netlink: 'syz.2.4273': attribute type 4 has an invalid length. [ 695.186457][T23619] syzkaller1: entered promiscuous mode [ 695.186482][T23619] syzkaller1: entered allmulticast mode [ 695.866948][T23638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4277'. [ 696.076509][T23655] netlink: 328 bytes leftover after parsing attributes in process `syz.4.4281'. [ 696.103303][T23653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4282'. [ 696.103342][T23653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4282'. [ 696.113227][T23653] netlink: 'syz.0.4282': attribute type 1 has an invalid length. [ 696.534878][T23670] lo speed is unknown, defaulting to 1000 [ 696.942911][ T31] audit: type=1800 audit(1790990289.337:17): pid=23692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4288" name=F4F3AE2ECB dev="tmpfs" ino=1079 res=0 errno=0 [ 697.162586][T23695] netlink: 'syz.1.4289': attribute type 1 has an invalid length. [ 697.403731][T23704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.433938][T23712] netlink: 'syz.1.4294': attribute type 219 has an invalid length. [ 697.764648][T23722] ip_tables: iptables: counters copy to user failed while replacing table [ 698.391087][T23762] xt_policy: output policy not valid in PREROUTING and INPUT [ 698.844246][T23775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.868254][T23772] Bluetooth: MGMT ver 1.23 [ 698.888086][T23777] openvswitch: netlink: IPv4 tunnel dst address is zero [ 698.960583][T23780] netlink: 'syz.3.4307': attribute type 11 has an invalid length. [ 698.992716][T23782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.105432][T23775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.374371][T23797] __nla_validate_parse: 8 callbacks suppressed [ 699.374396][T23797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4315'. [ 699.498064][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 699.563535][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4316'. [ 699.624881][T23799] batadv0: entered promiscuous mode [ 699.635633][T23799] macsec2: entered promiscuous mode [ 699.637163][T23799] macsec2: entered allmulticast mode [ 699.637186][T23799] batadv0: entered allmulticast mode [ 699.667430][T23799] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 699.684334][T23799] batadv0: left allmulticast mode [ 699.684574][T23799] batadv0: left promiscuous mode [ 699.726316][T23808] siw: device registration error -23 [ 699.789881][T23812] openvswitch: netlink: Unknown key attributes 1 [ 699.861067][T23816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 700.057313][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4324'. [ 700.108035][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4324'. [ 700.286993][T23834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.615022][T23853] netlink: 70 bytes leftover after parsing attributes in process `syz.2.4333'. [ 700.686551][T23857] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4333'. [ 700.718931][T23855] sctp: [Deprecated]: syz.4.4332 (pid 23855) Use of int in max_burst socket option deprecated. [ 700.718931][T23855] Use struct sctp_assoc_value instead [ 700.725037][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.725156][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.725246][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.725316][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.725387][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.725459][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.725576][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.725659][T23862] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 700.853654][T23867] sctp: [Deprecated]: syz.4.4332 (pid 23867) Use of int in max_burst socket option deprecated. [ 700.853654][T23867] Use struct sctp_assoc_value instead [ 701.219693][T23887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4340'. [ 701.572632][T23914] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4346'. [ 701.593681][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 701.937204][T23920] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 702.803106][T23965] pimreg: tun_chr_ioctl cmd 1074025677 [ 702.803246][T23965] pimreg: linktype set to 270 [ 702.826559][T23965] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4361'. [ 702.826594][T23965] validate_nla: 25 