last executing test programs: 5m34.736384529s ago: executing program 2 (id=6095): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x20008010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0x53b, 0x0, 0x0, {}, [{0x40, 0x1, [@m_simple={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtclass={0x2c, 0x28, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x3}, {0xffff, 0xc}, {0xfffb, 0xfff1}}, [@tclass_kind_options=@c_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@delchain={0x24, 0x65, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff2, 0x7}, {0x2, 0x1}, {0xffec, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x420, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x28, [0xffff, 0x8, 0x0, 0xe, 0x5, 0x401, 0xf7fc, 0xc7, 0xac, 0x3, 0xd, 0x1, 0x39, 0x2, 0x9, 0x7fffffff, 0x55ea, 0x7, 0x401, 0xf2, 0x4, 0x3, 0x7, 0xd, 0x0, 0x1, 0x3, 0x3, 0x9, 0x2, 0x5, 0x1, 0x0, 0x4, 0x7f, 0x0, 0x400, 0x1, 0x1, 0x7fff, 0x7, 0x3, 0x1, 0x1, 0xb, 0x0, 0x8, 0x5, 0x8, 0x401, 0xd, 0x800, 0x1, 0x3, 0x101, 0x0, 0x3, 0x7, 0x0, 0x8, 0xca5, 0x6d0, 0x0, 0x2], [0x9, 0x5, 0x8, 0x9, 0x8000, 0x6, 0xc6, 0x8, 0x2, 0xe, 0x7fff, 0xb6d5, 0x23af, 0x20, 0x7, 0x58, 0x5, 0xffffffff, 0x4, 0x100, 0x7f, 0x6, 0x8, 0x3, 0xc17, 0x0, 0x2, 0x3, 0x5, 0x7ff, 0x8, 0x9, 0x85b4, 0x8, 0xffff, 0x6, 0x2, 0x1000, 0x6, 0x0, 0x3, 0x6a3, 0x2, 0x8000, 0x6, 0x5, 0xbb, 0x1, 0x2, 0x1, 0x10000, 0x2008000, 0x1, 0x6, 0x1000, 0x5, 0x7, 0x2, 0xf, 0x4, 0x4, 0x8, 0x7f, 0x80], [0x1, 0x2, 0x1, 0x7, 0x2, 0x1, 0xfffffffd, 0xfffffffe, 0x3, 0x101, 0x1, 0xfffffffa, 0x3, 0x3, 0xfffffffd, 0x800, 0x2, 0xc, 0x8, 0x0, 0x2244fb8d, 0xaba00000, 0x8, 0x9, 0x401, 0x4, 0x8, 0x0, 0x0, 0x80000001, 0x5, 0x80000000, 0x100, 0x5, 0x7ff, 0x0, 0x827, 0x3, 0xc7, 0x4, 0xa8bc00, 0x81, 0x8001, 0x674, 0x1, 0x1, 0x8001, 0x6, 0x5, 0xfff, 0x0, 0xae9f, 0x6f, 0x0, 0x80, 0x1ff, 0x9, 0x2, 0xfffffffc, 0x7fff, 0x7, 0x0, 0xf, 0x9], [0x5, 0x4, 0x802, 0xfffff800, 0x7f, 0xedb, 0x0, 0x1, 0xfffffffa, 0x40000, 0x7, 0x9, 0x14d98, 0x0, 0x4, 0x4, 0xffffff01, 0x8000, 0x2, 0x7, 0xfffffc01, 0x400, 0x1, 0x1, 0x9, 0x9, 0xed62, 0xa8, 0x6, 0x2, 0x6b2, 0x0, 0x8001, 0x6, 0x6, 0x81, 0xb6e, 0x6e506360, 0x5, 0x2, 0xed, 0x1b, 0xfffffe01, 0x401, 0x3, 0xa61, 0x7fffffff, 0x4, 0x5, 0x5, 0x80, 0x2, 0x4, 0xffff0000, 0x2, 0x1e2, 0x0, 0x30d, 0xfff, 0xfffffffb, 0x7ff, 0x9, 0x6, 0x3]}}, 0x420}}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@bridge_getvlan={0x30, 0x72, 0x4, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x14) 5m20.891405452s ago: executing program 2 (id=6101): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24008004) 5m20.667722888s ago: executing program 2 (id=6184): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000029000000360000003b00000000000000140000000000af16dee24fe60000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) 5m20.44126902s ago: executing program 2 (id=6186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@broadcast]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="180000000d00000000000117000000000000000073797a6b616c34d72716202052cb"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00', 0x200}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x200}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@broadcast]}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="180000000d00000000000117000000000000000073797a6b616c34d72716202052cb"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x200}) (async) 5m19.103565657s ago: executing program 2 (id=6195): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x9}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0x3, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001000)=""/135, 0x87}, {&(0x7f0000001180)=""/254, 0xfe}, {&(0x7f00000012c0)=""/158, 0x9e}], 0x3}, 0x40000100) (async) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001000)=""/135, 0x87}, {&(0x7f0000001180)=""/254, 0xfe}, {&(0x7f00000012c0)=""/158, 0x9e}], 0x3}, 0x40000100) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000010c0)={0x0, 0x6, 0x2, [0xba4a, 0x2]}, &(0x7f0000001100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001380)={r5, 0x63, "95643a91d0da847fdaf52c9a239f52d74f8b3625a717da582a318e4d0733208d8b2e68837312c69a34cdcb2f54d8458dc32297365efcc6620b64a330f93639f9badf206098a53f9296aec53aa5e3785b5a593abda42235fe56e5234ab6ecd1e44f507c"}, &(0x7f00000014c0)=0x6b) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000015c0)={r5, @in6={{0xa, 0x4e22, 0x3, @mcast1, 0x2}}, 0x3, 0x200}, &(0x7f0000001680)=0x90) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x80, 0x0, 0x9, 0x4, [0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1], [0xfffffbff]}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m17.946725926s ago: executing program 2 (id=6202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 5m2.63596242s ago: executing program 32 (id=6202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m38.031702308s ago: executing program 4 (id=6895): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff04000000000000ff80000037660b6aff00000000000000000000000000000000000000000a00002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x0) 2m37.977402637s ago: executing program 4 (id=6896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x0, 0x0, @wg=@response={0x2, 0x1, 0x4, "d029115d719a6f09c8f67bbfe5521d8409e8dc3528ae716ab8d87d3a11e13426", "1d4c36aa746b286e9394fbf3d2b336a8", {"219064cf399c3d26d60d111fcc045c3c", "8b69c1bbefe53fa09b90b92a24f5b571"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m37.829102755s ago: executing program 4 (id=6898): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000680)={r4, 0x3, 0x1, 0x2}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r10, 0x541b, 0x0) close(0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f0000000200)=""/31, &(0x7f0000000280)=0x1f) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="ffff2abd7000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20001800) bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f0000000600)={0x7, &(0x7f0000000500)=[{0x0, 0x0, 0x0, @multicast}, {}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {}]}) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000640)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendfile(r7, r4, &(0x7f0000000b80)=0x794b, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x2f, 0x45, 0x40, 0x3ff, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x1000, 0x6}}) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000400)='GPL\x00', 0xffff, 0xa6, &(0x7f0000000800)=""/166, 0x41000, 0x14, '\x00', r13, 0x25, r14, 0x8, &(0x7f00000009c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[0xffffffffffffffff, r3], &(0x7f0000000a80)=[{0x5, 0x1, 0xc, 0x2}, {0x1, 0x3, 0x6, 0x8}, {0x5, 0x1, 0x2, 0x1}], 0x10, 0x96}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="0500fbff0000000071110000000000008510000002000000009500a505000000000000b47f291724474ca3d8500400e9298719f08e4500"/64], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2m36.703113757s ago: executing program 4 (id=6903): r0 = socket$inet6(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m35.671438135s ago: executing program 4 (id=6908): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1a0, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(,\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '}.#]}\\^,$][.\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@\\{#Y:#\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8375}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x44050}, 0x1) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x1, 0xc, 0xb, 0x5, 0x6, 0xfffffffffffffffc}], &(0x7f00000004c0)='GPL\x00', 0x80000001, 0x86, &(0x7f0000000500)=""/134, 0x0, 0xecd352769303e31a, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x10, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000740)=[{0x3, 0x3, 0xb, 0x3c79fbb1f3ac968d}, {0x4, 0x1, 0x7, 0x8}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)={r6, r2, 0x25, 0x8, @val=@kprobe_multi=@syms={0x0, 0x7, &(0x7f0000000a80)=[&(0x7f0000000840)='syzkaller\x00', &(0x7f0000000880)='(,\\\x00', &(0x7f00000008c0)='gretap0\x00', &(0x7f0000000900)='syzkaller\x00', &(0x7f0000000940)='+/[\\[@}@-\x00', &(0x7f0000000980)='cbs\x00', &(0x7f0000000a40)='gretap0\x00'], 0x0, 0x2}}, 0x30) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0xc080) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000300)}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x114, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0xb0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xc000}, 0x40) close(r0) 2m35.667961615s ago: executing program 4 (id=6912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000002700090025bd7000fddbdf2512000000ac0001"], 0xc0}}, 0x4000080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0)=0x11, &(0x7f0000000140)='%+9llu \x00'}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xb}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x4040880) 2m21.801428429s ago: executing program 5 (id=6971): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="020100020800000004000000000000000300050000ffe3000000000000030000000000000000000003000600000000006f82ecabe00000010000000000000000779d06ae44b1e0a0be057e36eedfb545100c1976f47124b3a09e0096894039414990a28db7c2ecac3a0b3d45a1ebfbb71388c2c44034d2319bafddf0908f7471927b605653b72e3e3dd720e466a0c05c6601645c580b9f93d8c674862b"], 0x40}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020505090e00000000000000000000000000fc000000000000000000000000000000000000000000000002000100000004d4130002040000000005000500000000000a004e2100000000ff0100000000000000000000000000010000000000000000"], 0x70}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000140)={0x0, 0xa2}) pselect6(0x40, &(0x7f0000000300)={0x5, 0x2, 0x0, 0x7f, 0x9c4, 0x4, 0x8, 0xe16}, 0xfffffffffffffffd, 0x0, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001200)={r1, &(0x7f00000000c0)='::\\)#&\x00', 0x101000, &(0x7f0000001140)={@_ha_fsid={[0x4, 0x6a]}, {0x6, 0x1, 0x3, 0x2}}, 0x80, &(0x7f0000001180)={@_ha_fsid}, &(0x7f00000011c0)=0x1}) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="24000000020a010100000000400000000000170000000040000000190800084000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 2m20.819953707s ago: executing program 5 (id=6976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2m20.106579306s ago: executing program 33 (id=6912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000002700090025bd7000fddbdf2512000000ac0001"], 0xc0}}, 0x4000080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0)=0x11, &(0x7f0000000140)='%+9llu \x00'}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xb}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x4040880) 2m19.742373552s ago: executing program 5 (id=6982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x100, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1001a}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x66, 0x11, 'macvtap0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x100, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1001a}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x66, 0x11, 'macvtap0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 2m19.13717061s ago: executing program 5 (id=6984): unshare(0x400) r0 = socket$kcm(0x2, 0x922000000001, 0x106) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4, 0x8, 0x7, 0x480, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) unshare(0x40000800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m18.479943023s ago: executing program 5 (id=6986): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x7d}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000080)=""/35, 0x48, 0x23, 0x1, 0x5}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0x35, 0x0, &(0x7f000000bac0)) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x8040) r7 = socket(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000080)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0x3, 'nq\x00', 0x1, 0x28c, 0x5c}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000140)={{0x84, @multicast2, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x80, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e23, 0x10000, 0x2000007, 0x8, 0x12d58}}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c657230000018"], 0x48}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m17.933421586s ago: executing program 5 (id=6989): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newae={0x48, 0x1e, 0x2, 0x70bd2c, 0x25dfdbfe, {{@in=@multicast1, 0x4d5, 0x2, 0x33}, @in=@loopback, 0x80000000, 0x3505}, [@iptfs_pkt_size={0x8, 0x29, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @mcast2}, 0x2a) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000380)={0x3}, 0x1) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x4, 0x2, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7, 0x0, 0x5}}) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r11}]}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e24, 0x8, 0x4e20, 0xc99f, 0x2, 0xc3621119a0963152, 0x0, 0x1c, r9, r11}, {0x4d0, 0x2, 0x5, 0x8, 0xca, 0x3, 0x3480, 0x7fff}, {0x2, 0x2af, 0x4, 0xfff}, 0xc74, 0x6e6bb7, 0x2, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x3501, 0x3, 0x3, 0xa, 0x6, 0x8001}}, 0xe8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r5, @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r3, 0x610, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008855}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m2.708104717s ago: executing program 34 (id=6989): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newae={0x48, 0x1e, 0x2, 0x70bd2c, 0x25dfdbfe, {{@in=@multicast1, 0x4d5, 0x2, 0x33}, @in=@loopback, 0x80000000, 0x3505}, [@iptfs_pkt_size={0x8, 0x29, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @mcast2}, 0x2a) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000380)={0x3}, 0x1) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x4, 0x2, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7, 0x0, 0x5}}) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r11}]}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e24, 0x8, 0x4e20, 0xc99f, 0x2, 0xc3621119a0963152, 0x0, 0x1c, r9, r11}, {0x4d0, 0x2, 0x5, 0x8, 0xca, 0x3, 0x3480, 0x7fff}, {0x2, 0x2af, 0x4, 0xfff}, 0xc74, 0x6e6bb7, 0x2, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x3501, 0x3, 0x3, 0xa, 0x6, 0x8001}}, 0xe8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r5, @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r3, 0x610, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008855}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 31.43682108s ago: executing program 7 (id=7420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000104010100000000e1000000000000070500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x27, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x663}}, 0xffff0001, 0xfffd, 0x0, 0x7fff, 0x5a1}, 0x9c) 30.915884598s ago: executing program 7 (id=7424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000b80)="c2a3c46ccbcf61df72ec56c199a57daceb546abf92bba9c40f03327a140c73142dc2bc50ec43baf4e2acbc039642d07b81d4945fe08982af4f235b769cf2aeaf8440566c9ac4e08be84a9ee8962d47c37f", 0x51}, {&(0x7f0000000c00)="3512beac7d4bade2e7d3a185980a78bfbc4e52f2ce583806910bfd23ca333e141f5756eed577d0efa938b074e666345f76e719afc370c98d4db87f86ac6d24d3a79683d5214a99ad722d2c6fe4bf312d4fc35979c3d134056f8f556d8b4bb2", 0x5f}, {&(0x7f0000000c80)="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", 0x4d9}], 0x3}}], 0x1, 0x804) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, 0xff, 0xff, 0xc, 0x8, {@mac=@random="ac160a675435", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0xff, 0x9, 0x400, 0x6, 0x5, 'virt_wifi0\x00', 'vxcan1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0xfffd, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @local, 0x8, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0xff000000, 0x6, 0xf, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x4, 0xaa9c, 0x100, 0x5c, 0xc, 0x4, 'veth1_to_hsr\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x0, 0x90}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}}, 0x1c}}, 0x20000000) 30.499300966s ago: executing program 7 (id=7428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) getsockname(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0x11e05, &(0x7f0000000600)=ANY=[], 0x0) 29.585031747s ago: executing program 7 (id=7431): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 28.802015164s ago: executing program 7 (id=7436): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000ff7f000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000000000000000000000007be7da0ee64bd66a9a04a0cf3705f29801d552d44f9cf6ea9d64b9e9fca813a9ea656caa30ad81632887995b7b8f62152d1c31d060017236130ecb84ad1ad2082d162dabf5790200000000ffffffff00"/108], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x17, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0xa217}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xee, 0x0, 0x4, 0x8e, 0x6}, @jmp={0x5, 0x0, 0x2, 0xa, 0x4, 0x20, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x28}}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x3, [@datasec={0x5, 0x9, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x244}, {0x1, 0x800, 0x9}, {0x2, 0x0, 0x1000}, {0x1, 0x1dd, 0x9}, {0x5, 0x7, 0x7}, {0x2, 0x0, 0x8}, {0x1, 0x7, 0x4}, {0x2, 0x5, 0x4}, {0x1, 0xa9fb, 0x7ff}], "ff486b"}]}, {0x0, [0x2e]}}, 0x0, 0x97}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000300"], 0x138}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 27.802741337s ago: executing program 7 (id=7445): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x58, 0x9}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x757d64f033f3bd07, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="665c47ca74a78a02b00e0a1f7194ad4ee11be279038378d990f21308cfffe9835167ae3ae38d0da6c2f8f838fb64d4c4914a11746fce35372f9b5ecbc4bee7a5c2e5d0c1d161485a4a47e6d1baee6d035244bc22af80372440a73f0502dd08b403bf5e3ab49eeef4c6d72d50aa4bdfc057cbc5f94fd0159bbe1f2241210700c34fd89ccd16911d3c436dfc95e49775c5c804a6fbe6e13607e7ed5821b975ad51ac05767796a4c932afc4294374922880b3", @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006600000008000300", @ANYRES32=r6, @ANYBLOB="140004006e696376663000000000000000000000080005000600000008001780040001000a00e8000802110000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40048a4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c000000080a050000000000f9ffffff020000030900010073797a30000000000900020073797a3000000000140000001100010000000000000000000200000a46db"], 0x54}}, 0x20000800) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) 18.126702436s ago: executing program 1 (id=7512): r0 = socket$kcm(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bca7027b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 17.445675915s ago: executing program 1 (id=7514): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, 0x0) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x78, @dev={0xfe, 0x80, '\x00', 0x27}, 