last executing test programs: 15.902635729s ago: executing program 1 (id=3175): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 15.743072066s ago: executing program 1 (id=3177): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x800}], 0x1, 0x40800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x7, 0x6}}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x10000, 0x5, &(0x7f00000004c0)=""/5, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0x1]}, 0x94) r4 = socket(0x10, 0x3, 0x0) socket(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25", @ANYRES32, @ANYBLOB="080003"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090) 15.236534272s ago: executing program 1 (id=3181): close(0x4) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r2, 0x8916, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f05ebbee1, 0x40010, r1, 0xd750000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000280)) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x12, r6, 0x80000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14.166457968s ago: executing program 1 (id=3190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0x8}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) (async, rerun: 64) close(0x3) (rerun: 64) 13.749014954s ago: executing program 1 (id=3195): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000907040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.570262364s ago: executing program 1 (id=3196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="f966290ba94259beecc19b451eb0b64ca5a92bb8f3b9bde019eb4a87661b7dbdab3173a8b6a89c133bdc5b06d01e6d3ea8a6571fba71932b27686f0ebd65d776235eb306e858c58619027d14548a9920ce88804d58d5e833d1329f61a576e87e917bf8e08763b8d3a829a3", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x31, &(0x7f0000000280)={0x0, 0xea60}, 0x10) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES32=0x0, @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7.024354953s ago: executing program 4 (id=3254): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4c445}, 0x40140) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100"/18, @ANYRES32=r6, @ANYBLOB="040011800500e40000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4c445}, 0x40140) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x2000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100"/18, @ANYRES32=r6, @ANYBLOB="040011800500e40000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async) 5.211268014s ago: executing program 4 (id=3263): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pim6reg\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x20000007}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x2, 0x50, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b40)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket(0x2b, 0x80801, 0x1) shutdown(r9, 0x7ffffffe) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) writev(r10, &(0x7f0000000900)=[{&(0x7f0000000680)="95bfd1", 0x3}], 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x8, &(0x7f0000000200), 0x4) bind(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x2, 0x1, 0x4, 0x2}}, 0x80) 4.767572269s ago: executing program 4 (id=3267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="38385a7af3d0d01f49ea97c4b49c9e89716b89225ddf", 0x16) 4.700553571s ago: executing program 4 (id=3269): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa, 0x2, 0x1, 0x6, 0x1, 0x811b}, 0x20) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 4.484027275s ago: executing program 4 (id=3271): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500f30007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.261889869s ago: executing program 4 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ffffff7f00000000050000001801000200646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7071400edba00008500000006000000181100008dcc881f6a3eb51c4edd059492ac98e455711721e81c3a44d363f8b5d9b88cb0c531de2186e2bc6e6cb660cff908e4cb2ff802a842c426b724", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd7000fedbdf25037c0008000b000a01010204000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="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", 0x3fc}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x810, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r3, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/72, 0x48}, 0x81}], 0x2, 0x20000020, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) 4.02058347s ago: executing program 3 (id=3276): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0xb, 0x5, 0x0, {}, [{0x44, 0x1, [@m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "2c693b7b2f748e36c1cbde6d4db950c3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x480c0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000811240000000000095000007000000004efdb069300563b213d21b8a08ec8110b83ff990d119bbcfd4b291c9dab62da503ad74482d7c43bbc67f0108025e819eb57b9bf762e9728a34310652b05ed4f66ba51c462d092be1dbf39289b0f0b65ee7384138bb892930175f4d01cf67f75f496a9c5221a9dda97e3f20f610c02ab4bc3836786c2db71f3e54d8e1ab13db0751665565c65cf58a2bb949936c8274349a6b1d7af8e6e78721fa6002d4792f88ab844c6e1f60cdf4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff0388a8000000000000000000", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "8b0f00", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.251737845s ago: executing program 2 (id=3277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040)=0x5, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r1, r0, r0, r1, r1, r1, r0], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) r9 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0xb}}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x9, 0x6, 0x7, 0x30, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x9, &(0x7f0000000b40)=[r0, r0, r1, r1, r1], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r11, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r6, r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000e00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x4}, @generic={0x4, 0x2, 0x3, 0xc1, 0x10000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x4, 0x1, 0xa, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x29}], &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e1f, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.037281394s ago: executing program 2 (id=3278): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="38385a7af3d0d01f49ea97c4b49c9e89716b89225ddf", 0x16) 2.966336274s ago: executing program 3 (id=3279): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 2.90939672s ago: executing program 2 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000027f2366b9051e224bec1bac66ee1d43100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x28, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 2.158412887s ago: executing program 2 (id=3281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x1004, 0x104e4, 0x1, 0x0, 0x1, 0xe766}, 0x50) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x2}, 0x1c) socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000b80)=0xb, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600", @ANYRES32=r5], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8982, &(0x7f0000001100)={0x7, 'batadv0\x00', {0x7}, 0x200}) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r13, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getsockopt$bt_hci(r12, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.12678861s ago: executing program 3 (id=3282): r0 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xa8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) 1.864045758s ago: executing program 0 (id=3283): r0 = socket(0x2, 0x80805, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000000)=[0x8, 0x6]) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x40444c4) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)='Q', 0x1}, {&(0x7f0000000280)="510cbf25d564e636144c587aecea6123a80edc13f53d8a36a6a482d42ae5f50f38b76d7a6ad469cac41c74ac428f04b54e62e6f4bb3f138d322a7a2e914a5c508895657bc71c9e08a1ed68a2a0fa89b59b15337e58e0d7a6a34daf54a6b5080647f54a01bc57ea055da59eba999c8f796bf610f07f99ab4d4b279cd6148239f6e0f318e9db5e20e7b7506429e57637d2cc45578d0f96d6856e4ce58ecb4bd79b3a661eb15f6b69654d19916732e5f7a7ca82d6496486991ef9d5", 0xba}], 0x2}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) 1.693470023s ago: executing program 0 (id=3284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071119d00000000008510000002000000850000003200000095000000000000009500a5050000000039b8add39ce604056d03186e2c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r3, 0x4a9b6000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xbf64, 0x4, 0x6, 0x10210, 0xffffffffffffffff, 0x9939, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xf}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x7, 0x5, 0x8, 0x0, 0x1, 0x7fb9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x21, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x73, &(0x7f0000000300)=""/115, 0x41100, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r3, 0xffffffffffffffff, r4, r5, r6, r7], &(0x7f0000000640)=[{0x2, 0x2, 0x9}, {0x2, 0x4, 0xa, 0x3}], 0x10, 0x3ff}, 0x94) 1.545698641s ago: executing program 3 (id=3285): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, &(0x7f0000000000)=""/7, 0x7, 0x10000, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="1697218dd9d307593492", 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x401, 0x914, 0x7, 0x9, 0x63, 0x8, 0xd, 0x1, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0xdea, 0x10}, &(0x7f00000001c0)=0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400200, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x14) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/13, 0xd}], 0x5, &(0x7f0000000640)=""/240, 0xf0}, 0x10060) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000880)={r0, &(0x7f0000000780)='\x00', 0x802, &(0x7f00000007c0)={@_ha_fsid={[0x4]}, {0x8, 0x6, 0x7, 0x1}}, 0x7, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x9}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000880)={r0, &(0x7f0000000780)='\x00', 0x802, &(0x7f00000007c0)={@_ha_fsid={[0x4]}, {0x8, 0x6, 0x7, 0x1}}, 0x7, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x9}) socket$packet(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x81}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa163002c}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xb}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x22048805) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x81}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa163002c}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xb}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x22048805) pselect6(0x40, &(0x7f0000000a80)={0xc, 0x2, 0x8, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x3}, &(0x7f0000000ac0)={0x8c, 0x20, 0x1, 0xc, 0x9, 0x8, 0x4, 0x1}, &(0x7f0000000b00)={0x4, 0xffffffffffffff09, 0x1, 0x4, 0x0, 0x4, 0x5, 0x8}, &(0x7f0000000b40)={0x77359400}, &(0x7f0000000bc0)={&(0x7f0000000b80)={[0x1]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000a80)={0xc, 0x2, 0x8, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x3}, &(0x7f0000000ac0)={0x8c, 0x20, 0x1, 0xc, 0x9, 0x8, 0x4, 0x1}, &(0x7f0000000b00)={0x4, 0xffffffffffffff09, 0x1, 0x4, 0x0, 0x4, 0x5, 0x8}, &(0x7f0000000b40)={0x77359400}, &(0x7f0000000bc0)={&(0x7f0000000b80)={[0x1]}, 0x8}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000e40)={&(0x7f0000000c00), 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x184, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5d6744bb}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xffff8000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x21}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd2f}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1ff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xf001}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20044894}, 0x80) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000e40)={&(0x7f0000000c00), 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x184, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5d6744bb}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xffff8000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x21}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd2f}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1ff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xf001}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20044894}, 0x80) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r9, 0x40186f03, &(0x7f0000000ec0)={0x7, 0x1, 0xd0000000, 0xa862}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001200)={{r3, &(0x7f0000000f80)='!\x00', 0x0, &(0x7f0000000fc0)={@align=0x2, {0x62, 0x3, 0x2, 0x4}}, 0x6, &(0x7f0000001000)={@_ha_fsid}, &(0x7f0000001040)=0x4}, 0x2, &(0x7f00000011c0)=[{0x3, 0x7, &(0x7f0000001080)='\xed\x00', &(0x7f00000010c0)="7e83d6629ecdcac0c6466bef7db17959e4e9637851a0b8cbad6d4e5b59a8943bb8070a6dfdcca866bef4dd3881343e1f271f51c56e669fc12a16a77c938f1673cfe44f7be07cb270c3f1c09f54183cae59722c6979f0189285fc65", 0x5b}, {0x3, 0x0, &(0x7f0000001140)='\x00', &(0x7f0000001180)="c9a3c8c34994a07d17dcc512332f7c0e", 0x10, 0x20}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001200)={{r3, &(0x7f0000000f80)='!\x00', 0x0, &(0x7f0000000fc0)={@align=0x2, {0x62, 0x3, 0x2, 0x4}}, 0x6, &(0x7f0000001000)={@_ha_fsid}, &(0x7f0000001040)=0x4}, 0x2, &(0x7f00000011c0)=[{0x3, 0x7, &(0x7f0000001080)='\xed\x00', &(0x7f00000010c0)="7e83d6629ecdcac0c6466bef7db17959e4e9637851a0b8cbad6d4e5b59a8943bb8070a6dfdcca866bef4dd3881343e1f271f51c56e669fc12a16a77c938f1673cfe44f7be07cb270c3f1c09f54183cae59722c6979f0189285fc65", 0x5b}, {0x3, 0x0, &(0x7f0000001140)='\x00', &(0x7f0000001180)="c9a3c8c34994a07d17dcc512332f7c0e", 0x10, 0x20}]}) bpf$ITER_CREATE(0x21, &(0x7f0000001280)={r11}, 0x8) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001280)={r11}, 0x8) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r11) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r13, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x75198c43055f923e) bind$l2tp(r12, &(0x7f0000001400)={0x2, 0x0, @empty, 0x1}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r14, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, r13, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0xff, 0x39}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r14, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, r13, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0xff, 0x39}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x800) 1.420099727s ago: executing program 0 (id=3286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000001811f8ff", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.304218771s ago: executing program 0 (id=3287): close(0xffffffffffffffff) clock_gettime(0x7, &(0x7f0000000000)) 1.148373456s ago: executing program 3 (id=3288): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x400) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) 1.059599935s ago: executing program 0 (id=3289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000103b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 772.308744ms ago: executing program 3 (id=3290): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x9, 0x4, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x1, 0x700, 0x0, 0x9}}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="0200f7"], 0x1c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x4, 0xffffffff80000000}}}}}}, 0x0) sendto$inet6(r2, &(0x7f0000000300)="9a66126cfec4143f0853f6323b3d782ec96be3e93583dddaa0c3b4acd467463befe2de6f9484854aa7342624f705f7eeb3", 0x31, 0x8844, &(0x7f0000000340)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x9}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8048) r7 = socket(0x40000000015, 0x5, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000680)={'gre0\x00', r3, 0x1, 0x40, 0x5, 0x80000000, {{0x24, 0x4, 0x0, 0x9, 0x90, 0x68, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x1a, [@remote, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @broadcast, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x19, 0x3, [{0x6, 0x6, "d0d24e4c"}, {0x6, 0x7, "75abaf14a6"}, {0x6, 0x6, "f5fe7287"}]}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x0, [0x1, 0xa0cd, 0x2]}, @timestamp_addr={0x44, 0x24, 0x6a, 0x1, 0x4, [{@rand_addr=0x64010102, 0x3}, {@local, 0x1}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x1}]}, @generic={0x89, 0x9, "a261e2a3fd99a8"}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002d40)={'syztnl0\x00', &(0x7f0000002d00)={'sit0\x00', r3, 0x20, 0x80, 0x7fffffff, 0x6, {{0x8, 0x4, 0x3, 0x18, 0x20, 0x64, 0x0, 0x1, 0x14, 0x0, @remote, @remote, {[@noop, @end, @ssrr={0x89, 0x7, 0x3f, [@multicast1]}]}}}}}) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000001c00)={0x2, 0x4e29, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000980)}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b00)="7a6dab1095793657c8fd852afa0fadcba06aa9859c21445a17f31f1cc1072004b7a89433d7d2bc1abd4e581b0fc29fbf8919", 0x32}, {&(0x7f0000000b40)="97b1c96053df6ca3471379bba0df65faac277c744b9191bc12360d2b1b922cfccc68dc901c9529c4df0d937eb952d3f6be27dda291e35ab87bc7aad8", 0x3c}, {&(0x7f0000000c00)="d114361b3dccc929f4c44093f6f03ebaffa8ffdc3bb45a90e93b2a47cc7326069dccac296e8724c2eb9755773c6ddd87772cbac45e353521feb2ae582aba6642a7734a686e25b9fb1dc5e96d8a01e1861cf8cea3a785e3dfd3e1", 0x5a}, {&(0x7f0000000c80)="dc0558f831f1caac357cbbccb28faefe9af1144d3e2401e394b9e93be403c9c14a762401cdaeebedd2832a127192772360ba576a94d2b9ed304a3e32701e55b63b4f5bdf", 