callbacks suppressed [ 702.826607][T23965] netlink: 'syz.1.4361': attribute type 5 has an invalid length. [ 702.878983][T23965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.122180][T23983] syzkaller0: entered promiscuous mode [ 703.122205][T23983] syzkaller0: entered allmulticast mode [ 703.346735][T23994] netlink: 'syz.0.4366': attribute type 1 has an invalid length. [ 703.654810][T24016] netlink: 'syz.0.4370': attribute type 4 has an invalid length. [ 703.686090][T24005] xt_TPROXY: Can be used only with -p tcp or -p udp [ 703.737004][T24014] netlink: 'syz.1.4371': attribute type 9 has an invalid length. [ 704.171629][T24039] netlink: 'syz.1.4373': attribute type 1 has an invalid length. [ 704.625786][T24048] netlink: 'syz.0.4374': attribute type 4 has an invalid length. [ 705.671490][T24061] __nla_validate_parse: 14 callbacks suppressed [ 705.671515][T24061] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4377'. [ 705.729579][T24068] netlink: 'syz.4.4377': attribute type 2 has an invalid length. [ 705.959974][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4377'. [ 705.960087][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4377'. [ 706.632476][T24050] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 706.658540][T24055] workqueue: Failed to create a rescuer kthread for wq "": -EINTR [ 706.663323][T24051] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 706.689653][T24080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4378'. [ 706.689694][T24080] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 706.896331][T24088] netlink: 'syz.1.4381': attribute type 1 has an invalid length. [ 706.908225][T24090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4382'. [ 706.908263][T24090] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4382'. [ 706.969834][T24095] netlink: 'syz.2.4383': attribute type 1 has an invalid length. [ 706.988507][T24092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4380'. [ 707.033848][T24101] ip_tables: iptables: counters copy to user failed while replacing table [ 707.220187][T24094] macvtap0: entered allmulticast mode [ 707.274360][T24095] 8021q: adding VLAN 0 to HW filter on device bond5 [ 707.387328][T24110] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4385'. [ 707.387411][T24110] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4385'. [ 707.526614][T24120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4388'. [ 707.914010][T24146] syzkaller1: entered promiscuous mode [ 707.914037][T24146] syzkaller1: entered allmulticast mode [ 708.190374][T24165] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 708.721543][T24185] netlink: 'syz.3.4405': attribute type 1 has an invalid length. [ 708.825008][T24189] netlink: 'syz.3.4409': attribute type 2 has an invalid length. [ 708.884571][T24191] vlan0: entered promiscuous mode [ 708.884851][T24191] vlan0: entered allmulticast mode [ 708.884869][T24191] veth0_vlan: entered allmulticast mode [ 710.034944][T24229] netlink: 'syz.2.4418': attribute type 30 has an invalid length. [ 710.148389][T24229] netlink: 'syz.2.4418': attribute type 30 has an invalid length. [ 710.277349][T24239] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 710.342459][T24233] syzkaller0: entered promiscuous mode [ 710.342488][T24233] syzkaller0: entered allmulticast mode [ 710.479144][T24252] openvswitch: netlink: Missing valid actions attribute. [ 710.479197][T24252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.109130][T24278] netlink: 'syz.1.4429': attribute type 4 has an invalid length. [ 711.251291][T24280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.347992][ T3311] nci: nci_rx_work: unknown MT 0x6 [ 711.469692][T24295] __nla_validate_parse: 13 callbacks suppressed [ 711.469718][T24295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4432'. [ 711.580319][T24295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 711.669017][T24302] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 711.718993][T24295] bond6 (unregistering): (slave geneve2): Releasing backup interface [ 711.722482][T24311] netlink: 79 bytes leftover after parsing attributes in process `syz.3.4437'. [ 711.748852][T24295] bond6 (unregistering): Released all slaves [ 711.912913][T24314] netlink: 'syz.2.4438': attribute type 1 has an invalid length. [ 