0xfffffffe}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) 16.956428316s ago: executing program 1 (id=7518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0x12504000) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000000, {{0xa, 0x4e21, 0x3296000, @loopback, 0x3}}, {{0xa, 0x0, 0xbffffffa, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000080000008510000003000000180000000000000000000000fc0100f49400000000000000bf00ffff"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) 16.660116338s ago: executing program 1 (id=7521): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r0, 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="8001000010000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/312], 0x180}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffffffffffe0a, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffffffffffe0a, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x10, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write(r6, &(0x7f0000000000)="f50aa3a2813c13608884", 0xa) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', r4, 0x4000, r6}, 0x18) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) 16.184320667s ago: executing program 1 (id=7525): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f00002ad000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x6b9b000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1}, 0x4) r6 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 15.634681171s ago: executing program 1 (id=7528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x54, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x5, 0x1, 0x7, 0x20, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 12.639387304s ago: executing program 35 (id=7445): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x58, 0x9}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x757d64f033f3bd07, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="665c47ca74a78a02b00e0a1f7194ad4ee11be279038378d990f21308cfffe9835167ae3ae38d0da6c2f8f838fb64d4c4914a11746fce35372f9b5ecbc4bee7a5c2e5d0c1d161485a4a47e6d1baee6d035244bc22af80372440a73f0502dd08b403bf5e3ab49eeef4c6d72d50aa4bdfc057cbc5f94fd0159bbe1f2241210700c34fd89ccd16911d3c436dfc95e49775c5c804a6fbe6e13607e7ed5821b975ad51ac05767796a4c932afc4294374922880b3", @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006600000008000300", @ANYRES32=r6, @ANYBLOB="140004006e696376663000000000000000000000080005000600000008001780040001000a00e8000802110000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40048a4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c000000080a050000000000f9ffffff020000030900010073797a30000000000900020073797a3000000000140000001100010000000000000000000200000a46db"], 0x54}}, 0x20000800) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) 3.829062808s ago: executing program 6 (id=7591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$nci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="6105012a01060607ff350306a04a1a21f9352914e512d30f"], 0x3f) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="2adb71e3eb9695755f5d5fb12f73537fe253005832831519", 0x18}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) 3.655797438s ago: executing program 3 (id=7592): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x104) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x4e22, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0xffe51b8f699c177a, r5, r9}, {0x3, 0x3, 0x72387a40, 0x8, 0xa, 0x9, 0xff, 0x2}, {0x7, 0x4, 0x7, 0x6}, 0x5, 0x6e6bba, 0x1, 0x0, 0x7}, {{@in6=@remote, 0x4d3, 0x33}, 0x2, @in6=@local, 0x3503, 0x5, 0x1, 0x8f, 0x9, 0x1, 0x9}}, 0xe8) close(r0) 3.22732887s ago: executing program 6 (id=7593): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000054000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x20000000}, 0x0) (async) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x2, 0x4) 2.718095967s ago: executing program 0 (id=7596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.699734742s ago: executing program 3 (id=7597): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000140), &(0x7f0000000280), 0x8, 0x4e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, &(0x7f0000000080)) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffbff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2.463892121s ago: executing program 3 (id=7598): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22000004) shutdown(0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/43, 0x2b}], 0x1}, 0x40000002) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x86dd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000380)={{0x2, 0x4e23, @multicast2}, {0x6, @multicast}, 0x68, {0x2, 0x4e24, @empty}, 'bond0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000007800010402000000000000000700000064000000140001"], 0x2c}}, 0x0) 2.434167996s ago: executing program 6 (id=7599): unshare(0x20060880) socketpair(0x28, 0xa, 0x7, &(0x7f00000002c0)) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="760a00000000000061112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000000000187470000c000280080003000100"/37], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r0}, 0x18) 1.914543917s ago: executing program 0 (id=7600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.848949698s ago: executing program 3 (id=7601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0xffffffffffffffca, &(0x7f0000001c80)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x2, {}, [@IFA_LABEL={0x0, 0x3, 'team_slave_1\x00'}, @IFA_CACHEINFO={0x14}]}, 0x1c}}, 0x0) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) 1.585947991s ago: executing program 6 (id=7602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x4f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @u32=0xd}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) socketpair$unix(0x1, 0xc8af886ee00d44db, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0xc8af886ee00d44db, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000001180)={0x0, 0x5}, 0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r4, 0xcc071acbf25dbf8f, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) 1.268286754s ago: executing program 6 (id=7603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r0, 0x1000000}, 0x20) 1.048220161s ago: executing program 3 (id=7604): write(0xca, &(0x7f0000000040)="040e0c000320", 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0x7}}, 0x7f, 0x0, 0x0, 0x0, 0xd4, 0x1000}, 0x9c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x800) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 1.047730522s ago: executing program 0 (id=7605): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dbffffffffffffffff1f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000070000000051c9844dc9031379b67a885813c8c9", 0xb8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1a}}], 0x48, 0xc800}, 0x0) 775.699332ms ago: executing program 0 (id=7606): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) 699.578978ms ago: executing program 6 (id=7607): pipe(&(0x7f00000007c0)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000a80)={{r0}, 0x1, 0x1, 0x9}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x9dc, 0x2, {{0x1e, 0x4, 0x1, 0x7, 0x78, 0x68, 0x0, 0xa, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@multicast1, 0xa989}, {@multicast2, 0x1}]}, @timestamp={0x44, 0x28, 0x50, 0x0, 0x6, [0xfffffff7, 0x10000, 0x4, 0x2, 0x0, 0xea, 0xfffffff7, 0x10, 0x1]}, @timestamp_prespec={0x44, 0x1c, 0x5a, 0x3, 0xc, [{@broadcast, 0x2b}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}]}, @end]}}}}}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8, 0x0, 0x0, 0x8000}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', r8, 0x40, 0x8000, 0x0, 0x7ff, {{0x1d, 0x4, 0x3, 0x2f, 0x74, 0x67, 0x0, 0xf9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x34}, {[@generic={0x88, 0x12, "54133f3bc6a389984b1fd3b50711bf8e"}, @timestamp={0x44, 0xc, 0xde, 0x0, 0xa, [0xbd, 0x4]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xae, 0x0, 0x4, [0x8, 0xda9, 0x10000, 0x5, 0x2, 0x9, 0x9, 0x6]}, @end, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xea, [@multicast1, @multicast2, @multicast2, @remote]}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 411.26286ms ago: executing program 36 (id=7528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x54, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x5, 0x1, 0x7, 0x20, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 363.552588ms ago: executing program 3 (id=7609): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 362.316984ms ago: executing program 0 (id=7610): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@remote, @empty, @empty}, &(0x7f0000000040)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000100000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=7611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00], 'gre0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x2c, 0xf8, 0x7, 0xa}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'bridge_slave_0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e21, @local}}, 0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bind$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @local}}, 0x24) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a00"], 0x38}}, 0x40408c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r9}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x5, 0x7, 0x10, @loopback, @mcast1, 0x80, 0x7, 0x5, 0x10}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3e}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x4, 0x68, &(0x7f0000000680)=""/104, 0x40f00, 0x3e, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xd, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{0x5, 0x2, 0x4, 0x5}], 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="5018020190780000"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1462f5dd0f00010000000000000000000500000a7c00000a0000040900010073797a310000000054000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240000000021c000180090001006d617371000000000c000280080002400000001608000a4000000001140000001100010000000000000000000000000a00"/164], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) kernel console output (not intermixed with test programs): tus up, enabling it in 0 ms [ 970.212174][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.229351][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.261173][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 974.043237][T30948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6494'. [ 974.065972][T30948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6494'. [ 974.067378][T30948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6494'. [ 975.121445][T12609] net_ratelimit: 188 callbacks suppressed [ 975.121497][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.121565][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 975.121666][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 975.232917][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 975.233072][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.233138][ T12] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 975.339872][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.339907][ T6430] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 975.339940][ T6430] bond3: (slave dummy0): failed to get link speed/duplex [ 975.456004][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 975.926406][T30992] netlink: 'syz.3.6504': attribute type 75 has an invalid length. [ 976.976123][T31017] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6513'. [ 977.015961][T31017] IPVS: Unknown mcast interface: nicvf0 [ 980.143217][ T6434] net_ratelimit: 142 callbacks suppressed [ 980.143342][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.173993][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.189882][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.213807][ T49] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.239174][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.270173][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.290612][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.310271][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.328630][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.357406][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.465992][T31038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 980.977863][T31070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6523'. [ 981.167818][T31076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6524'. [ 981.300291][T31078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6525'. [ 981.555111][T31082] sctp: [Deprecated]: syz.5.6526 (pid 31082) Use of int in maxseg socket option. [ 981.555111][T31082] Use struct sctp_assoc_value instead [ 981.597407][T31082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6526'. [ 981.847080][T31073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6525'. [ 983.003534][T31102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6530'. [ 985.169497][ T6438] net_ratelimit: 196 callbacks suppressed [ 985.169524][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.200058][ T49] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.222178][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.246365][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.267064][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.282641][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.298707][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.322017][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.339324][ T49] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.370494][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 986.182419][T31078] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 986.700981][T31109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6532'. [ 986.703761][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6532'. [ 986.894613][T31114] netlink: 'syz.3.6534': attribute type 1 has an invalid length. [ 987.125117][T12605] team0: left allmulticast mode [ 987.137521][T12605] bridge0: port 1(team0) entered disabled state [ 987.235109][T12605] pim6reg: left allmulticast mode [ 987.340139][T31122] netlink: 'syz.4.6535': attribute type 1 has an invalid length. [ 987.344687][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6535'. [ 987.415471][T31126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6535'. [ 987.795275][T12605] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 987.824582][T12605] bond14 (unregistering): (slave ip6gre4): Releasing backup interface [ 987.824612][T12605] ip6gre4 (unregistering): left promiscuous mode [ 988.264313][T12605] team0: Port device bridge1 removed [ 988.330711][T12605] bond0 (unregistering): Released all slaves [ 988.339169][T12605] bond1 (unregistering): Released all slaves [ 988.353729][T12605] bond2 (unregistering): Released all slaves [ 988.387664][T12605] bond3 (unregistering): Released all slaves [ 988.407794][T12605] bond4 (unregistering): Released all slaves [ 988.445340][T12605] bond5 (unregistering): Released all slaves [ 988.482007][T12605] bond6 (unregistering): Released all slaves [ 988.514117][T12605] bond7 (unregistering): Released all slaves [ 988.569301][T12605] bond8 (unregistering): Released all slaves [ 988.614411][T12605] bond9 (unregistering): Released all slaves [ 988.676782][T12605] bond10 (unregistering): Released all slaves [ 988.725061][T12605] bond11 (unregistering): Released all slaves [ 988.790108][T12605] bond12 (unregistering): Released all slaves [ 988.807750][T12605] bond13 (unregistering): Released all slaves [ 988.823465][T12605] bond14 (unregistering): Released all slaves [ 988.868704][T31112] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6533'. [ 988.872765][T31115] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 989.090922][T31114] bond0: entered promiscuous mode [ 989.091362][T31114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.216662][T31117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.217060][T31117] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 989.217080][T31117] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 989.268331][T31117] bond0: (slave xfrm1): making interface the new active one [ 989.268395][T31117] xfrm1: entered promiscuous mode [ 989.306928][T31117] xfrm1: left promiscuous mode [ 989.514096][T31139] netlink: 'syz.0.6538': attribute type 33 has an invalid length. [ 989.626799][T31122] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 989.643951][T31128] hsr0 speed is unknown, defaulting to 1000 [ 989.644049][T31128] hsr0 speed is unknown, defaulting to 1000 [ 989.644961][T31128] hsr0 speed is unknown, defaulting to 1000 [ 989.646142][T31128] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 989.646179][T31128] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 989.646220][T31128] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 989.661656][T12605] : left promiscuous mode [ 989.723919][T31128] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 990.064543][T31146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6540'. [ 990.065662][T31146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6540'. [ 990.116204][T31139] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 990.183665][T31139] bond2 (unregistering): Released all slaves [ 990.189903][T12765] net_ratelimit: 212 callbacks suppressed [ 990.189920][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.214946][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.229368][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.246591][T31149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6541'. [ 990.251780][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.270663][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.290453][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.312010][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.329746][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.348264][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.374939][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.455419][T12605] tipc: Disabling bearer [ 990.463587][T12605] tipc: Disabling bearer [ 990.463933][T12605] tipc: Disabling bearer [ 990.464326][T12605] tipc: Left network mode [ 990.482038][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.499079][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.501132][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.503114][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.565150][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.586065][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.606031][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.644228][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.662044][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.686395][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.703993][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.714772][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.746106][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.760279][T31128] hsr0 