0x44}, {&(0x7f0000000d00)="f5d6acefc3e9df9b5ddfd39a9d8a1dceb2f17bcbba92fd87c64af78d968eb2a7204aee5cae759b1486dbe2e9563a8979f170fa25905783eb50133afc629e60797195daf076ea8d84c5685a6e1b1555059054d8cdf29388d8565a3caa1f91d3a413546d5cecb6524ea711d55a176f46ae2700c30d56c5978fe001c5f15aaee3af52e6646e37ec768a1b48890efc9c3f33601e8f662786e55b4b701f2b2c975bea1abe658a8500c08b734572fafecff639f28075b68619531bca7ae8b986", 0xbd}, {&(0x7f0000000e00)="95de7efd2406ea69e74cba05183564ab58c7fe6757b28f86ec442b96d11e43f7362d5f78a36ea5ea198a78b30b4aa8dab4287248b0d9d4494d0bdae9ff866df2dd314ad12c4f2b148b7d6793f162f5100f822a64c413411ea8bc9660389f59ccf90cd746210267c730a0fe029380c94a92c55f238a738143a690e1931320e7adb4850f3571c79775dd859a27bcb0291656686de9eeb4d5f32ce6052beaeddfaa11f2c939a602076c66556a3e522fbf66c09e812a", 0xb4}, {&(0x7f0000000ec0)="7820806ef9a1a6ad7485da6478cf4ff5485345351a64159d4316e95374fd7cfe181e054cab986beca0440e34ea3406bcaa6a7ac7ad4a0b0834e86286b042084a480cac7000504480c21e87ad08e83b77930621a43462f6db092cc198425c593c0c679afb1330d39ca653cc1166d57d6b8aa4b22d9821d200c9142efc021f295284bdfb29a5f8e85000d3e51a3cf4e6568f16009a88e79a77823f1b564bb4c1091450708130543cd81a11dc31165196976c301a4f0e839859b0368edf9134514ca6f9a0be54b9cfd0252a0ad737196120700690707df1f3f4824b3fa3dde7634363306f83", 0xe4}], 0x7}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001040)="1a150a39a232a1a18119b2c5d0c9004b7b422a17fd2dfdbdd8558e6669bbc95efefb9cedd4d4ee0a0ef2bf0a011c909b306a082427c33ae7cd0e70bf514863a7bcf88851e95b04d4589b52aa4047b8b455e31234c9ca002f11568d4bd1fa8f96453502286cb87ff922fb1b98cd8ebebbc7e16806cbddbb8c07007fd2160635c31c835d1abfc691685a8786764597a522c34b5956f32111bd0548639bbbb950e73550f2d74cc3ca767ffaffb3690a01b15ece8fc501e0ded3262487694e0c60bd197a529f2af0600a769a66b9e731e2104388c8e01d83b05bb1202cc79090de950682ffd93b", 0xe5}, {&(0x7f0000001140)="56ca9e61a9844e9c538811edab6d7be1796f035fe5d1b39510d02c1278cfe197037484e417b7e6db49de284b584bee3802b9b80b92cad5d8919c4492de2dcdfbc06cd658b1fb802882896f1d307a65d09e2213a6b8b6a19fd0a232a09a0548d50e659b26a5a8b1d191abac5d4516410900", 0x71}], 0x2, &(0x7f0000001200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0xa, 0x0, 0x0, [0x6, 0x6, 0x0, 0x8, 0x7fffffff, 0xf73, 0x7, 0x2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x2, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@broadcast, 0xc}, {@remote, 0x5}, {@broadcast, 0x1}]}]}}}], 0x108}}, {{&(0x7f0000001380)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001540)=[{&(0x7f00000013c0)="ef617d6968d9486e677dc16e156a60097be125ed09e1c5923627c83f63c757b15dfe29946aee9b75bfb888653e46855212bcc958b469c6ee9138d8cd8c4f793ba67ddb0658609ceb8f8d360bd54d8f15082803f5457cb8067504ca74cbf7fd916650838ecbe69be54f8fe6b7c323b20859fb559cb5c31714e3469eeef7c0fccbf0087bef980c5e8904bb8f9747e1b1cea2e59cee998d3cbb58218905f1ff172b686679d5ac81c06ce9b738b12479669d32bbcf", 0xb3}, {&(0x7f0000001480)="202b1cdf018dae30f79a25675f3a610b9aa0c4f49f52923691670d0e33435891224dd5e515950984885c3169a83eeb7d5e9192543cfae6e3a41db39a055ec13fd070f9557d7f3a26586eaee6e18cf52b8afef815286fe15416ff1cf9632ec836680e70485c95953af1ca588842e307843364bd2788d3b5fd2d11998fe039d8f3b77c924368e4165e734de2a29b5f5f37699f2af769492156eedbe52acc785ae1718a96fd0918844551effad9dc990516a9ca7e44e56178407be1a81d89", 0xbd}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="11000000000004000000000001000000030000000000080000000042e3912602fc5d37dec700"/50, @ANYRES32=r9, @ANYBLOB="e0000002ffffffff000000005c000000000000000000000007000000442ce5e37f00000100000006ac1414bb024000007f0000010000000affffffff80000001e0000002000000074404d7f1891b60ac1414aaac1414aaac1414aaac1e00017f0000010a01010000000000001400000000000000000000000200000006000000000000003700000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="e0000002ac14142100000000"], 0xe8}}, {{&(0x7f0000001680)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002c80)=[{&(0x7f00000016c0)="6d83c61e528563e6b0939574a48b13e80f416f67794adf9d1e55543dd3563ce47d58c210", 0x24}, {&(0x7f0000001700)="f15c6b3071d48dd4b0f1f9ebe7547846d9e851a0dd866276f786e3bafd2359c3606d09dd3c62943451a250d907576c1f82e44fccd020c7e67bcba8dff247844828cff1d9e0d2b2f44a7320ce9ec5ffbc653fcfed7a637c8597f54099e2cbdea0e9289e3dd258f2e1050e0d0b09f18af6adc67ffc808a4ecdb8774234e120d23455110c2401849fe330013d7dad98b7bb65646e5b934820aa15430d87806a3af62cf7dea64cc8a6987d5a873f3cd1e9756ef7257b40104f10e3b3ab1aa125faf90553a1020beb3406b436726771fd214494747707d2047c3c9d8ce4aec572e49f87e124a0", 0xe4}, {&(0x7f0000001800)="64c2be0d48bbbda5189a7818a1a4a8e7e4a40a5c16557d0e5463257a87bde61242b9420eea164c4998c7957a1fca77334e148062f24065d3b36d31570087be1357a28184dccf26933b18776d26d7a0905c6bb9b0c02163ed015974aea8541203ce6aae2f65067a1a394656e18a68c10c8ae701f0b31207aa161bd88db19016c2dbbc00946b914c1400f7d70383", 0x8d}, {&(0x7f00000018c0)="4dc27799a30912090e3bffb579d65d2454e36242c079c7824a75d1f3b5428bdf788d3fe87a182cb671384023097f64764efd1dedff979404e959c34c5a92d56d19baf9d642be5d3120df634facd3c74c0f4ca39101780b840e74c304a21322359a5ee25424676a3fd3ab960c6a8ac756a73541c6b1fac4dedfb23d2571572c108962fe404f9ae94bea6e72d38c011bff5ed4668bf90a5d834bcafdcbece61618884837fcd35a376757729cadaf5d0b569f06a666d24931bcbd3ee8f696538a7637c42647a22f558979ebac0de1ca62b4", 0xd0}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="ad603d8a6c0ba006f60279e4ab9c8330f7c165279447b7ef68f8", 0x1a}], 0x6, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1003}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010101, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xd0}}, {{&(0x7f0000002e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002ec0)="6a30aa3341cb7ab9590e26aa7e7eb700757ae061a509b5f788cc5e347c7d41d8d5af33ea16120fcba003e6845dd20ce03d9b6bf3975c23aac44853cd933dea6d2f37829ca155dc909c12956b1190836abb9cda149e26d579835575b0cc268b59917966b6f53be5", 0x67}, {&(0x7f0000002f40)="e5804cfd1397", 0x6}], 0x2, &(0x7f0000002fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5b}}, @ip_retopts={{0x90, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x4c, 0x5d, 0x3, 0x4, [{@empty, 0xead}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@loopback, 0x4}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xe}, {@local, 0x6}, {@rand_addr=0x64010102, 0xd4}, {@broadcast, 0x2}]}, @rr={0x7, 0xb, 0x91, [@dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x15}]}, @generic={0x83, 0xb, "58d4e38f6c4522efa4"}, @timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@loopback, 0x797}]}, @noop, @ssrr={0x89, 0x7, 0x6c, [@loopback]}, @end]}}}], 0xc8}}, {{&(0x7f00000030c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000003100)=ANY=[@ANYBLOB="14000000000000080000000001000000030000000000000010000000000000000000000007000000110000000000000000000000010000000300000000000000"], 0x40}}, {{&(0x7f0000003240)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000004780)=[{&(0x7f0000003280)="d0fba1ab3d5ebca12a5a905a55f6000a99b72cefe04e3dc220a6f88b0c1e477bd2288104613bd831c33c46ecd4ce10c975f2e21913ba2a118435b19139b9b356d6878f7339df8b9cd08b98193809748514f6210058da8b0be974a437", 0x5c}, {&(0x7f0000003300)="8fb6d3e5eab50da0c0d7a4b9bd2a2349eb2aebd67eb84d9e62dea5391abe812fe314afa60cce46564e57987ff88d01764efefeb9105e141591580dd28d533398927ac31cd56031223d62cdb0442fd974e7388a0d8f34ed0ff33039cb7f26fdf9f0ba6c20685c8df5", 0x68}, {&(0x7f0000003380)="143987c870bbaa45773b31e751cd52f9", 0x10}, {&(0x7f00000033c0)="1926ebabef79c8bc725f7bcca1b1d204", 0x10}, {&(0x7f0000003400)="47d9c638eded0a0f0656619a789413570a8f7ef66ac45dc223a24210b1fd55ef238b049d1897fa037213a3e369850db65fdbf98a2dc030af81ea50a950e9991e849943cab80377a2773e85a224d4688924a9699a45317acb026a36451586bf0ef39b40905dcf29a890bfeef7bd1ff76768b009dd00318d02cbf2e421292b6df3ff24c910316466216ae963e9a71e20b878cf4ec4833e79439a0828fd932e06b16ca26839995680b86018f15a1d58531c0747", 0xb2}, {&(0x7f00000034c0)="0e7a0fc49b18a437de88d2e0fe169d213d4b625e567cec5c5adc52e612d3028fac2db49c1d132c57eabb5bef508374166f0289e7d94c0ee3f1e8c6a546e21fb430a3afc457d57fef52c5fafd2ea2c0989b2b699857de4a02bec8793d77ac32", 0x5f}, {&(0x7f0000003540)="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", 0x1000}, {0x0}, {&(0x7f0000004600)="aabe035d326c46d38e874a31396db360968f87701933d45fd417fa03a35f6fef2c60cbd351498bb0c89cb9f53bc21755263271e434e9c97005f8f0a4923dafec726ea4079acff3f63dc0682fc2553daa857e7340c8a59b316242abbe00f6ada495e28b987e6cc4e1763d99ba694eb192025f0b7d4aca6dc7", 0x78}, {&(0x7f0000004680)="632838832e43915d3a120280ddf9aeb49eb28f0b9046e0b6dc749bf7935a09941719848600f36e6b7d781914bd614c5cbf808f38b22376118687400fa9f35b1621cd240ef1017f8fc6671818aa9ceb91d6d36a3bac913b196752b81858f9723c04042c2f07add16d2fa744980ca6d6b9254178dfd2fd9c7ec80762a0a70c64c6f39a285869653537a020b94a16379eba760354c4b9b24b2a9314b7e5bae346bfa448d75e92dc908c064708735caac221447fda8a4c22f9b2759074cc100464a77f83f8ebce3471ba8b31887e502dd222aa922a95d613cc628bf9828749a2d25b4cacbeeef88eae6d3d00421a02e8878adc78", 0xf2}], 0xa, &(0x7f00000019c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd51b}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x7, 0x7, "5698c56fe4"}, {0x6, 0xc, "748447a900c9a127f5e0"}, {0x7, 0x2}, {0x0, 0x2}, {0x5, 0x9, "039e3fb22967a4"}]}, @rr={0x7, 0x17, 0xed, [@empty, @local, @empty, @local, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1d6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x17, 0x6f, [@multicast2, @rand_addr=0x64010102, @private=0xa010102, @loopback, @remote]}, @noop, @rr={0x7, 0x7, 0xf, [@multicast2]}, @noop, @timestamp_addr={0x44, 0x4, 0x57, 0x1, 0x9}, @noop, @cipso={0x86, 0x49, 0x2, [{0x6, 0xf, "c3c819be2112218f734f4efb2b"}, {0x7, 0xd, "337db16bc10712308bf765"}, {0x0, 0xd, "33a864805519698e5d5f7d"}, {0x0, 0x9, "b5efc3210e284c"}, {0x6, 0x11, "a6e775d31ca8f403aee0275088800f"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf6}}], 0x138}}], 0x9, 0x4000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000003c0)=[0x9, 0x8000000000000001, 0x0, 0x7ff, 0xa, 0xd6b, 0x3, 0xff, 0x7ff, 0xff], 0x0, 0x200000002700, 0xa}}, 0x40) r11 = socket(0x40000000015, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e", 0x6}], 0x1}, 0x20000001) recvmsg$unix(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) 768.102584ms ago: executing program 0 (id=3291): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}], 0x5}}], 0x1, 0x2040000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000"], 0x20}}], 0x2, 0x20004840) 224.039453ms ago: executing program 2 (id=3292): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, 0x0, &(0x7f0000000080)=0xffffffffffffffd5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 2 (id=3293): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@fallback, 0xffffffffffffffff, 0x17}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = accept4(r0, &(0x7f00000002c0)=@isdn, &(0x7f0000000380)=0x80, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) accept4(r4, 0x0, 0x0, 0x400) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x300, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000540)={'\x00', 0x8000}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00052bbd700072dbdf2504000000"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): ast mode [ 407.995383][T13536] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 408.074393][T13534] lo speed is unknown, defaulting to 1000 [ 408.301670][T13546] batadv0: entered promiscuous mode [ 408.335930][T13546] macsec1: entered promiscuous mode [ 408.355267][T13546] macsec1: entered allmulticast mode [ 408.375527][T13546] batadv0: entered allmulticast mode [ 408.399305][T13546] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 408.807297][T13546] batadv0: left allmulticast mode [ 408.821707][T13546] batadv0: left promiscuous mode [ 409.335613][T13579] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 409.345460][T13579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1919'. [ 409.604188][T13591] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1921'. [ 410.416205][T13614] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 410.430837][T13614] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1925'. [ 410.446214][T13614] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1925'. [ 411.049052][T13645] netlink: 'syz.2.1931': attribute type 1 has an invalid length. [ 411.540107][T13645] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 412.256966][T13666] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1940'. [ 412.842447][ T5642] Bluetooth: hci3: link tx timeout [ 412.847781][ T5642] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 412.852219][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 412.932126][T13682] netlink: 261 bytes leftover after parsing attributes in process `syz.0.1947'. [ 413.170201][T13696] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1950'. [ 413.315643][T13704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1952'. [ 413.346742][T13704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1952'. [ 414.275182][T13729] netlink: Unknown conntrack attr (0) [ 414.502636][T13736] netlink: 'syz.0.1960': attribute type 21 has an invalid length. [ 414.526110][T13736] __nla_validate_parse: 3 callbacks suppressed [ 414.526133][T13736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1960'. [ 414.892141][ T5644] Bluetooth: hci3: command 0x0405 tx timeout [ 415.375430][T13768] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1968'. [ 415.424133][T13768] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1968'. [ 415.536464][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1968'. [ 415.978306][T13784] bond7: option xmit_hash_policy: invalid value (10) [ 415.998848][T13784] bond7 (unregistering): Released all slaves [ 416.036622][T13789] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1974'. [ 416.472362][T13800] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1976'. [ 417.132411][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.421209][T13828] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1985'. [ 417.570672][T13834] sctp: [Deprecated]: syz.1.1987 (pid 13834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.570672][T13834] Use struct sctp_sack_info instead [ 417.709424][T13841] netlink: 'syz.1.1990': attribute type 2 has an invalid length. [ 417.736084][T13841] netlink: 'syz.1.1990': attribute type 2 has an invalid length. [ 417.844124][T13850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1991'. [ 417.925373][T13850] unsupported nlmsg_type 40 [ 418.008926][T13859] syzkaller1: entered promiscuous mode [ 418.016496][T13859] syzkaller1: entered allmulticast mode [ 418.945523][T13893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2001'. [ 418.981421][T13893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 419.110652][T13903] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2002'. [ 419.144951][T13903] syzkaller0: entered promiscuous mode [ 419.150708][T13903] syzkaller0: entered allmulticast mode [ 419.372645][T13905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.600553][T13914] __nla_validate_parse: 1 callbacks suppressed [ 419.600576][T13914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2006'. [ 419.856185][T13933] netlink: 'syz.1.2010': attribute type 10 has an invalid length. [ 419.883390][T13933] team0: Device wg2 is of different type [ 419.907834][T13935] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2009'. [ 422.395312][T13907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.404679][T13912] netlink: 'syz.3.2005': attribute type 11 has an invalid length. [ 422.415374][T13912] netlink: 'syz.3.2005': attribute type 23 has an invalid length. [ 422.423935][T13912] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2005'. [ 422.726442][T13958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2017'. [ 423.039206][T13958] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.109557][T13976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2021'. [ 423.229566][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 423.323022][T13983] sctp: [Deprecated]: syz.2.2024 (pid 13983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.323022][T13983] Use struct sctp_sack_info instead [ 423.342650][T13983] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2024'. [ 423.438546][T13987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2025'. [ 423.809924][T13993] macsec1: entered promiscuous mode [ 423.888037][T14000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2030'. [ 423.926159][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 423.967016][T14000] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 424.255773][T14023] netlink: 'syz.3.2034': attribute type 12 has an invalid length. [ 426.592804][T14009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.865614][T14055] netlink: 'syz.3.2043': attribute type 21 has an invalid length. [ 426.881186][T14055] __nla_validate_parse: 1 callbacks suppressed [ 426.881223][T14055] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2043'. [ 426.899221][T14055] netlink: 'syz.3.2043': attribute type 5 has an invalid length. [ 426.908564][T14055] netlink: 'syz.3.2043': attribute type 6 has an invalid length. [ 426.919332][T14055] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2043'. [ 426.933375][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 427.122352][T14062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.134818][T14062] team0: left promiscuous mode [ 427.142779][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.219607][T14062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.230818][T14062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.243830][T14062] hsr0: left promiscuous mode [ 427.251354][T14062] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 