714.122185][T24280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.318346][T24335] netlink: 'syz.4.4441': attribute type 4 has an invalid length. [ 714.410825][T24341] ip_tables: iptables: counters copy to user failed while replacing table [ 714.425619][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4441'. [ 714.474754][T24345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4441'. [ 714.544274][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4445'. [ 714.908397][T24369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.029120][T24369] Cannot find del_set index 3 as target [ 715.568716][T24392] batman_adv: batadv0: Adding interface: syzkaller0 [ 715.568742][T24392] batman_adv: batadv0: Interface activated: syzkaller0 [ 715.634349][T24395] sctp: [Deprecated]: syz.2.4452 (pid 24395) Use of int in max_burst socket option deprecated. [ 715.634349][T24395] Use struct sctp_assoc_value instead [ 715.816193][T24404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4456'. [ 716.004837][T24383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.004882][T24383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.048606][T24395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4452'. [ 716.115173][T24407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4458'. [ 716.154687][T24410] pim6reg: entered allmulticast mode [ 716.364131][T24417] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 716.505068][T24425] netlink: NAT attribute has 1 unknown bytes [ 716.505108][T24425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.586103][T24383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.586148][T24383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.703437][T24430] syzkaller1: entered promiscuous mode [ 716.703465][T24430] syzkaller1: entered allmulticast mode [ 716.801963][T24433] netlink: 'syz.3.4467': attribute type 16 has an invalid length. [ 716.801989][T24433] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4467'. [ 716.833897][T24383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.833939][T24383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.109940][T24383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.109985][T24383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.168593][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4469'. [ 717.173719][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4469'. [ 717.206856][T24440] ip_tables: iptables: counters copy to user failed while replacing table [ 717.224667][T24409] pim6reg: left allmulticast mode [ 717.422451][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 717.459267][ T1105] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.459307][ T1105] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.469292][ T6668] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.469384][ T6668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.686040][T24452] netlink: 'syz.4.4473': attribute type 10 has an invalid length. [ 717.699607][T24452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.701381][T24452] team0: Port device netdevsim1 added [ 717.703296][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4472'. [ 717.736575][T24383] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.736616][T24383] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.774671][T24452] netlink: 'syz.4.4473': attribute type 10 has an invalid length. [ 717.792897][T24452] team0: Port device netdevsim1 removed [ 717.806507][T24452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.830420][T24452] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 717.836796][T24452] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 717.876139][T24383] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.876181][T24383] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.936622][ T1105] IPVS: starting estimator thread 0... [ 717.943943][T24455] IPVS: Unknown mcast interface: lo [ 718.017736][T24459] IPVS: using max 24 ests per chain, 57600 per kthread [ 718.025189][T24461] syzkaller1: entered promiscuous mode [ 718.025216][T24461] syzkaller1: entered allmulticast mode [ 718.307279][T24486] sch_fq: defrate 4294967293 ignored. [ 718.399720][T24491] netlink: 'syz.4.4481': attribute type 1 has an invalid length. [ 718.399744][T24491] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4481'. [ 718.399764][T24491] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 