speed is unknown, defaulting to 1000 [ 990.945832][T31160] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6546'. [ 991.005314][T12605] IPVS: stopping backup sync thread 24446 ... [ 991.223755][T31156] xt_CT: No such helper "snmp_trap" [ 993.481402][T31220] sctp: [Deprecated]: syz.5.6557 (pid 31220) Use of int in max_burst socket option deprecated. [ 993.481402][T31220] Use struct sctp_assoc_value instead [ 995.047567][T31262] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 995.060015][T31262] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 995.060043][T31262] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 995.123564][T31259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.199711][T12766] net_ratelimit: 179 callbacks suppressed [ 995.199763][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.230552][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.250990][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.273112][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.294714][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.308930][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.330563][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.352250][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.371154][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.405633][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.406854][T31259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 995.443038][T31259] gretap0: entered promiscuous mode [ 995.466907][T31259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.726309][T31269] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 996.157509][T31279] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 996.157564][T31279] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 996.157594][T31279] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 996.172771][T30663] hsr0 speed is unknown, defaulting to 1000 [ 996.311919][T31296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6567'. [ 996.386324][T31293] ip6t_rpfilter: unknown options [ 996.438649][ T6430] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 997.116179][T31295] syzkaller0: entered promiscuous mode [ 997.116208][T31295] syzkaller0: entered allmulticast mode [ 997.158659][ T6434] IPVS: starting estimator thread 0... [ 997.251841][T31318] IPVS: using max 30 ests per chain, 72000 per kthread [ 997.587379][T31326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6576'. [ 997.624126][T12605] hsr_slave_0: left promiscuous mode [ 997.631631][T12605] hsr_slave_1: left promiscuous mode [ 997.700708][T31327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6576'. [ 997.744425][T12605] veth1_macvtap: left promiscuous mode [ 997.746510][T12605] veth0_macvtap: left promiscuous mode [ 997.746781][T12605] veth1_vlan: left promiscuous mode [ 999.395782][T31329] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1000.065133][T31359] bridge1: entered promiscuous mode [ 1000.065194][T31359] bridge1: entered allmulticast mode [ 1000.226968][ T6438] net_ratelimit: 199 callbacks suppressed [ 1000.226994][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.255186][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.255219][T12765] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1000.255261][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1000.363010][T12766] bond3: (slave dummy0): failed to get link speed/duplex [ 1000.363051][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.363073][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1000.408281][T12605] IPVS: stop unused estimator thread 0... [ 1000.471728][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.488699][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.514000][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.634218][T31372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 1000.688385][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1000.997787][T31381] netlink: 'syz.4.6588': attribute type 2 has an invalid length. [ 1001.538520][T31390] Bluetooth: MGMT ver 1.23 [ 1001.610567][T31390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6593'. [ 1001.754352][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.754614][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.754847][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.755085][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.755408][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.755635][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.761690][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.761922][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1001.762137][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1003.464264][T31431] netlink: 'syz.5.6609': attribute type 83 has an invalid length. [ 1004.416037][T31445] tipc: Resetting bearer [ 1004.486906][T31457] Bluetooth: MGMT ver 1.23 [ 1005.228629][ T12] net_ratelimit: 157 callbacks suppressed [ 1005.228690][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.256094][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.268754][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.299826][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.321008][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.342917][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.358435][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.378944][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.402389][ T6430] bond3: (slave dummy0): failed to get link speed/duplex [ 1005.402433][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1006.894040][T31509] __nla_validate_parse: 30 callbacks suppressed [ 1006.894065][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1007.017121][T31511] xt_hashlimit: size too large, truncated to 1048576 [ 1007.462125][T31521] netlink: 'syz.3.6628': attribute type 2 has an invalid length. [ 1007.462195][T31521] netlink: 'syz.3.6628': attribute type 1 has an invalid length. [ 1007.496831][T31521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6628'. [ 1007.496930][T31521] netlink: 'syz.3.6628': attribute type 7 has an invalid length. [ 1007.496967][T31521] netlink: 'syz.3.6628': attribute type 8 has an invalid length. [ 1007.497024][T31521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6628'. [ 1007.613130][T31521] erspan0: entered promiscuous mode [ 1007.630527][T31521] erspan0: left promiscuous mode [ 1008.831832][T31568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6638'. [ 1008.915745][T31569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6637'. [ 1008.956552][T31570] netlink: 'syz.0.6636': attribute type 9 has an invalid length. [ 1008.956577][T31570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6636'. [ 1009.248359][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1009.295197][T31580] x_tables: duplicate underflow at hook 1 [ 1009.329762][T31580] vlan2: entered promiscuous mode [ 1009.329830][T31580] geneve1: entered promiscuous mode [ 1009.330452][T31580] vlan2: entered allmulticast mode [ 1009.330490][T31580] geneve1: entered allmulticast mode [ 1010.328901][ T80] net_ratelimit: 177 callbacks suppressed [ 1010.328953][ T80] bond3: (slave dummy0): failed to get link speed/duplex [ 1010.329089][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.329155][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1010.438828][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.438899][T12605] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1010.438991][T12605] bond3: (slave dummy0): failed to get link speed/duplex [ 1010.559747][ T6438] bond3: (slave dummy0): failed to get link speed/duplex [ 1010.559747][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.583861][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.583901][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1010.694424][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 1010.857798][T31540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1011.160508][T31604] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1011.281714][T31606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6650'. [ 1011.360419][T31608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6653'. [ 1012.601438][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6664'. [ 1012.605113][T31639] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1012.619698][T31639] bond2 (unregistering): Released all slaves [ 1013.155425][T31657] batman_adv: batadv0: Adding interface: veth0 [ 1013.155447][T31657] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.155480][T31657] batman_adv: batadv0: Interface activated: veth0 [ 1013.582880][T31664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6669'. [ 1013.582950][T31664] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6669'. [ 1013.583011][T31664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6669'. [ 1013.587305][T31664] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6669'. [ 1013.610181][T31665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1013.614011][T31665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1013.627508][T31665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1014.148803][T31673] veth1_to_hsr: entered promiscuous mode [ 1014.250613][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6674'. [ 1014.449168][T31647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1014.900128][T31670] veth1_to_hsr: left promiscuous mode [ 1015.440784][T12610] net_ratelimit: 140 callbacks suppressed [ 1015.440811][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.440835][T12610] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1015.440871][T12610] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.554593][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.554722][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.554788][T12765] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1015.616273][T31707] netlink: 'syz.5.6677': attribute type 1 has an invalid length. [ 1015.662357][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.689986][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.708813][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.730326][T31707] bond1: entered promiscuous mode [ 1015.730732][T31707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1015.736429][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.839777][T31712] xt_ecn: cannot match TCP bits for non-tcp packets [ 1016.866730][T31668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1017.586951][T31741] tc_dump_action: action bad kind [ 1017.602598][T31742] tc_dump_action: action bad kind [ 1017.876188][T31750] __nla_validate_parse: 4 callbacks suppressed [ 1017.876238][T31750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6687'. [ 1019.976297][T31721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1020.459913][T12607] net_ratelimit: 130 callbacks suppressed [ 1020.459937][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.483108][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.483210][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1020.483307][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1020.518333][T31785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6695'. [ 1020.610824][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1020.610941][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.611007][T12765] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1020.720098][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.720197][T12765] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1020.720359][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1020.903432][T31788] netlink: 'syz.3.6697': attribute type 1 has an invalid length. [ 1020.935495][T31793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6699'. [ 1020.954004][T31795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6697'. [ 1021.063085][T31788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1021.072541][T31795] bond1: entered promiscuous mode [ 1021.072565][T31795] bond1: entered allmulticast mode [ 1021.322624][T31796] bond1: (slave ip6gretap1): making interface the new active one [ 1021.322690][T31796] ip6gretap1: entered promiscuous mode [ 1021.323113][T31796] ip6gretap1: entered allmulticast mode [ 1021.331802][T31807] x_tables: duplicate underflow at hook 1 [ 1021.399727][T31796] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1022.264197][T31837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1022.549914][T31840] netlink: 'syz.0.6711': attribute type 30 has an invalid length. [ 1022.657487][T31843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1022.830783][T31845] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1022.838247][T31845] bond3 (unregistering): Released all slaves [ 1022.955527][T31846] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1022.972942][T31846] bond3 (unregistering): Released all slaves [ 1023.295678][T31856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6717'. [ 1023.295711][T31856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6717'. [ 1023.630356][T31866] Cannot find del_set index 4 as target [ 1023.676784][T31865] tipc: Started in network mode [ 1023.676810][T31865] tipc: Node identity 2000004, cluster identity 4711 [ 1023.676825][T31865] tipc: Node number set to 33554436 [ 1023.692229][T31865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6721'. [ 1023.737328][T31868] x_tables: unsorted underflow at hook 2 [ 1023.805008][T31872] x_tables: unsorted underflow at hook 2 [ 1023.951208][T31882] netlink: 'syz.1.6724': attribute type 16 has an invalid length. [ 1023.951233][T31882] netlink: 'syz.1.6724': attribute type 17 has an invalid length. [ 1024.297039][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1024.298772][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1024.299064][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1024.299304][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1024.299549][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1024.303668][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1024.303905][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1025.195623][T31905] netlink: 'syz.1.6732': attribute type 58 has an invalid length. [ 1025.248340][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1025.492088][T12609] net_ratelimit: 170 callbacks suppressed [ 1025.492115][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1025.492151][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.492173][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1025.603204][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.603241][ T80] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1025.603279][ T80] bond3: (slave dummy0): failed to get link speed/duplex [ 1025.622140][T31911] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1025.709041][T12766] bond3: (slave dummy0): failed to get link speed/duplex [ 1025.709086][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.709108][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1025.819687][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1026.093089][T31929] xt_HMARK: proto mask must be zero with L3 mode [ 1027.924569][T31971] netlink: 'syz.3.6751': attribute type 3 has an invalid length. [ 1028.397281][T31977] netlink: 'syz.5.6753': attribute type 21 has an invalid length. [ 1028.699816][T31984] __nla_validate_parse: 32 callbacks suppressed [ 1028.702918][T31984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6756'. [ 1028.845951][T31990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6756'. [ 1029.042199][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6757'. [ 1029.144649][T31986] veth0_macvtap: left promiscuous mode [ 1029.465784][T32004] netlink: 'syz.1.6760': attribute type 1 has an invalid length. [ 1029.465849][T32004] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6760'. [ 1030.183449][T32015] Cannot find add_set index 46338 as target [ 1030.507109][T32024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1030.568403][T12766] net_ratelimit: 146 callbacks suppressed [ 1030.568448][T12766] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.568516][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.568552][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1030.687773][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.703141][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.703203][T12606] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1030.718674][ T80] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.809993][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.810067][T12606] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1030.844208][ T6438] bond3: (slave dummy0): failed to get link speed/duplex [ 1031.179759][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 1031.708649][T32034] netlink: 'syz.4.6771': attribute type 1 has an invalid length. [ 1032.022068][T32034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1032.214059][T32043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6772'. [ 1033.021391][T32061] veth0_to_bridge: entered promiscuous mode [ 1033.123700][T32060] veth0_to_bridge: left promiscuous mode [ 1033.140062][T32063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6778'. [ 1033.468631][T32071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6781'. [ 1033.820242][T32077] syzkaller0: entered promiscuous mode [ 1033.820267][T32077] syzkaller0: entered allmulticast mode [ 1035.588746][ T12] net_ratelimit: 175 callbacks suppressed [ 1035.588772][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.619820][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.619868][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.619890][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1035.742260][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.742303][T12605] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1035.742340][T12605] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.852356][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.852400][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.852423][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1036.060606][T32114] syzkaller0: entered promiscuous mode [ 1036.060673][T32114] syzkaller0: entered allmulticast mode [ 1036.066276][T32118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6786'. [ 1036.133066][T32115] netlink: 'syz.3.6786': attribute type 12 has an invalid length. [ 1036.288380][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 1037.553891][T32141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6791'. [ 1040.599711][T12610] net_ratelimit: 183 callbacks suppressed [ 