427.262827][T14062] veth1_vlan: left promiscuous mode [ 427.269409][T14062] veth0_vlan: left promiscuous mode [ 427.276420][T14062] veth0_vlan: entered promiscuous mode [ 427.287194][T14062] veth1_vlan: entered promiscuous mode [ 427.299182][T14062] veth1_macvtap: left promiscuous mode [ 427.306825][T14062] veth0_macvtap: left promiscuous mode [ 427.314593][T14062] veth0_macvtap: entered promiscuous mode [ 427.321713][T14062] veth1_macvtap: entered promiscuous mode [ 427.336097][T14062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.349465][T14062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.366916][T14062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.421560][T14062] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 427.449886][T14062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 427.476691][T14062] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 427.486004][T14062] ip6gretap1: left promiscuous mode [ 427.497786][T14062] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 427.527523][T14062] 8021q: adding VLAN 0 to HW filter on device eth0 [ 427.544659][T14062] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.568795][T14062] 8021q: adding VLAN 0 to HW filter on device eth2 [ 427.579923][T14062] 8021q: adding VLAN 0 to HW filter on device eth3 [ 427.596964][ T9677] hsr0: entered promiscuous mode [ 427.681646][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.705424][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.886614][T14076] syzkaller0: entered promiscuous mode [ 427.889502][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 427.894422][T14076] syzkaller0: entered allmulticast mode [ 427.902986][T14092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2051'. [ 427.945727][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 427.945836][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.960612][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 427.966187][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.990219][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 428.006203][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2051'. [ 428.017595][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 431.804489][T14131] tipc: Enabled bearer , priority 0 [ 431.821445][T14131] syzkaller0: entered promiscuous mode [ 431.832893][T14131] syzkaller0: entered allmulticast mode [ 431.913144][T14131] tipc: Resetting bearer [ 432.222272][T14130] tipc: Resetting bearer [ 432.277389][T14130] tipc: Disabling bearer [ 432.283491][T14166] __nla_validate_parse: 3 callbacks suppressed [ 432.283511][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 432.304903][T14162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2069'. [ 432.361317][T14166] bond8: entered promiscuous mode [ 432.367618][T14166] 8021q: adding VLAN 0 to HW filter on device bond8 [ 432.389156][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 432.469010][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 432.478996][T14169] bridge3: entered promiscuous mode [ 432.503163][T14169] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 432.532828][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 432.557085][T14180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'. [ 432.617984][T14166] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 432.635586][T14166] bridge3: left promiscuous mode [ 432.655194][T14166] bond8 (unregistering): Released all slaves [ 432.926638][T14191] veth11: entered allmulticast mode [ 432.940759][T14191] bond7: (slave veth11): Enslaving as an active interface with an up link [ 432.988493][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 432.999118][T14202] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 433.008957][T14193] bond7 (unregistering): (slave veth11): Releasing backup interface [ 433.030227][T14193] bond7 (unregistering): Released all slaves [ 433.685375][T14197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 433.699008][T14197] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 433.788791][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 433.826796][T14197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 433.844237][T14197] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 433.882778][T14197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 433.892758][T14197] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 433.919177][T14197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 433.927815][T14197] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 434.179406][T14240] lo speed is unknown, defaulting to 1000 [ 435.275798][T14275] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.2103'. [ 435.360670][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2103'. [ 436.054935][T14299] netlink: 'syz.2.2109': attribute type 11 has an invalid length. [ 436.091432][T14287] bond7: entered promiscuous mode [ 436.099407][T14287] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.294429][T14305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.989054][T14329] : entered promiscuous mode [ 437.049719][T14329] openvswitch: : Dropping previously announced user features [ 437.102373][T14330] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 437.284865][T14330] team0: Cannot enslave team device to itself [ 437.358127][T14335] lo speed is unknown, defaulting to 1000 [ 437.883710][T14356] __nla_validate_parse: 4 callbacks suppressed [ 437.883735][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 438.251450][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 439.167080][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2135'. [ 439.577620][T14404] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2140'. [ 439.605682][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'. [ 439.790806][T14418] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2143'. [ 439.804819][T14418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2143'. [ 440.268773][T14430] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2146'. [ 440.293617][T14433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.559895][T14442] netlink: 'syz.3.2150': attribute type 1 has an invalid length. [ 440.575978][T14442] netlink: 'syz.3.2150': attribute type 2 has an invalid length. [ 459.856045][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 459.868385][T14462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2155'. [ 460.379581][T14495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.903547][T14515] syz_tun: entered promiscuous mode [ 460.927627][T14515] macvtap1: entered promiscuous mode [ 460.955628][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 461.105846][T14525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2166'. [ 461.133006][T14525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.339340][T14515] syz_tun: left promiscuous mode [ 461.405406][T14536] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 461.419750][T14536] netlink: 'syz.1.2169': attribute type 3 has an invalid length. [ 461.428396][T14536] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2169'. [ 461.480817][T14512] lo speed is unknown, defaulting to 1000 [ 461.490622][T14518] syz_tun: entered promiscuous mode [ 461.496810][T14518] macvtap1: entered promiscuous mode [ 461.508047][T14518] syz_tun: left promiscuous mode [ 461.574379][T14521] ip6tnl0: Caught tx_queue_len zero misconfig [ 461.616713][T14531] hmac(sha224: entered promiscuous mode [ 461.706492][T14539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2170'. [ 461.775966][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 461.786017][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 461.815188][T14545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.835340][T14544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.871277][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 462.220937][T14554] syzkaller0: entered promiscuous mode [ 462.227777][T14554] syzkaller0: entered allmulticast mode [ 462.386590][T14565] x_tables: duplicate underflow at hook 1 [ 462.699960][T14572] macsec1: entered promiscuous mode [ 462.786445][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2181'. [ 462.824989][T14571] bond6: entered promiscuous mode [ 462.847747][T14571] bond6: entered allmulticast mode [ 462.870363][T14571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.077484][T14586] openvswitch: netlink: IP tunnel dst address not specified [ 463.830040][T14616] lo speed is unknown, defaulting to 1000 [ 464.046849][T14626] pim6reg99999991: entered allmulticast mode [ 464.146996][T14622] lo speed is unknown, defaulting to 1000 [ 464.473833][T14634] netlink: 'syz.1.2196': attribute type 1 has an invalid length. [ 464.562304][T14634] 8021q: adding VLAN 0 to HW filter on device bond7 [ 464.633386][T14634] bond7: (slave geneve3): making interface the new active one [ 464.647207][T14634] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 464.665742][ T9317] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.688162][ T9317] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.858471][ T9317] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.989166][T14650] openvswitch: netlink: IP tunnel dst address not specified [ 468.155663][ T9317] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.194787][T14657] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 468.404206][T14668] batadv0: entered promiscuous mode [ 468.411113][T14668] veth0_to_batadv: entered promiscuous mode [ 468.419388][T14668] debugfs: 'hsr1' already exists in 'hsr' [ 468.429093][T14668] Cannot create hsr debugfs directory [ 468.439140][T14668] hsr1: entered allmulticast mode [ 468.444980][T14668] batadv0: entered allmulticast mode [ 468.451224][T14668] veth0_to_batadv: entered allmulticast mode [ 468.764488][T14677] ž˙: renamed from team_slave_1 (while UP) [ 468.777022][T14673] __nla_validate_parse: 7 callbacks suppressed [ 468.777044][T14673] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2204'. [ 468.820371][T14678] netlink: 11928 bytes leftover after parsing attributes in process `syz.1.2204'. [ 468.872347][T14678] netlink: 420 bytes leftover after parsing attributes in process `syz.1.2204'. [ 469.083084][T14681] lo speed is unknown, defaulting to 1000 [ 469.800937][T14721] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.2218'. [ 470.170738][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 470.183288][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2223'. [ 470.202273][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 470.221272][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2223'. [ 470.474504][ T9667] IPVS: starting estimator thread 0... [ 470.489573][T14744] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20003 [ 470.527263][T14739] syzkaller1: left promiscuous mode [ 470.555282][T14739] syzkaller1: left allmulticast mode [ 470.602201][T14745] IPVS: using max 24 ests per chain, 57600 per kthread [ 470.864065][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2229'. [ 471.054123][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2231'. [ 471.384424][T14780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.762460][T14779] rdma_rxe: rxe_newlink: failed to add lo [ 472.149365][T14791] bond7 (unregistering): Released all slaves [ 472.310859][T14800] syzkaller0: entered promiscuous mode [ 472.351127][T14800] syzkaller0: entered allmulticast mode [ 472.638492][T14824] netlink: 'syz.0.2246': attribute type 21 has an invalid length. [ 475.724088][T14819] tipc: Enabling of bearer rejected, failed to enable media [ 475.734208][T14824] netlink: 'syz.0.2246': attribute type 4 has an invalid length. [ 475.742685][T14824] netlink: 'syz.0.2246': attribute type 3 has an invalid length. [ 475.750619][T14824] __nla_validate_parse: 16 callbacks suppressed [ 475.750634][T14824] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2246'. [ 475.973525][T14814] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.160358][T14814] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.265144][T14851] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2253'. [ 476.366640][T14814] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.396427][T14866] netlink: 'syz.1.2257': attribute type 1 has an invalid length. [ 476.426980][T14866] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 476.487638][T14814] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.517452][T14866] lo speed is unknown, defaulting to 1000 [ 476.536700][T14866] lo speed is unknown, defaulting to 1000 [ 476.539569][T14856] lo speed is unknown, defaulting to 1000 [ 476.547886][T14866] lo speed is unknown, defaulting to 1000 [ 476.659498][ T9310] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.706985][ T9310] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.733546][ T9310] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.758394][ T9310] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.123631][T14866] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 477.162516][T14866] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 477.215785][T14866] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 477.284212][T14866] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 477.376773][T14866] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 477.478947][T14884] netlink: 'syz.3.2263': attribute type 11 has an invalid length. [ 477.524056][T14884] netlink: 'syz.3.2263': attribute type 23 has an invalid length. [ 477.554686][T14884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2263'. [ 477.617867][T14866] lo speed is unknown, defaulting to 1000 [ 477.634815][T14866] lo speed is unknown, defaulting to 1000 [ 477.663763][T14866] lo speed is unknown, defaulting to 1000 [ 477.693201][T14866] lo speed is unknown, defaulting to 1000 [ 477.711142][T14866] lo speed is unknown, defaulting to 1000 [ 477.731734][T14866] lo speed is unknown, defaulting to 1000 [ 478.174417][T14899] lo speed is unknown, defaulting to 1000 [ 478.246287][T14904] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 478.302048][ T9682] lo speed is unknown, defaulting to 1000 [ 478.398129][T14904] team0: No ports can be present during mode change [ 478.564009][T14910] netlink: 'syz.4.2269': attribute type 10 has an invalid length. [ 478.934453][T14899] lo speed is unknown, defaulting to 1000 [ 479.241698][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'. [ 479.299136][T14930] macsec1: entered promiscuous mode [ 479.336246][T14930] ip6gretap0: entered promiscuous mode [ 479.342831][T14930] macsec1: entered allmulticast mode [ 479.349291][T14930] ip6gretap0: entered allmulticast mode [ 479.475926][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 479.512955][T14938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2278'. [ 479.824806][T14956] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 479.860549][T14956] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 480.504335][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 480.540824][T14982] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 480.581158][T14985] netlink: 'syz.3.2291': attribute type 10 has an invalid length. [ 480.668418][T14985] team0: Port device dummy0 added [ 480.919768][T15005] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20005 [ 481.537979][T15024] openvswitch: netlink: VXLAN extension 187 out of range max 1 [ 481.603353][T15029] lo speed is unknown, defaulting to 1000 [ 481.645020][T15025] Cannot find del_set index 1 as target [ 482.166108][T15029] lo speed is unknown, defaulting to 1000 [ 482.207223][T15054] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2312'. [ 482.245162][T15052] IPVS: persistence engine module ip_vs_pe_… not found [ 483.226548][T15096] netlink: 'syz.1.2328': attribute type 13 has an invalid length. [ 483.256772][T15096] netlink: 'syz.1.2328': attribute type 17 has an invalid length. [ 483.380262][T15096] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 483.660451][T15121] tipc: Enabled bearer , priority 0 [ 483.860790][T15121] syzkaller0: entered promiscuous mode [ 483.866867][T15121] syzkaller0: entered allmulticast mode [ 483.873739][T15121] tipc: Resetting bearer [ 484.123885][ T35] tipc: Resetting bearer [ 484.142826][T15120] tipc: Resetting bearer [ 484.188487][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 484.224918][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 484.267990][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2341'. [ 484.292791][T15154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2341'. [ 484.976879][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'. [ 487.455011][T15120] tipc: Disabling bearer [ 487.473753][T15148] bond0: entered promiscuous mode [ 487.478902][T15148] bond_slave_0: entered promiscuous mode [ 487.485654][T15148] bond_slave_1: entered promiscuous mode [ 487.496504][T15148] bond0: left promiscuous mode [ 487.501635][T15148] bond_slave_0: left promiscuous mode [ 487.521004][T15148] bond_slave_1: left promiscuous mode [ 487.557942][T15154] bond0: entered promiscuous mode [ 487.564668][T15154] bond_slave_0: entered promiscuous mode [ 487.570633][T15154] bond_slave_1: entered promiscuous mode [ 487.584884][T15154] bond0: left promiscuous mode [ 487.589758][T15154] bond_slave_0: left promiscuous mode [ 487.602379][T15154] bond_slave_1: left promiscuous mode [ 487.885630][T15176] netlink: 'syz.0.2348': attribute type 1 has an invalid length. [ 487.910501][T15176] netlink: 'syz.0.2348': attribute type 2 has an invalid length. [ 487.958414][T15180] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 488.184013][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2353'. [ 