719.262020][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4487'. [ 719.266620][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4487'. [ 719.502778][T24529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4489'. [ 719.609645][T24536] ip_tables: iptables: counters copy to user failed while replacing table [ 719.613338][T24530] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 719.615206][T24530] bond3 (unregistering): Released all slaves [ 719.749056][T24536] netlink: Failed to add ¦â—k\ helper -22 [ 719.749118][T24536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.812504][T24534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4490'. [ 719.963757][T24551] netlink: zone id is out of range [ 719.963776][T24551] netlink: zone id is out of range [ 719.963787][T24551] netlink: zone id is out of range [ 719.963795][T24551] netlink: zone id is out of range [ 719.963804][T24551] netlink: zone id is out of range [ 719.963813][T24551] netlink: zone id is out of range [ 719.963821][T24551] netlink: zone id is out of range [ 720.074087][T24551] bond5: entered allmulticast mode [ 721.016550][T24586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.069268][T24586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.138116][T24586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.140849][T24586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.168788][T24586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.168817][T24586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.174914][T24586] veth1_vlan: left promiscuous mode [ 721.176282][T24586] veth0_vlan: left promiscuous mode [ 721.223914][T24586] veth0_vlan: entered promiscuous mode [ 721.226845][T24586] veth1_vlan: entered promiscuous mode [ 721.245371][T24586] veth1_macvtap: left promiscuous mode [ 721.246375][T24586] veth0_macvtap: left promiscuous mode [ 721.247329][T24586] veth0_macvtap: entered promiscuous mode [ 721.267398][T24586] veth1_macvtap: entered promiscuous mode [ 721.281979][T24586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.283185][T24586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.284412][T24586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.286144][T24586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.349325][T24607] sctp: [Deprecated]: syz.4.4501 (pid 24607) Use of int in max_burst socket option deprecated. [ 721.349325][T24607] Use struct sctp_assoc_value instead [ 721.385078][T24586] batman_adv: batadv0: Interface activated: gretap1 [ 721.421738][T24586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.442549][T24586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 721.443644][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4503'. [ 721.444999][T24586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 721.508760][ T7418] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.529988][ T7418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 721.543076][ T7418] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.564125][T24586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 721.654763][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.654869][ T59] bridge0: port 2(bridge_slave_1) entered listening state [ 721.740991][ T6783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.741101][ T6783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.741214][ T6783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.741257][ T6783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.795507][T24613] ipvlan2: entered allmulticast mode [ 721.801399][T24613] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 721.827817][T24621] xt_policy: too many policy elements [ 721.829540][ T9986] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.829761][ T9986] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.830227][ T9986] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 721.830437][ T9986] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 721.928404][ T9229] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 722.068889][T24623] __nla_validate_parse: 2 callbacks suppressed [ 722.068915][T24623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4505'. [ 722.077181][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4505'. [ 722.194106][T24626] lo speed is unknown, defaulting to 1000 [ 