1040.599738][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.631642][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.648752][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.674286][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.699687][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.708492][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.728698][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.749646][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.771755][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.788794][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1041.414881][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 1043.079860][T32140] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1043.080400][T32140] team0: Device ipvlan2 is already an upper device of the team interface [ 1043.283469][T32159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6795'. [ 1043.381961][T32160] netlink: 'syz.1.6795': attribute type 2 has an invalid length. [ 1043.618674][T32170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6799'. [ 1044.029923][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1044.036662][T32189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6803'. [ 1044.136924][T32183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6802'. [ 1044.136957][T32183] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6802'. [ 1044.459633][T32201] netlink: 'syz.1.6805': attribute type 21 has an invalid length. [ 1044.459699][T32201] IPv6: NLM_F_CREATE should be specified when creating new route [ 1044.459956][T32201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1044.459986][T32201] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.460115][T32201] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.460176][T32201] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.507426][T32186] wlan0 speed is unknown, defaulting to 1000 [ 1044.515233][T32186] hsr0 speed is unknown, defaulting to 1000 [ 1044.713323][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6805'. [ 1045.442899][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6811'. [ 1045.694571][ T6434] net_ratelimit: 189 callbacks suppressed [ 1045.694597][ T6434] bond3: (slave dummy0): failed to get link speed/duplex [ 1045.696045][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.696070][ T6430] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1045.798935][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6815'. [ 1045.799090][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.799160][T12607] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1045.805382][T32231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6814'. [ 1045.819057][T12607] bond3: (slave dummy0): failed to get link speed/duplex [ 1045.917527][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.917611][T32236] erspan0: entered promiscuous mode [ 1045.931456][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.948734][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.963332][T32236] erspan0: left promiscuous mode [ 1045.972598][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1046.290895][T32248] netlink: 'syz.0.6819': attribute type 10 has an invalid length. [ 1046.398894][T32248] geneve2: entered promiscuous mode [ 1046.398961][T32248] geneve2: entered allmulticast mode [ 1047.275288][ T5618] block nbd0: Receive control failed (result -32) [ 1047.339127][T12606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1047.339398][T12606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1047.368396][T30659] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1048.272002][T32311] tipc: Enabling of bearer rejected, failed to enable media [ 1048.287780][T32297] tipc: Enabling of bearer rejected, failed to enable media [ 1048.289550][T30659] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1048.289733][T30659] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1048.426697][T32297] __nla_validate_parse: 11 callbacks suppressed [ 1048.426720][T32297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6834'. [ 1048.966345][T32329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1049.066559][T32332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6842'. [ 1049.465280][T32342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6845'. [ 1049.976241][T32348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6847'. [ 1050.033924][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6847'. [ 1050.087139][T32356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6850'. [ 1050.410666][T32362] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.6852'. [ 1050.449644][T32367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1050.451935][T32367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1050.701216][T12606] net_ratelimit: 163 callbacks suppressed [ 1050.701238][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.721193][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.741132][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.760263][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.778997][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.801175][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.819225][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.838964][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.859880][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.881893][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1051.089086][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1053.066326][T32412] netlink: 'syz.3.6863': attribute type 10 has an invalid length. [ 1055.720217][ T6430] net_ratelimit: 202 callbacks suppressed [ 1055.720244][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.738641][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.762332][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.789069][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.811627][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.836347][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.852604][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.876803][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.899572][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.939729][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1056.860301][T32387] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1057.393753][T32420] __nla_validate_parse: 1 callbacks suppressed [ 1057.393799][T32420] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1057.400581][T32422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6866'. [ 1057.766693][T32436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6871'. [ 1058.127013][T32443] syzkaller0: entered promiscuous mode [ 1058.127039][T32443] syzkaller0: entered allmulticast mode [ 1058.284518][T32447] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1058.295189][T32447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1058.528199][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1059.168141][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1059.516674][T32471] tipc: Started in network mode [ 1059.516707][T32471] tipc: Node identity b6b1a591ff74, cluster identity 4711 [ 1059.516896][T32471] tipc: Enabled bearer , priority 0 [ 1059.555059][T32471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6881'. [ 1059.678473][T32493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6885'. [ 1059.935058][T32468] tipc: Resetting bearer [ 1060.042474][T32468] tipc: Disabling bearer [ 1060.099500][T32500] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 1060.293672][T32509] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6887'. [ 1060.296271][T32507] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6887'. [ 1060.809645][T12608] net_ratelimit: 167 callbacks suppressed [ 1060.809670][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1060.809696][T12608] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1060.809741][T12608] bond3: (slave dummy0): failed to get link speed/duplex [ 1060.934985][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1060.935056][T12608] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1060.961806][T12766] bond3: (slave dummy0): failed to get link speed/duplex [ 1061.039779][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.059244][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.079452][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.102176][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.148552][T32527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6895'. [ 1062.476166][T32552] syzkaller0: entered promiscuous mode [ 1062.476192][T32552] syzkaller0: entered allmulticast mode [ 1062.503051][T32552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6901'. [ 1062.831851][T32561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1062.944319][T32564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1062.944339][T32564] IPv6: NLM_F_CREATE should be set when creating new route [ 1063.035505][T32572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6906'. [ 1063.113262][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.113953][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.114229][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.114474][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.114722][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.117479][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.117726][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.179765][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.180049][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.180307][T32575] netlink: 'syz.1.6907': attribute type 21 has an invalid length. [ 1063.921785][T32597] xt_ipcomp: unknown flags 1D [ 1064.145730][T32594] syzkaller0: entered promiscuous mode [ 1064.145762][T32594] syzkaller0: entered allmulticast mode [ 1064.540168][T32611] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6918'. [ 1064.540230][T32611] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6918'. [ 1065.818192][T12610] net_ratelimit: 190 callbacks suppressed [ 1065.818228][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.849524][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.882782][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.900604][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.928612][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.949265][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.989377][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1066.009855][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1066.049932][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1066.079326][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1069.753811][T32621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6921'. [ 1069.753846][T32621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6921'. [ 1069.753886][T32621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6921'. [ 1069.754557][T32626] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6923'. [ 1069.754625][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6925'. [ 1070.047810][T32638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1070.199519][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1070.370156][T32640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6926'. [ 1070.560672][T32652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6929'. [ 1070.930829][ T6434] net_ratelimit: 195 callbacks suppressed [ 1070.930870][ T6434] bond3: (slave dummy0): failed to get link speed/duplex [ 1070.954820][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1070.954918][ T6434] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1071.039339][ T6434] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.069299][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.069332][T12608] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1071.153998][T12608] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.200849][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.200928][ T6434] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1071.260384][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.654155][T32654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6929'. [ 1072.735879][T32687] bond2: option xmit_hash_policy: invalid value (64) [ 1072.761243][T32687] bond2 (unregistering): Released all slaves [ 1073.082259][T32693] v: renamed from veth0_vlan (while UP) [ 1073.520495][T32707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1073.520519][T32707] IPv6: NLM_F_CREATE should be set when creating new route [ 1073.744613][T32707] bond3: option min_links: invalid value (18446744073709551614) [ 1073.744672][T32707] bond3: option min_links: allowed values 0 - 2147483647 [ 1073.751597][T32707] bond3 (unregistering): Released all slaves [ 1075.171371][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.623913][T32732] __nla_validate_parse: 3 callbacks suppressed [ 1075.623966][T32732] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6954'. [ 1075.964640][ T304] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1076.039086][ T12] net_ratelimit: 151 callbacks suppressed [ 1076.039113][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.059297][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.081360][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.106608][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.125837][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.138699][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.159393][T12607] bond3: (slave dummy0): failed to get link speed/duplex [ 1076.159435][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.159457][T12607] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1076.233422][ T310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6963'. [ 1076.270373][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.574263][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574263][ T313] Use struct sctp_assoc_value instead [ 1076.574342][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574342][ T313] Use struct sctp_assoc_value instead [ 1076.574402][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574402][ T313] Use struct sctp_assoc_value instead [ 1076.574461][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574461][ T313] Use struct sctp_assoc_value instead [ 1076.574517][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574517][ T313] Use struct sctp_assoc_value instead [ 1076.574562][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574562][ T313] Use struct sctp_assoc_value instead [ 1076.574702][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574702][ T313] Use struct sctp_assoc_value instead [ 1076.574748][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574748][ T313] Use struct sctp_assoc_value instead [ 1076.574793][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574793][ T313] Use struct sctp_assoc_value instead [ 1076.574838][ T313] sctp: [Deprecated]: syz.0.6963 (pid 313) Use of int in max_burst socket option deprecated. [ 1076.574838][ T313] Use struct sctp_assoc_value instead [ 1076.631810][ T321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1079.564720][ T389] netlink: 'syz.1.6980': attribute type 11 has an invalid length. [ 1079.703569][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1079.717745][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1079.744175][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1079.765836][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1079.796576][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1080.137745][ T416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6981'. [ 1080.551969][ T411] syzkaller1: entered promiscuous mode [ 1080.551998][ T411] syzkaller1: entered allmulticast mode [ 1080.817586][ T424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6985'. [ 1081.030565][ T12] IPVS: starting estimator thread 0... [ 1081.037605][ T427] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1081.062227][ T427] validate_nla: 24 callbacks suppressed [ 1081.062248][ T427] netlink: 'syz.5.6986': attribute type 21 has an invalid length. [ 1081.062333][ T427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1081.062345][ T427] IPv6: NLM_F_CREATE should be set when creating new route [ 1081.062395][ T427] IPv6: NLM_F_CREATE should be set when creating new route [ 1081.062423][ T427] IPv6: NLM_F_CREATE should be set when creating new route [ 1081.126844][ T432] IPVS: using max 26 ests per chain, 62400 per kthread [ 1081.130485][T12608] net_ratelimit: 165 callbacks suppressed [ 1081.130503][T12608] bond3: (slave dummy0): failed to get link speed/duplex [ 1081.130536][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.130554][T12608] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1081.241752][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.241787][T12605] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1081.241824][T12605] bond3: (slave dummy0): failed to get link speed/duplex [ 1081.353842][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.379439][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.399167][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.419059][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.687794][ T443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6989'. [ 1081.749228][T30661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1081.890412][ T5618] Bluetooth: hci4: command tx timeout [ 1082.379308][T30661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1082.865616][ T397] wlan0 speed is unknown, defaulting to 1000 [ 1082.867663][ T397] hsr0 speed is unknown, defaulting to 1000 [ 1083.906057][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.906248][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.906395][ T397] bridge_slave_0: entered allmulticast mode [ 1083.909180][ T397] bridge_slave_0: entered promiscuous mode [ 1083.912595][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.912785][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.912922][ T397] bridge_slave_1: entered allmulticast mode [ 1083.914770][ T397] bridge_slave_1: entered promiscuous mode [ 1083.954959][ T397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.968903][ T5618] Bluetooth: hci4: command tx timeout [ 1083.980831][ T397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.095075][ T397] team0: Port device team_slave_0 added [ 1084.102067][ T397] team0: Port device team_slave_1 added [ 1084.158564][ T397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.158585][ T397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.158611][ T397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.159876][ T397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.159891][ T397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.159917][ T397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.262082][ T397] hsr_slave_0: entered promiscuous mode [ 1084.263139][ T397] hsr_slave_1: entered promiscuous mode [ 1084.263890][ T397] debugfs: 'hsr0' already exists in 'hsr' [ 1084.263909][ T397] Cannot create hsr debugfs directory [ 1084.485543][ T460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1084.831901][ T504] netlink: 'syz.1.6997': attribute type 22 has an invalid length. [ 1084.831929][ T504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1084.861503][ T504] netlink: 'syz.1.6997': attribute type 22 has an invalid length. [ 1084.861525][ T504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1084.862045][ T505] netlink: 'syz.1.6997': attribute type 22 has an invalid length. [ 1084.862085][ T505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1084.864043][ T505] netlink: 'syz.1.6997': attribute type 22 has an invalid length. [ 1084.864082][ T505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1084.879777][T12766] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.880983][T12766] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.881026][T12766] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.881062][T12766] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.249707][ T515] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.7001'. [ 1085.460084][ T518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7001'. [ 1085.665077][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.665752][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.807529][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.821957][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.005132][ T517] batman_adv: batadv0: Interface deactivated: gretap1 [ 1086.018873][ T517] vlan2: left promiscuous mode [ 1086.018900][ T517] geneve1: left promiscuous mode [ 1086.019094][ T517] vlan2: left allmulticast mode [ 1086.019110][ T517] geneve1: left allmulticast mode [ 1086.052577][ T5618] Bluetooth: hci4: command tx timeout [ 1086.138949][ T80] net_ratelimit: 171 callbacks suppressed [ 1086.138975][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.164416][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.176738][ T6438] dvmrp0: left allmulticast mode [ 1086.177426][ T6438] dvmrp8: left allmulticast mode [ 1086.181292][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.198948][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.221427][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.238195][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.258917][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.279637][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.299416][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.319740][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.360459][ T527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7004'. [ 1087.013120][ T6438] batman_adv: batadv0: Removing interface: gretap1 [ 1087.134953][ T6438] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1087.209485][ T6438] bond1 (unregistering): Released all slaves [ 1087.249702][ T6438] bond2 (unregistering): Released all slaves [ 1087.267673][ T6438] bond3 (unregistering): Released all slaves [ 1087.284746][ T6438] bond4 (unregistering): Released all slaves [ 1087.306774][ T6438] bond5 (unregistering): Released all slaves [ 1087.326318][ T6438] bond0 (unregistering): Released all slaves [ 1087.347486][ T6438] bond6 (unregistering): Released all slaves [ 1087.388920][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.390634][T12609] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.390741][T12609] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.390801][T12609] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.476680][ T397] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1087.533734][ T397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1087.537744][ T397] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1087.598148][ T397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1087.599295][ T527] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1087.599570][ T397] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1087.664128][ T397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1087.697228][ T6438] tipc: Disabling bearer [ 1087.701692][ T6438] tipc: Left network mode [ 1087.706820][ T533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7005'. [ 1087.710024][ T397] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1087.779890][ T397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.129569][ T5618] Bluetooth: hci4: command tx timeout [ 1088.288967][ T551] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1088.485257][ T555] sctp: [Deprecated]: syz.0.7009 (pid 555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1088.485257][ T555] Use struct sctp_sack_info instead [ 1088.524645][T12605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.524670][T12605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.704258][ T558] syzkaller0: entered promiscuous mode [ 1088.704295][ T558] syzkaller0: entered allmulticast mode [ 1088.744484][ T558] netlink: 'syz.3.7010': attribute type 1 has an invalid length. [ 1088.874125][ T558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1089.112744][ T397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.683508][ T397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.763485][T12610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.763611][T12610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.001361][ T6438] hsr_slave_0: left promiscuous mode [ 1090.003696][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.003720][ T6438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.407538][ T6438] veth1_vlan: left allmulticast mode [ 1090.409022][ T6438] veth0_macvtap: left allmulticast mode [ 1090.409085][ T6438] veth0_macvtap: left promiscuous mode [ 1090.409349][ T6438] veth1_vlan: left promiscuous mode [ 1090.420343][ T6438] veth0_vlan: left promiscuous mode [ 1091.148842][T12605] net_ratelimit: 202 callbacks suppressed [ 1091.148869][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.173276][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.203754][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.219403][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.235284][ T621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7019'. [ 1091.238370][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.258228][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.300717][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.333249][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.441022][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1091.458611][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1092.954373][ T6438] team0 (unregistering): Port device team_slave_1 removed [ 1093.716367][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.716483][T12765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.717074][ T612] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1094.226111][ T636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1094.234259][ T636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1094.306298][ T634] bond0: option miimon: invalid value (18446744071829782528) [ 1094.306330][ T634] bond0: option miimon: allowed values 0 - 2147483647 [ 1094.608528][ T6438] IPVS: stop unused estimator thread 0... [ 1094.893901][ T651] syzkaller1: entered promiscuous mode [ 1094.893928][ T651] syzkaller1: entered allmulticast mode [ 1096.081005][ T677] netlink: 'syz.3.7029': attribute type 2 has an invalid length. [ 1096.101072][ T683] netlink: 'syz.3.7029': attribute type 2 has an invalid length. [ 1096.201609][ T687] xt_TCPMSS: Only works on TCP SYN packets [ 1096.248095][ T80] net_ratelimit: 188 callbacks suppressed [ 1096.248119][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1096.248145][ T80] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1096.248183][ T80] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.359205][T12605] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.359340][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1096.359406][T12605] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1096.469219][ T6430] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.469271][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1096.469294][ T6438] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1096.578615][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1096.705255][ T691] tipc: Enabled bearer , priority 0 [ 1096.711985][ T691] tipc: Resetting bearer [ 1096.753147][ T691] IPv6: sit2: Disabled Multicast RS [ 1097.024399][ T690] tipc: Disabling bearer [ 1097.129962][ T703] dvmrp1: entered allmulticast mode [ 1097.190603][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1097.208818][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1097.210667][ T397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.214198][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1097.216566][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1097.217492][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1097.747791][ T715] xt_ipcomp: unknown flags 1D [ 1097.954633][ T725] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1098.611506][ T744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7039'. [ 1098.612251][ T715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1099.307117][ T397] veth0_vlan: entered promiscuous mode [ 1099.330876][ T5618] Bluetooth: hci7: command tx timeout [ 1099.419989][ T397] veth1_vlan: entered promiscuous mode [ 1099.603459][ T397] veth0_macvtap: entered promiscuous mode [ 1099.663078][ T397] veth1_macvtap: entered promiscuous mode [ 1099.798672][ T397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.912715][ T397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.054127][T12765] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.054927][T12606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.055231][T12606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.055266][T12606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.912215][ T786] syzkaller0: entered promiscuous mode [ 1100.912244][ T786] syzkaller0: entered allmulticast mode [ 1101.262965][ T80] net_ratelimit: 154 callbacks suppressed [ 1101.262989][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.286617][ T206] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.307664][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.330236][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.357652][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.369563][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.389118][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.409560][ T5618] Bluetooth: hci7: command tx timeout [ 1101.412355][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.440628][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.459935][ T49] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1103.221725][ T844] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1103.490518][ T5618] Bluetooth: hci7: command tx timeout [ 1103.667581][ T852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1105.571648][ T5618] Bluetooth: hci7: command tx timeout [ 1106.270897][ T6438] net_ratelimit: 202 callbacks suppressed [ 1106.270924][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.290244][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.332453][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.348763][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.376716][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.399464][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.433510][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.448970][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.478566][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.504810][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1107.352110][T12609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.352136][T12609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.677779][ T705] wlan0 speed is unknown, defaulting to 1000 [ 1107.801874][ T705] hsr0 speed is unknown, defaulting to 1000 [ 1107.809223][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1107.871770][ T862] netlink: 'syz.1.7060': attribute type 32 has an invalid length. [ 1107.871841][ T862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7060'. [ 1108.341028][ T862] bond1: Setting coupled_control to off (0) [ 1108.486175][T12607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.486200][T12607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.503389][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7063'. [ 1108.503488][ T885] netlink: 'syz.0.7063': attribute type 5 has an invalid length. [ 1108.503524][ T885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7063'. [ 1108.670519][ T893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1108.670545][ T893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1109.065836][ T885] geneve2: entered promiscuous mode [ 1109.065864][ T885] geneve2: entered allmulticast mode [ 1109.268664][T12607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1109.268749][T12607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1109.268789][T12607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1109.268828][T12607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1110.325986][ T921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7071'. [ 1110.553122][ T940] netlink: 'syz.3.7073': attribute type 13 has an invalid length. [ 1110.553150][ T940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7073'. [ 1110.650081][ T940] netlink: 'syz.3.7073': attribute type 13 has an invalid length. [ 1110.650106][ T940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7073'. [ 1111.349445][ T1152] net_ratelimit: 195 callbacks suppressed [ 1111.349471][ T1152] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.349504][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.349524][ T1152] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1111.465649][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.497802][T12606] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.498181][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.498228][T12606] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1111.500826][ T972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7076'. [ 1111.610348][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.610447][ T1152] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1111.610549][ T1152] bond3: (slave dummy0): failed to get link speed/duplex [ 1112.576601][ T705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.576795][ T705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.576952][ T705] bridge_slave_0: entered allmulticast mode [ 1112.633060][ T705] bridge_slave_0: entered promiscuous mode [ 1112.697339][ T705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.697792][ T705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.723842][ T705] bridge_slave_1: entered allmulticast mode [ 1112.800165][ T705] bridge_slave_1: entered promiscuous mode [ 1112.929993][ T1008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1113.154757][ T1008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1113.459996][T30661] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1113.844279][ T705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.941534][ T1032] fido_id[1032]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci7/hci7:200/report_descriptor': No such file or directory [ 1113.962089][ T705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.423283][ T705] team0: Port device team_slave_0 added [ 1114.444129][ T705] team0: Port device team_slave_1 added [ 1114.600909][ T1058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7089'. [ 1114.814333][ T705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.814353][ T705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.814381][ T705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.896704][ T705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.896725][ T705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.896752][ T705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.201636][ T1065] netlink: 'syz.1.7091': attribute type 1 has an invalid length. [ 1115.224655][ T1079] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7093'. [ 1115.546355][ T705] hsr_slave_0: entered promiscuous mode [ 1115.559599][ T705] hsr_slave_1: entered promiscuous mode [ 1115.560430][ T705] debugfs: 'hsr0' already exists in 'hsr' [ 1115.560452][ T705] Cannot create hsr debugfs directory [ 1115.744511][ T1090] netlink: 'syz.0.7094': attribute type 2 has an invalid length. [ 1115.932823][ T1088] veth3: entered allmulticast mode [ 1116.359523][T12608] net_ratelimit: 188 callbacks suppressed [ 1116.359549][T12608] bond3: (slave dummy0): failed to get link speed/duplex [ 1116.359586][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.359607][T12608] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1116.470898][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.488144][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1116.488246][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.488307][T12765] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1116.614770][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.640562][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.659992][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1117.956352][ T1128] netlink: 'syz.3.7102': attribute type 2 has an invalid length. [ 1117.974406][ T1129] netlink: 'syz.3.7102': attribute type 2 has an invalid length. [ 1118.175798][ T1141] netlink: 'syz.3.7104': attribute type 13 has an invalid length. [ 1118.214567][ T1140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1118.214595][ T1140] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1118.268618][ T1143] IPVS: set_ctl: invalid protocol: 47 172.20.20.25:20001 [ 1118.295735][ T1141] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 1118.413154][ T1141] netlink: 'syz.3.7104': attribute type 13 has an invalid length. [ 1118.435233][ T1144] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 1118.436120][ T1144] IPVS: set_ctl: invalid protocol: 47 172.20.20.25:20001 [ 1118.812715][ T1161] netlink: 'syz.3.7108': attribute type 1 has an invalid length. [ 1118.815288][ T1159] netlink: 'syz.3.7108': attribute type 1 has an invalid length. [ 1118.955305][ T1161] bond4: entered promiscuous mode [ 1118.955750][ T1161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1119.040229][ T705] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1119.098229][ T705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1119.124053][ T705] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1119.232555][ T1168] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7109'. [ 1119.245301][ T705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.322173][ T705] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1119.430817][ T1163] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7105'. [ 1119.434942][ T705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.450766][ T705] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1119.540844][ T705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1120.415282][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7115'. [ 1120.422287][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7115'. [ 1120.475777][ T705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.623107][ T1207] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7118'. [ 1120.734748][ T705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.794193][ T1211] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7119'. [ 1120.888598][ T1213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7120'. [ 1120.919496][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.919615][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.125320][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.127158][T12609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.425349][T12606] net_ratelimit: 187 callbacks suppressed [ 1121.425352][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.425372][T12606] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.425420][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1121.529367][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.561438][ T206] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.585755][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.609099][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.650109][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.668497][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.689029][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.996659][ T1233] tipc: Started in network mode [ 1121.996686][ T1233] tipc: Node identity 2000004, cluster identity 4711 [ 1121.996700][ T1233] tipc: Node number set to 33554436 [ 1122.201517][ T1242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7124'. [ 1122.287571][ T1238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7122'. [ 1122.287637][ T1238] tipc: Invalid UDP bearer configuration [ 1122.287796][ T1238] tipc: Enabling of bearer rejected, failed to enable media [ 1122.833082][ T1254] xt_hashlimit: size too large, truncated to 1048576 [ 1123.422074][ T1270] Cannot find add_set index 4 as target [ 1123.504695][ T1267] syzkaller0: entered promiscuous mode [ 1123.504724][ T1267] syzkaller0: entered allmulticast mode [ 1123.749936][ T1279] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7131'. [ 1126.371936][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1126.436998][ T12] net_ratelimit: 195 callbacks suppressed [ 1126.437025][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.459784][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.478466][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.512397][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.541909][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.573651][ T206] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.595060][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.619702][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.638239][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.674089][ T206] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1128.467709][ T5626] Bluetooth: hci6: command 0x0406 tx timeout [ 1130.059012][ T705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.112818][ T1327] netlink: 'syz.0.7142': attribute type 2 has an invalid length. [ 1130.124693][ T1328] netlink: 'syz.0.7142': attribute type 2 has an invalid length. [ 1131.171170][ T1351] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1131.270337][ T1351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1131.315036][ T1360] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1131.389515][ T1360] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1131.447260][T12765] net_ratelimit: 166 callbacks suppressed [ 1131.447316][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1131.447455][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1131.447523][T12765] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1131.557031][ T1152] bond3: (slave dummy0): failed to get link speed/duplex [ 1131.557032][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1131.557100][T12606] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1131.660062][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1131.660124][ T1152] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1131.660526][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1131.768365][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1131.866044][ T705] veth0_vlan: entered promiscuous mode [ 1131.920901][ T705] veth1_vlan: entered promiscuous mode [ 1132.076093][ T1372] xt_hashlimit: size too large, truncated to 1048576 [ 1132.163174][ T1375] netlink: 'syz.6.7153': attribute type 1 has an invalid length. [ 1132.347285][ T705] veth0_macvtap: entered promiscuous mode [ 1132.383200][ T705] veth1_macvtap: entered promiscuous mode [ 1132.455614][ T705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.484687][ T705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.580099][T12605] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.580156][T12605] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.580193][T12605] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.580228][T12605] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.427556][ T1385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7157'. [ 1133.794538][ T1389] bond2: entered promiscuous mode [ 1133.794575][ T1389] bond2: entered allmulticast mode [ 1133.798555][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.798582][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.265991][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.266016][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.523242][ T1437] netlink: 168 bytes leftover after parsing attributes in process `syz.7.7168'. [ 1135.539909][ T1438] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7168'. [ 1136.501080][ T12] net_ratelimit: 152 callbacks suppressed [ 1136.501106][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1136.501132][ T12] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1136.501179][ T206] bond3: (slave dummy0): failed to get link speed/duplex [ 1136.555016][ T1465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7178'. [ 1136.575492][ T1465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7178'. [ 1136.619944][T12606] bond3: (slave dummy0): failed to get link speed/duplex [ 1136.619994][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1136.620016][T12606] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1136.759214][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1136.759249][ T6430] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1136.759290][ T6430] bond3: (slave dummy0): failed to get link speed/duplex [ 1136.874275][T12606] bond3: (slave dummy0): failed to get link speed/duplex [ 1137.701715][ T1478] netlink: 'syz.6.7182': attribute type 30 has an invalid length. [ 1138.249734][T12609] IPVS: starting estimator thread 0... [ 1138.340710][ T1493] IPVS: using max 24 ests per chain, 57600 per kthread [ 1138.569836][ T1500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7188'. [ 1138.810413][ T1505] xt_hashlimit: size too large, truncated to 1048576 [ 1138.860799][ T1509] xt_hashlimit: size too large, truncated to 1048576 [ 1139.120544][ T1522] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7194'. [ 1139.289065][ T1523] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7194'. [ 1139.317085][ T1523] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7194'. [ 1139.792441][ T30] audit: type=1800 audit(1789600587.903:10): pid=1533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7195" name="memory.events" dev="tmpfs" ino=1148 res=0 errno=0 [ 1140.311994][ T1550] tipc: Enabling of bearer rejected, failed to enable media [ 1140.657691][ T1553] netlink: 'syz.6.7201': attribute type 2 has an invalid length. [ 1140.657718][ T1553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7201'. [ 1141.610175][ T1152] net_ratelimit: 137 callbacks suppressed [ 1141.610226][ T1152] bond3: (slave dummy0): failed to get link speed/duplex [ 1141.610330][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1141.610395][ T1152] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1141.718908][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1141.718943][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1141.718981][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1141.829908][T12608] bond3: (slave dummy0): failed to get link speed/duplex [ 1141.829953][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1141.829974][T12608] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1141.939046][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1142.174986][ T1585] bond2: option all_slaves_active: invalid value (179) [ 1142.185275][ T1585] bond2 (unregistering): Released all slaves [ 1142.915519][ T1593] syzkaller1: entered promiscuous mode [ 1142.915549][ T1593] syzkaller1: entered allmulticast mode [ 1142.976572][ T1607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1143.053096][ T1618] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7213'. [ 1144.001734][ T1639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1144.001761][ T1639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1144.235719][ T1650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7221'. [ 1144.235767][ T1650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7221'. [ 1144.765824][ T1658] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 1145.395942][ T1674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7228'. [ 1145.595261][ T1675] netlink: 'syz.6.7229': attribute type 1 has an invalid length. [ 1145.744488][ T1675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1145.931248][ T1693] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7233'. [ 1145.972939][ T1680] bond1: (slave geneve2): making interface the new active one [ 1146.024885][ T1680] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1146.336727][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7236'. [ 1146.559770][ T1708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7238'. [ 1146.619642][ T80] net_ratelimit: 164 callbacks suppressed [ 1146.619694][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.639420][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.643864][ T1707] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1146.660758][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.678760][ T80] bond3: (slave dummy0): failed to get link speed/duplex [ 1146.678803][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.678825][ T80] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1146.791462][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.808947][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.828717][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.865698][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1146.928895][ T1709] syzkaller0: entered promiscuous mode [ 1146.928967][ T1709] syzkaller0: entered allmulticast mode [ 1147.209980][ T1729] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 1147.467625][ T1740] netlink: 'syz.0.7245': attribute type 1 has an invalid length. [ 1151.653131][ T80] net_ratelimit: 199 callbacks suppressed [ 1151.653160][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.668518][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.700094][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.741056][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.771434][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.788962][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.814368][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.831365][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.849002][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.869533][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1152.085094][ T1733] pimreg3: entered allmulticast mode [ 1152.491825][ T1740] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1152.793080][ T1761] bond1 (unregistering): Released all slaves [ 1153.714810][ T1790] __nla_validate_parse: 2 callbacks suppressed [ 1153.714860][ T1790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1154.152157][ T1796] netlink: 'syz.0.7259': attribute type 3 has an invalid length. [ 1154.351996][ T1771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.397275][ T1803] netlink: 'syz.0.7259': attribute type 3 has an invalid length. [ 1154.551620][ T1815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7263'. [ 1154.657652][ T1817] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7262'. [ 1156.014991][ T1841] netlink: 'syz.3.7270': attribute type 12 has an invalid length. [ 1156.579274][ T1850] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7272'. [ 1156.711287][ T1829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1156.711388][ T1829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1156.744989][T12765] net_ratelimit: 143 callbacks suppressed [ 1156.745012][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.761669][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.778142][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.784854][ T1829] geneve0: entered promiscuous mode [ 1156.784923][ T1829] geneve0: entered allmulticast mode [ 1156.804755][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.819640][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.839077][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.859206][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.883473][T12765] bond3: (slave dummy0): failed to get link speed/duplex [ 1156.883519][T12765] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1156.883541][T12765] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1157.355433][ T1858] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1157.355501][ T1858] bond1: option arp_ip_target: invalid value (0) [ 1157.375860][ T1858] bond1 (unregistering): Released all slaves [ 1158.047092][ T1870] x_tables: duplicate underflow at hook 1 [ 1158.363356][ T1881] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7280'. [ 1158.436023][ T1888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7281'. [ 1159.316361][ T1903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7283'. [ 1159.316430][ T1903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7283'. [ 1159.483422][ T1902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1159.544960][ T1912] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7287'. [ 1159.615658][ T1903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.662174][ T1903] bond2: (slave bond0): making interface the new active one [ 1159.680911][ T1903] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1159.797001][ T1915] af_packet: packet size is too long (558759946 > 147) [ 1159.858922][ T1915] x_tables: duplicate underflow at hook 1 [ 1159.912013][ T1920] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1159.955956][ T1922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1159.981845][ T1922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1160.281780][ T1920] gretap0: entered promiscuous mode [ 1160.512207][ T1932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7292'. [ 1160.880004][ T1938] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7295'. [ 1160.963204][ T1946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7297'. [ 1160.963229][ T1946] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7297'. [ 1160.965248][ T1949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1161.072848][ T1953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1161.773246][ T80] net_ratelimit: 175 callbacks suppressed [ 1161.773271][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1161.773296][ T80] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1161.773334][ T80] bond3: (slave dummy0): failed to get link speed/duplex [ 1161.880077][T12610] bond3: (slave dummy0): failed to get link speed/duplex [ 1161.880240][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1161.880309][T12610] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1162.001106][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1162.001142][T12608] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1162.001179][T12608] bond3: (slave dummy0): failed to get link speed/duplex [ 1162.121816][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1163.255936][ T1992] sctp_setsockopt_maxburst: 55 callbacks suppressed [ 1163.255961][ T1992] sctp: [Deprecated]: syz.7.7307 (pid 1992) Use of int in max_burst socket option deprecated. [ 1163.255961][ T1992] Use struct sctp_assoc_value instead [ 1164.527384][ T2020] netlink: 'syz.1.7316': attribute type 1 has an invalid length. [ 1164.527434][ T2020] __nla_validate_parse: 3 callbacks suppressed [ 1164.527448][ T2020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7316'. [ 1164.760452][ T2029] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7320'. [ 1164.787242][ T2031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1165.303328][ T2044] xt_l2tp: invalid flags combination: 8 [ 1165.378076][ T2050] xt_l2tp: invalid flags combination: 8 [ 1165.407692][ T2056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7322'. [ 1166.044145][ T30] audit: type=1800 audit(1789600614.153:11): pid=2068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7326" name=680B20 dev="tmpfs" ino=217 res=0 errno=0 [ 1166.778745][T12766] net_ratelimit: 129 callbacks suppressed [ 1166.778809][T12766] bond3: (slave dummy0): failed to get link speed/duplex [ 1166.811478][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1166.811551][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1166.891995][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 1166.931353][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1166.948393][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7331'. [ 1166.951703][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1166.978607][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1166.998392][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1167.037265][ T80] bond3: (slave dummy0): failed to get link speed/duplex [ 1167.037460][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1167.239100][ T2080] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1167.461015][ T2093] xt_hashlimit: size too large, truncated to 1048576 [ 1167.696384][ T2108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7334'. [ 1168.093611][ T2103] can: request_module (can-proto-0) failed. [ 1168.626900][ T5618] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 1168.626939][ T5618] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 1169.307324][ T2158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7344'. [ 1169.751991][ T2168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7347'. [ 1169.774842][ T2160] syzkaller0: entered promiscuous mode [ 1169.774940][ T2160] syzkaller0: entered allmulticast mode [ 1170.749958][ T2193] netlink: 'syz.0.7354': attribute