488.198901][T15191] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2353'. [ 488.325476][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2354'. [ 488.659102][T15210] tipc: Started in network mode [ 488.672105][T15210] tipc: Node identity ac14140f, cluster identity 4711 [ 488.687432][T15210] tipc: New replicast peer: 255.255.255.255 [ 488.696924][T15210] tipc: Enabled bearer , priority 10 [ 488.980523][T15225] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 489.001236][T15225] netlink: 'syz.3.2364': attribute type 2 has an invalid length. [ 489.028100][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2364'. [ 489.256213][T15239] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 489.266990][T15239] xt_hashlimit: size too large, truncated to 1048576 [ 489.301012][T15239] xt_hashlimit: max too large, truncated to 1048576 [ 489.301333][T15234] lo speed is unknown, defaulting to 1000 [ 489.319381][T15244] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 489.423408][T15239] ipt_REJECT: TCP_RESET invalid for non-tcp [ 489.821985][ T5819] tipc: Node number set to 2886997007 [ 489.834197][T15265] openvswitch: netlink: Flow actions attr not present in new flow. [ 489.894361][T15249] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 490.245809][T15254] lo speed is unknown, defaulting to 1000 [ 490.270038][T15234] lo speed is unknown, defaulting to 1000 [ 490.373634][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 490.415371][T15291] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 490.849485][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2383'. [ 491.096547][T15254] lo speed is unknown, defaulting to 1000 [ 491.115267][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2387'. [ 491.243250][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2389'. [ 491.372190][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.515543][T15334] x_tables: duplicate underflow at hook 1 [ 491.582976][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 491.875060][T15329] lo speed is unknown, defaulting to 1000 [ 492.031165][T15348] netlink: 'syz.1.2396': attribute type 3 has an invalid length. [ 492.055208][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'. [ 492.170915][T15354] tipc: Enabling of bearer rejected, failed to enable media [ 492.619993][T15329] lo speed is unknown, defaulting to 1000 [ 492.892783][T15378] syzkaller0: entered promiscuous mode [ 492.899518][T15378] syzkaller0: entered allmulticast mode [ 493.050567][T15385] x_tables: duplicate underflow at hook 1 [ 493.299725][T15390] netlink: 'syz.1.2406': attribute type 4 has an invalid length. [ 493.307457][T15391] netlink: 'syz.1.2406': attribute type 4 has an invalid length. [ 493.392462][ T9667] lo speed is unknown, defaulting to 1000 [ 493.400244][ T9667] syz2: Port: 1 Link DOWN [ 493.409145][T15390] __nla_validate_parse: 18 callbacks suppressed [ 493.409164][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 493.727447][T15407] team0: No ports can be present during mode change [ 493.926572][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'. [ 493.980170][T15415] tap0: tun_chr_ioctl cmd 1074025677 [ 493.996360][T15415] tap0: linktype set to 260 [ 494.173114][T15428] x_tables: duplicate underflow at hook 1 [ 494.307275][T15431] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 494.315874][T15431] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 494.760000][T15444] syzkaller0: entered promiscuous mode [ 494.773957][T15444] syzkaller0: entered allmulticast mode [ 494.947027][T15453] bond8: (slave bond_slave_1): Device is not our slave [ 494.969060][T15453] bond8: option active_slave: invalid value (bond_slave_1) [ 495.016428][T15453] bond8 (unregistering): Released all slaves [ 495.291301][T15468] netlink: 492 bytes leftover after parsing attributes in process `syz.4.2426'. [ 498.487471][T15471] IPVS: Error connecting to the multicast addr [ 498.599685][T15486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'. [ 498.693015][T15493] IPv6: Can't replace route, no match found [ 498.778722][T15499] syzkaller0: entered promiscuous mode [ 498.827562][T15499] syzkaller0: entered allmulticast mode [ 498.906292][T15506] FAULT_INJECTION: forcing a failure. [ 498.906292][T15506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.972091][T15506] CPU: 0 UID: 0 PID: 15506 Comm: syz.0.2438 Not tainted syzkaller #0 PREEMPT(full) [ 498.972123][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.972135][T15506] Call Trace: [ 498.972144][T15506] [ 498.972153][T15506] dump_stack_lvl+0xe8/0x150 [ 498.972182][T15506] should_fail_ex+0x412/0x560 [ 498.972222][T15506] _copy_from_user+0x2d/0xb0 [ 498.972251][T15506] ___sys_sendmsg+0x1c6/0x360 [ 498.972277][T15506] ? __lock_acquire+0x6b5/0x2cf0 [ 498.972303][T15506] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.972365][T15506] ? __fget_files+0x2a/0x420 [ 498.972388][T15506] ? __fget_files+0x3a0/0x420 [ 498.972424][T15506] __x64_sys_sendmsg+0x1bd/0x2a0 [ 498.972452][T15506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.972488][T15506] ? __pfx_ksys_write+0x10/0x10 [ 498.972526][T15506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.972549][T15506] do_syscall_64+0x15f/0xf80 [ 498.972573][T15506] ? trace_irq_disable+0x3b/0x140 [ 498.972601][T15506] ? clear_bhb_loop+0x40/0x90 [ 498.972627][T15506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.972646][T15506] RIP: 0033:0x7ffbcbb9cdd9 [ 498.972664][T15506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.972682][T15506] RSP: 002b:00007ffbcc9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.972705][T15506] RAX: ffffffffffffffda RBX: 00007ffbcbe15fa0 RCX: 00007ffbcbb9cdd9 [ 498.972721][T15506] RDX: 0000000024000880 RSI: 0000200000000d40 RDI: 0000000000000004 [ 498.972734][T15506] RBP: 00007ffbcc9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 498.972747][T15506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.972759][T15506] R13: 00007ffbcbe16038 R14: 00007ffbcbe15fa0 R15: 00007ffeddb0dca8 [ 498.972793][T15506] [ 499.318406][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 499.380923][T15520] team0: Port device team_slave_0 removed [ 499.509869][T15528] sctp: [Deprecated]: syz.3.2447 (pid 15528) Use of int in max_burst socket option. [ 499.509869][T15528] Use struct sctp_assoc_value instead [ 499.541783][T15528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.556518][T15530] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 499.586243][T15530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2448'. [ 499.626368][T15530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2448'. [ 499.680340][T15533] lo speed is unknown, defaulting to 1000 [ 500.323782][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2461'. [ 500.352711][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2461'. [ 500.557019][T15578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.564634][T15578] IPv6: NLM_F_CREATE should be set when creating new route [ 500.893612][T15533] lo speed is unknown, defaulting to 1000 [ 501.503051][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 501.513995][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 501.524269][T15617] netlink: 'syz.2.2475': attribute type 19 has an invalid length. [ 501.534750][T15617] netlink: 'syz.2.2475': attribute type 20 has an invalid length. [ 501.590369][T15618] netlink: 616 bytes leftover after parsing attributes in process `syz.1.2476'. [ 502.015788][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2479'. [ 502.060925][T15629] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 502.808627][T15676] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 503.403422][T15693] syzkaller1: entered promiscuous mode [ 503.414617][T15693] syzkaller1: entered allmulticast mode [ 503.481011][T15695] bond8 (unregistering): Released all slaves [ 503.568316][T15701] syzkaller1: left promiscuous mode [ 503.581723][T15701] syzkaller1: left allmulticast mode [ 503.649634][T15703] mac80211_hwsim hwsim8 d: left promiscuous mode [ 503.657334][T15703] mac80211_hwsim hwsim8 d: left allmulticast mode [ 503.665774][T15703] bond2: left promiscuous mode [ 503.670784][T15703] bond2: left allmulticast mode [ 503.678251][T15703] ip6erspan0: left allmulticast mode [ 503.684590][T15703] hsr1: left promiscuous mode [ 503.689780][T15703] ip6erspan1: left allmulticast mode [ 503.697835][T15705] __nla_validate_parse: 3 callbacks suppressed [ 503.698797][T15705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2497'. [ 503.716917][T15703] ip6gretap1: left allmulticast mode [ 503.724160][T15703] veth5: left promiscuous mode [ 503.729784][T15703] bond5: left promiscuous mode [ 503.737586][T15703] geneve3: left promiscuous mode [ 503.873167][T15703] veth11: left allmulticast mode [ 503.913977][T15703] bond7: left promiscuous mode [ 503.937672][T15703] ip6gretap0: left allmulticast mode [ 503.962331][T15703] ip6gretap0: left promiscuous mode [ 503.973193][T15703] macsec1: left promiscuous mode [ 503.983911][T15703] macsec1: left allmulticast mode [ 504.156031][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 504.200183][ T9310] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 51736 - 0 [ 504.209533][ T9310] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 51736 - 0 [ 504.262430][T15723] bond0: entered promiscuous mode [ 504.279980][T15723] bond_slave_0: entered promiscuous mode [ 504.288005][T15723] bond_slave_1: entered promiscuous mode [ 504.310813][T15723] bond0: left promiscuous mode [ 504.321032][T15723] bond_slave_0: left promiscuous mode [ 504.342214][T15723] bond_slave_1: left promiscuous mode [ 504.400060][ T9310] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 51736 - 0 [ 504.421147][ T9310] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 51736 - 0 [ 504.433208][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2503'. [ 504.446377][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 504.503123][T15735] netlink: 'syz.0.2503': attribute type 32 has an invalid length. [ 504.568392][T15729] geneve3: entered promiscuous mode [ 504.850054][T15750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2508'. [ 504.865553][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 504.986709][T15757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2510'. [ 505.268349][T15763] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2512'. [ 505.428762][T15781] xt_limit: Overflow, try lower: 268435456/134217728 [ 505.473345][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 506.304137][T15782] geneve1: left promiscuous mode [ 506.310129][T15782] bond1: left promiscuous mode [ 506.322641][T15782] bond1: left allmulticast mode [ 506.330331][T15782] bond3: left promiscuous mode [ 506.336503][T15782] bridge1: left promiscuous mode [ 506.342677][T15782] macvtap1: left allmulticast mode [ 506.349363][T15782] bond5: left promiscuous mode [ 506.355612][T15782] bond0: left promiscuous mode [ 506.360611][T15782] bond5: left allmulticast mode [ 506.366824][T15782] bond0: left allmulticast mode [ 506.407839][T15782] macsec1: left promiscuous mode [ 506.551152][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 506.708882][T15815] netlink: 'syz.3.2526': attribute type 9 has an invalid length. [ 506.791368][T15820] netlink: 'syz.2.2528': attribute type 3 has an invalid length. [ 506.939732][T15833] netlink: 'syz.2.2533': attribute type 11 has an invalid length. [ 507.027129][T15837] netlink: 'syz.3.2534': attribute type 10 has an invalid length. [ 507.074711][T15843] netlink: 'syz.0.2536': attribute type 7 has an invalid length. [ 507.122681][T15843] netlink: 'syz.0.2536': attribute type 8 has an invalid length. [ 507.577588][T15868] pim6reg: entered allmulticast mode [ 507.591161][T15868] pim6reg: left allmulticast mode [ 507.936832][ T9310] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.949787][ T9310] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.969558][ T9310] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.990393][ T9310] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.554071][T15915] netlink: 'syz.2.2559': attribute type 11 has an invalid length. [ 508.591486][T15903] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 508.619319][ T24] lo speed is unknown, defaulting to 1000 [ 508.637800][ T24] syz2: Port: 1 Link ACTIVE [ 508.816708][T15923] __nla_validate_parse: 15 callbacks suppressed [ 508.816735][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2561'. [ 509.487443][T15951] netlink: 'syz.3.2571': attribute type 3 has an invalid length. [ 509.900684][T15969] set match dimension is over the limit! [ 510.096789][T15977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2576'. [ 510.110198][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 510.129349][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 510.396266][T15987] bond4: (slave bridge0): Releasing backup interface [ 510.403738][T15987] bridge0 (unregistering): left promiscuous mode [ 510.421746][T15988] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2580'. [ 510.436384][T15992] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2579'. [ 510.461248][T15992] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2579'. [ 510.577009][T15994] netlink: 'syz.4.2582': attribute type 13 has an invalid length. [ 510.689596][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 510.812656][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 511.444470][T16040] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2596'. [ 511.670208][T16055] x_tables: duplicate underflow at hook 2 [ 511.852700][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.013870][T16063] lo speed is unknown, defaulting to 1000 [ 512.899957][T16088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.911702][T16088] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.981558][T16088] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 513.010398][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.017977][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.038137][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.045421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.067839][T16063] lo speed is unknown, defaulting to 1000 [ 513.095647][T16091] bond0: entered promiscuous mode [ 513.101975][T16091] bond0: left promiscuous mode [ 513.485670][T16106] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 514.033152][T16127] __nla_validate_parse: 8 callbacks suppressed [ 514.033175][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2621'. [ 514.623380][T16149] tipc: Enabling of bearer rejected, failed to enable media [ 514.751014][T16158] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 514.789537][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.228608][T16176] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2637'. [ 515.240379][T16190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2642'. [ 515.254505][T16176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2637'. [ 515.404071][T16195] 8021q: VLANs not supported on wg1 [ 515.433761][T16196] 8021q: VLANs not supported on wg1 [ 515.697705][T16214] lo: Caught tx_queue_len zero misconfig [ 515.917264][T16221] netlink: 'syz.0.2654': attribute type 13 has an invalid length. [ 515.931526][T16227] netlink: 'syz.3.2656': attribute type 1 has an invalid length. [ 516.249354][T16245] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2662'. [ 516.266569][T16244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2661'. [ 516.323775][T16244] bond9: option primary_reselect: invalid value (133) [ 516.344760][T16244] bond9 (unregistering): Released all slaves [ 516.511104][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2661'. [ 516.577637][ T5642] block nbd1: Receive control failed (result -1) [ 516.585881][T16261] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2665'. [ 516.616631][T16266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2667'. [ 516.990663][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 517.127707][T16279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.228603][T16285] netlink: 'syz.2.2673': attribute type 13 has an invalid length. [ 517.247394][T16285] netlink: 'syz.2.2673': attribute type 17 has an invalid length. [ 517.348275][T16285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.384683][T16285] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.487017][T16285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.828875][T16285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.840708][T16285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.865364][T16285] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 518.020792][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.032925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.140949][T16304] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 518.208372][T16305] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 518.223058][T16305] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 518.253322][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.264827][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.274384][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.284262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.309877][T16316] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 518.372894][T16316] netlink: 'syz.4.2677': attribute type 3 has an invalid length. [ 518.744285][T16340] netlink: 'syz.0.2686': attribute type 4 has an invalid length. [ 518.780434][T16340] netlink: 'syz.0.2686': attribute type 4 has an invalid length. [ 518.898819][T16340] lo speed is unknown, defaulting to 1000 [ 519.118562][T16352] __nla_validate_parse: 3 callbacks suppressed [ 