722.223258][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 722.224003][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4508'. [ 722.224037][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4508'. [ 722.230484][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4508'. [ 722.235072][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4508'. [ 722.285892][T24637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4509'. [ 722.322444][T24640] netlink: 'syz.2.4510': attribute type 1 has an invalid length. [ 722.374355][ T5752] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 722.397887][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 722.884566][T24669] netlink: 'syz.0.4513': attribute type 1 has an invalid length. [ 723.182844][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 724.117956][T24676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.315662][T24706] block nbd0: reconnected socket [ 724.315684][T24706] nbd: socks must be embedded in a SOCK_ITEM attr [ 724.320903][ T5619] block nbd0: Receive control failed (result -32) [ 724.725198][T24735] netlink: 'syz.0.4528': attribute type 11 has an invalid length. [ 725.032825][T24744] net_ratelimit: 6 callbacks suppressed [ 725.032850][T24744] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 725.694450][T24777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4536'. [ 725.713222][T24782] SET target dimension over the limit! [ 727.199769][ T59] veth0: left allmulticast mode [ 727.199798][ T59] veth0: left promiscuous mode [ 727.268865][ T59] bridge0: port 3(veth0) entered disabled state [ 727.295019][T24833] xt_policy: output policy not valid in PREROUTING and INPUT [ 727.342666][ T59] ip6gretap0: left allmulticast mode [ 727.342700][ T59] ip6gretap0: left promiscuous mode [ 727.360886][ T59] bridge0: port 2(ip6gretap0) entered disabled state [ 727.507052][T24837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.652643][T24823] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4547'. [ 728.617734][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.866587][ T59] bond0 (unregistering): Released all slaves [ 728.883092][ T59] bond1 (unregistering): Released all slaves [ 728.900008][ T59] bond2 (unregistering): Released all slaves [ 728.925028][ T59] bond3 (unregistering): Released all slaves [ 728.944410][ T59] bond4 (unregistering): Released all slaves [ 728.964638][ T59] bond5 (unregistering): Released all slaves [ 728.981859][ T59] bond6 (unregistering): Released all slaves [ 729.008497][ T59] bond7 (unregistering): Released all slaves [ 729.025259][ T59] bond8 (unregistering): Released all slaves [ 729.058603][ T59] bond9 (unregistering): Released all slaves [ 729.079175][ T59] bond10 (unregistering): Released all slaves [ 729.103299][ T59] bond11 (unregistering): Released all slaves [ 729.128786][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4550'. [ 729.133351][ T59] bond12 (unregistering): Released all slaves [ 729.164319][ T59] bond13 (unregistering): Released all slaves [ 729.243032][T24829] netlink: 770 bytes leftover after parsing attributes in process `syz.0.4544'. [ 729.257391][T24847] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 729.257439][T24847] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 729.282645][T24847] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 729.283761][T24847] [ 729.294869][T24847] ====================================================== [ 729.301960][T24847] WARNING: possible circular locking dependency detected [ 729.309073][T24847] syzkaller #0 Not tainted [ 729.313532][T24847] ------------------------------------------------------ [ 729.320590][T24847] syz.1.4546/24847 is trying to acquire lock: [ 729.326725][T24847] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 729.336115][T24847] [ 729.336115][T24847] but task is already holding lock: [ 729.343635][T24847] ffffffff8f8035e0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 729.353015][T24847] [ 729.353015][T24847] which lock already depends on the new lock. [ 729.353015][T24847] [ 729.363462][T24847] [ 729.363462][T24847] the existing dependency chain (in reverse order) is: [ 729.372609][T24847] [ 729.372609][T24847] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 729.379781][T24847] __mutex_lock+0x19d/0x1550 [ 729.384947][T24847] get_device_parent+0x16f/0x3a0 [ 