type 2 has an invalid length. [ 1171.377609][ T2200] bridge_slave_0: left allmulticast mode [ 1171.377639][ T2200] bridge_slave_0: left promiscuous mode [ 1171.377936][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.494556][ T2200] bridge_slave_1: left allmulticast mode [ 1171.494588][ T2200] bridge_slave_1: left promiscuous mode [ 1171.494831][ T2200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.662563][ T2213] x_tables: duplicate underflow at hook 2 [ 1171.677165][ T2200] bond0: (slave bond_slave_0): Releasing backup interface [ 1171.681387][ T2215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7360'. [ 1171.759652][ T2200] bond0: (slave bond_slave_1): Releasing backup interface [ 1171.790488][T12609] net_ratelimit: 160 callbacks suppressed [ 1171.790515][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.794290][ T2200] team0: Port device team_slave_0 removed [ 1171.810535][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.830322][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.852329][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.868765][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.892375][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.909654][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.915187][ T2200] team0: Port device team_slave_1 removed [ 1171.921353][ T2200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.921909][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.929588][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.941365][ T2200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.941388][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.950025][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.956595][ T2200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1172.901672][ T2235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1173.425665][ T2243] ªªªªª»: renamed from bond_slave_0 [ 1173.986774][ T2265] netlink: 344 bytes leftover after parsing attributes in process `syz.0.7371'. [ 1174.258620][ T2275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1174.352585][ T2281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.585403][ T5618] block nbd3: Receive control failed (result -32) [ 1174.808899][ T2287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1175.475987][ T2310] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1175.904078][ T2329] netlink: 'syz.3.7382': attribute type 15 has an invalid length. [ 1175.904105][ T2329] netlink: 'syz.3.7382': attribute type 7 has an invalid length. [ 1176.804901][T12602] net_ratelimit: 143 callbacks suppressed [ 1176.804926][T12602] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1176.804950][T12602] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1176.805208][T12602] bond3: (slave dummy0): failed to get link speed/duplex [ 1176.917248][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1176.954303][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1176.969671][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1176.987005][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7387'. [ 1177.007456][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1177.008772][ T2347] openvswitch: netlink: Flow actions attr not present in new flow. [ 1177.043039][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1177.061294][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1177.080107][ T2359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7390'. [ 1177.083546][ T2348] netlink: 'syz.7.7386': attribute type 2 has an invalid length. [ 1177.568105][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1178.624012][ T2399] team0: entered promiscuous mode [ 1178.624039][ T2399] team_slave_0: entered promiscuous mode [ 1178.624240][ T2399] team_slave_1: entered promiscuous mode [ 1179.043231][ T2399] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7400'. [ 1179.043285][ T2399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7400'. [ 1179.174911][ T2410] netlink: 'syz.7.7400': attribute type 12 has an invalid length. [ 1179.283798][ T2421] netlink: 'syz.3.7398': attribute type 1 has an invalid length. [ 1179.283823][ T2421] netlink: 'syz.3.7398': attribute type 2 has an invalid length. [ 1179.283837][ T2421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7398'. [ 1179.723319][ T2415] syzkaller0: entered promiscuous mode [ 1179.723349][ T2415] syzkaller0: entered allmulticast mode [ 1181.818725][T12605] net_ratelimit: 186 callbacks suppressed [ 1181.818790][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.850441][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.868633][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.894671][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.912946][ T6430] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.928768][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.962769][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.982367][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1182.004602][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1182.018864][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1185.596654][ T2436] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1185.614492][ T2398] team0: left promiscuous mode [ 1185.614517][ T2398] team_slave_0: left promiscuous mode [ 1185.614748][ T2398] team_slave_1: left promiscuous mode [ 1186.009882][ T2473] xt_hashlimit: size too large, truncated to 1048576 [ 1186.281148][ T12] IPVS: starting estimator thread 0... [ 1186.373072][ T2491] IPVS: using max 26 ests per chain, 62400 per kthread [ 1186.828666][T12608] net_ratelimit: 181 callbacks suppressed [ 1186.828688][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1186.853451][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1186.871180][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1186.892827][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1186.892860][T12607] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1186.892898][T12607] bond3: (slave dummy0): failed to get link speed/duplex [ 1187.004206][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1187.019396][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1187.038881][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1187.057706][ T2515] ip6t_rpfilter: unknown options [ 1187.060827][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1187.582357][ T2520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7415'. [ 1187.645648][ T2520] team0: No ports can be present during mode change [ 1187.829662][ T2531] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1188.574739][ T2552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1188.574759][ T2552] IPv6: NLM_F_CREATE should be set when creating new route [ 1188.574789][ T2552] IPv6: NLM_F_CREATE should be set when creating new route [ 1190.056017][ T2593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7433'. [ 1190.064751][ T2593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7433'. [ 1190.064777][ T2593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7433'. [ 1190.152109][ T2601] netlink: 'syz.3.7435': attribute type 1 has an invalid length. [ 1190.173662][ T2593] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1190.285871][ T2612] netlink: 'syz.1.7434': attribute type 11 has an invalid length. [ 1190.893111][ T2625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1191.161592][ T5618] block nbd4: Receive control failed (result -32) [ 1191.571370][ T5618] Bluetooth: hci7: link tx timeout [ 1191.571858][ T5618] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1191.594476][ T2649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7443'. [ 1191.594500][ T2649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7443'. [ 1191.839282][T12605] net_ratelimit: 163 callbacks suppressed [ 1191.839306][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.859158][T12602] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.882063][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.898932][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.919583][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.938671][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.961966][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.983501][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.999438][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1192.019806][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1192.237305][ T2672] netlink: 'syz.3.7449': attribute type 2 has an invalid length. [ 1192.284445][ T2673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7447'. [ 1192.433683][ T2672] : entered promiscuous mode [ 1192.634212][ T2675] bond0: entered promiscuous mode [ 1192.634238][ T2675] bond_slave_0: entered promiscuous mode [ 1192.634531][ T2675] bond_slave_1: entered promiscuous mode [ 1192.639710][ T2675] bond0: left promiscuous mode [ 1192.639730][ T2675] bond_slave_0: left promiscuous mode [ 1192.639941][ T2675] bond_slave_1: left promiscuous mode [ 1193.190025][ T2707] netlink: 244 bytes leftover after parsing attributes in process `syz.6.7457'. [ 1193.664093][ T5626] Bluetooth: hci7: command 0x0406 tx timeout [ 1194.333033][ T2742] xt_hashlimit: size too large, truncated to 1048576 [ 1194.470607][ T2743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1194.472261][ T2743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1194.701167][ T2747] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1195.073848][ T2757] wlan0 speed is unknown, defaulting to 1000 [ 1195.076115][ T2757] hsr0 speed is unknown, defaulting to 1000 [ 1195.400890][ T2758] netlink: 'syz.3.7472': attribute type 16 has an invalid length. [ 1195.400915][ T2758] netlink: 'syz.3.7472': attribute type 2 has an invalid length. [ 1195.400928][ T2758] netlink: 64110 bytes leftover after parsing attributes in process `syz.3.7472'. [ 1195.985933][ T2778] veth0: entered promiscuous mode [ 1196.858647][ T80] net_ratelimit: 171 callbacks suppressed [ 1196.858674][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1196.885296][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1196.899468][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1196.918891][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1196.958948][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1196.979204][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1196.999772][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1197.020062][ T6434] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1197.042094][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1197.044809][ T2777] veth0: left promiscuous mode [ 1197.063190][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1197.259213][ T2802] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1197.564033][ T2812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1197.564061][ T2812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1197.619626][ T2819] netlink: 'syz.1.7483': attribute type 2 has an invalid length. [ 1197.791283][ T2823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1198.587437][ T2840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1198.866039][ T2850] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7483'. [ 1200.372989][ T2902] netlink: 'syz.1.7506': attribute type 2 has an invalid length. [ 1200.417425][ T2902] : entered promiscuous mode [ 1200.893261][ T2923] tipc: Trying to set illegal importance in message [ 1201.506266][ T2936] netlink: 'syz.1.7512': attribute type 16 has an invalid length. [ 1201.506293][ T2936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7512'. [ 1201.506320][ T2936] veth0_macvtap: entered allmulticast mode [ 1201.891878][T12607] net_ratelimit: 133 callbacks suppressed [ 1201.891903][T12607] bond3: (slave dummy0): failed to get link speed/duplex [ 1201.893934][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1201.893995][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1201.989253][ T2945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7515'. [ 1202.008828][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1202.023525][T12605] bond3: (slave dummy0): failed to get link speed/duplex [ 1202.034513][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1202.034544][T12607] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1202.131264][T12607] bond3: (slave dummy0): failed to get link speed/duplex [ 1202.140680][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1202.140709][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1202.262345][ T2951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7516'. [ 1202.622610][ T2958] xfrm1: entered allmulticast mode [ 1202.626300][ T2958] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1202.757711][ T2966] xt_bpf: check failed: parse error [ 1203.663807][ T2990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7528'. [ 1204.170824][ T3004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7535'. [ 1204.321535][ T3002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7533'. [ 1204.480695][ T3010] netlink: 'syz.3.7536': attribute type 1 has an invalid length. [ 1204.554799][ T3014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1204.554826][ T3014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1204.651736][ T3010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1205.260312][T28236] Bluetooth: hci4: command 0x0406 tx timeout [ 1205.320516][ T3010] bond6: (slave gretap1): making interface the new active one [ 1205.376222][ T3010] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1205.554220][ T3032] netlink: 'syz.6.7539': attribute type 6 has an invalid length. [ 1205.554246][ T3032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7539'. [ 1206.781856][ T3059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7549'. [ 1206.781884][ T3059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7549'. [ 1206.781908][ T3059] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7549'. [ 1206.790829][ T3063] netlink: 'syz.0.7550': attribute type 5 has an invalid length. [ 1206.790869][ T3063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7550'. [ 1206.819829][T12607] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.819873][T12607] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.819905][T12607] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.819938][T12607] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.933419][ T12] net_ratelimit: 156 callbacks suppressed [ 1206.933446][ T12] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1206.957751][ T1152] bond3: (slave dummy0): failed to get link speed/duplex [ 1206.958981][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1206.959005][ T1152] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1207.072544][T12766] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1207.072580][T12766] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1207.072614][T12766] bond3: (slave dummy0): failed to get link speed/duplex [ 1207.179377][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1207.179449][T12609] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1207.179471][T12609] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1207.400226][T28236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1207.404753][T28236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1207.451318][T28236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1207.462593][T28236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1207.469131][T28236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1207.493355][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.493451][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.494301][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.546654][ T3085] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1207.546695][ T3085] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1207.546736][ T3085] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1207.609531][ T3085] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1207.659055][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.676698][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.689474][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.691638][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.693782][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.724064][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.726297][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.742240][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.744508][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.746801][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.770204][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.772258][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.774479][ T3085] lo speed is unknown, defaulting to 1000 [ 1207.776667][ T3085] lo speed is unknown, defaulting to 1000 [ 1208.197825][ T3096] xt_CONNSECMARK: invalid mode: 0 [ 1208.389367][ T3105] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1209.115616][ T3125] __nla_validate_parse: 4 callbacks suppressed [ 1209.115639][ T3125] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7562'. [ 1209.115658][ T3125] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7562'. [ 1209.716634][ T5618] Bluetooth: hci8: command tx timeout [ 1209.966239][ T3131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7564'. [ 1210.330669][ T3081] wlan0 speed is unknown, defaulting to 1000 [ 1210.416851][ T3081] hsr0 speed is unknown, defaulting to 1000 [ 1210.436623][ T3081] lo speed is unknown, defaulting to 1000 [ 1211.392458][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.392614][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.392764][ T3081] bridge_slave_0: entered allmulticast mode [ 1211.395005][ T3081] bridge_slave_0: entered promiscuous mode [ 1211.437017][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.437216][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.437421][ T3081] bridge_slave_1: entered allmulticast mode [ 1211.464094][ T3081] bridge_slave_1: entered promiscuous mode [ 1211.514022][ T3081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.529319][ T3081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.621507][ T3081] team0: Port device team_slave_0 added [ 1211.625727][ T3081] team0: Port device team_slave_1 added [ 1211.682272][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.682292][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.682319][ T3081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.684459][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.684474][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.684501][ T3081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.738151][ T5618] Bluetooth: hci8: command tx timeout [ 1211.939722][T12608] net_ratelimit: 146 callbacks suppressed [ 1211.939781][T12608] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1211.971864][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1211.988546][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1212.012430][T12606] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1212.012730][T12609] bond3: (slave dummy0): failed to get link speed/duplex [ 1212.043459][T12605] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1212.069350][ T6438] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1212.069421][ T6438] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1212.119388][T12608] bond3: (slave dummy0): failed to get link speed/duplex [ 1212.179548][T12610] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1212.505378][ T3183] Cannot find add_set index 65532 as target [ 1212.515695][ T3183] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7575'. [ 1212.762489][ T3081] hsr_slave_0: entered promiscuous mode [ 1212.776994][ T3081] hsr_slave_1: entered promiscuous mode [ 1212.784271][ T3081] debugfs: 'hsr0' already exists in 'hsr' [ 1212.784336][ T3081] Cannot create hsr debugfs directory [ 1212.879688][ T3191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1212.880092][ T3191] netlink: 'syz.0.7578': attribute type 58 has an invalid length. [ 1212.880110][ T3191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1212.893779][ T3188] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1213.581174][ T3206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7581'. [ 1213.810199][ T5618] Bluetooth: hci8: command tx timeout [ 1214.477188][ T3233] syzkaller0: entered promiscuous mode [ 1214.477224][ T3233] syzkaller0: entered allmulticast mode [ 1214.635778][ T3081] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1214.683623][ T3081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1214.684748][ T3081] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1214.710510][ T3081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.712178][ T3081] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1214.735854][ T3081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.737081][ T3081] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1214.784915][ T3081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1215.187746][ T3248] atomic_op ffff88805414b1e0 conn xmit_atomic 0000000000000000 [ 1215.197351][ T3081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.258654][ T3081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.297547][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.299944][T12766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.373933][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.374170][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.892439][ T5618] Bluetooth: hci8: command tx timeout [ 1216.832186][ T3290] netlink: 'syz.3.7598': attribute type 29 has an invalid length. [ 1217.050083][ T1152] net_ratelimit: 175 callbacks suppressed [ 1217.050108][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1217.050133][ T1152] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1217.050168][ T1152] bond3: (slave dummy0): failed to get link speed/duplex [ 1217.074006][ T3293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7599'. [ 1217.159091][ T1152] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1217.189755][T12602] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1217.189791][T12602] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1217.189828][T12602] bond3: (slave dummy0): failed to get link speed/duplex [ 1217.302868][T12607] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1217.318224][T12602] bond3: (slave dummy0): failed to get link speed/duplex [ 1217.318418][ T80] bond5: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1217.614325][ T3081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.483073][ T3318] xt_ecn: cannot match TCP bits for non-tcp packets [ 1219.039932][T12610] pimreg3: left allmulticast mode [ 1219.257160][T28236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1219.272845][T28236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1219.291468][T28236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1219.302510][T28236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1219.306059][T28236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1220.034776][T12610] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 1220.332046][T12610] bond9 (unregistering): (slave gretap1): Releasing active interface [ 1220.449953][ T31] INFO: task syz.4.6912:32578 blocked for more than 143 seconds. [ 1220.450020][ T31] Not tainted syzkaller #0 [ 1220.450054][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1220.450087][ T31] task:syz.4.6912 state:D stack:27200 pid:32578 tgid:32577 ppid:29719 task_flags:0x400140 flags:0x00080002 [ 1220.450279][ T31] Call Trace: [ 1220.450310][ T31] [ 1220.450349][ T31] __schedule+0x17db/0x58f0 [ 1220.450740][ T31] ? __pfx___schedule+0x10/0x10 [ 1220.450837][ T31] ? schedule+0x90/0x2b0 [ 1220.450908][ T31] schedule+0x164/0x2b0 [ 1220.450972][ T31] schedule_preempt_disabled+0x13/0x30 [ 1220.451032][ T31] __mutex_lock+0x7c1/0x1550 [ 1220.451109][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1220.451171][ ** replaying previous printk message ** [ 1220.451171][ T31] ? nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1220.451366][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1220.451425][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 1220.451529][ T31] ? kern_path+0xd1/0x150 [ 1220.451591][ T31] nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1220.451656][ T31] ? __nla_parse+0x40/0x60 [ 1220.451723][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1220.452080][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1220.452174][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1220.465659][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1220.465752][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1220.465843][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1220.465906][ T31] ? security_capable+0x7e/0x2c0 [ 1220.466074][ T31] genl_rcv_msg+0x614/0x7a0 [ 1220.466172][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.466239][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1220.466338][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1220.466405][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.466471][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1220.466566][ T31] ? down_read+0x2be/0x330 [ 1220.471742][ T31] genl_rcv+0x28/0x40 [ 1220.471805][ T31] netlink_unicast+0x7bd/0x940 [ 1220.471903][ T31] netlink_sendmsg+0x813/0xb40 [ 1220.471999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.472077][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 1220.472136][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.474663][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1220.474763][ T31] ____sys_sendmsg+0x54e/0x850 [ 1220.474827][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.474925][ T31] ? import_iovec+0x73/0xa0 [ 1220.475017][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1220.475086][ T31] ? __lock_acquire+0x747/0x2de0 [ 1220.475153][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.482988][ T31] ? futex_wait+0x2a2/0x390 [ 1220.483152][ T31] ? __fget_files+0x2a/0x420 [ 1220.483212][ T31] ? __fget_files+0x3a2/0x420 [ 1220.483308][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1220.483376][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1220.483481][ T31] do_syscall_64+0x166/0x520 [ 1220.483536][ T31] ? trace_irq_disable+0x3b/0x140 [ 1220.483576][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.483634][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1220.483702][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.483743][ T31] RIP: 0033:0x7f5a3499e159 [ 1220.483799][ T31] RSP: 002b:00007f5a3581f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.483870][ T31] RAX: ffffffffffffffda RBX: 00007f5a34c25fa0 RCX: 00007f5a3499e159 [ 1220.483906][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1220.483939][ T31] RBP: 00007f5a34a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1220.483971][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.484003][ T31] R13: 00007f5a34c26038 R14: 00007f5a34c25fa0 R15: 00007ffdc1493838 [ 1220.484098][ T31] [ 1220.484191][ T31] [ 1220.484191][ T31] Showing all locks held in the system: [ 1220.484201][ T31] locks held by kworker/u8:0/12: 3, last CPU#1: [ 1220.484255][ T31] #0: ffff8880265b9940 ((wq_completion)krds_cp_wq#3/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.484388][ T31] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.484518][ T31] #2: ffff8880274cf680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1220.484723][ T31] locks held by pr/ttyS0/16: 4, last CPU#0: [ 1220.484757][ T31] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1220.484888][ T31] #1: ffffc90000007cc0 ((&timer.timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1220.485045][ T31] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: hrtimer_start_range_ns+0x8c/0x3e0 [ 1220.493168][ T31] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: taprio_dequeue+0x26/0x540 [ 1220.493401][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1220.493435][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1220.493604][ T31] locks held by klogd/4972: 1, last CPU#0: [ 1220.493638][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 1220.493793][ T31] locks held by getty/5375: 2, on CPU#0: [ 1220.493826][ T31] #0: ffff888034c8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1220.494021][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1220.494154][ T31] locks held by kworker/u8:24/6438: 3, last CPU#1: [ 1220.494188][ T31] #0: ffff8880265b9140 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.494315][ T31] #1: ffffc9000580fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.494429][ T31] #2: ffff8880274cf980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1220.494578][ T31] locks held by kworker/u8:30/12607: 3, on CPU#0: [ 1220.494611][ T31] #0: ffff88802e0d9140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.494742][ T31] #1: ffffc90003867c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.494871][ T31] #2: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1220.495003][ T31] locks held by kworker/u8:33/12610: 6, last CPU#0: [ 1220.495037][ T31] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.495146][ T31] #1: ffffc90003827c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.503764][ T31] #2: ffffffff90243ec8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1220.503982][ T31] #3: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1220.504089][ T31] #4: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1220.504244][ T31] #5: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1220.504353][ T31] locks held by kworker/u8:39/12766: 3, on CPU#1: [ 1220.504387][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.504516][ T31] #1: ffffc90003567c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.504638][ T31] #2: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1220.504779][ T31] locks held by kworker/1:1/28347: 3, on CPU#1: [ 1220.504813][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.504964][ T31] #1: ffffc9000d447c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1220.505075][ T31] #2: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1220.505266][ T31] locks held by syz.2.6202/29499: 2, on CPU#0: [ 1220.505299][ T31] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1220.505424][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1220.505560][ T31] locks held by syz.4.6912/32578: 2, on CPU#0: [ 1220.505593][ T31] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1220.505700][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1220.505829][ T31] locks held by syz.5.6989/440: 2, on CPU#1: [ 1220.505862][ T31] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1220.511822][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 1220.511952][ T31] locks held by syz.7.7445/2656: 2, on CPU#0: [ 1220.511987][ T31] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1220.512108][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1220.512217][ T31] locks held by syz.1.7528/2990: 2, on CPU#0: [ 1220.512250][ T31] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1220.512373][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1220.512500][ T31] locks held by syz-executor/3081: 1, on CPU#0: [ 1220.512518][ T31] #0: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1220.512642][ T31] locks held by syz.6.7607/3325: 2, on CPU#1: [ 1220.512674][ T31] #0: ffffffff902c3668 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1220.512804][ T31] #1: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x854/0x1080 [ 1220.512962][ T31] locks held by syz.6.7607/3328: 1, on CPU#0: [ 1220.512996][ T31] #0: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1220.513130][ T31] locks held by syz.3.7609/3334: 1, on CPU#0: [ 1220.513163][ T31] #0: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x13a/0x1380 [ 1220.513290][ T31] locks held by syz-executor/3333: 1, on CPU#0: [ 1220.513323][ T31] #0: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1220.513487][ T31] locks held by syz.0.7611/3348: 1, on CPU#0: [ 1220.513520][ T31] #0: ffffffff90252780 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1220.530602][ T31] [ 1220.530630][ T31] ============================================= [ 1220.530630][ T31] [ 1220.530659][ T31] NMI backtrace for cpu 1 [ 1220.530678][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1220.530707][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1220.530719][ T31] Call Trace: [ 1220.530727][ T31] [ 1220.530736][ T31] dump_stack_lvl+0xe8/0x150 [ 1220.530769][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1220.530847][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1220.530888][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1220.530919][ T31] sys_info+0x135/0x170 [ 1220.530961][ T31] watchdog+0xfd7/0x1030 [ 1220.530989][ T31] ? watchdog+0x1c7/0x1030 [ 1220.531015][ T31] kthread+0x38b/0x480 [ 1220.531043][ T31] ? __pfx_watchdog+0x10/0x10 [ 1220.531060][ T31] ? __pfx_kthread+0x10/0x10 [ 1220.531080][ T31] ret_from_fork+0x514/0xb70 [ 1220.531120][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1220.531149][ T31] ? __switch_to+0xc89/0x1420 [ 1220.531177][ T31] ? __pfx_kthread+0x10/0x10 [ 1220.531198][ T31] ret_from_fork_asm+0x1a/0x30 [ 1220.531242][ T31] [ 1220.531347][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1220.531397][ C0] NMI backtrace for cpu 0 [ 1220.531414][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1220.531435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1220.531446][ C0] RIP: 0010:advance_sched+0x47d/0xc80 [ 1220.531469][ C0] Code: 86 4a f8 4c 8b 23 4d 8d 77 28 4c 89 f0 48 c1 e8 03 48 bd 00 00 00 00 00 fc ff df 0f b6 04 28 84 c0 0f 85 e0 07 00 00 41 8b 06 <49> 01 c4 48 8b 04 24 48 8d 98 28 01 00 00 48 89 d8 48 c1 e8 03 80 [ 1220.531485][ C0] RSP: 0018:ffffc90000007cf8 EFLAGS: 00000046 [ 1220.531503][ C0] RAX: 00000000000f4240 RBX: ffff88805fb08d50 RCX: 1ffff1100bf611aa [ 1220.531518][ C0] RDX: 0000000001000001 RSI: 0000000001000001 RDI: 18d5f05390be90c0 [ 1220.531532][ C0] RBP: dffffc0000000000 R08: 0000000001000001 R09: 0000000000000004 [ 1220.531547][ C0] R10: dffffc0000000000 R11: fffff52000000f90 R12: 18d5f05390be90c0 [ 1220.531562][ C0] R13: 0000000000000001 R14: ffff88805fb08d68 R15: ffff88805fb08d40 [ 1220.531576][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 1220.531592][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1220.531607][ C0] CR2: 00007fb563f55000 CR3: 000000007f284000 CR4: 00000000003526f0 [ 1220.531626][ C0] Call Trace: [ 1220.531634][ C0] [ 1220.531647][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1220.531667][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1220.531693][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1220.531712][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1220.531750][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 1220.531794][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1220.531817][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1220.531838][ C0] [ 1220.531844][ C0] [ 1220.531852][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1220.531874][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1220.531904][ C0] Code: f7 e8 8d 23 bc f5 f7 c3 00 02 00 00 74 05 e8 50 67 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 32 ad f5 65 48 8b 05 0c 31 ad 07 48 85 c0 74 18 5b 41 5e e9 [ 1220.531919][ C0] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 [ 1220.531936][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 1220.531948][ C0] RDX: 0000000000000000 RSI: ffffffff8e4767f3 RDI: 0000000000000001 [ 1220.531962][ C0] RBP: ffffc90000157e18 R08: ffffffff907a337f R09: 1ffffffff20f466f [ 1220.531975][ C0] R10: dffffc0000000000 R11: fffffbfff20f4670 R12: 0000000000000002 [ 1220.531989][ C0] R13: ffff88801e2a0000 R14: ffffffff9ad39080 R15: dffffc0000000000 [ 1220.532015][ C0] nbcon_kthread_func+0x6c4/0x880 [ 1220.532041][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1220.532060][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1220.532084][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1220.532112][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1220.532141][ C0] kthread+0x38b/0x480 [ 1220.532160][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1220.532177][ C0] ? __pfx_kthread+0x10/0x10 [ 1220.532206][ C0] ret_from_fork+0x514/0xb70 [ 1220.532226][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1220.532254][ C0] ? __switch_to+0xc89/0x1420 [ 1220.532280][ C0] ? __pfx_kthread+0x10/0x10 [ 1220.532300][ C0] ret_from_fork_asm+0x1a/0x30 [ 1220.532336][ C0] [ 1220.552619][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1221.867414][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1221.876637][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1221.886702][ T31] Call Trace: [ 1221.890003][ T31] [ 1221.892958][ T31] vpanic+0x56d/0xa60 [ 1221.896965][ T31] ? __pfx___schedule+0x10/0x10 [ 1221.901830][ T31] ? __pfx_vpanic+0x10/0x10 [ 1221.906356][ T31] panic+0xc5/0xd0 [ 1221.910100][ T31] ? __pfx_panic+0x10/0x10 [ 1221.914546][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 1221.920014][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1221.925400][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1221.931597][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1221.937777][ T31] watchdog+0x1030/0x1030 [ 1221.942136][ T31] ? watchdog+0x1c7/0x1030 [ 1221.946566][ T31] kthread+0x38b/0x480 [ 1221.950649][ T31] ? __pfx_watchdog+0x10/0x10 [ 1221.955483][ T31] ? __pfx_kthread+0x10/0x10 [ 1221.960089][ T31] ret_from_fork+0x514/0xb70 [ 1221.964690][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1221.969830][ T31] ? __switch_to+0xc89/0x1420 [ 1221.974551][ T31] ? __pfx_kthread+0x10/0x10 [ 1221.979164][ T31] ret_from_fork_asm+0x1a/0x30 [ 1221.984046][ T31] [ 1221.987209][ T31] Kernel Offset: disabled [ 1221.991536][ T31] Rebooting in 86400 seconds..