519.118582][T16352] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2690'. [ 519.647395][T16340] lo speed is unknown, defaulting to 1000 [ 519.683627][T16372] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2695'. [ 519.715077][T16372] openvswitch: netlink: Missing key (keys=40, expected=100) [ 520.197286][T16397] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 520.369399][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 520.537611][T16385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2699'. [ 520.641175][T16393] : entered promiscuous mode [ 520.736842][T16402] gretap1: entered allmulticast mode [ 520.778215][T16402] bond8: (slave gretap1): making interface the new active one [ 520.788839][T16402] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 521.073718][T16418] netlink: 'syz.4.2702': attribute type 8 has an invalid length. [ 521.455968][T16430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2704'. [ 521.484248][T16430] sctp: [Deprecated]: syz.4.2704 (pid 16430) Use of int in max_burst socket option deprecated. [ 521.484248][T16430] Use struct sctp_assoc_value instead [ 521.576304][T16435] IPVS: ip_vs_add_dest(): server weight less than zero [ 521.764552][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 521.805120][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 521.903753][T16443] macsec2: entered promiscuous mode [ 521.920890][T16443] team0: entered promiscuous mode [ 521.935290][T16443] team_slave_0: entered promiscuous mode [ 521.951641][T16443] team_slave_1: entered promiscuous mode [ 521.981436][T16443] macsec2: entered allmulticast mode [ 521.992541][T16443] team0: entered allmulticast mode [ 522.008997][T16443] team_slave_0: entered allmulticast mode [ 522.039164][T16443] team_slave_1: entered allmulticast mode [ 522.078275][T16443] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 522.301659][T16461] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2710'. [ 522.384502][T16454] lo speed is unknown, defaulting to 1000 [ 522.707008][T16475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2716'. [ 522.735113][ C0] net_ratelimit: 3 callbacks suppressed [ 522.735135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.750409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.767671][T16479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.778507][T16479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.787914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.875518][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 523.215791][T16454] lo speed is unknown, defaulting to 1000 [ 523.376349][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.385868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.694853][T16513] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.768591][T16516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.820788][T16516] team_slave_1: Caught tx_queue_len zero misconfig [ 523.966875][T16513] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.016568][ T9316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.026815][ T1011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.036384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.128881][T16513] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.302649][T16513] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.460326][T16524] __nla_validate_parse: 2 callbacks suppressed [ 524.460348][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 524.523135][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.534595][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.577523][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'. [ 524.611052][ T9310] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.661245][ T9310] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.848317][T16538] netlink: 'syz.2.2733': attribute type 4 has an invalid length. [ 524.898244][T16545] netlink: 'syz.2.2733': attribute type 4 has an invalid length. [ 524.946401][T16538] netlink: 'syz.2.2733': attribute type 11 has an invalid length. [ 525.096451][T16549] pimreg: left allmulticast mode [ 525.524017][T16561] netlink: 'syz.2.2740': attribute type 1 has an invalid length. [ 527.047792][T16600] x_tables: duplicate underflow at hook 1 [ 527.067378][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2752'. [ 527.409482][T16619] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2754'. [ 527.778784][T16625] lo speed is unknown, defaulting to 1000 [ 528.126104][T16632] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2759'. [ 528.323999][T16635] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2760'. [ 528.379042][T16636] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2760'. [ 528.429942][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 528.533731][T16635] macvlan1: entered allmulticast mode [ 528.544296][T16635] hsr0: entered allmulticast mode [ 528.562700][T16635] hsr_slave_0: entered allmulticast mode [ 528.570141][T16635] hsr_slave_1: entered allmulticast mode [ 528.592581][T16635] hsr0: entered promiscuous mode [ 528.600508][T16625] lo speed is unknown, defaulting to 1000 [ 528.922719][T16643] netlink: 'syz.1.2763': attribute type 21 has an invalid length. [ 528.931304][T16643] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2763'. [ 529.012875][T16643] netlink: 'syz.1.2763': attribute type 5 has an invalid length. [ 529.036933][T16643] netlink: 'syz.1.2763': attribute type 6 has an invalid length. [ 529.085230][T16643] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2763'. [ 529.130484][T16648] x_tables: duplicate underflow at hook 1 [ 529.133507][ T9310] net_ratelimit: 1 callbacks suppressed [ 529.133528][ T9310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.151376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.308337][T16646] bond7 (unregistering): Released all slaves [ 529.774339][ T9310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.782879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.793471][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.819656][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.063806][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 530.500812][T16680] tc_dump_action: action bad kind [ 530.685504][T16682] lo speed is unknown, defaulting to 1000 [ 531.360099][T16682] lo speed is unknown, defaulting to 1000 [ 531.539455][T16698] x_tables: duplicate underflow at hook 1 [ 531.755872][T16713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2780'. [ 531.829292][T16711] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2779'. [ 531.912037][T16724] lo: Caught tx_queue_len zero misconfig [ 532.558356][T16742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.571168][T16744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2792'. [ 532.581641][T16744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2792'. [ 532.611229][T16742] netlink: 'syz.4.2791': attribute type 10 has an invalid length. [ 532.996933][T16761] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2796'. [ 533.218330][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2800'. [ 533.261746][ T5642] block nbd2: Receive control failed (result -1) [ 533.295548][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 533.861177][T16799] lo speed is unknown, defaulting to 1000 [ 534.015296][T16791] openvswitch: netlink: IPv6 tunnel dst address is zero [ 534.200815][T16811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2807'. [ 534.583258][T16823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2811'. [ 534.893314][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.902547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.027523][T16850] syzkaller0: entered promiscuous mode [ 535.047822][T16850] syzkaller0: entered allmulticast mode [ 535.178953][T16850] __nla_validate_parse: 2 callbacks suppressed [ 535.178973][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2818'. [ 535.305538][T16799] lo speed is unknown, defaulting to 1000 [ 535.372366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.383146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.533793][ T1011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.549742][ T9310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.559205][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.568128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.655236][T16870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2823'. [ 536.035157][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 536.085327][T16877] syzkaller1: entered promiscuous mode [ 536.111413][T16877] syzkaller1: entered allmulticast mode [ 536.225071][T16880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.251646][T16880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.267538][T16880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.281597][T16880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.294807][T16880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.340075][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.350176][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.371728][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.396808][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.407529][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.930818][T16892] tipc: Enabled bearer , priority 10 [ 537.110023][T16899] pimreg: entered allmulticast mode [ 537.418911][T16903] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.426509][T16903] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.798270][T16903] team0: left allmulticast mode [ 537.803462][T16903] team_slave_0: left allmulticast mode [ 537.809006][T16903] team_slave_1: left allmulticast mode [ 537.814744][T16903] team0: left promiscuous mode [ 537.825568][T16903] team_slave_0: left promiscuous mode [ 537.835404][T16903] team_slave_1: left promiscuous mode [ 537.841615][T16903] macsec2: left promiscuous mode [ 537.847066][T16903] macsec2: left allmulticast mode [ 537.864451][ T35] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.888868][ T35] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.913767][ T35] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.933940][ T35] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.104906][T16922] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 538.146502][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2836'. [ 538.301626][T16878] lo speed is unknown, defaulting to 1000 [ 538.492192][T16880] Bluetooth: hci5: command tx timeout [ 538.654146][T16948] netlink: 'syz.2.2844': attribute type 10 has an invalid length. [ 538.697647][T16950] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2843'. [ 538.892719][T16878] lo speed is unknown, defaulting to 1000 [ 539.172469][ T9682] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 539.225544][ T807] lo speed is unknown, defaulting to 1000 [ 539.518696][T16961] netlink: 'syz.3.2846': attribute type 10 has an invalid length. [ 539.568345][T16961] ipvlan0: entered allmulticast mode [ 539.616047][T16961] team0: Device ipvlan0 failed to register rx_handler [ 539.672728][ T9682] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 539.803589][T16878] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.811029][T16878] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.820214][T16878] bridge_slave_0: entered allmulticast mode [ 539.831112][T16878] bridge_slave_0: entered promiscuous mode [ 539.841401][T16878] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.849965][T16878] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.858152][T16878] bridge_slave_1: entered allmulticast mode [ 539.874570][T16878] bridge_slave_1: entered promiscuous mode [ 539.969209][T16878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.994987][T16878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.113471][T16878] team0: Port device team_slave_0 added [ 540.145292][T16878] team0: Port device team_slave_1 added [ 540.301260][T16878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.329789][T16878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.407567][T16878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.436106][T16878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.443822][T16878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.471537][T16878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.571970][T16880] Bluetooth: hci5: command tx timeout [ 540.655795][T17000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.665179][T16878] hsr_slave_0: entered promiscuous mode [ 540.669548][T16878] hsr_slave_1: entered promiscuous mode [ 541.072974][T16878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.087217][T16878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.146762][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2860'. [ 541.233645][T17019] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2862'. [ 541.259902][T16878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.306293][T16878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.378347][T17019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.385189][T17026] netlink: 'syz.1.2864': attribute type 89 has an invalid length. [ 541.501546][T16878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.529140][T16878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.616378][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 541.817478][T16878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.842188][T16878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.895373][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 541.945700][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 541.979714][T17048] team1: entered promiscuous mode [ 541.991103][T17048] team1: entered allmulticast mode [ 541.999790][T17048] 8021q: adding VLAN 0 to HW filter on device team1 [ 542.078427][T17038] team2: entered promiscuous mode [ 542.084073][T17038] team2: entered allmulticast mode [ 542.089823][T17038] 8021q: adding VLAN 0 to HW filter on device team2 [ 542.638809][T17072] syzkaller1: left promiscuous mode [ 542.652365][T16880] Bluetooth: hci5: command tx timeout [ 542.653711][T17072] syzkaller1: left allmulticast mode [ 542.916155][T16878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 542.927128][T17081] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 542.948547][T16878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.958131][T16878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 542.969732][T16878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.979954][T16878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 543.074409][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 543.084561][T16878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.111685][T16878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 543.146095][T16878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.230060][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'. [ 543.586551][T17120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'. [ 543.640590][T16878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.667065][T17120] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 543.747773][T16878] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.790257][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.797712][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.864452][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.872247][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.931239][ T5289] veth0_macvtap: left promiscuous mode [ 544.000191][T17128] syzkaller0: entered promiscuous mode [ 544.010485][T17128] syzkaller0: entered allmulticast mode [ 544.107336][T17131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2888'. [ 544.732231][T16880] Bluetooth: hci5: command tx timeout [ 544.907341][T17170] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2896'. [ 545.487874][T17190] ip6tnl0: Caught tx_queue_len zero misconfig [ 545.527099][T17190] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 545.871502][T17209] netlink: 'syz.3.2901': attribute type 8 has an invalid length. [ 545.894062][T17209] sch_fq: defrate 0 ignored. [ 545.919673][T17209] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 546.057090][T17209] bond7 (unregistering): Released all slaves [ 546.138883][T16878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.276327][T16878] veth0_vlan: entered promiscuous mode [ 546.294792][T16878] veth1_vlan: entered promiscuous mode [ 546.346506][T17236] netlink: 'syz.3.2906': attribute type 1 has an invalid length. [ 546.377610][T16878] veth0_macvtap: entered promiscuous mode [ 546.400310][T16878] veth1_macvtap: entered promiscuous mode [ 546.455247][T16878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.491565][T16878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.510701][T17233] smbdirect: ib_dev[syz2] removed [ 546.533430][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.553136][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.574545][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.604812][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.889704][ T9317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.931503][ T9317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.015288][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.035179][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.608374][T17275] lo speed is unknown, defaulting to 1000 [ 547.855573][T17280] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 547.919776][T17284] bridge_slave_0: left allmulticast mode [ 547.943452][T17284] bridge_slave_0: left promiscuous mode [ 