729.390465][T24847] device_add+0x2d4/0xb80 [ 729.395352][T24847] device_create+0x269/0x300 [ 729.400501][T24847] msr_device_create+0x33/0x50 [ 729.405861][T24847] cpuhp_invoke_callback+0x434/0x810 [ 729.413401][T24847] cpuhp_thread_fun+0x362/0x780 [ 729.418812][T24847] smpboot_thread_fn+0x565/0xa70 [ 729.424327][T24847] kthread+0x38b/0x480 [ 729.428954][T24847] ret_from_fork+0x514/0xb70 [ 729.434095][T24847] ret_from_fork_asm+0x1a/0x30 [ 729.439438][T24847] [ 729.439438][T24847] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 729.447470][T24847] cpuhp_thread_fun+0x127/0x780 [ 729.453431][T24847] smpboot_thread_fn+0x565/0xa70 [ 729.458958][T24847] kthread+0x38b/0x480 [ 729.463573][T24847] ret_from_fork+0x514/0xb70 [ 729.468928][T24847] ret_from_fork_asm+0x1a/0x30 [ 729.474269][T24847] [ 729.474269][T24847] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 729.482042][T24847] cpus_read_lock+0x42/0x160 [ 729.487324][T24847] static_key_slow_inc+0x12/0x30 [ 729.492861][T24847] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 729.499160][T24847] nbd_genl_foreach_sock+0x265/0x450 [ 729.505000][T24847] nbd_genl_reconfigure+0xbbb/0x1040 [ 729.510922][T24847] genl_family_rcv_msg_doit+0x233/0x340 [ 729.517029][T24847] genl_rcv_msg+0x614/0x7a0 [ 729.522087][T24847] netlink_rcv_skb+0x226/0x4a0 [ 729.527401][T24847] genl_rcv+0x28/0x40 [ 729.532015][T24847] netlink_unicast+0x7bd/0x940 [ 729.537356][T24847] netlink_sendmsg+0x813/0xb40 [ 729.542668][T24847] sock_sendmsg_nosec+0x14e/0x190 [ 729.548242][T24847] ____sys_sendmsg+0x54e/0x850 [ 729.553559][T24847] ___sys_sendmsg+0x2a5/0x360 [ 729.558787][T24847] __x64_sys_sendmsg+0x1b1/0x290 [ 729.564285][T24847] do_syscall_64+0x166/0x520 [ 729.569429][T24847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.575880][T24847] [ 729.575880][T24847] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 729.583588][T24847] __mutex_lock+0x19d/0x1550 [ 729.588775][T24847] nbd_queue_rq+0x373/0xff0 [ 729.593840][T24847] blk_mq_dispatch_rq_list+0x499/0x1990 [ 729.600036][T24847] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 729.606981][T24847] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 729.613533][T24847] blk_mq_run_work_fn+0x16c/0x300 [ 729.619118][T24847] process_scheduled_works+0xc3d/0x1630 [ 729.625213][T24847] worker_thread+0xa47/0xfb0 [ 729.630355][T24847] kthread+0x38b/0x480 [ 729.634974][T24847] ret_from_fork+0x514/0xb70 [ 729.640121][T24847] ret_from_fork_asm+0x1a/0x30 [ 729.645454][T24847] [ 729.645454][T24847] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 729.652700][T24847] __mutex_lock+0x19d/0x1550 [ 729.657857][T24847] nbd_queue_rq+0xc1/0xff0 [ 729.662846][T24847] blk_mq_dispatch_rq_list+0x499/0x1990 [ 729.669029][T24847] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 729.676017][T24847] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 729.682547][T24847] blk_mq_run_work_fn+0x16c/0x300 [ 729.688003][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.698660][T24847] process_scheduled_works+0xc3d/0x1630 [ 729.704770][T24847] worker_thread+0xa47/0xfb0 [ 729.710001][T24847] kthread+0x38b/0x480 [ 729.714626][T24847] ret_from_fork+0x514/0xb70 [ 729.719851][T24847] ret_from_fork_asm+0x1a/0x30 [ 729.725190][T24847] [ 729.725190][T24847] -> #3 (set->srcu){.+.+}-{0:0}: [ 729.732631][T24847] __synchronize_srcu+0xc9/0x2f0 [ 729.738151][T24847] elevator_switch+0x1e8/0x7b0 [ 729.743475][T24847] elevator_change+0x2fa/0x480 [ 729.748789][T24847] elevator_set_default+0x375/0x440 [ 729.754537][T24847] blk_register_queue+0x3f3/0x4e0 [ 729.760586][T24847] __add_disk+0x6b8/0xdb0 [ 729.765569][T24847] add_disk_fwnode+0x100/0x3a0 [ 729.770909][T24847] nbd_dev_add+0x733/0xb60 [ 729.775982][T24847] nbd_init+0x168/0x1f0 [ 729.780693][T24847] do_one_initcall+0x250/0x870 [ 729.786113][T24847] do_initcall_level+0x10a/0x1a0 [ 729.791610][T24847] do_initcalls+0x59/0xa0 [ 729.796509][T24847] kernel_init_freeable+0x29d/0x3e0 [ 729.802261][T24847] kernel_init+0x22/0x1d0 [ 729.807487][T24847] ret_from_fork+0x514/0xb70 [ 729.812641][T24847] ret_from_fork_asm+0x1a/0x30 [ 729.817968][T24847] [ 729.817968][T24847] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 729.825862][T24847] __mutex_lock+0x19d/0x1550 [ 729.831096][T24847] elevator_change+0x1af/0x480 [ 729.836411][T24847] elevator_set_none+0xb5/0x140 [ 