547.971105][T17284] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.020471][T17284] bridge_slave_1: left allmulticast mode [ 548.039587][T17284] bridge_slave_1: left promiscuous mode [ 548.060063][T17284] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.164874][T17284] bond0: (slave bond_slave_0): Releasing backup interface [ 548.215817][T17284] bond0: (slave bond_slave_1): Releasing backup interface [ 548.271538][T17284] team0: Port device team_slave_0 removed [ 548.307456][T17284] team0: Port device team_slave_1 removed [ 548.324243][T17284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.352567][T17284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.373331][T17284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.392665][T17284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.416899][T17284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 548.509643][T17299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.575544][T17299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.545739][T17341] netlink: 'syz.4.2933': attribute type 1 has an invalid length. [ 549.599766][T17341] netlink: 'syz.4.2933': attribute type 6 has an invalid length. [ 549.626766][T17341] netlink: 'syz.4.2933': attribute type 3 has an invalid length. [ 551.989294][T17374] ip6tnl3: entered promiscuous mode [ 552.049460][T17379] __nla_validate_parse: 2 callbacks suppressed [ 552.049481][T17379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 552.112694][T17379] netlink: 'syz.3.2943': attribute type 7 has an invalid length. [ 552.147249][T17379] netlink: 'syz.3.2943': attribute type 8 has an invalid length. [ 552.165662][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2943'. [ 552.190949][T17383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2945'. [ 552.192767][T17364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2939'. [ 552.207882][T17379] gretap0: entered promiscuous mode [ 552.227364][T17379] gretap0: left promiscuous mode [ 552.474925][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 552.596948][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.617893][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.646562][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.686262][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.741577][T17403] openvswitch: netlink: Flow actions attr not present in new flow. [ 552.957729][T17413] netlink: 'syz.1.2952': attribute type 1 has an invalid length. [ 552.987922][T17413] netlink: 'syz.1.2952': attribute type 6 has an invalid length. [ 553.025599][T17413] netlink: 'syz.1.2952': attribute type 3 has an invalid length. [ 553.129731][T17414] lo speed is unknown, defaulting to 1000 [ 553.505161][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 553.672519][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'. [ 553.758153][ T9316] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.781257][ T9316] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.816063][ T9316] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.885418][ T9316] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.995427][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2961'. [ 554.057540][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.075392][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.084892][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.098971][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.111660][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.184966][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'. [ 554.688049][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'. [ 554.925716][T17451] syzkaller0: entered promiscuous mode [ 554.939702][T17451] syzkaller0: entered allmulticast mode [ 555.429421][T17484] netlink: 'syz.4.2968': attribute type 3 has an invalid length. [ 556.182728][ T5642] Bluetooth: hci1: command tx timeout [ 557.073013][ T1125] wlan1: Trigger new scan to find an IBSS to join [ 558.252068][ T5642] Bluetooth: hci1: command tx timeout [ 558.954329][T17439] lo speed is unknown, defaulting to 1000 [ 559.081967][T17502] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 559.123290][T17502] netlink: 'syz.0.2972': attribute type 6 has an invalid length. [ 559.160275][T17502] netlink: 'syz.0.2972': attribute type 3 has an invalid length. [ 559.232080][T17507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2974'. [ 559.282432][T17510] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2974'. [ 559.570153][T17524] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 560.333811][ T5642] Bluetooth: hci1: command tx timeout [ 560.385033][ T35] pimreg: left allmulticast mode [ 561.061431][ T35] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 561.179143][ T35] bond5 (unregistering): (slave bond0): Releasing backup interface [ 561.190459][ T35] bond0 (unregistering): Released all slaves [ 561.204007][ T35] team0: Port device bond1 removed [ 561.210458][ T35] bond1 (unregistering): Released all slaves [ 561.230798][ T35] bond2 (unregistering): Released all slaves [ 561.256687][ T35] bond3 (unregistering): Released all slaves [ 561.278070][ T35] bond4 (unregistering): (slave veth5): Releasing active interface [ 561.296637][ T35] bond4 (unregistering): (slave veth7): Releasing active interface [ 561.306569][ T35] bond4 (unregistering): Released all slaves [ 561.322502][ T35] team0: Port device bond5 removed [ 561.328887][ T35] bond5 (unregistering): Released all slaves [ 561.348392][ T35] bond6 (unregistering): (slave veth9): Releasing active interface [ 561.357933][ T35] bond6 (unregistering): Released all slaves [ 561.466999][T17439] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.475092][T17439] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.483201][T17439] bridge_slave_0: entered allmulticast mode [ 561.491602][T17439] bridge_slave_0: entered promiscuous mode [ 561.518378][T17439] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.526401][T17439] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.534239][T17439] bridge_slave_1: entered allmulticast mode [ 561.542916][T17439] bridge_slave_1: entered promiscuous mode [ 561.574562][ T35] 5nč: left promiscuous mode [ 561.625933][T17439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.639981][T17439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.685405][ T35] : left promiscuous mode [ 561.715000][T17439] team0: Port device team_slave_0 added [ 561.724785][T17439] team0: Port device team_slave_1 added [ 561.805316][T17439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.812849][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.840387][T17439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.853127][ T35] tipc: Left network mode [ 561.871394][T17439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.879647][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.908204][T17439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.987162][T17439] hsr_slave_0: entered promiscuous mode [ 561.994895][T17439] hsr_slave_1: entered promiscuous mode [ 562.001597][T17439] debugfs: 'hsr0' already exists in 'hsr' [ 562.008221][T17439] Cannot create hsr debugfs directory [ 562.017080][ T9310] wlan1: Trigger new scan to find an IBSS to join [ 562.421355][ T5642] Bluetooth: hci1: command tx timeout [ 562.830974][T17532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.968124][ T62] wlan1: Creating new IBSS network, BSSID 5e:9e:b0:6e:d1:69 [ 563.112275][ T35] hsr_slave_0: left promiscuous mode [ 563.120033][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 563.137374][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 563.147450][ T35] hsr_slave_1: left promiscuous mode [ 563.158980][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 563.173048][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 563.175365][T17583] netlink: 'syz.1.2985': attribute type 1 has an invalid length. [ 563.209234][T17583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.468553][T17595] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2988'. [ 563.496305][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 565.801339][T17439] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 565.893893][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.926406][T17439] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 565.983130][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.064635][T17439] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 566.103504][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.115775][T17439] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 566.137530][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.150734][T17607] pim6reg1: entered allmulticast mode [ 566.186850][T17607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2993'. [ 566.703517][ T35] IPVS: stop unused estimator thread 0... [ 566.949316][T17439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.041468][T17439] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.097493][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.105111][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.187317][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.195726][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.207079][T17649] xt_TCPMSS: Only works on TCP SYN packets [ 567.596483][T17654] veth0_macvtap: left promiscuous mode [ 567.646667][T17654] veth0_macvtap: entered promiscuous mode [ 567.693612][T17654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.729349][T17654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.755249][T17654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 567.775830][T17654] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 567.786897][T17654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 567.833324][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 567.854422][T17654] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 567.894935][ T35] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.907099][ T62] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.919400][T17667] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3007'. [ 567.930759][T17667] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 567.947138][T17679] netlink: 'syz.4.3008': attribute type 1 has an invalid length. [ 567.975188][T17679] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3008'. [ 567.999219][ T62] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.025818][ T9659] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 568.039345][T17669] lo speed is unknown, defaulting to 1000 [ 568.040425][ T62] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.077012][ T29] audit: type=1804 audit(1777905640.106:11): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3008" name="/newroot/583/memory.events" dev="tmpfs" ino=2999 res=1 errno=0 [ 568.150140][ T29] audit: type=1800 audit(1777905640.106:12): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3008" name="memory.events" dev="tmpfs" ino=2999 res=0 errno=0 [ 568.896651][T17439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.023212][T17708] lo speed is unknown, defaulting to 1000 [ 569.440024][T17439] veth0_vlan: entered promiscuous mode [ 569.502406][T17439] veth1_vlan: entered promiscuous mode [ 569.644461][T17439] veth0_macvtap: entered promiscuous mode [ 569.688942][T17721] lo speed is unknown, defaulting to 1000 [ 569.711355][T17439] veth1_macvtap: entered promiscuous mode [ 569.865181][T17439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.897694][T17439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.917358][ T9316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.929032][ T9316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.941481][ T9316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.953048][ T9316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.013575][ T62] wlan1: Trigger new scan to find an IBSS to join [ 570.126222][ T9317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.134934][ T9317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.640988][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 570.746120][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.754823][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.998112][T17738] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3020'. [ 571.040355][T17738] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 571.448488][T17748] netlink: 'syz.0.3021': attribute type 11 has an invalid length. [ 571.457814][T17748] netlink: 146328 bytes leftover after parsing attributes in process `syz.0.3021'. [ 571.679422][T17770] syzkaller1: entered promiscuous mode [ 571.701502][T17770] syzkaller1: entered allmulticast mode [ 571.725501][T17770] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3024'. [ 571.745335][T17770] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3024'. [ 571.794975][T17770] netlink: 'syz.2.3024': attribute type 6 has an invalid length. [ 571.824793][T17770] netlink: 'syz.2.3024': attribute type 6 has an invalid length. [ 572.272465][T16880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.293492][T16880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.307704][T16880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.326725][T16880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.338361][T16880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.545858][T17806] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 572.578867][T17806] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 572.926315][T17818] netlink: 'syz.1.3031': attribute type 22 has an invalid length. [ 572.942088][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 572.974855][ T9316] wlan1: Trigger new scan to find an IBSS to join [ 572.982982][T17818] netlink: 'syz.1.3031': attribute type 22 has an invalid length. [ 573.001964][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 573.066234][T17822] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3032'. [ 573.120087][T17822] bond0 (unregistering): Released all slaves [ 573.178471][T17828] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.187628][T17828] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.194450][T17828] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.201129][T17828] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.208165][T17828] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.214968][T17828] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.219800][T17792] lo speed is unknown, defaulting to 1000 [ 573.223210][T17828] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.234479][T17828] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.277027][T17829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.019795][T17848] bond0: option xmit_hash_policy: invalid value (10) [ 574.035452][T17848] bond0 (unregistering): Released all slaves [ 574.100859][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3039'. [ 574.149934][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3039'. [ 574.423213][T16880] Bluetooth: hci4: command tx timeout [ 574.580857][T17792] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.602617][T17792] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.612332][T17792] bridge_slave_0: entered allmulticast mode [ 574.637381][T17792] bridge_slave_0: entered promiscuous mode [ 574.665718][T17792] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.679760][T17792] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.689772][T17792] bridge_slave_1: entered allmulticast mode [ 574.703416][T17792] bridge_slave_1: entered promiscuous mode [ 574.780368][T17792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.795561][T17792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.805352][T17891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 574.864999][T17544] udevd[17544]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 574.910541][T17544] udevd[17544]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 575.107434][T17792] team0: Port device team_slave_0 added [ 575.221094][T17792] team0: Port device team_slave_1 added [ 575.289087][T17792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.296620][T17792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.325704][T17792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.341508][T17792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.350290][T17792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.402937][T17792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.476692][T17904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3054'. [ 575.550674][T17792] hsr_slave_0: entered promiscuous mode [ 575.587549][T17792] hsr_slave_1: entered promiscuous mode [ 575.634893][T17792] debugfs: 'hsr0' already exists in 'hsr' [ 575.660251][T17792] Cannot create hsr debugfs directory [ 575.918454][T17923] syz_tun: entered allmulticast mode [ 576.012790][ T9317] wlan1: Trigger new scan to find an IBSS to join [ 576.208021][T17940] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 576.225090][T17940] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 576.365862][T17792] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.492658][T16880] Bluetooth: hci4: command tx timeout [ 576.627125][T17792] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.765427][T17965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3070'. [ 576.780988][T17961] vxcan1: entered promiscuous mode [ 576.801476][T17956] lo speed is unknown, defaulting to 1000 [ 576.855117][T17792] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.857535][T17970] netlink: 'syz.1.3069': attribute type 3 has an invalid length. [ 576.898900][T17970] netlink: 'syz.1.3069': attribute type 1 has an invalid