729.841811][T24847] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 729.848262][T24847] nbd_start_device+0x189/0xb30 [ 729.853666][T24847] nbd_genl_connect+0x167d/0x1cd0 [ 729.859584][T24847] genl_family_rcv_msg_doit+0x233/0x340 [ 729.865804][T24847] genl_rcv_msg+0x614/0x7a0 [ 729.870974][T24847] netlink_rcv_skb+0x226/0x4a0 [ 729.876293][T24847] genl_rcv+0x28/0x40 [ 729.880908][T24847] netlink_unicast+0x7bd/0x940 [ 729.886247][T24847] netlink_sendmsg+0x813/0xb40 [ 729.891561][T24847] sock_sendmsg_nosec+0x14e/0x190 [ 729.897143][T24847] ____sys_sendmsg+0x54e/0x850 [ 729.902459][T24847] ___sys_sendmsg+0x2a5/0x360 [ 729.907694][T24847] __x64_sys_sendmsg+0x1b1/0x290 [ 729.913190][T24847] do_syscall_64+0x166/0x520 [ 729.918340][T24847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.924784][T24847] [ 729.924784][T24847] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 729.934130][T24847] blk_alloc_queue+0x544/0x690 [ 729.939489][T24847] __blk_mq_alloc_disk+0x194/0x390 [ 729.945162][T24847] nbd_dev_add+0x494/0xb60 [ 729.950137][T24847] nbd_init+0x168/0x1f0 [ 729.954856][T24847] do_one_initcall+0x250/0x870 [ 729.960185][T24847] do_initcall_level+0x10a/0x1a0 [ 729.965681][T24847] do_initcalls+0x59/0xa0 [ 729.970564][T24847] kernel_init_freeable+0x29d/0x3e0 [ 729.976317][T24847] kernel_init+0x22/0x1d0 [ 729.981213][T24847] ret_from_fork+0x514/0xb70 [ 729.986359][T24847] ret_from_fork_asm+0x1a/0x30 [ 729.991683][T24847] [ 729.991683][T24847] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 729.998931][T24847] __lock_acquire+0x164c/0x2de0 [ 730.004338][T24847] lock_acquire+0x115/0x350 [ 730.009402][T24847] fs_reclaim_acquire+0x71/0x100 [ 730.014890][T24847] __kmalloc_cache_noprof+0x61/0x600 [ 730.020714][T24847] get_device_parent+0x255/0x3a0 [ 730.026193][T24847] device_add+0x2d4/0xb80 [ 730.031087][T24847] firmware_fallback_sysfs+0x2dd/0xa50 [ 730.037105][T24847] _request_firmware+0x1049/0x1780 [ 730.042773][T24847] request_firmware+0x36/0x50 [ 730.048008][T24847] reg_reload_regdb+0x95/0x490 [ 730.053319][T24847] genl_family_rcv_msg_doit+0x233/0x340 [ 730.059414][T24847] genl_rcv_msg+0x614/0x7a0 [ 730.064477][T24847] netlink_rcv_skb+0x226/0x4a0 [ 730.069787][T24847] genl_rcv+0x28/0x40 [ 730.074318][T24847] netlink_unicast+0x7bd/0x940 [ 730.079636][T24847] netlink_sendmsg+0x813/0xb40 [ 730.084949][T24847] sock_sendmsg_nosec+0x14e/0x190 [ 730.090527][T24847] ____sys_sendmsg+0x54e/0x850 [ 730.095882][T24847] ___sys_sendmsg+0x2a5/0x360 [ 730.101125][T24847] __x64_sys_sendmsg+0x1b1/0x290 [ 730.106613][T24847] do_syscall_64+0x166/0x520 [ 730.111777][T24847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.118218][T24847] [ 730.118218][T24847] other info that might help us debug this: [ 730.118218][T24847] [ 730.128472][T24847] Chain exists of: [ 730.128472][T24847] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 730.128472][T24847] [ 730.140501][T24847] Possible unsafe locking scenario: [ 730.140501][T24847] [ 730.147975][T24847] CPU0 CPU1 [ 730.153377][T24847] ---- ---- [ 730.158762][T24847] lock(gdp_mutex); [ 730.162686][T24847] lock(cpuhp_state-up); [ 730.169558][T24847] lock(gdp_mutex); [ 730.176004][T24847] lock(fs_reclaim); [ 730.180006][T24847] [ 730.180006][T24847] *** DEADLOCK *** [ 730.180006][T24847] [ 730.188165][T24847] locks held by syz.1.4546/24847: 3, last CPU#0: [ 730.194519][T24847] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 730.202769][T24847] #1: ffffffff8ebf7d88 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 730.213249][T24847] #2: ffffffff8f8035e0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 730.222592][T24847] [ 730.222592][T24847] stack backtrace: [ 730.228505][T24847] CPU: 0 UID: 0 PID: 24847 Comm: syz.1.4546 Not tainted syzkaller #0 PREEMPT(full) [ 730.237900][T24847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 730.247994][T24847] Call Trace: [ 730.251298][T24847] [ 730.254256][T24847] dump_stack_lvl+0xe8/0x150 [ 730.258888][T24847] print_circular_bug+0x2e2/0x300 [ 730.263947][T24847] check_noncircular+0x12f/0x150 [ 730.268929][T24847] __lock_acquire+0x164c/0x2de0 [ 730.273817][T24847] ? lockdep_unlock+0x5c/0xd0 [ 730.278522][T24847] ? __lock_acquire+0x1511/0x2de0 [ 730.283587][T24847] lock_acquire+0x115/0x350 [ 730.288139][T24847] ? __kmalloc_cache_noprof+0x61/0x600 [ 730.293645][T24847] fs_reclaim_acquire+0x71/0x100 [ 