length. [ 576.925342][T17970] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3069'. [ 576.930781][ T62] wlan1: Creating new IBSS network, BSSID 7a:2c:0d:69:c3:01 [ 576.935262][T17970] NCSI netlink: No device for ifindex 36 [ 577.010440][T17974] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3071'. [ 577.075854][T17792] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.076317][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 577.124030][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 577.492997][T17980] lo speed is unknown, defaulting to 1000 [ 577.709870][T17792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 577.724570][T17792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.733475][T17792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 577.745772][T17792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.754598][T17792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 577.767445][T17792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.779371][T17792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 577.795223][T17792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.346910][T17792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.572698][T16880] Bluetooth: hci4: command tx timeout [ 578.596272][T17792] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.619449][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.627093][ T9314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.650493][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.658339][ T9314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.036219][T18013] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3081'. [ 579.114901][T18015] dvmrp0: entered allmulticast mode [ 579.177486][T18015] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3082'. [ 580.055460][T17792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.125015][T18053] syzkaller0: entered promiscuous mode [ 580.138487][T18053] syzkaller0: entered allmulticast mode [ 580.270471][T18058] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3088'. [ 580.301972][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 580.316889][T17792] veth0_vlan: entered promiscuous mode [ 580.324093][T18058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'. [ 580.434867][T17792] veth1_vlan: entered promiscuous mode [ 580.646027][T17792] veth0_macvtap: entered promiscuous mode [ 580.664473][T16880] Bluetooth: hci4: command tx timeout [ 580.705170][T17792] veth1_macvtap: entered promiscuous mode [ 580.837343][T17792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.874812][T17792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.940242][ T9310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.968747][ T9310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.017530][ T9310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.034401][ T9310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.104396][T18080] lo speed is unknown, defaulting to 1000 [ 581.351915][T18087] lo speed is unknown, defaulting to 1000 [ 581.427364][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.496133][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.770353][T17791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.791250][T17791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.964059][T18109] __nla_validate_parse: 4 callbacks suppressed [ 581.964081][T18109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3098'. [ 582.008811][T18109] ip6gre3: entered promiscuous mode [ 582.026539][T18109] ip6gre3: entered allmulticast mode [ 582.143415][T18117] netlink: 'syz.1.3098': attribute type 6 has an invalid length. [ 582.151960][T18117] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3098'. [ 582.391614][T18123] net_ratelimit: 16 callbacks suppressed [ 582.391634][T18123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 582.525030][T18120] syzkaller0: entered promiscuous mode [ 582.556654][T18120] syzkaller0: entered allmulticast mode [ 582.568437][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.591487][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.610423][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.623098][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.638851][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.791247][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'. [ 583.736251][T18165] lo speed is unknown, defaulting to 1000 [ 583.765442][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 583.847211][T18171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3112'. [ 583.863314][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 583.953454][T18175] xt_policy: neither incoming nor outgoing policy selected [ 583.993013][T18175] netlink: 'syz.1.3115': attribute type 33 has an invalid length. [ 584.013031][T18175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3115'. [ 584.070565][T18183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3115'. [ 584.090523][T18175] `: renamed from team0 (while UP) [ 584.292843][T18178] syzkaller0: entered promiscuous mode [ 584.299273][T18178] syzkaller0: entered allmulticast mode [ 584.836298][ T5642] Bluetooth: hci2: command tx timeout [ 586.901002][ T5642] Bluetooth: hci2: command tx timeout [ 587.885648][T18131] lo speed is unknown, defaulting to 1000 [ 588.029769][T18215] batadv0: entered promiscuous mode [ 588.035912][T18215] macvlan0: entered allmulticast mode [ 588.041513][T18215] batadv0: entered allmulticast mode [ 588.049481][T18215] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 588.058842][T18215] batadv0: left allmulticast mode [ 588.065205][T18215] batadv0: left promiscuous mode [ 588.158379][T18217] netlink: 'syz.3.3123': attribute type 21 has an invalid length. [ 588.686227][T18236] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 588.925656][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 588.972148][ T5642] Bluetooth: hci2: command tx timeout [ 589.386302][T18263] netlink: 'syz.0.3136': attribute type 1 has an invalid length. [ 589.396446][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'. [ 589.456145][T18258] lo speed is unknown, defaulting to 1000 [ 589.535137][T18131] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.549540][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.565813][T18131] bridge_slave_0: entered allmulticast mode [ 589.575844][T18131] bridge_slave_0: entered promiscuous mode [ 589.617687][T18131] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.631543][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.639838][T18131] bridge_slave_1: entered allmulticast mode [ 589.658879][T18131] bridge_slave_1: entered promiscuous mode [ 589.771092][T18276] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3140'. [ 589.776990][T18275] dvmrp0: left allmulticast mode [ 589.791476][T18276] netlink: 'syz.0.3140': attribute type 9 has an invalid length. [ 589.806978][T18276] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3140'. [ 589.822591][T18276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3140'. [ 589.844420][T18277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3141'. [ 589.859795][T18131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.876650][T18131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.911581][T18281] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3142'. [ 590.038709][T18131] team0: Port device team_slave_0 added [ 590.074726][T18131] team0: Port device team_slave_1 added [ 590.209606][T18280] lo speed is unknown, defaulting to 1000 [ 591.052197][ T5642] Bluetooth: hci2: command tx timeout [ 592.969090][T18131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.986646][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.987579][T17788] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 593.015043][T18131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.048097][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3142'. [ 593.070455][T18131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.087944][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.127583][T18131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.363512][T18307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3148'. [ 593.385403][T18307] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3148'. [ 593.390423][T18131] hsr_slave_0: entered promiscuous mode [ 593.415971][T18307] netlink: 'syz.0.3148': attribute type 5 has an invalid length. [ 593.434531][T18131] hsr_slave_1: entered promiscuous mode [ 593.443410][T18307] netlink: 'syz.0.3148': attribute type 6 has an invalid length. [ 593.458055][T18131] debugfs: 'hsr0' already exists in 'hsr' [ 593.483767][T18131] Cannot create hsr debugfs directory [ 593.731117][T18312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.913643][T18312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.149967][T18312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.324510][T18312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.384900][T18326] __nla_validate_parse: 1 callbacks suppressed [ 594.384922][T18326] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3152'. [ 594.677659][T18131] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.845469][T18339] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 594.860363][T18339] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 594.930627][T18131] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.960967][T18341] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3154'. [ 595.005507][T17788] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.081621][ T62] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.118436][T18131] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.209148][T17788] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.247044][ T62] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.260561][T18131] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.500962][T18358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3158'. [ 595.538096][T18356] tipc: Started in network mode [ 595.545688][T18356] tipc: Node identity 8e0d1e7ea094, cluster identity 4711 [ 595.554940][T18356] tipc: Enabled bearer , priority 0 [ 595.802115][T18374] netlink: 'syz.1.3161': attribute type 58 has an invalid length. [ 596.476764][T18368] syzkaller0: entered promiscuous mode [ 596.490954][T18368] syzkaller0: entered allmulticast mode [ 596.588825][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.602519][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.632124][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.655636][ T5819] tipc: Node number set to 781786750 [ 596.667133][T18355] tipc: Resetting bearer [ 596.768057][T18355] tipc: Disabling bearer [ 596.791502][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.820834][T18131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.850660][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.871719][T18131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 596.950915][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.990808][T18131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 597.016711][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.027946][T18390] lo speed is unknown, defaulting to 1000 [ 597.028762][T18131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 597.069014][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.430352][T18131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.456055][T18410] lo speed is unknown, defaulting to 1000 [ 597.495149][T18131] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.621638][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.629084][ T9314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.654408][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.661985][ T9314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.744858][T18131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.826872][T18452] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3179'. [ 599.444582][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3185'. [ 599.589477][T18482] lo speed is unknown, defaulting to 1000 [ 599.606564][T18131] veth0_vlan: entered promiscuous mode [ 599.629586][T18131] veth1_vlan: entered promiscuous mode [ 599.734023][T18131] veth0_macvtap: entered promiscuous mode [ 599.756814][T18131] veth1_macvtap: entered promiscuous mode [ 599.809714][T18131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.846215][T18131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.879276][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.897588][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.914630][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.926766][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.122310][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3189'. [ 600.160807][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.171587][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.194506][T18501] netlink: 'syz.3.3189': attribute type 6 has an invalid length. [ 600.214173][T18501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3189'. [ 600.606732][T17788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.637018][T17788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.694144][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'. [ 600.776820][T18526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3194'. [ 601.125842][T18535] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 601.254721][T18538] x_tables: duplicate underflow at hook 1 [ 601.418563][T18541] syzkaller0: entered promiscuous mode [ 601.425451][T18541] syzkaller0: entered allmulticast mode [ 601.611287][T18547] sctp: [Deprecated]: syz.3.3202 (pid 18547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.611287][T18547] Use struct sctp_sack_info instead [ 601.678078][T18548] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3201'. [ 601.707762][T18548] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3201'. [ 601.764427][T16880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.780445][T16880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.795144][T16880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.807066][T16880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.818422][T16880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 602.320011][ T5627] syz_tun (unregistering): left allmulticast mode [ 602.422805][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.430166][T18585] netlink: 'syz.4.3211': attribute type 3 has an invalid length. [ 602.465990][T18580] x_tables: duplicate underflow at hook 1 [ 602.696406][T17788] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.736800][T17788] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.770048][T17788] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 602.927988][T18604] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 602.985632][T18602] sctp: [Deprecated]: syz.0.3215 (pid 18602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.985632][T18602] Use struct sctp_sack_info instead [ 603.230570][T17788] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.245679][T17788] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.273102][T17788] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 603.454063][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.503635][T17788] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.533762][T17788] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.545009][T17788] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 603.606437][T18553] lo speed is unknown, defaulting to 1000 [ 603.635958][T18633] x_tables: duplicate underflow at hook 1 [ 603.637598][T17788] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.702256][ T9683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.707897][T17788] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.762205][T17788] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 603.934609][T16880] Bluetooth: hci3: command tx timeout [ 604.089412][T18651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3228'. [ 604.100427][T18642] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.108439][T18642] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.315529][T18642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.329096][T18642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.464784][T18651] ip6gre1: entered promiscuous mode [ 604.475312][T18651] ip6gre1: entered allmulticast mode [ 604.493893][ T9652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.497933][ T62] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.534448][ T62] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.558835][ T62] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.610034][ T62] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.711011][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.762687][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.789111][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.171039][T17788] dvmrp0: left allmulticast mode [ 605.176574][T17788] pimreg: left allmulticast mode [ 605.177113][T18689] netlink: 'syz.2.3238': attribute type 10 has an invalid length. [ 605.524821][T17788] bond8 (unregistering): (slave gretap1): Releasing active interface [ 605.533795][ T9672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.573035][T17788] bond7 (unregistering): (slave geneve3): Releasing active interface [ 605.713482][T17788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.724755][T17788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.738318][T17788] bond0 (unregistering): Released all slaves [ 605.749608][T17788] bond1 (unregistering): Released all slaves [ 