730.298613][T24847] ? __kmalloc_cache_noprof+0x61/0x600 [ 730.304104][T24847] __kmalloc_cache_noprof+0x61/0x600 [ 730.309429][T24847] ? get_device_parent+0x255/0x3a0 [ 730.314569][T24847] ? get_device_parent+0x255/0x3a0 [ 730.319712][T24847] get_device_parent+0x255/0x3a0 [ 730.324678][T24847] device_add+0x2d4/0xb80 [ 730.329037][T24847] firmware_fallback_sysfs+0x2dd/0xa50 [ 730.334530][T24847] ? _request_firmware+0x102c/0x1780 [ 730.339878][T24847] _request_firmware+0x1049/0x1780 [ 730.345034][T24847] ? __pfx__request_firmware+0x10/0x10 [ 730.350534][T24847] ? netdev_run_todo+0xfda/0x1060 [ 730.355596][T24847] ? __pfx___mutex_lock+0x10/0x10 [ 730.360654][T24847] ? __pfx_netdev_run_todo+0x10/0x10 [ 730.365992][T24847] request_firmware+0x36/0x50 [ 730.370713][T24847] reg_reload_regdb+0x95/0x490 [ 730.375501][T24847] ? __nla_parse+0x40/0x60 [ 730.379977][T24847] ? __pfx_reg_reload_regdb+0x10/0x10 [ 730.385379][T24847] ? nl80211_pre_doit+0x53d/0x890 [ 730.390450][T24847] genl_family_rcv_msg_doit+0x233/0x340 [ 730.396038][T24847] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 730.402173][T24847] ? bpf_lsm_capable+0x9/0x20 [ 730.406880][T24847] ? security_capable+0x7e/0x2c0 [ 730.411846][T24847] genl_rcv_msg+0x614/0x7a0 [ 730.416387][T24847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.421446][T24847] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 730.426852][T24847] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 730.432613][T24847] ? __pfx_nl80211_post_doit+0x10/0x10 [ 730.438144][T24847] netlink_rcv_skb+0x226/0x4a0 [ 730.442958][T24847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.448032][T24847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 730.453356][T24847] ? down_read+0x2be/0x330 [ 730.457826][T24847] genl_rcv+0x28/0x40 [ 730.461864][T24847] netlink_unicast+0x7bd/0x940 [ 730.466695][T24847] netlink_sendmsg+0x813/0xb40 [ 730.471526][T24847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.476844][T24847] ? apparmor_socket_sendmsg+0x18b/0x360 [ 730.482507][T24847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.487843][T24847] sock_sendmsg_nosec+0x14e/0x190 [ 730.492922][T24847] ____sys_sendmsg+0x54e/0x850 [ 730.497727][T24847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.503053][T24847] ? import_iovec+0x73/0xa0 [ 730.507595][T24847] ___sys_sendmsg+0x2a5/0x360 [ 730.512303][T24847] ? __lock_acquire+0x747/0x2de0 [ 730.517266][T24847] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.522510][T24847] ? futex_wake+0x51b/0x5f0 [ 730.527062][T24847] ? __fget_files+0x2a/0x420 [ 730.531683][T24847] ? __fget_files+0x3a2/0x420 [ 730.536407][T24847] __x64_sys_sendmsg+0x1b1/0x290 [ 730.541390][T24847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 730.546903][T24847] do_syscall_64+0x166/0x520 [ 730.551535][T24847] ? trace_irq_disable+0x3b/0x140 [ 730.556585][T24847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.562685][T24847] ? clear_bhb_loop+0x70/0xc0 [ 730.567394][T24847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.573337][T24847] RIP: 0033:0x7fc30bd9e159 [ 730.577802][T24847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.597453][T24847] RSP: 002b:00007fc30ccb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.605909][T24847] RAX: ffffffffffffffda RBX: 00007fc30c026090 RCX: 00007fc30bd9e159 [ 730.613904][T24847] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000008 [ 730.621909][T24847] RBP: 00007fc30be3506b R08: 0000000000000000 R09: 0000000000000000 [ 730.629918][T24847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.637935][T24847] R13: 00007fc30c026128 R14: 00007fc30c026090 R15: 00007ffc3178cee8 [ 730.645952][T24847] [ 730.843817][ T59] ovs-s!!: left promiscuous mode [ 730.909393][ T59] tipc: Disabling bearer [ 730.909569][ T59] tipc: Disabling bearer [ 730.935906][ T59] tipc: Left network mode [ 731.417068][ T59] veth1_to_team: left promiscuous mode [ 731.426571][ T59] veth0_to_team: left promiscuous mode [ 731.974196][ T59] IPVS: stop unused estimator thread 0... [ 733.417888][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 733.417913][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 733.419329][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 737.258139][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 737.897748][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!