605.766453][T17788] bond2 (unregistering): Released all slaves [ 605.791382][T17788] bond3 (unregistering): (slave veth3): Releasing active interface [ 605.813438][T17788] bond3 (unregistering): Released all slaves [ 605.845820][T17788] bond4 (unregistering): Released all slaves [ 605.865226][T17788] bond5 (unregistering): (slave veth7): Releasing backup interface [ 605.874091][T17788] veth7: left promiscuous mode [ 605.881371][T17788] bond5 (unregistering): Released all slaves [ 605.900672][T17788] bond6 (unregistering): Released all slaves [ 605.919466][T17788] bond7 (unregistering): Released all slaves [ 605.935534][T17788] bond8 (unregistering): Released all slaves [ 605.978213][T18689] ipvlan0: entered allmulticast mode [ 605.992074][T18689] veth0_vlan: entered allmulticast mode [ 606.013674][T16880] Bluetooth: hci3: command tx timeout [ 606.044116][T18689] team0: Device ipvlan0 failed to register rx_handler [ 606.259715][T17788] hmac(sha224: left promiscuous mode [ 606.576150][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.589478][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 606.747090][ T9684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.769476][T18718] xt_nfacct: accounting object `syz0' does not exist [ 606.783436][T17788] : left promiscuous mode [ 606.942715][T17788] tipc: Left network mode [ 606.991108][T17788] IPVS: stopping backup sync thread 15291 ... [ 607.176438][T18745] ip_vti0: entered promiscuous mode [ 607.188698][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 607.288759][T18753] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3250'. [ 607.615171][ T9652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.737784][T18774] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3255'. [ 607.856630][ T9652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.093937][T16880] Bluetooth: hci3: command tx timeout [ 608.532812][T18553] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.544264][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.555390][T18553] bridge_slave_0: entered allmulticast mode [ 608.567751][T18553] bridge_slave_0: entered promiscuous mode [ 608.578069][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 608.634767][T18553] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.656896][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.671396][T18553] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.711176][T18553] bridge_slave_1: entered allmulticast mode [ 608.738639][T18553] bridge_slave_1: entered promiscuous mode [ 608.981069][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 608.994293][ T5842] IPVS: starting estimator thread 0... [ 609.002696][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 609.008675][T18811] netlink: 'syz.2.3262': attribute type 7 has an invalid length. [ 609.028424][T18810] netlink: 'syz.3.3261': attribute type 18 has an invalid length. [ 609.064488][T18814] IPVS: sh: FWM 3 0x00000003 - no destination available [ 609.079440][T18814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.089924][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 609.097708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.106519][T18812] IPVS: using max 36 ests per chain, 86400 per kthread [ 609.133886][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.140148][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 609.247350][T18553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.275933][T18553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.699979][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.772320][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.800540][T18553] team0: Port device team_slave_0 added [ 609.827003][T18553] team0: Port device team_slave_1 added [ 610.065528][T18553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.089015][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.172305][T16880] Bluetooth: hci3: command tx timeout [ 610.182194][T18553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.233013][T18553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.264341][T18859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3274'. [ 610.276644][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.335818][T18553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.546727][T18873] xt_hashlimit: size too large, truncated to 1048576 [ 611.129784][T18883] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 611.348458][T18553] hsr_slave_0: entered promiscuous mode [ 611.367248][T18553] hsr_slave_1: entered promiscuous mode [ 611.384934][T18553] debugfs: 'hsr0' already exists in 'hsr' [ 611.401747][T18553] Cannot create hsr debugfs directory [ 611.424349][T17788] batadv0: left promiscuous mode [ 611.436130][T17788] veth0_to_batadv: left promiscuous mode [ 611.460913][T17788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.471409][T17788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.485108][T17788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.491646][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 611.493061][T17788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.526686][T17788] hsr0: left allmulticast mode [ 611.532636][T17788] veth1_macvtap: left promiscuous mode [ 611.540155][T17788] veth0_macvtap: left promiscuous mode [ 611.900947][T17788] ` (unregistering): Port device team_slave_1 removed [ 612.067798][ T12] smc: removing ib device sqz0 [ 612.082967][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 612.102578][T18859] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 612.108804][T18859] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 612.121471][T18888] geneve2: entered promiscuous mode [ 612.166471][ T9659] lo speed is unknown, defaulting to 1000 [ 612.172646][ T9659] sqz0: Port: 1 Link DOWN [ 612.191050][ T12] smbdirect: ib_dev[sqz0] removed [ 612.335151][T18859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.357769][T18859] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 612.387922][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 612.586828][T18901] warn_alloc: 1 callbacks suppressed [ 612.586851][T18901] syz.2.3281: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 612.661980][T18901] CPU: 0 UID: 0 PID: 18901 Comm: syz.2.3281 Not tainted syzkaller #0 PREEMPT(full) [ 612.662013][T18901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.662027][T18901] Call Trace: [ 612.662036][T18901] [ 612.662045][T18901] dump_stack_lvl+0xe8/0x150 [ 612.662077][T18901] warn_alloc+0x249/0x340 [ 612.662108][T18901] ? stack_trace_save+0xa9/0x100 [ 612.662148][T18901] ? __pfx_warn_alloc+0x10/0x10 [ 612.662184][T18901] ? kasan_save_track+0x4f/0x80 [ 612.662220][T18901] ? kasan_save_track+0x3e/0x80 [ 612.662246][T18901] ? __kasan_kmalloc+0x93/0xb0 [ 612.662273][T18901] ? __kmalloc_cache_noprof+0x31c/0x660 [ 612.662300][T18901] ? xskq_create+0x56/0x170 [ 612.662323][T18901] ? xsk_setsockopt+0x54c/0x990 [ 612.662352][T18901] ? do_sock_setsockopt+0x17c/0x1b0 [ 612.662377][T18901] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 612.662402][T18901] ? do_syscall_64+0x15f/0xf80 [ 612.662431][T18901] __vmalloc_node_range_noprof+0x132/0x1750 [ 612.662639][T18901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 612.662676][T18901] ? __kasan_kmalloc+0x93/0xb0 [ 612.662712][T18901] vmalloc_user_noprof+0xad/0xe0 [ 612.662739][T18901] ? xskq_create+0xbf/0x170 [ 612.662763][T18901] xskq_create+0xbf/0x170 [ 612.662789][T18901] xsk_init_queue+0x8a/0xe0 [ 612.662813][T18901] xsk_setsockopt+0x54c/0x990 [ 612.662849][T18901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 612.662882][T18901] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.662912][T18901] ? aa_sock_opt_perm+0xff/0x1a0 [ 612.662943][T18901] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 612.662971][T18901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 612.663006][T18901] do_sock_setsockopt+0x17c/0x1b0 [ 612.663039][T18901] __x64_sys_setsockopt+0x13d/0x1b0 [ 612.663069][T18901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.663093][T18901] do_syscall_64+0x15f/0xf80 [ 612.663123][T18901] ? trace_irq_disable+0x3b/0x140 [ 612.663155][T18901] ? clear_bhb_loop+0x40/0x90 [ 612.663182][T18901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.663203][T18901] RIP: 0033:0x7fed1e39cdd9 [ 612.663225][T18901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.663245][T18901] RSP: 002b:00007fed1f245028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.663268][T18901] RAX: ffffffffffffffda RBX: 00007fed1e616270 RCX: 00007fed1e39cdd9 [ 612.663326][T18901] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 612.663340][T18901] RBP: 00007fed1e432d69 R08: 0000000000000004 R09: 0000000000000000 [ 612.663354][T18901] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.663368][T18901] R13: 00007fed1e616308 R14: 00007fed1e616270 R15: 00007ffc0b7b1a08 [ 612.663404][T18901] [ 612.663531][T18901] Mem-Info: [ 612.963680][ T9659] net_ratelimit: 9 callbacks suppressed [ 612.963718][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.965013][T18901] active_anon:7383 inactive_anon:0 isolated_anon:0 [ 612.965013][T18901] active_file:2956 inactive_file:40521 isolated_file:0 [ 612.965013][T18901] unevictable:769 dirty:227 writeback:0 [ 612.965013][T18901] slab_reclaimable:12218 slab_unreclaimable:112348 [ 612.965013][T18901] mapped:32602 shmem:1429 pagetables:1603 [ 612.965013][T18901] sec_pagetables:0 bounce:0 [ 612.965013][T18901] kernel_misc_reclaimable:0 [ 612.965013][T18901] free:1287259 free_pcp:26955 free_cma:0 [ 612.981724][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 613.101945][T18901] Node 0 active_anon:29528kB inactive_anon:0kB active_file:11824kB inactive_file:161876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130396kB dirty:608kB writeback:200kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14180kB pagetables:5836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 613.152369][T18901] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 613.190523][T18901] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 613.223433][T18901] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 613.230228][T18901] Node 0 DMA32 free:1223820kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29528kB inactive_anon:0kB active_file:11824kB inactive_file:161876kB unevictable:1536kB writepending:708kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:69404kB local_pcp:48224kB free_cma:0kB [ 613.266974][T18901] lowmem_reserve[]: 0 0 0 0 0 [ 613.272580][T18901] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 613.343448][T18901] lowmem_reserve[]: 0 0 0 0 0 [ 613.373478][T18901] Node 1 Normal free:3918280kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32264kB local_pcp:32kB free_cma:0kB [ 613.469096][T18901] lowmem_reserve[]: 0 0 0 0 0 [ 613.485997][T18859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 613.508169][T18901] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 613.522032][T18859] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 613.575037][T18901] Node 0 DMA32: 6922*4kB (UME) 5498*8kB (UME) 2900*16kB (UME) 664*32kB (UME) 879*64kB (UME) 620*128kB (UME) 699*256kB (UM) 398*512kB (UME) 269*1024kB (UM) 136*2048kB (UME) 3*4096kB (UM) = 1223928kB [ 613.653604][T18901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 613.711144][T18901] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 10*16kB (UM) 10*32kB (UM) 11*64kB (UM) 6*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 954*4096kB (M) = 3918280kB [ 613.738229][T18901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.782181][T18901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 613.804143][T18901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.862358][T18901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 613.877038][T18901] 44901 total pagecache pages [ 613.887223][T18901] 0 pages in swap cache [ 613.914603][T18901] Free swap = 124996kB [ 613.924987][T18901] Total swap = 124996kB [ 613.932337][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.935155][T18901] 2097051 pages RAM [ 613.969390][T18901] 0 pages HighMem/MovableOnly [ 613.988833][T18901] 427099 pages reserved [ 614.008967][T18901] 0 pages cma reserved [ 614.015741][ T9667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.311694][T18859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 614.336538][T18859] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 614.443276][T18859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.455509][T18859] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 614.612286][T18859] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 614.625477][T18859] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 614.634139][T18859] CPU: 0 UID: 0 PID: 18859 Comm: syz.4.3274 Not tainted syzkaller #0 PREEMPT(full) [ 614.643710][T18859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.655199][T18859] RIP: 0010:klist_remove+0x156/0x340 [ 614.661124][T18859] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 6b 92 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 6b 92 f6 49 8b 44 24 58 48 89 44 24 08 [ 614.681794][T18859] RSP: 0018:ffffc90004a47820 EFLAGS: 00010202 [ 614.688631][T18859] RAX: 000000000000000b RBX: ffff88804ac1dc40 RCX: 0000000000000000 [ 614.697443][T18859] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 614.705622][T18859] RBP: ffffc90004a47920 R08: ffffffff901713c3 R09: 1ffffffff202e278 [ 614.714131][T18859] R10: dffffc0000000000 R11: fffffbfff202e279 R12: 0000000000000000 [ 614.722370][T18859] R13: 1ffff1101219000c R14: ffff888090c80060 R15: dffffc0000000000 [ 614.730449][T18859] FS: 00007f105cf426c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 614.739585][T18859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.746377][T18859] CR2: 00007f00b03ec4b8 CR3: 0000000035104000 CR4: 00000000003526f0 [ 614.754477][T18859] Call Trace: [ 614.757795][T18859] [ 614.760905][T18859] ? __pfx_klist_remove+0x10/0x10 [ 614.766119][T18859] ? kobject_move+0x5de/0x720 [ 614.770813][T18859] ? __pfx_kobject_move+0x10/0x10 [ 614.775893][T18859] ? get_device_parent+0x366/0x3a0 [ 614.781134][T18859] device_move+0x193/0x730 [ 614.785573][T18859] hci_conn_del_sysfs+0xb8/0x1a0 [ 614.790710][T18859] hci_conn_del+0xc36/0x1230 [ 614.795396][T18859] hci_conn_hash_flush+0x191/0x260 [ 614.800610][T18859] hci_dev_close_sync+0x821/0x10e0 [ 614.806000][T18859] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 614.811560][T18859] ? do_raw_spin_lock+0x12b/0x2f0 [ 614.816703][T18859] hci_dev_do_close+0x30/0xc0 [ 614.821574][T18859] hci_rfkill_set_block+0x1f4/0x290 [ 614.826791][T18859] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 614.832615][T18859] rfkill_set_block+0x1a4/0x4e0 [ 614.837655][T18859] rfkill_fop_write+0x461/0x5a0 [ 614.842527][T18859] ? apparmor_file_permission+0x1f4/0x300 [ 614.848730][T18859] ? __pfx_rfkill_fop_write+0x10/0x10 [ 614.854753][T18859] ? security_kernfs_init_security+0x210/0x270 [ 614.861270][T18859] ? rw_verify_area+0x255/0x4d0 [ 614.866394][T18859] ? __pfx_rfkill_fop_write+0x10/0x10 [ 614.872001][T18859] vfs_write+0x29a/0xb90 [ 614.876461][T18859] ? __pfx_vfs_write+0x10/0x10 [ 614.881329][T18859] ? __fget_files+0x2a/0x420 [ 614.885933][T18859] ? __fget_files+0x2a/0x420 [ 614.890529][T18859] ? __fget_files+0x3a0/0x420 [ 614.895849][T18859] ? __fget_files+0x2a/0x420 [ 614.900889][T18859] ksys_write+0x150/0x270 [ 614.905424][T18859] ? __pfx_ksys_write+0x10/0x10 [ 614.910400][T18859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.916608][T18859] do_syscall_64+0x15f/0xf80 [ 614.921410][T18859] ? trace_irq_disable+0x3b/0x140 [ 614.926570][T18859] ? clear_bhb_loop+0x40/0x90 [ 614.931275][T18859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.937466][T18859] RIP: 0033:0x7f105bf9cdd9 [ 614.941955][T18859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.962541][T18859] RSP: 002b:00007f105cf42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 614.971238][T18859] RAX: ffffffffffffffda RBX: 00007f105c215fa0 RCX: 00007f105bf9cdd9 [ 614.979406][T18859] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 614.987590][T18859] RBP: 00007f105c032d69 R08: 0000000000000000 R09: 0000000000000000 [ 614.995945][T18859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.004105][T18859] R13: 00007f105c216038 R14: 00007f105c215fa0 R15: 00007fff186d1378 [ 615.012097][T18859] [ 615.015129][T18859] Modules linked in: [ 615.019933][T18859] ---[ end trace 0000000000000000 ]--- [ 615.052900][T18859] RIP: 0010:klist_remove+0x156/0x340 [ 615.056069][ T9667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.058536][T18859] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 6b 92 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 6b 92 f6 49 8b 44 24 58 48 89 44 24 08 [ 615.088498][T18859] RSP: 0018:ffffc90004a47820 EFLAGS: 00010202 [ 615.095127][T18859] RAX: 000000000000000b RBX: ffff88804ac1dc40 RCX: 0000000000000000 [ 615.106419][T18859] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 615.116084][T18859] RBP: ffffc90004a47920 R08: ffffffff901713c3 R09: 1ffffffff202e278 [ 615.126197][T18859] R10: dffffc0000000000 R11: fffffbfff202e279 R12: 0000000000000000 [ 615.138663][T18859] R13: 1ffff1101219000c R14: ffff888090c80060 R15: dffffc0000000000 [ 615.152304][T18859] FS: 00007f105cf426c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 615.162104][T18859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.169168][T18859] CR2: 00007f00b0fceff8 CR3: 0000000035104000 CR4: 00000000003526f0 [ 615.178096][T18859] Kernel panic - not syncing: Fatal exception [ 615.185114][T18859] Kernel Offset: disabled [ 615.189454][T18859] Rebooting in 86400 seconds..